[Bug middle-end/60597] New: [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[Bug middle-end/60597] New: [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60597

            Bug ID: 60597
           Summary: [4.9 Regression] ICE in df_refs_verify, at
                    df-scan.c:4323
           Product: gcc
           Version: 4.9.0
            Status: UNCONFIRMED
          Keywords: ice-checking
          Severity: normal
          Priority: P3
         Component: middle-end
          Assignee: unassigned at gcc dot gnu.org
          Reporter: rguenth at gcc dot gnu.org
            Target: i?86-*-*

Created attachment 32400
  --> http://gcc.gnu.org/bugzilla/attachment.cgi?id=32400&action=edit
testcase

Compiling kdepim3 on i586 reveals the following ICE:

g++ -DHAVE_CONFIG_H -I. -I.. -I../libkmime -I../libkdepim -I/opt/kde3/include
-I/usr/lib/qt3/include -I.   -DQT_THREAD_SUPPORT  -D_REENTRANT
-D_FILE_OFFSET_BITS=64 -D_LARGE_FILES=1  -Wno-long-long -Wundef -ansi
-D_XOPEN_SOURCE=500 -D_BSD_SOURCE -Wcast-align -Wchar-subscripts -Wall -W
-Wpointer-arith -DNDEBUG -DNO_DEBUG -O2 -fomit-frame-pointer -fmessage-length=0
-grecord-gcc-switches -fstack-protector -O2 -Wall -D_FORTIFY_SOURCE=2
-funwind-tables -fasynchronous-unwind-tables -Wno-coverage-mismatch -g
-Wl,--add-needed -Wformat-security -Wmissing-format-attribute
-Wno-non-virtual-dtor -fno-exceptions -fno-check-new -fno-common
-DQT_CLEAN_NAMESPACE -DQT_NO_ASCII_CAST -DQT_NO_STL -DQT_NO_COMPAT
-DQT_NO_TRANSLATION  -MT boxcontaineritem.o -MD -MP -MF
.deps/boxcontaineritem.Tpo -c -o boxcontaineritem.o boxcontaineritem.cpp
boxcontaineritem.cpp: In static member function 'static QPixmap
BoxContainerItem::calcComplexPixmap(const QPixmap&, const QColor&, const
QFont*, int)':
boxcontaineritem.cpp:370:1: internal compiler error: in df_refs_verify, at
df-scan.c:4323
 }
 ^
libbacktrace could not find executable to open
Please submit a full bug report,
with preprocessed source if appropriate.
See <http://bugs.opensuse.org/> for instructions.

which can be reproduced on x86_64 with

./cc1plus -fpreprocessed boxcontaineritem.ii -quiet -g -O2 -m32

[Bug middle-end/60597] [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60597

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |4.9.0

--- Comment #1 from Richard Biener <rguenth at gcc dot gnu.org> ---
Reducing.

[Bug middle-end/60597] [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60597

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |ra
                 CC|                            |vmakarov at gcc dot gnu.org

--- Comment #2 from Richard Biener <rguenth at gcc dot gnu.org> ---
With backtrace:

> ./cc1plus -fpreprocessed boxcontaineritem.ii -quiet -dumpbase boxcontaineritem.cpp -mtune=generic   -g -O2    -o boxcontaineritem.s -m32
boxcontaineritem.cpp: In static member function 'static QPixmap
BoxContainerItem::calcComplexPixmap(const QPixmap&, const QColor&, const
QFont*, int)':
boxcontaineritem.cpp:370:1: internal compiler error: in df_refs_verify, at
df-scan.c:4323
0x9f6e53 df_refs_verify
        /space/rguenther/src/svn/trunk/gcc/df-scan.c:4323
0x9f70f2 df_insn_refs_verify
        /space/rguenther/src/svn/trunk/gcc/df-scan.c:4414
0x9f724e df_bb_verify
        /space/rguenther/src/svn/trunk/gcc/df-scan.c:4441
0x9f77a3 df_scan_verify()
        /space/rguenther/src/svn/trunk/gcc/df-scan.c:4573
0x9e2f4d df_verify()
        /space/rguenther/src/svn/trunk/gcc/df-core.c:1862
0x9e188a df_analyze_1
        /space/rguenther/src/svn/trunk/gcc/df-core.c:1250
0x9e1c1c df_analyze()
        /space/rguenther/src/svn/trunk/gcc/df-core.c:1325
0xbf9e2d ira
        /space/rguenther/src/svn/trunk/gcc/ira.c:5360
0xbfa2be rest_of_handle_ira
        /space/rguenther/src/svn/trunk/gcc/ira.c:5554
0xbfa308 execute
        /space/rguenther/src/svn/trunk/gcc/ira.c:5583
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.

[Bug middle-end/60597] [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[rguenth at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60597

--- Comment #3 from Richard Biener <rguenth at gcc dot gnu.org> ---
Created attachment 32402
  --> http://gcc.gnu.org/bugzilla/attachment.cgi?id=32402&action=edit
autoreduced testcase

[Bug middle-end/60597] [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60597

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2014-03-20
                 CC|                            |jakub at gcc dot gnu.org
     Ever confirmed|0                           |1

--- Comment #4 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Slightly more reduced -m32 -g -O2:

struct A
{
  int foo () const;
  int bar () const;
  struct { int d; } a;
};

struct B
{
  int foo ();
  int bar ();
};

int *c, d;

int
A::foo () const
{
  int b = a.d >> 16;
  return b;
}

int
A::bar () const
{
  int b = a.d;
  return b;
}

void
baz (A &x, B h)
{
  for (int i; i < h.bar (); ++i)
    for (int j; h.foo (); ++j)
      {
        int g = x.foo ();
        int f = x.bar ();
        int e = c[0] & 1;
        d = e << 1 | g << 16 | f & 1;
        c[j] = 0;
      }
}

Started with r204212.

[Bug middle-end/60597] [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60597

--- Comment #5 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Ah, but that one has undefined behavior in it (uninitialized i and j).
This one doesn't - -g -O2 -m32 again:

struct A
{
  int foo () const;
  int bar () const;
  int a;
};

struct B
{
  int foo ();
  int bar ();
};

int *c, d;

int
A::foo () const
{
  int b = a >> 16;
  return b;
}

int
A::bar () const
{
  int b = a;
  return b;
}

void
baz (A &x, B h, int i, int j)
{
  for (; i < h.bar (); ++i)
    for (; h.foo (); ++j)
      {
        int g = x.foo ();
        int f = x.bar ();
        int e = c[0] & 1;
        d = (e << 1) | (g << 16) | (f & 1);
        c[j] = 0;
      }
}

[Bug middle-end/60597] [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60597

--- Comment #6 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Seems this is because invalid RTL sharing, debugging.

[Bug middle-end/60597] [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60597

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
           Assignee|unassigned at gcc dot gnu.org      |jakub at gcc dot gnu.org

--- Comment #7 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Created attachment 32409
  --> http://gcc.gnu.org/bugzilla/attachment.cgi?id=32409&action=edit
gcc49-pr60597.patch

Untested fix.

[Bug middle-end/60597] [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60597

--- Comment #8 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Author: jakub
Date: Thu Mar 20 19:47:09 2014
New Revision: 208735

URL: http://gcc.gnu.org/viewcvs?rev=208735&root=gcc&view=rev
Log:
    PR middle-end/60597
    * ira.c (adjust_cleared_regs): Call copy_rtx on
    *reg_equiv[REGNO (loc)].src_p before passing it to
    simplify_replace_fn_rtx.

    * g++.dg/opt/pr60597.C: New test.

Added:
    trunk/gcc/testsuite/g++.dg/opt/pr60597.C
Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/ira.c
    trunk/gcc/testsuite/ChangeLog

[Bug middle-end/60597] [4.9 Regression] ICE in df_refs_verify, at df-scan.c:4323

[jakub at gcc dot gnu.org]

http://gcc.gnu.org/bugzilla/show_bug.cgi?id=60597

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #9 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Fixed.