public inbox for gcc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug c/34934]  New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
@ 2008-01-23  3:26 eshkinkot at gmail dot com
  2008-01-23  4:02 ` [Bug c/34934] " eshkinkot at gmail dot com
                   ` (15 more replies)
  0 siblings, 16 replies; 17+ messages in thread
From: eshkinkot at gmail dot com @ 2008-01-23  3:26 UTC (permalink / raw)
  To: gcc-bugs

also crash with:
gcc version 4.1.3 20071209 (prerelease) (Debian 4.1.2-18)
gcc version 4.3.0 20080113 (experimental) [trunk revision 131510] (Debian
20080113-1)

gcc -v -W -Wall -O2 -c send_tiny.c
Using built-in specs.
Target: i486-linux-gnu
Configured with: ../src/configure -v
--enable-languages=c,c++,fortran,objc,obj-c++,treelang --prefix=/usr
--enable-shared --with-system-zlib --libexecdir=/usr/lib
--without-included-gettext --enable-threads=posix --enable-nls
--with-gxx-include-dir=/usr/include/c++/4.2 --program-suffix=-4.2
--enable-clocale=gnu --enable-libstdcxx-debug --enable-mpfr
--enable-targets=all --enable-checking=release --build=i486-linux-gnu
--host=i486-linux-gnu --target=i486-linux-gnu
Thread model: posix
gcc version 4.2.3 20071123 (prerelease) (Debian 4.2.2-4)
 /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1 -quiet -v send_tiny.c -quiet -dumpbase
send_tiny.c -mtune=generic -auxbase send_tiny -O2 -W -Wall -version -o
/tmp/ccAIKCUF.s
ignoring nonexistent directory "/usr/local/include/i486-linux-gnu"
ignoring nonexistent directory
"/usr/lib/gcc/i486-linux-gnu/4.2.3/../../../../i486-linux-gnu/include"
ignoring nonexistent directory "/usr/include/i486-linux-gnu"
#include "..." search starts here:
#include <...> search starts here:
 /usr/local/include
 /usr/lib/gcc/i486-linux-gnu/4.2.3/include
 /usr/include
End of search list.
GNU C version 4.2.3 20071123 (prerelease) (Debian 4.2.2-4) (i486-linux-gnu)
        compiled by GNU C version 4.2.3 20071123 (prerelease) (Debian 4.2.2-4).
GGC heuristics: --param ggc-min-expand=100 --param ggc-min-heapsize=131072
Compiler executable checksum: e5f75b43edef04f899196b1bf42593d5
send_tiny.c: In function &#8216;sendto_realops_lev&#8217;:
send_tiny.c:190: warning: implicit declaration of function
&#8216;ircsprintf&#8217;
send_tiny.c:192: warning: implicit declaration of function &#8216;strlen&#8217;
send_tiny.c:192: warning: incompatible implicit declaration of built-in
function &#8216;strlen&#8217;
send_tiny.c:194: warning: implicit declaration of function
&#8216;vsendto_one&#8217;
*** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or
corruption (!prev): 0x0866a778 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6[0xb7ece735]
/lib/i686/cmov/libc.so.6(cfree+0x90)[0xb7ed21a0]
/usr/lib/gcc/i486-linux-gnu/4.2.3/cc1[0x83b5300]
======= Memory map: ========
08048000-08585000 r-xp 00000000 03:46 156160    
/usr/lib/gcc/i486-linux-gnu/4.2/cc1
08585000-0858a000 rw-p 0053c000 03:46 156160    
/usr/lib/gcc/i486-linux-gnu/4.2/cc1
0858a000-0867f000 rw-p 0858a000 00:00 0          [heap]
b7800000-b7821000 rw-p b7800000 00:00 0
b7821000-b7900000 ---p b7821000 00:00 0
b7923000-b792d000 r-xp 00000000 03:07 180657     /lib/libgcc_s.so.1
b792d000-b792e000 rw-p 00009000 03:07 180657     /lib/libgcc_s.so.1
b7957000-b7b7f000 rw-p b7957000 00:00 0
b7b7f000-b7c62000 r--p 0022a000 03:46 63924      /usr/lib/locale/locale-archive
b7c62000-b7e62000 r--p 00000000 03:46 63924      /usr/lib/locale/locale-archive
b7e62000-b7e63000 rw-p b7e62000 00:00 0
b7e63000-b7faa000 r-xp 00000000 03:07 195734     /lib/i686/cmov/libc-2.7.so
b7faa000-b7fab000 r--p 00147000 03:07 195734     /lib/i686/cmov/libc-2.7.so
b7fab000-b7fad000 rw-p 00148000 03:07 195734     /lib/i686/cmov/libc-2.7.so
b7fad000-b7fb0000 rw-p b7fad000 00:00 0
b7fb5000-b7fdb000 rw-p b7fb5000 00:00 0
b7fdb000-b7fdc000 r-xp b7fdb000 00:00 0          [vdso]
b7fdc000-b7ff8000 r-xp 00000000 03:07 179187     /lib/ld-2.7.so
b7ff8000-b7ffa000 rw-p 0001b000 03:07 179187     /lib/ld-2.7.so
bfacc000-bfae1000 rw-p bfacc000 00:00 0          [stack]
send_tiny.c:131: internal compiler error:
&#1040;&#1074;&#1072;&#1088;&#1080;&#1081;&#1085;&#1099;&#1081;
&#1086;&#1089;&#1090;&#1072;&#1085;&#1086;&#1074;
Please submit a full bug report,
with preprocessed source if appropriate.
See <URL:http://gcc.gnu.org/bugs.html> for instructions.
For Debian GNU/Linux specific bug reporting instructions,
see <URL:file:///usr/share/doc/gcc-4.2/README.Bugs>.


-- 
           Summary: -O1 crash compile *** glibc detected ***
                    /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or
                    corruption (!prev)
           Product: gcc
           Version: 4.2.3
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: c
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: eshkinkot at gmail dot com


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug c/34934] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
@ 2008-01-23  4:02 ` eshkinkot at gmail dot com
  2008-01-23  4:39 ` eshkinkot at gmail dot com
                   ` (14 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: eshkinkot at gmail dot com @ 2008-01-23  4:02 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #1 from eshkinkot at gmail dot com  2008-01-23 03:05 -------
Created an attachment (id=15001)
 --> (http://gcc.gnu.org/bugzilla/attachment.cgi?id=15001&action=view)
gcc -save-temps -v -W -Wall -O2 -c send_tiny.c

preprocessed file


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug c/34934] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
  2008-01-23  4:02 ` [Bug c/34934] " eshkinkot at gmail dot com
@ 2008-01-23  4:39 ` eshkinkot at gmail dot com
  2008-01-23  8:55 ` [Bug middle-end/34934] " Ralf dot Wildenhues at gmx dot de
                   ` (13 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: eshkinkot at gmail dot com @ 2008-01-23  4:39 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #2 from eshkinkot at gmail dot com  2008-01-23 03:10 -------
Created an attachment (id=15002)
 --> (http://gcc.gnu.org/bugzilla/attachment.cgi?id=15002&action=view)
src file

at first this bug was catched in real program and this single source file
created from it, may be it will be useful


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (2 preceding siblings ...)
  2008-01-23  8:55 ` [Bug middle-end/34934] " Ralf dot Wildenhues at gmx dot de
@ 2008-01-23  8:55 ` Ralf dot Wildenhues at gmx dot de
  2008-01-23 10:57 ` rguenth at gcc dot gnu dot org
                   ` (11 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: Ralf dot Wildenhues at gmx dot de @ 2008-01-23  8:55 UTC (permalink / raw)
  To: gcc-bugs

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 4249 bytes --]



------- Comment #4 from Ralf dot Wildenhues at gmx dot de  2008-01-23 08:23 -------
valgrind output (gcc (GCC) 4.3.0 20080122 (experimental)):

send_tiny.i: In function ‘sendto_realops_lev’:
send_tiny.i:77: warning: implicit declaration of function ‘strlen’
send_tiny.i:77: warning: incompatible implicit declaration of built-in function
‘strlen’
send_tiny.i:78: warning: implicit declaration of function ‘vsendto_one’
--17488-- REDIR: 0x4ccb070 (memmove) redirected to 0x4a1c0f0 (memmove)
==17488== Invalid write of size 8
==17488==    at 0x82D8D9: reachable_at_most_once (tree-stdarg.c:101)
==17488==    by 0x82F530: va_list_ptr_read (tree-stdarg.c:377)
==17488==    by 0x8307B5: execute_optimize_stdarg (tree-stdarg.c:823)
==17488==    by 0x656302: execute_one_pass (passes.c:1118)
==17488==    by 0x6564CB: execute_pass_list (passes.c:1171)
==17488==    by 0x6564DD: execute_pass_list (passes.c:1172)
==17488==    by 0x734718: tree_rest_of_compilation (tree-optimize.c:404)
==17488==    by 0x8F44D1: cgraph_expand_function (cgraphunit.c:1152)
==17488==    by 0x8F63F8: cgraph_optimize (cgraphunit.c:1215)
==17488==    by 0x4174FC: c_write_global_declarations (c-decl.c:8079)
==17488==    by 0x6D3F45: toplev_main (toplev.c:1055)
==17488==    by 0x4C7549A: (below main) (in /lib/libc-2.3.6.so)
==17488==  Address 0x51177b8 is 0 bytes after a block of size 152 alloc'd
==17488==    at 0x4A19DAB: malloc (vg_replace_malloc.c:207)
==17488==    by 0xB34CA7: xmalloc (xmalloc.c:147)
==17488==    by 0x82D73D: reachable_at_most_once (tree-stdarg.c:61)
==17488==    by 0x82F530: va_list_ptr_read (tree-stdarg.c:377)
==17488==    by 0x8307B5: execute_optimize_stdarg (tree-stdarg.c:823)
==17488==    by 0x656302: execute_one_pass (passes.c:1118)
==17488==    by 0x6564CB: execute_pass_list (passes.c:1171)
==17488==    by 0x6564DD: execute_pass_list (passes.c:1172)
==17488==    by 0x734718: tree_rest_of_compilation (tree-optimize.c:404)
==17488==    by 0x8F44D1: cgraph_expand_function (cgraphunit.c:1152)
==17488==    by 0x8F63F8: cgraph_optimize (cgraphunit.c:1215)
==17488==    by 0x4174FC: c_write_global_declarations (c-decl.c:8079)
==17488==
==17488== Invalid read of size 8
==17488==    at 0x82D819: reachable_at_most_once (tree-stdarg.c:76)
==17488==    by 0x82F530: va_list_ptr_read (tree-stdarg.c:377)
==17488==    by 0x8307B5: execute_optimize_stdarg (tree-stdarg.c:823)
==17488==    by 0x656302: execute_one_pass (passes.c:1118)
==17488==    by 0x6564CB: execute_pass_list (passes.c:1171)
==17488==    by 0x6564DD: execute_pass_list (passes.c:1172)
==17488==    by 0x734718: tree_rest_of_compilation (tree-optimize.c:404)
==17488==    by 0x8F44D1: cgraph_expand_function (cgraphunit.c:1152)
==17488==    by 0x8F63F8: cgraph_optimize (cgraphunit.c:1215)
==17488==    by 0x4174FC: c_write_global_declarations (c-decl.c:8079)
==17488==    by 0x6D3F45: toplev_main (toplev.c:1055)
==17488==    by 0x4C7549A: (below main) (in /lib/libc-2.3.6.so)
==17488==  Address 0x51177c0 is 8 bytes after a block of size 152 alloc'd
==17488==    at 0x4A19DAB: malloc (vg_replace_malloc.c:207)
==17488==    by 0xB34CA7: xmalloc (xmalloc.c:147)
==17488==    by 0x82D73D: reachable_at_most_once (tree-stdarg.c:61)
==17488==    by 0x82F530: va_list_ptr_read (tree-stdarg.c:377)
==17488==    by 0x8307B5: execute_optimize_stdarg (tree-stdarg.c:823)
==17488==    by 0x656302: execute_one_pass (passes.c:1118)
==17488==    by 0x6564CB: execute_pass_list (passes.c:1171)
==17488==    by 0x6564DD: execute_pass_list (passes.c:1172)
==17488==    by 0x734718: tree_rest_of_compilation (tree-optimize.c:404)
==17488==    by 0x8F44D1: cgraph_expand_function (cgraphunit.c:1152)
==17488==    by 0x8F63F8: cgraph_optimize (cgraphunit.c:1215)
==17488==    by 0x4174FC: c_write_global_declarations (c-decl.c:8079)
==17488==
==17488== ERROR SUMMARY: 3 errors from 2 contexts (suppressed: 2 from 1)


-- 

Ralf dot Wildenhues at gmx dot de changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |Ralf dot Wildenhues at gmx
                   |                            |dot de


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
  2008-01-23  4:02 ` [Bug c/34934] " eshkinkot at gmail dot com
  2008-01-23  4:39 ` eshkinkot at gmail dot com
@ 2008-01-23  8:55 ` Ralf dot Wildenhues at gmx dot de
  2008-01-23  8:55 ` Ralf dot Wildenhues at gmx dot de
                   ` (12 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: Ralf dot Wildenhues at gmx dot de @ 2008-01-23  8:55 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #3 from Ralf dot Wildenhues at gmx dot de  2008-01-23 08:21 -------
Created an attachment (id=15005)
 --> (http://gcc.gnu.org/bugzilla/attachment.cgi?id=15005&action=view)
reduced testcase


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (3 preceding siblings ...)
  2008-01-23  8:55 ` Ralf dot Wildenhues at gmx dot de
@ 2008-01-23 10:57 ` rguenth at gcc dot gnu dot org
  2008-01-23 17:50 ` Ralf dot Wildenhues at gmx dot de
                   ` (10 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2008-01-23 10:57 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #5 from rguenth at gcc dot gnu dot org  2008-01-23 10:47 -------
Works for me on the trunk, even with

Index: tree-stdarg.c
===================================================================
--- tree-stdarg.c       (revision 131756)
+++ tree-stdarg.c       (working copy)
@@ -98,7 +98,10 @@ reachable_at_most_once (basic_block va_a
        {
          SET_BIT (visited, src->index);
          FOR_EACH_EDGE (e, ei, src->preds)
+         {
+           gcc_assert (sp < n_basic_blocks + 1);
            stack[sp++] = e;
+         }
        }
     }


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (4 preceding siblings ...)
  2008-01-23 10:57 ` rguenth at gcc dot gnu dot org
@ 2008-01-23 17:50 ` Ralf dot Wildenhues at gmx dot de
  2008-01-23 22:22 ` rguenth at gcc dot gnu dot org
                   ` (9 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: Ralf dot Wildenhues at gmx dot de @ 2008-01-23 17:50 UTC (permalink / raw)
  To: gcc-bugs

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 533 bytes --]



------- Comment #6 from Ralf dot Wildenhues at gmx dot de  2008-01-23 17:12 -------
With the patch I get this:

xgcc -m32 -O1 -c send_tiny.i

send_tiny.i: In function ‘sendto_realops_lev’:
send_tiny.i:77: warning: incompatible implicit declaration of built-in function
‘strlen’
send_tiny.i:25: internal compiler error: in reachable_at_most_once, at
tree-stdarg.c:102
Please submit a full bug report,

Note that I cannot reproduce the failure without -m32 (on x86_64).


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (5 preceding siblings ...)
  2008-01-23 17:50 ` Ralf dot Wildenhues at gmx dot de
@ 2008-01-23 22:22 ` rguenth at gcc dot gnu dot org
  2008-01-23 22:41 ` Ralf dot Wildenhues at gmx dot de
                   ` (8 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2008-01-23 22:22 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #7 from rguenth at gcc dot gnu dot org  2008-01-23 21:44 -------
I checked both a 32bit compiler and x86_64 with -m32 (with the reduced
testcase).


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (6 preceding siblings ...)
  2008-01-23 22:22 ` rguenth at gcc dot gnu dot org
@ 2008-01-23 22:41 ` Ralf dot Wildenhues at gmx dot de
  2008-01-24 10:59 ` rguenth at gcc dot gnu dot org
                   ` (7 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: Ralf dot Wildenhues at gmx dot de @ 2008-01-23 22:41 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #8 from Ralf dot Wildenhues at gmx dot de  2008-01-23 22:33 -------
Subject: Re:  -O1 crash compile *** glibc detected ***
/usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)

* rguenth at gcc dot gnu dot org wrote on Wed, Jan 23, 2008 at 10:44:51PM CET:
> I checked both a 32bit compiler and x86_64 with -m32 (with the reduced
> testcase).

Hmm, I don't know what to do.  I can reproduce it with a 32bit compiler
on x86 as well, with a just built r131766.  glibc 2.7 if that matters
(but it shouldn't for valgrind).  What other differences can be
important?


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (7 preceding siblings ...)
  2008-01-23 22:41 ` Ralf dot Wildenhues at gmx dot de
@ 2008-01-24 10:59 ` rguenth at gcc dot gnu dot org
  2008-01-24 11:20 ` [Bug middle-end/34934] [4.1/4.2/4.3 Regression] " pinskia at gcc dot gnu dot org
                   ` (6 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2008-01-24 10:59 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #9 from rguenth at gcc dot gnu dot org  2008-01-24 10:26 -------
Confirmed.  With the gcc_assert patch on x86_64 it ICEs with -O -m32 with
the following reduced testcase:

typedef struct fdstruct {
    int entry[(1024 - 10) + 2];
    int last_entry;
} fdlist;
void vsendto_one(long*, __builtin_va_list);
void sendto_realops_lev(long *umode, fdlist *l, int lev, ...)
{
    int i, fd;
    __builtin_va_list vl;
    __builtin_va_start(vl, lev);
    for (fd = l->entry[i = 1]; i <= l->last_entry; fd = l->entry[++i])
    {
        switch (lev)  {
            case 1:
                if (!(*umode & 0x00000020))
                    continue;
            case 3:
                if (!(*umode & 0x00000080))
                    continue;
            case 9:
                if (!(*umode & 0x04000000))
                    continue;
            case 4:
                if (!(*umode & 0x00000200))
                    continue;
            case 8:
                if (!(*umode & 0x00100000))
                    continue;
            case 6:
                if (!(*umode & 0x00000100))
                    continue;
            case 7:
                if (!(*umode & 0x00040000))
                    continue;
            case 10:
                if (!(*umode & 0x00000020)
                    && ((*umode & 0x00008000)
                        || (*umode & 0x08000000)))
                    continue;
        }
        vsendto_one(umode, vl);
    }
}

Obviously for a densely connected CFG there can be as much as n_basic_blocks^2
edges.


-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jakub at gcc dot gnu dot
                   |                            |org, rguenth at gcc dot gnu
                   |                            |dot org
             Status|UNCONFIRMED                 |NEW
     Ever Confirmed|0                           |1
           Keywords|                            |ice-on-valid-code
   Last reconfirmed|0000-00-00 00:00:00         |2008-01-24 10:26:55
               date|                            |


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] [4.1/4.2/4.3 Regression] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (8 preceding siblings ...)
  2008-01-24 10:59 ` rguenth at gcc dot gnu dot org
@ 2008-01-24 11:20 ` pinskia at gcc dot gnu dot org
  2008-01-24 11:48 ` rguenth at gcc dot gnu dot org
                   ` (5 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: pinskia at gcc dot gnu dot org @ 2008-01-24 11:20 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #10 from pinskia at gcc dot gnu dot org  2008-01-24 10:59 -------
4.0.x did not have tree-stdarg.c so this is a regression.


-- 

pinskia at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
      Known to fail|                            |4.3.0 4.2.3
      Known to work|                            |4.0.0
            Summary|-O1 crash compile *** glibc |[4.1/4.2/4.3 Regression] -O1
                   |detected ***                |crash compile *** glibc
                   |/usr/lib/gcc/i486-linux-    |detected ***
                   |gnu/4.2.3/cc1: double free  |/usr/lib/gcc/i486-linux-
                   |or corruption (!prev)       |gnu/4.2.3/cc1: double free
                   |                            |or corruption (!prev)
   Target Milestone|---                         |4.1.3


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] [4.1/4.2/4.3 Regression] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (9 preceding siblings ...)
  2008-01-24 11:20 ` [Bug middle-end/34934] [4.1/4.2/4.3 Regression] " pinskia at gcc dot gnu dot org
@ 2008-01-24 11:48 ` rguenth at gcc dot gnu dot org
  2008-01-24 12:03 ` jakub at gcc dot gnu dot org
                   ` (4 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: rguenth at gcc dot gnu dot org @ 2008-01-24 11:48 UTC (permalink / raw)
  To: gcc-bugs



-- 

rguenth at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P3                          |P2


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] [4.1/4.2/4.3 Regression] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (10 preceding siblings ...)
  2008-01-24 11:48 ` rguenth at gcc dot gnu dot org
@ 2008-01-24 12:03 ` jakub at gcc dot gnu dot org
  2008-01-24 15:42 ` jakub at gcc dot gnu dot org
                   ` (3 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: jakub at gcc dot gnu dot org @ 2008-01-24 12:03 UTC (permalink / raw)
  To: gcc-bugs



-- 

jakub at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|unassigned at gcc dot gnu   |jakub at gcc dot gnu dot org
                   |dot org                     |
             Status|NEW                         |ASSIGNED
   Last reconfirmed|2008-01-24 10:26:55         |2008-01-24 11:26:08
               date|                            |


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] [4.1/4.2/4.3 Regression] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (11 preceding siblings ...)
  2008-01-24 12:03 ` jakub at gcc dot gnu dot org
@ 2008-01-24 15:42 ` jakub at gcc dot gnu dot org
  2008-01-24 16:38 ` [Bug middle-end/34934] [4.1/4.2 " jakub at gcc dot gnu dot org
                   ` (2 subsequent siblings)
  15 siblings, 0 replies; 17+ messages in thread
From: jakub at gcc dot gnu dot org @ 2008-01-24 15:42 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #11 from jakub at gcc dot gnu dot org  2008-01-24 15:14 -------
Subject: Bug 34934

Author: jakub
Date: Thu Jan 24 15:13:17 2008
New Revision: 131780

URL: http://gcc.gnu.org/viewcvs?root=gcc&view=rev&rev=131780
Log:
        PR middle-end/34934
        * tree-stdarg.c (reachable_at_most_once): Use VEC vector instead of
        a fixed vector for stack.

        * gcc.c-torture/compile/20080124-1.c: New test.

Added:
    trunk/gcc/testsuite/gcc.c-torture/compile/20080124-1.c
Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/testsuite/ChangeLog
    trunk/gcc/tree-stdarg.c


-- 


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] [4.1/4.2 Regression] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (12 preceding siblings ...)
  2008-01-24 15:42 ` jakub at gcc dot gnu dot org
@ 2008-01-24 16:38 ` jakub at gcc dot gnu dot org
  2008-07-04 22:30 ` [Bug middle-end/34934] [4.2 " jsm28 at gcc dot gnu dot org
  2009-03-31 15:02 ` jsm28 at gcc dot gnu dot org
  15 siblings, 0 replies; 17+ messages in thread
From: jakub at gcc dot gnu dot org @ 2008-01-24 16:38 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #12 from jakub at gcc dot gnu dot org  2008-01-24 16:23 -------
Fixed on the trunk.


-- 

jakub at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
      Known to fail|4.3.0 4.2.3                 |4.2.3
      Known to work|4.0.0                       |4.0.0 4.3.0
            Summary|[4.1/4.2/4.3 Regression] -O1|[4.1/4.2 Regression] -O1
                   |crash compile *** glibc     |crash compile *** glibc
                   |detected ***                |detected ***
                   |/usr/lib/gcc/i486-linux-    |/usr/lib/gcc/i486-linux-
                   |gnu/4.2.3/cc1: double free  |gnu/4.2.3/cc1: double free
                   |or corruption (!prev)       |or corruption (!prev)


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] [4.2 Regression] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (13 preceding siblings ...)
  2008-01-24 16:38 ` [Bug middle-end/34934] [4.1/4.2 " jakub at gcc dot gnu dot org
@ 2008-07-04 22:30 ` jsm28 at gcc dot gnu dot org
  2009-03-31 15:02 ` jsm28 at gcc dot gnu dot org
  15 siblings, 0 replies; 17+ messages in thread
From: jsm28 at gcc dot gnu dot org @ 2008-07-04 22:30 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #13 from jsm28 at gcc dot gnu dot org  2008-07-04 22:29 -------
Closing 4.1 branch.


-- 

jsm28 at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|[4.1/4.2 Regression] -O1    |[4.2 Regression] -O1 crash
                   |crash compile *** glibc     |compile *** glibc detected
                   |detected ***                |*** /usr/lib/gcc/i486-linux-
                   |/usr/lib/gcc/i486-linux-    |gnu/4.2.3/cc1: double free
                   |gnu/4.2.3/cc1: double free  |or corruption (!prev)
                   |or corruption (!prev)       |
   Target Milestone|4.1.3                       |4.2.5


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

* [Bug middle-end/34934] [4.2 Regression] -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev)
  2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
                   ` (14 preceding siblings ...)
  2008-07-04 22:30 ` [Bug middle-end/34934] [4.2 " jsm28 at gcc dot gnu dot org
@ 2009-03-31 15:02 ` jsm28 at gcc dot gnu dot org
  15 siblings, 0 replies; 17+ messages in thread
From: jsm28 at gcc dot gnu dot org @ 2009-03-31 15:02 UTC (permalink / raw)
  To: gcc-bugs



------- Comment #14 from jsm28 at gcc dot gnu dot org  2009-03-31 15:02 -------
Closing 4.2 branch, fixed in 4.3.


-- 

jsm28 at gcc dot gnu dot org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
      Known to fail|4.2.3                       |4.2.3 4.2.5
         Resolution|                            |FIXED
   Target Milestone|4.2.5                       |4.3.0


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=34934


^ permalink raw reply	[flat|nested] 17+ messages in thread

end of thread, other threads:[~2009-03-31 15:02 UTC | newest]

Thread overview: 17+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2008-01-23  3:26 [Bug c/34934] New: -O1 crash compile *** glibc detected *** /usr/lib/gcc/i486-linux-gnu/4.2.3/cc1: double free or corruption (!prev) eshkinkot at gmail dot com
2008-01-23  4:02 ` [Bug c/34934] " eshkinkot at gmail dot com
2008-01-23  4:39 ` eshkinkot at gmail dot com
2008-01-23  8:55 ` [Bug middle-end/34934] " Ralf dot Wildenhues at gmx dot de
2008-01-23  8:55 ` Ralf dot Wildenhues at gmx dot de
2008-01-23 10:57 ` rguenth at gcc dot gnu dot org
2008-01-23 17:50 ` Ralf dot Wildenhues at gmx dot de
2008-01-23 22:22 ` rguenth at gcc dot gnu dot org
2008-01-23 22:41 ` Ralf dot Wildenhues at gmx dot de
2008-01-24 10:59 ` rguenth at gcc dot gnu dot org
2008-01-24 11:20 ` [Bug middle-end/34934] [4.1/4.2/4.3 Regression] " pinskia at gcc dot gnu dot org
2008-01-24 11:48 ` rguenth at gcc dot gnu dot org
2008-01-24 12:03 ` jakub at gcc dot gnu dot org
2008-01-24 15:42 ` jakub at gcc dot gnu dot org
2008-01-24 16:38 ` [Bug middle-end/34934] [4.1/4.2 " jakub at gcc dot gnu dot org
2008-07-04 22:30 ` [Bug middle-end/34934] [4.2 " jsm28 at gcc dot gnu dot org
2009-03-31 15:02 ` jsm28 at gcc dot gnu dot org

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).