[builtins] Implement %TypedArray%.prototype.{some,every} in the CSA

test/mjsunit/es6/typedarray-every.js

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --allow-natives-syntax
 
 var typedArrayConstructors = [
   Uint8Array,
   Int8Array,
   Uint16Array,
@@ skipping 80 matching lines @@
     if (count > 0) %ArrayBufferNeuter(array.buffer);
     array[index] = n + 1;
     count++;
     return count > 1 ? array[index] === undefined : true;
   });
   assertEquals(2, count);
   assertEquals(true, result);
   CheckTypedArrayIsNeutered(a);
   assertEquals(undefined, a[0]);
 
+  // Calling array.buffer midway can change the backing store.
+  a = new constructor(5);
+  a[0] = 42;
+  result = a.every(function (n, index, array) {
+    assertSame(a, array);
+    if (index == 2) {
+      (new constructor(array.buffer))[(index + 1) % 5] = 42;
+    } else {
+      a[(index+1)%5] = 42
+    }
+    return n == 42;
+  });
+  assertEquals(true, result);
+
   // The method must work for typed arrays created from ArrayBuffer.
   // The length of the ArrayBuffer is chosen so it is a multiple of
   // all lengths of the typed array items.
   a = new constructor(new ArrayBuffer(64));
   count = 0;
   result = a.every(function (n) { return n == 0; });
   assertEquals(result, true);
 
   // Externalizing the array mid-way accessing the .buffer property
   // should work.
@@ skipping 32 matching lines @@
   assertEquals(a.every(function(elt) { x += elt; return true; }), true);
   assertEquals(x, 3);
   assertEquals(Array.prototype.every.call(a,
       function(elt) { x += elt; return true; }), true);
   assertEquals(x, 4);
 }
 
 for (i = 0; i < typedArrayConstructors.length; i++) {
   TestTypedArrayForEach(typedArrayConstructors[i]);
 }