[typedarrays] Check detached buffer at start of typed array methods

test/mjsunit/es6/typedarray-foreach.js

 // Copyright 2014 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Flags: --allow-natives-syntax
 
 var typedArrayConstructors = [
   Uint8Array,
   Int8Array,
   Uint16Array,
@@ skipping 130 matching lines @@
 
   // Shadowing length doesn't affect forEach, unlike Array.prototype.forEach
   a = new constructor([1, 2]);
   Object.defineProperty(a, 'length', {value: 1});
   var x = 0;
   assertEquals(a.forEach(function(elt) { x += elt; }), undefined);
   assertEquals(x, 3);
   assertEquals(Array.prototype.forEach.call(a,
       function(elt) { x += elt; }), undefined);
   assertEquals(x, 4);
+
+  // Detached Operation
+  var array = new constructor([1, 2, 3, 4, 5, 6, 7, 8, 9, 10]);
+  %ArrayBufferNeuter(array.buffer);
+  assertThrows(() => array.forEach(() => true), TypeError);
 }
 
 for (i = 0; i < typedArrayConstructors.length; i++) {
   TestTypedArrayForEach(typedArrayConstructors[i]);
 }