binaryen icon indicating copy to clipboard operation
binaryen copied to clipboard

"unknown successor value" assertion in DFA::refinePartitions

Open kripken opened this issue 1 year ago • 0 comments

Testcase is based off of fuzzing the testcase from https://github.com/WebAssembly/binaryen/issues/7015, reduced.

$ bin/wasm-opt a.wat -all --type-merging --closed-world
wasm-opt: src/support/dfa_minimization.h:75: std::vector<std::vector<T> > wasm::DFA::refinePartitions(const std::vector<std::vector<State<T> > >&) [with T = wasm::HeapType]: Assertion `it != indices.end() && "unknown successor value"' failed.
Aborted

Looks like a DFA minimization issue. @tlively

a.wat.gz

kripken avatar Oct 18 '24 22:10 kripken