From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gcc-bugzilla@gcc.gnu.org>
Received: by sourceware.org (Postfix, from userid 48)
	id DF99F3858D28; Fri,  3 Nov 2023 08:04:59 +0000 (GMT)
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org DF99F3858D28
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gcc.gnu.org;
	s=default; t=1698998699;
	bh=t2TC0xIlyE4+65NrhQ5Jg2AU2478wpUUnZcI1Hqeqlc=;
	h=From:To:Subject:Date:In-Reply-To:References:From;
	b=XaIBkce55V+gT3C7yQzxKQkBjAMZGU2miMgHR+RkZBPb4WigFFVKemixLbOIiuBHY
	 26CbKJZgAxksZp1OFJ1Daksam/ooYRnjgO0krPFqVJT5PgFrsgsukxDtLMlPAZ76Su
	 pskzLt/ZNwxqeQw6mO3RWDjnNhgmUReuJcNw8CKA=
From: "rguenth at gcc dot gnu.org" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug tree-optimization/112358] [14 Regression] glibc
 -Wstringop-overflow= build failure
Date: Fri, 03 Nov 2023 08:04:59 +0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: tree-optimization
X-Bugzilla-Version: 14.0
X-Bugzilla-Keywords: diagnostic
X-Bugzilla-Severity: normal
X-Bugzilla-Who: rguenth at gcc dot gnu.org
X-Bugzilla-Status: NEW
X-Bugzilla-Resolution: 
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org
X-Bugzilla-Target-Milestone: 14.0
X-Bugzilla-Flags: 
X-Bugzilla-Changed-Fields: target_milestone bug_status everconfirmed
 cf_reconfirmed_on
Message-ID: <bug-112358-4-OpesDbN7O1@http.gcc.gnu.org/bugzilla/>
In-Reply-To: <bug-112358-4@http.gcc.gnu.org/bugzilla/>
References: <bug-112358-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
List-Id: <gcc-bugs.sourceware.org>

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=3D112358

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |14.0
             Status|UNCONFIRMED                 |NEW
     Ever confirmed|0                           |1
   Last reconfirmed|                            |2023-11-03

--- Comment #1 from Richard Biener <rguenth at gcc dot gnu.org> ---
I've added

cc1: note: destination object is likely at address zero

which indicates that we performed some jump threading that exposes a literal
NULL pointer we diagnose this on.  I see

(gdb) p debug_gimple_stmt (exp)
# .MEM_230 =3D VDEF <.MEM_252>
__atomic_store_4 (8B, 0, 0);

on the path

...

<bb 13> [local count: 14148527]:
_35 =3D __atomic_wide_counter_load_relaxed (&_dlfo_loaded_mappings_version)=
; //
dl-find_object.c:260:10
_36 =3D (int) _35;
active_idx_37 =3D _36 & 1;
current_seg_38 =3D _dlfo_loaded_mappings[active_idx_37];
_347 =3D active_idx_37 ^ 1;
pretmp_348 =3D _dlfo_loaded_mappings[_347];
if (current_seg_38 !=3D 0B) // dl-find_object.c:137:21
  goto <bb 84>; [94.50%]
else
  goto <bb 72>; [5.50%]

<bb 84> [local count: 13370358]:
goto <bb 23>; [100.00%]

... some loop ...

<bb 24> [local count: 13370358]:
# count_247 =3D PHI <count_147(93), count_246(95)>
remaining_to_add_43 =3D count_247 + prephitmp_317; // dl-find_object.c:662:=
10
if (pretmp_348 !=3D 0B) // dl-find_object.c:150:14
  goto <bb 96>; [89.00%]
else
  goto <bb 27>; [11.00%]

<bb 27> [local count: 1470739]:
if (remaining_to_add_43 !=3D 0) // dl-find_object.c:668:8
  goto <bb 98>; [47.09%]
else
  goto <bb 35>; [52.91%]

<bb 35> [local count: 778169]:
__sync_synchronize ();
__atomic_store_4 (8B, 0, 0); // [dl-find_object.c:644:132
goto <bb 38>; [100.00%]=