Skip to content

MinimizeRecGroups fuzz bug #8682

@kripken

Description

@kripken
(module
 (rec
  (type $0 (sub (descriptor $4) (struct (field (mut i32)))))
  (type $1 (sub (array (mut (ref $4)))))
  (type $2 (sub (array (mut f32))))
  (type $3 (sub (func (param (ref null $1) f32 (ref $2)) (result (ref $2)))))
  (type $4 (sub (describes $0) (struct (field f64) (field (mut i8)) (field i64))))
  (type $5 (sub $3 (func (param (ref null $1) f32 (ref eq)) (result (ref $2)))))
 )
 (type $6 (func (result (ref $5))))
 (type $7 (func))
 (rec
  (type $8 (sub $0 (descriptor $11) (struct (field (mut i32)))))
  (type $9 (sub $0 (descriptor $13) (struct (field (mut i32)))))
  (type $10 (func (param (ref $2)) (result i32)))
  (type $11 (sub $4 (describes $8) (struct (field f64) (field (mut i8)) (field i64))))
  (type $12 (struct))
  (type $13 (sub $4 (describes $9) (struct (field f64) (field (mut i8)) (field i64))))
  (type $14 (func (result (ref $10))))
 )
 (export "func_20" (func $1))
 (export "func_152_invoker" (func $4))
 (func $0 (type $3) (param $0 (ref null $1)) (param $1 f32) (param $2 (ref $2)) (result (ref $2))
  (unreachable)
 )
 (func $1 (type $6) (result (ref $5))
  (unreachable)
 )
 (func $2 (type $14) (result (ref $10))
  (unreachable)
 )
 (func $3 (type $5) (param $0 (ref null $1)) (param $1 f32) (param $2 (ref eq)) (result (ref $2))
  (unreachable)
 )
 (func $4 (type $7)
 )
)
$ bin/wasm-opt a.wat -all --minimize-rec-groups
terminate called after throwing an instance of 'std::out_of_range'
  what():  unordered_map::at
Aborted                    (core dumped) bin/wasm-opt a.wat -all --minimize-rec-groups

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions