Add immutable ArrayBuffer support

Bug: 450237486
Change-Id: I30de85f87ca170a998fc17a72e15c4579db37774
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/8901996
Auto-Submit: Olivier Flückiger <olivf@google.com>
Reviewed-by: Matthias Liedtke <mliedtke@google.com>
Commit-Queue: Matthias Liedtke <mliedtke@google.com>

Author: o-

Sources/Fuzzilli/Environment/JavaScriptEnvironment.swift

@@ -1063,7 +1063,7 @@ public extension ILType {
     static let jsFinalizationRegistry = ILType.object(ofGroup: "FinalizationRegistry", withMethods: ["register", "unregister"])
 
     /// Type of a JavaScript ArrayBuffer object.
-    static let jsArrayBuffer = ILType.object(ofGroup: "ArrayBuffer", withProperties: ["byteLength", "maxByteLength", "resizable"], withMethods: ["resize", "slice", "transfer"])
+    static let jsArrayBuffer = ILType.object(ofGroup: "ArrayBuffer", withProperties: ["byteLength", "maxByteLength", "resizable"], withMethods: ["resize", "slice", "transfer", "transferToFixedLength", "transferToImmutable"])
 
     /// Type of a JavaScript SharedArrayBuffer object.
     static let jsSharedArrayBuffer = ILType.object(ofGroup: "SharedArrayBuffer", withProperties: ["byteLength", "maxByteLength", "growable"], withMethods: ["grow", "slice"])
@@ -1665,9 +1665,11 @@ public extension ObjectGroup {
             "resizable"     : .boolean,
         ],
         methods: [
-            "resize"              : [.integer] => .undefined,
-            "slice"               : [.integer, .opt(.integer)] => .jsArrayBuffer,
-            "transfer"            : [.opt(.integer)] => .jsArrayBuffer,
+            "resize"                 : [.integer] => .undefined,
+            "slice"                  : [.integer, .opt(.integer)] => .jsArrayBuffer,
+            "transfer"               : [.opt(.integer)] => .jsArrayBuffer,
+            "transferToFixedLength"  : [.opt(.integer)] => .jsArrayBuffer,
+            "transferToImmutable"    : [] => .jsArrayBuffer,
         ]
     )