[typedarrays] Check detached buffer at start of typed array methods

test/mjsunit/es6/typedarray-reverse.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
+// Flags: --allow-natives-syntax
+
 function ArrayMaker(x) {
   return x;
 }
 ArrayMaker.prototype = Array.prototype;
 
 var arrayConstructors = [
   Uint8Array,
   Int8Array,
   Uint16Array,
   Int16Array,
@@ skipping 29 matching lines @@
   } else {
     // Array.reverse works on array-like objects
     var x = { length: 2, 1: 5 };
     a.reverse.call(x);
     assertEquals(2, x.length);
     assertFalse(Object.hasOwnProperty(x, '1'));
     assertEquals(5, x[0]);
   }
 
   assertEquals(0, a.reverse.length);
+
+  // Detached Operation
+  if (constructor != ArrayMaker) {
+    var array = new constructor([1, 2, 3, 4, 5, 6, 7, 8, 9, 10]);
+    %ArrayBufferNeuter(array.buffer);
+    assertThrows(() => array.reverse(), TypeError);
+  }
 }