https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106845
--- Comment #2 from David Malcolm <dmalcolm at gcc dot gnu.org> --- Failing assertion here: #1 0x00000000014df116 in ana::byte_range::exceeds_p (this=0x7fffffffbf80, other=..., out_overhanging_byte_range=0x7fffffffbfc0) at ../../src/gcc/analyzer/store.cc:464 464 gcc_assert (size > 0); (gdb) list 459 { 460 /* THIS definitely exceeds OTHER. */ 461 byte_offset_t start = MAX (get_start_byte_offset (), 462 other.get_next_byte_offset ()); 463 byte_offset_t size = get_next_byte_offset () - start; 464 gcc_assert (size > 0); 465 out_overhanging_byte_range->m_start_byte_offset = start; 466 out_overhanging_byte_range->m_size_in_bytes = size; 467 return true; 468 } where "this" and "other" are both empty, having 0 size: (gdb) call this->dump() bytes 1-0 (gdb) call other.dump() bytes 0--1 due to the cst_capacity_tree in the region_model::check_region_bounds caller is zero.