Make DOMArrayBuffer::Transfer neuter v8::ArrayBuffers

third_party/WebKit/LayoutTests/webaudio/decodeAudioData/decode-audio-data-neuter.html

Index: third_party/WebKit/LayoutTests/webaudio/decodeAudioData/decode-audio-data-neuter.html
diff --git a/third_party/WebKit/LayoutTests/webaudio/decodeAudioData/decode-audio-data-neuter.html b/third_party/WebKit/LayoutTests/webaudio/decodeAudioData/decode-audio-data-neuter.html
index 0374bef3a4247c1e1a2894577f5a3fa88e39c3f2..e112223ea1206236c88d8cc655af6f387b010ca8 100644
--- a/third_party/WebKit/LayoutTests/webaudio/decodeAudioData/decode-audio-data-neuter.html
+++ b/third_party/WebKit/LayoutTests/webaudio/decodeAudioData/decode-audio-data-neuter.html
@@ -62,6 +62,19 @@
             .then(() => task.done());
       });
 
+      audit.define('decode neuters buffer and view', (task, should) => {
+        // The ArrayBuffer and any views of the ArrayBuffer must be neutered.
+        let buffer = new ArrayBuffer(1000);
+        let view = new Uint32Array(buffer);
+
+        context.decodeAudioData(buffer);
+
+        // Now buffer and view should be neutered.
+        should(buffer.byteLength, 'buffer.byteLength').beEqualTo(0);
+        should(view.length, 'view.length').beEqualTo(0);
+        task.done();
+      });
+
       audit.run();
     </script>
   </body>