ValueSerializer: Check for no matching ArrayBufferView type being found.

src/value-serializer.cc

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/value-serializer.h"
 
 #include <type_traits>
 
 #include "src/base/logging.h"
 #include "src/conversions.h"
@@ skipping 1392 matching lines @@
       return data_view;
     }
 #define TYPED_ARRAY_CASE(Type, type, TYPE, ctype, size) \
   case ArrayBufferViewTag::k##Type##Array:              \
     external_array_type = kExternal##Type##Array;       \
     element_size = size;                                \
     break;
       TYPED_ARRAYS(TYPED_ARRAY_CASE)
 #undef TYPED_ARRAY_CASE
   }
-  if (byte_offset % element_size != 0 || byte_length % element_size != 0) {
+  if (element_size == 0 || byte_offset % element_size != 0 ||
+      byte_length % element_size != 0) {
     return MaybeHandle<JSArrayBufferView>();
   }
   Handle<JSTypedArray> typed_array = isolate_->factory()->NewJSTypedArray(
       external_array_type, buffer, byte_offset, byte_length / element_size,
       pretenure_);
   AddObjectWithID(id, typed_array);
   return typed_array;
 }
 
 MaybeHandle<JSObject> ValueDeserializer::ReadHostObject() {
@@ skipping 300 matching lines @@
   if (stack.size() != 1) {
     isolate_->Throw(*isolate_->factory()->NewError(
         MessageTemplate::kDataCloneDeserializationError));
     return MaybeHandle<Object>();
   }
   return scope.CloseAndEscape(stack[0]);
 }
 
 }  // namespace internal
 }  // namespace v8