[Bug middle-end/58598] New: ICE: SIGSEGV (write after free) with -O -flto -fno-fat-lto-objects -fvtable-verify=std

[Bug middle-end/58598] New: ICE: SIGSEGV (write after free) with -O -flto -fno-fat-lto-objects -fvtable-verify=std

[zsojka at seznam dot cz]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58598

            Bug ID: 58598
           Summary: ICE: SIGSEGV (write after free) with -O -flto
                    -fno-fat-lto-objects -fvtable-verify=std
           Product: gcc
           Version: 4.9.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: middle-end
          Assignee: unassigned at gcc dot gnu.org
          Reporter: zsojka at seznam dot cz

Created attachment 30949
  --> http://gcc.gnu.org/bugzilla/attachment.cgi?id=30949&action=edit
reduced testcase

Compiler output:
gcc -O -flto -fno-fat-lto-objects -fvtable-verify=std -wrapper valgrind,-q
testcase.C 
==3463== Invalid write of size 8
==3463==    at 0x7F05C1: bitmap_obstack_alloc_stat(bitmap_obstack*)
(bitmap.h:277)
==3463==    by 0xC5C141: (anonymous namespace)::pass_build_ssa::execute()
(tree-into-ssa.c:2242)
==3463==    by 0xB05269: execute_one_pass(opt_pass*) (passes.c:2201)
==3463==    by 0xB05445: execute_pass_list(opt_pass*) (passes.c:2253)
==3463==    by 0x86D76D: cgraph_process_new_functions() (cgraphunit.c:324)
==3463==    by 0x780316: vtv_generate_init_routine()
(vtable-class-hierarchy.c:1187)
==3463==    by 0x670815: cp_write_global_declarations() (decl2.c:4369)
==3463==    by 0xBF7DCC: compile_file() (toplev.c:560)
==3463==    by 0xBF9CB9: toplev_main(int, char**) (toplev.c:1893)
==3463==    by 0x5A3C60C: (below main) (in /lib64/libc-2.15.so)
==3463==  Address 0x6159070 is 96 bytes inside a block of size 4,064 free'd
==3463==    at 0x4C2B3EC: free (in
/usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==3463==    by 0x5A9CFD4: obstack_free (in /lib64/libc-2.15.so)
==3463==    by 0x86CE82: analyze_function(cgraph_node*) (cgraphunit.c:652)
==3463==    by 0x86D72F: cgraph_process_new_functions() (cgraphunit.c:320)
==3463==    by 0x780316: vtv_generate_init_routine()
(vtable-class-hierarchy.c:1187)
==3463==    by 0x670815: cp_write_global_declarations() (decl2.c:4369)
==3463==    by 0xBF7DCC: compile_file() (toplev.c:560)
==3463==    by 0xBF9CB9: toplev_main(int, char**) (toplev.c:1893)
==3463==    by 0x5A3C60C: (below main) (in /lib64/libc-2.15.so)
==3463== 
==3463== Invalid write of size 8
==3463==    at 0x7F05C9: bitmap_obstack_alloc_stat(bitmap_obstack*)
(bitmap.h:277)
==3463==    by 0xC5C141: (anonymous namespace)::pass_build_ssa::execute()
(tree-into-ssa.c:2242)
==3463==    by 0xB05269: execute_one_pass(opt_pass*) (passes.c:2201)
==3463==    by 0xB05445: execute_pass_list(opt_pass*) (passes.c:2253)
==3463==    by 0x86D76D: cgraph_process_new_functions() (cgraphunit.c:324)
==3463==    by 0x780316: vtv_generate_init_routine()
(vtable-class-hierarchy.c:1187)
==3463==    by 0x670815: cp_write_global_declarations() (decl2.c:4369)
==3463==    by 0xBF7DCC: compile_file() (toplev.c:560)
==3463==    by 0xBF9CB9: toplev_main(int, char**) (toplev.c:1893)
==3463==    by 0x5A3C60C: (below main) (in /lib64/libc-2.15.so)
==3463==  Address 0x6159068 is 88 bytes inside a block of size 4,064 free'd
==3463==    at 0x4C2B3EC: free (in
/usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
==3463==    by 0x5A9CFD4: obstack_free (in /lib64/libc-2.15.so)
==3463==    by 0x86CE82: analyze_function(cgraph_node*) (cgraphunit.c:652)
==3463==    by 0x86D72F: cgraph_process_new_functions() (cgraphunit.c:320)
==3463==    by 0x780316: vtv_generate_init_routine()
(vtable-class-hierarchy.c:1187)                                                 
==3463==    by 0x670815: cp_write_global_declarations() (decl2.c:4369)          
==3463==    by 0xBF7DCC: compile_file() (toplev.c:560)                          
==3463==    by 0xBF9CB9: toplev_main(int, char**) (toplev.c:1893)               
==3463==    by 0x5A3C60C: (below main) (in /lib64/libc-2.15.so)                 
==3463==                                                                        
....

Crashes randomly.

Tested revisions:
r203053 - crash