ChakraCore version:
commit c3ead3f

Build cmd:
```shell
./build.sh --debug --static
```

Test case:
```js
function test(){
	async function foo(a1,a2) {
	
		for (let i = a2; i < a1; i = i ** foo) {
		    const x = await i;
		}
		
		function bar () {
		}
		
		const u = new Uint8Array(bar);
		const p = new Proxy(u,Reflect);
		const o = Object.seal(p);
	}
	
	const r = foo();
	return r;
}

for(let i=0; i<1024; i++){
	test();
}

```

Execute
```shell
./ch ./test.js
```

Error msg:
```
ASSERTION 2791936: (ChakraCore/lib/Runtime/Language/JavascriptConversion.cpp, line 938) bad type object in conversion ToInteger
 Failure: (JavascriptOperators::IsObject(aValue))
Illegal instruction
```


Assertion error: bad type object in conversion ToInteger
This is a GitHub Issue
repo:ChakraCore
owner:chakra-core
Title : Assertion error: bad type object in conversion ToInteger
Issue date:

--- start body ---
ChakraCore version:
commit c3ead3f

Build cmd:
```shell
./build.sh --debug --static
```

Test case:
```js
function test(){
	async function foo(a1,a2) {
	
		for (let i = a2; i < a1; i = i ** foo) {
		    const x = await i;
		}
		
		function bar () {
		}
		
		const u = new Uint8Array(bar);
		const p = new Proxy(u,Reflect);
		const o = Object.seal(p);
	}
	
	const r = foo();
	return r;
}

for(let i=0; i<1024; i++){
	test();
}

```

Execute
```shell
./ch ./test.js
```

Error msg:
```
ASSERTION 2791936: (ChakraCore/lib/Runtime/Language/JavascriptConversion.cpp, line 938) bad type object in conversion ToInteger
 Failure: (JavascriptOperators::IsObject(aValue))
Illegal instruction
```


--- end body ---
