[Bug middle-end/44890] New: Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[Bug middle-end/44890] New: Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[bergner at gcc dot gnu dot org]

The pr30388.c test case ICE's on trunk and powerpc64-linux with the following
options: -Os -m64

Looking at a backtrace, we're hitting this assert in tree.c:build2_stat():

  if (code == POINTER_PLUS_EXPR && arg0 && arg1 && tt)
    gcc_assert (POINTER_TYPE_P (tt) && POINTER_TYPE_P (TREE_TYPE (arg0))
                && INTEGRAL_TYPE_P (TREE_TYPE (arg1))
                && useless_type_conversion_p (sizetype, TREE_TYPE (arg1)));

gdb shows this:

(gdb) frame 1
#1  0x000000001066de84 in build2_stat (code=POINTER_PLUS_EXPR,
tt=0x40000410000, arg0=0x400005112e8, arg1=0x400003104b0)
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/tree.c:3715
3715        gcc_assert (POINTER_TYPE_P (tt) && POINTER_TYPE_P (TREE_TYPE
(arg0))

(gdb) call debug_tree(tt)
 <integer_type 0x40000410000 long unsigned int public unsigned sizetype DI
    size <integer_cst 0x40000310780 type <integer_type 0x400004100a8
bit_size_type> constant 64>
    unit size <integer_cst 0x400003107a8 type <integer_type 0x40000410000 long
unsigned int> constant 8>
    align 64 symtab 0 alias set -1 canonical type 0x40000410000 precision 64
min <integer_cst 0x400003107d0 0> max <integer_cst 0x40000310aa0 -1>>

(gdb) call debug_tree(arg0)
 <ssa_name 0x400005112e8
    type <integer_type 0x40000410000 long unsigned int public unsigned sizetype
DI
        size <integer_cst 0x40000310780 constant 64>
        unit size <integer_cst 0x400003107a8 constant 8>
        align 64 symtab 0 alias set -1 canonical type 0x40000410000 precision
64 min <integer_cst 0x400003107d0 0> max <integer_cst 0x40000310aa0 -1>>
    visited var <var_decl 0x400004f1fe0 D.2060>def_stmt D.2060_43 = ivtmp.27_37
+ D.2059_42; version 43>

(gdb) call debug_tree(arg1)
 <integer_cst 0x400003104b0 type <integer_type 0x40000410000 long unsigned int>
constant 1>


-- 
           Summary: Hitting gcc_assert in build2_stat with pr30388.c
                    testsuite test case
           Product: gcc
           Version: 4.6.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: middle-end
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: bergner at gcc dot gnu dot org
 GCC build triplet: powerpc64-linux
  GCC host triplet: powerpc64-linux
GCC target triplet: powerpc64-linux


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890

[Bug middle-end/44890] Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[pinskia at gmail dot com]

------- Comment #1 from pinskia at gmail dot com  2010-07-09 14:48 -------
Subject: Re:   New: Hitting gcc_assert in build2_stat with pr30388.c testsuite
test case

Can you give the full backtrace? Where is the build2 being called from?

On Jul 9, 2010, at 7:36 AM, "bergner at gcc dot gnu dot org"
<gcc-bugzilla@gcc.gnu.org 
 > wrote:

> The pr30388.c test case ICE's on trunk and powerpc64-linux with the  
> following
> options: -Os -m64
>
> Looking at a backtrace, we're hitting this assert in  
> tree.c:build2_stat():
>
>  if (code == POINTER_PLUS_EXPR && arg0 && arg1 && tt)
>    gcc_assert (POINTER_TYPE_P (tt) && POINTER_TYPE_P (TREE_TYPE  
> (arg0))
>                && INTEGRAL_TYPE_P (TREE_TYPE (arg1))
>                && useless_type_conversion_p (sizetype, TREE_TYPE  
> (arg1)));
>
> gdb shows this:
>
> (gdb) frame 1
> #1  0x000000001066de84 in build2_stat (code=POINTER_PLUS_EXPR,
> tt=0x40000410000, arg0=0x400005112e8, arg1=0x400003104b0)
>    at /home/bergner/gcc/gcc-mainline-r161924/gcc/tree.c:3715
> 3715        gcc_assert (POINTER_TYPE_P (tt) && POINTER_TYPE_P  
> (TREE_TYPE
> (arg0))
>
> (gdb) call debug_tree(tt)
> <integer_type 0x40000410000 long unsigned int public unsigned  
> sizetype DI
>    size <integer_cst 0x40000310780 type <integer_type 0x400004100a8
> bit_size_type> constant 64>
>    unit size <integer_cst 0x400003107a8 type <integer_type 0x40000410000 
>  long
> unsigned int> constant 8>
>    align 64 symtab 0 alias set -1 canonical type 0x40000410000  
> precision 64
> min <integer_cst 0x400003107d0 0> max <integer_cst 0x40000310aa0 -1>>
>
> (gdb) call debug_tree(arg0)
> <ssa_name 0x400005112e8
>    type <integer_type 0x40000410000 long unsigned int public  
> unsigned sizetype
> DI
>        size <integer_cst 0x40000310780 constant 64>
>        unit size <integer_cst 0x400003107a8 constant 8>
>        align 64 symtab 0 alias set -1 canonical type 0x40000410000  
> precision
> 64 min <integer_cst 0x400003107d0 0> max <integer_cst 0x40000310aa0  
> -1>>
>    visited var <var_decl 0x400004f1fe0 D.2060>def_stmt D.2060_43 =  
> ivtmp.27_37
> + D.2059_42; version 43>
>
> (gdb) call debug_tree(arg1)
> <integer_cst 0x400003104b0 type <integer_type 0x40000410000 long  
> unsigned int>
> constant 1>
>
>
> -- 
>           Summary: Hitting gcc_assert in build2_stat with pr30388.c
>                    testsuite test case
>           Product: gcc
>           Version: 4.6.0
>            Status: UNCONFIRMED
>          Severity: normal
>          Priority: P3
>         Component: middle-end
>        AssignedTo: unassigned at gcc dot gnu dot org
>        ReportedBy: bergner at gcc dot gnu dot org
> GCC build triplet: powerpc64-linux
>  GCC host triplet: powerpc64-linux
> GCC target triplet: powerpc64-linux
>
>
> http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890
>


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890

Re: [Bug middle-end/44890] New: Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[Andrew Pinski]

Can you give the full backtrace? Where is the build2 being called from?

On Jul 9, 2010, at 7:36 AM, "bergner at gcc dot gnu dot org" <gcc-bugzilla@gcc.gnu.org 
 > wrote:

> The pr30388.c test case ICE's on trunk and powerpc64-linux with the  
> following
> options: -Os -m64
>
> Looking at a backtrace, we're hitting this assert in  
> tree.c:build2_stat():
>
>  if (code == POINTER_PLUS_EXPR && arg0 && arg1 && tt)
>    gcc_assert (POINTER_TYPE_P (tt) && POINTER_TYPE_P (TREE_TYPE  
> (arg0))
>                && INTEGRAL_TYPE_P (TREE_TYPE (arg1))
>                && useless_type_conversion_p (sizetype, TREE_TYPE  
> (arg1)));
>
> gdb shows this:
>
> (gdb) frame 1
> #1  0x000000001066de84 in build2_stat (code=POINTER_PLUS_EXPR,
> tt=0x40000410000, arg0=0x400005112e8, arg1=0x400003104b0)
>    at /home/bergner/gcc/gcc-mainline-r161924/gcc/tree.c:3715
> 3715        gcc_assert (POINTER_TYPE_P (tt) && POINTER_TYPE_P  
> (TREE_TYPE
> (arg0))
>
> (gdb) call debug_tree(tt)
> <integer_type 0x40000410000 long unsigned int public unsigned  
> sizetype DI
>    size <integer_cst 0x40000310780 type <integer_type 0x400004100a8
> bit_size_type> constant 64>
>    unit size <integer_cst 0x400003107a8 type <integer_type 0x40000410000 
>  long
> unsigned int> constant 8>
>    align 64 symtab 0 alias set -1 canonical type 0x40000410000  
> precision 64
> min <integer_cst 0x400003107d0 0> max <integer_cst 0x40000310aa0 -1>>
>
> (gdb) call debug_tree(arg0)
> <ssa_name 0x400005112e8
>    type <integer_type 0x40000410000 long unsigned int public  
> unsigned sizetype
> DI
>        size <integer_cst 0x40000310780 constant 64>
>        unit size <integer_cst 0x400003107a8 constant 8>
>        align 64 symtab 0 alias set -1 canonical type 0x40000410000  
> precision
> 64 min <integer_cst 0x400003107d0 0> max <integer_cst 0x40000310aa0  
> -1>>
>    visited var <var_decl 0x400004f1fe0 D.2060>def_stmt D.2060_43 =  
> ivtmp.27_37
> + D.2059_42; version 43>
>
> (gdb) call debug_tree(arg1)
> <integer_cst 0x400003104b0 type <integer_type 0x40000410000 long  
> unsigned int>
> constant 1>
>
>
> -- 
>           Summary: Hitting gcc_assert in build2_stat with pr30388.c
>                    testsuite test case
>           Product: gcc
>           Version: 4.6.0
>            Status: UNCONFIRMED
>          Severity: normal
>          Priority: P3
>         Component: middle-end
>        AssignedTo: unassigned at gcc dot gnu dot org
>        ReportedBy: bergner at gcc dot gnu dot org
> GCC build triplet: powerpc64-linux
>  GCC host triplet: powerpc64-linux
> GCC target triplet: powerpc64-linux
>
>
> http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890
>

[Bug middle-end/44890] Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[bergner at gcc dot gnu dot org]

------- Comment #2 from bergner at gcc dot gnu dot org  2010-07-09 14:53 -------
Full backtrace:

(gdb) bt
#0  fancy_abort (file=0x10ab02e0
"/home/bergner/gcc/gcc-mainline-r161924/gcc/tree.c", line=3717,
function=0x10aafb20 "build2_stat")
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/diagnostic.c:879
#1  0x000000001066de84 in build2_stat (code=POINTER_PLUS_EXPR,
tt=0x40000410000, arg0=0x400005112e8, arg1=0x400003104b0)
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/tree.c:3715
#2  0x0000000010275650 in expand_expr_real_1 (exp=0x400002d2140, target=0x0,
tmode=DImode, modifier=EXPAND_NORMAL, alt_rtl=0x0)
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/expr.c:8781
#3  0x00000000102781fc in expand_expr_real (exp=0x400002d2140, target=0x0,
tmode=DImode, modifier=EXPAND_NORMAL, alt_rtl=0x0)
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/expr.c:7268
#4  0x00000000102703a0 in expand_expr_real_2 (ops=0xfffffffdbb8,
target=0x40000346880, tmode=VOIDmode, 
    modifier=<value optimized out>) at
/home/bergner/gcc/gcc-mainline-r161924/gcc/expr.c:7410
#5  0x00000000102721c0 in expand_expr_real_1 (exp=0x400004e9990,
target=0x40000346880, tmode=VOIDmode, modifier=EXPAND_NORMAL, 
    alt_rtl=0x0) at /home/bergner/gcc/gcc-mainline-r161924/gcc/expr.c:9711
#6  0x00000000102781fc in expand_expr_real (exp=0x400004e9990,
target=0x40000346880, tmode=VOIDmode, modifier=EXPAND_NORMAL, 
    alt_rtl=0x0) at /home/bergner/gcc/gcc-mainline-r161924/gcc/expr.c:7268
#7  0x000000001026dd74 in store_expr (exp=0x400004e9990, target=0x40000398b50,
call_param_p=0, nontemporal=0 '\000')
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/expr.c:4599
#8  0x0000000010281268 in expand_assignment (to=0x40000510630,
from=0x400002d2140, nontemporal=0 '\000')
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/expr.c:4452
#9  0x00000000101a9ea8 in expand_gimple_stmt_1 (stmt=0x400004d07d0) at
/home/bergner/gcc/gcc-mainline-r161924/gcc/cfgexpand.c:1874
#10 expand_gimple_stmt (stmt=0x400004d07d0) at
/home/bergner/gcc/gcc-mainline-r161924/gcc/cfgexpand.c:1983
#11 0x00000000101aad58 in expand_gimple_basic_block (bb=0x400004a05b0)
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/cfgexpand.c:3408
#12 0x00000000101ac8d8 in gimple_expand_cfg () at
/home/bergner/gcc/gcc-mainline-r161924/gcc/cfgexpand.c:3868
#13 0x00000000103d9d8c in execute_one_pass (pass=0x10cefee8) at
/home/bergner/gcc/gcc-mainline-r161924/gcc/passes.c:1565
#14 0x00000000103da144 in execute_pass_list (pass=0x10cefee8) at
/home/bergner/gcc/gcc-mainline-r161924/gcc/passes.c:1620
#15 0x0000000010511fa0 in tree_rest_of_compilation (fndecl=0x4000049a900)
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/tree-optimize.c:420
#16 0x00000000106f9a08 in cgraph_expand_function (node=0x40000520000)
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/cgraphunit.c:1629
#17 0x00000000106fcfa8 in cgraph_expand_all_functions () at
/home/bergner/gcc/gcc-mainline-r161924/gcc/cgraphunit.c:1708
#18 cgraph_optimize () at
/home/bergner/gcc/gcc-mainline-r161924/gcc/cgraphunit.c:1964
#19 0x00000000106fd524 in cgraph_finalize_compilation_unit () at
/home/bergner/gcc/gcc-mainline-r161924/gcc/cgraphunit.c:1171
#20 0x00000000100a76d8 in c_write_global_declarations () at
/home/bergner/gcc/gcc-mainline-r161924/gcc/c-decl.c:9698
#21 0x00000000104a5060 in compile_file (argc=32, argv=0xfffffffee08) at
/home/bergner/gcc/gcc-mainline-r161924/gcc/toplev.c:997
#22 do_compile (argc=32, argv=0xfffffffee08) at
/home/bergner/gcc/gcc-mainline-r161924/gcc/toplev.c:2340
#23 toplev_main (argc=32, argv=0xfffffffee08) at
/home/bergner/gcc/gcc-mainline-r161924/gcc/toplev.c:2381
#24 0x000000001014b180 in main (argc=<value optimized out>, argv=<value
optimized out>)
    at /home/bergner/gcc/gcc-mainline-r161924/gcc/main.c:35


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890

[Bug middle-end/44890] Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[rguenth at gcc dot gnu dot org]

------- Comment #3 from rguenth at gcc dot gnu dot org  2010-07-09 15:14 -------
I can't find the testcase pr30388.c in the testsuite.  Where is it?

(I can only see get_def_for_expr () returning a non-pointer def)


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |rguenth at gcc dot gnu dot
                   |                            |org


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890

[Bug middle-end/44890] Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[bergner at gcc dot gnu dot org]

------- Comment #4 from bergner at gcc dot gnu dot org  2010-07-09 16:08 -------
gcc/testsuite/gcc.c-torture/compile/pr30338.c


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890

[Bug middle-end/44890] Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[bergner at gcc dot gnu dot org]

------- Comment #5 from bergner at gcc dot gnu dot org  2010-07-09 16:25 -------
(gdb) call debug_tree(base)
 <ssa_name 0x400005112e8
    type <integer_type 0x40000410000 long unsigned int public unsigned sizetype
DI
        size <integer_cst 0x40000310780 constant 64>
        unit size <integer_cst 0x400003107a8 constant 8>
        align 64 symtab 0 alias set -1 canonical type 0x40000410000 precision
64 min <integer_cst 0x400003107d0 0> max <integer_cst 0x40000310aa0 -1>>
    visited var <var_decl 0x400004f1fe0 D.2060>def_stmt D.2060_43 = ivtmp.27_37
+ D.2059_42;

    version 43>


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890

[Bug middle-end/44890] Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[rguenth at gcc dot gnu dot org]

------- Comment #6 from rguenth at gcc dot gnu dot org  2010-07-09 16:28 -------
Does it ICE with

Index: gcc/tree-ssa-address.c
===================================================================
--- gcc/tree-ssa-address.c      (revision 161994)
+++ gcc/tree-ssa-address.c      (working copy)
@@ -359,7 +359,10 @@ create_mem_ref_raw (tree type, tree alia
       if (addr->symbol)
        base = build_fold_addr_expr (addr->symbol);
       else
-       base = addr->base;
+       {
+         gcc_assert (POINTER_TYPE_P (addr->base));
+         base = addr->base;
+       }
       if (addr->offset)
        offset = fold_convert (alias_ptr_type, addr->offset);
       else

at the new assert?


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890

[Bug middle-end/44890] Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[rguenth at gcc dot gnu dot org]

------- Comment #8 from rguenth at gcc dot gnu dot org  2010-07-09 16:35 -------
Mine.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|unassigned at gcc dot gnu   |rguenth at gcc dot gnu dot
                   |dot org                     |org
             Status|UNCONFIRMED                 |ASSIGNED
     Ever Confirmed|0                           |1
   Last reconfirmed|0000-00-00 00:00:00         |2010-07-09 16:35:21
               date|                            |


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890

[Bug middle-end/44890] Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[bergner at gcc dot gnu dot org]

------- Comment #7 from bergner at gcc dot gnu dot org  2010-07-09 16:34 -------
Ye, it ICE's there:

/home/bergner/gcc/gcc-mainline-r161924/gcc/testsuite/gcc.c-torture/compile/pr30338.c:5:5:
internal compiler error: in create_mem_ref_raw, at tree-ssa-address.c:363
Please submit a full bug report,


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890

[Bug middle-end/44890] Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[rguenth at gcc dot gnu dot org]

------- Comment #9 from rguenth at gcc dot gnu dot org  2010-07-09 18:32 -------
Fixed.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |FIXED
   Target Milestone|---                         |4.6.0


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890

[Bug middle-end/44890] Hitting gcc_assert in build2_stat with pr30388.c testsuite test case

[rguenth at gcc dot gnu dot org]

------- Comment #10 from rguenth at gcc dot gnu dot org  2010-07-09 18:32 -------
Subject: Bug 44890

Author: rguenth
Date: Fri Jul  9 18:32:29 2010
New Revision: 162005

URL: http://gcc.gnu.org/viewcvs?root=gcc&view=rev&rev=162005
Log:
2010-07-09  Richard Guenther  <rguenther@suse.de>

        PR middle-end/44890
        * tree-ssa-address.c (create_mem_ref_raw): Only build a MEM_REF
        if base is a pointer.
        * tree-cfg.c (verify_expr): Update MEM_REF checking.

Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/tree-cfg.c
    trunk/gcc/tree-ssa-address.c


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=44890