This fixes bug with trying to get properties of non-object (symbol).

Source/core/inspector/InjectedScriptSource.js

 /*
  * Copyright (C) 2007 Apple Inc.  All rights reserved.
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer.
@@ skipping 156 matching lines @@
  * @param {number} a
  * @param {number} b
  * @return {number}
  */
 function max(a, b)
 {
     return a > b ? a : b;
 }
 
 /**
+ * FIXME: Remove once ES6 is supported natively by JS compiler.
+ * @param {*} obj
+ * @return {boolean}
+ */
+function isSymbol(obj)
+{
+    var type = typeof obj;
+    return (type === "symbol");
+}
+
+/**
  * @constructor
  */
 var InjectedScript = function()
 {
     /** @type {number} */
     this._lastBoundObjectId = 1;
-    /** @type {!Object.<number, !Object>} */
+    /** @type {!Object.<number, (!Object|symbol)>} */
     this._idToWrappedObject = { __proto__: null };
     /** @type {!Object.<number, string>} */
     this._idToObjectGroupName = { __proto__: null };
     /** @type {!Object.<string, !Array.<number>>} */
     this._objectGroups = { __proto__: null };
     /** @type {!Object.<string, !Object>} */
     this._modules = { __proto__: null };
 }
 
 /**
@@ skipping 112 matching lines @@
             try {
                 var description = injectedScript._describe(e);
             } catch (ex) {
                 var description = "<failed to convert exception to string>";
             }
             return new InjectedScript.RemoteObject(description);
         }
     },
 
     /**
-     * @param {!Object} object
+     * @param {!Object|symbol} object
      * @param {string=} objectGroupName
      * @return {string}
      */
     _bind: function(object, objectGroupName)
     {
         var id = this._lastBoundObjectId++;
         this._idToWrappedObject[id] = object;
         var objectId = "{\"injectedScriptId\":" + injectedScriptId + ",\"id\":" + id + "}";
         if (objectGroupName) {
             var group = this._objectGroups[objectGroupName];
@@ skipping 50 matching lines @@
      * @param {boolean} ownProperties
      * @param {boolean} accessorPropertiesOnly
      * @return {!Array.<!RuntimeAgent.PropertyDescriptor>|boolean}
      */
     getProperties: function(objectId, ownProperties, accessorPropertiesOnly)
     {
         var parsedObjectId = this._parseObjectId(objectId);
         var object = this._objectForId(parsedObjectId);
         var objectGroupName = this._idToObjectGroupName[parsedObjectId.id];
 
-        if (!this._isDefined(object))
+        if (!this._isDefined(object) || isSymbol(object))
             return false;
+        object = /** @type {!Object} */ (object);
         var descriptors = this._propertyDescriptors(object, ownProperties, accessorPropertiesOnly);
 
         // Go over properties, wrap object values.
         for (var i = 0; i < descriptors.length; ++i) {
             var descriptor = descriptors[i];
             if ("get" in descriptor)
                 descriptor.get = this._wrapObject(descriptor.get, objectGroupName);
             if ("set" in descriptor)
                 descriptor.set = this._wrapObject(descriptor.set, objectGroupName);
             if ("value" in descriptor)
@@ skipping 10 matching lines @@
 
     /**
      * @param {string} objectId
      * @return {!Array.<!Object>|boolean}
      */
     getInternalProperties: function(objectId)
     {
         var parsedObjectId = this._parseObjectId(objectId);
         var object = this._objectForId(parsedObjectId);
         var objectGroupName = this._idToObjectGroupName[parsedObjectId.id];
-        if (!this._isDefined(object))
+        if (!this._isDefined(object) || isSymbol(object))
             return false;
+        object = /** @type {!Object} */ (object);
         var descriptors = [];
         var internalProperties = InjectedScriptHost.getInternalProperties(object);
         if (internalProperties) {
             for (var i = 0; i < internalProperties.length; i++) {
                 var property = internalProperties[i];
                 var descriptor = {
                     name: property.name,
                     value: this._wrapObject(property.value, objectGroupName),
                     __proto__: null
                 };
@@ skipping 60 matching lines @@
          * @param {!Array.<string|symbol>} properties
          */
         function process(o, properties)
         {
             for (var i = 0; i < properties.length; ++i) {
                 var property = properties[i];
                 if (propertyProcessed[property])
                     continue;
 
                 var name = property;
-                var type = typeof property;
-                if (type === "symbol")
+                if (isSymbol(property))
                     name = injectedScript._describe(property);
 
                 try {
                     propertyProcessed[property] = true;
                     var descriptor = nullifyObjectProto(InjectedScriptHost.suppressWarningsAndCall(Object, Object.getOwnPropertyDescriptor, o, property));
                     if (descriptor) {
                         if (accessorPropertiesOnly && !("get" in descriptor || "set" in descriptor))
                             continue;
                     } else {
                         // Not all bindings provide proper descriptors. Fall back to the writable, configurable property.
@@ skipping 13 matching lines @@
                     if (accessorPropertiesOnly)
                         continue;
                     var descriptor = { __proto__: null };
                     descriptor.value = e;
                     descriptor.wasThrown = true;
                 }
 
                 descriptor.name = name;
                 if (o === object)
                     descriptor.isOwn = true;
-                if (type === "symbol")
+                if (isSymbol(property))
                     descriptor.symbol = property;
                 push(descriptors, descriptor);
             }
         }
 
         for (var o = object; this._isDefined(o); o = o.__proto__) {
             // First call Object.keys() to enforce ordering of the property descriptors.
             process(o, Object.keys(/** @type {!Object} */ (o)));
             process(o, Object.getOwnPropertyNames(/** @type {!Object} */ (o)));
             if (Object.getOwnPropertySymbols)
@@ skipping 323 matching lines @@
             topCallFrame = asyncCallStacks[asyncOrdinal - 1];
         var ordinal = parsedCallFrameId["ordinal"];
         var callFrame = topCallFrame;
         while (--ordinal >= 0 && callFrame)
             callFrame = callFrame.caller;
         return callFrame;
     },
 
     /**
      * @param {!Object} objectId
-     * @return {!Object}
+     * @return {!Object|symbol}
      */
     _objectForId: function(objectId)
     {
         return this._idToWrappedObject[objectId.id];
     },
 
     /**
      * @param {string} objectId
-     * @return {!Object}
+     * @return {!Object|symbol}
      */
     findObjectById: function(objectId)
     {
         var parsedObjectId = this._parseObjectId(objectId);
         return this._objectForId(parsedObjectId);
     },
 
     /**
      * @param {string} objectId
      * @return {?Node}
@@ skipping 80 matching lines @@
 
     /**
      * @param {*} obj
      * @return {?string}
      */
     _describe: function(obj)
     {
         if (this.isPrimitiveValue(obj))
             return null;
 
-        var type = typeof obj;
         var subtype = this._subtype(obj);
 
         if (subtype === "regexp")
             return toString(obj);
 
         if (subtype === "date")
             return toString(obj);
 
         if (subtype === "node") {
             var description = obj.nodeName.toLowerCase();
@@ skipping 11 matching lines @@
         }
 
         var className = InjectedScriptHost.internalConstructorName(obj);
         if (subtype === "array") {
             if (typeof obj.length === "number")
                 className += "[" + obj.length + "]";
             return className;
         }
 
         // NodeList in JSC is a function, check for array prior to this.
-        if (type === "function")
+        if (typeof obj === "function")
             return toString(obj);
 
-        if (type === "symbol") {
+        if (isSymbol(obj)) {
             try {
                 return Symbol.prototype.toString.call(obj) || "Symbol";
             } catch (e) {
                 return "Symbol";
             }
         }
 
         if (className === "Object") {
             // In Chromium DOM wrapper prototypes will have Object as their constructor name,
             // get the real DOM wrapper name from the constructor property.
@@ skipping 630 matching lines @@
      */
     _logEvent: function(event)
     {
         inspectedWindow.console.log(event.type, event);
     }
 }
 
 injectedScript._commandLineAPIImpl = new CommandLineAPIImpl();
 return injectedScript;
 })