[promises] Check if receiver is smi before loading map

src/builtins/builtins-promise.cc

Index: src/builtins/builtins-promise.cc
diff --git a/src/builtins/builtins-promise.cc b/src/builtins/builtins-promise.cc
index 49e9d6de2ed0d4906f96c254177a1bbd4ab2db8e..25c9cf225e0363189c1b5e74e2298828a7847914 100644
--- a/src/builtins/builtins-promise.cc
+++ b/src/builtins/builtins-promise.cc
@@ -1011,6 +1011,7 @@ TF_BUILTIN(PromiseCatch, PromiseBuiltinsAssembler) {
   Node* const context = Parameter(4);
 
   Label if_internalthen(this), if_customthen(this, Label::kDeferred);
+  GotoIf(TaggedIsSmi(promise), &if_customthen);
   BranchIfFastPath(context, promise, &if_internalthen, &if_customthen);
 
   Bind(&if_internalthen);