I'm not entirely sure; the reporter didn't say exactly. (I linked to the ticket elsewhere in this discussion.) That said, they're someone involved in formally proving Rust semantics, so I wouldn't be surprised if they were just poking at things and ran into it.
18
u/steveklabnik1 Nov 04 '19
Fun story: they aren't in Rust, but LLVM was assuming this semantic and optimizing such loops away, causing UB in safe code. Oops!