cmtice wrote: It also appears to have issues when the thing receiving the malloc is defined as a union, and the malloc allocates only the size of one of the smaller union options. https://github.com/llvm/llvm-project/pull/150028