<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/112000>112000</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [clang++] Assertion `!isNull() && "Cannot retrieve a NULL type pointer"' failed.
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            clang
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          yijan4845
      </td>
    </tr>
</table>

<pre>
    **This testcase is generated by a fuzzer.**

Compiler Explorer: [https://godbolt.org/z/8jf36n54q](https://godbolt.org/z/8jf36n54q)

This invalid code will crash on both Clang Trunk and Clang Assertion Trunk, it seems that this goes back to clang-12:
```cpp
static const int test_in
    __attribute__((type_tag_for_datatype(test, int))) = 42;

void test_bounds_index_ptr(void[10], ...)
 __attribute__((pointer_with_type_tag(test, 1, 2)));

void test_bounds() {
  test_bounds_index_ptr(0, 42);
}
```

Stack dump:
```
clang++: /root/llvm-project/clang/include/clang/AST/Type.h:961: const clang::ExtQualsTypeCommonBase* clang::QualType::getCommonPtr() const: Assertion `!isNull() && "Cannot retrieve a NULL type pointer"' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script.
Stack dump:
0.      Program arguments: /opt/compiler-explorer/clang-assertions-trunk/bin/clang++ -gdwarf-4 -g -o /app/output.s -mllvm --x86-asm-syntax=intel -fno-verbose-asm -S --gcc-toolchain=/opt/compiler-explorer/gcc-snapshot -fcolor-diagnostics -fno-crash-diagnostics <source>
1.      <source>:8:30: current parser token ')'
2.      <source>:7:20: parsing function body 'test_bounds'
3.      <source>:7:20: in compound statement ('{}')
 #0 0x0000000003ba44f8 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3ba44f8)
 #1 0x0000000003ba21bc llvm::sys::CleanupOnSignal(unsigned long) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3ba21bc)
 #2 0x0000000003aef418 CrashRecoverySignalHandler(int) CrashRecoveryContext.cpp:0:0
 #3 0x00007d0120242520 (/lib/x86_64-linux-gnu/libc.so.6+0x42520)
 #4 0x00007d01202969fc pthread_kill (/lib/x86_64-linux-gnu/libc.so.6+0x969fc)
 #5 0x00007d0120242476 gsignal (/lib/x86_64-linux-gnu/libc.so.6+0x42476)
 #6 0x00007d01202287f3 abort (/lib/x86_64-linux-gnu/libc.so.6+0x287f3)
 #7 0x00007d012022871b (/lib/x86_64-linux-gnu/libc.so.6+0x2871b)
 #8 0x00007d0120239e96 (/lib/x86_64-linux-gnu/libc.so.6+0x39e96)
 #9 0x00000000068522f6 IsSameCharType(clang::QualType, clang::QualType) SemaChecking.cpp:0:0
#10 0x0000000006874b13 clang::Sema::CheckArgumentWithTypeTag(clang::ArgumentWithTypeTagAttr const*, llvm::ArrayRef<clang::Expr const*>, clang::SourceLocation) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6874b13)
#11 0x0000000006896068 clang::Sema::checkCall(clang::NamedDecl*, clang::FunctionProtoType const*, clang::Expr const*, llvm::ArrayRef<clang::Expr const*>, bool, clang::SourceLocation, clang::SourceRange, clang::Sema::VariadicCallType) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6896068)
#12 0x0000000006897806 clang::Sema::CheckFunctionCall(clang::FunctionDecl*, clang::CallExpr*, clang::FunctionProtoType const*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6897806)
#13 0x0000000006c44781 clang::Sema::BuildResolvedCallExpr(clang::Expr*, clang::NamedDecl*, clang::SourceLocation, llvm::ArrayRef<clang::Expr*>, clang::SourceLocation, clang::Expr*, bool, clang::CallExpr::ADLCallKind) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6c44781)
#14 0x00000000070cdfaa FinishOverloadedCallExpr(clang::Sema&, clang::Scope*, clang::Expr*, clang::UnresolvedLookupExpr*, clang::SourceLocation, llvm::MutableArrayRef<clang::Expr*>, clang::SourceLocation, clang::Expr*, clang::OverloadCandidateSet*, clang::OverloadCandidate**, clang::OverloadingResult, bool) SemaOverload.cpp:0:0
#15 0x00000000070ceeb4 clang::Sema::BuildOverloadedCallExpr(clang::Scope*, clang::Expr*, clang::UnresolvedLookupExpr*, clang::SourceLocation, llvm::MutableArrayRef<clang::Expr*>, clang::SourceLocation, clang::Expr*, bool, bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x70ceeb4)
#16 0x0000000006c46228 clang::Sema::BuildCallExpr(clang::Scope*, clang::Expr*, clang::SourceLocation, llvm::MutableArrayRef<clang::Expr*>, clang::SourceLocation, clang::Expr*, bool, bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6c46228)
#17 0x0000000006c4878c clang::Sema::ActOnCallExpr(clang::Scope*, clang::Expr*, clang::SourceLocation, llvm::MutableArrayRef<clang::Expr*>, clang::SourceLocation, clang::Expr*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6c4878c)
#18 0x00000000066b40cd clang::Parser::ParsePostfixExpressionSuffix(clang::ActionResult<clang::Expr*, true>) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x66b40cd)
#19 0x00000000066aca91 clang::Parser::ParseCastExpression(clang::Parser::CastParseKind, bool, bool&, clang::Parser::TypeCastState, bool, bool*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x66aca91)
#20 0x00000000066aebe7 clang::Parser::ParseCastExpression(clang::Parser::CastParseKind, bool, clang::Parser::TypeCastState, bool, bool*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x66aebe7)
#21 0x00000000066aec79 clang::Parser::ParseAssignmentExpression(clang::Parser::TypeCastState) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x66aec79)
#22 0x00000000066b3699 clang::Parser::ParseExpression(clang::Parser::TypeCastState) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x66b3699)
#23 0x0000000006736429 clang::Parser::ParseExprStatement(clang::Parser::ParsedStmtContext) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6736429)
#24 0x000000000672c7fc clang::Parser::ParseStatementOrDeclarationAfterAttributes(llvm::SmallVector<clang::Stmt*, 32u>&, clang::Parser::ParsedStmtContext, clang::SourceLocation*, clang::ParsedAttributes&, clang::ParsedAttributes&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x672c7fc)
#25 0x000000000672d710 clang::Parser::ParseStatementOrDeclaration(llvm::SmallVector<clang::Stmt*, 32u>&, clang::Parser::ParsedStmtContext, clang::SourceLocation*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x672d710)
#26 0x000000000672e5e5 clang::Parser::ParseCompoundStatementBody(bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x672e5e5)
#27 0x000000000672fd3a clang::Parser::ParseFunctionStatementBody(clang::Decl*, clang::Parser::ParseScope&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x672fd3a)
#28 0x0000000006642b93 clang::Parser::ParseFunctionDefinition(clang::ParsingDeclarator&, clang::Parser::ParsedTemplateInfo const&, clang::Parser::LateParsedAttrList*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6642b93)
#29 0x0000000006677f9d clang::Parser::ParseDeclGroup(clang::ParsingDeclSpec&, clang::DeclaratorContext, clang::ParsedAttributes&, clang::Parser::ParsedTemplateInfo&, clang::SourceLocation*, clang::Parser::ForRangeInit*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6677f9d)
#30 0x00000000066368de clang::Parser::ParseDeclOrFunctionDefInternal(clang::ParsedAttributes&, clang::ParsedAttributes&, clang::ParsingDeclSpec&, clang::AccessSpecifier) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x66368de)
#31 0x000000000663709e clang::Parser::ParseDeclarationOrFunctionDefinition(clang::ParsedAttributes&, clang::ParsedAttributes&, clang::ParsingDeclSpec*, clang::AccessSpecifier) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x663709e)
#32 0x000000000663e833 clang::Parser::ParseExternalDeclaration(clang::ParsedAttributes&, clang::ParsedAttributes&, clang::ParsingDeclSpec*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x663e833)
#33 0x000000000663f71d clang::Parser::ParseTopLevelDecl(clang::OpaquePtr<clang::DeclGroupRef>&, clang::Sema::ModuleImportState&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x663f71d)
#34 0x0000000006631c3a clang::ParseAST(clang::Sema&, bool, bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6631c3a)
#35 0x00000000044fcb58 clang::CodeGenAction::ExecuteAction() (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x44fcb58)
#36 0x00000000047b6459 clang::FrontendAction::Execute() (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x47b6459)
#37 0x0000000004734ffe clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x4734ffe)
#38 0x000000000489bf4e clang::ExecuteCompilerInvocation(clang::CompilerInstance*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x489bf4e)
#39 0x0000000000cda85f cc1_main(llvm::ArrayRef<char const*>, char const*, void*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xcda85f)
#40 0x0000000000cd256a ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&, llvm::ToolContext const&) driver.cpp:0:0
#41 0x0000000004540829 void llvm::function_ref<void ()>::callback_fn<clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const::'lambda'()>(long) Job.cpp:0:0
#42 0x0000000003aef8c4 llvm::CrashRecoveryContext::RunSafely(llvm::function_ref<void ()>) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3aef8c4)
#43 0x0000000004540e1f clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const (.part.0) Job.cpp:0:0
#44 0x000000000450675d clang::driver::Compilation::ExecuteCommand(clang::driver::Command const&, clang::driver::Command const*&, bool) const (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x450675d)
#45 0x000000000450784d clang::driver::Compilation::ExecuteJobs(clang::driver::JobList const&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&, bool) const (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x450784d)
#46 0x000000000450f175 clang::driver::Driver::ExecuteCompilation(clang::driver::Compilation&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x450f175)
#47 0x0000000000cd772f clang_main(int, char**, llvm::ToolContext const&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xcd772f)
#48 0x0000000000ba7084 main (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xba7084)
#49 0x00007d0120229d90 (/lib/x86_64-linux-gnu/libc.so.6+0x29d90)
#50 0x00007d0120229e40 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e40)
#51 0x0000000000cd201e _start (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xcd201e)
clang++: error: clang frontend command failed with exit code 134 (use -v to see invocation)
Compiler returned: 134
```
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzkm19z2zYSwD8N_YKRhgT_P_hBlqNeem7ji9zeowYEQQkNBbAA6Mj99DcASJugKMXuWZler-NmJBJY7P52sVhCIJKSbhkh115848W3V6hVOy6un-hviEVZFF8VvHy69uDCg4uHHZVAEakwkgRQCbaEEYEUKUHxBBCo2j_-IGJuG3v-red3_y75vqE1EeDDoam5IMILF8CLb3ZKNdILFx5ceXC15WXBazXnYuvB1R8eXGW_VWHC4uh3L771YPb65jAfDm_0puwR1bQEmJcEfKV1DbBAcgc4AwVXO7CsEduCB9GyLwCxsvu-kJIIRTmzdzy4BFQBScheArVDCigte8uJBAXCX4DiAOuOswBqRa0SiW__cNPYK1IhRTHAnEkFKFMG6oYyexcAADYbpJSgRavIZuPBzIOZemrIRqHtpuJiUyKF9AV9nUhl9GJK223-gBfeggh64c2QwyOnpR2q4C0r5Yaykhw2jRIezPRNL74JfMN6Cebz-TPGKXUaTpkiYvOVqt2m122gTqD_gc8afUMVIzMHXnrTMzilp6_lRtARmd6OSA-HWivtmLLdN8cesV-Nxzx4o_90YMKV4Fx5cFXXj_tZI_hvBOuvXbsVZbhuSzK4slg_eHD18NSQ-c4LF3kSaEHWv7ZNuPDCxYeD-leLaqkbLvl-z9kNksSDi2Ej3UI3sN-2RNmW98Z6DcmI1fJfglObAgMqf27rukcJEw8mwINwiRjjCgiiBCWPBCDw8y93d0D7DHRe9CD0YAoqRGtSzi2V-7sPi_UHINtiTxVAoGi3QJCGC6WjfDQXqdq1xRzzfUftGB6VsiXSgyszuzqEQO1INw_19FECYaL92wjSCI6JlKQEkrfCXtY9kZQcU5N0RMuAxII2an7S1f7c8_N7wbcC7QES23ZPmJKdm3lj3Nplpxnps1Pn2BnqAcuZstN_VVD24ncdMWC2Lb8iUc0iMNuCGddyUdNo6a1qWjWXYLbXLMBsdsiSGZL7mXxiCh288FbDr8GsYnz2SETBJdH3wWwNZrMtxjPFeY13iDIvvD2rr24sGWrkjiswqzCvuZiVFG0Zl4piaccwpJ3LXrjs8IYfLLBAA3Muh4vMCxehb0K6FYIwBRokJBFA8S-EAQ-mZpKnVgKckJB64QIaCbonZVtQtQyb2NULjBbhZINOVHhWFGVAs9BdgE6pRPsWmPhPdSZJbzvNbErxYOgD_-D3_4UFiqIqAyZezWSTT9J-uBeUKRNNDzYks5dGAn3dcKkEQXszx_rMawd-l5jy4I1_6NRz9A9G-sOgwFP6L2uCWNt8Ymu6ZUinhJaZdb4ENdejXEJbrYyjLXS0RaSKggwsdQx-Jpg_EvFk1fsHYmWtB806kk6bJWeKHNRcr57hwjf_Pw8RdkOkpR9AH0Ywhn5nWk0LD64OWbJJollNWXuYbVlrb-C55PPEKG66OGpHrsw8ySsMGrUTBJWbL7pyeNMApr8zQDxWOkoTsJWGxVuVj9LEkZ24smGWViFAhc7ab5JsOjqS0yPJQfFmmUHhyMxcmWFO8uRtMk0XR2Y-jLokiyGsEvBRrtGeLHdIPNiqaWrBhcvJdRjmYE32aLkj-Atl2-NA1BPTd0dNoyIIh9K0hG5uajmLbiX6N1U7PciDqZ0G7ScaLJQS3eKvK-zlYOIvhEBPn0nlhUun3GgGHcIPIwPXJqnecYz0BL9ATugwvFTjMAwCl1Oe-Ek2zQlrTktkCppBg5_RnpS3BNcdhMGtVbek3AuuuIbm0DoJ5k-SLDivv0F04uZnxLbjSHux-VckKCop1mb3sffuTjHMHafAkVPSzE_OBG_P-dg5_Z1p_-j2muTbPHcJAtpAh0DoEMBRlGbBNIGbltblZyJ5_UjKF4uyUbQc23gmcI_j5jUB-apJfRT33egT0ftsjB339k5f-Cdl5SV8YBE7PoiGPkh9XFYIgRVlVO4-PRJRc1SeIm7cY4ux4VXM9RSamv3HV39honPqHedf2ma61TlP_dQqVNTkQg4bXO1pLBEraYkUWZOJJHfUqtuXmW5F2fYzkW2tXoLDLnt9g-llLx75jJAiOjNvvunHv5PH-inW03znKdTRdqZQMkpjCYQnVlfjjndwwt8Wb0fPwZuO8GZphqfxLrD6xP6H8V4Cp6bl4MwcnEkR-bgcanNvNhkGn--5VBU9aC2JlJSzdVtV9DCqnE0l0SWzSSZwCZRozXbCBQy1djiGuo8kCcIoD84aukRSvVjp2jdsrNuZ73aZHk-K8YI47Gr2IJFUa2WWhnHXi8SAtXyIBvojNKQg6WXR_KV4aHMdHsGYB07zszwW5gcc_aj4GiojKy9iEk5zxyQ4muZhkp836a9hiNHTMcR9SEjDJILfNmTdb0yetsV8Ltdqr7q9rkvYY9V17IlceyBOK3zWnmdbPgn9IIOEWUMWlSJi0f8-JJ3N0vUe1fWvBCsu3Fysre1ycQhbk4rPZasJRGdXtfE6avsPlZwcbdziAm4wlB03xCM3lGng_wk3_FW4X4KZRuIwS0bMSEzi88tG90PBM7sbXj55MLtU9WhVcnRORzpXZYjO6tzviox1HvSZ3k84jhhbc14oorUhjqWjwi6CRR6-ytJbUlFG1WTmp2zbRzsXr4naB7JvaqTIR1bxfj_pXK87pMhLFrijF9t_skAcYqMKMU2r_HwprFH8IHjbnAS1bgg-NvgF4fSEfmWiPAl6YhfmNam5k7fiwmyQfmT0YvAN2yH8cFSDhklWkm_C_yQGQfuRKSLsD23__aJz1OKsQxcYEyn1PVpRTeQCyAwRB9moTA1TP_82sm6hcsidnO7vDm4cd98FnObigBsVwyHJwvOp8cPBhpa70n8HWJfAoa11cIQjHFUanM97D7y5I4-ktgvfkMOnBv3ekns1KnieE6XZIpkod142bX7iZVuTj_uGi_654iIrpjXT4RCNOAR4ojYwp4xObHtfejfMquTo7NStUVThInY2G5e8JD8QZvdj-h0YgltFukv9QaV31bRTxNHUqRajtEii2HlwWwm9FrJyQtULKWl1cJRMXSXDqKqIi9MO-5FJhRgm00RPW3WRWO70dAxxqr8oy4sqIu4mo1H5xZ7H59ogO2fvRZJSp59jgFOM-bhEWVwBjIPNHlH3MWu497pDxz-2O9fgEphDlhexw2o5NCPyR2bAOEGgh78MHkymmH5m_Lhv6kmbEncLWsvo6shBhZ2DUtBHIiZ_Moqc0iGKIz-DuQEzkNsfDtsIw9bctTPRngHzwgVGdV0g_GVTMTfh27G7GFoGS77fI1aOJ_WkD6Xq2vFGj440gwEfJcyvZGYZsQ5-7rDZ4MMhCOyXAkmKN9I07yg6jfWFjRKIKtnfHolDda3nhH147-7rJovRhmR_FFT_wbRG-6JE5sxbjwpm_XmvH3kx7Y-jU1oZjgaumDqLZe98btkaVaR-cnCed90FDp5ZjZ3ID8chRoIK_D-HiIY-b5BQc_9sLEQuOD9J4_IkOOM7dLRi9jSdZD7qqBuceiQ_03ThFDsD2951RbBmOwEVj7ikWfRmLj_yQp6G8iMv7qhUDpRzqfk5DhpEdQiYk5Ov59gFy3ehqWE5NJMRzSpI41Oa3w4-O4XDRMVwygvfkeb71ycWj8MvHS3saQq79NZXKL3-Jq0sjg65nVq2370m0Zo5qju1oV-g1M8ioJV-77GtaGfsfHSANS_zN54VNl2GMmN_LJNEPthsdLeNVEiozcC4V49CIneUYFzJ-QEBVv77-0wLfx59eDtcACIENy9vmeug6p4wAO5mhH2BBHylagfIgSr7tlUQRlrNVhIwewSKA0kIoIOyPx-9JiaIagUjek7qzqOXdq7K67DMwxxdkesghVkSx34cX-2u07yIcApTFBZljGAZ69I-S_IiSiqUx-EVvYY-jAI_CIIwTsN4XsUkKnEYlCTIUhxEXuSTPaL1XM-VORfbK_PaynUQQN_3r2pUkFqaV-Ug7NBAL769EtfmbZei3Uov8msqlXwRoaiqzft1Q5jx7cVe37lqRX3959_P6Wx9vIb_CQAA__8PiS18">