From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 26969 invoked by alias); 17 Dec 2010 02:55:54 -0000 Received: (qmail 26956 invoked by uid 22791); 17 Dec 2010 02:55:53 -0000 X-SWARE-Spam-Status: No, hits=-2.9 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00 X-Spam-Check-By: sourceware.org Received: from localhost (HELO gcc.gnu.org) (127.0.0.1) by sourceware.org (qpsmtpd/0.43rc1) with ESMTP; Fri, 17 Dec 2010 02:55:49 +0000 From: "zsojka at seznam dot cz" To: gcc-bugs@gcc.gnu.org Subject: [Bug tree-optimization/46987] New: [4.6 Regression] g++.dg/torture/covariant-1.C ICE: double free or corruption with -fno-inline X-Bugzilla-Reason: CC X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: gcc X-Bugzilla-Component: tree-optimization X-Bugzilla-Keywords: X-Bugzilla-Severity: normal X-Bugzilla-Who: zsojka at seznam dot cz X-Bugzilla-Status: UNCONFIRMED X-Bugzilla-Priority: P3 X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org X-Bugzilla-Target-Milestone: --- X-Bugzilla-Changed-Fields: Message-ID: X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/ Auto-Submitted: auto-generated Content-Type: text/plain; charset="UTF-8" MIME-Version: 1.0 Date: Fri, 17 Dec 2010 02:55:00 -0000 Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm Precedence: bulk List-Id: List-Archive: List-Post: List-Help: Sender: gcc-bugs-owner@gcc.gnu.org X-SW-Source: 2010-12/txt/msg02064.txt.bz2 http://gcc.gnu.org/bugzilla/show_bug.cgi?id=46987 Summary: [4.6 Regression] g++.dg/torture/covariant-1.C ICE: double free or corruption with -fno-inline Product: gcc Version: 4.6.0 Status: UNCONFIRMED Severity: normal Priority: P3 Component: tree-optimization AssignedTo: unassigned@gcc.gnu.org ReportedBy: zsojka@seznam.cz CC: jamborm@gcc.gnu.org Host: x86_64-pc-linux-gnu Target: x86_64-pc-linux-gnu Created attachment 22791 --> http://gcc.gnu.org/bugzilla/attachment.cgi?id=22791 reduced testcase Compiler output (with valgrind): $ gcc -O -fno-inline covariant-1.ii ==12570== Invalid read of size 4 ==12570== at 0xAB822A: get_constant_value (tree-ssa-ccp.c:307) ==12570== by 0xB1990B: substitute_and_fold (tree-ssa-propagate.c:888) ==12570== by 0xABAF2E: do_ssa_ccp (tree-ssa-ccp.c:884) ==12570== by 0x93A1A5: execute_one_pass (passes.c:1553) ==12570== by 0x93A494: execute_pass_list (passes.c:1608) ==12570== by 0x93A4A6: execute_pass_list (passes.c:1609) ==12570== by 0xA7A945: tree_rest_of_compilation (tree-optimize.c:422) ==12570== by 0xC3ED41: cgraph_expand_function (cgraphunit.c:1508) ==12570== by 0xC41419: cgraph_optimize (cgraphunit.c:1567) ==12570== by 0xC41999: cgraph_finalize_compilation_unit (cgraphunit.c:1031) ==12570== by 0x5B75CC: cp_write_global_declarations (decl2.c:3974) ==12570== by 0xA24205: toplev_main (toplev.c:591) ==12570== Address 0x825cea0 is 0 bytes after a block of size 704 alloc'd ==12570== at 0x4C24EE1: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) ==12570== by 0x11F1FA8: xcalloc (xmalloc.c:162) ==12570== by 0xABA95B: do_ssa_ccp (tree-ssa-ccp.c:767) ==12570== by 0x93A1A5: execute_one_pass (passes.c:1553) ==12570== by 0x93A494: execute_pass_list (passes.c:1608) ==12570== by 0x93A4A6: execute_pass_list (passes.c:1609) ==12570== by 0xA7A945: tree_rest_of_compilation (tree-optimize.c:422) ==12570== by 0xC3ED41: cgraph_expand_function (cgraphunit.c:1508) ==12570== by 0xC41419: cgraph_optimize (cgraphunit.c:1567) ==12570== by 0xC41999: cgraph_finalize_compilation_unit (cgraphunit.c:1031) ==12570== by 0x5B75CC: cp_write_global_declarations (decl2.c:3974) ==12570== by 0xA24205: toplev_main (toplev.c:591) ==12570== ==12570== Invalid write of size 8 ==12570== at 0xAB827F: get_constant_value (tree-ssa-ccp.c:308) ==12570== by 0xB1990B: substitute_and_fold (tree-ssa-propagate.c:888) ==12570== by 0xABAF2E: do_ssa_ccp (tree-ssa-ccp.c:884) ==12570== by 0x93A1A5: execute_one_pass (passes.c:1553) ==12570== by 0x93A494: execute_pass_list (passes.c:1608) ==12570== by 0x93A4A6: execute_pass_list (passes.c:1609) ==12570== by 0xA7A945: tree_rest_of_compilation (tree-optimize.c:422) ==12570== by 0xC3ED41: cgraph_expand_function (cgraphunit.c:1508) ==12570== by 0xC41419: cgraph_optimize (cgraphunit.c:1567) ==12570== by 0xC41999: cgraph_finalize_compilation_unit (cgraphunit.c:1031) ==12570== by 0x5B75CC: cp_write_global_declarations (decl2.c:3974) ==12570== by 0xA24205: toplev_main (toplev.c:591) ==12570== Address 0x825cea0 is 0 bytes after a block of size 704 alloc'd ==12570== at 0x4C24EE1: calloc (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so) ==12570== by 0x11F1FA8: xcalloc (xmalloc.c:162) ==12570== by 0xABA95B: do_ssa_ccp (tree-ssa-ccp.c:767) ==12570== by 0x93A1A5: execute_one_pass (passes.c:1553) ==12570== by 0x93A494: execute_pass_list (passes.c:1608) ==12570== by 0x93A4A6: execute_pass_list (passes.c:1609) ==12570== by 0xA7A945: tree_rest_of_compilation (tree-optimize.c:422) ==12570== by 0xC3ED41: cgraph_expand_function (cgraphunit.c:1508) ==12570== by 0xC41419: cgraph_optimize (cgraphunit.c:1567) ==12570== by 0xC41999: cgraph_finalize_compilation_unit (cgraphunit.c:1031) ==12570== by 0x5B75CC: cp_write_global_declarations (decl2.c:3974) ==12570== by 0xA24205: toplev_main (toplev.c:591) ==12570== Tested revisions: r167954 - crash r167898 - crash r165699 - OK 4.5 r166509 - OK