[turbofan] disable neutering on embedded arraybuffers

src/compiler/js-typed-lowering.cc

Index: src/compiler/js-typed-lowering.cc
diff --git a/src/compiler/js-typed-lowering.cc b/src/compiler/js-typed-lowering.cc
index 00155044d4c1016636bf77d6f753a86c3117879d..b0743a23457dbbf177d276c3d3b2832193e78129 100644
--- a/src/compiler/js-typed-lowering.cc
+++ b/src/compiler/js-typed-lowering.cc
@@ -693,6 +693,7 @@ Reduction JSTypedLowering::ReduceJSLoadProperty(Node* node) {
       base_type->AsConstant()->Value()->IsJSTypedArray()) {
     Handle<JSTypedArray> const array =
         Handle<JSTypedArray>::cast(base_type->AsConstant()->Value());
+    array->GetBuffer()->set_is_neuterable(false);
     BufferAccess const access(array->type());
     size_t const k = ElementSizeLog2Of(access.machine_type());
     double const byte_length = array->byte_length()->Number();
@@ -739,6 +740,7 @@ Reduction JSTypedLowering::ReduceJSStoreProperty(Node* node) {
       base_type->AsConstant()->Value()->IsJSTypedArray()) {
     Handle<JSTypedArray> const array =
         Handle<JSTypedArray>::cast(base_type->AsConstant()->Value());
+    array->GetBuffer()->set_is_neuterable(false);
     BufferAccess const access(array->type());
     size_t const k = ElementSizeLog2Of(access.machine_type());
     double const byte_length = array->byte_length()->Number();