[Bug ipa/59265] [4.9 Regression] Segmentation fault in ipa_note_param_call for -fprofile-use in SPEC CPU2006

["octoploid at yandex dot com" <gcc-bugzilla@gcc.gnu.org>]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain; charset="UTF-8", Size: 6576 bytes --]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59265

--- Comment #2 from Markus Trippelsdorf <octoploid at yandex dot com> ---
Here's a reduced testcase that works without any gcda file:

markus@x4 testcase % < test.ii
class A {
  int m_fn1() const;
  unsigned m_fn2() const;
};
class B {
public:
  virtual void m_fn1();
};
class C final : B {
  C();
  virtual void m_fn2() { m_fn1(); }
};
int a;
unsigned A::m_fn2() const {
  if (m_fn1())
    return 0;
  a = m_fn2();
}
C::C() {}

markus@x4 testcase % c++ -c -fprofile-use -O2 -std=c++11 test.ii
test.ii: In member function ‘virtual void C::m_fn2()’:
test.ii:19:9: internal compiler error: Segmentation fault
 C::C() {}
>From gcc-bugs-return-437602-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org Sat Dec 14 21:24:35 2013
Return-Path: <gcc-bugs-return-437602-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Delivered-To: listarch-gcc-bugs@gcc.gnu.org
Received: (qmail 25859 invoked by alias); 14 Dec 2013 21:24:35 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Delivered-To: mailing list gcc-bugs@gcc.gnu.org
Received: (qmail 25832 invoked by uid 48); 14 Dec 2013 21:24:32 -0000
From: "zsojka at seznam dot cz" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug debug/59510] New: [4.9 Regression] ICE: in vt_expand_var_loc_chain, at var-tracking.c:8212 with -O2 -g --param=large-stack-frame-growth=1
Date: Sat, 14 Dec 2013 21:24:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: new
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: debug
X-Bugzilla-Version: 4.9.0
X-Bugzilla-Keywords:
X-Bugzilla-Severity: normal
X-Bugzilla-Who: zsojka at seznam dot cz
X-Bugzilla-Status: UNCONFIRMED
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields: bug_id short_desc product version bug_status bug_severity priority component assigned_to reporter attachments.created
Message-ID: <bug-59510-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2013-12/txt/msg01257.txt.bz2
Content-length: 4019

http://gcc.gnu.org/bugzilla/show_bug.cgi?idY510

            Bug ID: 59510
           Summary: [4.9 Regression] ICE: in vt_expand_var_loc_chain, at
                    var-tracking.c:8212 with -O2 -g
                    --param=large-stack-frame-growth=1
           Product: gcc
           Version: 4.9.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: debug
          Assignee: unassigned at gcc dot gnu.org
          Reporter: zsojka at seznam dot cz

Created attachment 31441
  --> http://gcc.gnu.org/bugzilla/attachment.cgi?id1441&actioníit
autoreduced testcase

Compiler output:
$ gcc -O2 -g --param=large-stack-frame-growth=1 testcase.C
/home/smatz/build-205784-lto-fortran-checking-yes-rtl-df/x86_64-unknown-linux-gnu/libstdc++-v3/include/bits/stl_iterator_base_types.h:
In function '_OI {anonymous}::copy(_II, _II, _OI) [with _II = char*; _OI {anonymous}::ostreambuf_iterator<char>]':
/home/smatz/build-205784-lto-fortran-checking-yes-rtl-df/x86_64-unknown-linux-gnu/libstdc++-v3/include/bits/stl_iterator_base_types.h:200:3:
internal compiler error: in vt_expand_var_loc_chain, at var-tracking.c:8212
0xf35d6c vt_expand_var_loc_chain
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:8212
0xf35d6c vt_expand_loc_callback
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:8408
0x933fd1 cselib_expand_value_rtx_1
        /mnt/svn/gcc-trunk/gcc/cselib.c:1684
0x934f0e cselib_expand_value_rtx_cb(rtx_def*, bitmap_head*, int, rtx_def*
(*)(rtx_def*, bitmap_head*, int, void*), void*)
        /mnt/svn/gcc-trunk/gcc/cselib.c:1531
0xf3500c vt_expand_loc_callback
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:8344
0x9340ca cselib_expand_value_rtx_1
        /mnt/svn/gcc-trunk/gcc/cselib.c:1649
0x934f0e cselib_expand_value_rtx_cb(rtx_def*, bitmap_head*, int, rtx_def*
(*)(rtx_def*, bitmap_head*, int, void*), void*)
        /mnt/svn/gcc-trunk/gcc/cselib.c:1531
0xf35468 vt_expand_var_loc_chain
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:8246
0xf35468 vt_expand_loc_callback
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:8408
0x933fd1 cselib_expand_value_rtx_1
        /mnt/svn/gcc-trunk/gcc/cselib.c:1684
0x934f0e cselib_expand_value_rtx_cb(rtx_def*, bitmap_head*, int, rtx_def*
(*)(rtx_def*, bitmap_head*, int, void*), void*)
        /mnt/svn/gcc-trunk/gcc/cselib.c:1531
0xf29b73 vt_expand_var_loc_chain
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:8246
0xf29b73 vt_expand_1pvar
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:8521
0xf29b73 emit_note_insn_var_location(variable_def**, emit_note_data_def*)
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:8575
0xf3925b traverse_noresize<emit_note_data_def*, emit_note_insn_var_location>
        /mnt/svn/gcc-trunk/gcc/hash-table.h:928
0xf3925b traverse<emit_note_data_def*, emit_note_insn_var_location>
        /mnt/svn/gcc-trunk/gcc/hash-table.h:950
0xf3925b emit_notes_for_changes
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:8937
0xf39f01 emit_notes_in_bb
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:9382
0xf39f01 vt_emit_notes
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:9431
0xf3b026 variable_tracking_main_1
        /mnt/svn/gcc-trunk/gcc/var-tracking.c:10292
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.

$ gcc -v
Using built-in specs.
COLLECT_GCC=/mnt/svn/gcc-trunk/binary-latest/bin/gcc
COLLECT_LTO_WRAPPER=/mnt/svn/gcc-trunk/binary-205985-lto-fortran-checking-yes-rtl-df/libexec/gcc/x86_64-unknown-linux-gnu/4.9.0/lto-wrapper
Target: x86_64-unknown-linux-gnu
Configured with: /mnt/svn/gcc-trunk//configure --enable-checking=yes,rtl,df
--enable-languages=c,c++,lto,fortran
--prefix=/mnt/svn/gcc-trunk/binary-205985-lto-fortran-checking-yes-rtl-df/
--without-cloog --without-ppl
Thread model: posix
gcc version 4.9.0 20131214 (experimental) (GCC)

Tested revisions:
r205985 - crash
4.8 r204890 - OK