Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed in ecma_free_string_list

[renatahodovan]

Jerry version:

Checked revision: 90f2473f
Build command: tools/build.py --clean --debug --profile=es2015-subset

OS:

Ubuntu 17.10

Test case:

var a = new Uint8Array(2);
a[0] = { valueOf : function() { throw "intoint" ; } };

Backtrace:

ICE: Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at jerryscript/jerry-core/ecma/base/ecma-literal-storage.c(ecma_free_string_list):43.
Error: ERR_FAILED_INTERNAL_ASSERTION

Program received signal SIGABRT, Aborted.
0xf7fd5db9 in __kernel_vsyscall ()
(gdb) bt
#0  0xf7fd5db9 in __kernel_vsyscall ()
#1  0xf7ca47e2 in raise () from /lib/i386-linux-gnu/libc.so.6
#2  0xf7ca5f51 in abort () from /lib/i386-linux-gnu/libc.so.6
#3  0x0835ed6e in jerry_port_fatal (code=ERR_FAILED_INTERNAL_ASSERTION)
    at jerryscript/jerry-port/default/default-fatal.c:71
#4  0x0822aa4b in jerry_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-core/jrt/jrt-fatals.c:58
#5  0x0822aac1 in jerry_assert_fail (assertion=0x839e880 <.str.2> "ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)", 
    file=0x839e7a0 <.str.1> "jerryscript/jerry-core/ecma/base/ecma-literal-storage.c", 
    function=0x839e8e0 <__func__.ecma_free_string_list> "ecma_free_string_list", line=43)
    at jerryscript/jerry-core/jrt/jrt-fatals.c:82
#6  0x081d36ba in ecma_free_string_list (string_list_p=0xf6300710)
    at jerryscript/jerry-core/ecma/base/ecma-literal-storage.c:43
#7  0x081d3432 in ecma_finalize_lit_storage () at jerryscript/jerry-core/ecma/base/ecma-literal-storage.c:60
#8  0x081d168f in ecma_finalize () at jerryscript/jerry-core/ecma/base/ecma-init-finalize.c:65
#9  0x0817530d in jerry_cleanup () at jerryscript/jerry-core/api/jerry.c:219
#10 0x0816f58d in main (argc=3, argv=0xffffd074) at jerryscript/jerry-main/main-unix.c:816

^{Found by Fuzzinator with grammarinator.}

[jiangzidong]

Fixed in #2147