Make array __proto__ manipulations not disturb the species protector

src/runtime/runtime.h

Index: src/runtime/runtime.h
diff --git a/src/runtime/runtime.h b/src/runtime/runtime.h
index adc523bb38d591b2bf732388d09597778d1be133..e9a123ecc1fe6b789be41188fc5ce234513270ac 100644
--- a/src/runtime/runtime.h
+++ b/src/runtime/runtime.h
@@ -901,7 +901,8 @@ namespace internal {
   F(HasFixedInt32Elements, 1, 1)              \
   F(HasFixedFloat32Elements, 1, 1)            \
   F(HasFixedFloat64Elements, 1, 1)            \
-  F(HasFixedUint8ClampedElements, 1, 1)
+  F(HasFixedUint8ClampedElements, 1, 1)       \
+  F(SpeciesProtector, 0, 1)
 
 #define FOR_EACH_INTRINSIC_TYPEDARRAY(F)     \
   F(ArrayBufferGetByteLength, 1, 1)          \