[typedarrays] Check detached buffer at start of typed array methods

test/mjsunit/es6/typedarray-slice.js

 // Copyright 2015 the V8 project authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
+// Flags: --allow-natives-syntax
+
 var typedArrayConstructors = [
   Uint8Array,
   Int8Array,
   Uint16Array,
   Int16Array,
   Uint32Array,
   Int32Array,
   Uint8ClampedArray,
   Float32Array,
   Float64Array
@@ skipping 47 matching lines @@
   }, TypeError);
 
   // Check that elements are copied properly in slice
   array = new constructor([1, 2, 3, 4]);
   var slice = array.slice(1, 3);
   assertEquals(2, slice.length);
   assertEquals(2, slice[0]);
   assertEquals(3, slice[1]);
   assertTrue(slice instanceof constructor);
 
+  // Detached Operation
+  var tmp = {
+    [Symbol.toPrimitive]() {
+      assertUnreachable("Parameter should not be processed when " +
+                        "array.[[ViewedArrayBuffer]] is neutered.");
+      return 0;
+    }
+  };
+
+  var array = new constructor([1, 2, 3, 4, 5, 6, 7, 8, 9, 10]);
+  %ArrayBufferNeuter(array.buffer);
+  assertThrows(() => array.slice(tmp, tmp), TypeError);
+
   // Check that the species array must be a typed array
   class MyTypedArray extends constructor {
     static get[Symbol.species]() {
       return Array;
     }
   }
   var arr = new MyTypedArray([-1.0, 0, 1.1, 255, 256]);
   assertThrows(() => arr.slice(), TypeError);
 }
 
 // Check that the result array is properly created by checking species
 for (var constructor1 of typedArrayConstructors) {
   for (var constructor2 of typedArrayConstructors) {
     class MyTypedArray2 extends constructor1 {
       static get[Symbol.species]() {
         return constructor2;
       }
     }
     var arr = new MyTypedArray2([-1.0, 0, 1.1, 255, 256]);
     var arr2 = new constructor1([-1.0, 0, 1.1, 255, 256]);
     assertEquals(new constructor2(arr2), arr.slice(),
                  constructor1.name + ' -> ' + constructor2.name);
   }
 }