Related: rdar://problem/10832617

Here's a smaller test case, also reduced from well-formed code:

template struct scoped_array {
scoped_array(C* p = null);
};
template struct Foo {
Foo() : a(new scoped_array[5]) { }
scoped_array< scoped_array > a;
};
class Bar {};
Foo x;

This breaks chrome too. Here's the reduced test case for that:

class MessageLoop {
public:
explicit MessageLoop(int type = 0);
};

template
class CookieStoreTest {
protected:
CookieStoreTest() {
new MessageLoop;
}
};

struct CookieMonsterTestTraits {
};

class DeferredCookieTaskTest : public CookieStoreTest {
DeferredCookieTaskTest() {}
};

Fixed in r151146. Now compiles Matt's and Nico's test cases cleanly, and doesn't crash on Ted's (there's no way to compile that one cleanly). Also works with a variant of Matt's case with two default arguments.

*** Bug llvm/llvm-bugzilla-archive#12065 has been marked as a duplicate of this bug. ***

mentioned in issue llvm/llvm-bugzilla-archive#12065