[Bug libstdc++/55320] New: Invalid delete with throwing copy-c'tor passed to std::function

["benjamin.kircher at gmail dot com" <gcc-bugzilla@gcc.gnu.org>]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=55320

             Bug #: 55320
           Summary: Invalid delete with throwing copy-c'tor passed to
                    std::function
    Classification: Unclassified
           Product: gcc
           Version: 4.7.2
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: libstdc++
        AssignedTo: unassigned@gcc.gnu.org
        ReportedBy: benjamin.kircher@gmail.com


Created attachment 28682
  --> http://gcc.gnu.org/bugzilla/attachment.cgi?id=28682
Example program

The example program attached compiles w/o warnings and crashes with an invalid
delete when executed.


$ gcc --version
gcc (Debian 4.7.2-4) 4.7.2


$ cat main.cpp
#include <functional>
#include <stdexcept>
#include <iostream>
#include <ostream>

struct functor
{
    functor() = default;
    functor(const functor&) { throw std::exception(); }
    void operator()() {}
};

int main()
try
{
    std::function<void()> func = functor();
    return 0;
}
catch (std::exception&)
{
    std::cout << "catched" << std::endl;
}


Valgrind gives me
$ valgrind --tool=memcheck ./a.out
<snip>
==...== Invalid free() / delete / delete[] / realloc()
==...==    at 0x...: operator delete(void*) (in
/usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==...==    by 0x...:
std::_Function_base::_Base_manager<functor>::_M_destroy(std::_Any_data&,
std::integral_constant<bool, false>) (functional:1780)
==...==    by 0x...:
std::_Function_base::_Base_manager<functor>::_M_manager(std::_Any_data&,
std::_Any_data const&, std::_Manager_operation) (functional:1804)
==...==    by 0x...: std::_Function_base::~_Function_base() (functional:1885)
==...==    by 0x...: std::function<void ()>::function<functor>(functor,
std::enable_if<!(std::is_integral<functor>::value), std::function<void
()>::_Useless>::type) (functional:2292)
<snip>

On clang/libc++ this behaves as expected.