[cfe-dev] static Matcher generate Use After Free

[Aleksandr via cfe-dev]

Yes, crashes happen by assert in 
"llvm/include/llvm/ADT/IntrusiveRefCntPtr.h":

assert(NewRefCount >= 0 && "Reference count was already zero.");

So, if in freed memory was insert negative value by someone we get 
crash, in another case we can miss this problem.

On 06.06.2017 12:55, Artem Dergachev wrote:
> Dunno. Crashes i've seen were random, so i'm not sure if being static is 
> the only requirement.