https://gcc.gnu.org/bugzilla/show_bug.cgi?id=84526
--- Comment #6 from Martin Sebor <msebor at gcc dot gnu.org> --- The affected bit of code assumes dstref->base is an array and doesn't check to see if it's something else. In both of these cases it's a VAR_DECL so TREE_TYPE (TREE_TYPE (dstref->base)) returns null.