This cls fix this: https://codereview.chromium.org/1845313002/. After that it fails in verify heap which would be fixed by: https://codereview.chromium.org/1850443006/

The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/0c32e98eab67704bfa0cbc76bf9f1541dc8371fe

commit 0c32e98eab67704bfa0cbc76bf9f1541dc8371fe
Author: oth <oth@chromium.org>
Date: Fri Apr 01 12:08:53 2016

[interpreter] A few code coverage improvements.

Improves code coverage of bytecode array builder and constant
array builder.

Fixes initial index for constant pool slice for kQuad operands.

BUG= v8:4280 , chromium:599000 
LOG=N
TBR=rmcilroy@chromium.org

Review URL: https://codereview.chromium.org/1845313002

Cr-Commit-Position: refs/heads/master@{#35201}

[modify] https://crrev.com/0c32e98eab67704bfa0cbc76bf9f1541dc8371fe/src/interpreter/bytecode-array-builder.cc
[modify] https://crrev.com/0c32e98eab67704bfa0cbc76bf9f1541dc8371fe/src/interpreter/bytecode-array-builder.h
[modify] https://crrev.com/0c32e98eab67704bfa0cbc76bf9f1541dc8371fe/src/interpreter/constant-array-builder.cc
[modify] https://crrev.com/0c32e98eab67704bfa0cbc76bf9f1541dc8371fe/test/cctest/interpreter/test-interpreter.cc
[modify] https://crrev.com/0c32e98eab67704bfa0cbc76bf9f1541dc8371fe/test/unittests/interpreter/bytecode-array-iterator-unittest.cc
[modify] https://crrev.com/0c32e98eab67704bfa0cbc76bf9f1541dc8371fe/test/unittests/interpreter/constant-array-builder-unittest.cc

ClusterFuzz has detected this issue as fixed in range 35200:35201.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5337736143175680

Fuzzer: decoder_langfuzz
Job Type: linux_asan_d8_ignition_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  index < this->length() in src/objects-inl.h
  
Fixed: V8: r35200:35201

Minimized Testcase (10.38 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97_s-AbPSebvk9wkZs0JVkxM-1D51L5TQMkKNPktR-dob2moXfhhRH3ciaKNYbu5FBM_FySvJ1lqGI-dgCmgSNFy1ZXSa6yU4Ns-BsrPxB9eQki33GIVcp0dhIJEPX0ZDkch57Qo5eP1bdo56pa1GQgYgiesQ

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot