[Bug c/63879] New: ICE compiling Linux Kernel fs/ext3/namei.c

[Bug c/63879] New: ICE compiling Linux Kernel fs/ext3/namei.c

[sasha.levin at oracle dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

            Bug ID: 63879
           Summary: ICE compiling Linux Kernel fs/ext3/namei.c
           Product: gcc
           Version: 5.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: c
          Assignee: unassigned at gcc dot gnu.org
          Reporter: sasha.levin at oracle dot com
                CC: mpolacek at gcc dot gnu.org

Created attachment 33978
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=33978&action=edit
Preprocessed source

I'm seeing very high memory usage followed by:

{standard input}: Assembler messages:
{standard input}:2183: Warning: end of file not at end of a line; newline
inserted
{standard input}:4163: Error: number of operands mismatch for `movq'
{standard input}: Error: open CFI at the end of file; missing .cfi_endproc
directive
gcc: internal compiler error: Killed (program cc1)
0x40c3cc execute
        ../../gcc/gcc.c:2912
0x410917 driver::do_spec_on_infiles() const
        ../../gcc/gcc.c:7674
0x40322b driver::main(int, char**)
        ../../gcc/gcc.c:6911

I've bisected this issue down to:

commit 1043013c91c08e3d8cd665b3f960f658918d69fe
Author: mpolacek <mpolacek@138bc75d-0d04-0410-961f-82ee72b054a4>
Date:   Fri Nov 14 11:57:05 2014 +0000

        * fold-const.c (fold_negate_expr): Don't fold INTEGER_CST if
        that overflows when SANITIZE_SI_OVERFLOW is on.  Guard -(-A)
        folding with TYPE_OVERFLOW_SANITIZED.

        * c-c++-common/ubsan/overflow-negate-3.c: New test.


    git-svn-id: svn+ssh://gcc.gnu.org/svn/gcc/trunk@217556
138bc75d-0d04-0410-961f-82ee7

Preprocessed fs/ext3/namei.c attached.

[Bug middle-end/63879] ICE compiling Linux Kernel fs/ext3/namei.c

[mpolacek at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

Marek Polacek <mpolacek at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |WAITING
   Last reconfirmed|                            |2014-11-15
   Target Milestone|---                         |5.0
     Ever confirmed|0                           |1

--- Comment #1 from Marek Polacek <mpolacek at gcc dot gnu.org> ---
That would mean we hit infinite recursion.

But I can't reproduce this on x86-64 with any optimization level - can you
please specify the command-line options?

[Bug middle-end/63879] ICE compiling Linux Kernel fs/ext3/namei.c

[sasha.levin at oracle dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

--- Comment #2 from Sasha Levin <sasha.levin at oracle dot com> ---
$ gcc -Wp,-MD,fs/ext3/.namei.o.d  -nostdinc -isystem
/home/sasha/gcc-inst/lib/gcc/x86_64-unknown-linux-gnu/5.0.0/include
-I./arch/x86/include -Iarch/x86/include/generated  -Iinclude
-I./arch/x86/include/uapi -Iarch/x86/include/generated/uapi -I./include/uapi
-Iinclude/generated/uapi -include ./include/linux/kconfig.h -D__KERNEL__ -Wall
-Wundef -Wstrict-prototypes -Wno-trigraphs -fno-strict-aliasing -fno-common
-Werror-implicit-function-declaration -Wno-format-security -std=gnu89 -m64
-mno-80387 -mno-fp-ret-in-387 -march=native -mno-red-zone -mcmodel=kernel
-funit-at-a-time -maccumulate-outgoing-args -DCONFIG_X86_X32_ABI
-DCONFIG_AS_CFI=1 -DCONFIG_AS_CFI_SIGNAL_FRAME=1 -DCONFIG_AS_CFI_SECTIONS=1
-DCONFIG_AS_FXSAVEQ=1 -DCONFIG_AS_CRC32=1 -DCONFIG_AS_AVX=1 -DCONFIG_AS_AVX2=1
-pipe -Wno-sign-compare -fno-asynchronous-unwind-tables -mno-sse -mno-mmx
-mno-sse2 -mno-3dnow -mno-avx -fno-delete-null-pointer-checks -O2
--param=allow-store-data-races=0 -fno-reorder-blocks -fno-ipa-cp-clone
-fno-partial-inlining -Wframe-larger-than=2048 -fstack-protector
-Wno-unused-but-set-variable -fno-omit-frame-pointer
-fno-optimize-sibling-calls -fno-var-tracking-assignments -g -gdwarf-4 -pg
-mfentry -DCC_USING_FENTRY -Wdeclaration-after-statement -Wno-pointer-sign
-fno-strict-overflow -fconserve-stack -Werror=implicit-int
-Werror=strict-prototypes -Werror=date-time -DCC_HAVE_ASM_GOTO   
-fsanitize=kernel-address -fasan-shadow-offset=0xdfffe90000000000 --param
asan-instrumentation-with-call-threshold=10000   -fsanitize=undefined 
-fno-sanitize=unreachable  -fno-sanitize=float-cast-overflow   
-D"KBUILD_STR(s)=#s" -D"KBUILD_BASENAME=KBUILD_STR(namei)" 
-D"KBUILD_MODNAME=KBUILD_STR(ext3)" -c -o fs/ext3/.tmp_namei.o fs/ext3/namei.i
{standard input}: Assembler messages:
{standard input}:2183: Warning: end of file not at end of a line; newline
inserted
{standard input}:4163: Error: number of operands mismatch for `movq'
{standard input}: Error: open CFI at the end of file; missing .cfi_endproc
directive
gcc: internal compiler error: Segmentation fault (program cc1)
0x40c3cc execute
        ../../gcc/gcc.c:2912
0x410917 driver::do_spec_on_infiles() const
        ../../gcc/gcc.c:7674
0x40322b driver::main(int, char**)
        ../../gcc/gcc.c:6911
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.

[Bug middle-end/63879] ICE compiling Linux Kernel fs/ext3/namei.c

[hjl.tools at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

--- Comment #3 from H.J. Lu <hjl.tools at gmail dot com> ---
(In reply to Sasha Levin from comment #2)
> $ gcc -Wp,-MD,fs/ext3/.namei.o.d  -nostdinc -isystem
> /home/sasha/gcc-inst/lib/gcc/x86_64-unknown-linux-gnu/5.0.0/include
> -I./arch/x86/include -Iarch/x86/include/generated  -Iinclude
> -I./arch/x86/include/uapi -Iarch/x86/include/generated/uapi -I./include/uapi
> -Iinclude/generated/uapi -include ./include/linux/kconfig.h -D__KERNEL__
> -Wall -Wundef -Wstrict-prototypes -Wno-trigraphs -fno-strict-aliasing
> -fno-common -Werror-implicit-function-declaration -Wno-format-security
> -std=gnu89 -m64 -mno-80387 -mno-fp-ret-in-387 -march=native -mno-red-zone
                                                 ^^^^^^^^^^^^^
Please show the output of "gcc -v" when -march=native is used.  No one
can guess what your CPU is.

[Bug middle-end/63879] ICE compiling Linux Kernel fs/ext3/namei.c

[sasha.levin at oracle dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

--- Comment #4 from Sasha Levin <sasha.levin at oracle dot com> ---
$ gcc -v
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/home/sasha/gcc-inst/libexec/gcc/x86_64-unknown-linux-gnu/5.0.0/lto-wrapper
Target: x86_64-unknown-linux-gnu
Configured with: ../configure --prefix=/home/sasha/gcc-inst/ --with-arch=native
--with-tune=native --enable-languages=c --enable-lto --enable-gold
--enable-stage1-languages=c
Thread model: posix
gcc version 5.0.0 20141114 (experimental) (GCC)

[Bug middle-end/63879] ICE compiling Linux Kernel fs/ext3/namei.c

[hjl.tools at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

--- Comment #5 from H.J. Lu <hjl.tools at gmail dot com> ---
(In reply to Sasha Levin from comment #4)
> $ gcc -v

Please add "-v" to the gcc command line used to compile fs/ext3/namei.c
and show the whole output.

[Bug middle-end/63879] ICE compiling Linux Kernel fs/ext3/namei.c

[sasha.levin at oracle dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

--- Comment #6 from Sasha Levin <sasha.levin at oracle dot com> ---
Using built-in specs.
COLLECT_GCC=gcc
Target: x86_64-unknown-linux-gnu
Configured with: ../configure --prefix=/home/sasha/gcc-inst/ --with-arch=native
--with-tune=native --enable-languages=c --enable-lto --enable-gold
--enable-stage1-languages=c
Thread model: posix
gcc version 5.0.0 20141114 (experimental) (GCC) 

COLLECT_GCC_OPTIONS='-v' '-nostdinc' '-isystem'
'/home/sasha/gcc-inst/lib/gcc/x86_64-unknown-linux-gnu/5.0.0/include' '-I'
'./arch/x86/include' '-I' 'arch/x86/include/generated
' '-I' 'include' '-I' './arch/x86/include/uapi' '-I'
'arch/x86/include/generated/uapi' '-I' './include/uapi' '-I'
'include/generated/uapi' '-include' './include/linux/kconfig.h
' '-D' '__KERNEL__' '-Wall' '-Wundef' '-Wstrict-prototypes' '-Wno-trigraphs'
'-fno-strict-aliasing' '-fno-common' '-Werror=implicit-function-declaration'
'-Wno-format-security'
 '-std=gnu90' '-m64' '-mno-80387' '-mno-fp-ret-in-387' '-march=native'
'-mno-red-zone' '-mcmodel=kernel' '-funit-at-a-time'
'-maccumulate-outgoing-args' '-D' 'CONFIG_X86_X32_AB
I' '-D' 'CONFIG_AS_CFI=1' '-D' 'CONFIG_AS_CFI_SIGNAL_FRAME=1' '-D'
'CONFIG_AS_CFI_SECTIONS=1' '-D' 'CONFIG_AS_FXSAVEQ=1' '-D' 'CONFIG_AS_CRC32=1'
'-D' 'CONFIG_AS_AVX=1' '-D' 'C
ONFIG_AS_AVX2=1' '-pipe' '-Wno-sign-compare' '-fno-asynchronous-unwind-tables'
'-mno-sse' '-mno-mmx' '-mno-sse2' '-mno-3dnow' '-mno-avx'
'-fno-delete-null-pointer-checks' '-O2'
 '--param' 'allow-store-data-races=0' '-fno-reorder-blocks' '-fno-ipa-cp-clone'
'-fno-partial-inlining' '-Wframe-larger-than=2048' '-fstack-protector'
'-Wno-unused-but-set-vari
able' '-fno-omit-frame-pointer' '-fno-optimize-sibling-calls'
'-fno-var-tracking-assignments' '-g' '-gdwarf-4' '-pg' '-mfentry' '-D'
'CC_USING_FENTRY' '-Wdeclaration-after-stat
ement' '-Wno-pointer-sign' '-fno-strict-overflow' '-fconserve-stack'
'-Werror=implicit-int' '-Werror=strict-prototypes' '-Werror=date-time' '-D'
'CC_HAVE_ASM_GOTO' '-fsanitize=
kernel-address' '-fasan-shadow-offset=0xdfffe90000000000' '--param'
'asan-instrumentation-with-call-threshold=10000' '-fsanitize=undefined'
'-fno-sanitize=unreachable' '-fno-sa
nitize=float-cast-overflow' '-D' 'KBUILD_STR(s)=#s' '-D'
'KBUILD_BASENAME=KBUILD_STR(namei)' '-D' 'KBUILD_MODNAME=KBUILD_STR(ext3)' '-c'
'-o' 'fs/ext3/.tmp_namei.o' 
 /home/sasha/gcc-inst/libexec/gcc/x86_64-unknown-linux-gnu/5.0.0/cc1
-fpreprocessed fs/ext3/namei.i -march=nehalem -mmmx -mno-3dnow -msse -msse2
-msse3 -mssse3 -mno-sse4a -mcx1
6 -msahf -mno-movbe -mno-aes -mno-sha -mno-pclmul -mpopcnt -mno-abm -mno-lwp
-mno-fma -mno-fma4 -mno-xop -mno-bmi -mno-bmi2 -mno-tbm -mno-avx -mno-avx2
-msse4.2 -msse4.1 -mno-l
zcnt -mno-rtm -mno-hle -mno-rdrnd -mno-f16c -mno-fsgsbase -mno-rdseed
-mno-prfchw -  
mno-adx -mfxsr -mno-xsave -mno-xsaveopt -mno-avx512f -mno-avx512er
-mno-avx512cd -mno-avx512pf -mno-prefetchwt1 -mno-clflushopt -mno-xsavec
-mno-xsaves -mno-avx512dq -mno-avx512bw -mno-avx512vl --param l1-cache-size=32
--param l1-cache-line-size=64 --param l2-cache-size=24576 -mtune=nehalem -quiet
-dumpbase namei.i -m64 -mno-80387 -mno-fp-ret-in-387 -mno-red-zone
-mcmodel=kernel -maccumulate-outgoing-args -mno-sse -mno-mmx -mno-sse2
-mno-3dnow -mno-avx -mfentry -auxbase-strip fs/ext3/.tmp_namei.o -g -gdwarf-4
-O2 -Wall -Wundef -Wstrict-prototypes -Wno-trigraphs
-Werror=implicit-function-declaration -Wno-format-security -Wno-sign-compare
-Wframe-larger-than=2048 -Wno-unused-but-set-variable
-Wdeclaration-after-statement -Wno-pointer-sign -Werror=implicit-int
-Werror=strict-prototypes -Werror=date-time -std=gnu90 -version -p
-fno-strict-aliasing -fno-common -funit-at-a-time
-fno-asynchronous-unwind-tables -fno-delete-null-pointer-checks
-fno-reorder-blocks -fno-ipa-cp-clone -fno-partial-inlining -fstack-protector
-fno-omit-frame-pointer -fno-optimize-sibling-calls
-fno-var-tracking-assignments -fno-strict-overflow -fconserve-stack
-fsanitize=kernel-address -fasan-shadow-offset=0xdfffe90000000000
-fsanitize=undefined -fno-sanitize=unreachable
-fno-sanitize=float-cast-overflow --param allow-store-data-races=0 --param
asan-instrumentation-with-call-threshold=10000 -o - | 
 as -v -I ./arch/x86/include -I arch/x86/include/generated -I include -I
./arch/x86/include/uapi -I arch/x86/include/generated/uapi -I ./include/uapi -I
include/generated/uapi --64 -o fs/ext3/.tmp_namei.o
GNU assembler version 2.24 (x86_64-linux-gnu) using BFD version (GNU Binutils
for Debian) 2.24
GNU C (GCC) version 5.0.0 20141114 (experimental) (x86_64-unknown-linux-gnu)
        compiled by GNU C version 5.0.0 20141114 (experimental), GMP version
5.0.5, MPFR version 3.1.0-p10, MPC version 0.9
GGC heuristics: --param ggc-min-expand=30 --param ggc-min-heapsize=4096
GNU C (GCC) version 5.0.0 20141114 (experimental) (x86_64-unknown-linux-gnu)
        compiled by GNU C version 5.0.0 20141114 (experimental), GMP version
5.0.5, MPFR version 3.1.0-p10, MPC version 0.9
GGC heuristics: --param ggc-min-expand=30 --param ggc-min-heapsize=4096
Compiler executable checksum: a3888a0e0adbd64b33f4f774d851bc2d
{standard input}: Assembler messages:
{standard input}:2183: Warning: end of file not at end of a line; newline
inserted
{standard input}:4163: Error: number of operands mismatch for `movq'
{standard input}: Error: open CFI at the end of file; missing .cfi_endproc
directive
gcc: internal compiler error: Segmentation fault (program cc1)
0x40c3cc execute
        ../../gcc/gcc.c:2912
0x410917 driver::do_spec_on_infiles() const
        ../../gcc/gcc.c:7674
0x40322b driver::main(int, char**)
        ../../gcc/gcc.c:6911
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.

[Bug middle-end/63879] ICE compiling Linux Kernel fs/ext3/namei.c

[mpolacek at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

Marek Polacek <mpolacek at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|WAITING                     |ASSIGNED
           Assignee|unassigned at gcc dot gnu.org      |mpolacek at gcc dot gnu.org

--- Comment #7 from Marek Polacek <mpolacek at gcc dot gnu.org> ---
Ok, confirmed.  -O2 -fno-strict-overflow -fsanitize=undefined options needed. 
Mine.

[Bug middle-end/63879] [5 Regression] ICE compiling Linux Kernel fs/ext3/namei.c with -fsanitize=undefined

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P3                          |P1
            Summary|ICE compiling Linux Kernel  |[5 Regression] ICE
                   |fs/ext3/namei.c with        |compiling Linux Kernel
                   |-fsanitize=undefined        |fs/ext3/namei.c with
                   |                            |-fsanitize=undefined

[Bug middle-end/63879] [5 Regression] ICE compiling Linux Kernel fs/ext3/namei.c with -fsanitize=undefined

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

Markus Trippelsdorf <trippels at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |trippels at gcc dot gnu.org

--- Comment #8 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
Reduced:

trippels@gcc2-power8 ~ % cat namei.i
struct
{
  int inode;
} * a;
int b, c;
void
fn1 ()
{
  int d = 0;
  while (b)
    {
      if (a->inode)
        d++;
      a = 0;
    }
  c = d - 1;
  for (; c >= 0; c--)
    ;
}

trippels@gcc2-power8 ~ % gcc -O2 -fsanitize=undefined namei.i
gcc: internal compiler error: Segmentation fault (program cc1)

gdb backtrace looks identical to that from the testcase of PR63520 comment 11.

[Bug middle-end/63879] [5 Regression] ICE compiling Linux Kernel fs/ext3/namei.c with -fsanitize=undefined

[mpolacek at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

--- Comment #9 from Marek Polacek <mpolacek at gcc dot gnu.org> ---
Author: mpolacek
Date: Wed Nov 19 12:03:04 2014
New Revision: 217766

URL: https://gcc.gnu.org/viewcvs?rev=217766&root=gcc&view=rev
Log:
    PR sanitizer/63879
    * fold-const.c (negate_expr_p) <case NEGATE_EXPR>: Return
    !TYPE_OVERFLOW_SANITIZED.
    (fold_negate_expr) <case INTEGER_CST>: Fold when overflow
    does not trap and when overflow wraps, or when SANITIZE_SI_OVERFLOW
    is 0.

    * c-c++-common/ubsan/pr63879-1.c: New test.
    * c-c++-common/ubsan/pr63879-2.c: New test.

Added:
    trunk/gcc/testsuite/c-c++-common/ubsan/pr63879-1.c
    trunk/gcc/testsuite/c-c++-common/ubsan/pr63879-2.c
Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/fold-const.c
    trunk/gcc/testsuite/ChangeLog

[Bug middle-end/63879] [5 Regression] ICE compiling Linux Kernel fs/ext3/namei.c with -fsanitize=undefined

[mpolacek at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63879

Marek Polacek <mpolacek at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #10 from Marek Polacek <mpolacek at gcc dot gnu.org> ---
Hopefully fixed...