[environment] Add FinalizationRegistry.prototype

Bug: 487347678
Change-Id: Ide8f3c5d4439981c729f14ecc96e4e54e4cfbe6f
Reviewed-on: https://chrome-internal-review.googlesource.com/c/v8/fuzzilli/+/9050879
Commit-Queue: Matthias Liedtke <mliedtke@google.com>
Reviewed-by: Danylo Mocherniuk <mdanylo@google.com>

Author: Liedtke

Sources/Fuzzilli/Environment/JavaScriptEnvironment.swift

@@ -343,6 +343,8 @@ public class JavaScriptEnvironment: ComponentBase {
         registerObjectGroup(.jsWeakSets)
         registerObjectGroup(.jsWeakRefs)
         registerObjectGroup(.jsFinalizationRegistrys)
+        registerObjectGroup(.jsFinalizationRegistryPrototype)
+        registerObjectGroup(.jsFinalizationRegistryConstructor)
         registerObjectGroup(.jsDisposableStacks)
         registerObjectGroup(.jsDisposableStackPrototype)
         registerObjectGroup(.jsDisposableStackConstructor)
@@ -1181,7 +1183,7 @@ public extension ILType {
     static let jsWeakRefConstructor = ILType.constructor([.object()] => .jsWeakRef)
 
     /// Type of the JavaScript FinalizationRegistry constructor builtin.
-    static let jsFinalizationRegistryConstructor = ILType.constructor([.function()] => .jsFinalizationRegistry)
+    static let jsFinalizationRegistryConstructor = ILType.constructor([.function()] => .jsFinalizationRegistry) + .object(ofGroup: "FinalizationRegistryConstructor", withProperties: ["prototype"])
 
     /// Type of the JavaScript DisposableStack constructor builtin.
     static let jsDisposableStackConstructor = ILType.constructor([] => .jsDisposableStack) + .object(ofGroup: "DisposableStackConstructor", withProperties: ["prototype"])
@@ -1688,6 +1690,19 @@ public extension ObjectGroup {
         ]
     )
 
+    static let jsFinalizationRegistryPrototype = createPrototypeObjectGroup(jsFinalizationRegistrys,
+        constructor: .jsFinalizationRegistryConstructor)
+
+    static let jsFinalizationRegistryConstructor = ObjectGroup(
+        name: "FinalizationRegistryConstructor",
+        constructorPath: "FinalizationRegistry",
+        instanceType: .jsFinalizationRegistryConstructor,
+        properties: [
+            "prototype" : jsFinalizationRegistryPrototype.instanceType
+        ],
+        methods: [:]
+    )
+
     /// ObjectGroup modelling JavaScript DisposableStack objects
     static let jsDisposableStacks = ObjectGroup(
         name: "DisposableStack",