[Bug c/54327] New: Segmentation fault in init_ggc

[Bug c/54327] New: Segmentation fault in init_ggc

[dcb314 at hotmail dot com]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

             Bug #: 54327
           Summary: Segmentation fault in init_ggc
    Classification: Unclassified
           Product: gcc
           Version: 4.8.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: c
        AssignedTo: unassigned@gcc.gnu.org
        ReportedBy: dcb314@hotmail.com


I just tried to compile the package httrack-3.43.9-5
on gcc-4.8 trunk dated 20120819 on an AMD x86_64 box.

The compiler said

htslib.c: In function 'treathead':
htslib.c:1246:6: internal compiler error: Segmentation fault
 void treathead(t_cookie* cookie,char* adr,char* fil,htsblk* retour,char* rcvd)
{
      ^
Please submit a full bug report,
with preprocessed source if appropriate.
See <http://gcc.gnu.org/bugs.html> for instructions.

Here is valgrind with some more details

==13706== Invalid read of size 4
==13706==    at 0xD4FF90: linemap_location_from_macro_expansion_p(line_maps*,
un
signed int) (line-map.c:796)
==13706==    by 0xD4FFCF: linemap_lookup(line_maps*, unsigned int)
(line-map.c:5
12)
==13706==    by 0x8E6534:
virt_loc_aware_diagnostic_finalizer(diagnostic_context
*, diagnostic_info*) (tree-diagnostic.c:113)
==13706==    by 0xD3A263: diagnostic_report_diagnostic(diagnostic_context*,
diag
nostic_info*) (diagnostic.c:652)
==13706==    by 0xD3B03F: internal_error(char const*, ...) (diagnostic.c:957)
==13706==    by 0x8B800F: crash_signal(int) (toplev.c:335)
==13706==    by 0x3809C3599F: ??? (in /usr/lib64/libc-2.15.so)
==13706==    by 0x5A7625: init_ggc() (hwint.h:264)
==13706==    by 0x8B967F: toplev_main(int, char**) (toplev.c:1137)
==13706==    by 0x3809C21734: (below main) (in /usr/lib64/libc-2.15.so)
==13706==  Address 0x24 is not stack'd, malloc'd or (recently) free'd
==13706==

Preprocessed source code attached. Flag -O2 required.

[Bug c/54327] Segmentation fault in init_ggc

[dcb314 at hotmail dot com]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

--- Comment #1 from David Binderman <dcb314 at hotmail dot com> 2012-08-19 20:14:08 UTC ---
Created attachment 28052
  --> http://gcc.gnu.org/bugzilla/attachment.cgi?id=28052
gzipped C source code

[Bug c/54327] [4.8 Regression] Segmentation fault in init_ggc

[hjl.tools at gmail dot com]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

H.J. Lu <hjl.tools at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2012-08-19
   Target Milestone|---                         |4.8.0
            Summary|Segmentation fault in       |[4.8 Regression]
                   |init_ggc                    |Segmentation fault in
                   |                            |init_ggc
     Ever Confirmed|0                           |1

[Bug middle-end/54327] [4.8 Regression] Segmentation fault in init_ggc

[hjl.tools at gmail dot com]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

H.J. Lu <hjl.tools at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |rguenth at gcc dot gnu.org
          Component|c                           |middle-end

--- Comment #2 from H.J. Lu <hjl.tools at gmail dot com> 2012-08-19 23:22:32 UTC ---
It is caused by revision 189915:

http://gcc.gnu.org/ml/gcc-cvs/2012-07/msg00820.html

[Bug middle-end/54327] [4.8 Regression] Segmentation fault in init_ggc

[markus at trippelsdorf dot de]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

Markus Trippelsdorf <markus at trippelsdorf dot de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |markus at trippelsdorf dot
                   |                            |de

--- Comment #3 from Markus Trippelsdorf <markus at trippelsdorf dot de> 2012-08-20 03:40:24 UTC ---
Small testcase:

#include <string.h>
#include <stdlib.h>
void treathead ()
{
    char *a = ';' == '\0' ? : 0;
    if (*a == '=')
    {
        while (*a == (*a == 0) || *a == '\'')
            a++;
        if (strlen (a) < 2)
            abort ();
    }
}

[Bug middle-end/54327] [4.8 Regression] Segmentation fault in init_ggc

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

Richard Guenther <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
         AssignedTo|unassigned at gcc dot       |rguenth at gcc dot gnu.org
                   |gnu.org                     |

--- Comment #4 from Richard Guenther <rguenth at gcc dot gnu.org> 2012-08-20 07:17:02 UTC ---
Mine.

[Bug middle-end/54327] [4.8 Regression] Segmentation fault in init_ggc

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

--- Comment #5 from Richard Guenther <rguenth at gcc dot gnu.org> 2012-08-20 08:53:13 UTC ---
The issue is that we now merge two blocks we didn't merge before which
introduces SSA names into a STMT that are marked for update (thus, in
old_ssa_names):

  <bb 10>:
  # a_12 = PHI <0B(3)>
  _13 = *a_1;
  _14 = (int) _4;
  _15 = _4 == 0;
  _16 = (int) _6;
  goto <bb 7>;

  <bb 7>:
  # a_11 = PHI <a_1(10)>
  _9 = strlen (a_11);
  if (_9 <= 1)
    goto <bb 8>;
  else
    goto <bb 9>;

a_1 is marked to be replaced by a_12, block merging from CFG cleanup
(called via TODO, which calls CFG cleanup before updating SSA form ...)
now replaces a_11 with a_1 in _9 = strlen (a_11) via replace_uses_by
which ends up folding the stmt (but a_1 has a dead DEF stmt).

update_ssa only needs unreachable blocks removed to make DOM info
computable.  So this might be solved by re-ordering cfgcleanup/SSA update
in the TODO.  OTOH passes registering things for manual SSA update should
eventually call update_ssa themselves, not relying on TODO (in this case
it is jump threading from DOM).  OTOH calling into SSA def stmt walking
folders from this situation is bad, the folding in question is
gimple_fold_builtin calling get_maxval_strlen (which may even result in
wrong-code with a non-up-to-date SSA form).

So the bug IMHO is fold_stmt walking SSA def stmts.

[Bug middle-end/54327] [4.8 Regression] Segmentation fault in init_ggc

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

--- Comment #6 from Richard Guenther <rguenth at gcc dot gnu.org> 2012-08-20 10:26:52 UTC ---
Author: rguenth
Date: Mon Aug 20 10:26:45 2012
New Revision: 190528

URL: http://gcc.gnu.org/viewcvs?root=gcc&view=rev&rev=190528
Log:
2012-08-20  Richard Guenther  <rguenther@suse.de>

    PR tree-optimization/54327
    * gimple-fold.c (get_maxval_strlen): Do not walk use-def chains
    if the use is registered for SSA update.

    * gcc.dg/torture/pr54327.c: New testcase.

Added:
    trunk/gcc/testsuite/gcc.dg/torture/pr54327.c
Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/gimple-fold.c
    trunk/gcc/testsuite/ChangeLog

[Bug middle-end/54327] [4.8 Regression] Segmentation fault in init_ggc

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

Richard Guenther <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |FIXED

--- Comment #7 from Richard Guenther <rguenth at gcc dot gnu.org> 2012-08-20 11:10:57 UTC ---
Fixed.

[Bug middle-end/54327] [4.8 Regression] Segmentation fault in init_ggc

[dcb314 at hotmail dot com]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

David Binderman <dcb314 at hotmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |---

--- Comment #8 from David Binderman <dcb314 at hotmail dot com> ---
Seems to be newly broken. 20131023 ok, 20131027 not, as follows

htslib.c: In function ‘x_escape_http’:
htslib.c:3804:7: internal compiler error: in operator[], at vec.h:827
0xb8fa27 vec<operand_entry*, va_heap, vl_embed>::operator[](unsigned int)
    ../../src/trunk/gcc/vec.h:827
0xb91572 vec<operand_entry*, va_heap, vl_embed>::operator[](unsigned int)
    ../../src/trunk/gcc/tree.h:2792
0xb91572 vec<operand_entry*, va_heap, vl_ptr>::operator[](unsigned int)
    ../../src/trunk/gcc/vec.h:1256
0xb91572 update_ops
    ../../src/trunk/gcc/tree-ssa-reassoc.c:2619
0xb9999f maybe_optimize_range_tests
    ../../src/trunk/gcc/tree-ssa-reassoc.c:2907
0xb9999f reassociate_bb
    ../../src/trunk/gcc/tree-ssa-reassoc.c:4325
0xb98eb7 reassociate_bb
    ../../src/trunk/gcc/tree-ssa-reassoc.c:4482
0xb9b7ab do_reassoc
    ../../src/trunk/gcc/tree-ssa-reassoc.c:4515
0xb9b7ab execute_reassoc
    ../../src/trunk/gcc/tree-ssa-reassoc.c:4597
0xb9b7ab execute
    ../../src/trunk/gcc/tree-ssa-reassoc.c:4639
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.
>From gcc-bugs-return-432826-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org Sun Oct 27 11:09:05 2013
Return-Path: <gcc-bugs-return-432826-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Delivered-To: listarch-gcc-bugs@gcc.gnu.org
Received: (qmail 19262 invoked by alias); 27 Oct 2013 11:09:04 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Delivered-To: mailing list gcc-bugs@gcc.gnu.org
Received: (qmail 19222 invoked by uid 48); 27 Oct 2013 11:08:59 -0000
From: "olegendo at gcc dot gnu.org" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug target/52933] SH Target: Use div0s for integer sign comparisons
Date: Sun, 27 Oct 2013 11:09:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: target
X-Bugzilla-Version: 4.8.0
X-Bugzilla-Keywords:
X-Bugzilla-Severity: normal
X-Bugzilla-Who: olegendo at gcc dot gnu.org
X-Bugzilla-Status: ASSIGNED
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: olegendo at gcc dot gnu.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields:
Message-ID: <bug-52933-4-GlrEzG1bqC@http.gcc.gnu.org/bugzilla/>
In-Reply-To: <bug-52933-4@http.gcc.gnu.org/bugzilla/>
References: <bug-52933-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2013-10/txt/msg01970.txt.bz2
Content-length: 1455

http://gcc.gnu.org/bugzilla/show_bug.cgi?idR933

--- Comment #4 from Oleg Endo <olegendo at gcc dot gnu.org> ---
The div0s insn can also be used to do floating point sign comparisons.  For
example:

bool test3 (float x, float y)
{
  return __builtin_signbitf (x) ^ __builtin_signbitf (y);
}

currently compiles to:

        flds    fr4,fpul
        sts     fpul,r2
        flds    fr5,fpul
        sts     fpul,r3
        mov.l   .L7,r1
        and     r1,r2
        and     r3,r1
        cmp/eq  r1,r2
        movt    r0
        rts
        xor     #1,r0
.L8:
        .align 2
.L7:
        .long   -2147483648

better:
        flds    fr4,fpul
        sts     fpul,r2
        flds    fr5,fpul
        sts     fpul,r3
        div0s   r2,r3
        rts
        movt    r0


The same goes for negated result value of the sign comparison:

bool test3_1 (float x, float y)
{
  return !(__builtin_signbitf (x) ^ __builtin_signbitf (y));
}

Currently compiles to:

        flds    fr4,fpul
        sts     fpul,r2
        flds    fr5,fpul
        sts     fpul,r3
        mov.l   .L11,r1
        and     r1,r2
        and     r3,r1
        cmp/eq  r1,r2
        rts
        movt    r0
.L12:
        .align 2
.L11:
        .long   -2147483648

better:
        flds    fr4,fpul
        sts     fpul,r2
        flds    fr5,fpul
        sts     fpul,r3
        div0s   r2,r3
        mov     #-1,r0    // on SH2A should use movrt
        rts
        negc    r0,r0

[Bug middle-end/54327] [4.8 Regression] Segmentation fault in init_ggc

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #9 from Richard Biener <rguenth at gcc dot gnu.org> ---
(In reply to David Binderman from comment #8)
> Seems to be newly broken. 20131023 ok, 20131027 not, as follows
> 
> htslib.c: In function ‘x_escape_http’:
> htslib.c:3804:7: internal compiler error: in operator[], at vec.h:827
> 0xb8fa27 vec<operand_entry*, va_heap, vl_embed>::operator[](unsigned int)
>     ../../src/trunk/gcc/vec.h:827
> 0xb91572 vec<operand_entry*, va_heap, vl_embed>::operator[](unsigned int)
>     ../../src/trunk/gcc/tree.h:2792
> 0xb91572 vec<operand_entry*, va_heap, vl_ptr>::operator[](unsigned int)
>     ../../src/trunk/gcc/vec.h:1256
> 0xb91572 update_ops
>     ../../src/trunk/gcc/tree-ssa-reassoc.c:2619
> 0xb9999f maybe_optimize_range_tests
>     ../../src/trunk/gcc/tree-ssa-reassoc.c:2907
> 0xb9999f reassociate_bb
>     ../../src/trunk/gcc/tree-ssa-reassoc.c:4325
> 0xb98eb7 reassociate_bb
>     ../../src/trunk/gcc/tree-ssa-reassoc.c:4482
> 0xb9b7ab do_reassoc
>     ../../src/trunk/gcc/tree-ssa-reassoc.c:4515
> 0xb9b7ab execute_reassoc
>     ../../src/trunk/gcc/tree-ssa-reassoc.c:4597
> 0xb9b7ab execute
>     ../../src/trunk/gcc/tree-ssa-reassoc.c:4639
> Please submit a full bug report,
> with preprocessed source if appropriate.
> Please include the complete backtrace with any bug report.
> See <http://gcc.gnu.org/bugs.html> for instructions.

Please open a new bugreport - this seems completely unrelated.
>From gcc-bugs-return-432897-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org Tue Oct 29 12:24:51 2013
Return-Path: <gcc-bugs-return-432897-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Delivered-To: listarch-gcc-bugs@gcc.gnu.org
Received: (qmail 23905 invoked by alias); 29 Oct 2013 12:24:51 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Delivered-To: mailing list gcc-bugs@gcc.gnu.org
Received: (qmail 23862 invoked by uid 48); 29 Oct 2013 12:24:47 -0000
From: "npickito at gmail dot com" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug lto/58905] Undefined symbol not report when compile with -flto -O1
Date: Tue, 29 Oct 2013 12:24:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: lto
X-Bugzilla-Version: unknown
X-Bugzilla-Keywords:
X-Bugzilla-Severity: normal
X-Bugzilla-Who: npickito at gmail dot com
X-Bugzilla-Status: RESOLVED
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields:
Message-ID: <bug-58905-4-CtQiOd9xJX@http.gcc.gnu.org/bugzilla/>
In-Reply-To: <bug-58905-4@http.gcc.gnu.org/bugzilla/>
References: <bug-58905-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2013-10/txt/msg02041.txt.bz2
Content-length: 232

http://gcc.gnu.org/bugzilla/show_bug.cgi?idX905

--- Comment #2 from Kito Cheng <npickito at gmail dot com> ---
However older version autoconf use such style to detect,

It will broken some older project when configure with lto.

[Bug middle-end/54327] [4.8 Regression] Segmentation fault in init_ggc

[dcb314 at hotmail dot com]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=54327

--- Comment #10 from David Binderman <dcb314 at hotmail dot com> ---
(In reply to Richard Biener from comment #9)
> Please open a new bugreport - this seems completely unrelated.

Done - # 58911