<html>
    <head>
      <base href="https://bugs.llvm.org/">
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - Assertion failure in clang::ento::MemRegion::getAsOffset"
   href="https://bugs.llvm.org/show_bug.cgi?id=36149">36149</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>Assertion failure in clang::ento::MemRegion::getAsOffset
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>clang
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>PC
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>enhancement
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>P
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>Static Analyzer
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>ekarpenkov@apple.com
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>alexfh@google.com
          </td>
        </tr>

        <tr>
          <th>CC</th>
          <td>dcoughlin@apple.com, ganna@apple.com, llvm-bugs@lists.llvm.org
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Here's a test case:

namespace std {
template <typename>
class b;
class B {
 public:
  long c;
};
template <typename f, typename... d>
class b<f(d...)> : B {
 public:
  f operator()(d...) const;
};
template <typename f, typename... d>
f b<f(d...)>::operator()(d...) const {
  bool e = c;
}
struct j {
  int _M_once = 0;
};
template <typename g, typename... h>
void call_once(g &&, h &&...);
}  // namespace std
void i(std::b<bool()> &l) { l(); }
void k() {
  std::j a;
  call_once(a, i, k);
}

And a stack trace:

assert.h assertion failed at llvm/tools/clang/include/clang/AST/Type.h:669 in
const clang::ExtQualsTypeCommonBase *clang::QualType::getCommonPtr() const:
!isNull() && "Cannot retrieve a NULL type pointer"
    @     0x555d8a857f76  __assert_fail
    @     0x555d895ac4a4  clang::ento::MemRegion::getAsOffset()
    @     0x555d89555a69  (anonymous namespace)::BindingKey::Make()
    @     0x555d89554424  (anonymous
namespace)::RegionStoreManager::getBindingForField()
    @     0x555d89553f5c  (anonymous
namespace)::RegionStoreManager::getBinding()
    @     0x555d8954dc44  (anonymous
namespace)::RegionStoreManager::getBinding()
    @     0x555d8958c5d8  clang::ento::ProgramState::getSVal()
    @     0x555d88ab3600  clang::ento::check::Location::_checkLocation<>()
    @     0x555d895cad7c  clang::ento::CheckerManager::runCheckersForLocation()
    @     0x555d895e464f  clang::ento::ExprEngine::evalLocation()
    @     0x555d895e4894  clang::ento::ExprEngine::evalLoadCommon()
    @     0x555d895e3a27  clang::ento::ExprEngine::evalLoad()
    @     0x555d895fe42c  clang::ento::ExprEngine::VisitCast()
    @     0x555d895da42b  clang::ento::ExprEngine::Visit()
    @     0x555d895d7cfe  clang::ento::ExprEngine::ProcessStmt()
    @     0x555d895d7a28  clang::ento::ExprEngine::processCFGElement()
    @     0x555d895f79b5  clang::ento::CoreEngine::HandlePostStmt()
    @     0x555d895f6c5c  clang::ento::CoreEngine::ExecuteWorkList()
    @     0x555d8862baa3  (anonymous
namespace)::AnalysisConsumer::ActionExprEngine()
    @     0x555d8862b62c  (anonymous namespace)::AnalysisConsumer::HandleCode()
    @     0x555d886159ee  (anonymous
namespace)::AnalysisConsumer::HandleTranslationUnit()</pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are on the CC list for the bug.</li>
      </ul>
    </body>
</html>