!5391 [BugFix] Assertion failed in GetTaggedObject

Merge pull request !5391 from 刘家华/master

ecmascript/js_number_format.cpp

@@ -444,7 +444,7 @@ void JSNumberFormat::InitializeNumberFormat(JSThread *thread, const JSHandle<JSN
     ObjectFactory *factory = ecmaVm->GetFactory();
     // 1. Let requestedLocales be ? CanonicalizeLocaleList(locales).
     JSHandle<TaggedArray> requestedLocales = intl::LocaleHelper::CanonicalizeLocaleList(thread, locales);
-
+    RETURN_IF_ABRUPT_COMPLETION(thread);
     // 2. If options is undefined, then
     //      a. Let options be ObjectCreate(null).
     // 3. Else,

ecmascript/object_factory-inl.h

@@ -92,9 +92,7 @@ JSHandle<JSNativePointer> ObjectFactory::NewJSNativePointer(void *externalPointe
     obj->SetNativeFlag(flag);
     
     if (callBack != nullptr) {
-        if (flag == NativeFlag::NO_DIV) {
-            heap_->IncreaseNativeBindingSize(nativeBindingsize);
-        }
+        heap_->IncreaseNativeBindingSize(nativeBindingsize);
         vm_->PushToNativePointerList(static_cast<JSNativePointer *>(header));
         // In some cases, the size of JS/TS object is too small and the native binding size is too large.
         // Check and try trigger concurrent mark here.

test/moduletest/bigint/bigint.js

@@ -93,3 +93,10 @@ hmap.set(d, '4');
 hmap.forEach((val,key)=>{
     print("hmap val:" + val, "key :" + key);
 })
+
+const v83 = new BigUint64Array(1096);
+try {
+    v83["toLocaleString"]("toLocaleString", "toLocaleString");
+} catch (error) {
+    print(error);
+}

test/moduletest/bigint/expect_output.txt

@@ -23,3 +23,4 @@ SyntaxError
 0
 map val:4 key :9007199254740991
 hmap val:4 key :9007199254740991
+RangeError: invalid locale