<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/95109>95109</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [AArch64] Assertion with SME and -mspeculative-load-hardening
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            backend:AArch64,
            crash-on-valid
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          ostannard
      </td>
    </tr>
</table>

<pre>
    This code causes an assertion failure in the speculative load hardening pass:
```c
void foo(void);
void bar(void) __arm_in("za") { foo(); }
```

```
$ /work/llvm/install/bin/clang --target=aarch64--none-elf -march=armv9.5-a+sme -c file000054.c -O1 -mspeculative-load-hardening
clang: /work/llvm/llvm-project/llvm/lib/Target/AArch64/AArch64SpeculationHardening.cpp:212: bool (anonymous namespace)::AArch64SpeculationHardening::endsWithCondControlFlow(llvm::MachineBasicBlock &, llvm::MachineBasicBlock *&, llvm::MachineBasicBlock *&, AArch64CC::CondCode &) const: Assertion `analyzeBranchCondCode.size() == 1 && "unknown Cond array format"' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script.
Stack dump:
0. Program arguments: /work/llvm/install/bin/clang --target=aarch64--none-elf -march=armv9.5-a+sme -c file000054.c -O1 -mspeculative-load-hardening
1. <eof> parser at end of file
2.      Code generation
3.      Running pass 'Function Pass Manager' on module 'file000054.c'.
4.      Running pass 'AArch64 speculation hardening pass' on function '@bar'
 #0 0x00005653c6ef5087 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/work/llvm/install/bin/clang+0x4dea087)
 #1 0x00005653c6ef2c3e llvm::sys::RunSignalHandlers() (/work/llvm/install/bin/clang+0x4de7c3e)
 #2 0x00005653c6e67408 CrashRecoverySignalHandler(int) CrashRecoveryContext.cpp:0:0
 #3 0x00007fac3cc42520 (/lib/x86_64-linux-gnu/libc.so.6+0x42520)
 #4 0x00007fac3cc969fc __pthread_kill_implementation ./nptl/pthread_kill.c:44:76
 #5 0x00007fac3cc969fc __pthread_kill_internal ./nptl/pthread_kill.c:78:10
 #6 0x00007fac3cc969fc pthread_kill ./nptl/pthread_kill.c:89:10
 #7 0x00007fac3cc42476 gsignal ./signal/../sysdeps/posix/raise.c:27:6
 #8 0x00007fac3cc287f3 abort ./stdlib/abort.c:81:7
 #9 0x00007fac3cc2871b _nl_load_domain ./intl/loadmsgcat.c:1177:9
#10 0x00007fac3cc39e96 (/lib/x86_64-linux-gnu/libc.so.6+0x39e96)
#11 0x00005653c5f265d3 (/work/llvm/install/bin/clang+0x3e1b5d3)
#12 0x00005653c6402870 llvm::MachineFunctionPass::runOnFunction(llvm::Function&) (/work/llvm/install/bin/clang+0x42f7870)
#13 0x00005653c69db4e9 llvm::FPPassManager::runOnFunction(llvm::Function&) (/work/llvm/install/bin/clang+0x48d04e9)
#14 0x00005653c69e3861 llvm::FPPassManager::runOnModule(llvm::Module&) (/work/llvm/install/bin/clang+0x48d8861)
#15 0x00005653c69dbf9c llvm::legacy::PassManagerImpl::run(llvm::Module&) (/work/llvm/install/bin/clang+0x48d0f9c)
#16 0x00005653c76f0c2d clang::EmitBackendOutput(clang::DiagnosticsEngine&, clang::HeaderSearchOptions const&, clang::CodeGenOptions const&, clang::TargetOptions const&, clang::LangOptions const&, llvm::StringRef, llvm::Module*, clang::BackendAction, llvm::IntrusiveRefCntPtr<llvm::vfs::FileSystem>, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>, clang::BackendConsumer*) (/work/llvm/install/bin/clang+0x55e5c2d)
#17 0x00005653c771709c clang::BackendConsumer::HandleTranslationUnit(clang::ASTContext&) (/work/llvm/install/bin/clang+0x560c09c)
#18 0x00005653c9607597 clang::ParseAST(clang::Sema&, bool, bool) (/work/llvm/install/bin/clang+0x74fc597)
#19 0x00005653c7b985d0 clang::FrontendAction::Execute() (/work/llvm/install/bin/clang+0x5a8d5d0)
#20 0x00005653c7b0189f clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) (/work/llvm/install/bin/clang+0x59f689f)
#21 0x00005653c7c86577 clang::ExecuteCompilerInvocation(clang::CompilerInstance*) (/work/llvm/install/bin/clang+0x5b7b577)
#22 0x00005653c56e16ea cc1_main(llvm::ArrayRef<char const*>, char const*, void*) (/work/llvm/install/bin/clang+0x35d66ea)
#23 0x00005653c56de061 ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&, llvm::ToolContext const&) driver.cpp:0:0
#24 0x00005653c7940329 void llvm::function_ref<void ()>::callback_fn<clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const::$_1>(long) Job.cpp:0:0
#25 0x00005653c6e6714b llvm::CrashRecoveryContext::RunSafely(llvm::function_ref<void ()>) (/work/llvm/install/bin/clang+0x4d5c14b)
#26 0x00005653c793f890 clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const (/work/llvm/install/bin/clang+0x5834890)
#27 0x00005653c78f9f28 clang::driver::Compilation::ExecuteCommand(clang::driver::Command const&, clang::driver::Command const*&, bool) const (/work/llvm/install/bin/clang+0x57eef28)
#28 0x00005653c78fa1e7 clang::driver::Compilation::ExecuteJobs(clang::driver::JobList const&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&, bool) const (/work/llvm/install/bin/clang+0x57ef1e7)
#29 0x00005653c791b367 clang::driver::Driver::ExecuteCompilation(clang::driver::Compilation&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&) (/work/llvm/install/bin/clang+0x5810367)
#30 0x00005653c56dd76e clang_main(int, char**, llvm::ToolContext const&) (/work/llvm/install/bin/clang+0x35d276e)
#31 0x00005653c56ee447 main (/work/llvm/install/bin/clang+0x35e3447)
#32 0x00007fac3cc29d90 __libc_start_call_main ./csu/../sysdeps/nptl/libc_start_call_main.h:58:16
#33 0x00007fac3cc29e40 call_init ./csu/../csu/libc-start.c:128:20
#34 0x00007fac3cc29e40 __libc_start_main ./csu/../csu/libc-start.c:379:5
#35 0x00005653c56db8a5 _start (/work/llvm/install/bin/clang+0x35d08a5)
clang: error: clang frontend command failed with exit code 134 (use -v to see invocation)
clang version 19.0.0git (git@github.com:llvm/llvm-project.git 79ce70b8033815b6abd3a9a5cc2335de70f1aaab)
Target: aarch64-unknown-none-elf
Thread model: posix
InstalledDir: /work/llvm/install/bin
Build config: +assertions
clang: note: diagnostic msg: 
********************

PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
Preprocessed source(s) and associated run script(s) are located at:
clang: note: diagnostic msg: /tmp/file000054-374357.c
clang: note: diagnostic msg: /tmp/file000054-374357.sh
clang: note: diagnostic msg: 

********************
```
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzkWl9z2yoW_zTkhbFHAv19yIPixLe9024yTe7eRw9CRzYbCbyA0uR--h2QbEuOk9bZ7u7DdtKJDYfDj_MfTpgxYi0BLlF8heLrC9bZjdKXylgmJdPVRamql8uHjTCYqwowZ50Bg5nEzBjQViiJayaaTgMWEtsNYLMF3jXMiifAjWIV3jBdgRRyjbfMGEQLFFyjoEBJ0P_w_vuTEhWulUIkcx8RyRG9Gk2VTB-m8GrFdLsSEpEMEfIXQ4S4YZReDTz69Ril10fbDV9PDpIII7L8rvQjIsumeWoRWQppLGsaRJal227JGybXeDazTK_BInrNmOabJJrNpJIwg6bGs9YNuSndPuXzeMYQuTIt4BnHtWggCIIgjuYcz25DPGtHEps5ic32Euth-R0RLV5jc79mW63-AdyORkWJyPKhx0eWReHxHT7d7_ZT8tNupznfbhEtSEjcRqVSDUYkY1LJl1Z1BkvWgtkyDl6uBaLFO8x6ApCV-VPYzULJaqGk1apZNuo7IpnH6Wm-Mr4REq6YEfyqUfwRI5IgssDvkxRnUQ1IF4uetMdTQb9VjrmSxrpTF3uTRknAJGte_oIrzSTf7JbMjfgLeuPCiF4jeo3Dnk2CESGdfJTqu8SOHDOt2QuulW6Z9daZek-Bat5r9e7LTXF_g01XtsJihstujTVslbbYKryxdut9hSwRWa6F3XTlnKv2Td0LYzowiCwxkxUWkjddBd4huWZmg0vGH632ClzgrYatVhyMgQob1el-2K1kxigumIUK605iw7XY2gHyvWX8EVddu917cTDHd1qtNWsx0-uuBWnNSVP937tROMeILkDViN7gLdMGNGYWg6ywqj3Dno7Msf_nbWQNErS37n6SDpPfOrkPaRiRdNlJ7k3nzg18ZZKtQTudK4lbVXWNM7d0jBqRdBBr9AbPwW4PEVXJ42Dab1DvNkckRVHgI2Xa88aI0AAHz37XJKY8gToOsnTkOubF9B_utJDW6_ihN5SRo2r2faWM1cDawauEtN4NnDf8jK4RuQqeowpYkKUuiOzhhUfwCKdwCt63Tt6LtWTNJyarBrTZOeK5CFJOYYKATBEkaRRkeOHc5htw9QT6ZbIxItlw-AmNi3HwbIdIGvj_-y3osEVaM045j0hMggF5H66fs2SVRLNGyO55tpZdP8HnRs2THrhbMoEdTXnmSV5zvFpt7UYDq1aPomlWot024LyyN585Iku5tU4wY7I5R7SIIkSLNDnwj3-Gv7SgJWve5ZxmiBbhSBrJKc7jZe-yy_IjdumxcKM0wWvjdeY59R8RWc79txdTwdbFyq0y4hmRpWbCgOdNUkSLkQyyKWuSpTXFrHRR2rOyVa8-P9SjC92JDxzyVxzCEq9ks3IxalWploleL0L647rh1qw569mFYeog5bsKhYbBlCHNIU_OMyW_ZG9KjufEB-OaJHFFz3QsCmEZV3TCdupYUUCyNHidtHex824oD2mhO3krd8OTOHQYTD7g-6ROszSYQKQTiHlVRpCPIC7vHKpdPP-PgsuqIIJ8Ai6aggOaJeFPgPvqE8600BqGPgYsy5JwAiw-llqd8xGwBtaMvwxZ5QDxc7tt9jB_IbygzvkEXjKGlyZ1wEmFd2U0osVNK-wV448gq9vObjuLSDaavhZsLZWxgpsbuRYShpQ3IvkErAJ9D65Cud06pZuhkHxF6uqI30D-gKov139A9IXJ9SmSgyDvrRZy_Q3qo_J4kG9xxHAQQjGY7XjJZ2l1Z8QTfIN6Ie2d1YguDtNP9eCrS9HA_Yux0CJ641gYW_UznRT_7GC1PVrpSontdy0srHYFxWhRBTXrGruqoAELP1hIb4Y9Xx9poaTpWpesi_NtKo4h5qSa2FQ6sak0TIOcv7dvbya-YnjQTJq-gPtDiiNjK-4fhsrhQ-YfJwEPjsw_G0PNkyCN83QM9c4Vv8X9wxTIPbRssCd3_zv8PhdSGtU8ztMJpHwivTLP4ioYQ1pqJ4O9JfZe-gy8s_ChMi9mWRVXk1BPgimGIMzyeuqo7VY0oD87rpLDBMXORbK3QX9IfXmdZHk9wTlJxinPkjidqG9AdID7pDh7je7VcT7kCWVaxulEl2SS1eMEwgQY5jxcuVJmEtYLdwd2wYgu-IbpXcwqdl47GSML3L_ufAAmjaskATaBSacwKwiSEO9ktwgfvG2PwN63rGn-DtyqIVGdwHwUbR2PwXlH8TjHlRZPoF_fBBysSU5P8yigJPcHH_HdXehW2svOz-7etG56Es6axt3pV7V0SA9q7_ceTGARLlTbMlkde9RJHe2DsPI5hjWT8HtILfuwu1-wWvHn5zDsv5TMCO5CtH8K8lKcELuBldVMWLObPmLHmsaZtNKjeUdSHIJSMX668Q8l0Sr0RFmjnFXk-HdVnlZBfHzfC6NyJP1Tt7rDFZTV0LxMJPi-tj5wQ415GJUTW54WNDmts3wSPv_vlH5uGMtolOXTdDBN6Fmd1yR7U6Y-lrJXuWkn6EngPVroCN4q6N4hLSa5-IPHTgHq3hL3x86Ojs1CSM899u-qNG-f-XdVfhHGvlWhvgqzewvYMuGU7x9Xfl5Mg5n8CmHVIUxT3bRsycOSJm8K63r0eZKiT-Tmt4T8XxTW2ZVAFgY0mYhn-rIYJ1WVJtBD2dUCO3g-HBSDM_84gZ6d_UmawARaeFSkQBSl2L-1nMsbaBRNj02OnnTyKg_watWI0kVApu3KZefV_mWHm-7129PwunVq0XyDaBH7R7PksCs93hWiAPs1Qgp7vFH_0XGfee79YxJxTMkhFR6_IfZMJ0c5dYqTzGmaO9gH3vGRdZQZi3HP9XwFBxmL90rYd8RAa5cvit7ocD0U5JgPdt93XPB3YTcYnoXtu5ghjRyAzgCePWGrsAHAYlRGj7fBT6CNUBKH-TyYB2vhwa-FRVEw6svQ4kRfZu6o05xDGpRZQGkWxmXCyoqynMWcOxlVkAZ1yBg7JPyhc0cLvOuJDI2lfWtkoPPvorhVFTSOun_N9FOfe1FCdS30T7Rj_JqrTjQ-UtRi6DZe7Zu85kjuUrm7eYGr_UsJbk2_alD_v_EzatAOTbLi4aFYfMIPn27w8vbLl9s_P__tN7z8_OXmHj_c-uGrP37D327ubr897FtTd6eaXJlx4eXNRteeQAP21QhUmNk9y585P1nadovI8tDrmdE0onE657-Cidmcq4pfpZBdr_yiuqRVTnN2AZdhGmZhSAkJLjaXVU3ikjGaE57EKeG0TuqQJCyjUcKTjFyISxKQKEjCMKRRQIK5K8tqqKM6rSsWVCGKAmiZaObOSudKry98W_Myj8Mgv2hYCY3xf6pASNk_txwa0b7HukCE-H7nTMnZE2vcdZKg-PpCX3q_LLu1QVHQCGPNYRMrbOP_BGLHKr4eNYN98Lj_euOt5r0240Wnm8uPN277Qz5dkn8FAAD__4s1G1o">