String.prototype.match/matchAll/search/replace/split access Symbol.* getter on non-Object argument

[Oichkatzelesfrettschen]

Per the 2025 spec update, the Symbol lookup must be skipped when the regexp argument is not an Object. All five methods have this bug.

Repro:

Object.defineProperty(BigInt.prototype, Symbol.match, {
  get() { throw new Error("must not be called"); }
});
"a1b".match(1n); // throws -- should return ["1"]

Expected: ["1"]
Got: Error thrown from Symbol.match getter

Same bug in matchAll (Symbol.matchAll), search (Symbol.search), replace (Symbol.replace), split (Symbol.split).

Spec: https://tc39.es/ecma262/#sec-string.prototype.match step 2 — "If regexp is not Object, then ..."

Fix: Guard with if !regexp_arg.is_object() before calling get_method(Symbol.match) in each of the five string prototype methods.

Failing test262: built-ins/String/prototype/match/cstm-matcher-on-*-primitive.js, built-ins/String/prototype/matchAll/cstm-matchall-on-*-primitive.js (27 cases total)

[Shubham-Padkonde]

I would like to work on this issue. I am checking the current specification and will add regression coverage for primitive arguments and object custom methods before updating the affected string operations. This work will use OpenAI Codex assistance, with the reproduction and tests run locally.

[Shubham-Padkonde]

This was already fixed by #4665 (merged February 22, commit feb1f89). On current main (69388e5), match, matchAll, search, replace, split, and replaceAll all guard the custom-symbol lookup with is_object(). I have not reproduced a remaining failure on this revision and will not submit a duplicate change. I am releasing my claim; a specific affected revision would help distinguish an older-version report from a current regression.