[builtins] implement JSBuiltinReducer for ArrayIteratorNext()

src/heap/heap.cc

Index: src/heap/heap.cc
diff --git a/src/heap/heap.cc b/src/heap/heap.cc
index 73018849794af8625fa62bee08179af46712f5f6..62fe30fe660553455a568fe31541bb85095e9b2c 100644
--- a/src/heap/heap.cc
+++ b/src/heap/heap.cc
@@ -2865,6 +2865,10 @@ void Heap::CreateInitialObjects() {
   cell->set_value(Smi::FromInt(Isolate::kArrayProtectorValid));
   set_string_length_protector(*cell);
 
+  cell = factory->NewPropertyCell();
+  cell->set_value(Smi::FromInt(Isolate::kArrayProtectorValid));
+  set_array_iterator_protector(*cell);
+
   set_serialized_templates(empty_fixed_array());
 
   set_weak_stack_trace_list(Smi::kZero);