<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/112142>112142</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [clang++] Attribute after last parameter at llvm::VerifierPass::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&)
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            backend:X86,
            crash-on-valid,
            clang:frontend:fuzzer
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          yijan4845
      </td>
    </tr>
</table>

<pre>
    **This testcase is generated by a fuzzer.**

Compiler Explorer: [https://godbolt.org/z/K4zjYT7nT](https://godbolt.org/z/K4zjYT7nT)

This valid code will crash on Clang Assertion Trunk. It seems that this goes back to clang-14:
```cpp
class A {
public:
  void f();
};

void g() {
  void *Af = __builtin_function_start(&A::f);
}
```

Stack dump:
```
Attribute after last parameter!
ptr @_ZN1A1fEv
fatal error: error in backend: Broken module found, compilation aborted!
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script.
Stack dump:
0.      Program arguments: /opt/compiler-explorer/clang-assertions-trunk/bin/clang++ -gdwarf-4 -g -o /app/output.s -mllvm --x86-asm-syntax=intel -fno-verbose-asm -S --gcc-toolchain=/opt/compiler-explorer/gcc-snapshot -fcolor-diagnostics -fno-crash-diagnostics <source>
1.      <eof> parser at end of file
2.      Optimizer
3.      Running pass "verify" on module "<source>"
 #0 0x0000000003baa6d8 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3baa6d8)
 #1 0x0000000003ba839c llvm::sys::CleanupOnSignal(unsigned long) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3ba839c)
 #2 0x0000000003af5b66 llvm::CrashRecoveryContext::HandleExit(int) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3af5b66)
 #3 0x0000000003b9f6be llvm::sys::Process::Exit(int, bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3b9f6be)
 #4 0x0000000000cd9330 LLVMErrorHandler(void*, char const*, bool) cc1_main.cpp:0:0
 #5 0x0000000003b00b83 llvm::report_fatal_error(llvm::Twine const&, bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3b00b83)
 #6 0x0000000003b00ce8 (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3b00ce8)
 #7 0x000000000358eec0 llvm::VerifierPass::run(llvm::Function&, llvm::AnalysisManager<llvm::Function>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x358eec0)
 #8 0x0000000003e452ee llvm::detail::PassModel<llvm::Module, llvm::VerifierPass, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3e452ee)
 #9 0x000000000355ede0 llvm::PassManager<llvm::Module, llvm::AnalysisManager<llvm::Module>>::run(llvm::Module&, llvm::AnalysisManager<llvm::Module>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x355ede0)
#10 0x0000000003e54c5b (anonymous namespace)::EmitAssemblyHelper::RunOptimizationPipeline(clang::BackendAction, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>&, std::unique_ptr<llvm::ToolOutputFile, std::default_delete<llvm::ToolOutputFile>>&, clang::BackendConsumer*) BackendUtil.cpp:0:0
#11 0x0000000003e5823d clang::EmitBackendOutput(clang::DiagnosticsEngine&, clang::HeaderSearchOptions const&, clang::CodeGenOptions const&, clang::TargetOptions const&, clang::LangOptions const&, llvm::StringRef, llvm::Module*, clang::BackendAction, llvm::IntrusiveRefCntPtr<llvm::vfs::FileSystem>, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream>>, clang::BackendConsumer*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3e5823d)
#12 0x00000000045027ee clang::BackendConsumer::HandleTranslationUnit(clang::ASTContext&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x45027ee)
#13 0x000000000664064c clang::ParseAST(clang::Sema&, bool, bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x664064c)
#14 0x0000000004502bd8 clang::CodeGenAction::ExecuteAction() (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x4502bd8)
#15 0x00000000047bc4d9 clang::FrontendAction::Execute() (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x47bc4d9)
#16 0x000000000473b07e clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x473b07e)
#17 0x00000000048a204e clang::ExecuteCompilerInvocation(clang::CompilerInstance*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x48a204e)
#18 0x0000000000cdb81f cc1_main(llvm::ArrayRef<char const*>, char const*, void*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xcdb81f)
#19 0x0000000000cd352a ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&, llvm::ToolContext const&) driver.cpp:0:0
#20 0x00000000045468a9 void llvm::function_ref<void ()>::callback_fn<clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const::'lambda'()>(long) Job.cpp:0:0
#21 0x0000000003af5aa4 llvm::CrashRecoveryContext::RunSafely(llvm::function_ref<void ()>) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3af5aa4)
#22 0x0000000004546e9f clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const (.part.0) Job.cpp:0:0
#23 0x000000000450c7dd clang::driver::Compilation::ExecuteCommand(clang::driver::Command const&, clang::driver::Command const*&, bool) const (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x450c7dd)
#24 0x000000000450d8cd clang::driver::Compilation::ExecuteJobs(clang::driver::JobList const&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&, bool) const (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x450d8cd)
#25 0x00000000045151f5 clang::driver::Driver::ExecuteCompilation(clang::driver::Compilation&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x45151f5)
#26 0x0000000000cd86ef clang_main(int, char**, llvm::ToolContext const&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xcd86ef)
#27 0x0000000000ba7c44 main (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xba7c44)
#28 0x00007e790ba29d90 (/lib/x86_64-linux-gnu/libc.so.6+0x29d90)
#29 0x00007e790ba29e40 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e40)
#30 0x0000000000cd2fde _start (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xcd2fde)
clang++: error: clang frontend command failed with exit code 70 (use -v to see invocation)
Compiler returned: 70
```
</pre>
<img width="1px" height="1px" alt="" src="http://email.email.llvm.org/o/eJzkWt1y47YVfhr4BiMNCVIUdeELWbaaTXcbz9rJtL3RgOChjCwIsACotfz0HYCURHDlXadjNTNtxvHKIIDzne_8ghA1hm8lwDWa3aDZ7RVt7ZPS13v-O5Vpns6uClXurxFZIrJ8fOIGWzCWUQOYG7wFCZpaKHGxxxRX7csL6Gk3GUW3KOp_r1TdcAEa3z03QmnQKFliNLt5srYxKFkiskZkvVVloYSdKr1FZP2CyPqv6cvv_3icy0c0u0Ukf_t0shiK97h3VPASM1UC_sqFwExT84SVxCtB5RYvjQFtuZL4UbfyyxR_sNgA1AbbJ2qxdVtsFRhcUPYFW4WZWzaJU4enk5VF3Q9rmm6ECWoMXmI0v-kGmrYQnB1XYLxTvMQVIrlDnPSz0Pz29Nn_9tO23bTTbv1yRJbLCqPkFm82RcuF5XJTtZI5ZTbGUm39wmzp5CbLaiwqBD8U-2CdrmVbN98q2f25tFbzorWAaWVBY0GNxQ3VtAYLGpG419tqjNJo88-_xcu4utt1oxW1VGDQWnl_8B8wl55hkKUbu9HqC0hcq7IVgCvVyhKRFWben6g3Fy2UtlAeZd1_vFs-3GHTFjW3mOKi3WINjdLWWW3kQtw-tcWUqRqRtRC7wz-TRqvfgVlE1tyYFgwia0xliblkoi0B2yfoHciBtZoycLgaDY1WDIyBEhvV6m7YraTGKMZ9rOhWYsM0b-z0VZ6jKYoW91ptNa0x1du2BmmNDxuyVo1DxvqgmsAhqMi6c0p68GUzsc6ZEVkXXB4eI3KDyA2ebMuvVFeTFE-2eKLcvrRp3O6tbVo7NXhSOy7wZPKcZxNq6onZS0ufUXLLpQWBJ5VUkx3oQhlwz_HkAU8mW8YmVinBniiXKLn9Ll432UjamCdl8aRiSig9KTndSmUsZ6aT4ZkOhlGy6ulN7jrCYkcYSlagKpTcOR80oDG1GGSJVYUrLqCbSdzMXxrLa_4CuhtL3NjnVkout7hxUYsI2YHm1R4R4rJE74KIkEA2IX0sIpJEOHqODv8lBaVZmWPvVT7wzN50H-41l9bb_LFznPw0SdOvG2WsBlojkjnn4dL6qHcx_C6WR-Qmeu7hHROlwx-P8OfJgp3DvxJAZdv8Ih_4VlKBSN5KX0RKLJSTcgm0DkyAlgRoaTUrsmyAduV85jMwtQO9Xylp4dl2T36ishRw98xdXrwQux2cAG8SsruosgLOe4dPIN0fQ5QrXCglLsKuBxOgTYdoI1YukiTCHz_-9unOZemOQo1I7iqQr_crzJ6oxkxJY_uBA1zG4k1NuZy6wpgsI___UdIs5CWKijwZ8NKl7o2vFZuuVgzj5fErl3CQml2UJI8sICkbQ2eQX0IugzBQ54HcWQ7AogFlv7m8xUHf04Mb6VYGrK379qCn7PRgKanYG24-UUm3rk1bnVnk0l52CYo7TQJV80BVSGcEhlFTgqVc9IFDjfmkShAB6k8-b4daBgS9Wf9-p-TO_5yj9SDrD5B62vQylHaMBZQuQu-ZQQlD7_E0vo70f5uujo3T8YEkcVjVYZayWeHkUqnkvlatwZLWYBpfyRd92q65dQeKuhD7n0A0_sCDkuXnVvaNh-9d73kDgkvXAXRI_KSbrv1d9hG6wsaW3ZNW8n-1sGlsSIrrGZqvmlvYHDqHwaISKtoKuylBgIUfLOys1VnkR2IflRK_-F5xzTvHeIvM0aqhwG85WClp2tpZcums3Y_-arn4tpY4W8UjW-UkKYfbOrv0m3QYQuZvTx3mndx6w4yB_QS0BP0AVLMnZ0olTVB9BlNXqoS_gPzBrEeqt2B_MOkjldtzU060PljN5fYzVOHwIcSW5_k9-dhpyQdpdWv4Dj5DtZL2fmT1XdXXFGe-h72x4L3mT3HTN7jMu-dT71NBggga0XQWkTnA94ANmtBHTaXpzrG_Sj7yxuXD46FvvUiy66EGugRNapalUZayoS737li1fHgMkT5ATYPu62JdWA8pwJyO-S_K_Ewc9r7et9XAWgsH988vxG4xOGA5pEGrm84LlpaLIdK1dvY-huUQ6oVAdhgCkFkIMimiOYR0dmI_SGOpdKfgc4y-rtVlfLnDGSgSdMlpTkmUBor0kE_67BSj38L_Rt-LJJYeX6BAPjqDFXlcHQ9TQSe11JruXfJPVuEprM-S45PZ8dT27np0KAM1FiM1khmh-ED-Kn70mWKgzENNhfgNmFX6Q92IszqNqp_bo8-Vg_q4wKXmO9BnewUShWkjzXK66F6onvY9vkbVntv-dWv3srZvahkVoqDsy6aSDunJbzrZvQ-t4pWqayrLcVCfteGxKCpf82l4ojmV-mMZPC7YbNjzcxx3fxTUcOZKJneYPIvBZDewsZpyaw6PR9tRIVxMKD147qYMjvfeiTrO_RJE5oLWRUkRmZ-oIvnhzdDPqjhvj3j8PofS9E3vcz638oFWIPYBnd833WVe-VCaDj2fkLGLwaLC_88u4kifNlTbafRdX0hGJZ3Ny_JV4k53AeO87tkMkvlooZvwWs_9nanL0aumo27v3EA4tQOHGrc6Zc7-MC8_q8K8TsrPqvjIjX3tlPFNaj76QUO5c4H-TeVbeRwe_y7NpiMrYDNsx2bxLK5mryG_HXwOGoczHcNrVvgvsnmBdtbTE_CXjQp7nkGf3g4dygG_TyvLPin8uGy_e0_ikAXQg94wKuicpSl2oN9bdrd1IPvQ1s1hvogKShblIurFCl4gsn7Os02WTgSX7fNkK9vuAZsaNc38pn5JsOdivCekEd5s3LLuCngzUO7NUiANpIQXXBErSVUC7vZ_f5u5zY_Sh48PV8Xugx_HVX_CwKyPiIpyASX-yu0Thmduu2v_uae5NYAnO2wVNgCYD7r-xejLChpsqyX4i-h5NLr_viqvk3KRLOgVXMdzkucJSbP06ul6xgqSRTGjKYXZnFYloVUF2SJKi0UCUXLFr0lE0jiKk3gWpySdJkmRRaSK0pLMaVUkKI2gplxMXaRMld5e-Uvo6zgmcUquBC1AGP99DUJOd-V_zzNECCIrREh3YarkxH_p4TTc55EDX75Nenlx9iFodnulr_3ld9FuDUojwY01JwyWW-G_JTK0xewWf_8rAJjaP-Fm4qrV4vo_v-rvid5dk38HAAD__6a2zn8">