[Bug c/30473] New: Internal Compiler Error with a sprintf with few arguments for format %s

[Bug c/30473] New: Internal Compiler Error with a sprintf with few arguments for format %s

[avg07 at tid dot es]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 8529 bytes --]

/* crash_builtin_sprintf.c */

#include <stdio.h>

int main(void){
  char buffer[10];
  sprintf(buffer, "%s");
  return 0;
}


$ gcc-4.1 -v -da -Q crash_builtin_sprintf.c
Using built-in specs.
Target: x86_64-unknown-linux-gnu
Configured with: /home/avega/morfeo/gcc_4_1_1_release/configure
--prefix=/home/avega/shared/gcc-4.1 --disable-multilib --verbose
--program-suffix=-4.1 --enable-checking --enable-languages=c,c++
Thread model: posix
gcc version 4.1.1
 /home/avega/shared/gcc-4.1/libexec/gcc/x86_64-unknown-linux-gnu/4.1.1/cc1 -v
crash_builtin_sprintf.c -dumpbase crash_builtin_sprintf.c -da -mtune=k8
-auxbase crash_builtin_sprintf -version -o /tmp/ccqb7Log.s
ignoring nonexistent directory
"/home/avega/shared/gcc-4.1/lib/gcc/x86_64-unknown-linux-gnu/4.1.1/../../../../x86_64-unknown-linux-gnu/include"
#include "..." search starts here:
#include <...> search starts here:
 /usr/local/include
 /home/avega/shared/gcc-4.1/include
 /home/avega/shared/gcc-4.1/lib/gcc/x86_64-unknown-linux-gnu/4.1.1/include
 /usr/include
End of search list.
GNU C version 4.1.1 (x86_64-unknown-linux-gnu)
        compiled by GNU C version 4.1.1.
GGC heuristics: --param ggc-min-expand=30 --param ggc-min-heapsize=4096
options passed:  -v -mtune=k8 -auxbase
options enabled:  -falign-loops -fargument-alias
 -fasynchronous-unwind-tables -fbranch-count-reg -fcommon -fearly-inlining
 -feliminate-unused-debug-types -ffunction-cse -fgcse-lm -fident
 -finline-functions-called-once -fivopts -fkeep-static-consts
 -fleading-underscore -floop-optimize2 -fmath-errno -fpeephole
 -freg-struct-return -fsched-interblock -fsched-spec
 -fsched-stalled-insns-dep -fshow-column -fsplit-ivs-in-unroller
 -ftrapping-math -ftree-loop-im -ftree-loop-ivcanon -ftree-loop-optimize
 -ftree-vect-loop-version -funwind-tables -fvar-tracking
 -fzero-initialized-in-bss -m128bit-long-double -m64 -m80387
 -maccumulate-outgoing-args -malign-stringops -mfancy-math-387
 -mfp-ret-in-387 -mieee-fp -mmmx -mpush-args -mred-zone -msse -msse2
 -mtls-direct-seg-refs
Compiler executable checksum: 8e360ce3bdb591fc08bf895e5092364f
 main
crash_builtin_sprintf.c: In function â&#128;&#152;mainâ&#128;&#153;:
crash_builtin_sprintf.c:8: internal compiler error: Segmentation fault
Please submit a full bug report,
with preprocessed source if appropriate.
See <URL:http://gcc.gnu.org/bugs.html> for instructions.


$ gdb ~/shared/gcc-4.1/libexec/gcc/x86_64-unknown-linux-gnu/4.1.1/cc1
GNU gdb Red Hat Linux (6.3.0.0-1.132.EL4rh)
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "x86_64-redhat-linux-gnu"...Using host libthread_db
library "/lib64/tls/libthread_db.so.1".

(gdb) set args crash_builtin_sprintf.c
(gdb) r
Starting program:
/home/avega/shared/gcc-4.1/libexec/gcc/x86_64-unknown-linux-gnu/4.1.1/cc1
crash_builtin_sprintf.c
 main
Program received signal SIGSEGV, Segmentation fault.
0x000000000050ef55 in fold_builtin_sprintf (arglist=0x2a985fe1e0, ignored=0)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/builtins.c:9883
9883          orig = TREE_VALUE (TREE_CHAIN (TREE_CHAIN (arglist)));
(gdb) where
#0  0x000000000050ef55 in fold_builtin_sprintf (arglist=0x2a985fe1e0,
    ignored=0) at /home/avega/morfeo/gcc_4_1_1_release/gcc/builtins.c:9883
#1  0x0000000000511adc in fold_builtin (fndecl=Variable "fndecl" is not
available.
)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/builtins.c:9099
#2  0x00000000005c0b5a in fold_ternary (code=Variable "code" is not available.
)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/fold-const.c:10159
#3  0x00000000005c1a31 in fold_build3_stat (code=CALL_EXPR, type=0x2a983f24d0,
    op0=0x2a983ed1c0, op1=0x2a985fe1e0, op2=0x0)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/fold-const.c:10587
#4  0x00000000004292c1 in build_function_call (function=0x2a983ed1c0,
params=Variable "params" is not available.
)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-typeck.c:2228
#5  0x0000000000459ea3 in c_parser_postfix_expression_after_primary (
    parser=0x2a983e9410, expr=
      {value = 0x2a9846a900, original_code = ERROR_MARK})
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-parser.c:5250
#6  0x0000000000457571 in c_parser_postfix_expression (parser=0x2a983e9410)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-parser.c:5184
#7  0x0000000000458159 in c_parser_unary_expression (parser=0x2a983e9410)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-parser.c:4622
#8  0x0000000000458ae9 in c_parser_cast_expression (parser=0x2a983e9410,
after=Variable "after" is not available.

) at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-parser.c:4498
#9  0x0000000000458c40 in c_parser_conditional_expression (
    parser=0x2a983e9410, after=Variable "after" is not available.
)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-parser.c:5339
#13 0x000000000045e598 in c_parser_statement_after_labels (parser=0x2a983e9410)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-parser.c:3565
#14 0x00000000004571c8 in c_parser_compound_statement_nostart (
    parser=0x2a983e9410)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-parser.c:3315
#15 0x000000000045d7e5 in c_parser_compound_statement (parser=0x2a983e9410)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-parser.c:3190
#16 0x000000000045df01 in c_parser_declaration_or_fndef (parser=0x2a983e9410,
    fndef_ok=1 '\001', empty_ok=Variable "empty_ok" is not available.
)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-parser.c:1295
#17 0x00000000004604e7 in c_parse_file ()
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-parser.c:977
#18 0x000000000044bd25 in c_common_parse_file (set_yydebug=Variable
"set_yydebug" is not available.
)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/c-opts.c:1143
#19 0x000000000075b4b8 in toplev_main (argc=Variable "argc" is not available.
)
    at /home/avega/morfeo/gcc_4_1_1_release/gcc/toplev.c:991
#20 0x00000034f1d1c3fb in __libc_start_main () from /lib64/tls/libc.so.6
#21 0x00000000004027da in _start ()
#22 0x0000007fbfffef58 in ?? ()
#23 0x000000000000001c in ?? ()
#24 0x0000000000000002 in ?? ()
#25 0x0000007fbffff23d in ?? ()
#26 0x0000007fbffff287 in ?? ()
#27 0x0000000000000000 in ?? ()
(gdb) down
#0  0x000000000050ef55 in fold_builtin_sprintf (arglist=0x2a985fe1e0,
    ignored=0) at /home/avega/morfeo/gcc_4_1_1_release/gcc/builtins.c:9883
9883          orig = TREE_VALUE (TREE_CHAIN (TREE_CHAIN (arglist)));
(gdb) l
9878
9879          if (!fn)
9880            return NULL_TREE;
9881
9882          /* Convert sprintf (str1, "%s", str2) into strcpy (str1, str2). 
*/
9883          orig = TREE_VALUE (TREE_CHAIN (TREE_CHAIN (arglist)));
9884          arglist = build_tree_list (NULL_TREE, orig);
9885          arglist = tree_cons (NULL_TREE, dest, arglist);
9886          if (!ignored)
9887            {
(gdb) source ~/morfeo/gcc_4_1_1_release/gcc/gdbinit.in
Breakpoint 1 at 0x55c4d0: file
/home/avega/morfeo/gcc_4_1_1_release/gcc/diagnostic.c, line 601.
Breakpoint 2 at 0x55c3f0: file
/home/avega/morfeo/gcc_4_1_1_release/gcc/diagnostic.c, line 542.
Breakpoint 3 at 0x34f1d30be0
Breakpoint 4 at 0x34f1d2f920


Index: gcc/builtins.c
===================================================================
--- gcc/builtins.c      (revision 120440)
+++ gcc/builtins.c      (working copy)
@@ -10439,6 +10439,10 @@
       if (!fn)
        return NULL_TREE;

+      /* Verify call is not 'sprintf (dest, "%s")' */
+      if (!validate_arglist (arglist, POINTER_TYPE, POINTER_TYPE,
+                             POINTER_TYPE, VOID_TYPE))
+        return NULL_TREE;
+
       /* Convert sprintf (str1, "%s", str2) into strcpy (str1, str2).  */
       orig = TREE_VALUE (TREE_CHAIN (TREE_CHAIN (arglist)));
       arglist = build_tree_list (NULL_TREE, orig);


-- 
           Summary: Internal Compiler Error with a sprintf with few
                    arguments for format %s
           Product: gcc
           Version: 4.1.1
            Status: UNCONFIRMED
          Severity: minor
          Priority: P3
         Component: c
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: avg07 at tid dot es
 GCC build triplet:  x86_64-unknown-linux-gnu
  GCC host triplet:  x86_64-unknown-linux-gnu
GCC target triplet:  x86_64-unknown-linux-gnu


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.0/4.1/4.2/4.3 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[pinskia at gcc dot gnu dot org]

------- Comment #1 from pinskia at gcc dot gnu dot org  2007-01-15 19:26 -------
Confirmed, a regression from 3.4.0.


-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|minor                       |normal
             Status|UNCONFIRMED                 |NEW
          Component|c                           |middle-end
     Ever Confirmed|0                           |1
  GCC build triplet| x86_64-unknown-linux-gnu   |
   GCC host triplet| x86_64-unknown-linux-gnu   |
 GCC target triplet| x86_64-unknown-linux-gnu   |
           Keywords|                            |ice-on-valid-code
      Known to fail|                            |4.0.3 4.0.0 4.1.0 4.1.1
      Known to work|                            |3.4.0 3.2.3
   Last reconfirmed|0000-00-00 00:00:00         |2007-01-15 19:26:36
               date|                            |
            Summary|Internal Compiler Error with|[4.0/4.1/4.2/4.3 Regression]
                   |a sprintf with few arguments|Internal Compiler Error with
                   |for format %s               |a sprintf with few arguments
                   |                            |for format %s
   Target Milestone|---                         |4.0.4


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.0/4.1/4.2/4.3 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[avg07 at tid dot es]

------- Comment #2 from avg07 at tid dot es  2007-01-17 07:23 -------
Created an attachment (id=12912)
 --> (http://gcc.gnu.org/bugzilla/attachment.cgi?id=12912&action=view)
patch to rev 120440: make additional check on arglist


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.0/4.1/4.2/4.3 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[jakub at gcc dot gnu dot org]

------- Comment #3 from jakub at gcc dot gnu dot org  2007-02-01 13:37 -------
Calling validate_arglist again is unnecessarily expensive and the other case
has a bug as well.


-- 

jakub at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|unassigned at gcc dot gnu   |jakub at gcc dot gnu dot org
                   |dot org                     |
                URL|                            |http://gcc.gnu.org/ml/gcc-
                   |                            |patches/2007-
                   |                            |02/msg00053.html
             Status|NEW                         |ASSIGNED
   Last reconfirmed|2007-01-15 19:26:36         |2007-02-01 13:37:27
               date|                            |


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.0/4.1/4.2/4.3 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[jakub at gcc dot gnu dot org]

------- Comment #4 from jakub at gcc dot gnu dot org  2007-02-02 12:21 -------
Subject: Bug 30473

Author: jakub
Date: Fri Feb  2 12:21:13 2007
New Revision: 121495

URL: http://gcc.gnu.org/viewcvs?root=gcc&view=rev&rev=121495
Log:
        PR middle-end/30473
        * builtins.c (fold_builtin_sprintf): Do not attempt to optimize
        sprintf (str, "%s").  Do not optimize sprintf (str, "nopercent", p++).

        * gcc.dg/pr30473.c: New test.
        * gcc.c-torture/execute/20070201-1.c: New test.

Added:
    trunk/gcc/testsuite/gcc.c-torture/execute/20070201-1.c
    trunk/gcc/testsuite/gcc.dg/pr30473.c
Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/builtins.c
    trunk/gcc/testsuite/ChangeLog


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.0/4.1/4.2/4.3 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[jakub at gcc dot gnu dot org]

------- Comment #5 from jakub at gcc dot gnu dot org  2007-02-02 15:23 -------
Subject: Bug 30473

Author: jakub
Date: Fri Feb  2 15:22:50 2007
New Revision: 121503

URL: http://gcc.gnu.org/viewcvs?root=gcc&view=rev&rev=121503
Log:
        PR middle-end/30473
        * builtins.c (fold_builtin_sprintf): Do not attempt to optimize
        sprintf (str, "%s").  Do not optimize sprintf (str, "nopercent", p++).

        * gcc.dg/pr30473.c: New test.
        * gcc.c-torture/execute/20070201-1.c: New test.

Added:
    branches/gcc-4_2-branch/gcc/testsuite/gcc.c-torture/execute/20070201-1.c
    branches/gcc-4_2-branch/gcc/testsuite/gcc.dg/pr30473.c
Modified:
    branches/gcc-4_2-branch/gcc/ChangeLog
    branches/gcc-4_2-branch/gcc/builtins.c
    branches/gcc-4_2-branch/gcc/testsuite/ChangeLog


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.0/4.1/4.2/4.3 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[gdr at gcc dot gnu dot org]

------- Comment #6 from gdr at gcc dot gnu dot org  2007-02-03 21:26 -------
won't fix in GCC-4.0.x.  Adjusting milestone.


-- 

gdr at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|4.0.4                       |4.1.3


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.0/4.1/4.2/4.3 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[pinskia at gcc dot gnu dot org]

-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|4.1.3                       |4.1.2


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.0/4.1/4.2/4.3 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[mmitchel at gcc dot gnu dot org]

-- 

mmitchel at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P3                          |P1


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.1 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[mmitchel at gcc dot gnu dot org]

-- 

mmitchel at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|4.1.2                       |4.1.3


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.1 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[jakub at gcc dot gnu dot org]

------- Comment #7 from jakub at gcc dot gnu dot org  2007-02-14 20:34 -------
Subject: Bug 30473

Author: jakub
Date: Wed Feb 14 20:33:56 2007
New Revision: 121961

URL: http://gcc.gnu.org/viewcvs?root=gcc&view=rev&rev=121961
Log:
        PR middle-end/30473
        * builtins.c (fold_builtin_sprintf): Do not attempt to optimize
        sprintf (str, "%s").  Do not optimize sprintf (str, "nopercent", p++).

        * gcc.dg/pr30473.c: New test.
        * gcc.c-torture/execute/20070201-1.c: New test.

Added:
    branches/gcc-4_1-branch/gcc/testsuite/gcc.c-torture/execute/20070201-1.c
    branches/gcc-4_1-branch/gcc/testsuite/gcc.dg/pr30473.c
Modified:
    branches/gcc-4_1-branch/gcc/ChangeLog
    branches/gcc-4_1-branch/gcc/builtins.c
    branches/gcc-4_1-branch/gcc/testsuite/ChangeLog


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.1 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[jakub at gcc dot gnu dot org]

------- Comment #8 from jakub at gcc dot gnu dot org  2007-02-27 16:27 -------
Fixed on 4.1 branch as well.


-- 

jakub at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |FIXED


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473

[Bug middle-end/30473] [4.1 Regression] Internal Compiler Error with a sprintf with few arguments for format %s

[pinskia at gcc dot gnu dot org]

------- Comment #9 from pinskia at gcc dot gnu dot org  2007-04-03 17:38 -------
*** Bug 31458 has been marked as a duplicate of this bug. ***


-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sharybin at nm dot ru


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=30473