Limit the size for typed arrays to MaxSmi.

test/mjsunit/regress/regress-319722-Uint8ClampedArray.js

Index: test/mjsunit/regress/regress-319722-Uint8ClampedArray.js
diff --git a/test/mjsunit/regress/regress-235311.js b/test/mjsunit/regress/regress-319722-Uint8ClampedArray.js
similarity index 91%
copy from test/mjsunit/regress/regress-235311.js
copy to test/mjsunit/regress/regress-319722-Uint8ClampedArray.js
index 300714718f75e3ab084687af21aa1bf145e16678..754d2471d6f7c6db08bba02347cb2bee4b54c5c9 100644
--- a/test/mjsunit/regress/regress-235311.js
+++ b/test/mjsunit/regress/regress-319722-Uint8ClampedArray.js
@@ -25,8 +25,6 @@
 // (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 // OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
-var new_space_string = "";
-for (var i = 0; i < 12800; ++i) {
-  new_space_string +=
-      String.fromCharCode(Math.random() * 26 + (4294967295) | 0);
-}
+// Flags: --nostress-opt --allow-natives-syntax
+var maxSize = %MaxSmi() + 1;
+assertThrows(function () { new Uint8ClampedArray(maxSize); }, RangeError);