[Bug c++/113969] New: ICE: SIGSEGV in finish_enum_value_list (decl.cc:17143) on invalid code

[Bug c++/113969] New: ICE: SIGSEGV in finish_enum_value_list (decl.cc:17143) on invalid code

[zsojka at seznam dot cz]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113969

            Bug ID: 113969
           Summary: ICE: SIGSEGV in finish_enum_value_list (decl.cc:17143)
                    on invalid code
           Product: gcc
           Version: 14.0
            Status: UNCONFIRMED
          Keywords: ice-on-invalid-code
          Severity: normal
          Priority: P3
         Component: c++
          Assignee: unassigned at gcc dot gnu.org
          Reporter: zsojka at seznam dot cz
  Target Milestone: ---
              Host: x86_64-pc-linux-gnu
            Target: x86_64-pc-linux-gnu

Created attachment 57447
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=57447&action=edit
auto-reduced testcase

Compiler output:
$ x86_64-pc-linux-gnu-gcc testcase.C -wrapper valgrind,-q
testcase.C:2:40: error: expected '}' before 'd'
    2 | template <typename = enum struct b { c d } template <> enum struct b {
      |                                    ~   ^
testcase.C:2:40: error: expected '>' before 'd'
testcase.C:2:42: error: expected unqualified-id before '}' token
    2 | template <typename = enum struct b { c d } template <> enum struct b {
      |                                          ^
testcase.C:2:42: error: expected declaration before '}' token
testcase.C:2:71: error: expected identifier at end of input
    2 | template <typename = enum struct b { c d } template <> enum struct b {
      |                                                                       ^
testcase.C:2:71: error: expected '}' at end of input
    2 | template <typename = enum struct b { c d } template <> enum struct b {
      |                                                                      ~^
==8124== Invalid read of size 2
==8124==    at 0xF95EFF: finish_enum_value_list(tree_node*) (decl.cc:17143)
==8124==    by 0x1092B26: cp_parser_enum_specifier(cp_parser*)
(parser.cc:21792)
==8124==    by 0x10772CE: cp_parser_type_specifier(cp_parser*, int,
cp_decl_specifier_seq*, bool, int*, bool*) (parser.cc:20034)
==8124==    by 0x1078E2D: cp_parser_decl_specifier_seq(cp_parser*, int,
cp_decl_specifier_seq*, int*) (parser.cc:16590)
==8124==    by 0x10AE38A: cp_parser_single_declaration(cp_parser*,
vec<deferred_access_check, va_gc, vl_embed>*, bool, bool, bool*)
(parser.cc:33137)
==8124==    by 0x10AFA00: cp_parser_explicit_specialization(cp_parser*)
(parser.cc:19945)
==8124==    by 0x10B3EC5: cp_parser_declaration(cp_parser*, tree_node*)
(parser.cc:15499)
==8124==    by 0x10B461A: cp_parser_toplevel_declaration (parser.cc:15594)
==8124==    by 0x10B461A: cp_parser_translation_unit (parser.cc:5279)
==8124==    by 0x10B461A: c_parse_file() (parser.cc:51202)
==8124==    by 0x1203D81: c_common_parse_file() (c-opts.cc:1311)
==8124==    by 0x18172DD: compile_file() (toplev.cc:447)
==8124==    by 0xEC6EDB: do_compile (toplev.cc:2152)
==8124==    by 0xEC6EDB: toplev::main(int, char**) (toplev.cc:2308)
==8124==    by 0xEC86ED: main (main.cc:39)
==8124==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==8124== 
testcase.C:2:71: internal compiler error: Segmentation fault
^C

$ x86_64-pc-linux-gnu-gcc -v
Using built-in specs.
COLLECT_GCC=/repo/gcc-trunk/binary-latest-amd64/bin/x86_64-pc-linux-gnu-gcc
COLLECT_LTO_WRAPPER=/repo/gcc-trunk/binary-trunk-r14-9043-20240217001708-gd70f155b074-checking-yes-rtl-df-extra-amd64/bin/../libexec/gcc/x86_64-pc-linux-gnu/14.0.1/lto-wrapper
Target: x86_64-pc-linux-gnu
Configured with: /repo/gcc-trunk//configure --enable-languages=c,c++
--enable-valgrind-annotations --disable-nls --enable-checking=yes,rtl,df,extra
--with-cloog --with-ppl --with-isl --build=x86_64-pc-linux-gnu
--host=x86_64-pc-linux-gnu --target=x86_64-pc-linux-gnu
--with-ld=/usr/bin/x86_64-pc-linux-gnu-ld
--with-as=/usr/bin/x86_64-pc-linux-gnu-as --disable-libstdcxx-pch
--prefix=/repo/gcc-trunk//binary-trunk-r14-9043-20240217001708-gd70f155b074-checking-yes-rtl-df-extra-amd64
Thread model: posix
Supported LTO compression algorithms: zlib zstd
gcc version 14.0.1 20240217 (experimental) (GCC)

[Bug c++/113969] ICE: SIGSEGV in finish_enum_value_list (decl.cc:17143) (or build_enumerator (decl.cc:17438) ) on invalid code

[zsojka at seznam dot cz]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113969

--- Comment #1 from Zdenek Sojka <zsojka at seznam dot cz> ---
Created attachment 57449
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=57449&action=edit
very similar testcase, ICEing in build_enumerator instead

$ x86_64-pc-linux-gnu-gcc testcase2.C -wrapper valgrind,-q
testcase2.C:2:40: error: expected '}' before 'd'
    2 | template <typename = enum struct b { c d } template <> enum struct b {
e
      |                                    ~   ^
testcase2.C:2:40: error: expected '>' before 'd'
testcase2.C:2:42: error: expected unqualified-id before '}' token
    2 | template <typename = enum struct b { c d } template <> enum struct b {
e
      |                                          ^
testcase2.C:2:42: error: expected declaration before '}' token
==13010== Invalid read of size 2
==13010==    at 0xFA2DF0: build_enumerator(tree_node*, tree_node*, tree_node*,
tree_node*, unsigned int) (decl.cc:17438)
==13010==    by 0x10930C7: cp_parser_enumerator_definition (parser.cc:21903)
==13010==    by 0x10930C7: cp_parser_enumerator_list (parser.cc:21823)
==13010==    by 0x10930C7: cp_parser_enum_specifier(cp_parser*)
(parser.cc:21754)
==13010==    by 0x10772CE: cp_parser_type_specifier(cp_parser*, int,
cp_decl_specifier_seq*, bool, int*, bool*) (parser.cc:20034)
==13010==    by 0x1078E2D: cp_parser_decl_specifier_seq(cp_parser*, int,
cp_decl_specifier_seq*, int*) (parser.cc:16590)
==13010==    by 0x10AE38A: cp_parser_single_declaration(cp_parser*,
vec<deferred_access_check, va_gc, vl_embed>*, bool, bool, bool*)
(parser.cc:33137)
==13010==    by 0x10AFA00: cp_parser_explicit_specialization(cp_parser*)
(parser.cc:19945)
==13010==    by 0x10B3EC5: cp_parser_declaration(cp_parser*, tree_node*)
(parser.cc:15499)
==13010==    by 0x10B461A: cp_parser_toplevel_declaration (parser.cc:15594)
==13010==    by 0x10B461A: cp_parser_translation_unit (parser.cc:5279)
==13010==    by 0x10B461A: c_parse_file() (parser.cc:51202)
==13010==    by 0x1203D81: c_common_parse_file() (c-opts.cc:1311)
==13010==    by 0x18172DD: compile_file() (toplev.cc:447)
==13010==    by 0xEC6EDB: do_compile (toplev.cc:2152)
==13010==    by 0xEC6EDB: toplev::main(int, char**) (toplev.cc:2308)
==13010==    by 0xEC86ED: main (main.cc:39)
==13010==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==13010== 
testcase2.C:2:72: internal compiler error: Segmentation fault
    2 | template <typename = enum struct b { c d } template <> enum struct b {
e
      |                                                                       
^
0x1816fe2 crash_signal
        /repo/gcc-trunk/gcc/toplev.cc:317
0xfa2df0 build_enumerator(tree_node*, tree_node*, tree_node*, tree_node*,
unsigned int)
        /repo/gcc-trunk/gcc/cp/decl.cc:17438
0x10930c7 cp_parser_enumerator_definition
        /repo/gcc-trunk/gcc/cp/parser.cc:21903
0x10930c7 cp_parser_enumerator_list
        /repo/gcc-trunk/gcc/cp/parser.cc:21823
0x10930c7 cp_parser_enum_specifier
        /repo/gcc-trunk/gcc/cp/parser.cc:21754
0x10772ce cp_parser_type_specifier
        /repo/gcc-trunk/gcc/cp/parser.cc:20034
0x1078e2d cp_parser_decl_specifier_seq
        /repo/gcc-trunk/gcc/cp/parser.cc:16590
0x10ae38a cp_parser_single_declaration
        /repo/gcc-trunk/gcc/cp/parser.cc:33137
0x10afa00 cp_parser_explicit_specialization
        /repo/gcc-trunk/gcc/cp/parser.cc:19945
0x10b3ec5 cp_parser_declaration
        /repo/gcc-trunk/gcc/cp/parser.cc:15499
0x10b461a cp_parser_toplevel_declaration
        /repo/gcc-trunk/gcc/cp/parser.cc:15594
0x10b461a cp_parser_translation_unit
        /repo/gcc-trunk/gcc/cp/parser.cc:5279
0x10b461a c_parse_file()
        /repo/gcc-trunk/gcc/cp/parser.cc:51202
0x1203d81 c_common_parse_file()
        /repo/gcc-trunk/gcc/c-family/c-opts.cc:1311
Please submit a full bug report, with preprocessed source (by using
-freport-bug).
Please include the complete backtrace with any bug report.
See <https://gcc.gnu.org/bugs/> for instructions.

[Bug c++/113969] ICE: SIGSEGV in finish_enum_value_list (decl.cc:17143) (or build_enumerator (decl.cc:17438) ) on invalid code

[mpolacek at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113969

Marek Polacek <mpolacek at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
     Ever confirmed|0                           |1
   Last reconfirmed|                            |2024-02-17
                 CC|                            |mpolacek at gcc dot gnu.org
             Status|UNCONFIRMED                 |NEW

[Bug c++/113969] ICE: SIGSEGV in finish_enum_value_list (decl.cc:17143) (or build_enumerator (decl.cc:17438) ) on invalid code

[mpolacek at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113969

Marek Polacek <mpolacek at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://gcc.gnu.org/bugzill
                   |                            |a/show_bug.cgi?id=96441

--- Comment #2 from Marek Polacek <mpolacek at gcc dot gnu.org> ---
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96441#c2 seems related.

[Bug c++/113969] ICE: SIGSEGV in finish_enum_value_list (decl.cc:17143) (or build_enumerator (decl.cc:17438) ) on invalid code

[mpolacek at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=113969

Marek Polacek <mpolacek at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://gcc.gnu.org/bugzill
                   |                            |a/show_bug.cgi?id=95935

--- Comment #3 from Marek Polacek <mpolacek at gcc dot gnu.org> ---
Bug 95935 is also related; see my #c3 there.