[Bug other/63426] New: [meta-bug] Issues found with -fsanitize=undefined

[Bug other/63426] New: [meta-bug] Issues found with -fsanitize=undefined

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426

            Bug ID: 63426
           Summary: [meta-bug] Issues found with -fsanitize=undefined
           Product: gcc
           Version: 5.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: other
          Assignee: unassigned at gcc dot gnu.org
          Reporter: trippels at gcc dot gnu.org

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[mpolacek at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426

Marek Polacek <mpolacek at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2014-10-01
                 CC|                            |mpolacek at gcc dot gnu.org
     Ever confirmed|0                           |1

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426

--- Comment #1 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
Here's the full list (cut down to one instance per issue) of todays trunk:

gcc/fortran/interface.c:2667:43: runtime error: load of value 1818451807, which
is not a valid value for type 'expr_t'
gcc/fortran/interface.c:2908:47: runtime error: load of value 108398592, which
is not a valid value for type 'ar_type'
gcc/fortran/trans-array.c:2211:9: runtime error: load of value 92, which is not
a valid value for type 'bool'
gcc/fortran/trans-expr.c:2286:48: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
gcc/hwint.h:250:29: runtime error: shift exponent 64 is too large for 64-bit
type 'long int'
gcc/ira.c:2465:24: runtime error: signed integer overflow: -2097715000 +
-65536000 cannot be represented in type 'int'
gcc/ira.c:2472:31: runtime error: signed integer overflow: -2097600000 +
-65536000 cannot be represented in type 'int'
gcc/loop-iv.c:2305:24: runtime error: signed integer overflow:
9223372036854775807 - -9223372036854775808 cannot be represented in type 'long
int'
gcc/loop-iv.c:2643:14: runtime error: signed integer overflow:
9223372036854775806 - -9223372036854775808 cannot be represented in type 'long
int'
gcc/tree-data-ref.c:2352:38: runtime error: signed integer overflow: 1073741824
+ 1073741824 cannot be represented in type 'int'
gcc/tree-data-ref.c:2443:16: runtime error: negation of -2147483648 cannot be
represented in type 'int'; cast to an unsigned type to negate this value to
itself
gcc/tree-ssa-loop-ivopts.c:4192:24: runtime error: signed integer overflow: 4 *
4611686018427387903 cannot be represented in type 'long int'
libiberty/cp-demangle.c:4074:40: runtime error: variable length array bound
evaluates to non-positive value 0
libiberty/cp-demangle.c:4075:43: runtime error: variable length array bound
evaluates to non-positive value 0

There are also a couple of buggy testcases:

testsuite/gcc.dg/compat/generate-random_r.c:363:19: runtime error: signed
integer overflow: 1627687941 + 1735697613 cannot be represented in type 'int'
testsuite/gcc.dg/compat/struct-layout-1_generate.c:1081:13: runtime error:
shift exponent 64 is too large for 64-bit type 'long long unsigned int'
testsuite/g++.dg/compat/../../gcc.dg/compat/generate-random_r.c:363:19: runtime
error: signed integer overflow: 1627687941 + 1735697613 cannot be represented
in type 'int'
testsuite/g++.dg/compat/struct-layout-1_generate.c:795:26: runtime error: shift
exponent 64 is too large for 64-bit type 'long long unsigned int'
testsuite/g++.dg/compat/struct-layout-1_generate.c:805:13: runtime error: shift
exponent 65 is too large for 64-bit type 'long long unsigned int

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426

Markus Trippelsdorf <trippels at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |5.0

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426

--- Comment #2 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
A few new ones:

config/rs6000/constraints.md:143:33: runtime error: signed integer overflow:
9223372036854775807 + 32768 cannot be represented in type 'long int'
config/rs6000/predicates.md:396:22: runtime error: signed integer overflow:
9223372036854775807 + 2147516416 cannot be represented in type 'long int'
config/rs6000/predicates.md:856:11: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
config/rs6000/predicates.md:862:12: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
config/rs6000/predicates.md:865:11: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
config/rs6000/predicates.md:868:12: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
config/rs6000/predicates.md:914:11: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
config/rs6000/predicates.md:917:12: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
config/rs6000/predicates.md:940:11: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
config/rs6000/predicates.md:946:12: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
config/rs6000/predicates.md:949:11: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
config/rs6000/predicates.md:955:12: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
gcc.c:1687:29: runtime error: load of misaligned address 0x0000101e55f9 for
type 'const char *', which requires 8 byte alignment
gcc.c:1690:25: runtime error: store to misaligned address 0x0000101e55f9 for
type 'const char *', which requires 8 byte alignment
gcc.c:5596:29: runtime error: load of misaligned address 0x0000101e55d9 for
type 'const char *', which requires 8 byte alignment
gcc.c:7251:15: runtime error: load of misaligned address 0x0000101e55c9 for
type 'const char *', which requires 8 byte alignment
gcc.c:8003:33: runtime error: load of misaligned address 0x0000101e55f9 for
type 'const char *', which requires 8 byte alignment
loop-iv.c:2314:24: runtime error: signed integer overflow: 9223372036854775807
- -9223372036854775808 cannot be represented in type 'long int'
loop-iv.c:2652:14: runtime error: signed integer overflow: 9223372036854775806
- -9223372036854775808 cannot be represented in type 'long int'
varasm.c:7191:16: runtime error: shift exponent 63 is too large for 32-bit type
'int'

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426

--- Comment #3 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
I've added -fno-sanitize=alignment to bootstrap-ubsan.mk, otherwise 
libstdc++ wouldn't build (due to the gcc.c problem in comment 2). 

Here are the results of a testsuite run (cut down to one instance per issue):



gcc/c/c-typeck.c:8126:42: runtime error: load of address 0x3fffca8782e0 with
insufficient space for an object of type 'long int'
gcc/config/rs6000/constraints.md:179:37: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
gcc/config/rs6000/predicates.md:411:21: runtime error: signed integer overflow:
9223372036854775807 + 2147516416 cannot be represented in type 'long int'
gcc/config/rs6000/rs6000.c:16207:15: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
gcc/config/rs6000/rs6000.c:16210:16: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
gcc/config/rs6000/rs6000.c:16220:15: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
gcc/config/rs6000/rs6000.c:16221:16: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
gcc/config/rs6000/rs6000.c:16243:15: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
gcc/config/rs6000/rs6000.c:16251:16: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int'; cast to an
unsigned type to negate this value to itself
gcc/config/rs6000/rs6000.c:5086:39: runtime error: signed integer overflow:
9223372036854775806 + 32768 cannot be represented in type 'long int'
gcc/emit-rtl.c:210:39: runtime error: signed integer overflow:
-9223372034707292160 + -9223372034707292160 cannot be represented in type 'long
int'
gcc/expmed.c:2987:42: runtime error: signed integer overflow:
-9223372036854775808 - 1 cannot be represented in type 'long int'
gcc/fortran/data.c:181:32: runtime error: null pointer passed as argument 2,
which is declared to never be null
gcc/fortran/interface.c:2667:43: runtime error: load of value 1600086892, which
is not a valid value for type 'expr_t'
gcc/fortran/interface.c:2908:47: runtime error: load of value 256, which is not
a valid value for type 'ar_type'
gcc/fortran/module.c:2348:28: runtime error: load of value 256, which is not a
valid value for type 'bt'
gcc/fortran/trans-expr.c:2286:48: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int [3]'; cast to an
unsigned type to negate this value to itself
gcc/fortran/trans-expr.c:5280:19: runtime error: member call on null pointer of
type 'struct vec'
gcc/fortran/trans-expr.c:5283:19: runtime error: member call on null pointer of
type 'struct vec'
gcc/fortran/trans-expr.c:5286:19: runtime error: member call on null pointer of
type 'struct vec'
gcc/gcov-io.c:376:38: runtime error: null pointer passed as argument 2, which
is declared to never be null
gcc/hwint.h:250:19: runtime error: shift exponent 64 is too large for 64-bit
type 'long int'
gcc/ipa-prop.c:2435:30: runtime error: member call on null pointer of type
'struct ipa_polymorphic_call_context'
gcc/ira-costs.c:1303:57: runtime error: null pointer passed as argument 2,
which is declared to never be null
gcc/loop-iv.c:2652:14: runtime error: signed integer overflow: 499 -
-9223372036854775808 cannot be represented in type 'long int'
gcc/simplify-rtx.c:5074:10: runtime error: shift exponent -64 is negative
gcc/tree-data-ref.c:2363:38: runtime error: signed integer overflow: 1073741824
+ 1073741824 cannot be represented in type 'int'
gcc/tree-data-ref.c:2452:16: runtime error: signed integer overflow: 131072 *
-131072 cannot be represented in type 'int'
gcc/tree-data-ref.c:2453:16: runtime error: negation of -2147483648 cannot be
represented in type 'int'; cast to an unsigned type to negate this value to
itself
gcc/tree-data-ref.c:2454:16: runtime error: negation of -2147483648 cannot be
represented in type 'int'; cast to an unsigned type to negate this value to
itself
gcc/tree-ssa-loop-ivopts.c:4186:24: runtime error: signed integer overflow: 4 *
4611686018427387903 cannot be represented in type 'long int'
libiberty/cp-demangle.c:4074:40: runtime error: variable length array bound
evaluates to non-positive value 0
libiberty/cp-demangle.c:4075:43: runtime error: variable length array bound
evaluates to non-positive value 0
libiberty/regex.c:6970:11: runtime error: left shift of negative value -1
libiberty/regex.c:7165:4: runtime error: left shift of negative value -1

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 63397, which changed state.

Bug 63397 Summary: signed integer overflows in ira.c
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63397

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426

--- Comment #4 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
Here's the list of issues found today on ppc64le:

gcc/c/c-typeck.c:8239:42: runtime error: load of address 0x3fffefac3e10 with
insufficient space for an object of type 'long int'
gcc/c/c-typeck.c:8239:42: runtime error: store to address 0x3fffd838e360 with
insufficient space for an object of type 'long int'
gcc/c-family/c-ada-spec.c:105:22: runtime error: load of address 0x3fffd57d3a88
with insufficient space for an object of type 'int'
gcc/c-family/c-ada-spec.c:93:34: runtime error: load of address 0x3fffd57d3a88
with insufficient space for an object of type 'int'
gcc/c-family/c-ada-spec.c:97:23: runtime error: load of address 0x3fffd57d3a88
with insufficient space for an object of type 'int'
gcc/expmed.c:3024:42: runtime error: signed integer overflow:
-9223372036854775808 - 1 cannot be represented in type 'long int'
gcc/fortran/data.c:181:32: runtime error: null pointer passed as argument 2,
which is declared to never be null
gcc/fortran/interface.c:2701:33: runtime error: load of value 1818451807, which
is not a valid value for type 'expr_t'
gcc/fortran/interface.c:2949:42: runtime error: load of value 272321136, which
is not a valid value for type 'ar_type'
gcc/fortran/module.c:2361:28: runtime error: load of value 271605604, which is
not a valid value for type 'bt'
gcc/fortran/trans-array.c:2223:27: runtime error: load of value 100, which is
not a valid value for type 'bool'
gcc/fortran/trans-array.c:2223:27: runtime error: load of value 100, which is
not a valid value for type 'bool'
gcc/fortran/trans-expr.c:2384:48: runtime error: negation of
-9223372036854775808 cannot be represented in type 'long int [3]'; cast to an
unsigned type to negate this value to itself
gcc/fortran/trans-expr.c:5454:19: runtime error: member call on null pointer of
type 'struct vec'
gcc/fortran/trans-expr.c:5457:19: runtime error: member call on null pointer of
type 'struct vec'
gcc/fortran/trans-expr.c:5460:19: runtime error: member call on null pointer of
type 'struct vec'
gcc/gcov-io.c:376:38: runtime error: null pointer passed as argument 2, which
is declared to never be null
gcc/hwint.h:250:19: runtime error: shift exponent 64 is too large for 64-bit
type 'long int'
gcc/ipa-prop.c:2489:30: runtime error: member call on null pointer of type
'struct ipa_polymorphic_call_context'
gcc/loop-iv.c:2670:25: runtime error: signed integer overflow: 100 -
-9223372036854775808 cannot be represented in type 'long int'
gcc/simplify-rtx.c:5189:10: runtime error: shift exponent -56 is negative
gcc/tree-data-ref.c:2411:38: runtime error: signed integer overflow: 1073741824
+ 1073741824 cannot be represented in type 'int'
gcc/tree-data-ref.c:2500:16: runtime error: signed integer overflow: 131072 *
-131072 cannot be represented in type 'int'
gcc/tree-data-ref.c:2501:16: runtime error: negation of -2147483648 cannot be
represented in type 'int'; cast to an unsigned type to negate this value to
itself
gcc/tree-data-ref.c:2502:16: runtime error: negation of -2147483648 cannot be
represented in type 'int'; cast to an unsigned type to negate this value to
itself
libiberty/cp-demangle.c:4074:40: runtime error: variable length array bound
evaluates to non-positive value 0
libiberty/cp-demangle.c:4075:43: runtime error: variable length array bound
evaluates to non-positive value 0

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 65261, which changed state.

Bug 65261 Summary: [5 Regression] bootstrap-ubsan ppc64le: gcc/libcpp/lex.c:552:30: runtime error: load of misaligned address 0x01002172dfc6 for type 'const uchar', which requires 16 byte alignment
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65261

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|5.0                         |5.2

--- Comment #5 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
GCC 5.1 has been released.

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|5.2                         |5.3

--- Comment #6 from Richard Biener <rguenth at gcc dot gnu.org> ---
GCC 5.2 is being released, adjusting target milestone to 5.3.

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 61657, which changed state.

Bug 61657 Summary: Undefined behavior in loop-iv.c
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61657

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[zeccav at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 61943, which changed state.

Bug 61943 Summary: tree-ssa-loop-ivopts.c:4148 signed integer overflow
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=61943

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WORKSFORME

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[aoliva at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 95456, which changed state.

Bug 95456 Summary: [11 Regression] gcc/gcc.c:6035:16: runtime error: null pointer passed as argument 2, which is declared to never be null
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=95456

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[aldyh at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 97379, which changed state.

Bug 97379 Summary: [11 Regression] Invalid read of size 8 at outgoing_range::calc_switch_ranges(gswitch*) (gimple-range-edge.cc:140) since r11-3685-gfcae5121154d1c33
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97379

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[pault at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 94246, which changed state.

Bug 94246 Summary: [9 Regression] valgrind error for ./gfortran.dg/bessel_5.f90 since r9-1566-g87c789f1c0b2df41
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=94246

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 98270, which changed state.

Bug 98270 Summary: [11 Regression] UBSAN: /gcc/tree-vect-slp.c:2396:16: runtime error: load of value 112, which is not a valid value for type 'bool' since r11-5928-gfc7b4248172561a9ee310e2d43d8a485a5c9e108
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98270

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |DUPLICATE

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[nathan at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 98626, which changed state.

Bug 98626 Summary: UBSAN: vec.h:591:30: runtime error: member access within null pointer of type 'struct vec'
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98626

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[nathan at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 98624, which changed state.

Bug 98624 Summary: UBSAN: gcc/cp/module.cc:5895:29: runtime error: member call on null pointer of type 'struct module_state'
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98624

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[marxin at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 98625, which changed state.

Bug 98625 Summary: UBSAN: gcc/cp/module.cc:977:15: runtime error: left shift of negative value -1
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98625

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[nathan at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 98624, which changed state.

Bug 98624 Summary: UBSAN: gcc/cp/module.cc:5895:29: runtime error: member call on null pointer of type 'struct module_state'
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98624

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |---

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[nathan at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 98624, which changed state.

Bug 98624 Summary: UBSAN: gcc/cp/module.cc:5895:29: runtime error: member call on null pointer of type 'struct module_state'
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98624

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[marxin at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 99190, which changed state.

Bug 99190 Summary: Undefined behaviour in libubsan
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=99190

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[zeccav at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 62058, which changed state.

Bug 62058 Summary: Undefined behaviour in tree-data-ref.c with options -O1 -ftree-loop-vectorize
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=62058

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[ebotcazou at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 99376, which changed state.

Bug 99376 Summary: sanitizer detects undefined behaviour in rtlanal.c
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=99376

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[rearnsha at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 100311, which changed state.

Bug 100311 Summary: UB in sel-sched.c:init_regs_for_mode with -march=armv8-m.base
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=100311

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 102019, which changed state.

Bug 102019 Summary: [12 Regression] UBSAN error: hwint.h:293:61: runtime error: shift exponent 64 is too large for 64-bit type 'long unsigned int' since r12-2975-g32c3a75390623a0470df52af13f78baddd562981
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=102019

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[pinskia at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 85789, which changed state.

Bug 85789 Summary: Signed integer overflow with nonzero optimization in cse.c
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85789

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |DUPLICATE

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[burnus at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 102541, which changed state.

Bug 102541 Summary: [12 Regression] runtime error: load of value 208393040, which is not a valid value for type 'ar_type' since r12-3897-g00f6de9c69119594f7dad3bd525937c94c8200d0
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=102541

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[hubicka at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 103082, which changed state.

Bug 103082 Summary: [12 Regression] gcc/poly-int.h:1162:5: runtime error: left shift of negative value -40
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103082

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[marxin at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 103167, which changed state.

Bug 103167 Summary: UBSAN error since g:05f40bc4c116ba48843728201bc7290a5e518598
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103167

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[aldyh at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 103229, which changed state.

Bug 103229 Summary: gcc/gimple-range-cache.cc:654:10: runtime error: null pointer passed as argument 1, which is declared to never be null
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103229

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[marxin at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 103230, which changed state.

Bug 103230 Summary: ipa-modref-tree.h:550:33: runtime error: load of value 255, which is not a valid value for type 'bool'
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103230

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 103435, which changed state.

Bug 103435 Summary: [12 Regression] gcc/gimple-ssa-store-merging.c:879:13: runtime error: shift exponent 64 is too large for 64-bit type 'long unsigned int'
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103435

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[fxcoudert at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 99191, which changed state.

Bug 99191 Summary: sanitizer detects undefined behaviour in libgfortran
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=99191

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 84416, which changed state.

Bug 84416 Summary: [9/10/11/12 Regression] internal compiler error: in int_cst_value, at tree.c:11089
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=84416

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 104064, which changed state.

Bug 104064 Summary: gcc/tree-vect-data-refs.c:3208:16: runtime error: signed integer overflow: 17 - -9223372036854775806 cannot be represented in type 'long int'
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104064

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[xry111 at mengyan1223 dot wang]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 104842, which changed state.

Bug 104842 Summary: mips: signed overflow in LUI_OPERAND
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104842

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[xry111 at mengyan1223 dot wang]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 104851, which changed state.

Bug 104851 Summary: off-by-one out-of-bound access in supports_vec_convert_optab_p, at optabs-query.cc:725
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104851

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[anlauf at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 104999, which changed state.

Bug 104999 Summary: [12 Regression] runtime error: pointer index expression with base 0x00000cf67720 overflowed to 0xffffffffea627728
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104999

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 105056, which changed state.

Bug 105056 Summary: [12 Regression] runtime error: load of value 3132799674, which is not a valid value for type 'ref_step_type' since r12-7795-g85b4d881327e31
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105056

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[xry111 at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 106097, which changed state.

Bug 106097 Summary: undefined behaviors regarding integer shifts in loongarch_build_integer
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106097

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[jamborm at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 109759, which changed state.

Bug 109759 Summary: UBSAN error: shift exponent 64 is too large for 64-bit type 'long unsigned int'
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=109759

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |DUPLICATE

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[jamborm at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 109886, which changed state.

Bug 109886 Summary: UBSAN error: shift exponent 64 is too large for 64-bit type when compiling gcc.c-torture/compile/pr96796.c
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=109886

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[xry111 at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 104843, which changed state.

Bug 104843 Summary: signed overflow in compute_const_anchors, at cse.cc:1180
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=104843

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[jamborm at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 110677, which changed state.

Bug 110677 Summary: UBSAN error: load of value 1818451807, which is not a valid value for type 'expr_t' when compiling pr49213.f90
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=110677

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[pinskia at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 100204, which changed state.

Bug 100204 Summary: aarch64: UB evaluating J constraint
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=100204

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[pinskia at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 100212, which changed state.

Bug 100212 Summary: UB (shift by -1) in aarch64_classify_index
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=100212

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 105533, which changed state.

Bug 105533 Summary: UBSAN: gcc/expmed.cc:3272:26: runtime error: signed integer overflow: -9223372036854775808 - 1 cannot be represented in type 'long int'
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105533

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED

[Bug other/63426] [meta-bug] Issues found with -fsanitize=undefined

[law at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63426
Bug 63426 depends on bug 108278, which changed state.

Bug 108278 Summary: [13/14 Regression] runtime error with -O1 -Wall
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=108278

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|WAITING                     |RESOLVED
         Resolution|---                         |FIXED