BoundFunctions [[Length]] property should be ecma_number_t (#4072)

This patch fixes #4043.

JerryScript-DCO-1.0-Signed-off-by: Robert Fancsik frobert@inf.u-szeged.hu

jerry-core/ecma/base/ecma-gc.c

@@ -1426,6 +1426,10 @@ ecma_gc_free_object (ecma_object_t *object_p) /**< object to free */
 
       ecma_value_t args_len_or_this = bound_func_p->header.u.bound_function.args_len_or_this;
 
+#if ENABLED (JERRY_ESNEXT)
+      ecma_free_value (bound_func_p->target_length);
+#endif /* ENABLED (JERRY_ESNEXT) */
+
       if (!ecma_is_value_integer_number (args_len_or_this))
       {
         ecma_free_value_if_not_object (args_len_or_this);

jerry-core/ecma/base/ecma-globals.h

@@ -1000,7 +1000,7 @@ typedef struct
 {
   ecma_extended_object_t header; /**< extended object header */
 #if ENABLED (JERRY_ESNEXT)
-  ecma_integer_value_t target_length; /**< length of target function */
+  ecma_value_t target_length; /**< length of target function */
 #endif /* ENABLED (JERRY_ESNEXT) */
 } ecma_bound_function_t;