[wasm] Avoid js-typed-lowering optimization for wasm Memory objects

src/objects.h

Index: src/objects.h
diff --git a/src/objects.h b/src/objects.h
index 04ae7680cda2d0de9fdb1659202a83aa1c6d3dee..9ef5433c0dd2e6f6957f29b4df05f00f3fa173fc 100644
--- a/src/objects.h
+++ b/src/objects.h
@@ -9352,6 +9352,11 @@ class JSArrayBuffer: public JSObject {
   inline bool has_guard_region();
   inline void set_has_guard_region(bool value);
 
+  // TODO(gdeepti): This flag is introduced to disable asm.js optimizations in
+  // js-typer-lowering.cc, remove when the asm.js case is fixed.
+  inline bool is_wasm_buffer();
+  inline void set_is_wasm_buffer(bool value);
+
   DECLARE_CAST(JSArrayBuffer)
 
   void Neuter();
@@ -9394,6 +9399,7 @@ class JSArrayBuffer: public JSObject {
   class WasNeutered : public BitField<bool, 3, 1> {};
   class IsShared : public BitField<bool, 4, 1> {};
   class HasGuardRegion : public BitField<bool, 5, 1> {};
+  class IsWasmBuffer : public BitField<bool, 6, 1> {};
 
  private:
   DISALLOW_IMPLICIT_CONSTRUCTORS(JSArrayBuffer);