// This is testing an attempt to corrupt the discriminant of the match // arm in a guard, followed by an attempt to continue matching on that // corrupted discriminant in the remaining match arms. // // Basically this is testing that our new NLL feature of emitting a // fake read on each match arm is catching cases like this. // // This case is interesting because it includes a guard that // diverges, and therefore a single final fake-read at the very end // after the final match arm would not suffice. // // It is also interesting because the access to the corrupted data // occurs in the pattern-match itself, and not in the guard // expression. struct ForceFnOnce; fn main() { let mut x = &mut Some(&2); let force_fn_once = ForceFnOnce; match x { &mut None => panic!("unreachable"), &mut Some(&_) if { // ForceFnOnce needed to exploit #27282 (|| { *x = None; drop(force_fn_once); })(); //~^ ERROR cannot mutably borrow `x` in match guard [E0510] false } => {} // this segfaults if we corrupted the discriminant, because // the compiler gets to *assume* that it cannot be the `None` // case, even though that was the effect of the guard. &mut Some(&2) if { panic!() } => {} _ => panic!("unreachable"), } }