There is a heap-use-after-free at ecma-helpers-string.c:772 in ecmarefecma_string in JerryScript 2.2.0