<html>
<body>
<script type="application/ld+json">
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"name": "View Issue",
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3821"
},
"description": ""
}
</script>
<div style="font-family: arial, sans-serif"><br/>Comment #2 on issue 3821 by <a href="mailto:kcc@google.com">kcc@google.com</a>: llvm/clang-proto-fuzzer: ASSERT: (isa<SCEVCouldNotCompute>(ExactNotTaken) || !isa<SCEVCouldNotCompute>(MaxNotTake<br/><a href="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3821#c2">https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3821#c2</a><br/><br/>C repro: <br/><br/><br/>void foo(int *a) {<br/>while (((1+(1+a[0]))+1)){<br/>}<br/>while ((a[0]+a[32])){<br/>a[0]=1;<br/>}<br/>while (((1/(1+a[0]))+1)){<br/>a[0]=(a[0]+1);<br/>}<br/>}<br/><br/> clang -cc1 -triple x86_64-unknown-linux-gnu -emit-obj z.cc -O2<br/><br/>lib/Analysis/ScalarEvolution.cpp:6567: llvm::ScalarEvolution::ExitLimit::ExitLimit(const llvm::SCEV *, const llvm::SCEV *, bool, ArrayRef<const SmallPtrSetImpl<const llvm::SCEVPredicate *> *>): Assertion `(isa<SCEVCouldNotCompute>(ExactNotTaken) || !isa<SCEVCouldNotCompute>(MaxNotTaken)) && "Exact is not allowed to be less precise than Max"' failed.<br/><br/><br/>-- <br/>You received this message because:<br/> 1. You were specifically CC'd on the issue<br/><br/>You may adjust your notification preferences at:<br/><a href="https://bugs.chromium.org/hosting/settings">https://bugs.chromium.org/hosting/settings</a><br/><br/>Reply to this email to add a comment.</div>
</body>
</html>