[wasm] Add regression test for chromium:827806

The bug was fixed in https://crrev.com/c/995796, but this CL adds a
regression test to make sure it stays fixed.

Bug: chromium:827806
Change-Id: I9f4aed364bbd310af4253da457887a8b8015533a
Reviewed-on: https://chromium-review.googlesource.com/993237Reviewed-by: Clemens Hammacher <clemensh@chromium.org>
Commit-Queue: Eric Holk <eholk@chromium.org>
Cr-Commit-Position: refs/heads/master@{#52409}

test/mjsunit/regress/wasm/regress-827806.js

+// Copyright 2018 the V8 project authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+load("test/mjsunit/wasm/wasm-constants.js");
+load("test/mjsunit/wasm/wasm-module-builder.js");
+
+try {
+  (function () {
+    let m = new WasmModuleBuilder();
+    m.addFunction("sub", kSig_i_ii)
+    m.instantiate();
+  })();
+} catch (e) {
+  console.info("caught exception");
+  console.info(e);
+}
+for (let i = 0; i < 150; i++) {
+  var m = new WasmModuleBuilder();
+  m.addMemory(2);
+  m.instantiate();
+}