[Bug tree-optimization/58921] New: ICE with segfault on valid code at -O3 on x86_64-linux-gnu

[Bug tree-optimization/58921] New: ICE with segfault on valid code at -O3 on x86_64-linux-gnu

[su at cs dot ucdavis.edu]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain; charset="UTF-8", Size: 7555 bytes --]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58921

            Bug ID: 58921
           Summary: ICE with segfault on valid code at -O3 on
                    x86_64-linux-gnu
           Product: gcc
           Version: 4.9.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: tree-optimization
          Assignee: unassigned at gcc dot gnu.org
          Reporter: su at cs dot ucdavis.edu

The following code causes an ICE when compiled with the current gcc trunk at
-O3 on x86_64-linux-gnu in both 32-bit and 64-bit modes. 

It is a regression from 4.8.x. 

$ gcc-trunk -v
Using built-in specs.
COLLECT_GCC=gcc-trunk
COLLECT_LTO_WRAPPER=/usr/local/gcc-trunk/libexec/gcc/x86_64-unknown-linux-gnu/4.9.0/lto-wrapper
Target: x86_64-unknown-linux-gnu
Configured with: ../gcc-trunk/configure
--enable-languages=c,c++,objc,obj-c++,fortran,lto --disable-werror
--enable-checking=none --with-gmp=/usr/local/gcc-trunk
--with-mpfr=/usr/local/gcc-trunk --with-mpc=/usr/local/gcc-trunk
--with-cloog=/usr/local/gcc-trunk --prefix=/usr/local/gcc-trunk
Thread model: posix
gcc version 4.9.0 20131029 (experimental) [trunk revision 204186] (GCC) 
$ 
$ gcc-trunk -O2 small.c
$ gcc-4.8 -O3 small.c
$ 
$ gcc-trunk -O3 small.c
small.c: In function ‘fn1’:
small.c:5:1: internal compiler error: Segmentation fault
 fn1 ()
 ^
0x81d4af crash_signal
    ../../gcc-trunk/gcc/toplev.c:334
0x967417 gimple_code
    ../../gcc-trunk/gcc/gimple.h:1222
0x967417 vect_get_vec_def_for_operand(tree_node*, gimple_statement_d*,
tree_node**)
    ../../gcc-trunk/gcc/tree-vect-stmts.c:1438
0x9678e8 vect_get_vec_defs(tree_node*, tree_node*, gimple_statement_d*,
vec<tree_node*, va_heap, vl_ptr>*, vec<tree_node*, va_heap, vl_ptr>*,
_slp_tree*, int)
    ../../gcc-trunk/gcc/tree-vect-stmts.c:1627
0x96c267 vectorizable_operation
    ../../gcc-trunk/gcc/tree-vect-stmts.c:3779
0x972b64 vect_transform_stmt(gimple_statement_d*, gimple_stmt_iterator_d*,
bool*, _slp_tree*, _slp_instance*)
    ../../gcc-trunk/gcc/tree-vect-stmts.c:5951
0x97711b vect_transform_loop(_loop_vec_info*)
    ../../gcc-trunk/gcc/tree-vect-loop.c:5880
0x98f4d6 vectorize_loops()
    ../../gcc-trunk/gcc/tree-vectorizer.c:373
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.
$ 
$ 


-----------------------------------------


int a[7];
int b;

void
fn1 ()
{
  for (; b; b++)
    a[b] = ((a[b] <= 0) == (a[0] != 0));
}

int
main ()
{
  return 0;
}
>From gcc-bugs-return-432966-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org Wed Oct 30 07:04:56 2013
Return-Path: <gcc-bugs-return-432966-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Delivered-To: listarch-gcc-bugs@gcc.gnu.org
Received: (qmail 4160 invoked by alias); 30 Oct 2013 07:04:56 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Delivered-To: mailing list gcc-bugs@gcc.gnu.org
Received: (qmail 4108 invoked by uid 48); 30 Oct 2013 07:04:51 -0000
From: "ubizjak at gmail dot com" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug ipa/58862] [4.9 Regression] LTO profiledbootstrap failure: lto1: ICE in edge_badness, at ipa-inline.c:1008
Date: Wed, 30 Oct 2013 07:04:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: ipa
X-Bugzilla-Version: 4.9.0
X-Bugzilla-Keywords:
X-Bugzilla-Severity: normal
X-Bugzilla-Who: ubizjak at gmail dot com
X-Bugzilla-Status: NEW
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org
X-Bugzilla-Target-Milestone: 4.9.0
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields: bug_status cf_reconfirmed_on everconfirmed
Message-ID: <bug-58862-4-KvCOywZYBA@http.gcc.gnu.org/bugzilla/>
In-Reply-To: <bug-58862-4@http.gcc.gnu.org/bugzilla/>
References: <bug-58862-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2013-10/txt/msg02110.txt.bz2
Content-length: 645

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58862

Uroš Bizjak <ubizjak at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2013-10-30
     Ever confirmed|0                           |1

--- Comment #6 from Uroš Bizjak <ubizjak at gmail dot com> ---
There is still lto-profiledbootstrap failure reported at r204180+ [1], after
the patch was committed to SVN.

[1] http://gcc.gnu.org/ml/gcc-regression/2013-10/msg00317.html
>From gcc-bugs-return-432967-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org Wed Oct 30 07:29:57 2013
Return-Path: <gcc-bugs-return-432967-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Delivered-To: listarch-gcc-bugs@gcc.gnu.org
Received: (qmail 19137 invoked by alias); 30 Oct 2013 07:29:56 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Delivered-To: mailing list gcc-bugs@gcc.gnu.org
Received: (qmail 19025 invoked by uid 48); 30 Oct 2013 07:29:50 -0000
From: "y.gribov at samsung dot com" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug sanitizer/56393] SIGSEGV when -fsanitize­dress and dynamic lib with global objects
Date: Wed, 30 Oct 2013 07:29:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: sanitizer
X-Bugzilla-Version: 4.8.0
X-Bugzilla-Keywords:
X-Bugzilla-Severity: normal
X-Bugzilla-Who: y.gribov at samsung dot com
X-Bugzilla-Status: ASSIGNED
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields:
Message-ID: <bug-56393-4-SSLuTaRzdp@http.gcc.gnu.org/bugzilla/>
In-Reply-To: <bug-56393-4@http.gcc.gnu.org/bugzilla/>
References: <bug-56393-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2013-10/txt/msg02111.txt.bz2
Content-length: 585

http://gcc.gnu.org/bugzilla/show_bug.cgi?idV393

--- Comment #40 from Yury Gribov <y.gribov at samsung dot com> ---
>> Jakub Jelinek wrote:
>> Previously ASAN would often work
>> even when binary wasn't linked with -fsanitize­dress,
>> though sometimes it wouldn't
>
> Yury Gribov wrote:
> this patch may result in reduced functionality
> i.e. some projects may start failing.

Actually do we have an example of unsanitized binary working with sanitized
dynamic lib? Currently I see all REAL() macro resolving to NULL in this case
(and then causing segfaults in __asan_init).

-Y

[Bug tree-optimization/58921] [4.9 Regression] ICE with segfault on valid code at -O3 on x86_64-linux-gnu

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58921

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2013-10-30
   Target Milestone|---                         |4.9.0
            Summary|ICE with segfault on valid  |[4.9 Regression] ICE with
                   |code at -O3 on              |segfault on valid code at
                   |x86_64-linux-gnu            |-O3 on x86_64-linux-gnu
     Ever confirmed|0                           |1

--- Comment #1 from Richard Biener <rguenth at gcc dot gnu.org> ---
Confirmed.

[Bug tree-optimization/58921] [4.9 Regression] ICE with segfault on valid code at -O3 on x86_64-linux-gnu

[mikpelinux at gmail dot com]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58921

Mikael Pettersson <mikpelinux at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |mikpelinux at gmail dot com

--- Comment #2 from Mikael Pettersson <mikpelinux at gmail dot com> ---
Started with r203842.  With checking it fails on

       gcc_assert (vec_stmt);

in case vect_internal_def of vect_get_vec_def_for_operand.

[Bug tree-optimization/58921] [4.9 Regression] ICE with segfault on valid code at -O3 on x86_64-linux-gnu

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58921

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P3                          |P1
                 CC|                            |congh at gcc dot gnu.org

[Bug tree-optimization/58921] [4.9 Regression] ICE with segfault on valid code at -O3 on x86_64-linux-gnu

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58921

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
         Depends on|                            |59006
           Assignee|unassigned at gcc dot gnu.org      |rguenth at gcc dot gnu.org

--- Comment #3 from Richard Biener <rguenth at gcc dot gnu.org> ---
Related to PR59006.

[Bug tree-optimization/58921] [4.9 Regression] ICE with segfault on valid code at -O3 on x86_64-linux-gnu

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58921

--- Comment #4 from Richard Biener <rguenth at gcc dot gnu.org> ---
Author: rguenth
Date: Tue Jan 14 09:04:50 2014
New Revision: 206599

URL: http://gcc.gnu.org/viewcvs?rev=206599&root=gcc&view=rev
Log:
2014-01-14  Richard Biener  <rguenther@suse.de>

    PR tree-optimization/58921
    PR tree-optimization/59006
    * tree-vect-loop-manip.c (vect_loop_versioning): Remove code
    hoisting invariant stmts.
    * tree-vect-stmts.c (vectorizable_load): Insert the splat of
    invariant loads on the preheader edge if possible.

    * gcc.dg/torture/pr58921.c: New testcase.
    * gcc.dg/torture/pr59006.c: Likewise.
    * gcc.dg/vect/pr58508.c: XFAIL no longer handled cases.

Added:
    trunk/gcc/testsuite/gcc.dg/torture/pr58921.c
    trunk/gcc/testsuite/gcc.dg/torture/pr59006.c
Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/testsuite/ChangeLog
    trunk/gcc/testsuite/gcc.dg/vect/pr58508.c
    trunk/gcc/tree-vect-loop-manip.c
    trunk/gcc/tree-vect-stmts.c

[Bug tree-optimization/58921] [4.9 Regression] ICE with segfault on valid code at -O3 on x86_64-linux-gnu

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58921

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #5 from Richard Biener <rguenth at gcc dot gnu.org> ---
Fixed.

[Bug tree-optimization/58921] [4.9 Regression] ICE with segfault on valid code at -O3 on x86_64-linux-gnu

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58921

Bug 58921 depends on bug 59006, which changed state.

Bug 59006 Summary: [4.9 Regression] internal compiler error: in vect_transform_stmt, at tree-vect-stmts.c:5963
http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59006

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED