Handle Rawtype more gracefully

docs/CHANGELOG.md

@@ -42,6 +42,7 @@ Optional Checker.
 
 **Closed issues:**
 
+eisop#792.
 
 Version 3.49.5-eisop1 (April 26, 2026)
 --------------------------------------

framework/src/main/java/org/checkerframework/framework/type/typeannotator/PropagationTypeAnnotator.java

@@ -127,6 +127,14 @@ public Void visitWildcard(AnnotatedWildcardType wildcard, Void aVoid) {
         }
         visitedNodes.put(wildcard, null);
 
+        // visitDeclared already copies annotations from the declaration to synthetic wildcard type
+        // arguments of raw types. If this visitor scans those wildcards' bounds, it may visit a
+        // nested wildcard that is not itself a type argument of the raw parent, so there is no
+        // corresponding type parameter from which to propagate annotations.
+        if (AnnotatedTypes.isTypeArgOfRawType(wildcard)) {
+            return null;
+        }
+
         Element typeParamElement = TypesUtils.wildcardToTypeParam(wildcard.getUnderlyingType());
         if (typeParamElement == null && !parents.isEmpty()) {
             typeParamElement = getTypeParameterElement(wildcard, parents.peekFirst());

framework/tests/all-systems/RawtypeCrash.java

@@ -0,0 +1,5 @@
+@SuppressWarnings("all") // Raw type use is intentional: this is a no-crash regression test.
+public class RawtypeCrash<V> {
+    RawtypeCrash<? extends V> nullObj = null;
+    Object obj = ((RawtypeCrash) null).nullObj;
+}

framework/tests/viewpointtest/RawtypeCrash.java

@@ -0,0 +1,4 @@
+public class RawtypeCrash<V> {
+    RawtypeCrash<? extends V> nullObj = null;
+    Object obj = ((RawtypeCrash) null).nullObj;
+}