[wasm] Support validation of asm.js modules with != 3 args.

src/runtime/runtime-compiler.cc

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/runtime/runtime-utils.h"
 
+#include "src/runtime/runtime-compiler.h"
+
 #include "src/arguments.h"
 #include "src/asmjs/asm-js.h"
 #include "src/compiler.h"
 #include "src/deoptimizer.h"
 #include "src/frames-inl.h"
 #include "src/full-codegen/full-codegen.h"
 #include "src/isolate-inl.h"
 #include "src/messages.h"
 #include "src/v8threads.h"
 #include "src/vm-state-inl.h"
@@ skipping 58 matching lines @@
   if (check.JsHasOverflowed(1 * KB)) return isolate->StackOverflow();
   if (!Compiler::CompileOptimized(function, Compiler::NOT_CONCURRENT)) {
     return isolate->heap()->exception();
   }
   DCHECK(function->is_compiled());
   return function->code();
 }
 
 RUNTIME_FUNCTION(Runtime_InstantiateAsmJs) {
   HandleScope scope(isolate);
-  DCHECK_EQ(args.length(), 4);
+  DCHECK_GE(args.length(), 1);
   CONVERT_ARG_HANDLE_CHECKED(JSFunction, function, 0);
 
   Handle<JSObject> foreign;
-  if (args[2]->IsJSObject()) {
+  if (args.length() > 2 && args[2]->IsJSObject()) {
     foreign = args.at<i::JSObject>(2);
   }
   Handle<JSArrayBuffer> memory;
-  if (args[3]->IsJSArrayBuffer()) {
+  if (args.length() > 3 && args[3]->IsJSArrayBuffer()) {
     memory = args.at<i::JSArrayBuffer>(3);
   }
-  if (args[1]->IsJSObject()) {
+  if (args.length() > 1 && args[1]->IsJSObject() &&
+      function->shared()->HasAsmWasmData()) {
     MaybeHandle<Object> result;
     result = AsmJs::InstantiateAsmWasm(
         isolate, handle(function->shared()->asm_wasm_data()), memory, foreign);
     if (!result.is_null()) {
       return *result.ToHandleChecked();
     }
   }
   // Remove wasm data and return a smi 0 to indicate failure.
   function->shared()->ClearAsmWasmData();
   return Smi::FromInt(0);
@@ skipping 322 matching lines @@
   DCHECK(is_valid_language_mode(args.smi_at(3)));
   LanguageMode language_mode = static_cast<LanguageMode>(args.smi_at(3));
   DCHECK(args[4]->IsSmi());
   Handle<SharedFunctionInfo> outer_info(args.at<JSFunction>(2)->shared(),
                                         isolate);
   return CompileGlobalEval(isolate, args.at<String>(1), outer_info,
                            language_mode, args.smi_at(4), args.smi_at(5));
 }
 }  // namespace internal
 }  // namespace v8