================
@@ -324,6 +326,10 @@ void FactsGenerator::VisitCastExpr(const CastExpr *CE) {
flow(Dest, Src, /*Kill=*/true);
return;
case CK_ArrayToPointerDecay:
+ // va_arg(ap, array_type) is UB and does not provide addressable array
+ // storage to model.
+ if (isa<VAArgExpr>(SubExpr))
----------------
NeKon69 wrote:
It was a crash. Yeah I am quite worried that this can appear in other places
too. I will do some more testing locally.
https://github.com/llvm/llvm-project/pull/203270
_______________________________________________
cfe-commits mailing list
[email protected]
https://lists.llvm.org/cgi-bin/mailman/listinfo/cfe-commits
