<table border="1" cellspacing="0" cellpadding="8">
    <tr>
        <th>Issue</th>
        <td>
            <a href=https://github.com/llvm/llvm-project/issues/152891>152891</a>
        </td>
    </tr>

    <tr>
        <th>Summary</th>
        <td>
            [analyzer] Assertion `Ex && "elem must be a CFGStmt containing an Expr"' failed
        </td>
    </tr>

    <tr>
      <th>Labels</th>
      <td>
            clang:static analyzer,
            crash
      </td>
    </tr>

    <tr>
      <th>Assignees</th>
      <td>
      </td>
    </tr>

    <tr>
      <th>Reporter</th>
      <td>
          k-arrows
      </td>
    </tr>
</table>

<pre>
    Reproducer:
https://godbolt.org/z/16Ed5K6cf
```cpp
void foo (int x)
{
  [[assume (x == 42 ? true : throw 1)]];
}
```

Backtrace:
```console
clang++: /root/llvm-project/llvm/tools/clang/lib/StaticAnalyzer/Core/SValBuilder.cpp:159: clang::ento::DefinedOrUnknownSVal clang::ento::SValBuilder::conjureSymbolVal(const void*, clang::ConstCFGElementRef, const clang::LocationContext*, unsigned int): Assertion `Ex && "elem must be a CFGStmt containing an Expr"' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script.
Stack dump:
0.      Program arguments: /opt/compiler-explorer/clang-assertions-trunk/bin/clang++ -gdwarf-4 -g -o /app/output.s -mllvm --x86-asm-syntax=intel -fno-verbose-asm -S --gcc-toolchain=/opt/compiler-explorer/gcc-snapshot -fcolor-diagnostics -fno-crash-diagnostics --analyze <source>
1.      <eof> parser at end of file
2.      While analyzing stack: 
        #0 Calling foo(int)
3.      <source>:3:3: Error evaluating statement
4.      <source>:3:3: Error evaluating statement
5.      <source>:3:13: Error evaluating statement
 #0 0x0000000003ff1df8 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3ff1df8)
 #1 0x0000000003fef224 llvm::sys::CleanupOnSignal(unsigned long) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3fef224)
 #2 0x0000000003f33b68 CrashRecoverySignalHandler(int) CrashRecoveryContext.cpp:0:0
 #3 0x000070504e642520 (/lib/x86_64-linux-gnu/libc.so.6+0x42520)
 #4 0x000070504e6969fc pthread_kill (/lib/x86_64-linux-gnu/libc.so.6+0x969fc)
 #5 0x000070504e642476 gsignal (/lib/x86_64-linux-gnu/libc.so.6+0x42476)
 #6 0x000070504e6287f3 abort (/lib/x86_64-linux-gnu/libc.so.6+0x287f3)
 #7 0x000070504e62871b (/lib/x86_64-linux-gnu/libc.so.6+0x2871b)
 #8 0x000070504e639e96 (/lib/x86_64-linux-gnu/libc.so.6+0x39e96)
 #9 0x000000000663dc82 clang::ento::SValBuilder::conjureSymbolVal(void const*, clang::CFGBlock::ElementRefImpl<true>, clang::LocationContext const*, unsigned int) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x663dc82)
#10 0x000000000657dd30 clang::ento::ExprEngine::VisitGuardedExpr(clang::Expr const*, clang::Expr const*, clang::Expr const*, clang::ento::ExplodedNode*, clang::ento::ExplodedNodeSet&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x657dd30)
#11 0x0000000006565d01 clang::ento::ExprEngine::Visit(clang::Stmt const*, clang::ento::ExplodedNode*, clang::ento::ExplodedNodeSet&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6565d01)
#12 0x000000000658363f clang::ento::ExprEngine::VisitAttributedStmt(clang::AttributedStmt const*, clang::ento::ExplodedNode*, clang::ento::ExplodedNodeSet&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x658363f)
#13 0x0000000006565a6b clang::ento::ExprEngine::Visit(clang::Stmt const*, clang::ento::ExplodedNode*, clang::ento::ExplodedNodeSet&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6565a6b)
#14 0x0000000006567bbd clang::ento::ExprEngine::ProcessStmt(clang::Stmt const*, clang::ento::ExplodedNode*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x6567bbd)
#15 0x000000000651cb0a clang::ento::CoreEngine::HandleBlockEntrance(clang::BlockEntrance const&, clang::ento::ExplodedNode*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x651cb0a)
#16 0x000000000651d082 clang::ento::CoreEngine::dispatchWorkItem(clang::ento::ExplodedNode*, clang::ProgramPoint, clang::ento::WorkListUnit const&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x651d082)
#17 0x000000000651d411 clang::ento::CoreEngine::ExecuteWorkList(clang::LocationContext const*, unsigned int, llvm::IntrusiveRefCntPtr<clang::ento::ProgramState const>) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x651d411)
#18 0x00000000060e5a27 (anonymous namespace)::AnalysisConsumer::HandleCode(clang::Decl*, unsigned int, clang::ento::ExprEngine::InliningModes, llvm::DenseSet<clang::Decl const*, llvm::DenseMapInfo<clang::Decl const*, void>>*) AnalysisConsumer.cpp:0:0
#19 0x00000000060e765e (anonymous namespace)::AnalysisConsumer::HandleDeclsCallGraph(unsigned int) AnalysisConsumer.cpp:0:0
#20 0x00000000060e9063 (anonymous namespace)::AnalysisConsumer::HandleTranslationUnit(clang::ASTContext&) AnalysisConsumer.cpp:0:0
#21 0x00000000066a27bc clang::ParseAST(clang::Sema&, bool, bool) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x66a27bc)
#22 0x0000000004c8caf5 clang::FrontendAction::Execute() (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x4c8caf5)
#23 0x0000000004c08e2e clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x4c08e2e)
#24 0x0000000004d81611 clang::ExecuteCompilerInvocation(clang::CompilerInstance*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x4d81611)
#25 0x0000000000daeb8f cc1_main(llvm::ArrayRef<char const*>, char const*, void*) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xdaeb8f)
#26 0x0000000000da583a ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&, llvm::ToolContext const&) driver.cpp:0:0
#27 0x00000000049ffff9 void llvm::function_ref<void ()>::callback_fn<clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const::'lambda'()>(long) Job.cpp:0:0
#28 0x0000000003f34004 llvm::CrashRecoveryContext::RunSafely(llvm::function_ref<void ()>) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x3f34004)
#29 0x0000000004a0060f clang::driver::CC1Command::Execute(llvm::ArrayRef<std::optional<llvm::StringRef>>, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char>>*, bool*) const (.part.0) Job.cpp:0:0
#30 0x00000000049c28ad clang::driver::Compilation::ExecuteCommand(clang::driver::Command const&, clang::driver::Command const*&, bool) const (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x49c28ad)
#31 0x00000000049c393e clang::driver::Compilation::ExecuteJobs(clang::driver::JobList const&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&, bool) const (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x49c393e)
#32 0x00000000049cb385 clang::driver::Driver::ExecuteCompilation(clang::driver::Compilation&, llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*>>&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0x49cb385)
#33 0x0000000000dab045 clang_main(int, char**, llvm::ToolContext const&) (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xdab045)
#34 0x0000000000c5f114 main (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xc5f114)
#35 0x000070504e629d90 (/lib/x86_64-linux-gnu/libc.so.6+0x29d90)
#36 0x000070504e629e40 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e40)
#37 0x0000000000da52e5 _start (/opt/compiler-explorer/clang-assertions-trunk/bin/clang+++0xda52e5)
clang++: error: clang frontend command failed with exit code 134 (use -v to see invocation)
Compiler returned: 134
```
</pre>
<img width="1" height="1" alt="" src="http://email.email.llvm.org/o/eJzkWtFy4yizfhpyQ8klgSTLF7lQHHvO7Nn_7NR4dvbShQSytUGgApRx9ulPgeRIKPFsMpvsX1s75dTYgm6-_mi6GwTRuj4Ixq5BcgOS2yvSmaNU13cBUUp-01eFpA_Xn1mrJO1KpgDOQZgfjWm1_Yq2AG0PkhaSm4VUB4C2fwC0jdINTf43LSsQ5iAN-0_ZtiDM72VNYSUlBCirhYEngFa21_IGhDmEDsUN0bprmO1yggDfAnwLYwQB3kKjOgYBzqE5KvkNRlY6ubUffOPU3E6HtN_D_IaUd0aRkvXgR0BSaMkZCPOSE3EA6MZ-cA4B2iopDUBbzu-boFXyd1aefwK0NVJyDdB2ENvyugBouzPE1GUuCH_4gymAtmupmH3-lfCbruaUqYXlAOdRsrLD9OI4Bzhnwsj-2y2rasHoL-pXcSfkN2Gln-850ds_KKX4vVNs99AUkn8lHKDMmmig5RygHKD1VNPatq23HzacNUyYz6xyHZzEpNvPsiSmlmIthWEnM-jphHMbCmth7BzgHOZaM2V7QpCGmxMEKAUohQAhxlkDm04bWDBI4Hr7YWcaY4cypBa1OEAi4ObUKoAQQEtYkZozugBh_unnTb7bQN0VTW0ggUV3gIq1UhloJJy5YW2OXbEoZTPO1Gz-aq07ZmcOEmGhl7yjDJojg6Ui-giLR09Ba9gq6_Ul05pRqGWn-sdWkmgty5oYRqHqBNSlqltj8e4MKe8g7Zq297VwAcLVJyUPijSQqENnmdaDj8nWYipl09acqYCdWi6V8xxHf0DOhOrAqE7cAbQtajH6nXVXGBzoN6KqIIbBAQZ2WW1J21rtnWk7s9AwaCwLMAhOWRoQ3QT6QRhyAvi2FoZxGFRCBvdMFVIz2w6DHQyCQ1kG1s_LI6mFXYPfw2s7a0FafZQGBlUpuVQBrclBSG3qUvdjOI79xwHplwsEeD1QjDcgzCPLG8BrJiuAN7AlSjMFiYFMUCgrWNVu3SLb7bdjzRnsFVlf0nYOHMV29a8AwiFcE85tWyVlH3f6qIOHYcahcY6HP7hRSirI7gnviBkUG7dUQJjHPyyZXJCM_lwUOlvCU3j-h6sqolUGnbe71aofdP_lk6qFce74pXfobOykyLe91EYx0rhFuh5WsQ24b-SXAN2EpwFez7UFH_ngWYVQ_Bz4NWdEdO0vYlcfhAtkj_GGSzvEO0B1YEaoyIeKcZFmcG09-DMr5T1TDz22_yGCcjvi4FV-nyFoDnE_dH-9fjzoX4ZJGLM0RgkKB6P6dHLK0n0aB7wW3Sk4iK5vKBdaLlIH2YmMgGNf4SpdVSVszVExQvd3Neev0-7kR-3JHG68TOFBOwpeCztepqPi1FeMsmWFISlshH-VWic4ql0-URsVr1YYFaPCzFeIV2yVvk6hExkVrqYOlqaYlhn68UTvyiqXu59J9NsPN1y6mAhwPqb7j03LAV7bksqGIV9olvY93bPk_9ZrcSBjKAwRjryYlyZLSnH4PFW2iNiIQy1Y__trrWvzoSOKMtoXGNlEzj65RNqPtnlYuKSM_p-k7KX9dsy4iPz2nPasjZxGPqdpQsPoFZz6RJ7LuX8UIc7kkRDkE5LhFFevICQ3RtVFZxi1ZPj0-G3_OKIcFSNReO45JC3-bZ5D0mIkJJ4RsiwK-jJCPvX7i6ce84O0vIet1prR1sS3NSqLkDwPzu5-p7b2hZJLRBthFBGuKJ2Iek1n49P_qvHOvNH4dGY8DS-l7LnxtNYtMeXxN6nuPhrW-Ja_1NGHjeQn6fLuBV7sED_X2vwqajNh8T3YsfaP7Czn7MTRhYwyZ2dzYmVn2Bm5T87LC5H1ZCvxURjV6fqefWbVWphPRgG8fhbMQOrO7rMG5bYYehe-4miScDKPr5AlBC3toERI8dDITkNBGqZbt3tbDZnE7nJ1rddS6K4514P90lo7n5lSd8tKfoGpF4Wnj4K745n_SMq0z-8tE9qFWI9VO6A3QTOB_5D2o6jknwi54yq7L94M63pu9Ww7Zclczchcpgn7K2RaUHpNOP-gSHucbkCHmvfPMaFwhmkVpvivYPqiiNDcLQa7uGc1xu7L4wld-kKAfg2YErQsSi_eEKVZvvsyy02sIUNgLqTk4__vsBFwkB6XDPJqtLjMSlIlU8BbZSkQNC-tei-4OGhvjnDAMCLEPsIwY4j5h679mB-FNi4FTjEOsD22Zya9SygfcI5WeBVNTLMo9UP5gHc05n4I0j72J8a-S5oe8I3ovRolpIQVWQXLMto3xCqYHITlSpGHz6yyAelIJnu6YTvsPTtHpncxokc52pDObEgyTOCZ9nX0xS24iSW7hnD-lZVGqmFb_9Sg1I_IVscsqTrnoqq-fzZceAk-XlVVVa0cJROlVSeco-6VY9W19kuvP-kEOC8J5wUp7_aV8BNBP_DgOutoLZuGCDpfxc_OnjZDP9na0YklYEKOUbU4uJ6bYWofBfb78nSKov5HQXRd7rXrPlDodbYP9kaR2uhz80wd4dwuBakm7UMeO4dJ5z5DoZG7txdLTpqCEoCWI1UoO590_iSLZyYjm51PxmE4PUp97hSyb_nciR2pGH_wuPz-vL3HeatDPDq8l8BjYhOmt_3-1zmHZXzREmUW4UUv8N8GxKsSZYReZM3NGnmSGc9UeqF7Jmg7XNqSfadr7tUJE8PeNP73Zj-6kv-WIV6VeIXZa0n5SRb6MiM_ycJuVDxGvheLHz2gJbWd_KdF-HdJHNzkb6HSkjVSiWZUFjhLLsG-nXz3CoRnKoNLU_A3Uvn2dUhPz0genuXwIowH8s6VyBm8CyX5kz3TpQz95rWHRTbi9qq_sEyqKIqhRfzWA_eqx4FnL5nQiq5e-U7MiYwK5y-XViwO4X5vZfbaEGX2E7NePASLJ0Ms54UaYgnslb_9PFnl_dCzGytMKZtVhjslsBo2DbAc_L-_UQG_1eYI2ckdDFEGIxxbjJ1mMLiHRkLNGKwnxbwd6VzEQ8VMpwSzy89KTm_SXNFrTFd4Ra7YdbRM4izEq2VydbzGMUljioolTdMUoSxNwjAtYxpiwihG5VV9jUKUhFkUhglGSbKIigJVVbykNK2SuEAgDllDar6wy2Ih1eHKXeK4jhKUraIrTgrGtbu8hNA5CGh3E2e4EsD6WyVr226LIvsrub1S1-5uSNEdNIhDXmujxyFMbbi7EfWoIrl98_stV53i1z9-hWUg4P4a_X8AAAD__8Dvlhc">