[wasm] Fix and tighten memory validation

test/mjsunit/regress/wasm/regression-667745.js

 // Copyright 2016 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --expose-wasm
 
 load("test/mjsunit/wasm/wasm-constants.js");
 load("test/mjsunit/wasm/wasm-module-builder.js");
 
 (function() {
   var builder = new WasmModuleBuilder();
+  builder.addMemory(0, 0, false);
   builder.addFunction("test", kSig_i_iii)
     .addBody([
 kExprI32Const, 0x0b,
 kExprI32Clz,
 kExprI32Clz,
 kExprI32Clz,
 kExprI32Const, 0x67,
 kExprI32Const, 0x07,
 kExprI32Clz,
 kExprI32Clz,
@@ skipping 384 matching lines @@
 kExprNop,
 kExprI64DivU,
 kExprUnreachable,
 kExprI32GeS,
 kExprI32Const, 0x0b,
             ])
             .exportFunc();
   var module = builder.instantiate();
   assertTrue(module != undefined);
 })();