tanmaysachan wrote: @dwblaikie In regengine.inc (line 152), we use the start and end (both 0 here) and add it to the string pointer to find the bounds (null in this case). This causes the UBSan. They are dereferenced later on. https://github.com/llvm/llvm-project/pull/73071