Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed in ecma_free_string_list

[renatahodovan]

Jerry version:

Checked revision: 93ec2266

Build command: ./tools/build.py --clean --debug --compile-flag=-m32 --profile=es2015-subset --system-allocator=on --error-messages=on --logging=on

OS:

Linux-4.15.0-43-generic-x86_64-with-Ubuntu-18.04-bionic

Test case:

Uint8Array.prototype.join.call([ "2015-01-01T00:", { toString : '2,1,3,4,0' } ], [ ]) 

Backtrace:

Script Error: TypeError
ICE: Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at jerryscript/jerry-core/ecma/base/ecma-literal-storage.c(ecma_free_string_list):43.
Error: ERR_FAILED_INTERNAL_ASSERTION

Program received signal SIGABRT, Aborted.
__GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
51	../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
(gdb) bt
#0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1  0x00007ffff7a24801 in __GI_abort () at abort.c:79
#2  0x000055555555f2f6 in jerry_port_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-port/default/default-fatal.c:71
#3  0x000055555558b3a3 in jerry_fatal (code=ERR_FAILED_INTERNAL_ASSERTION) at jerryscript/jerry-core/jrt/jrt-fatals.c:58
#4  0x000055555558b3f5 in jerry_assert_fail (assertion=0x5555555e4880 "ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)", 
    file=0x5555555e4830 "jerryscript/jerry-core/ecma/base/ecma-literal-storage.c", function=0x5555555d0bd0 <__func__.4142.lto_priv.619> "ecma_free_string_list", line=43)
    at jerryscript/jerry-core/jrt/jrt-fatals.c:82
#5  0x00005555555b5886 in ecma_free_string_list (string_list_p=0x5555558f6598 <jerry_global_heap+472>) at jerryscript/jerry-core/ecma/base/ecma-literal-storage.c:43
#6  0x00005555555b590b in ecma_finalize_lit_storage () at jerryscript/jerry-core/ecma/base/ecma-literal-storage.c:60
#7  0x00005555555b5035 in ecma_finalize () at jerryscript/jerry-core/ecma/base/ecma-init-finalize.c:63
#8  0x00005555555c2035 in jerry_cleanup () at jerryscript/jerry-core/api/jerry.c:210
#9  0x00005555555c1454 in main (argc=3, argv=0x7fffffffe1b8) at jerryscript/jerry-main/main-unix.c:874

^{Found by Fuzzinator with grammarinator.}