<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/152702>152702</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [analyzer] UNREACHABLE executed after saying "should always be wrapped in ArrayToPointerDecay"
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            clang:static analyzer,
            crash
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          k-arrows
      </td>
    </tr>
</table>

<pre>
    Reproducer:
https://godbolt.org/z/a5T85h3nr
```cpp
struct A
{
  int i[2];
};

struct B: A {};

void C()
{
  const int &r = B().i[0];
}
```

Backtrace:
```console
should always be wrapped in ArrayToPointerDecay
UNREACHABLE executed at /root/llvm-project/llvm/tools/clang/lib/StaticAnalyzer/Core/ExprEngine.cpp:3554!
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script.
Stack dump:
0.      Program arguments: /opt/compiler-explorer/clang-assertions-trunk/bin/clang++ -gdwarf-4 -g -o /app/output.s -mllvm --x86-asm-syntax=intel -fno-verbose-asm -S --gcc-toolchain=/opt/compiler-explorer/gcc-snapshot -fcolor-diagnostics -fno-crash-diagnostics --analyze --std=c++98 <source>
1.      <eof> parser at end of file
2.      While analyzing stack: 
        #0 Calling C()
3.      <source>:10:18: Error evaluating statement
4.      <source>:10:18: Error evaluating statement
 #0 0x0000000003ff2ff8 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3ff2ff8)
 #1 0x0000000003ff0424 llvm::sys::CleanupOnSignal(unsigned long) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3ff0424)
 #2 0x0000000003f34d18 CrashRecoverySignalHandler(int) CrashRecoveryContext.cpp:0:0
 #3 0x0000762beb642520 (/lib/x86_64-linux-gnu/libc.so.6+0x42520)
 #4 0x0000762beb6969fc pthread_kill (/lib/x86_64-linux-gnu/libc.so.6+0x969fc)
 #5 0x0000762beb642476 gsignal (/lib/x86_64-linux-gnu/libc.so.6+0x42476)
 #6 0x0000762beb6287f3 abort (/lib/x86_64-linux-gnu/libc.so.6+0x287f3)
 #7 0x0000000003f4037a (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3f4037a)
 #8 0x0000000006563680 clang::ento::ExprEngine::VisitMemberExpr(clang::MemberExpr const*, clang::ento::ExplodedNode*, clang::ento::ExplodedNodeSet&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6563680)
 #9 0x0000000006568208 clang::ento::ExprEngine::Visit(clang::Stmt const*, clang::ento::ExplodedNode*, clang::ento::ExplodedNodeSet&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6568208)
#10 0x000000000656a8ad clang::ento::ExprEngine::ProcessStmt(clang::Stmt const*, clang::ento::ExplodedNode*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x656a8ad)
#11 0x000000000651f63b clang::ento::CoreEngine::HandlePostStmt(clang::CFGBlock const*, unsigned int, clang::ento::ExplodedNode*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x651f63b)
#12 0x000000000651fd28 clang::ento::CoreEngine::dispatchWorkItem(clang::ento::ExplodedNode*, clang::ProgramPoint, clang::ento::WorkListUnit const&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x651fd28)
#13 0x0000000006520091 clang::ento::CoreEngine::ExecuteWorkList(clang::LocationContext const*, unsigned int, llvm::IntrusiveRefCntPtr<clang::ento::ProgramState const>) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6520091)
#14 0x00000000060e8687 (anonymous namespace)::AnalysisConsumer::HandleCode(clang::Decl*, unsigned int, clang::ento::ExprEngine::InliningModes, llvm::DenseSet<clang::Decl const*, llvm::DenseMapInfo<clang::Decl const*, void>>*) AnalysisConsumer.cpp:0:0
#15 0x00000000060ea2be (anonymous namespace)::AnalysisConsumer::HandleDeclsCallGraph(unsigned int) AnalysisConsumer.cpp:0:0
#16 0x00000000060ebcc3 (anonymous namespace)::AnalysisConsumer::HandleTranslationUnit(clang::ASTContext&) AnalysisConsumer.cpp:0:0
#17 0x00000000066a510c clang::ParseAST(clang::Sema&, bool, bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x66a510c)
#18 0x0000000004c8ebd5 clang::FrontendAction::Execute() (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x4c8ebd5)
#19 0x0000000004c0aeae clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x4c0aeae)
#20 0x0000000004d83d01 clang::ExecuteCompilerInvocation(clang::CompilerInstance*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x4d83d01)
#21 0x0000000000dae39f cc1_main(llvm::ArrayRef<char const*>, char const*, void*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xdae39f)
#22 0x0000000000da500a ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&, llvm::ToolContext const&) driver.cpp:0:0
#23 0x0000000004a01d39 void llvm::function_ref<void ()>::callback_fn<clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const::'lambda'()>(long) Job.cpp:0:0
#24 0x0000000003f351b4 llvm::CrashRecoveryContext::RunSafely(llvm::function_ref<void ()>) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3f351b4)
#25 0x0000000004a0234f clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const (.part.0) Job.cpp:0:0
#26 0x00000000049c458d clang::driver::Compilation::ExecuteCommand(clang::driver::Command const&, clang::driver::Command const*&, bool) const (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x49c458d)
#27 0x00000000049c561e clang::driver::Compilation::ExecuteJobs(clang::driver::JobList const&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&, bool) const (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x49c561e)
#28 0x00000000049cd065 clang::driver::Driver::ExecuteCompilation(clang::driver::Compilation&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x49cd065)
#29 0x0000000000daa835 clang_main(int, char**, llvm::ToolContext const&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xdaa835)
#30 0x0000000000c5ece4 main (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xc5ece4)
#31 0x0000762beb629d90 (/lib/x86_64-linux-gnu/libc.so.6+0x29d90)
#32 0x0000762beb629e40 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e40)
#33 0x0000000000da4ab5 _start (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xda4ab5)
clang++: error: clang frontend command failed with exit code 134 (use -v to see invocation)
Compiler returned: 134
```
</pre>
<img width="1" height="1" alt="" src="http://email.email.llvm.org/o/eJzkWltz3CgW_jX4hVIXQpdWP_hBfZvJVGbWFXtmHrsQQt2sEagAOe359VsgtXWJnbU39mxtbSqJuwWc853vXDggE2P4UTJ2DZI1SLZXpLUnpa_vA6K1-mquClU-Xn9hjVZlS5kGUQ5QfrK2Me4j3gO8P6qyUMIulD4CvP8L4D1J7rLkFEkNUA5S1P2lTQNQbqxuqYVOCliuAcoh5NJCDpI1BskWRGs_cvnwtGANohzm0K0ZDT4oXsINwBnAq5FEqqSxXi7AqYYg2sJ1N2nhFKGJohHETuia0HurCWWdsYMBSholmMN0Uq0oIRFfyaOBBYNfNWkaVkIuYa41ebxTN4pLy_SWUfIIUP77b192-ebnfP15B9mZ0dayEhKHb6-VsgDvhXiog0arfzJ6-Qrw3iolDMB7Koh07ApeALy_tcRymksiHv9iGuD9RmkG8H53bvROHrlkC8d2lEdJEgMcApTffN7ltzto2qLmFhJYtEeoWaO0hVbBmUO5PbXFgqp6ADKDx41pmQMGiXRmU9GWDNoTg1QTc4LFE4d4Axvt4ocyY1gJjWp199itJMYoyoljQ7cSGqp5YxcA5beW0HtYtnXTeQEtAFrdaHXUpIZEH9uaSesgOwpV4zBRVTdcMB2wcyOU9sR43gJiDNOWK2kCq1t5D_C-4HKgdQ3wGgbH8ivRVRDD4AgD5eSSpnHSW9u0dmFgUDsWYBCcszQgpg7Mo7TkDKKt87WAQSVV8MB0oQxz4zC4hUFwpDRwbqQnwiWItt_F6yYbSRpzUhYGFVVC6aDk5CiVsZyaTofnePo4IF00wCAwtgTRlnZmrTIIok1PerQDKA8dkyDaMFWBaAcbog3TLhaZLKGqYMV9jGM37c8TFwx2ork8QuO84kl3mbICOEJwQ4RwY0MaRr2GQWuUh8j9l7m1O62VhuyBiJbYXqplzp8A5fEPrIUeDzqjy5-oqnBVZdDHcJSDKDePpvtwo7m0PsjuujDNhkmafD0oYzUjNcCpC1UuLcAr6C18l2gDeI3OPbyONAc-nIFHMY6fA78RjMi2-Ye85UdJBMBZK30ZL6FQTsVHQHVgBqh4CjWKyzCDGxeXXxhVD0w_dth-JrIUTmPWcziZs1HSsrPtqxXy_zr5US9_meKCFWmME4x6o7oaeM7SQxoHgsv2HBxl2w3QhVGL1EP2SwbA8VTgKl1VFDb2pBkpD_dciLdJ9-sH6ckcbrxM4dF4Ct4KO16mg-B0KhhnyyqCpHB1-01i_cJB7HLqvhhFS_L-MePFDkqzsdI0SaM0Q7Bb5cOaSau6T8NG1n3_gxtuf2V1wbQbAjgbLRuedxs_wLnL2ZcEC1Wy8jdVstfOu2XWl4F3T6qegoGg1YygDKPsDQRNabm1tf3fI8SZ3DdzOArRjBCSkfJ1hNx0DYcj4V1o-QhbnTWDreHU1rBKo-J5cK7bG9va1dgbZey35m72P62FovcTk592C1-T_4sUeCMHCvCcghK_EP9zCkpuGmLp6U-l7z9ZVk9JeG249_2l791f5MWp-MyN_V3yp0D6mGTw9g_sRFN2MEKr8HXs7LoTxwX5lJzPihKHp9-LvxsoQy_ySVrdGv7AvrBqI-2N1SDaPAumJ9WdWVgvPNp9CF-ekYGveMIXYlmaLZ1SIpV8rFVroCQ1M41v_1YdWH-mMtxslDRt3Z13Lwm28TEzpm7LqHhjSk2K1CcpuOTy-Ksq3WFqzO-WSeML7YRVp3DioNmCX0nzSVbq3yxyp2bfWe_6vJ5bPevHHJnJjEyCC_YjZDpQxh0dftKkOY072L5PfAWmdIapoDT6EUx3mkgjfDK45J76Or-96zOkT_dXAJx0WWlKkhDRSb1xZ6_89m62Q7Ga9OeOQikx_Hz_lOkgDSkz6dBimrGiTMaA99pRIMucOvGT4tKd_t4bYY9hQLiaIkSEETZGuOl1fpLGEkmnBbCHPWF7ZtKHlPIe55MVeNLXxGUWlWhSynu8gzEPfZGebe5zYz9km-7xDegnnQoqCYtWFaQ0PNTECRidpP1l2BdWuYJ0IqP-3JWeDZw-u1SmDzGiQznYgGc2JAgReKF9E975hBtZclsTIf5g1Cr9qW7Eswal04rsZMw2VR9cpeYPz5ULPNngY4LCMlp5SkZCq1b6QD1oz6of7S9e_F0JiHJKhCgIvT9UcroRdIr70NmEG1XXRJbzLH7We_5OyT1TjdNOHAEjcqzm8uhn7nrXPi04HOj5HIbdl4IYTg_GT-8pnEx2Dw5WE27NZXgmjgjhUkHp0Xi_j13KpA-fvtHI_aXmUpC6KAnAy4EqnF2uSn5RxTPOiGcXHElYjO9inrvG6Ea-tPKWVEw8Trj8vt8-4sLGIx4CPpkFF47iCv4_B4djfNEQbRfo5SiYtBjxisZJVr7Imvca-WZnvFA5Kd2zhW7CqEhsvqNjPDWf9Akjw961_ndmD6G0nJGSpCF7Kym_qMK8zMgvqnAHlQkj36vFTxHQEO6c_20T_l0S-zD5W6h0ZA1UZjMqS5QmL8Hejj5PGoRnOoOXXPA3Uvn-fUhHz0DearaHkyzqybt0IhfwvpTk35yZXtqh3733cMiecE_fUSCaMMpi6BC_t-JO9KA4nF0mr8rVGy_V_ZJBIJ4LZDGCh4NbczCWaHsYmfVqFSweqYhmTo5JkcBO-Pv7yQnvVI_Hohwyrd2uknfhBav-0ABpH_8V4YKV8Cu3J8jO_mKoZDCMYoexNQwGD9AqaBiDfNTMO02XJh5qZlstmUs_t3L86vmqvI7KVbQiV-w6XCZxmqRpuLw6XSOSLtFyGSVLXIQlrQgucFaVVbGMQ5Qtqyt-jRFOUIayEEdpslykjKIVo7isqmiVsSWIEasJFwuXFgulj1f-3e51mOAlwleCFEwY_9sBGF-KgPHvn_v3go5pDPDGjbumyH1Ltlf62r8yLtqjATES3FgzqLDcCv8rB08iki18_h15ZZmGhjxyeYQA47e-esf4qtXi-j9_wd3z8HCN_xUAAP__Hl0vQQ">