diff --git a/src/assertions.cpp b/src/assertions.cpp
index 6904c2a0f..933117801 100644
--- a/src/assertions.cpp
+++ b/src/assertions.cpp
@@ -137,6 +137,31 @@ class AssertExtractor {
                 // no need to check for valid access, it must be a number
                 res.emplace_back(TypeConstraint{cond.left, TypeGroup::number});
             } else {
+                bool allow_pointers = false;
+
+                switch (cond.op) {
+                case Condition::Op::EQ: allow_pointers = true; break;
+                case Condition::Op::NE: allow_pointers = true; break;
+                case Condition::Op::SET: allow_pointers = true; break;
+                case Condition::Op::NSET: allow_pointers = true; break;
+                case Condition::Op::LT: allow_pointers = true; break;
+                case Condition::Op::LE: allow_pointers = true; break;
+                case Condition::Op::GT: allow_pointers = true; break;
+                case Condition::Op::GE: allow_pointers = true; break;
+                case Condition::Op::SLT: allow_pointers = false; break;
+                case Condition::Op::SLE: allow_pointers = false; break;
+                case Condition::Op::SGT: allow_pointers = false; break;
+                case Condition::Op::SGE: allow_pointers = false; break;
+                default: assert(!"unexpected condition");
+                }
+
+                // Only permit pointer comparisons if the operation is 64-bit.
+                allow_pointers &= cond.is64;
+
+                if (!allow_pointers) {
+                    res.emplace_back(TypeConstraint{cond.left, TypeGroup::number});
+                }
+
                 res.emplace_back(ValidAccess{cond.left});
                 // OK - map_fd is just another pointer
                 // Anything can be compared to 0
@@ -242,7 +267,8 @@ class AssertExtractor {
             }
             return {Assert{TypeConstraint{ins.dst, TypeGroup::number}}};
         }
-        // For all other binary operations, the destination register must be a number and the source must either be an immediate or a number.
+        // For all other binary operations, the destination register must be a number and the source must either be an
+        // immediate or a number.
         default:
             if (const auto src = std::get_if<Reg>(&ins.v)) {
                 return {Assert{TypeConstraint{ins.dst, TypeGroup::number}},
diff --git a/src/test/ebpf_yaml.cpp b/src/test/ebpf_yaml.cpp
index 9b2e57120..1abb19c9f 100644
--- a/src/test/ebpf_yaml.cpp
+++ b/src/test/ebpf_yaml.cpp
@@ -179,6 +179,9 @@ static ebpf_verifier_options_t raw_options_to_options(const std::set<string>& ra
     // Default to the machine's native endianness.
     options.big_endian = (std::endian::native == std::endian::big);
 
+    // Default to not assuming assertions.
+    options.assume_assertions = false;
+
     for (const string& name : raw_options) {
         if (name == "!allow_division_by_zero") {
             options.allow_division_by_zero = false;
@@ -192,6 +195,8 @@ static ebpf_verifier_options_t raw_options_to_options(const std::set<string>& ra
             options.big_endian = true;
         } else if (name == "!big_endian") {
             options.big_endian = false;
+        } else if (name == "assume_assertions") {
+            options.assume_assertions = true;
         } else {
             throw std::runtime_error("Unknown option: " + name);
         }
diff --git a/test-data/jump.yaml b/test-data/jump.yaml
index edc063911..e9c08805a 100644
--- a/test-data/jump.yaml
+++ b/test-data/jump.yaml
@@ -715,3 +715,537 @@ post:
 
 messages:
   - "0: Invalid type (r1.type in {number, ctx, stack, packet, shared})"
+
+# # Test cases for special case of comparison of not a number against a number when immediate is 0
+---
+test-case: JEQ with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 == 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post:
+  - r0.svalue=1
+  - r0.type=number
+  - r0.uvalue=1
+  - r1.ctx_offset=0
+  - r1.svalue=[1, 2147418112]
+  - r1.type=ctx
+
+messages:
+  - "0:2: Code is unreachable after 0:2"
+---
+test-case: JNE with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 != 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0:1: Code is unreachable after 0:1"
+  - "2: Code is unreachable after 2"
+  - "2: Invalid type (r0.type == number)"
+
+---
+test-case: JSET with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 &== 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "2: Code is unreachable after 2"
+  - "2: Invalid type (r0.type == number)"
+
+---
+test-case: JNSET with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 &!= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "2: Code is unreachable after 2"
+  - "2: Invalid type (r0.type == number)"
+
+---
+test-case: JLT with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 < 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post:
+  - r0.svalue=1
+  - r0.type=number
+  - r0.uvalue=1
+  - r1.ctx_offset=0
+  - r1.svalue=[1, 2147418112]
+  - r1.type=ctx
+  - r1.uvalue=[0, +oo]
+
+messages:
+  - "0:2: Code is unreachable after 0:2"
+
+---
+test-case: JLE with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 <= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post:
+  - r0.svalue=1
+  - r0.type=number
+  - r0.uvalue=1
+  - r1.ctx_offset=0
+  - r1.svalue=[1, 2147418112]
+  - r1.type=ctx
+  - r1.uvalue=[1, +oo]
+
+messages:
+  - "0:2: Code is unreachable after 0:2"
+
+---
+test-case: JGT with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 <= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post:
+  - r0.svalue=1
+  - r0.type=number
+  - r0.uvalue=1
+  - r1.ctx_offset=0
+  - r1.svalue=[1, 2147418112]
+  - r1.type=ctx
+  - r1.uvalue=[1, +oo]
+
+messages:
+  - "0:2: Code is unreachable after 0:2"
+
+---
+test-case: JGE with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 <= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post:
+  - r0.svalue=1
+  - r0.type=number
+  - r0.uvalue=1
+  - r1.ctx_offset=0
+  - r1.svalue=[1, 2147418112]
+  - r1.type=ctx
+  - r1.uvalue=[1, +oo]
+
+messages:
+  - "0:2: Code is unreachable after 0:2"
+
+---
+test-case: JSLT with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 s< 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JSLE with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 s<= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JSGT with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 s<= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JSGE with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if r1 s<= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JEQ32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 == 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JNE32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 != 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JSET32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 &== 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JNSET32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 &!= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JLT32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 < 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JLE32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 <= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JGT32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 <= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JGE32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 <= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JSLT32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 s< 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JSLE32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 s<= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JSGT32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 s<= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"
+
+---
+test-case: JSGE32 with imm 0 and pointer
+options: ["assume_assertions"]
+pre:
+  - "r1.type=ctx"
+  - "r1.svalue=[1, 2147418112]"
+  - "r1.ctx_offset=0"
+
+code:
+  <start>: |
+    if w1 s<= 0 goto <exit>
+    r0 = 1
+  <exit>: |
+    exit
+
+post: []
+
+messages:
+  - "0: Code is unreachable after 0"
+  - "0: Invalid type (r1.type == number)"