ICE occurs when --ir-ast-json or --ir-optimized-ast-json is used

[P1umH0]

Description

My fuzzer found a bug where ICE occurred when using --ir-ast-json or --ir-optimized-ast-json

Environment

• Compiler version: 0.8.28
• Target EVM version (as per compiler settings): None
• Framework/IDE (e.g. Truffle or Remix): None
• EVM execution environment / backend / blockchain client: None
• Operating system: Ubuntu

Steps to Reproduce

I fed the .sol files in the test/libsolidity directory into my fuzzer as the initial corpus, and it found this bug

the code

contract Test {
    function f() public pure returns (string memory) {
        return type(C).name;
    }
    function g() public pure returns (string memory) {
        return type(A).name;
    }
    function h() public pure returns (string memory) {
        return type(I).name;
    }
}

abstract contract A {
    function f() virtual public pure;
}

interface I {
    function f() external pure;
}

contract C {
    function f() pure public {
    }
}

the cmd

solc --ir-ast-json a.sol
# or
solc --ir-optimized-ast-json a.sol

the bug

Internal compiler error:
/solidity/libsolidity/interface/CompilerStack.cpp(821): Throw in function solidity::yul::YulStack solidity::frontend::CompilerStack::loadGeneratedIR(const string&) const
Dynamic exception type: boost::wrapexcept<solidity::langutil::InternalCompilerError>
std::exception::what: 

Invalid IR generated:
Error: Expected keyword "object".



[solidity::util::tag_comment*] = 

Invalid IR generated:
Error: Expected keyword "object".