[Bug c/115680] New: ICE in on_ranges, at analyzer/constraint-manager.cc:3166

[Bug c/115680] New: ICE in on_ranges, at analyzer/constraint-manager.cc:3166

[gcc.hall at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=115680

            Bug ID: 115680
           Summary: ICE in on_ranges, at
                    analyzer/constraint-manager.cc:3166
           Product: gcc
           Version: 14.1.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: c
          Assignee: unassigned at gcc dot gnu.org
          Reporter: gcc.hall at gmail dot com
  Target Milestone: ---

Created attachment 58530
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=58530&action=edit
.s containing machine details

[Bug c/115680] ICE in on_ranges, at analyzer/constraint-manager.cc:3166

[gcc.hall at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=115680

--- Comment #1 from Jeremy <gcc.hall at gmail dot com> ---
Created attachment 58531
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=58531&action=edit
.i file from save-temps containing pre-processed source

[Bug c/115680] ICE in on_ranges, at analyzer/constraint-manager.cc:3166

[gcc.hall at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=115680

--- Comment #2 from Jeremy <gcc.hall at gmail dot com> ---
gcc -std=gnu23 g.c -DEDITOR=0 -O3 -Wall -Wextra -Wconversion -Wunused
-Wuninitialized -Wcast-qual -Wcast-align -Werror -march=native -mcpu=native
-mtune=native -pipe -funsigned-char -fwrapv -ffinite-math-only -mcmodel=tiny
-mlittle-endian -momit-leaf-frame-pointer -frename-registers
-mno-low-precision-recip-sqrt -mno-low-precision-sqrt -mno-low-precision-div
-mno-track-speculation -mpc-relative-literal-loads -mbranch-protection=none
-mno-fix-cortex-a53-835769 -mno-fix-cortex-a53-843419 -fcf-protection=none
-mearly-ra=all -mearly-ldp-fusion -mlate-ldp-fusion
--param=aarch64-ldp-policy=always --param=aarch64-stp-policy=always --param
case-values-threshold=6 -fwhole-program -fdelete-null-pointer-checks
-fallow-store-data-races -fno-math-errno -fno-reciprocal-math
-fno-trapping-math -fno-rounding-math -falign-jumps -ffp-contract=fast
-fmerge-all-constants -fomit-frame-pointer -freg-struct-return
-foptimize-strlen -fno-exceptions -fno-unwind-tables
-fno-asynchronous-unwind-tables -fno-stack-protector -Wno-clobbered
-Wno-char-subscripts -Wno-implicit-fallthrough -ftree-vrp -Wduplicated-branches
-Wduplicated-cond -Wpointer-arith -Wnested-externs -Wundef -Wfloat-conversion
-Wsign-conversion -Warith-conversion -Wnarrowing -Wsign-compare -Winline
-Woverflow -Wmissing-include-dirs -Wredundant-decls -Wunused-macros
-Wformat-truncation=2 -Woverlength-strings -Wdisabled-optimization -Wnormalized
-Wformat=2 -Wformat-overflow=2 -Wrestrict -Wshift-overflow=2 -Wpacked
-Wnull-dereference -Wmain -Wstringop-truncation -Wstringop-overflow=4
-Wstringop-overread -Winit-self -Wmultichar -Wstrict-prototypes
-Wreturn-local-addr -Wlogical-op -Wwrite-strings -Warray-bounds=2
-Wformat-signedness -Wstrict-overflow=5 -Walloc-zero -Wdiscarded-qualifiers
-fanalyzer -fstrict-aliasing -Wstrict-aliasing=3 -Wdouble-promotion
-Wunsafe-loop-optimizations -Wtrampolines -Wbad-function-cast
-Wcast-align=strict -Waddress-of-packed-member -Wsuggest-attribute=malloc
-Wsuggest-attribute=const -Wsuggest-attribute=noreturn -fstrict-flex-arrays=3
-Wxor-used-as-pow -Wdiscarded-array-qualifiers -Wenum-int-mismatch
-Wmissing-noreturn -Wflex-array-member-not-at-end -Wno-format-nonliteral
-freport-bug -save-temps -o /dev/null -lm -lreadline
gcc: warning: ‘-pipe’ ignored because ‘-save-temps’ specified
during IPA pass: analyzer
g.c:5629:10: internal compiler error: in on_ranges, at
analyzer/constraint-manager.cc:3166
 5629 |   return c1;
      |          ^~
0x1ab264b ana::merger_fact_visitor::on_ranges(ana::svalue const*,
ana::bounded_ranges const*)
        ../../gcc/analyzer/constraint-manager.cc:3166
0x1ab264b ana::merger_fact_visitor::on_ranges(ana::svalue const*,
ana::bounded_ranges const*)
        ../../gcc/analyzer/constraint-manager.cc:3146
0x1aadc33 ana::constraint_manager::for_each_fact(ana::fact_visitor*) const
        ../../gcc/analyzer/constraint-manager.cc:3252
0x1aadd43 ana::constraint_manager::merge(ana::constraint_manager const&,
ana::constraint_manager const&, ana::constraint_manager*)
        ../../gcc/analyzer/constraint-manager.cc:3193
0x111c62b ana::region_model::can_merge_with_p(ana::region_model const&,
ana::program_point const&, ana::region_model*, ana::extrinsic_state const*,
ana::program_state const*, ana::program_state const*) const
        ../../gcc/analyzer/region-model.cc:6222
0x1109dcb ana::program_state::can_merge_with_p(ana::program_state const&,
ana::extrinsic_state const&, ana::program_point const&, ana::program_state*)
const
        ../../gcc/analyzer/program-state.cc:1468
0x10ea973
ana::exploded_graph::maybe_process_run_of_before_supernode_enodes(ana::exploded_node*)
        ../../gcc/analyzer/engine.cc:3683
0x10ec2d7 ana::exploded_graph::process_worklist()
        ../../gcc/analyzer/engine.cc:3385
0x10ee377 ana::impl_run_checkers(ana::logger*)
        ../../gcc/analyzer/engine.cc:6210
0x10ef2bb ana::run_checkers()
        ../../gcc/analyzer/engine.cc:6308
0x10dfdef execute
        ../../gcc/analyzer/analyzer-pass.cc:87
Please submit a full bug report, with preprocessed source.
Please include the complete backtrace with any bug report.
See <https://gcc.gnu.org/bugs/> for instructions.
Preprocessed source stored into /tmp/ccsQUmhZ.out file, please attach this to
your bugreport.
make: *** [makefile:269: lint] Error 1

[Bug c/115680] ICE in on_ranges, at analyzer/constraint-manager.cc:3166

[gcc.hall at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=115680

--- Comment #3 from Jeremy <gcc.hall at gmail dot com> ---
$ gcc -v
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/local/libexec/gcc/aarch64-unknown-linux-gnu/14.1.0/lto-wrapper
Target: aarch64-unknown-linux-gnu
Configured with: ../configure --with-cpu=cortex-a76
Thread model: posix
Supported LTO compression algorithms: zlib
gcc version 14.1.0 (GCC)

[Bug analyzer/115680] ICE in on_ranges, at analyzer/constraint-manager.cc:3166

[gcc.hall at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=115680

Jeremy <gcc.hall at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #58530|a-g.i                       |a-g.s
           filename|                            |

--- Comment #4 from Jeremy <gcc.hall at gmail dot com> ---
Comment on attachment 58530
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=58530
.s containing machine details

        .arch armv8.2-a+dotprod+crc+crypto+fp16+rcpc
        .file   "g.c"

[Bug analyzer/115680] ICE in on_ranges, at analyzer/constraint-manager.cc:3166

[gcc.hall at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=115680

Jeremy <gcc.hall at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #58530|0                           |1
        is obsolete|                            |

--- Comment #5 from Jeremy <gcc.hall at gmail dot com> ---
Created attachment 58532
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=58532&action=edit
Correct .s file with machine details

[Bug analyzer/115680] ICE in on_ranges, at analyzer/constraint-manager.cc:3166

[dmalcolm at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=115680

David Malcolm <dmalcolm at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
     Ever confirmed|0                           |1
   Last reconfirmed|                            |2024-06-27
             Status|UNCONFIRMED                 |NEW

--- Comment #6 from David Malcolm <dmalcolm at gcc dot gnu.org> ---
Thanks for filing this bug report.

Minimal args to reproduce the ICE with attachment 58531 seem to be:
  -fanalyzer -ftree-vrp -std=gnu23 -O1
(https://godbolt.org/z/P6T91PzWf)