[Bug c/111789] New: Segmentation fault with '-O3 -fno-inline -fno-toplevel-reorder'

[Bug c/111789] New: Segmentation fault with '-O3 -fno-inline -fno-toplevel-reorder'

[19373742 at buaa dot edu.cn]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111789

            Bug ID: 111789
           Summary: Segmentation fault with '-O3 -fno-inline
                    -fno-toplevel-reorder'
           Product: gcc
           Version: 14.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: c
          Assignee: unassigned at gcc dot gnu.org
          Reporter: 19373742 at buaa dot edu.cn
  Target Milestone: ---

Created attachment 56099
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=56099&action=edit
The preprocessed file

*******************************************************************************
OS and Platform:
Ubuntu 20.04.4 LTS
*******************************************************************************
gcc version:
$ gcc -v
Using built-in specs.
COLLECT_GCC=/home/ctc/gcc-releases/gcc-14/bin/gcc
COLLECT_LTO_WRAPPER=/home/ctc/gcc-releases/gcc-14/libexec/gcc/x86_64-pc-linux-gnu/14.0.0/lto-wrapper
Target: x86_64-pc-linux-gnu
Configured with: ./configure --prefix=/home/cuisk/ctc/gcc-releases/gcc-14
--disable-multilib --enable-language=c,c++
Thread model: posix
Supported LTO compression algorithms: zlib
gcc version 14.0.0 20231008 (experimental) (GCC) 
*******************************************************************************
Command Lines:
$ gcc -O3 -fno-inline -fno-toplevel-reorder -I
/home/csmith/include/csmith-2.3.0/ a.c -o cra 2>cra.txt
$ ./cra
Segmentation fault (core dumped)

$ gcc -I /home/csmith/include/csmith-2.3.0/ -fsanitize=undefined a.c -o ncra
$ ./ncra
checksum = 91C2E0C4

[Bug c/111789] Segmentation fault with '-O3 -fno-inline -fno-toplevel-reorder'

[19373742 at buaa dot edu.cn]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111789

--- Comment #1 from CTC <19373742 at buaa dot edu.cn> ---
Created attachment 56100
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=56100&action=edit
The compiler output

[Bug middle-end/111789] [14 Regression] runtime Segmentation fault with '-O3 -fno-inline -fno-toplevel-reorder'

[pinskia at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111789

Andrew Pinski <pinskia at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |14.0
            Summary|Segmentation fault with     |[14 Regression] runtime
                   |'-O3 -fno-inline            |Segmentation fault with
                   |-fno-toplevel-reorder'      |'-O3 -fno-inline
                   |                            |-fno-toplevel-reorder'
          Component|c                           |middle-end
           Keywords|                            |wrong-code
             Target|                            |x86_64-linux-gnu

[Bug middle-end/111789] [14 Regression] runtime Segmentation fault with '-O3 -fno-inline -fno-toplevel-reorder'

[pinskia at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111789

--- Comment #2 from Andrew Pinski <pinskia at gcc dot gnu.org> ---
#0  0x0000000000402521 in func_4 (p_5=<optimized out>, p_6=p_6@entry=0x406044
<g_10>, p_7=21909, p_8=<optimized out>, p_9=398526839) at
/home/cuisk/gcc/tmp/a.c:134


=> 0x0000000000402521 <+193>:   mov    (%r9),%r11d

r9             0x40                64

[Bug middle-end/111789] [14 Regression] runtime Segmentation fault with '-O3 -fno-inline -fno-toplevel-reorder'

[pinskia at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111789

Andrew Pinski <pinskia at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
     Ever confirmed|0                           |1
             Status|UNCONFIRMED                 |NEW
           Keywords|                            |needs-bisection,
                   |                            |needs-reduction
   Last reconfirmed|                            |2023-10-12

--- Comment #3 from Andrew Pinski <pinskia at gcc dot gnu.org> ---
This looks wrong:
```
;; Function func_28.constprop.isra (func_28.constprop.0.isra.0, funcdef_no=115,
decl_uid=6855, cgraph_uid=120, symbol_order=162)

void func_28.constprop.isra (int32_t * * p_30)
{
  <bb 2> [local count: 1073741824]:
  return;

}
```
From :
```
static uint16_t func_28(int16_t p_29, int32_t ** p_30, int32_t * p_31, uint16_t
p_32)
{
    int32_t *l_668 = &g_10;
    (*p_30) = l_668;
    return p_29;
}

```

[Bug ipa/111789] [14 Regression] runtime Segmentation fault with '-O3 -fno-inline -fno-toplevel-reorder'

[pinskia at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111789

--- Comment #4 from Andrew Pinski <pinskia at gcc dot gnu.org> ---
*** Bug 111804 has been marked as a duplicate of this bug. ***

[Bug ipa/111789] [14 Regression] runtime Segmentation fault with '-O3 -fno-inline -fno-toplevel-reorder'

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111789

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |hubicka at gcc dot gnu.org
           Priority|P3                          |P1

--- Comment #5 from Richard Biener <rguenth at gcc dot gnu.org> ---
Another case of the modref/IPA-CP issue?  -fno-ipa-modref fixes it.

[Bug ipa/111789] [14 Regression] runtime Segmentation fault with '-O3 -fno-inline -fno-toplevel-reorder' since r14-3226-gd073e2d75d9ed4

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=111789

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED
           Keywords|needs-reduction             |

--- Comment #6 from Richard Biener <rguenth at gcc dot gnu.org> ---
This is fixed.  Likely a duplicate.