From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: by sourceware.org (Postfix, from userid 48) id 2D8623858D38; Tue, 8 Nov 2022 15:11:33 +0000 (GMT) DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 2D8623858D38 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gcc.gnu.org; s=default; t=1667920293; bh=t3aho/ectFeycyW7xGI2VtLngt4WhxnHydtztXkKhBo=; h=From:To:Subject:Date:In-Reply-To:References:From; b=IeTVJPHj8GiAhOvCzx8aiRghZ0YkHSQHlXhUTJ/Uj9drdIBE3I81eSatLIoW4Eaja koRIenk/wxt7LO5TJy7jHHJQVGHdN6O4kBfOIeuihmtWA/TE+v0Ob4eGEFrDkZ99EB XD/DjBeprZ0HK8Z2UVpKi7qzjUZGew2k4yNP8uaA= From: "rguenth at gcc dot gnu.org" To: gcc-bugs@gcc.gnu.org Subject: [Bug tree-optimization/107570] [13 Regression] ICE: Segmentation fault (in instantiate_scev_name/gimple_bb) Date: Tue, 08 Nov 2022 15:11:31 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: gcc X-Bugzilla-Component: tree-optimization X-Bugzilla-Version: 13.0 X-Bugzilla-Keywords: ice-on-valid-code X-Bugzilla-Severity: normal X-Bugzilla-Who: rguenth at gcc dot gnu.org X-Bugzilla-Status: NEW X-Bugzilla-Resolution: X-Bugzilla-Priority: P1 X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org X-Bugzilla-Target-Milestone: 13.0 X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_status cf_reconfirmed_on priority target_milestone everconfirmed Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/ Auto-Submitted: auto-generated MIME-Version: 1.0 List-Id: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=3D107570 Richard Biener changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |NEW Last reconfirmed| |2022-11-08 Priority|P3 |P1 Target Milestone|--- |13.0 Ever confirmed|0 |1 --- Comment #1 from Richard Biener --- #1 0x000000000167403c in instantiate_scev_name ( instantiate_below=3D 7)>,=20 evolution_loop=3D0x7ffff651a848, inner_loop=3D0x7ffff651a848, chrec=3D , fold_conversions=3D0x0, size_expr=3D2) at /home/rguenther/src/trunk/gcc/tree-scalar-evolution.cc:2270 2270 basic_block def_bb =3D gimple_bb (SSA_NAME_DEF_STMT (chrec)); (gdb) p chrec $1 =3D (gdb) p debug_tree (chrec) nothrow def_stmt=20 version:2 in-free-list> $2 =3D void and we release the SSA name via #0 release_ssa_name_fn (fn=3D0x7ffff66e9000, var=3D) at /home/rguenther/src/trunk/gcc/tree-ssanames.cc:555 #1 0x000000000187eeae in release_ssa_name (name=3D) at /home/rguenther/src/trunk/gcc/tree-ssanames.h:123 #2 0x0000000001881c24 in release_defs (stmt=3D) at /home/rguenther/src/trunk/gcc/tree-ssanames.cc:832 #3 0x00000000017bd61c in substitute_and_fold_engine::substitute_and_fold ( this=3D0x7fffffffda00, block=3D) at /home/rguenther/src/trunk/gcc/tree-ssa-propagate.cc:1009 #4 0x000000000193e886 in execute_ranger_vrp (fun=3D0x7ffff66e9000,=20 warn_array_bounds_p=3Dfalse, final_p=3Dtrue) at /home/rguenther/src/trunk/gcc/tree-vrp.cc:4543 #5 0x000000000193ebde in (anonymous namespace)::pass_vrp::execute ( this=3D0x43b16f0, fun=3D0x7ffff66e9000) at /home/rguenther/src/trunk/gcc/tree-vrp.cc:4628 #6 0x00000000013b2c9d in execute_one_pass ( pass=3D) at /home/rguenther/src/trunk/gcc/passes.cc:2644 releasing SSA names while still folding looks dangerous in case the folding eventually invokes SCEV which has a cache.=