Index: cfe/trunk/lib/StaticAnalyzer/Core/Store.cpp =================================================================== --- cfe/trunk/lib/StaticAnalyzer/Core/Store.cpp +++ cfe/trunk/lib/StaticAnalyzer/Core/Store.cpp @@ -440,7 +440,10 @@ // value. See also the similar FIXME in getLValueFieldOrIvar(). if (Base.isUnknownOrUndef() || Base.getAs()) return Base; - + + if (Base.getAs()) + return UnknownVal(); + const SubRegion *BaseRegion = Base.castAs().getRegionAs(); Index: cfe/trunk/test/Analysis/ptr-arith.c =================================================================== --- cfe/trunk/test/Analysis/ptr-arith.c +++ cfe/trunk/test/Analysis/ptr-arith.c @@ -342,3 +342,8 @@ clang_analyzer_eval(*ptr3 == 'a'); // expected-warning{{UNKNOWN}} } +void test_no_crash_on_pointer_to_label() { + char *a = &&label; + a[0] = 0; +label:; +}