

###### JerryScript revision
2faafa4

###### Build platform
Ubuntu 18.04.5 LTS(Linux 4.15.0-119-generic x86_64)

###### Build steps
```
./tools/build.py --clean --debug --compile-flag=-fsanitize=address \
--compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer \
--compile-flag=-fno-common --compile-flag=-g --strip=off \
--system-allocator=on --logging=on --linker-flag=-fuse-ld=gold \
--error-messages=on --profile=es2015-subset  --builddir=$PWD/build
```

###### Test case
```

var arr = new Float64Array();
arr.reduceRight(SyntaxError, function() {
  RegExp("[\\s-a]", "u");
}, 'RegExp("[\\s-a]", "u"): ');
```

###### Output
```
ICE: Assertion 'object_p->type_flags_refs >= ECMA_OBJECT_REF_ONE' failed at /root/jerryscript/jerry-core/ecma/base/ecma-gc.c(ecma_deref_object):148.
Error: ERR_FAILED_INTERNAL_ASSERTION
Aborted

```

Credits: Found by chong from OWL337.
Assertion 'object_p->type_flags_refs >= ECMA_OBJECT_REF_ONE' in ecma_deref_object
This is a GitHub Issue
repo:jerryscript
owner:jerryscript-project
Title : Assertion 'object_p->type_flags_refs >= ECMA_OBJECT_REF_ONE' in ecma_deref_object
Issue date:

--- start body ---


###### JerryScript revision
2faafa4

###### Build platform
Ubuntu 18.04.5 LTS(Linux 4.15.0-119-generic x86_64)

###### Build steps
```
./tools/build.py --clean --debug --compile-flag=-fsanitize=address \
--compile-flag=-m32 --compile-flag=-fno-omit-frame-pointer \
--compile-flag=-fno-common --compile-flag=-g --strip=off \
--system-allocator=on --logging=on --linker-flag=-fuse-ld=gold \
--error-messages=on --profile=es2015-subset  --builddir=$PWD/build
```

###### Test case
```

var arr = new Float64Array();
arr.reduceRight(SyntaxError, function() {
  RegExp("[\\s-a]", "u");
}, 'RegExp("[\\s-a]", "u"): ');
```

###### Output
```
ICE: Assertion 'object_p->type_flags_refs >= ECMA_OBJECT_REF_ONE' failed at /root/jerryscript/jerry-core/ecma/base/ecma-gc.c(ecma_deref_object):148.
Error: ERR_FAILED_INTERNAL_ASSERTION
Aborted

```

Credits: Found by chong from OWL337.
--- end body ---
