[Bug tree-optimization/59903] New: ICE on valid code at -O3 on x86_64-linux-gnu (affecting trunk and 4.8.x)

[Bug tree-optimization/59903] New: ICE on valid code at -O3 on x86_64-linux-gnu (affecting trunk and 4.8.x)

[su at cs dot ucdavis.edu]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59903

            Bug ID: 59903
           Summary: ICE on valid code at -O3 on x86_64-linux-gnu
                    (affecting trunk and 4.8.x)
           Product: gcc
           Version: 4.9.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: tree-optimization
          Assignee: unassigned at gcc dot gnu.org
          Reporter: su at cs dot ucdavis.edu

The following code causes an ICE when compiled with the current gcc trunk and
4.8.x at -O3 on x86_64-linux-gnu (in both 32-bit and 64-bit modes). 

It is a regression from 4.7.x.

I had hoped to reduce it further, but this is the simplest I could get.  

$ gcc-trunk -v
Using built-in specs.
COLLECT_GCC=gcc-trunk
COLLECT_LTO_WRAPPER=/usr/local/gcc-trunk/libexec/gcc/x86_64-unknown-linux-gnu/4.9.0/lto-wrapper
Target: x86_64-unknown-linux-gnu
Configured with: ../gcc-trunk/configure --prefix=/usr/local/gcc-trunk
--enable-languages=c,c++ --disable-werror --enable-multilib
Thread model: posix
gcc version 4.9.0 20140121 (experimental) [trunk revision 206876] (GCC) 
$ 
$ gcc-trunk -O2 small.c; a.out
$ gcc-4.7.3 -O3 small.c; a.out
$ 
$ gcc-trunk -O3 small.c
small.c: In function ‘main’:
small.c:45:1: internal compiler error: Segmentation fault
 main ()
 ^
0x9bf4df crash_signal
    ../../gcc-trunk/gcc/toplev.c:337
0xbaaee3 tree_check
    ../../gcc-trunk/gcc/tree.h:2708
0xbaaee3 vect_transform_loop(_loop_vec_info*)
    ../../gcc-trunk/gcc/tree-vect-loop.c:5872
0xbc859d vectorize_loops()
    ../../gcc-trunk/gcc/tree-vectorizer.c:476
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.
$ 


------------------------------------


int a, b, c, d, e, f, g, h, i[3], l, m, n, o, p, q, r;

struct S0
{
  int f0;
  int f1;
  int f2;
  int f3;
} j;

static int
fn1 (int p1)
{
  return p1 || ((p1 > 0) > (e << 1)); 
}

static struct S0
fn2 (struct S0 p1)
{
  char s;
  struct S0 t = {0,0,0,0};
  int u = 2;
  for (;;)
    {
      if (i[0])
    break;
      for (m = 0; m < 4; m++)
    for (p1.f0 = 0; p1.f0 < 3; p1.f0++)
      {
        j = t;
        t.f3 = i[p1.f0];
        o = b || 1 >> b ? 0 : a < 0;
        q = 1 % d;
        if ((g < fn1 ((1 ^ (q & 1)) | n)) ^ u)
          j.f3 |= p % 2;
        s = j.f3 > 0 ? j.f3 : j.f3 << 1;
        r = l = s && p1.f1 * c;
        h = p1.f1;
      }
    }
  return p1;
}

int
main ()
{
  for (;f;)
    {
      struct S0 v = {0,0,0,0};
      fn2 (v);
      j.f3 = 0;
    }
  return 0;
}
>From gcc-bugs-return-441166-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org Wed Jan 22 07:56:17 2014
Return-Path: <gcc-bugs-return-441166-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Delivered-To: listarch-gcc-bugs@gcc.gnu.org
Received: (qmail 3958 invoked by alias); 22 Jan 2014 07:56:17 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Delivered-To: mailing list gcc-bugs@gcc.gnu.org
Received: (qmail 3896 invoked by uid 48); 22 Jan 2014 07:56:13 -0000
From: "eugeni.stepanov at gmail dot com" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug sanitizer/58937] Preloaded libasan segfaults on unsanitized executables
Date: Wed, 22 Jan 2014 07:56:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: sanitizer
X-Bugzilla-Version: 4.9.0
X-Bugzilla-Keywords:
X-Bugzilla-Severity: normal
X-Bugzilla-Who: eugeni.stepanov at gmail dot com
X-Bugzilla-Status: UNCONFIRMED
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields:
Message-ID: <bug-58937-4-fPH0EqgV9F@http.gcc.gnu.org/bugzilla/>
In-Reply-To: <bug-58937-4@http.gcc.gnu.org/bugzilla/>
References: <bug-58937-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2014-01/txt/msg02308.txt.bz2
Content-length: 407

http://gcc.gnu.org/bugzilla/show_bug.cgi?idX937

--- Comment #15 from Evgeniy Stepanov <eugeni.stepanov at gmail dot com> ---
In fact, a recent change disabled ASAN_FLEXIBLE_MAPPING_AND_OFFSET and killed
all supporting code. Or are you talking about a different change?

ASAN_FLEXIBLE_MAPPING_AND_OFFSET indeed prevents LD_PRELOAD with unsanitized
binaries, and it was one of the reasons for killing it.

[Bug tree-optimization/59903] [4.8/4.9 Regression] ICE on valid code at -O3 on x86_64-linux-gnu (affecting trunk and 4.8.x)

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59903

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jakub at gcc dot gnu.org
   Target Milestone|---                         |4.8.3
            Summary|ICE on valid code at -O3 on |[4.8/4.9 Regression] ICE on
                   |x86_64-linux-gnu (affecting |valid code at -O3 on
                   |trunk and 4.8.x)            |x86_64-linux-gnu (affecting
                   |                            |trunk and 4.8.x)

--- Comment #1 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Started with r195609.

[Bug tree-optimization/59903] [4.8/4.9 Regression] ICE on valid code at -O3 on x86_64-linux-gnu (affecting trunk and 4.8.x)

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59903

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
           Assignee|unassigned at gcc dot gnu.org      |rguenth at gcc dot gnu.org

--- Comment #2 from Richard Biener <rguenth at gcc dot gnu.org> ---
Mine.

[Bug tree-optimization/59903] [4.8/4.9 Regression] ICE on valid code at -O3 on x86_64-linux-gnu (affecting trunk and 4.8.x)

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59903

--- Comment #3 from Richard Biener <rguenth at gcc dot gnu.org> ---
Author: rguenth
Date: Thu Jan 30 15:30:30 2014
New Revision: 207307

URL: http://gcc.gnu.org/viewcvs?rev=207307&root=gcc&view=rev
Log:
2014-01-30  Richard Biener  <rguenther@suse.de>

    PR tree-optimization/59903
    * tree-vect-loop.c (vect_transform_loop): Guard multiple-types
    check properly.

    * gcc.dg/torture/pr59903.c: New testcase.

Added:
    trunk/gcc/testsuite/gcc.dg/torture/pr59903.c
Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/testsuite/ChangeLog
    trunk/gcc/tree-vect-loop.c

[Bug tree-optimization/59903] [4.8 Regression] ICE on valid code at -O3 on x86_64-linux-gnu (affecting trunk and 4.8.x)

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59903

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
      Known to work|                            |4.9.0
            Summary|[4.8/4.9 Regression] ICE on |[4.8 Regression] ICE on
                   |valid code at -O3 on        |valid code at -O3 on
                   |x86_64-linux-gnu (affecting |x86_64-linux-gnu (affecting
                   |trunk and 4.8.x)            |trunk and 4.8.x)
      Known to fail|                            |4.8.2

--- Comment #4 from Richard Biener <rguenth at gcc dot gnu.org> ---
Fixed on trunk sofar.

[Bug tree-optimization/59903] [4.8 Regression] ICE on valid code at -O3 on x86_64-linux-gnu (affecting trunk and 4.8.x)

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59903

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P1                          |P2

[Bug tree-optimization/59903] [4.8 Regression] ICE on valid code at -O3 on x86_64-linux-gnu (affecting trunk and 4.8.x)

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59903

--- Comment #5 from Richard Biener <rguenth at gcc dot gnu.org> ---
Author: rguenth
Date: Mon Feb 10 15:20:30 2014
New Revision: 207659

URL: http://gcc.gnu.org/viewcvs?rev=207659&root=gcc&view=rev
Log:
2014-02-10  Richard Biener  <rguenther@suse.de>

    Backport from mainline
    2014-01-30  Richard Biener  <rguenther@suse.de>

    PR tree-optimization/59903
    * tree-vect-loop.c (vect_transform_loop): Guard multiple-types
    check properly.

    * gcc.dg/torture/pr59903.c: New testcase.

    2014-02-10  Richard Biener  <rguenther@suse.de>

    PR tree-optimization/60115
    * tree-eh.c (tree_could_trap_p): Unify TARGET_MEM_REF and
    MEM_REF handling.  Properly verify that the accesses are not
    out of the objects bound.

    * gcc.dg/torture/pr60115.c: New testcase.

Added:
    branches/gcc-4_8-branch/gcc/testsuite/gcc.dg/torture/pr59903.c
    branches/gcc-4_8-branch/gcc/testsuite/gcc.dg/torture/pr60115.c
Modified:
    branches/gcc-4_8-branch/gcc/ChangeLog
    branches/gcc-4_8-branch/gcc/testsuite/ChangeLog
    branches/gcc-4_8-branch/gcc/tree-eh.c
    branches/gcc-4_8-branch/gcc/tree-vect-loop.c

[Bug tree-optimization/59903] [4.8 Regression] ICE on valid code at -O3 on x86_64-linux-gnu (affecting trunk and 4.8.x)

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59903

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #6 from Richard Biener <rguenth at gcc dot gnu.org> ---
Fixed.