Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) || ecma_is_value_string (value) || ecma_is_value_object (value)' failed in ecma_check_value_type_is_spec_defined

[renatahodovan]

Jerry version:

Checked revision: 7717d2ee
Build command: ./tools/build.py --clean --debug --error-messages=on --profile=es2015-subset --logging=on

OS:

Ubuntu 18.04, x86_64

Test case:

Object.defineProperty(Array.prototype, 0, { get : function ( ) { throw $; } } ) ; 
Promise.race([, this]).then(Error) 

Backtrace:

ICE: Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) || ecma_is_value_string (value) || ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c(ecma_check_value_type_is_spec_defined):386.
Error: ERR_FAILED_INTERNAL_ASSERTION

Program received signal SIGABRT, Aborted.
__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
51  ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007ffff7a24801 in __GI_abort () at abort.c:79
#2  0x000055555555f1b0 in jerry_port_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-port/default/default-fatal.c:71
#3  0x0000555555589695 in jerry_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-core/jrt/jrt-fatals.c:63
#4  0x00005555555896e7 in jerry_assert_fail (
    assertion=0x5555555e3238 "ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) || ecma_is_value_string (value) || ecma_is_value_object (value)", file=0x5555555e31f0 "jerryscript/jerry-core/ecma/base/ecma-helpers-value.c", 
    function=0x5555555cfa20 <__func__.3658.lto_priv.638> "ecma_check_value_type_is_spec_defined", line=386) at jerryscript/jerry-core/jrt/jrt-fatals.c:87
#5  0x00005555555aed3e in ecma_check_value_type_is_spec_defined (value=24) at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c:381
#6  0x000055555559e7ce in ecma_op_to_string (value=24) at jerryscript/jerry-core/ecma/operations/ecma-conversion.c:374
#7  0x0000555555580f62 in ecma_builtin_helper_error_dispatch_call (error_type=ECMA_ERROR_COMMON, arguments_list_p=0x5555558f65fc <jerry_global_heap+572>, arguments_list_len=1)
    at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtin-helpers-error.c:52
#8  0x000055555557c10b in ecma_builtin_error_dispatch_call (arguments_list_p=0x5555558f65fc <jerry_global_heap+572>, arguments_list_len=1)
    at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtin-error.c:54
#9  0x00005555555bae91 in ecma_builtin_dispatch_call (obj_p=0x5555558f6b90 <jerry_global_heap+2000>, this_arg_value=72, arguments_list_p=0x5555558f65fc <jerry_global_heap+572>, arguments_list_len=1)
    at jerryscript/jerry-core/ecma/builtin-objects/ecma-builtins.c:951
#10 0x00005555555a05cf in ecma_op_function_call (func_obj_p=0x5555558f6b90 <jerry_global_heap+2000>, this_arg_value=72, arguments_list_p=0x5555558f65fc <jerry_global_heap+572>, arguments_list_len=1)
    at jerryscript/jerry-core/ecma/operations/ecma-function-object.c:495
#11 0x00005555555a1aaf in ecma_process_promise_reaction_job (obj_p=0x5555558f65f8 <jerry_global_heap+568>) at jerryscript/jerry-core/ecma/operations/ecma-jobqueue.c:170
#12 0x00005555555a1ecd in ecma_process_all_enqueued_jobs () at jerryscript/jerry-core/ecma/operations/ecma-jobqueue.c:343
#13 0x00005555555c0c4d in jerry_run_all_enqueued_jobs () at jerryscript/jerry-core/api/jerry.c:573
#14 0x00005555555bf96b in main (argc=3, argv=0x7fffffffe068) at jerryscript/jerry-main/main-unix.c:863

^{Found by Fuzzinator with grammarinator.}