Tests for GuardField length check along with bug fixes

runtime/vm/raw_object.h

Index: runtime/vm/raw_object.h
diff --git a/runtime/vm/raw_object.h b/runtime/vm/raw_object.h
index 8bbd4b2b17f651111573ea9ea50da67a295d7e5f..8d861cce52b96c1118f62d65546d23bd412ccfbd 100644
--- a/runtime/vm/raw_object.h
+++ b/runtime/vm/raw_object.h
@@ -680,15 +680,15 @@ class RawField : public RawObject {
   RawAbstractType* type_;
   RawInstance* value_;  // Offset in words for instance and value for static.
   RawArray* dependent_code_;
+  RawSmi* guarded_list_length_;
   RawObject** to() {
-    return reinterpret_cast<RawObject**>(&ptr()->dependent_code_);
+    return reinterpret_cast<RawObject**>(&ptr()->guarded_list_length_);
   }
 
   intptr_t token_pos_;
   intptr_t guarded_cid_;
   intptr_t is_nullable_;  // kNullCid if field can contain null value and
                           // any other value otherwise.
-  intptr_t guarded_list_length_;
   uint8_t kind_bits_;  // static, final, const, has initializer.
 };