[wasm][asm.js] Fix and enable several asm.js tests with the new parser.

src/wasm/wasm-module-builder.cc

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "src/signature.h"
 
 #include "src/handles.h"
 #include "src/objects-inl.h"
 #include "src/v8.h"
 #include "src/zone/zone-containers.h"
@@ skipping 172 matching lines @@
   DCHECK_EQ(0, asm_offsets_.size());
   asm_func_start_source_position_ = position;
   last_asm_source_position_ = position;
 }
 
 void WasmFunctionBuilder::StashCode(std::vector<byte>* dst, size_t position) {
   if (dst == nullptr) {
     body_.resize(position);
     return;
   }
+  DCHECK_LE(position, body_.size());
   size_t len = body_.size() - position;
   dst->resize(len);
-  memcpy(dst->data(), &body_[position], len);
+  memcpy(dst->data(), body_.data() + position, len);
   body_.resize(position);
 }
 
 void WasmFunctionBuilder::WriteSignature(ZoneBuffer& buffer) const {
   buffer.write_u32v(signature_index_);
 }
 
 void WasmFunctionBuilder::WriteExports(ZoneBuffer& buffer) const {
   for (auto name : exported_names_) {
     buffer.write_size(name.size());
@@ skipping 381 matching lines @@
   // Emit the offset table per function.
   for (auto function : functions_) {
     function->WriteAsmWasmOffsetTable(buffer);
   }
   // Append a 0 to indicate that this is an encoded table.
   buffer.write_u8(0);
 }
 }  // namespace wasm
 }  // namespace internal
 }  // namespace v8