
###### JerryScript revision
fdaacde

###### Build platform
Ubuntu 18.04.5 LTS(Linux 4.15.0-119-generic x86_64)

###### Build steps
```
./tools/build.py --clean --debug --compile-flag=-fsanitize=address \
--compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer \
--compile-flag=-fno-common --compile-flag=-g --strip=off \
--system-allocator=on --logging=on --linker-flag=-fuse-ld=gold \
--error-messages=on --profile=es2015-subset  
```
###### Test case
```
assert.same = function(a, b, message) {
    let msg = message ? `. ${message}` : "";
}

let order = [];
class Base {
    constructor() {
        order.push("construct Base");
        return new Proxy(this, {
            defineProperty(target, p, desc) {
                order.push(`defineProperty ${p}`);
                return Reflect.defineProperty(target, p, desc);
            }
        });
    }
}

let computedKey = "test";
assert.same(order, []);
class BasicTPK extends Base {
    [computedKey] = "basic";
}

let instance = new BasicTPK;
assert.same(instance.test, "basic");

```
###### Output
```
ICE: Assertion '(object_p->u2.prototype_cp & ~JMEM_TAG_MASK) == 0' failed at /root/jerryscript/jerry-core/ecma/base/ecma-gc.c(ecma_gc_free_object):1648.
Error: ERR_FAILED_INTERNAL_ASSERTION
Aborted
```

Credits: Found by chong from OWL337.
Assertion '(object_p->u2.prototype_cp & ~JMEM_TAG_MASK) == 0' failed in ecma_gc_free_object
This is a GitHub Issue
repo:jerryscript
owner:jerryscript-project
Title : Assertion '(object_p->u2.prototype_cp & ~JMEM_TAG_MASK) == 0' failed in ecma_gc_free_object
Issue date:

--- start body ---

###### JerryScript revision
fdaacde

###### Build platform
Ubuntu 18.04.5 LTS(Linux 4.15.0-119-generic x86_64)

###### Build steps
```
./tools/build.py --clean --debug --compile-flag=-fsanitize=address \
--compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer \
--compile-flag=-fno-common --compile-flag=-g --strip=off \
--system-allocator=on --logging=on --linker-flag=-fuse-ld=gold \
--error-messages=on --profile=es2015-subset  
```
###### Test case
```
assert.same = function(a, b, message) {
    let msg = message ? `. ${message}` : "";
}

let order = [];
class Base {
    constructor() {
        order.push("construct Base");
        return new Proxy(this, {
            defineProperty(target, p, desc) {
                order.push(`defineProperty ${p}`);
                return Reflect.defineProperty(target, p, desc);
            }
        });
    }
}

let computedKey = "test";
assert.same(order, []);
class BasicTPK extends Base {
    [computedKey] = "basic";
}

let instance = new BasicTPK;
assert.same(instance.test, "basic");

```
###### Output
```
ICE: Assertion '(object_p->u2.prototype_cp & ~JMEM_TAG_MASK) == 0' failed at /root/jerryscript/jerry-core/ecma/base/ecma-gc.c(ecma_gc_free_object):1648.
Error: ERR_FAILED_INTERNAL_ASSERTION
Aborted
```

Credits: Found by chong from OWL337.
--- end body ---
