[builtins] throw if TypedArray buffer is detached during iteration

src/compiler/js-builtin-reducer.cc

Index: src/compiler/js-builtin-reducer.cc
diff --git a/src/compiler/js-builtin-reducer.cc b/src/compiler/js-builtin-reducer.cc
index e3e0c78189b4783733bab4d97b7390205b22adda..6698408f94b5778e49a0decd4688215e788e8c07 100644
--- a/src/compiler/js-builtin-reducer.cc
+++ b/src/compiler/js-builtin-reducer.cc
@@ -557,7 +557,7 @@ Reduction JSBuiltinReducer::ReduceTypedArrayIteratorNext(
       dependencies()->AssumePropertyCell(
           factory()->array_buffer_neutering_protector());
     } else {
-      // Deoptimize if the array byuffer was neutered.
+      // Deoptimize if the array buffer was neutered.
       Node* check1 = efalse0 = graph()->NewNode(
           simplified()->ArrayBufferWasNeutered(), buffer, efalse0, if_false0);
       check1 = graph()->NewNode(simplified()->BooleanNot(), check1);