<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/70191>70191</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [clang][clang::Sema] `clang::OverloadCandidateSet::NoteCandidates` crash
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            clang,
            clang:frontend
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          VitaNuo
      </td>
    </tr>
</table>

<pre>
    ## Steps to reproduce
### Code snippet
```
typedef a;
using b = char *;
template <typename... c> void d(c...) = d<b, a>("", "")
```

### Command
`clang -fsyntax-only snippet.cc`

### Compiler
```
clang version 18.0.0 (git@github.com:llvm/llvm-project.git 513fe12e43d511987230105b8b61beb7bab08a73) 
Target: x86_64-unknown-linux-gnu    
Thread model: posix 
```

## Crash stack trace
```
#0 0x0000556bdff1bc93 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) /usr/local/google/home/bakalova/llvm-project/llvm/lib/Support/Unix/Sig
nals.inc:723:13 
 #1 0x0000556bdff1987e llvm::sys::RunSignalHandlers() /usr/local/google/home/bakalova/llvm-project/llvm/lib/Support/Signals.cpp:106:18 
 #2 0x0000556bdfe8d518 HandleCrash /usr/local/google/home/bakalova/llvm-project/llvm/lib/Support/CrashRecoveryContext.cpp:73:5 
 #3 0x0000556bdfe8d518 CrashRecoverySignalHandler(int) /usr/local/google/home/bakalova/llvm-project/llvm/lib/Support/CrashRecoveryContext.cpp:390
:51 
 #4 0x00007f728285a510 (/lib/x86_64-linux-gnu/libc.so.6+0x3c510) 
 #5 0x00007f72828a80fc __pthread_kill_implementation ./nptl/pthread_kill.c:44:76 
 #6 0x00007f728285a472 raise ./signal/../sysdeps/posix/raise.c:27:6 
 #7 0x00007f72828444b2 abort ./stdlib/abort.c:81:7 
 #8 0x00007f72828443d5 _nl_load_domain ./intl/loadmsgcat.c:1177:9 
 #9 0x00007f72828533a2 (/lib/x86_64-linux-gnu/libc.so.6+0x353a2) 
#10 0x0000556be283646a DiagnoseBadConversion(clang::Sema&, clang::OverloadCandidate*, unsigned int, bool) /usr/local/google/home/bakalova/llvm-pr
oject/clang/lib/Sema/SemaOverload.cpp:10832:5 
#11 0x0000556be2805dc1 NoteFunctionCandidate /usr/local/google/home/bakalova/llvm-project/clang/lib/Sema/SemaOverload.cpp:0:16 
#12 0x0000556be2805dc1 clang::OverloadCandidateSet::NoteCandidates(clang::Sema&, llvm::ArrayRef<clang::Expr*>, llvm::ArrayRef<clang::OverloadCand
idate*>, llvm::StringRef, clang::SourceLocation) /usr/local/google/home/bakalova/llvm-project/clang/lib/Sema/SemaOverload.cpp:12126:7 
#13 0x0000556be281beb9 clang::OverloadCandidateSet::NoteCandidates(std::pair<clang::SourceLocation, clang::PartialDiagnostic>, clang::Sema&, clan
g::OverloadCandidateDisplayKind, llvm::ArrayRef<clang::Expr*>, llvm::StringRef, clang::SourceLocation, llvm::function_ref<bool (clang::OverloadCa
ndidate&)>) /usr/local/google/home/bakalova/llvm-project/clang/lib/Sema/SemaOverload.cpp:12104:11 
#14 0x0000556be2822900 FinishOverloadedCallExpr(clang::Sema&, clang::Scope*, clang::Expr*, clang::UnresolvedLookupExpr*, clang::SourceLocation, l
lvm::MutableArrayRef<clang::Expr*>, clang::SourceLocation, clang::Expr*, clang::OverloadCandidateSet*, clang::OverloadCandidate**, clang::Overloa
dingResult, bool) /usr/local/google/home/bakalova/llvm-project/clang/lib/Sema/SemaOverload.cpp:13589:19 
#15 0x0000556be282218c clang::Sema::BuildOverloadedCallExpr(clang::Scope*, clang::Expr*, clang::UnresolvedLookupExpr*, clang::SourceLocation, llv
m::MutableArrayRef<clang::Expr*>, clang::SourceLocation, clang::Expr*, bool, bool) /usr/local/google/home/bakalova/llvm-project/clang/lib/Sema/Se
maOverload.cpp:13672:10 
#16 0x0000556be2464365 clang::Sema::BuildCallExpr(clang::Scope*, clang::Expr*, clang::SourceLocation, llvm::MutableArrayRef<clang::Expr*>, clang:
:SourceLocation, clang::Expr*, bool, bool) /usr/local/google/home/bakalova/llvm-project/clang/lib/Sema/SemaExpr.cpp:7207:16 
#17 0x0000556be248042b clang::Sema::ActOnCallExpr(clang::Scope*, clang::Expr*, clang::SourceLocation, llvm::MutableArrayRef<clang::Expr*>, clang:
:SourceLocation, clang::Expr*) /usr/local/google/home/bakalova/llvm-project/clang/lib/Sema/SemaExpr.cpp:7098:7 
#18 0x0000556be20733c9 clang::Parser::ParsePostfixExpressionSuffix(clang::ActionResult<clang::Expr*, true>) /usr/local/google/home/bakalova/llvm-
project/clang/lib/Parse/ParseExpr.cpp:2134:23 
#19 0x0000556be20744da clang::Parser::ParseCastExpression(clang::Parser::CastParseKind, bool, bool&, clang::Parser::TypeCastState, bool, bool*) /
usr/local/google/home/bakalova/llvm-project/clang/lib/Parse/ParseExpr.cpp:1861:7 
#20 0x0000556be20770f3 clang::Parser::ParseCastExpression(clang::Parser::CastParseKind, bool, bool&, clang::Parser::TypeCastState, bool, bool*) /
usr/local/google/home/bakalova/llvm-project/clang/lib/Parse/ParseExpr.cpp:0:0 
#21 0x0000556be20703f4 ParseCastExpression /usr/local/google/home/bakalova/llvm-project/clang/lib/Parse/ParseExpr.cpp:684:20 
#22 0x0000556be20703f4 clang::Parser::ParseAssignmentExpression(clang::Parser::TypeCastState) /usr/local/google/home/bakalova/llvm-project/clang/
lib/Parse/ParseExpr.cpp:176:20 
#23 0x0000556be20397ad ParseInitializer /usr/local/google/home/bakalova/llvm-project/clang/include/clang/Parse/Parser.h:0:0 
#24 0x0000556be20397ad clang::Parser::ParseDeclarationAfterDeclaratorAndAttributes(clang::Declarator&, clang::Parser::ParsedTemplateInfo const&, 
clang::Parser::ForRangeInit*) /usr/local/google/home/bakalova/llvm-project/clang/lib/Parse/ParseDecl.cpp:2604:25 
#25 0x0000556be2039ccf clang::Parser::ParseDeclarationAfterDeclarator(clang::Declarator&, clang::Parser::ParsedTemplateInfo const&) /usr/local/go
ogle/home/bakalova/llvm-project/clang/lib/Parse/ParseDecl.cpp:2462:1 
#26 0x0000556be20f1c4c clang::Parser::ParseSingleDeclarationAfterTemplate(clang::DeclaratorContext, clang::Parser::ParsedTemplateInfo const&, clang::ParsingDeclRAIIObject&, clang::SourceLocation&, clang::ParsedAttributes&, clang::AccessSpecifier) /usr/local/google/home/bakalova/llvm-project/clang/lib/Parse/ParseTemplate.cpp:366:20 
#27 0x0000556be20f0567 clang::Parser::ParseTemplateDeclarationOrSpecialization(clang::DeclaratorContext, clang::SourceLocation&, clang::ParsedAttributes&, clang::AccessSpecifier) /usr/local/google/home/bakalova/llvm-project/clang/lib/Parse/ParseTemplate.cpp:0:0
#28 0x0000556be20efe45 clang::Parser::ParseDeclarationStartingWithTemplate(clang::DeclaratorContext, clang::SourceLocation&, clang::ParsedAttributes&, clang::AccessSpecifier) /usr/local/google/home/bakalova/llvm-project/clang/lib/Parse/ParseTemplate.cpp:0:0 
#29 0x0000556be2035591 clang::Parser::ParseDeclaration(clang::DeclaratorContext, clang::SourceLocation&, clang::ParsedAttributes&, clang::ParsedA
ttributes&, clang::SourceLocation*) /usr/local/google/home/bakalova/llvm-project/clang/lib/Parse/ParseDecl.cpp:1960:10 
#30 0x0000556be2016520 clang::Parser::ParseExternalDeclaration(clang::ParsedAttributes&, clang::ParsedAttributes&, clang::ParsingDeclSpec*) /usr/
local/google/home/bakalova/llvm-project/clang/lib/Parse/Parser.cpp:0:3 
#31 0x0000556be2014889 clang::Parser::ParseTopLevelDecl(clang::OpaquePtr<clang::DeclGroupRef>&, clang::Sema::ModuleImportState&) /usr/local/googl
e/home/bakalova/llvm-project/clang/lib/Parse/Parser.cpp:0:12 
#32 0x0000556be200f1de clang::ParseAST(clang::Sema&, bool, bool) /usr/local/google/home/bakalova/llvm-project/clang/lib/Parse/ParseAST.cpp:162:5
#33 0x0000556be08e2890 clang::FrontendAction::Execute() /usr/local/google/home/bakalova/llvm-project/clang/lib/Frontend/FrontendAction.cpp:1074:1
0 
#34 0x0000556be08515cf getPtr /usr/local/google/home/bakalova/llvm-project/llvm/include/llvm/Support/Error.h:270:42 
#35 0x0000556be08515cf operator bool /usr/local/google/home/bakalova/llvm-project/llvm/include/llvm/Support/Error.h:233:16 
#36 0x0000556be08515cf clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) /usr/local/google/home/bakalova/llvm-project/clang/lib/Fron
tend/CompilerInstance.cpp:1054:23 
#37 0x0000556be09bcc87 clang::ExecuteCompilerInvocation(clang::CompilerInstance*) /usr/local/google/home/bakalova/llvm-project/clang/lib/Frontend
Tool/ExecuteCompilerInvocation.cpp:272:25 
#38 0x0000556bdda47c38 cc1_main(llvm::ArrayRef<char const*>, char const*, void*) /usr/local/google/home/bakalova/llvm-project/clang/tools/driver/
cc1_main.cpp:283:15 
#39 0x0000556bdda44661 ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&, llvm::ToolContext const&) /usr/local/google/home/bakalova/llvm-project
/clang/tools/driver/driver.cpp:0:12 
#40 0x0000556be06b3ff9 operator() /usr/local/google/home/bakalova/llvm-project/clang/lib/Driver/Job.cpp:440:30 
#41 0x0000556be06b3ff9 void llvm::function_ref<void ()>::callback_fn<clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::String
Ref>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const::$_1>(long) /usr/local/google/home/bakalova/
llvm-project/llvm/include/llvm/ADT/STLFunctionalExtras.h:45:12 
#42 0x0000556bdfe8d25b operator() /usr/local/google/home/bakalova/llvm-project/llvm/include/llvm/ADT/STLFunctionalExtras.h:0:12 
#43 0x0000556bdfe8d25b llvm::CrashRecoveryContext::RunSafely(llvm::function_ref<void ()>) /usr/local/google/home/bakalova/llvm-project/llvm/lib/S
upport/CrashRecoveryContext.cpp:426:3 
#44 0x0000556be06b3540 clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::c
har_traits<char>, std::allocator<char>>*, bool*) const /usr/local/google/home/bakalova/llvm-project/clang/lib/Driver/Job.cpp:440:7 
#45 0x0000556be0673318 clang::driver::Compilation::ExecuteCommand(clang::driver::Command const&, clang::driver::Command const*&, bool) const /usr
/local/google/home/bakalova/llvm-project/clang/lib/Driver/Compilation.cpp:199:15 
#46 0x0000556be06735d7 clang::driver::Compilation::ExecuteJobs(clang::driver::JobList const&, llvm::SmallVectorImpl<std::pair<int, clang::driver:
:Command const*>>&, bool) const /usr/local/google/home/bakalova/llvm-project/clang/lib/Driver/Compilation.cpp:253:13 
#47 0x0000556be0693ab7 empty /usr/local/google/home/bakalova/llvm-project/llvm/include/llvm/ADT/SmallVector.h:94:46 
#48 0x0000556be0693ab7 clang::driver::Driver::ExecuteCompilation(clang::driver::Compilation&, llvm::SmallVectorImpl<std::pair<int, clang::driver:
:Command const*>>&) /usr/local/google/home/bakalova/llvm-project/clang/lib/Driver/Driver.cpp:1883:23 
#49 0x0000556bdda438fe clang_main(int, char**, llvm::ToolContext const&) /usr/local/google/home/bakalova/llvm-project/clang/tools/driver/driver.c
pp:542:21 
#50 0x0000556bdda53f91 main /usr/local/google/home/bakalova/llvm-project/build/tools/clang/tools/driver/clang-driver.cpp:15:3 
#51 0x00007f72828456ca __libc_start_call_main ./csu/../sysdeps/nptl/libc_start_call_main.h:74:3 
#52 0x00007f7282845785 call_init ./csu/../csu/libc-start.c:128:20       
#53 0x00007f7282845785 __libc_start_main ./csu/../csu/libc-start.c:347:5 
#54 0x0000556bdda40a51 _start (/usr/local/google/home/bakalova/llvm-project/build/bin/clang+0x10bfa51)
```
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzsW19zozgS_zTkhYoLJMSfhzx4nPhu9mZ3psbZvUeXEMLRDZY4IbLOfforCbCFjD2ejJO6rbqp1BiD1Or-dau71bRx07ANp_TOQx88dH-DW_Uk5N0fTOHfWnGTi-LlzgPQA9BfKVo3vhK-pLUURUuoF9x7wbx7rEcsREH9hrO6pqp_Fgf9n_mqXmpa0NLHHvzQ3Wkbxjd-7nvw3idPWPoemO8fKrqtK6yo78GFnsrxls5mM5948MF_FqzwCw-kZDabeSAzJAoPLnIPLPQKDx5IPQDM38IfrrJJxo4l2W4xL_ZjSYX5xr8tmxeu8O5W8OplEHRGyDkyNauonFyzo_lMZcME98N0FswC3wPphikvCjZMPbX5jIitB-dV9bz1wFJ_3NZS_IsSNdsw5aMQljQENIIFCsMsTQAMwgDlaR6HOc2THOdBihNo4DGLPmK5ocqDc3-Xxus4um35Ny7-5LcV4-3udsNb3_eHsU-S4sLfioJWekYtGrbzv4ufv5C4efIbhck3X0m8txNnCoCBH-yCIAgQivOiLMOcZNA3ssK5B-fNS9NdfJGMq5Wm92jIgfQwSOI_16JRkuKtB2KtacaVkRcs20Zq1ATBlQeWGyE2FfXA8kls9UeOv-FKPGMH2P6r_mC5B5artq6F1Ld_52ynb7BNJwHHVTNjnHhwngDowXkIe3R8D8DQES5LEzol3NeWr9iG4-rvmBcVlY0x27fgv1ummZG61swGsf4_tVgGI5ZpWqAw9Tu2Op1enydD9ysl4pnKl4Xgiu5Uz2CiIUUWe3CKvRGBEZAeSN_MFM6wDbPBwOEchRb7Uc9-UiYgBSnCKDT7fU--35H7ndg9ILNGzGIPfAh2kKAwOOxlTRSNieI0KIm_XtfK7N31N1ZVa7atK7qlXGGlPc3MA0teK42DPWym7TiKNPCxtUDsch0lwJeYNdQQagziHljOzLeXpqB1oylrX-GBpRlpSIPEg3ObcjKmHEVRDnycC6k6yqroYDG3DIk01NxZJFKXBCyQv-bVuhK4WBdii1knL-NGXn1722wI7uiFYaKZsvHMHHEhxOAHlYQgBgclaU9g-zkKUhhHMfbvGd5w0dAPuFgI3ocBHc50WOhcw4puce_UrLufn6nUgiwwL1iBFdUhEyz8lptQXnQOcOHnQlSvtP6O9WEPdGvvN4FhynwMnOw9SgqBtWe16OFY9AAVJPR_E4ouW060Oe6l-JldeimHgeYyttgDU-ydw3plgqcH51qG_d3mpN4ODn8uJX75SksPLqyhD7tampTn4ZLRNjudEHsDcAmslGR8oymMrWclWknoJ0GMM_hJ73ixZYAQxNbe1dDDMfQ6X8leCX2jiu5JjZkcI-aKO8LiC5aK4arfiYqRHsXTW7Bj_xSH96ypK_zyD8aLn9H9paqz55T9dlpLs4re-_7YKA_c9tnL4DxinRRrHt7LFILI-F7LFqKxLQCQBYG_ZJw1T8N0WixwVXWQfd9HroioB784gfj47u9c0kZUz7T4JMS3tp4eNYF-J8BeB7-2CucVvUTZl1roNCuTW-P7o8yQE6M6UQpjd01b_WwA-WGrgCjN9KcdNpFrFWFKjvamufrQsqr4rqW8i01Uz50A72ITnYbeUlO9MMf6ihNgQr6lr3ikryiOYIzO6OsKWjrnEV-D_JC3_-_gv8V6ueFEBILEzWCSMehpEIF8GvQ5UZ_5Xx70twc5yFInVUlHGAcJhCRz8oiGSuv6i2hUyXaaKm10Xr9qy1Kfh2zQ5yZg9-52Eiiw8JVs6WuDcyfAKekNo8OnJT8IoY7PAFoAZA4AUVTgswAscKMO0o_ltgfrceb7kDONd5Qb1u2pjy-1WWalTGhzpw6mMpQZr2EwpyAL0zgcmwwIHMSSoIT_R2yPmD6IWaEDhA5cASwjfwKX623-U5zFqbF-mzkwxdw5Xc5NUX1L-UUaddRyFQfXZ6bnrTaJXUnHZ7IAZgkuOjV85Ewfldh_qLwGf4yTqi2odWfEpZw9TRhJNMXdOT3cU1JhacLJvFRUDt-FnPNirpRkeXt0eD8MOr-bzHXx2L-i-MhL4RPBG9XPsmr8x3OXQn7FfGNQvXZUGwGphRn8emzOXcCqzgDkIkpI-UpE3wDESVD60tR1oYlik8xayIxz2aAMSUTOCrFifFMd4TNIdgqdvnT8ejNzZjG-0cS_zj9-_Jx3GBwdjZ00a1I9o93hjpgTQptmVVPCSkbl21nvIPVQWY-PHFbiqClAcXIWyYGkpajP0oiinVsPyY_o6q8Lp3GvByidJJeWNEKX-oKVwlIxvvknU0-vM_m_OIyWSTq5MkQoCy_F8b0x60f0b9tPj3NXep-IFWZx4NQYoJNXhzECwVl0H3aKSo6rkyhfjNJ3RvSuVxugC1CfjV0TJjuRtk5q0EmkwyhNzx9VH0X9iT5Tg49TMK7xv1v6RTkVdT3wb1K0tTnfP0wYy77i8Kso2op-3NZCDtntqbAuNn019ZrAhMBCxsnigzIs6BEy89XjyfLymxV7RvzPV4-D-ZukBB0kGGXnQUpBmo1sfym1m-BFV1gYSgmUtMYZX5XlYSnrslt1_yowMUX-jnl7A0djIVCISOlvqPqifupg0b-nP5wr-huHV_YPUoruXAESbRyRbRxoiitRU-N9_f5tyvswB6FT4oPxFHOW3ocuo4-8UZgTOtJ8bwwjo3YM5dymfKVtDP1bxkJc_vY2gtxCExzlc0GWE5Im4zKgEepA8Xkfk9JziFw5Yu3Nv-uTMg5heZK34ZRhKub2-QvaOVdR4CghMPUJCddbzPiozcmuqD5hOZwB9sXU0T2wMN1x15NaCVE1HlgWkj3TQ0QbOB0ETI3p2gJmjoBRHIf-ANQi7JCzxFxtcVX9QYkS8uO2rialdd6raxp9fvS9s-NlYvfMnxa-uzgRZ6JRhhLEOSzLbO9Kru2H7weefhF5z1AUmZzA8rlROMWS6Z88-QLZPO241aCbIQRXVY7Jt3XJxylBj0y39Rbh0DzpBKBJY96_uhe1Xh1rlbtvwjtB-nSjs_f9tPWa7HZh2H3JccPIuukmdaYzGqxvrJXETDXDY4ccrrRGtKIOz_WQuVMm7QzNTPFAtA67btNKaNX8mHr73PCygDG_f9Rh4_HT0D2Dq4edkrgxoSNCri0eNfQBlF_RFl_H5tGOOerr01wejGCq16578rXlK1zS6mVkXect-ZrtgH2l_IKmwMi0v1iRLorcPYmiUTL3xnvqGrupE-a6e-odXKP1miYa531xAmGYntSCCez4KLceVDPKQJyJesCput2ZofPR0cOBaIhTVwPKEnB_As-ciB7FLmKoSH4UsV9E3pyG6xeRf2KNGsF1LkNwu7_69sdJ6sO75iOce5s8jfab4gzQqH1c4zzOhOMM4jzx6bZWL2_osQ_YGk-d6fw8so4iUTrF1Qk93lvXo9x4ImE_ZTXvrv23yM3u7XwxTE2WbJ96IjdLhmnZlyaGg8AglfHBQxfXG-bAF2S_fXeBlglF5mRjvT9BwVgkBMss9E079k_wlLesKiyeTvJoHtyO8vQQjQMwCp3ecRQT7K_XFct10MNSrXW-u963kJOmPW5z7_vopyaZHWSqIPaqwF01SZFv5jDOlLtQd6mp3xrqXdc6SLvXIN2_A204RXsk0ZQwk2vAKBk3cqPIsdEAo9DvyPb98T-r1Vxb-qDTD8EuDPISo_D4J1s3xR0sMpjhG3oXxlkKQAZBfPN0F1EclARlRVykeZRnZYxRHGe4DHKURRG8YXcgADAMAAoDAIJ4lmGKYILyqExCEsfYiwK6xayaaR5nQm5uWNO09C4Jwiy8qXBOq8b8VA6AnlHggcX-G5yX-8IY8ND9jbwzwubtpvGioGKNag6kFVOV-eFdNxnd7y8PpUd07w8_P-urspe2RceBT3RCetPK6u5Jqdr83ggstW4Ovy07pLRjpRixtYUbyf8bAAD__xV6QCs">