[Bug sanitizer/106739] New: runtime error coredump case on c++17/20

[Bug sanitizer/106739] New: runtime error coredump case on c++17/20

[zhkefa at live dot cn]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106739

            Bug ID: 106739
           Summary: runtime error coredump case on c++17/20
           Product: gcc
           Version: 10.4.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: sanitizer
          Assignee: unassigned at gcc dot gnu.org
          Reporter: zhkefa at live dot cn
                CC: dodji at gcc dot gnu.org, dvyukov at gcc dot gnu.org,
                    jakub at gcc dot gnu.org, kcc at gcc dot gnu.org, marxin at gcc dot gnu.org
  Target Milestone: ---

code file test.cc:
=============================
class A {
public:
    A(int i): i(i){}
    int get() {return i;}
private:
    int i{0};
};

void func() {
    typedef int (A::*f)();
    f fs[] = {&A::get};
    A *a = new A{1};
    for (int i = 0; i < 1; ++i) {
        (a->*fs[i])();
    }
    delete a;
}

int main() {
    func();
    return 0;
}

===============
envirment: gcc10.4

g++ -fsanitize=address -fsanitize=undefined -std=c++17 test.cc

./a.out
runtime error: index 4198816 out of bounds for type func[1]
runtime error: load of address 0x7ffd97570f08 whith insufficient space for an
object of type 'long int'

if compile with -std=c++14 or -std=c++11, everything ok.

[Bug sanitizer/106739] [11/12/13 Regression] runtime error coredump case on c++17/20 since r11-2445-g8c00059ce058ea2a

[marxin at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106739

Martin Liška <marxin at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Last reconfirmed|                            |2022-08-25
            Summary|runtime error coredump case |[11/12/13 Regression]
                   |on c++17/20                 |runtime error coredump case
                   |                            |on c++17/20 since
                   |                            |r11-2445-g8c00059ce058ea2a
                 CC|                            |ppalka at gcc dot gnu.org
             Status|UNCONFIRMED                 |NEW
     Ever confirmed|0                           |1

--- Comment #1 from Martin Liška <marxin at gcc dot gnu.org> ---
Started with r11-2445-g8c00059ce058ea2a, not clang can't detect that.

[Bug sanitizer/106739] [11/12/13 Regression] runtime error coredump case on c++17/20 since r11-2445-g8c00059ce058ea2a

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106739

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |11.4

[Bug sanitizer/106739] [10/11/12/13 Regression] runtime error coredump case on c++17/20 since r11-2445-g8c00059ce058ea2a

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106739

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|11.4                        |10.5
      Known to fail|                            |10.3.0
            Summary|[11/12/13 Regression]       |[10/11/12/13 Regression]
                   |runtime error coredump case |runtime error coredump case
                   |on c++17/20 since           |on c++17/20 since
                   |r11-2445-g8c00059ce058ea2a  |r11-2445-g8c00059ce058ea2a

--- Comment #2 from Richard Biener <rguenth at gcc dot gnu.org> ---
The rev was backported.  But it looks like a sanitizer issue?

[Bug sanitizer/106739] [10/11/12/13 Regression] runtime error coredump case on c++17/20 since r11-2445-g8c00059ce058ea2a

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106739

--- Comment #3 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Can't reproduce this, neither with 10, 11, 12 nor 2022-08-25ish trunk nor
current trunk.

[Bug sanitizer/106739] [10/11/12/13 Regression] runtime error coredump case on c++17/20 since r11-2445-g8c00059ce058ea2a

[marxin at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106739

Martin Liška <marxin at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |INVALID
             Status|NEW                         |RESOLVED

--- Comment #4 from Martin Liška <marxin at gcc dot gnu.org> ---
I also can't reproduce it.