After spending 15 minutes trying to figure out why this was crashing, I realized it was a bug in the test case :)

git-svn-id: https://llvm.org/svn/llvm-project/cfe/trunk@72680 91177308-0d34-0410-b5e6-96231b3b80d8
diff --git a/test/SemaTemplate/example-dynarray.cpp b/test/SemaTemplate/example-dynarray.cpp
index dd2488f..cca3709 100644
--- a/test/SemaTemplate/example-dynarray.cpp
+++ b/test/SemaTemplate/example-dynarray.cpp
@@ -31,7 +31,7 @@
     T* NewStart = (T*)malloc(sizeof(T) * other.size());
 
     for (unsigned I = 0, N = other.size(); I != N; ++I)
-      new (Start + I) T(other[I]);
+      new (NewStart + I) T(other[I]);
 
     // FIXME: destroy everything in Start
     free(Start);