-bcf crashed,It seems that caused by ValueToValueMapTy.

[AloneMonkey]

• thread Clang segfaults when sub-loop > 1 #1: tid = 0x1e87b, 0x000000010541fb0c LLVMObfuscation.dylib`llvm::ValueHandleBase::getValPtr(this=0x0000000000000012) const + 12 at ValueHandle.h:104, queue = 'com.apple.main-thread', stop reason = EXC_BAD_ACCESS (code=1, address=0x22)
  • frame #0: 0x000000010541fb0c LLVMObfuscation.dylibllvm::ValueHandleBase::getValPtr(this=0x0000000000000012) const + 12 at ValueHandle.h:104 frame #1: 0x000000010541faec LLVMObfuscation.dylibllvm::CallbackVH::operator llvm::Value_(this=0x000000000000000a) const + 28 at ValueHandle.h:360
    frame Added Kryptonite substitution #2: 0x000000010541f8bc LLVMObfuscation.dylibllvm::DenseMapInfo<llvm::ValueMapCallbackVH<llvm::Value const_, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex<false> > > >::isEqual(LHS=0x000000000000000a, RHS=0x00007fff5fbfcd00) + 28 at ValueMap.h:289 frame #3: 0x000000010541f708 LLVMObfuscation.dylibllvm::DenseMapBase<llvm::DenseMap<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex > >, llvm::WeakVH, llvm::DenseMapInfo<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex > > >, llvm::detail::DenseMapPair<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex > >, llvm::WeakVH> >, llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex > >, llvm::WeakVH, llvm::DenseMapInfo<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex > > >, llvm::detail::DenseMapPair<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex > >, llvm::WeakVH> >::destroyAll(this=0x00007fff5fbfd1b0) + 120 at DenseMap.h:270
    frame When compiled on MinGW, the CPRNG cannot seed automatically, as there is no /dev/random  #4: 0x000000010541f66f LLVMObfuscation.dylibllvm::DenseMap<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex<false> > >, llvm::WeakVH, llvm::DenseMapInfo<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex<false> > > >, llvm::detail::DenseMapPair<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex<false> > >, llvm::WeakVH> >::~DenseMap(this=0x00007fff5fbfd1b0) + 31 at DenseMap.h:574 frame #5: 0x000000010541f645 LLVMObfuscation.dylibllvm::DenseMap<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex > >, llvm::WeakVH, llvm::DenseMapInfo<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex > > >, llvm::detail::DenseMapPair<llvm::ValueMapCallbackVH<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex > >, llvm::WeakVH> >::~DenseMap(this=0x00007fff5fbfd1b0) + 21 at DenseMap.h:573
    frame [FALSE ISSUE] obfuscator-llvm don't compile using makefile #6: 0x000000010541f61e LLVMObfuscation.dylibllvm::ValueMap<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex<false> > >::~ValueMap(this=0x00007fff5fbfd1b0) + 222 at ValueMap.h:80 frame #7: 0x000000010541f535 LLVMObfuscation.dylibllvm::ValueMap<llvm::Value const*, llvm::WeakVH, llvm::ValueMapConfig<llvm::Value const*, llvm::sys::SmartMutex > >::~ValueMap(this=0x00007fff5fbfd1b0) + 21 at ValueMap.h:80
    frame ollvm34 fall into infinite loop when compiling openssl-1.0.1.f #8: 0x000000010541c76f LLVMObfuscation.dylib(anonymous namespace)::BogusControlFlow::createAlteredBasicBlock(this=0x0000000105318260, basicBlock=0x00000001057000e0, Name=0x00000001057001b0, F=0x0000000105500598) + 5183 at BogusControlFlow.cpp:527 frame #9: 0x000000010541ae22 LLVMObfuscation.dylib(anonymous namespace)::BogusControlFlow::addBogusFlow(this=0x0000000105318260, basicBlock=0x0000000105500a40, F=0x0000000105500598) + 418 at BogusControlFlow.cpp:260
    frame Update to clang-503.0.38 #10: 0x000000010541d1ff LLVMObfuscation.dylib(anonymous namespace)::BogusControlFlow::bogus(this=0x0000000105318260, F=0x0000000105500598) + 2559 at BogusControlFlow.cpp:209 frame #11: 0x000000010541ac3f LLVMObfuscation.dylib(anonymous namespace)::BogusControlFlow::runOnFunction(this=0x0000000105318260, F=0x0000000105500598) + 495 at BogusControlFlow.cpp:145
    frame obfuscator 3.4 as xcode 5.1.1 plugin build error #12: 0x00000001016af76d optllvm::FPPassManager::runOnFunction(this=0x00000001053185d0, F=0x0000000105500598) + 413 at LegacyPassManager.cpp:1520 frame #13: 0x00000001016afa85 optllvm::FPPassManager::runOnModule(this=0x00000001053185d0, M=0x00000001053168e0) + 117 at LegacyPassManager.cpp:1540
    frame obfuscator-llvm 3.5 crashes when building a specific m file #14: 0x00000001016b04a0 opt(anonymous namespace)::MPPassManager::runOnModule(this=0x00000001053178c0, M=0x00000001053168e0) + 1392 at LegacyPassManager.cpp:1596 frame #15: 0x00000001016afd46 optllvm::legacy::PassManagerImpl::run(this=0x0000000105317540, M=0x00000001053168e0) + 310 at LegacyPassManager.cpp:1698
    frame Add string encryption pass #16: 0x00000001016b0c21 optllvm::legacy::PassManager::run(this=0x00007fff5fbfe258, M=0x00000001053168e0) + 33 at LegacyPassManager.cpp:1729 frame #17: 0x0000000100032863 optmain(argc=8, argv=0x00007fff5fbff6b8) + 14531 at opt.cpp:600
    frame string encryption pass #18: 0x00007fff932345c9 libdyld.dylibstart + 1 frame #19: 0x00007fff932345c9 libdyld.dylibstart + 1

when createAlteredBasicBlock , ValueToValueMapTy destroy will crash.

[cryptopathe]

We need for sure more information about the code that was compiled during the crash to figure out what happened. Can you send us a short C/C++ file crashing the pass? Many thanks.