Missing coverage: Resizable / Growable (Shared)ArrayBuffers: Freezing a resizable-backed TypedArray

[marjakh]

E.g.,

let ab = new ArrayBuffer(100, {maxByteLength: 200});
let ta = new Uint8Array(ab, 0, 10);
Object.freeze(ta); // Should throw!

V8 currently has a bug in here but test262 doesn't catch it.

cc @syg @sarahghp