[Bug]: clang-tidy SEGFAULT

[forall-x]

Description

WITH_TIDY=1 m surfaceflinger

FAILED: out/soong/.intermediates/frameworks/native/services/surfaceflinger/Scheduler/libscheduler/android_x86_64_silvermont_static/obj/frameworks/native/services/surfaceflinger/Scheduler/src/Timer.tidy
CLANG_CMD=clang++ TIDY_FILE=out/soong/.intermediates/frameworks/native/services/surfaceflinger/Scheduler/libscheduler/android_x86_64_silvermont_static/obj/frameworks/native/services/surfaceflinger/Scheduler/src/Timer.tidy prebuilts/clang/host/linux-x86/clang-r574158/bin/clang-tidy.sh frameworks/native/services/surf
aceflinger/Scheduler/src/Timer.cpp '-header-filter=^.*frameworks/native/services/surfaceflinger/.*.h$' -extra-arg-before=-D__clang_analyzer__ -extra-arg-before=-Xclang -extra-arg-before=-analyzer-config -extra-arg-before=-Xclang -extra-arg-before=c++-temp-dtor-inlining=false -checks=android-*,bugprone-*,cert-*,clan
g-diagnostic-unused-command-line-argument,google-build-explicit-make-pair,google-build-namespaces,google-runtime-operator,google-upgrade-*,misc-*,performance-*,portability-*,-bugprone-assignment-in-if-condition,-bugprone-easily-swappable-parameters,-bugprone-narrowing-conversions,-misc-const-correctness,-misc-no-re
cursion,-misc-non-private-member-variables-in-classes,-misc-unused-parameters,-performance-no-int-to-ptr,-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling,-android-cloexec-dup,-android-cloexec-pipe,-bugprone-argument-comment,-bugprone-branch-clone,-bugprone-forward-declaration-namespace,-bugpron
e-incorrect-roundings,-bugprone-integer-division,-bugprone-lambda-function-name,-bugprone-misplaced-widening-cast,-bugprone-move-forwarding-reference,-bugprone-nondeterministic-pointer-iteration-order,-bugprone-switch-missing-default-case,-cert-dcl59-cpp,-cert-err34-c,-cert-int09-c,-cert-msc30-c,-cert-msc50-cpp,-ce
rt-oop54-cpp,-clang-analyzer-core.CallAndMessage,-clang-analyzer-core.DivideZero,-clang-analyzer-deadcode.DeadStores,-clang-analyzer-optin.core.EnumCastOutOfRange,-clang-analyzer-optin.cplusplus.UninitializedObject,-clang-analyzer-optin.cplusplus.VirtualCall,-clang-analyzer-optin.performance.Padding,-clang-analyzer
-security.ArrayBound,-clang-diagnostic-deprecated-declarations,-google-build-namespaces,-misc-include-cleaner,-misc-unused-using-decls,-misc-use-internal-linkage,-performance-enum-size,-performance-for-range-copy,-performance-inefficient-vector-operation,-performance-move-const-arg,-performance-unnecessary-copy-ini
tialization,-performance-unnecessary-value-param,-portability-template-virtual-member-function,-misc-no-recursion,-readability-function-cognitive-complexity,-bugprone-reserved-identifier*,-cert-dcl51-cpp,-cert-dcl37-c,-readability-qualified-auto,-bugprone-implicit-widening-of-multiplication-result,-bugprone-easily-
swappable-parameters,-cert-err33-c,-bugprone-unchecked-optional-access,-misc-use-anonymous-namespace,-performance-avoid-endl -warnings-as-errors='abseil-*','android-*','bugprone-*','cert-*','clang-analyzer-*','google-*','misc-*','performance*','portability*',-bugprone-assignment-in-if-condition,-bugprone-branch-clo
ne,-bugprone-signed-char-misuse,-misc-const-correctness,-bugprone-unsafe-functions,-cert-msc24-c,-cert-msc33-c,-modernize-type-traits,-readability-avoid-unconditional-preprocessor-if -- -nostdlibinc  -Werror=implicit-function-declaration -D__BIONIC_NO_PAGE_SIZE_MACRO -O2 -Wall -Wextra -Wpointer-arith -Wunguarded-av
ailability -Werror=bool-operation -Werror=date-time -Werror=int-conversion -Werror=multichar -Werror=pragma-pack -Werror=pragma-pack-suspicious-include -Werror=sizeof-array-div -Werror=sizeof-pointer-memaccess -Werror=string-plus-int -Werror=unreachable-code-loop-increment -Wno-error=deprecated-declarations -Wno-er
ror=unused-variable -Wno-c23-extensions -Wno-c99-designator -Wno-gnu-folding-constant -Wno-inconsistent-missing-override -Wno-error=reorder-init-list -Wno-reorder-init-list -Wno-sign-compare -Wno-unused -DANDROID -DNDEBUG -UDEBUG -D__compiler_offsetof=__builtin_offsetof -D__ANDROID_UNAVAILABLE_SYMBOLS_ARE_WEAK__ -f
addrsig -fdebug-default-version=5 -fcolor-diagnostics -ffp-contract=off -fno-exceptions -fno-strict-aliasing -fmessage-length=0 -gsimple-template-names -gz=zstd -no-canonical-prefixes -fdebug-prefix-map=/proc/self/cwd= -ftrivial-auto-var-init=zero -g -ffunction-sections -fdata-sections -fno-short-enums -funwind-tab
les -fstack-protector-strong -Wa,--noexecstack -D_FORTIFY_SOURCE=3 -Werror=non-virtual-dtor -Werror=address -Werror=sequence-point -Werror=format-security -m64 -march=slm -mssse3 -msse4 -msse4.1 -msse4.2 -maes -mpopcnt -target x86_64-linux-android10000 -DANDROID_STRICT -fPIC -Wimplicit-fallthrough -D_LIBCPP_ENABLE_
THREAD_SAFETY_ANNOTATIONS -Wno-gnu-include-next -fvisibility-inlines-hidden  -Iframeworks/native/services/surfaceflinger/Scheduler/include -Iframeworks/native/services/surfaceflinger/Scheduler/include -Iframeworks/native/services/surfaceflinger/Scheduler -D__LIBC_API__=10000 -D__LIBM_API__=10000 -D__LIBDL_API__=100
00 -Iframeworks/native/services/surfaceflinger/common/include -Iframeworks/native/libs/tracing_perfetto/include -Iexternal/perfetto/include -Iprebuilts/clang/host/linux-x86/clang-r574158/android_libc++/platform/x86_64/include/c++/v1 -Iprebuilts/clang/host/linux-x86/clang-r574158/include/c++/v1 -Isystem/libbase/incl
ude -Iexternal/fmtlib/include -Isystem/core/libcutils/include -Isystem/core/libprocessgroup/include -Isystem/logging/liblog/include -Iframeworks/native/libs/ui/include -Iframeworks/native/libs/ui/include_private -Iframeworks/native/libs/nativebase/include -Iframeworks/native/libs/nativewindow/include -Ihardware/lib
hardware/include_all -Isystem/media/audio/include -Isystem/core/libsystem/include -Iframeworks/native/libs/math/include -Iframeworks/native/libs/ui/include_mock -Iframeworks/native/libs/ui/include_types -Iframeworks/native/libs/arect/include -Iout/soong/.intermediates/frameworks/native/libs/ui/libui_flags_cc/androi
d_x86_64_silvermont_static/gen/include -Isystem/libhidl/base/include -Isystem/libhidl/transport/include -Isystem/libfmq/base -Isystem/libhwbinder/include -Isystem/core/libutils/include -Isystem/core/libutils/binder/include -Iout/soong/.intermediates/system/libhidl/transport/manager/1.0/android.hidl.manager@1.0_genc
++_headers/gen -Iout/soong/.intermediates/system/libhidl/transport/manager/1.1/android.hidl.manager@1.1_genc++_headers/gen -Iout/soong/.intermediates/system/libhidl/transport/manager/1.2/android.hidl.manager@1.2_genc++_headers/gen -Iout/soong/.intermediates/system/libhidl/transport/base/1.0/android.hidl.base@1.0_ge
nc++_headers/gen -Iout/soong/.intermediates/hardware/interfaces/graphics/common/1.0/android.hardware.graphics.common@1.0_genc++_headers/gen -Iout/soong/.intermediates/hardware/interfaces/graphics/common/1.1/android.hardware.graphics.common@1.1_genc++_headers/gen -Iout/soong/.intermediates/hardware/interfaces/graphi
cs/common/1.2/android.hardware.graphics.common@1.2_genc++_headers/gen -Iout/soong/.intermediates/hardware/interfaces/graphics/mapper/4.0/android.hardware.graphics.mapper@4.0_genc++_headers/gen -Iframeworks/native/libs/gralloc/types/include -Iframeworks/native/libs/binder/ndk/include_cpp -Iframeworks/native/libs/bin
der/ndk/include_ndk -Iframeworks/native/libs/binder/ndk/include_platform -Ilibnativehelper/include_jni -Iout/soong/.intermediates/hardware/interfaces/common/aidl/android.hardware.common-V2-ndk-source/gen/include -Iout/soong/.intermediates/hardware/interfaces/graphics/common/aidl/android.hardware.graphics.common-V7-
ndk-source/gen/include -Ibionic/libc/async_safe/include -Ibionic/libc/system_properties/include -Isystem/core/property_service/libpropertyinfoparser/include -isystem bionic/libc/include -isystem bionic/libc/kernel/uapi/asm-x86 -isystem bionic/libc/kernel/uapi -isystem bionic/libc/kernel/android/scsi -isystem bionic
/libc/kernel/android/uapi -DANDROID_UTILS_REF_BASE_DISABLE_IMPLICIT_CONSTRUCTION '-DLOG_TAG="SurfaceFlinger"' -DFMT_CPP_LIB_FILESYSTEM=0 -Wall -Wconversion -Werror -Wextra -Wformat -Wthread-safety -Wunreachable-code -Wunused -DATRACE_TAG=ATRACE_TAG_GRAPHICS -flto=thin -fsplit-lto-unit -std=gnu++20 -fno-rtti -Isyste
m/core/include -Isystem/logging/liblog/include -Isystem/media/audio/include -Ihardware/libhardware/include -Ihardware/libhardware_legacy/include -Ihardware/ril/include -Iframeworks/native/include -Iframeworks/native/opengl/include -Iframeworks/av/include  -Werror=address-of-temporary -Werror=dangling -Werror=format
-insufficient-args -Werror=fortify-source -Werror=incompatible-function-pointer-types -Werror=int-in-bool-context -Werror=int-to-pointer-cast -Werror=null-dereference -Werror=return-type -Werror=xor-used-as-pow -Wno-missing-field-initializers -Wno-packed-non-pod -Wno-error=tautological-constant-compare -Wno-implici
t-int-float-conversion -Wno-tautological-overlap-compare -Wno-deprecated-copy -Wno-zero-as-null-pointer-constant -Wno-deprecated-anon-enum-enum-conversion -Wno-deprecated-enum-enum-conversion -Wno-error=pessimizing-move -Wno-non-c-typedef-for-linkage -Wno-align-mismatch -Wno-error=unused-but-set-parameter -Wno-erro
r=deprecated -Wno-error=invalid-offsetof -Wno-nontrivial-memcall -Wno-invalid-specialization -Wno-unterminated-string-initialization -Wno-implicit-int-conversion-on-negation -Wno-default-const-init-field-unsafe -Wno-default-const-init-var-unsafe -Wno-preferred-type-bitfield-enum-conversion -Wno-implicit-enum-enum-c
ast -Wno-vla-cxx-extension -Wno-cast-function-type-mismatch
prebuilts/clang/host/linux-x86/clang-r574158/bin/clang-tidy.sh: line 117:   805 Segmentation fault      (core dumped) "${BIN_DIR}/clang-tidy" "${TIDY_CLANG_FLAGS[@]}" > ${TIDY_STDOUT} 2> ${TIDY_STDERR}
PLEASE submit a bug report to https://github.com/android-ndk/ndk/issues and include the crash backtrace.
Stack dump:
0.      Program arguments: prebuilts/clang/host/linux-x86/clang-r574158/bin/clang-tidy-real frameworks/native/services/surfaceflinger/Scheduler/src/Timer.cpp -header-filter=^.*frameworks/native/services/surfaceflinger/.*.h$ -extra-arg-before=-D__clang_analyzer__ -extra-arg-before=-Xclang -extra-arg-before=-analyzer
-config -extra-arg-before=-Xclang -extra-arg-before=c++-temp-dtor-inlining=false -checks=android-*,bugprone-*,cert-*,clang-diagnostic-unused-command-line-argument,google-build-explicit-make-pair,google-build-namespaces,google-runtime-operator,google-upgrade-*,misc-*,performance-*,portability-*,-bugprone-assignment-
in-if-condition,-bugprone-easily-swappable-parameters,-bugprone-narrowing-conversions,-misc-const-correctness,-misc-no-recursion,-misc-non-private-member-variables-in-classes,-misc-unused-parameters,-performance-no-int-to-ptr,-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling,-android-cloexec-dup
,-android-cloexec-pipe,-bugprone-argument-comment,-bugprone-branch-clone,-bugprone-forward-declaration-namespace,-bugprone-incorrect-roundings,-bugprone-integer-division,-bugprone-lambda-function-name,-bugprone-misplaced-widening-cast,-bugprone-move-forwarding-reference,-bugprone-nondeterministic-pointer-iteration-
order,-bugprone-switch-missing-default-case,-cert-dcl59-cpp,-cert-err34-c,-cert-int09-c,-cert-msc30-c,-cert-msc50-cpp,-cert-oop54-cpp,-clang-analyzer-core.CallAndMessage,-clang-analyzer-core.DivideZero,-clang-analyzer-deadcode.DeadStores,-clang-analyzer-optin.core.EnumCastOutOfRange,-clang-analyzer-optin.cplusplus.
UninitializedObject,-clang-analyzer-optin.cplusplus.VirtualCall,-clang-analyzer-optin.performance.Padding,-clang-analyzer-security.ArrayBound,-clang-diagnostic-deprecated-declarations,-google-build-namespaces,-misc-include-cleaner,-misc-unused-using-decls,-misc-use-internal-linkage,-performance-enum-size,-performan
ce-for-range-copy,-performance-inefficient-vector-operation,-performance-move-const-arg,-performance-unnecessary-copy-initialization,-performance-unnecessary-value-param,-portability-template-virtual-member-function,-misc-no-recursion,-readability-function-cognitive-complexity,-bugprone-reserved-identifier*,-cert-d
cl51-cpp,-cert-dcl37-c,-readability-qualified-auto,-bugprone-implicit-widening-of-multiplication-result,-bugprone-easily-swappable-parameters,-cert-err33-c,-bugprone-unchecked-optional-access,-misc-use-anonymous-namespace,-performance-avoid-endl -warnings-as-errors=abseil-*,android-*,bugprone-*,cert-*,clang-analyze
r-*,google-*,misc-*,performance*,portability*,-bugprone-assignment-in-if-condition,-bugprone-branch-clone,-bugprone-signed-char-misuse,-misc-const-correctness,-bugprone-unsafe-functions,-cert-msc24-c,-cert-msc33-c,-modernize-type-traits,-readability-avoid-unconditional-preprocessor-if -- -nostdlibinc -Werror=implic
it-function-declaration -D__BIONIC_NO_PAGE_SIZE_MACRO -O2 -Wall -Wextra -Wpointer-arith -Wunguarded-availability -Werror=bool-operation -Werror=date-time -Werror=int-conversion -Werror=multichar -Werror=pragma-pack -Werror=pragma-pack-suspicious-include -Werror=sizeof-array-div -Werror=sizeof-pointer-memaccess -Wer
ror=string-plus-int -Werror=unreachable-code-loop-increment -Wno-error=deprecated-declarations -Wno-error=unused-variable -Wno-c23-extensions -Wno-c99-designator -Wno-gnu-folding-constant -Wno-inconsistent-missing-override -Wno-error=reorder-init-list -Wno-reorder-init-list -Wno-sign-compare -Wno-unused -DANDROID -
DNDEBUG -UDEBUG -D__compiler_offsetof=__builtin_offsetof -D__ANDROID_UNAVAILABLE_SYMBOLS_ARE_WEAK__ -faddrsig -fdebug-default-version=5 -fcolor-diagnostics -ffp-contract=off -fno-exceptions -fno-strict-aliasing -fmessage-length=0 -gsimple-template-names -gz=zstd -no-canonical-prefixes -fdebug-prefix-map=/proc/self/
cwd= -ftrivial-auto-var-init=zero -g -ffunction-sections -fdata-sections -fno-short-enums -funwind-tables -fstack-protector-strong -Wa,--noexecstack -D_FORTIFY_SOURCE=3 -Werror=non-virtual-dtor -Werror=address -Werror=sequence-point -Werror=format-security -m64 -march=slm -mssse3 -msse4 -msse4.1 -msse4.2 -maes -mpo
pcnt -target x86_64-linux-android10000 -DANDROID_STRICT -fPIC -Wimplicit-fallthrough -D_LIBCPP_ENABLE_THREAD_SAFETY_ANNOTATIONS -Wno-gnu-include-next -fvisibility-inlines-hidden -Iframeworks/native/services/surfaceflinger/Scheduler/include -Iframeworks/native/services/surfaceflinger/Scheduler/include -Iframeworks/n
ative/services/surfaceflinger/Scheduler -D__LIBC_API__=10000 -D__LIBM_API__=10000 -D__LIBDL_API__=10000 -Iframeworks/native/services/surfaceflinger/common/include -Iframeworks/native/libs/tracing_perfetto/include -Iexternal/perfetto/include -Iprebuilts/clang/host/linux-x86/clang-r574158/android_libc++/platform/x86_
64/include/c++/v1 -Iprebuilts/clang/host/linux-x86/clang-r574158/include/c++/v1 -Isystem/libbase/include -Iexternal/fmtlib/include -Isystem/core/libcutils/include -Isystem/core/libprocessgroup/include -Isystem/logging/liblog/include -Iframeworks/native/libs/ui/include -Iframeworks/native/libs/ui/include_private -If
rameworks/native/libs/nativebase/include -Iframeworks/native/libs/nativewindow/include -Ihardware/libhardware/include_all -Isystem/media/audio/include -Isystem/core/libsystem/include -Iframeworks/native/libs/math/include -Iframeworks/native/libs/ui/include_mock -Iframeworks/native/libs/ui/include_types -Iframeworks
/native/libs/arect/include -Iout/soong/.intermediates/frameworks/native/libs/ui/libui_flags_cc/android_x86_64_silvermont_static/gen/include -Isystem/libhidl/base/include -Isystem/libhidl/transport/include -Isystem/libfmq/base -Isystem/libhwbinder/include -Isystem/core/libutils/include -Isystem/core/libutils/binder/
include -Iout/soong/.intermediates/system/libhidl/transport/manager/1.0/android.hidl.manager@1.0_genc++_headers/gen -Iout/soong/.intermediates/system/libhidl/transport/manager/1.1/android.hidl.manager@1.1_genc++_headers/gen -Iout/soong/.intermediates/system/libhidl/transport/manager/1.2/android.hidl.manager@1.2_gen
c++_headers/gen -Iout/soong/.intermediates/system/libhidl/transport/base/1.0/android.hidl.base@1.0_genc++_headers/gen -Iout/soong/.intermediates/hardware/interfaces/graphics/common/1.0/android.hardware.graphics.common@1.0_genc++_headers/gen -Iout/soong/.intermediates/hardware/interfaces/graphics/common/1.1/android.
hardware.graphics.common@1.1_genc++_headers/gen -Iout/soong/.intermediates/hardware/interfaces/graphics/common/1.2/android.hardware.graphics.common@1.2_genc++_headers/gen -Iout/soong/.intermediates/hardware/interfaces/graphics/mapper/4.0/android.hardware.graphics.mapper@4.0_genc++_headers/gen -Iframeworks/native/li
bs/gralloc/types/include -Iframeworks/native/libs/binder/ndk/include_cpp -Iframeworks/native/libs/binder/ndk/include_ndk -Iframeworks/native/libs/binder/ndk/include_platform -Ilibnativehelper/include_jni -Iout/soong/.intermediates/hardware/interfaces/common/aidl/android.hardware.common-V2-ndk-source/gen/include -Io
ut/soong/.intermediates/hardware/interfaces/graphics/common/aidl/android.hardware.graphics.common-V7-ndk-source/gen/include -Ibionic/libc/async_safe/include -Ibionic/libc/system_properties/include -Isystem/core/property_service/libpropertyinfoparser/include -isystem bionic/libc/include -isystem bionic/libc/kernel/u
api/asm-x86 -isystem bionic/libc/kernel/uapi -isystem bionic/libc/kernel/android/scsi -isystem bionic/libc/kernel/android/uapi -DANDROID_UTILS_REF_BASE_DISABLE_IMPLICIT_CONSTRUCTION -DLOG_TAG=\"SurfaceFlinger\" -DFMT_CPP_LIB_FILESYSTEM=0 -Wall -Wconversion -Werror -Wextra -Wformat -Wthread-safety -Wunreachable-code
 -Wunused -DATRACE_TAG=ATRACE_TAG_GRAPHICS -flto=thin -fsplit-lto-unit -std=gnu++20 -fno-rtti -Isystem/core/include -Isystem/logging/liblog/include -Isystem/media/audio/include -Ihardware/libhardware/include -Ihardware/libhardware_legacy/include -Ihardware/ril/include -Iframeworks/native/include -Iframeworks/native
/opengl/include -Iframeworks/av/include -Werror=address-of-temporary -Werror=dangling -Werror=format-insufficient-args -Werror=fortify-source -Werror=incompatible-function-pointer-types -Werror=int-in-bool-context -Werror=int-to-pointer-cast -Werror=null-dereference -Werror=return-type -Werror=xor-used-as-pow -Wno-
missing-field-initializers -Wno-packed-non-pod -Wno-error=tautological-constant-compare -Wno-implicit-int-float-conversion -Wno-tautological-overlap-compare -Wno-deprecated-copy -Wno-zero-as-null-pointer-constant -Wno-deprecated-anon-enum-enum-conversion -Wno-deprecated-enum-enum-conversion -Wno-error=pessimizing-m
ove -Wno-non-c-typedef-for-linkage -Wno-align-mismatch -Wno-error=unused-but-set-parameter -Wno-error=deprecated -Wno-error=invalid-offsetof -Wno-nontrivial-memcall -Wno-invalid-specialization -Wno-unterminated-string-initialization -Wno-implicit-int-conversion-on-negation -Wno-default-const-init-field-unsafe -Wno-
default-const-init-var-unsafe -Wno-preferred-type-bitfield-enum-conversion -Wno-implicit-enum-enum-cast -Wno-vla-cxx-extension -Wno-cast-function-type-mismatch
1.      <eof> parser at end of file
2.      While analyzing stack:
        #0 Calling android::ScopedTrace::ScopedTrace(const char *) at line /usr/local/google/home/aii/main/frameworks/native/services/surfaceflinger/Scheduler/src/Timer.cpp:193:13 <Spelling=<scratch space>:285:1>
        #1 Calling android::scheduler::Timer::dispatch() at line 147
        #2 Calling android::scheduler::Timer::threadMain() at line 42
        #3 Calling android::scheduler::Timer::Timer()::(anonymous class)::operator()()
3.      frameworks/native/services/surfaceflinger/common/include/common/trace.h:88:44 <Spelling=frameworks/native/services/surfaceflinger/common/include/common/trace.h:45:29>: Error evaluating statement
4.      frameworks/native/services/surfaceflinger/common/include/common/trace.h:88:44 <Spelling=frameworks/native/services/surfaceflinger/common/include/common/trace.h:45:29>: Error evaluating statement
#0 0x000055e04330c252 (prebuilts/clang/host/linux-x86/clang-r574158/bin/clang-tidy-real+0x2444252)
#1 0x000055e04330b1d0 (prebuilts/clang/host/linux-x86/clang-r574158/bin/clang-tidy-real+0x24431d0)
#2 0x000055e04330c6c1 (prebuilts/clang/host/linux-x86/clang-r574158/bin/clang-tidy-real+0x24446c1)
#3 0x00007f72faa7edf0 (/lib/x86_64-linux-gnu/libc.so.6+0x3fdf0)

Upstream bug

No response

Commit to cherry-pick

No response

I am using a supported NDK

• I have checked and the NDK I'm using is currently supported

Affected versions

r29

Host OS

Linux

Host OS version

Debian 6.16.9-1rodete1

Affected ABIs

arm64-v8a

[DanAlbert]

Comes from the platform so may not be a thing we need to fix for the NDK, but over to @pirama-arumuga-nainar to check.

The most common answer for Clang crashes in the platform btw is that you ran with too high a -j (you didn't specify one explicitly, so ninja will pick automatically based on the number of cores you have) for the amount of RAM you have and this is simply a crash from running out of memory. Try this?

$ WITH_TIDY=1 m -j1 out/soong/.intermediates/frameworks/native/services/surfaceflinger/Scheduler/libscheduler/android_x86_64_silvermont_static/obj/frameworks/native/services/surfaceflinger/Scheduler/src/Timer.tidy

[pirama-arumuga-nainar]

I can reproduce this. Seems like a genuine error. On a debug build:

clang-tidy-real: out/llvm-project/llvm/include/llvm/Support/Casting.h:566: decltype(auto) llvm::cast(const From &) [To = clang::ento::nonloc::CompoundVal, From = clang::en to::SVal]: Assertion `isa(Val) && "cast() argument of incompatible type!"' failed.

@forall-x are you at Google? If so, please open a go/android-llvm-bug in the future. The crash message in the Android clang toolchain prompts users to log the bug to the NDK issue tracker, so 3rd party developers can file issues here instead of LLVM's issue tracker.

[pirama-arumuga-nainar]

@yabinc/ @venk-ks can you check if it reproduces on r584948?

[enh-google]

I can reproduce this. Seems like a genuine error. On a debug build:

clang-tidy-real: out/llvm-project/llvm/include/llvm/Support/Casting.h:566: decltype(auto) llvm::cast(const From &) [To = clang::ento::nonloc::CompoundVal, From = clang::en to::SVal]: Assertion `isa(Val) && "cast() argument of incompatible type!"' failed.

@forall-x are you at Google? If so, please open a go/android-llvm-bug in the future. The crash message in the Android clang toolchain prompts users to log the bug to the NDK issue tracker, so 3rd party developers can file issues here instead of LLVM's issue tracker.

should we try to get something into llvm that lets clang read this boilerplate from a file in the sysroot or the same directory as the compiler binary or something, so the OS/ndk/third-parties can trivially have the right output without having to rebuild the whole toolchain?

[forall-x]

Comes from the platform so may not be a thing we need to fix for the NDK, but over to @pirama-arumuga-nainar to check.

The most common answer for Clang crashes in the platform btw is that you ran with too high a -j (you didn't specify one explicitly, so ninja will pick automatically based on the number of cores you have) for the amount of RAM you have and this is simply a crash from running out of memory. Try this?

$ WITH_TIDY=1 m -j1 out/soong/.intermediates/frameworks/native/services/surfaceflinger/Scheduler/libscheduler/android_x86_64_silvermont_static/obj/frameworks/native/services/surfaceflinger/Scheduler/src/Timer.tidy

Crash reproduces with -j1

[forall-x]

More investigation:
The line of source code that causes this is here. Instantiation site is not in AOSP but looks like this: "ftl::Concat("HW_VSYNC_ON_", displayId.value)". displayId.value is uint64_t.

The type of SVal in RegionStoreManager::bindArray line 2662 and onwards is silently expected to be CompoundVal, in actual fact it is ConcreteInt. (Is this correct?)

The following patch works around this issue, though probably there is a root cause to be addressed as well.

--- a/clang/lib/StaticAnalyzer/Core/RegionStore.cpp
+++ b/clang/lib/StaticAnalyzer/Core/RegionStore.cpp
@@ -2662,7 +2662,7 @@ RegionStoreManager::bindArray(LimitedRegionBindingsConstRef B,
     return bindAggregate(B, R, Init);
   }

-  if (Init.isUnknown())
+  if (!Init.getAs<nonloc::CompoundVal>() || Init.isUnknown())
     return bindAggregate(B, R, UnknownVal());

   // Remaining case: explicit compound values.

[pirama-arumuga-nainar]

I was able to reproduce this in AOSP (android-latest-release). Looks like it is fixed in ToT (but broken in clang-r584948/6d4a0935c85). The next step is to bisect and find a fix.

Debug build fails with the following assertion, btw:

clang-tidy: /usr/local/google/home/pirama/work/llvm-upstream/llvm-project-upstream/llvm/include/llvm/Support/Casting.h:566: decltype(auto) llvm::cast(const From &) [To = c
lang::ento::nonloc::CompoundVal, From = clang::ento::SVal]: Assertion `isa(Val) && "cast() argument of incompatible type!"' failed.

[pirama-arumuga-nainar]

This is fixed by:

[8e76304bdab8] [analyzer] Harden RegionStoreManager::bindArray (#153177)
 Author: Marco Borgeaud <marco.borgeaud@sonarsource.com>
 Date: Thu Oct 2 14:13:09 2025 +0200
 2 files changed, 56 insertions(+), 2 deletions(-)

@yabinc can we cherry-pick to r584948? No need to respin specifically for this bug but I'm sure we'll need new prebuilts when we land the compiler update.