crash in CFGBlock with clang 0.139 (second crash)

[llvmbot]

Bugzilla Link	3338
Resolution	DUPLICATE
Resolved on	Jan 16, 2009 13:28
Version	unspecified
OS	All
Reporter	LLVM Bugzilla Contributor
CC	@tkremenek

Extended Description

Here is the text:

ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ParserCreate
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ParserCreateNS
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ParserCreate_MM
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c parserCreate
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c parserInit
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c moveToFreeBindingList
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ParserReset
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetEncoding
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ExternalEntityParserCreate
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c destroyBindings
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ParserFree
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_UseParserAsHandlerArg
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_UseForeignDTD
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetReturnNSTriplet
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetUserData
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetBase
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetBase
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetSpecifiedAttributeCount
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetIdAttributeIndex
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetElementHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetStartElementHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetEndElementHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetCharacterDataHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetProcessingInstructionHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetCommentHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetCdataSectionHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetStartCdataSectionHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetEndCdataSectionHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetDefaultHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetDefaultHandlerExpand
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetDoctypeDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetStartDoctypeDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetEndDoctypeDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetUnparsedEntityDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetNotationDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetNamespaceDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetStartNamespaceDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetEndNamespaceDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetNotStandaloneHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetExternalEntityRefHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetExternalEntityRefHandlerArg
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetSkippedEntityHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetUnknownEncodingHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetElementDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetAttlistDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetEntityDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetXmlDeclHandler
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_SetParamEntityParsing
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_Parse
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ParseBuffer
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetBuffer
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_StopParser
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ResumeParser
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetParsingStatus
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetErrorCode
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetCurrentByteIndex
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetCurrentByteCount
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetInputContext
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetCurrentLineNumber
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetCurrentColumnNumber
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_FreeContentModel
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_MemMalloc
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_MemRealloc
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_MemFree
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_DefaultCurrent
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ErrorString
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ExpatVersion
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_ExpatVersionInfo
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c XML_GetFeatureList
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c storeRawNames
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c contentProcessor
ANALYZE: /Volumes/Secure Image/Source Code/git/svn/Max/Frameworks/expat/expat/lib/xmlparse.c externalEntityInitProcessor
Assertion failed: (isa(Val) && "cast() argument of incompatible type!"), function cast, file /private/tmp/checker-0.139-build/include/llvm/Support/Casting.h, line 199.
0 clang 0x00a90cd2 std::vector<llvm::sys::Path, std::allocatorllvm::sys::Path >::_M_insert_aux(__gnu_cxx::__normal_iterator<llvm::sys::Path*, std::vector<llvm::sys::Path, std::allocatorllvm::sys::Path > >, llvm::sys::Path const&) + 7746
1 libSystem.B.dylib 0x926be2bb _sigtramp + 43
2 libSystem.B.dylib 0xffffffff _sigtramp + 1838423407
3 libSystem.B.dylib 0x9273223a raise + 26
4 libSystem.B.dylib 0x9273e679 abort + 73
5 libSystem.B.dylib 0x927333db __assert_rtn + 101
6 clang 0x002d84fb clang::DiagCollector::HandleDiagnostic(clang::Diagnostic::Level, clang::DiagnosticInfo const&) + 28763
7 clang 0x002dffb1 clang::DiagCollector::HandleDiagnostic(clang::Diagnostic::Level, clang::DiagnosticInfo const&) + 60177
8 clang 0x0030d69e clang::CFGBlock::operator[](unsigned long) const + 81054
9 clang 0x0030d28c clang::CFGBlock::operator[](unsigned long) const + 80012
10 clang 0x0030d28c clang::CFGBlock::operator[](unsigned long) const + 80012
11 clang 0x0030d28c clang::CFGBlock::operator[](unsigned long) const + 80012
12 clang 0x0030d28c clang::CFGBlock::operator[](unsigned long) const + 80012
13 clang 0x0030e988 clang::CFGBlock::operator[](unsigned long) const + 85896
14 clang 0x003041c3 clang::CFGBlock::operator[](unsigned long) const + 42947
15 clang 0x00304995 clang::CFGBlock::operator[](unsigned long) const + 44949
16 clang 0x003040bf clang::CFGBlock::operator[](unsigned long) const + 42687
17 clang 0x0030f120 clang::CFGBlock::operator[](unsigned long) const + 87840
18 clang 0x003159a1 clang::GRCoreEngineclang::GRExprEngine::ProcessStmt(clang::Stmt*, clang::GRStmtNodeBuilderImpl&) + 97
19 clang 0x002f8e86 llvm::ImutAVLFactory<llvm::ImutKeyValueInfo<unsigned int, unsigned int> >::Add_internal(std::pair<unsigned int, unsigned int> const&, llvm::ImutAVLTree<llvm::ImutKeyValueInfo<unsigned int, unsigned int> >) + 9414
20 clang 0x002f9098 llvm::ImutAVLFactory<llvm::ImutKeyValueInfo<unsigned int, unsigned int> >::Add_internal(std::pair<unsigned int, unsigned int> const&, llvm::ImutAVLTree<llvm::ImutKeyValueInfo<unsigned int, unsigned int> >) + 9944
21 clang 0x0000a0b7 llvm::cast_retty<clang::CXXRecordType, clang::Type*>::ret_type llvm::cast<clang::CXXRecordType, clang::Type*>(clang::Type* const&) + 9911
22 clang 0x00009968 llvm::cast_retty<clang::CXXRecordType, clang::Type*>::ret_type llvm::cast<clang::CXXRecordType, clang::Type*>(clang::Type* const&) + 8040
23 clang 0x00009db5 llvm::cast_retty<clang::CXXRecordType, clang::Type*>::ret_type llvm::cast<clang::CXXRecordType, clang::Type*>(clang::Type* const&) + 9141
24 clang 0x0034f56b std::vector<clang::IdentifierResolver::IdDeclInfo, std::allocatorclang::IdentifierResolver::IdDeclInfo >::_M_fill_insert(__gnu_cxx::__normal_iterator<clang::IdentifierResolver::IdDeclInfo*, std::vector<clang::IdentifierResolver::IdDeclInfo, std::allocatorclang::IdentifierResolver::IdDeclInfo > >, unsigned long, clang::IdentifierResolver::IdDeclInfo const&) + 1483
25 clang 0x0004c6e6 clang::TokenRewriter::AddTokenAfter(std::_List_const_iteratorclang::Token, char const*) + 5622
26 clang 0x0004f79d clang::TokenRewriter::AddTokenAfter(std::_List_const_iteratorclang::Token, char const*) + 18093
27 clang 0x00002536 _mh_execute_header + 5430
28 clang 0x0000001a _mh_execute_header + 18446744073709547546

[llvmbot]

assigned to @tkremenek

[tkremenek]

If possible, please attach a preprocessed file that exhibits the problem. There should be a link from the HTML page to the .mi/.i file for an individual "crash" or "parser rejects".

[llvmbot]

Preprocessor output.
Sorry, tried to attach it earlier.

[tkremenek]

This looks like a duplicate of PR 3337. This should be fixed in checker-0.140.

*** This bug has been marked as a duplicate of bug #3709 ***