[Bug c/64809] New: ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[Bug c/64809] New: ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[su at cs dot ucdavis.edu]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

            Bug ID: 64809
           Summary: ICE at -O3 with -g enabled on x86_64-linux-gnu (in
                    32-bit mode)
           Product: gcc
           Version: 5.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: c
          Assignee: unassigned at gcc dot gnu.org
          Reporter: su at cs dot ucdavis.edu

Created attachment 34586
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=34586&action=edit
reduced test case

The attached code causes an ICE when compiled with the current gcc trunk at -O3
with -g enabled on x86_64-linux-gnu in the 32-bit mode (but not in 64-bit
mode). 

This test has been very tough to reduce; the attached (with 6130 bytes) is the
best I was able to get so far. 

This is a regression from 4.9.x. 


$ gcc-trunk -v
Using built-in specs.
COLLECT_GCC=gcc-trunk
COLLECT_LTO_WRAPPER=/usr/local/gcc-trunk/libexec/gcc/x86_64-unknown-linux-gnu/5.0.0/lto-wrapper
Target: x86_64-unknown-linux-gnu
Configured with: ../gcc-trunk/configure --prefix=/usr/local/gcc-trunk
--enable-languages=c,c++ --disable-werror --enable-multilib
Thread model: posix
gcc version 5.0.0 20150126 (experimental) [trunk revision 220102] (GCC) 
$ 
$ rm -f ./a.out 
$ gcc-4.9 -m32 -O3 -g small.c >/dev/null 2>&1
$ ls ./a.out
./a.out
$ rm -f ./a.out
$ gcc-trunk -m32 -O3 small.c >/dev/null 2>&1
$ ls ./a.out
./a.out
$ rm -f ./a.out
$ 
$ 
$ gcc-trunk -m32 -O3 -g small.c > out.txt 2>&1 
$ tail -n 16 out.txt
small.c: In function ‘main’:
small.c:348:1: internal compiler error: Segmentation fault
 main ()
 ^
0xa85e5f crash_signal
    ../../gcc-trunk/gcc/toplev.c:383
0x6afd5b reorder_operands
    ../../gcc-trunk/gcc/cfgexpand.c:5031
0x6bc971 expand_gimple_basic_block
    ../../gcc-trunk/gcc/cfgexpand.c:5091
0x6bdd77 execute
    ../../gcc-trunk/gcc/cfgexpand.c:6003
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.
$
>From gcc-bugs-return-474988-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org Tue Jan 27 01:20:20 2015
Return-Path: <gcc-bugs-return-474988-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Delivered-To: listarch-gcc-bugs@gcc.gnu.org
Received: (qmail 4343 invoked by alias); 27 Jan 2015 01:20:18 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Delivered-To: mailing list gcc-bugs@gcc.gnu.org
Received: (qmail 4272 invoked by uid 48); 27 Jan 2015 01:20:09 -0000
From: "dmalcolm at gcc dot gnu.org" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug jit/64810] New: jit not working on armv7hl
Date: Tue, 27 Jan 2015 01:20:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: new
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: jit
X-Bugzilla-Version: 5.0
X-Bugzilla-Keywords:
X-Bugzilla-Severity: normal
X-Bugzilla-Who: dmalcolm at gcc dot gnu.org
X-Bugzilla-Status: UNCONFIRMED
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: dmalcolm at gcc dot gnu.org
X-Bugzilla-Target-Milestone: ---
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields: bug_id short_desc product version bug_status bug_severity priority component assigned_to reporter cf_gcchost cf_gcctarget cf_gccbuild
Message-ID: <bug-64810-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2015-01/txt/msg02982.txt.bz2
Content-length: 1839

https://gcc.gnu.org/bugzilla/show_bug.cgi?idd810

            Bug ID: 64810
           Summary: jit not working on armv7hl
           Product: gcc
           Version: 5.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: jit
          Assignee: dmalcolm at gcc dot gnu.org
          Reporter: dmalcolm at gcc dot gnu.org
              Host: armv7hl-redhat-linux-gnueabi
            Target: armv7hl-redhat-linux-gnueabi
             Build: armv7hl-redhat-linux-gnueabi

Jakub did a test build of the jit on armv7hl-redhat-linux-gnueabi:
http://koji.fedoraproject.org/scratch/jakub/task_8710312/logs/armv7hl/build.log

All of the jit test logs show linker failures when creating the "fake.so", of
the form:

    PASSED: test-hello-world.c.exe iteration 1 of 5: set_up_logging: logfile is
non-null
PASS:  test-hello-world.c.exe iteration 1 of 5: set_up_logging: logfile is
non-null
    NOTE: test-hello-world.c.exe iteration 1 of 5: writing reproducer to
./test-hello-world.c.exe.reproducer.c
ld: error: /tmp/libgccjit-ZGemdr/fake.so uses VFP register arguments,
/tmp/ccJFCBsE.o does not
ld: failed to merge target specific data of file /tmp/ccJFCBsE.o
./test-hello-world.c.exe: error: error invoking gcc driver: exit_status: 256
err: 0
./test-hello-world.c.exe: error: whilst attempting to run a driver named:
armv7hl-redhat-linux-gnueabi-gcc-5.0.0
./test-hello-world.c.exe: error: PATH was:
/builddir/build/BUILD/gcc-5.0.0-20150123/obj-armv7hl-redhat-linux-gnueabi/gcc:/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/sbin:/builddir/.local/bin:/builddir/bin
    FAILED: test-hello-world.c.exe iteration 1 of 5: verify_code: result is
NULL
FAIL:  test-hello-world.c.exe iteration 1 of 5: verify_code: result is NULL
FAIL: test-hello-world.c.exe killed: 526 exp7 0 0 CHILDKILLED SIGABRT SIGABRT

[Bug middle-end/64809] ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

Markus Trippelsdorf <trippels at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2015-01-27
                 CC|                            |trippels at gcc dot gnu.org
          Component|c                           |middle-end
   Target Milestone|---                         |5.0
     Ever confirmed|0                           |1

--- Comment #1 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
==5842== Invalid read of size 4
==5842==    at 0x71563B: reorder_operands(basic_block_def*) (cfgexpand.c:5031)
==5842==    by 0x721229: expand_gimple_basic_block(basic_block_def*, bool)
(cfgexpand.c:5091)
==5842==    by 0x722637: (anonymous namespace)::pass_expand::execute(function*)
(cfgexpand.c:6003)
==5842==    by 0xA28D0E: execute_one_pass(opt_pass*) (passes.c:2326)
==5842==    by 0xA29185: execute_pass_list_1(opt_pass*) [clone .constprop.73]
(passes.c:2378)
==5842==    by 0xA291D8: execute_pass_list(function*, opt_pass*)
(passes.c:2389)
==5842==    by 0x74E04B: cgraph_node::expand() (cgraphunit.c:1804)
==5842==    by 0x74F768: expand_all_functions (cgraphunit.c:1940)
==5842==    by 0x74F768: symbol_table::compile() [clone .part.53]
(cgraphunit.c:2293)
==5842==    by 0x75167F: compile (timevar.h:110)
==5842==    by 0x75167F: symbol_table::finalize_compilation_unit()
(cgraphunit.c:2370)
==5842==    by 0x5F92CA: c_write_global_declarations() (c-decl.c:10789)
==5842==    by 0xAE3203: compile_file() (toplev.c:606)
==5842==    by 0x5E041A: do_compile (toplev.c:2045)
==5842==    by 0x5E041A: toplev::main(int, char**) (toplev.c:2142)
==5842==  Address 0x607cf2c is 54,956 bytes inside an unallocated block of size
98,160 in arena "client"
==5842==

[Bug middle-end/64809] ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

Markus Trippelsdorf <trippels at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ienkovich at gcc dot gnu.org

--- Comment #2 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
Started with r219646.

[Bug middle-end/64809] [5 Regression] ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|P3                          |P1
                 CC|                            |jakub at gcc dot gnu.org
            Summary|ICE at -O3 with -g enabled  |[5 Regression] ICE at -O3
                   |on x86_64-linux-gnu (in     |with -g enabled on
                   |32-bit mode)                |x86_64-linux-gnu (in 32-bit
                   |                            |mode)

--- Comment #3 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
I can't seem to reproduce this, even with valgrind.
Line 5031 is:
          lattice[i] += lattice[gimple_uid (def_stmt)];
But adding a gcc_assert (gimple_bb (def_stmt) == bb);
ICEs on this testcase, so the assumptions that we only TER inside bbs is
apparently false, either due to some bug or intentionally so.
In that case, either we need to fix that bug or change reorder_operands back to
check gimple_bb (def_stmt) == bb in all 3 spots where reorder_operands calls
get_gimple_for_ssa_name.

[Bug middle-end/64809] [5 Regression] ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

--- Comment #4 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
Please note that the testcase is nondeterministic. That is also the reason
why it is hard to reduce. You may need to run gcc several times to hit the bug.

[Bug middle-end/64809] [5 Regression] ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

--- Comment #5 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Created attachment 34590
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=34590&action=edit
gcc5-pr64809.patch

IMHO in any case we should apply something like the attached patch, there is no
point to even look at the debug stmts and TER really shouldn't make any
guarantees for uses in debug stmts, those must be by definition ignored for TER
purposes.  Whether that is sufficient is another question.

[Bug middle-end/64809] [5 Regression] ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |rguenth at gcc dot gnu.org

--- Comment #6 from Richard Biener <rguenth at gcc dot gnu.org> ---
(In reply to Jakub Jelinek from comment #5)
> Created attachment 34590 [details]
> gcc5-pr64809.patch
> 
> IMHO in any case we should apply something like the attached patch, there is
> no point to even look at the debug stmts and TER really shouldn't make any
> guarantees for uses in debug stmts, those must be by definition ignored for
> TER purposes.  Whether that is sufficient is another question.

Agreed.

[Bug middle-end/64809] [5 Regression] ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[ysrumyan at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

Yuri Rumyantsev <ysrumyan at gmail dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ysrumyan at gmail dot com

--- Comment #7 from Yuri Rumyantsev <ysrumyan at gmail dot com> ---
I sent the patch with regression test for review.

[Bug middle-end/64809] [5 Regression] ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[ienkovich at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

--- Comment #8 from ienkovich at gcc dot gnu.org ---
Author: ienkovich
Date: Wed Jan 28 11:46:44 2015
New Revision: 220205

URL: https://gcc.gnu.org/viewcvs?rev=220205&root=gcc&view=rev
Log:
gcc/

    PR middle-end/64809
    * cfgexpand.c (reorder_operands): Skip debug gimples.

gcc/testsuite/

    PR middle-end/64809
    * gcc.dg/pr64809.c: New test.


Added:
    trunk/gcc/testsuite/gcc.dg/pr64809.c
Modified:
    trunk/gcc/ChangeLog
    trunk/gcc/cfgexpand.c
    trunk/gcc/testsuite/ChangeLog

[Bug middle-end/64809] [5 Regression] ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #9 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
Fixed.

[Bug middle-end/64809] [5 Regression] ICE at -O3 with -g enabled on x86_64-linux-gnu (in 32-bit mode)

[ienkovich at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=64809

--- Comment #10 from ienkovich at gcc dot gnu.org ---
Author: ienkovich
Date: Thu Jan 29 12:20:55 2015
New Revision: 220241

URL: https://gcc.gnu.org/viewcvs?rev=220241&root=gcc&view=rev
Log:
gcc/testsuite/

    PR middle-end/64809
    * gcc.dg/pr64809.c: Delete.


Removed:
    trunk/gcc/testsuite/gcc.dg/pr64809.c
Modified:
    trunk/gcc/testsuite/ChangeLog