[Bug c++/38072] New: ICE on valid code.

[Bug c++/38072] New: ICE on valid code.

[c dot galambos at omniperception dot com]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 1762 bytes --]

ICE on what I believe to be valid code.  I've seen this happen on
all 4.3.x variants I've tired, but works fine with earlier versions gcc.  The
error disappears when optimisation is not used.  The following is the setup
I've used for the report:

'g++ -v' gives:

Using built-in specs.  Target: i686-apple-darwin9 Configured with:
../gcc-4.3.2/configure --prefix=/sw --prefix=/sw/lib/gcc4.3
--mandir=/sw/share/man --infodir=/sw/share/info
--enable-languages=c,c++,fortran,objc,java --with-arch=nocona
--with-tune=generic --build=i686-apple-darwin9 --with-gmp=/sw
--with-libiconv-prefix=/sw --with-system-zlib
--x-includes=/usr/X11R6/include --x-libraries=/usr/X11R6/lib
--disable-libjava-multilib Thread model: posix gcc version 4.3.2 (GCC)

Command line:

  g++-4 -c -O testBugE.cc

Error message:

Users/charlesgalambos/src/active/Ravl/Core/Container/Buffer/SingleBuffer.hh:
In static member function ‘static RavlN::SingleBufferBodyC<DataT>*
RavlN::SingleBufferC<DataT>::AllocBody(RavlN::SizeT) [with DataT =
TestObjC]’:
/Users/charlesgalambos/src/active/Ravl/Core/Container/Buffer/SingleBuffer.hh:217:
internal compiler error: Bus error Please submit a full bug report,

(I assume bugzilla will give me a chance to submit an attachment when
I've committed the report ??)


-- 
           Summary: ICE on valid code.
           Product: gcc
           Version: 4.3.2
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: c++
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: c dot galambos at omniperception dot com
 GCC build triplet: i686-apple-darwin9
  GCC host triplet: i686-apple-darwin9
GCC target triplet: i686-apple-darwin9


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug c++/38072] ICE on valid code.

[c dot galambos at omniperception dot com]

------- Comment #1 from c dot galambos at omniperception dot com  2008-11-10 17:39 -------
Created an attachment (id=16646)
 --> (http://gcc.gnu.org/bugzilla/attachment.cgi?id=16646&action=view)
Preprocessor output .


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug target/38072] ICE on valid code.

[pinskia at gcc dot gnu dot org]

------- Comment #2 from pinskia at gcc dot gnu dot org  2008-11-10 17:44 -------
Works on the trunk.


-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|c++                         |target


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] ICE on valid code.

[pinskia at gcc dot gnu dot org]

------- Comment #3 from pinskia at gcc dot gnu dot org  2008-11-10 17:48 -------
It was ICEing in
0x002084ac in remap_ssa_name (name=0x18e9c40, id=0xbffff4cc) at
/Users/apinski/src/local/gcc/gcc/tree-inline.c:192


-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|target                      |tree-optimization


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] ICE during inlining of valid code

[pinskia at gcc dot gnu dot org]

------- Comment #4 from pinskia at gcc dot gnu dot org  2008-11-10 19:20 -------
Here is a better backtrace:
#0  remap_ssa_name (name=0xb7d3c000, id=0xbfda005c) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:192
#1  0x08127db4 in copy_body_r (tp=0xb7d3dc28, walk_subtrees=0xbfd9fc78,
data=0xbfda005c) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:599
#2  0x083f195b in walk_tree_1 (tp=0xb7d3dc28, func=0x8127a90 <copy_body_r>,
data=0xbfda005c, pset=0x0, lh=0) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree.c:8618
#3  0x083f1a95 in walk_tree_1 (tp=0xb7d2ce1c, func=0x8127a90 <copy_body_r>,
data=0xbfda005c, pset=0x0, lh=0) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree.c:8857
#4  0x0812735d in remap_type_1 (type=0xb7d2cb60, id=0xbfda005c) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:403
#5  0x08127517 in remap_type (type=0xb7d2cb60, id=0xbfda005c) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:430
#6  0x0812743e in remap_type_1 (type=0xb7d2cc40, id=0xbfda005c) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:311
#7  0x08127517 in remap_type (type=0xb7d2cc40, id=0xbfda005c) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:430
#8  0x08126f97 in remap_decl (decl=0xb7d35720, id=0xbfda005c) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:262
#9  0x081278d7 in remap_ssa_name (name=0xb7d3c2a4, id=0xbfda005c) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:176
#10 0x08127db4 in copy_body_r (tp=0xb7d3e0a0, walk_subtrees=0xbfd9fe48,
data=0xbfda005c) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:599
#11 0x083f195b in walk_tree_1 (tp=0xb7d3e0a0, func=0x8127a90 <copy_body_r>,
data=0xbfda005c, pset=0x0, lh=0) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree.c:8618
#12 0x083f1a95 in walk_tree_1 (tp=0xbfd9ff0c, func=0x8127a90 <copy_body_r>,
data=0xbfda005c, pset=0x0, lh=0) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree.c:8857
#13 0x08128e59 in copy_bb (id=0xbfda005c, bb=0xb7d36168,
frequency_scale=-1210851216, count_scale=1) at
/home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:826
#14 0x0812979f in copy_cfg_body (id=0xbfda005c, count=<value optimized out>,
frequency=0, entry_block_map=0xb7d36fb4, exit_block_map=0xb7d367bc)
    at /home/apinski/src/gcc-sony/gcc-4.3-clean/gcc/gcc/tree-inline.c:1367

--- CUT ---
And a reduced testcase:
typedef __SIZE_TYPE__ size_t;
inline void* operator new[](unsigned, void* __p) throw() {  return __p;  }
void *malloc(size_t);
template<typename DataT>   inline   void ConstructRawArray(DataT *data,unsigned
size) {
     new(data) DataT[size];
}
template<typename DataT>   struct SingleBufferBodyC  
{
  DataT *buff;
  void *operator new(size_t s,void *mem)        {       }
  inline unsigned Size() const          {        }
  SingleBufferBodyC(unsigned nsize)    
  {    
  ConstructRawArray(this->buff,this->Size());  
  }
};
template<typename DataT>   struct SingleBufferC   
{
  SingleBufferC(unsigned size)     
  {
     SingleBufferBodyC<DataT> *ret = reinterpret_cast<SingleBufferBodyC<DataT>
*> (malloc(8)) ;   
     new(ret) SingleBufferBodyC<DataT>(size);    
  }
};
struct TestObjC {
 TestObjC()   { }
 int val;
 };
int TestSingleBuffer() {
   SingleBufferC<TestObjC> buff3(100);
}


-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  GCC build triplet|i686-apple-darwin9          |
   GCC host triplet|i686-apple-darwin9          |
 GCC target triplet|i686-apple-darwin9          |
           Keywords|                            |ice-on-valid-code
            Summary|ICE on valid code.          |ICE during inlining of valid
                   |                            |code


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] ICE during inlining of valid code

[pinskia at gcc dot gnu dot org]

------- Comment #5 from pinskia at gcc dot gnu dot org  2008-11-10 19:27 -------
Still happens on the 4.3 branch as of 4.3.3 20080918.  Building a new compiler.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[pinskia at gcc dot gnu dot org]

------- Comment #6 from pinskia at gcc dot gnu dot org  2008-11-10 23:57 -------
Confirmed, still fails today on 4.3 branch.


-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1
      Known to fail|                            |4.3.0 4.3.3
      Known to work|                            |4.4.0 4.1.1
   Last reconfirmed|0000-00-00 00:00:00         |2008-11-10 23:57:21
               date|                            |
            Summary|ICE during inlining of valid|[4.3 Regression] ICE during
                   |code                        |inlining of valid code
   Target Milestone|---                         |4.3.3


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[rguenth at gcc dot gnu dot org]

------- Comment #7 from rguenth at gcc dot gnu dot org  2008-11-19 22:57 -------
We are remapping

(gdb) up
#4  0x08330b6c in remap_type_1 (type=0xb7d835b0, id=0xbfbe96a4)
    at /home/richard/src/gcc-4_3-branch/gcc/tree-inline.c:403
403       walk_tree (&TYPE_SIZE_UNIT (new), copy_body_r, id, NULL);

which contains an SSA_NAME that is in the freelist.  Both size and unit-size
are expressions.

iftmp.1_6 = (struct TestObjC[0:size.0 + -1] *) D.1854_5

it looks like that we do not gimplify all of the parameter types.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[rguenth at gcc dot gnu dot org]

-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P3                          |P2


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[reichelt at gcc dot gnu dot org]

------- Comment #8 from reichelt at gcc dot gnu dot org  2008-12-28 18:50 -------
Shorter testcase without templates:

==========================================================================
inline void* operator new[](__SIZE_TYPE__, void* p) throw() { return p; }

struct A
{
  A() {}
  int i;
};

struct B
{
  static void foo(A *p, int n) { new(p) A[n]; }
  B() { foo(p, 1); }
  A* p;
};

B b;
==========================================================================


-- 

reichelt at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |reichelt at gcc dot gnu dot
                   |                            |org
           Keywords|                            |monitored
      Known to work|4.4.0 4.1.1                 |4.4.0 4.1.1 4.2.5


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[rguenth at gcc dot gnu dot org]

------- Comment #9 from rguenth at gcc dot gnu dot org  2009-01-24 10:20 -------
GCC 4.3.3 is being released, adjusting target milestone.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|4.3.3                       |4.3.4


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[pinskia at gcc dot gnu dot org]

------- Comment #10 from pinskia at gcc dot gnu dot org  2009-01-30 22:20 -------
*** Bug 39047 has been marked as a duplicate of this bug. ***


-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dima at debian dot org


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[rguenth at gcc dot gnu dot org]

------- Comment #11 from rguenth at gcc dot gnu dot org  2009-01-31 00:08 -------
Hm, we are remapping

iftmp.1_6 = (struct A[0:n.0 + -1] *) D.1755_5

where the variable array pointer type contains in TYPE_SIZE_UNIT n.0_3 * 4
and n.0_3 is on the free list.

I wonder how we end up with an SSA name there in the first place.  Likely
a tree sharing issue.  TYPE_SIZE is (bit_size_type) SAVE_EXPR <n.0> * 32


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[rguenth at gcc dot gnu dot org]

------- Comment #12 from rguenth at gcc dot gnu dot org  2009-07-10 12:18 -------
would be interesting to know what fixed this on the trunk.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[mikpe at it dot uu dot se]

------- Comment #13 from mikpe at it dot uu dot se  2009-07-11 15:34 -------
(In reply to comment #12)
> would be interesting to know what fixed this on the trunk.

A binary search on trunk identified revision 138207 as the point that fixed
this ICE. That revision is a large merge from gimple-tuples-branch.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[rguenth at gcc dot gnu dot org]

------- Comment #14 from rguenth at gcc dot gnu dot org  2009-07-11 15:40 -------
Bah.  So this then becomes "it would be interesting to know what fixed this on
the gimple-tuples-branch" ...


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[mikpe at it dot uu dot se]

------- Comment #15 from mikpe at it dot uu dot se  2009-07-14 19:51 -------
(In reply to comment #14)
> Bah.  So this then becomes "it would be interesting to know what fixed this on
> the gimple-tuples-branch" ...

Revision 134191 fixed this on gimple-tuples-branch.


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[rguenth at gcc dot gnu dot org]

------- Comment #16 from rguenth at gcc dot gnu dot org  2009-08-04 12:29 -------
GCC 4.3.4 is being released, adjusting target milestone.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|4.3.4                       |4.3.5


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[rguenth at gcc dot gnu dot org]

------- Comment #17 from rguenth at gcc dot gnu dot org  2010-05-22 18:12 -------
GCC 4.3.5 is being released, adjusting target milestone.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|4.3.5                       |4.3.6


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

[Bug tree-optimization/38072] [4.3 Regression] ICE during inlining of valid code

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=38072

Richard Guenther <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
      Known to work|                            |
         Resolution|                            |FIXED
   Target Milestone|4.3.6                       |4.4.0
      Known to fail|                            |

--- Comment #18 from Richard Guenther <rguenth at gcc dot gnu.org> 2011-06-27 11:36:28 UTC ---
Fixed for 4.4.0.