Further extend TypedArray support in d8:

test/mjsunit/mjsunit.js

 // Copyright 2008 the V8 project authors. All rights reserved.
 // Redistribution and use in source and binary forms, with or without
 // modification, are permitted provided that the following conditions are
 // met:
 //
 //     * Redistributions of source code must retain the above copyright
 //       notice, this list of conditions and the following disclaimer.
 //     * Redistributions in binary form must reproduce the above
 //       copyright notice, this list of conditions and the following
 //       disclaimer in the documentation and/or other materials provided
@@ skipping 303 matching lines @@
       // Success.
       return;
     }
     throw new MjsUnitAssertionError("Did not throw exception");
   };
 
 
   assertInstanceof = function assertInstanceof(obj, type) {
     if (!(obj instanceof type)) {
       var actualTypeName = null;
-      var actualConstructor = Object.prototypeOf(obj).constructor;
+      var actualConstructor = Object.getPrototypeOf(obj).constructor;
       if (typeof actualConstructor == "function") {
         actualTypeName = actualConstructor.name || String(actualConstructor);
       }
       fail("Object <" + PrettyPrint(obj) + "> is not an instance of <" +
                (type.name || type) + ">" +
                (actualTypeName ? " but of < " + actualTypeName + ">" : ""));
     }
   };
 
 
@@ skipping 13 matching lines @@
     // Fix this when we ditch the old test runner.
     var message = "Fail" + "ure: unreachable";
     if (name_opt) {
       message += " - " + name_opt;
     }
     throw new MjsUnitAssertionError(message);
   };
 
 })();