[Bug ipa/61800] New: [4.10 Regression] ICE: Segmentation fault during Firefox build

[Bug ipa/61800] New: [4.10 Regression] ICE: Segmentation fault during Firefox build

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61800

            Bug ID: 61800
           Summary: [4.10 Regression] ICE: Segmentation fault during
                    Firefox build
           Product: gcc
           Version: 4.10.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: ipa
          Assignee: unassigned at gcc dot gnu.org
          Reporter: trippels at gcc dot gnu.org
                CC: hubicka at gcc dot gnu.org

markus@x4 http % /var/tmp/gcc_test/usr/local/bin/c++ -o TunnelUtils.o -c
-I../../../dist/stl_wrappers -I../../../dist/system_wrappers -include
/var/tmp/mozilla-central/config
/gcc_hidden.h -DOS_POSIX=1 -DOS_LINUX=1 -DMOZ_GLUE_IN_PROGRAM
-DMOZILLA_INTERNAL_API -DIMPL_LIBXUL  -DSTATIC_EXPORTABLE_JS_API
-DNO_NSPR_10_SUPPORT -I/var/tmp/mozilla-central
/netwerk/protocol/http -I. -I/var/tmp/mozilla-central/ipc/chromium/src
-I/var/tmp/mozilla-central/ipc/glue
-I/var/tmp/mozilla-central/netwerk/protocol/http/../../base/src -I/
var/tmp/mozilla-central/content/base/src
-I/var/tmp/moz-build-dir/ipc/ipdl/_ipdlheaders -I../../../dist/include 
-I/usr/include/nspr -I/usr/include/nss  -I/var/tmp/moz-build-
dir/dist/include  -I/usr/include/pixman-1    -fPIC   -DMOZILLA_CLIENT -include
../../../mozilla-config.h -MD -MP -MF .deps/TunnelUtils.o.pp  -Wall
-Wpointer-arith -Woverloade
d-virtual -Werror=return-type -Werror=int-to-pointer-cast -Wtype-limits
-Wempty-body -Wsign-compare -Wno-invalid-offsetof -Wcast-align
-fno-semantic-interposition -ffunction-
sections -fdata-sections -fno-exceptions -fno-strict-aliasing -fno-rtti
-fno-exceptions -fno-math-errno -std=gnu++0x -pthread -pipe  -DNDEBUG -DTRIMMED
-O3 -fomit-frame-point
er      /var/tmp/mozilla-central/netwerk/protocol/http/TunnelUtils.cpp
In file included from
/var/tmp/mozilla-central/ipc/chromium/src/base/message_loop.h:19:0,
                 from ../../../dist/include/mozilla/ipc/MessageLink.h:12,
                 from ../../../dist/include/mozilla/ipc/ProtocolUtils.h:22,
                 from
/var/tmp/moz-build-dir/ipc/ipdl/_ipdlheaders/mozilla/net/PNecko.h:16,
                 from
/var/tmp/moz-build-dir/ipc/ipdl/_ipdlheaders/mozilla/net/PNeckoChild.h:9,
                 from ../../../dist/include/mozilla/net/NeckoChild.h:11,
                 from
/var/tmp/mozilla-central/netwerk/protocol/http/HttpLog.h:42,
                 from
/var/tmp/mozilla-central/netwerk/protocol/http/TunnelUtils.cpp:8:
/var/tmp/mozilla-central/ipc/chromium/src/base/task.h:27:7: internal compiler
error: Segmentation fault
 class CancelableTask : public Task {
       ^
0xb87bff crash_signal
        ../../gcc/gcc/toplev.c:337
0x9f4e46 tree_check
        ../../gcc/gcc/tree.h:2730
0x9f4e46 decl_maybe_in_construction_p(tree_node*, tree_node*,
gimple_statement_base*, tree_node*)
        ../../gcc/gcc/ipa-devirt.c:1974
0x9f5dd1 get_polymorphic_call_info(tree_node*, tree_node*, tree_node**, long*,
ipa_polymorphic_call_context*, gimple_statement_base*)
        ../../gcc/gcc/ipa-devirt.c:2176
0x845414 cgraph_create_indirect_edge(cgraph_node*, gimple_statement_base*, int,
long, int)
        ../../gcc/gcc/cgraph.c:970
0x84e1c1 cgraph_clone_edge(cgraph_edge*, cgraph_node*, gimple_statement_base*,
unsigned int, long, int, bool)
        ../../gcc/gcc/cgraphclones.c:139
0x84ed8e cgraph_clone_node(cgraph_node*, tree_node*, long, int, bool,
vec<cgraph_edge*, va_heap, vl_ptr>, bool, cgraph_node*, bitmap_head*)
        ../../gcc/gcc/cgraphclones.c:473
0x10acc2e clone_inlined_nodes(cgraph_edge*, bool, bool, int*, int)
        ../../gcc/gcc/ipa-inline-transform.c:188
0x10acf67 inline_call(cgraph_edge*, bool, vec<cgraph_edge*, va_heap, vl_ptr>*,
int*, bool, bool*)
        ../../gcc/gcc/ipa-inline-transform.c:275
0x10a916e inline_small_functions
        ../../gcc/gcc/ipa-inline.c:1814
0x10a916e ipa_inline
        ../../gcc/gcc/ipa-inline.c:2185
0x10a916e execute
        ../../gcc/gcc/ipa-inline.c:2545
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.

Probably started with r212304. Reducing.

[Bug ipa/61800] [5 Regression] ICE: Segmentation fault during Firefox build

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61800

Markus Trippelsdorf <trippels at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2014-08-15
     Ever confirmed|0                           |1

--- Comment #2 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
Testcase from comment2 now passes.

But here's a new variant:

markus@x4 xslt % cat test.ii
#pragma GCC visibility push(hidden)
class A
{
public:
  unsigned long m_fn1 () const;
};
class B;
class C
{
public:
  ;
  virtual bool m_fn2 (void) = 0;
};
class D
{
  virtual bool m_fn3 (const int &p1, B *p2) = 0;
};
class F : public D
{
  bool m_fn3 (const int &p1, B *p2);
  A mPredicates;
};
class B
{
};
class G : public B
{
  virtual unsigned int m_fn4 () = 0;
};
class H : public G
{
public:
  int txNodeSetContext_aContextNodeSet;
  H (B *p1) {}
  int
  m_fn5 ()
  {
    return mPosition < m_fn4 ();
  }
  unsigned int m_fn4 ();
  unsigned int mPosition;
};

unsigned int a;
C *b;
bool
F::m_fn3 (const int &p1, B *p2)
{
  if (!b->m_fn2 ())
    return false;
  unsigned int c = mPredicates.m_fn1 ();
  for (1; 1 < c; ++a)
    {
      H d (p2);
      while (d.m_fn5 ())
        {
          do
            {
            }
          while (0);
        }
    }
}

markus@x4 xslt % /var/tmp/gcc_test/usr/local/bin/c++ -c -O2 test.ii
test.ii: In member function ‘virtual bool F::m_fn3(const int&, B*)’:
test.ii:63:1: internal compiler error: Segmentation fault
 }
 ^
0xb9ddcf crash_signal
        ../../gcc/gcc/toplev.c:337
0x9fd5ea decl_maybe_in_construction_p(tree_node*, tree_node*,
gimple_statement_base*, tree_node*)
        ../../gcc/gcc/ipa-devirt.c:2214
0x9fe561 get_polymorphic_call_info(tree_node*, tree_node*, tree_node**, long*,
ipa_polymorphic_call_context*, gimple_statement_base*)
        ../../gcc/gcc/ipa-devirt.c:2436
0x848244 cgraph_node::create_indirect_edge(gimple_statement_base*, int, long,
int)
        ../../gcc/gcc/cgraph.c:968
0x852af1 cgraph_clone_edge(cgraph_edge*, cgraph_node*, gimple_statement_base*,
unsigned int, long, int, bool)
        ../../gcc/gcc/cgraphclones.c:139
0x85427f cgraph_node::create_version_clone(tree_node*, vec<cgraph_edge*,
va_heap, vl_ptr>, bitmap_head*)
        ../../gcc/gcc/cgraphclones.c:876
0x8543c7 cgraph_node::create_version_clone_with_body(vec<cgraph_edge*, va_heap,
vl_ptr>, vec<ipa_replace_map*, va_gc, vl_embed>*, bitmap_head*, bool,
bitmap_head*, basic_block_def*, char const*)
        ../../gcc/gcc/cgraphclones.c:943
0x10d1adb split_function
        ../../gcc/gcc/ipa-split.c:1235
0x10d5d8e execute_split_functions
        ../../gcc/gcc/ipa-split.c:1636
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.
markus@x4 xslt %
>From gcc-bugs-return-458549-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org Fri Aug 15 09:26:20 2014
Return-Path: <gcc-bugs-return-458549-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Delivered-To: listarch-gcc-bugs@gcc.gnu.org
Received: (qmail 31343 invoked by alias); 15 Aug 2014 09:26:19 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Delivered-To: mailing list gcc-bugs@gcc.gnu.org
Received: (qmail 31289 invoked by uid 48); 15 Aug 2014 09:26:11 -0000
From: "doko at gcc dot gnu.org" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug tree-optimization/62114] [graphite] ICE using -floop-parallelize-all and -ffast-math
Date: Fri, 15 Aug 2014 09:26:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: tree-optimization
X-Bugzilla-Version: 4.9.1
X-Bugzilla-Keywords: ice-on-valid-code
X-Bugzilla-Severity: normal
X-Bugzilla-Who: doko at gcc dot gnu.org
X-Bugzilla-Status: NEW
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields: cc cf_known_to_fail
Message-ID: <bug-62114-4-Uc9TGWGEGj@http.gcc.gnu.org/bugzilla/>
In-Reply-To: <bug-62114-4@http.gcc.gnu.org/bugzilla/>
References: <bug-62114-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2014-08/txt/msg01046.txt.bz2
Content-length: 2217

https://gcc.gnu.org/bugzilla/show_bug.cgi?idb114

Matthias Klose <doko at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |doko at gcc dot gnu.org
      Known to fail|                            |4.8.3

--- Comment #4 from Matthias Klose <doko at gcc dot gnu.org> ---
this test case fails on the 4.8 and 4.9 branches, but succeeds with trunk
20140815.

$ cat tst.c
int a, b;
fn1() {
  for (; a; a++)
    b |= 1;
}

$ gcc -c -Ofast -floop-parallelize-all tst.c   tst.c: In function 'fn1':
tst.c:2:1: internal compiler error: Segmentation fault
 fn1() {
 ^
Please submit a full bug report,
with preprocessed source if appropriate.


(gdb) bt
#0  0x0000000000cdf3ea in compute_deps(scop*, vec<poly_bb*, va_heap, vl_ptr>,
isl_union_map**, isl_union_map**, isl_union_map**, isl_union_map**,
isl_union_map**, isl_union_map**, isl_union_map**, isl_union_map**,
isl_union_map**, isl_union_map**, isl_union_map**, isl_union_map**) ()
#1  0x0000000000cdf913 in loop_is_parallel_p(loop*, hash_table<bb_pbb_hasher,
xcallocator>, int)
    ()
#2  0x0000000000cdd9fd in ?? ()
#3  0x0000000000cddd72 in gloog(scop*, hash_table<bb_pbb_hasher, xcallocator>)
()
#4  0x0000000000cdac09 in graphite_transform_loops() ()
#5  0x0000000000cdb0f7 in ?? ()
#6  0x0000000000818b3b in execute_one_pass(opt_pass*) ()
#7  0x0000000000818dd6 in execute_pass_list(opt_pass*) ()
#8  0x0000000000818de8 in execute_pass_list(opt_pass*) ()
#9  0x0000000000818de8 in execute_pass_list(opt_pass*) ()
#10 0x0000000000818de8 in execute_pass_list(opt_pass*) ()
#11 0x000000000063f656 in ?? ()
#12 0x0000000000640f4d in compile() ()
#13 0x00000000006413a5 in finalize_compilation_unit() ()
#14 0x00000000005648ec in c_write_global_declarations() ()
#15 0x00000000008b353d in ?? ()
#16 0x00000000008b50d0 in toplev_main(int, char**) ()
#17 0x00007ffff66e7b45 in __libc_start_main (main=0x552750 <main>, argc\x18,
    argv=0x7fffffffe588, init=<optimized out>, fini=<optimized out>,
rtld_fini=<optimized out>,
    stack_end=0x7fffffffe578) at libc-start.c:287
#18 0x000000000055297f in _start ()

[Bug ipa/61800] [5 Regression] ICE: Segmentation fault during Firefox build

[kyukhin at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61800

--- Comment #3 from Kirill Yukhin <kyukhin at gcc dot gnu.org> ---
Author: kyukhin
Date: Mon Aug 18 13:26:06 2014
New Revision: 214099

URL: https://gcc.gnu.org/viewcvs?rev=214099&root=gcc&view=rev
Log:
PR ipa/61800

gcc/
    * cgraph.h (cgraph_node::create_indirect_edge): Add
    compute_indirect_info param.
    * cgraph.c (cgraph_node::create_indirect_edge): Compute
    indirect_info only when it is required.
    * cgraphclones.c (cgraph_clone_edge): Do not recompute
    indirect_info fore cloned indirect edge.

gcc/testsuite/
    * g++.dg/ipa/pr61800.C: New.

Added:
    trunk/gcc/testsuite/g++.dg/ipa/pr61800.C
Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/cgraph.c
    trunk/gcc/cgraph.h
    trunk/gcc/cgraphclones.c
    trunk/gcc/testsuite/ChangeLog

[Bug ipa/61800] [5 Regression] ICE: Segmentation fault during Firefox build

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61800

Markus Trippelsdorf <trippels at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #4 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
Fixed.