[Bug tree-optimization/46985] New: ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[Bug tree-optimization/46985] New: ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[zsojka at seznam dot cz]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

           Summary: ICE: SIGSEGV in is_gimple_min_invariant
                    (gimple.c:2742) with -fno-tree-ccp
                    -fno-tree-dominator-opts -fno-tree-fre
           Product: gcc
           Version: 4.6.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: tree-optimization
        AssignedTo: unassigned@gcc.gnu.org
        ReportedBy: zsojka@seznam.cz
              Host: x86_64-pc-linux-gnu
            Target: x86_64-pc-linux-gnu


Created attachment 22788
  --> http://gcc.gnu.org/bugzilla/attachment.cgi?id=22788
reduced testcase (from subref_array_pointer_2.f90)

Compiler output - 4.6:
$ gcc -O -ftree-pre -ftree-vrp -fno-tree-ccp -fno-tree-dominator-opts
-fno-tree-fre pr46985.f90
==26346== Invalid read of size 2
==26346==    at 0x7A25D0: is_gimple_min_invariant (gimple.c:2742)
==26346==    by 0x9AFD7D: instantiate_scev_r (tree-scalar-evolution.c:2620)
==26346==    by 0x9AFECE: instantiate_scev_r (tree-scalar-evolution.c:2510)
==26346==    by 0x9B07D9: instantiate_scev_r (tree-scalar-evolution.c:2583)
==26346==    by 0x9AFFDC: instantiate_scev_r (tree-scalar-evolution.c:2255)
==26346==    by 0x9B130A: resolve_mixers (tree-scalar-evolution.c:2744)
==26346==    by 0x9B1508: analyze_scalar_evolution_in_loop
(tree-scalar-evolution.c:2052)
==26346==    by 0x9B202F: simple_iv (tree-scalar-evolution.c:3184)
==26346==    by 0x10B5EFB: constant_after_peeling (tree-ssa-loop-ivcanon.c:184)
==26346==    by 0x10B65CD: canonicalize_loop_induction_variables
(tree-ssa-loop-ivcanon.c:244)
==26346==    by 0x10B70BE: tree_unroll_loops_completely
(tree-ssa-loop-ivcanon.c:536)
==26346==    by 0x84FC95: execute_one_pass (passes.c:1553)
==26346==  Address 0x0 is not stack'd, malloc'd or (recently) free'd
==26346== 
pr46985.f90: In function 'main':
pr46985.f90:7:0: internal compiler error: Segmentation fault
Please submit a full bug report,
with preprocessed source if appropriate.
See <http://gcc.gnu.org/bugs.html> for instructions.

Compiler output - 4.5 and 4.4:
$ gcc -ftree-pre -ftree-vrp -O -fno-tree-ccp -fno-tree-dominator-opts
-fno-tree-fre pr46985.f90 
pr46985.f90: In function 'MAIN__':
pr46985.f90:7:0: internal compiler error: in analyze_function, at
ipa-reference.c:731
Please submit a full bug report,
with preprocessed source if appropriate.
See <http://gcc.gnu.org/bugs.html> for instructions.

Doesn't ICE with release checking.

Tested revisions:
r167954 - crash
4.5 r166509 - different crash
4.4 r166509 - different crash

[Bug tree-optimization/46985] [4.4/4.5/4.6 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[hjl.tools at gmail dot com]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

H.J. Lu <hjl.tools at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |4.6.0
            Summary|ICE: SIGSEGV in             |[4.4/4.5/4.6 Regression]
                   |is_gimple_min_invariant     |ICE: SIGSEGV in
                   |(gimple.c:2742) with        |is_gimple_min_invariant
                   |-fno-tree-ccp               |(gimple.c:2742) with
                   |-fno-tree-dominator-opts    |-fno-tree-ccp
                   |-fno-tree-fre               |-fno-tree-dominator-opts
                   |                            |-fno-tree-fre

[Bug tree-optimization/46985] [4.4/4.5/4.6 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2010.12.17 12:05:09
                 CC|                            |jakub at gcc dot gnu.org,
                   |                            |spop at gcc dot gnu.org
     Ever Confirmed|0                           |1

--- Comment #1 from Jakub Jelinek <jakub at gcc dot gnu.org> 2010-12-17 12:05:09 UTC ---
instantiate_scev_r is called on:
{&tar[ptr$dim$0$lbound_81 + -1].i, +, 4}_3
and the problem is with that COMPONENT_REF inside of it.  COMPONENT_REF has 3
operands, but the last one is optional (there are lots of other trees like
that),
but instantiate_scev_r/instantiate_scev_[123] assume all operands must be
non-NULL.

So, one possible fix would be to:
   if (automatically_generated_chrec_p (chrec)
+      || chrec == NULL
       || is_gimple_min_invariant (chrec))
     return chrec;
at the beginning of instantiate_scev_r.  Or maybe it is just wrong to call
instantiate_scev_r with such arguments and the bug is earlier.

[Bug tree-optimization/46985] [4.4/4.5/4.6 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

--- Comment #2 from Jakub Jelinek <jakub at gcc dot gnu.org> 2010-12-17 12:53:28 UTC ---
This is called when constant_after_peeling is called on:
D.1682_40 = &tar[0].i + D.1683_39;
(&tar[0].i is is_gimple_min_invariant).  Folding folds
&tar[0].i p+ (<unnamed-unsigned:64>) ((ptr$dim$0$lbound_81 + -1) * 4)
into the COMPONENT_REF's operand.

[Bug tree-optimization/46985] [4.4/4.5/4.6 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
         AssignedTo|unassigned at gcc dot       |jakub at gcc dot gnu.org
                   |gnu.org                     |

--- Comment #3 from Jakub Jelinek <jakub at gcc dot gnu.org> 2010-12-17 13:01:51 UTC ---
Created attachment 22796
  --> http://gcc.gnu.org/bugzilla/attachment.cgi?id=22796
gcc46-pr46985.patch

Untested fix.

[Bug tree-optimization/46985] [4.4/4.5/4.6 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

--- Comment #4 from Jakub Jelinek <jakub at gcc dot gnu.org> 2010-12-18 18:15:13 UTC ---
Author: jakub
Date: Sat Dec 18 18:15:10 2010
New Revision: 168027

URL: http://gcc.gnu.org/viewcvs?root=gcc&view=rev&rev=168027
Log:
    PR tree-optimization/46985
    * tree-scalar-evolution.c (instantiate_scev_r): If chrec is NULL,
    return it immediately.

    * gfortran.dg/pr46985.f90: New test.

Added:
    trunk/gcc/testsuite/gfortran.dg/pr46985.f90
Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/testsuite/ChangeLog
    trunk/gcc/tree-scalar-evolution.c

[Bug tree-optimization/46985] [4.4/4.5 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
      Known to work|                            |4.6.0
            Summary|[4.4/4.5/4.6 Regression]    |[4.4/4.5 Regression] ICE:
                   |ICE: SIGSEGV in             |SIGSEGV in
                   |is_gimple_min_invariant     |is_gimple_min_invariant
                   |(gimple.c:2742) with        |(gimple.c:2742) with
                   |-fno-tree-ccp               |-fno-tree-ccp
                   |-fno-tree-dominator-opts    |-fno-tree-dominator-opts
                   |-fno-tree-fre               |-fno-tree-fre
      Known to fail|4.6.0                       |

--- Comment #5 from Jakub Jelinek <jakub at gcc dot gnu.org> 2010-12-18 18:29:26 UTC ---
Fixed on the trunk so far.

[Bug tree-optimization/46985] [4.4/4.5 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|4.6.0                       |4.6.1

--- Comment #6 from Jakub Jelinek <jakub at gcc dot gnu.org> 2011-03-25 19:52:51 UTC ---
GCC 4.6.0 is being released, adjusting target milestone.

[Bug tree-optimization/46985] [4.4/4.5 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|4.6.1                       |4.6.2

--- Comment #7 from Jakub Jelinek <jakub at gcc dot gnu.org> 2011-06-27 12:33:04 UTC ---
GCC 4.6.1 is being released.

[Bug tree-optimization/46985] [4.4/4.5 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

Richard Guenther <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|4.6.2                       |4.4.7

[Bug tree-optimization/46985] [4.5 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|4.4.7                       |4.5.4

--- Comment #8 from Jakub Jelinek <jakub at gcc dot gnu.org> 2012-03-13 12:45:59 UTC ---
4.4 branch is being closed, moving to 4.5.4 target.

[Bug tree-optimization/46985] [4.5 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

Richard Guenther <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P3                          |P2

[Bug tree-optimization/46985] [4.5 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

--- Comment #9 from Richard Guenther <rguenth at gcc dot gnu.org> 2012-06-20 13:56:01 UTC ---
Author: rguenth
Date: Wed Jun 20 13:55:44 2012
New Revision: 188834

URL: http://gcc.gnu.org/viewcvs?root=gcc&view=rev&rev=188834
Log:
2012-06-20  Richard Guenther  <rguenther@suse.de>

    Backport from mainline
    2010-12-18  Jakub Jelinek  <jakub@redhat.com>

    PR tree-optimization/46985
    * tree-scalar-evolution.c (instantiate_scev_r): If chrec is NULL,
    return it immediately.

    * gfortran.dg/pr46985.f90: New test.

    2011-02-18  Jakub Jelinek  <jakub@redhat.com>

    PR debug/47780
    * cfgexpand.c (expand_debug_expr) <case SSA_NAME>: Call copy_rtx to
    avoid invalid rtx sharing.

    * gcc.target/i386/pr47780.c: New test.

    2011-02-27  Jakub Jelinek  <jakub@redhat.com>

    PR middle-end/47903
    * real.c (real_arithmetic) <case PLUS_EXPR, MINUS_EXPR,
    MULT_EXPR, RDIV_EXPR>: Clear padding bits in *r first if
    r isn't op0 nor op1.

Added:
    branches/gcc-4_5-branch/gcc/testsuite/gcc.target/i386/pr47780.c
    branches/gcc-4_5-branch/gcc/testsuite/gfortran.dg/pr46985.f90
Modified:
    branches/gcc-4_5-branch/gcc/ChangeLog
    branches/gcc-4_5-branch/gcc/cfgexpand.c
    branches/gcc-4_5-branch/gcc/real.c
    branches/gcc-4_5-branch/gcc/testsuite/ChangeLog
    branches/gcc-4_5-branch/gcc/tree-scalar-evolution.c

[Bug tree-optimization/46985] [4.5 Regression] ICE: SIGSEGV in is_gimple_min_invariant (gimple.c:2742) with -fno-tree-ccp -fno-tree-dominator-opts -fno-tree-fre

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46985

Richard Guenther <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |FIXED

--- Comment #10 from Richard Guenther <rguenth at gcc dot gnu.org> 2012-06-20 14:42:53 UTC ---
Fixed.