Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed in ecma_free_string_list

[renatahodovan]

Jerry version:

Checked revision: 7692aa9d
Build command: ./tools/build.py --clean --debug --profile=es2015-subset

OS:

Ubuntu 17.10

Test case:

var thenableWithError = {
    then: function() { throw new Error("") }
}
function executor(resolve) {
    resolve(thenableWithError)
}
new Promise(executor).a()

Backtrace:

ICE: Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at jerryscript/jerry-core/ecma/base/ecma-literal-storage.c(ecma_free_string_list):43.
Error: ERR_FAILED_INTERNAL_ASSERTION

Program received signal SIGABRT, Aborted.
0x00000000004809d6 in syscall_2 () at jerryscript/jerry-libc/target/posix/jerry-asm.S:59
59	  SYSCALL_2
(gdb) bt
#0  0x00000000004809d6 in syscall_2 () at jerryscript/jerry-libc/target/posix/jerry-asm.S:59
#1  0x000000000040ca61 in raise (sig=6) at jerryscript/jerry-libc/target/posix/jerry-libc-target.c:98
#2  0x000000000040ca33 in abort () at jerryscript/jerry-libc/target/posix/jerry-libc-target.c:81
#3  0x0000000000405d8c in jerry_port_fatal (code=ERR_FAILED_INTERNAL_ASSERTION)
    at jerryscript/jerry-port/default/default-fatal.c:71
#4  0x000000000044371c in jerry_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-core/jrt/jrt-fatals.c:58
#5  0x000000000044376e in jerry_assert_fail (assertion=0x48f910 "ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)", 
    file=0x48f8c8 "jerryscript/jerry-core/ecma/base/ecma-literal-storage.c", 
    function=0x492230 <__func__.3687> "ecma_free_string_list", line=43) at jerryscript/jerry-core/jrt/jrt-fatals.c:82
#6  0x000000000047ae81 in ecma_free_string_list (string_list_p=0x6a5590 <jerry_global_heap+640>)
    at jerryscript/jerry-core/ecma/base/ecma-literal-storage.c:43
#7  0x000000000047af06 in ecma_finalize_lit_storage () at jerryscript/jerry-core/ecma/base/ecma-literal-storage.c:60
#8  0x000000000047a685 in ecma_finalize () at jerryscript/jerry-core/ecma/base/ecma-init-finalize.c:65
#9  0x0000000000465530 in jerry_cleanup () at jerryscript/jerry-core/api/jerry.c:219
#10 0x0000000000464919 in main (argc=3, argv=0x7fffffffded8) at jerryscript/jerry-main/main-unix.c:808

^{Found by Fuzzinator with grammarinator.}

[jiangzidong]

fixed in #2115