[Bug lto/65193] New: [4.9 Regression] ICE: Segmentation fault with -g -flto

[Bug lto/65193] New: [4.9 Regression] ICE: Segmentation fault with -g -flto

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65193

            Bug ID: 65193
           Summary: [4.9 Regression] ICE: Segmentation fault with -g -flto
           Product: gcc
           Version: 4.9.2
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: lto
          Assignee: unassigned at gcc dot gnu.org
          Reporter: trippels at gcc dot gnu.org

Boost doesn't build with gcc-4.9 and -flto -g:

markus@x4 testcase % cat nexttowardl.ii
void frexp (int, int *);
namespace std
{
int ldexp (int, int);
struct A
{
};
template <class T> T get_min_shift_value ();
template <class> struct min_shift_initializer
{
  struct B
  {
    B () { get_min_shift_value<long double> (); }
  } static const b;
  static void
  m_fn1 ()
  {
    b;
  }
};
template <class T>
const typename min_shift_initializer<T>::B min_shift_initializer<T>::b;
template <class T>
inline T
get_min_shift_value ()
{
  using std::ldexp;
  static T c = ldexp (0, 0);
  min_shift_initializer<T>::m_fn1;
}
template <class T, class Policy>
void
float_next_imp (T p1, Policy p2)
{
  using std::ldexp;
  int d;
  float_next (0, p2);
  frexp (p1, &d);
}
template <class T, class Policy>
int
float_next (const T &p1, Policy &p2)
{
  float_next_imp (p1, p2);
}
template <class T, class Policy> void float_prior_imp (T, Policy)
{
  get_min_shift_value<T> ();
}
template <class T, class Policy> int float_prior (T, Policy)
{
  float_prior_imp (static_cast<T> (0), 0);
}
template <class T, class U, class Policy>
void
nextafter (T p1, U p2, Policy p3)
{
  p2 ? float_next (0, p3) : float_prior (p1, 0);
}
long double e;
int f;
void
nextafter ()
{
  nextafter (e, f, A ());
}
}
markus@x4 testcase % g++ -fPIC -flto -shared -O2 -g nexttowardl.ii
nexttowardl.ii: In function ‘float_next_imp’:
nexttowardl.ii:33:1: internal compiler error: Segmentation fault
 float_next_imp (T p1, Policy p2)
 ^
0x814e6f crash_signal
        ../../gcc/gcc/toplev.c:337
0x91e78b mark_use_processed
        ../../gcc/gcc/tree-ssa-sccvn.c:2708
0x91e78b visit_use
        ../../gcc/gcc/tree-ssa-sccvn.c:3366
0x92164c process_scc
        ../../gcc/gcc/tree-ssa-sccvn.c:3718
0x92164c extract_and_process_scc_for_name
        ../../gcc/gcc/tree-ssa-sccvn.c:3802
0x92164c DFS
        ../../gcc/gcc/tree-ssa-sccvn.c:3854
0x92164c run_scc_vn(vn_lookup_kind)
        ../../gcc/gcc/tree-ssa-sccvn.c:4097
0x8fe71a execute_fre
        ../../gcc/gcc/tree-ssa-pre.c:4839
0x8fe71a execute
        ../../gcc/gcc/tree-ssa-pre.c:4890
Please submit a full bug report,
with preprocessed source if appropriate.
Please include the complete backtrace with any bug report.
See <http://gcc.gnu.org/bugs.html> for instructions.
lto-wrapper: /var/tmp/gcc_test_/usr/local/bin/g++ returned 1 exit status
/usr/bin/ld: fatal error: lto-wrapper failed
collect2: error: ld returned 1 exit status
>From gcc-bugs-return-478327-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org Tue Feb 24 14:37:15 2015
Return-Path: <gcc-bugs-return-478327-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Delivered-To: listarch-gcc-bugs@gcc.gnu.org
Received: (qmail 116235 invoked by alias); 24 Feb 2015 14:37:15 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Delivered-To: mailing list gcc-bugs@gcc.gnu.org
Received: (qmail 116196 invoked by uid 48); 24 Feb 2015 14:37:12 -0000
From: "trippels at gcc dot gnu.org" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug lto/65193] [4.9 Regression] ICE: Segmentation fault with -g -flto
Date: Tue, 24 Feb 2015 15:00:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: lto
X-Bugzilla-Version: 4.9.2
X-Bugzilla-Keywords:
X-Bugzilla-Severity: normal
X-Bugzilla-Who: trippels at gcc dot gnu.org
X-Bugzilla-Status: UNCONFIRMED
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org
X-Bugzilla-Target-Milestone: 4.9.3
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields: cf_known_to_work target_milestone cf_known_to_fail
Message-ID: <bug-65193-4-MTDELi7iaR@http.gcc.gnu.org/bugzilla/>
In-Reply-To: <bug-65193-4@http.gcc.gnu.org/bugzilla/>
References: <bug-65193-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2015-02/txt/msg02659.txt.bz2
Content-length: 415

https://gcc.gnu.org/bugzilla/show_bug.cgi?ide193

Markus Trippelsdorf <trippels at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
      Known to work|                            |4.8.4, 5.0
   Target Milestone|---                         |4.9.3
      Known to fail|                            |4.9.2

[Bug lto/65193] [4.9 Regression] ICE: Segmentation fault with -g -flto

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65193

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |ASSIGNED
   Last reconfirmed|                            |2015-02-25
           Assignee|unassigned at gcc dot gnu.org      |rguenth at gcc dot gnu.org
     Ever confirmed|0                           |1

--- Comment #1 from Richard Biener <rguenth at gcc dot gnu.org> ---
I will have a look (sounds like a know issue with a not backported patch).

[Bug tree-optimization/65193] [4.9 Regression] ICE: Segmentation fault with -g -flto

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65193

--- Comment #2 from Richard Biener <rguenth at gcc dot gnu.org> ---
I already get

> ./xg++ -B. -nostdlib -fPIC -flto -shared t.ii -O2 -g
t.ii: In function ‘float_next_imp’:
t.ii:33:7: error: address taken, but ADDRESSABLE bit not set
       float_next_imp (T p1, Policy p2)
       ^
d
t.ii:38:4: note: in statement
    frexp (p1, &d);
    ^
# .MEM_13 = VDEF <.MEM_11>
frexp (p1_5(D), &d);
t.ii:33:7: internal compiler error: verify_gimple failed
       float_next_imp (T p1, Policy p2)
       ^
0xaf39de verify_gimple_in_cfg(function*)


Ok.  It is the execute_update_addresses_taken () call in the TODO of the
IPA inline transform pass that re-sets TREE_ADDRESSABLE here.  Somehow
we have merged 'd' from two different places it seems (the optimization
is in _GLOBAL__sub_I_t.ii).

The duplicate appears in _GLOBAL__sub_I_t.ii after inlining:



        { Scope block #21 t.ii:13 Originating from :  static long doubleD.2801
get_min_shift_valueD.2829 (void);

          { Scope block #23 Originating from :#0
            voidD.2802 <<< Unknown tree: imported_decl >>> = ldexpD.2839;
            intD.2788 dD.2905; (nonlocalized)
...
_GLOBAL__sub_I_t.ii ()
{
...
}

...

float_next_imp (intD.2788 p1D.2902, struct AD.2830 p2D.2903)
{
  struct AD.2830 D.2919;
  intD.2788 D.2918;
  const intD.2833 ISRA.9D.2915;
  intD.2788 dD.2905;
  const intD.2833 D.2904;


something is messed up.  The decl is streamed via streaming struct function
local-decls from float_next_imp (as expected).  No idea how it ends up in
the vars for _GLOBAL__sub_I_t.ii.

Ah.  We inline

(gdb) p debug_gimple_stmt (stmt)
# .MEM = VDEF <.MEM>
get_min_shift_value ();
$91 = void

but somehow we end up with

(gdb) p debug_tree (old_var)
 <var_decl 0x7ffff683c8e8 d
    type <integer_type 0x7ffff66b2690 int asm_written public SI
        size <integer_cst 0x7ffff66b53a0 constant 32>
        unit size <integer_cst 0x7ffff66b53c0 constant 4>
        align 32 symtab -159219552 alias set -1 canonical type 0x7ffff66b2690
precision 32 min <integer_cst 0x7ffff66b5340 -2147483648> max <integer_cst
0x7ffff66b5360 2147483647>
        pointer_to_this <pointer_type 0x7ffff66bd738>>
    addressable SI file t.ii line 36 col 8 size <integer_cst 0x7ffff66b53a0 32>
unit size <integer_cst 0x7ffff66b53c0 4>
    align 32 context <function_decl 0x7ffff6821b00 float_next_imp>>

in its BLOCK tree.  Which gets populated by

Old value = <tree 0x0>
New value = <block 0x7ffff6828fa0>
0x0000000000cd9194 in lto_input_ts_block_tree_pointers (ib=0x7fffffffd610, 
    data_in=0x1bee6a0, expr=<block 0x7ffff6828fa0>)
    at /space/rguenther/src/svn/gcc-4_9-branch/gcc/tree-streamer-in.c:928
928           BLOCK_SUBBLOCKS (BLOCK_SUPERCONTEXT (expr)) = expr;

but finally the valid block tree

(gdb) p debug_tree (expr)
 <block 0x7ffff6828fa0
    vars <imported_decl 0x7ffff681e8a0 D.2856
        type <void_type 0x7ffff66bd000 void asm_written VOID
            align 8 symtab 0 alias set -1 canonical type 0x7ffff66bd000
            pointer_to_this <pointer_type 0x7ffff66bd0a8>>
        VOID file t.ii line 39 col 2
        align 1 initial <function_decl 0x7ffff682a100 ldexp>
        chain <var_decl 0x7ffff66abd10 c type <real_type 0x7ffff66bd498 long
double>
            public static weak XF file t.ii line 28 col 13
            size <integer_cst 0x7ffff66b50a0 constant 128>
            unit size <integer_cst 0x7ffff66b50c0 constant 16>
            align 128 context <function_decl 0x7ffff6821a00
get_min_shift_value>

gets invalid by

Hardware watchpoint 16: *$111

Old value = <var_decl 0x7ffff66abd10 c>
New value = <var_decl 0x7ffff683c8e8 d>
0x0000000000cd579b in streamer_read_chain (ib=0x7fffffffd990, 
    data_in=0x1bee740)
    at /space/rguenther/src/svn/gcc-4_9-branch/gcc/tree-streamer-in.c:85
85              TREE_CHAIN (prev) = curr;

where 'prev' is that IMPORTED_DECL which is streamed globally it seems (ups).

And we miss r212992 on the branch.
>From gcc-bugs-return-478600-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org Thu Feb 26 14:39:20 2015
Return-Path: <gcc-bugs-return-478600-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Delivered-To: listarch-gcc-bugs@gcc.gnu.org
Received: (qmail 57278 invoked by alias); 26 Feb 2015 14:39:19 -0000
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
Delivered-To: mailing list gcc-bugs@gcc.gnu.org
Received: (qmail 57236 invoked by uid 48); 26 Feb 2015 14:39:16 -0000
From: "ktietz at gcc dot gnu.org" <gcc-bugzilla@gcc.gnu.org>
To: gcc-bugs@gcc.gnu.org
Subject: [Bug libgcc/65038] [regression 5] Unable to find ftw.h for libgcov-util.c
Date: Thu, 26 Feb 2015 15:32:00 -0000
X-Bugzilla-Reason: CC
X-Bugzilla-Type: changed
X-Bugzilla-Watch-Reason: None
X-Bugzilla-Product: gcc
X-Bugzilla-Component: libgcc
X-Bugzilla-Version: 5.0
X-Bugzilla-Keywords:
X-Bugzilla-Severity: blocker
X-Bugzilla-Who: ktietz at gcc dot gnu.org
X-Bugzilla-Status: NEW
X-Bugzilla-Priority: P3
X-Bugzilla-Assigned-To: unassigned at gcc dot gnu.org
X-Bugzilla-Target-Milestone: 5.0
X-Bugzilla-Flags:
X-Bugzilla-Changed-Fields: bug_status cf_reconfirmed_on target_milestone everconfirmed
Message-ID: <bug-65038-4-x4xQYfrmOZ@http.gcc.gnu.org/bugzilla/>
In-Reply-To: <bug-65038-4@http.gcc.gnu.org/bugzilla/>
References: <bug-65038-4@http.gcc.gnu.org/bugzilla/>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 7bit
X-Bugzilla-URL: http://gcc.gnu.org/bugzilla/
Auto-Submitted: auto-generated
MIME-Version: 1.0
X-SW-Source: 2015-02/txt/msg02932.txt.bz2
Content-length: 547

https://gcc.gnu.org/bugzilla/show_bug.cgi?ide038

Kai Tietz <ktietz at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2015-02-26
   Target Milestone|---                         |5.0
     Ever confirmed|0                           |1

--- Comment #1 from Kai Tietz <ktietz at gcc dot gnu.org> ---
Confirmed.  I have a patch for it

[Bug tree-optimization/65193] [4.9 Regression] ICE: Segmentation fault with -g -flto

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65193

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
      Known to work|                            |4.9.3
         Resolution|---                         |FIXED

--- Comment #3 from Richard Biener <rguenth at gcc dot gnu.org> ---
Fixed.

[Bug tree-optimization/65193] [4.9 Regression] ICE: Segmentation fault with -g -flto

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65193

--- Comment #4 from Richard Biener <rguenth at gcc dot gnu.org> ---
Author: rguenth
Date: Fri Feb 27 08:41:26 2015
New Revision: 221044

URL: https://gcc.gnu.org/viewcvs?rev=221044&root=gcc&view=rev
Log:
2015-02-27  Richard Biener  <rguenther@suse.de>

    PR lto/65193
    Backport from mainline
    2014-07-24  Jan Hubicka  <hubicka@ucw.cz>

    * lto-streamer-out.c (tree_is_indexable): Consider IMPORTED_DECL
    as non-indexable.

Modified:
    branches/gcc-4_9-branch/gcc/ChangeLog
    branches/gcc-4_9-branch/gcc/lto-streamer-out.c

[Bug tree-optimization/65193] [4.9 Regression] ICE: Segmentation fault with -g -flto

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65193

--- Comment #5 from Richard Biener <rguenth at gcc dot gnu.org> ---
Author: rguenth
Date: Fri Feb 27 10:20:50 2015
New Revision: 221050

URL: https://gcc.gnu.org/viewcvs?rev=221050&root=gcc&view=rev
Log:
2015-02-27  Richard Biener  <rguenther@suse.de>

    PR lto/65193
    * g++.dg/lto/pr65193_0.C: New testcase.

Added:
    trunk/gcc/testsuite/g++.dg/lto/pr65193_0.C
Modified:
    trunk/gcc/testsuite/ChangeLog

[Bug tree-optimization/65193] [4.9 Regression] ICE: Segmentation fault with -g -flto

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65193

--- Comment #6 from Richard Biener <rguenth at gcc dot gnu.org> ---
Author: rguenth
Date: Fri Feb 27 10:22:04 2015
New Revision: 221051

URL: https://gcc.gnu.org/viewcvs?rev=221051&root=gcc&view=rev
Log:
2015-02-27  Richard Biener  <rguenther@suse.de>

    PR lto/65193
    * g++.dg/lto/pr65193_0.C: New testcase.

Added:
    branches/gcc-4_9-branch/gcc/testsuite/g++.dg/lto/pr65193_0.C
Modified:
    branches/gcc-4_9-branch/gcc/testsuite/ChangeLog

[Bug tree-optimization/65193] [4.9 Regression] ICE: Segmentation fault with -g -flto

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65193

--- Comment #7 from Richard Biener <rguenth at gcc dot gnu.org> ---
Author: rguenth
Date: Fri Feb 27 11:34:14 2015
New Revision: 221054

URL: https://gcc.gnu.org/viewcvs?rev=221054&root=gcc&view=rev
Log:
2015-02-27  Richard Biener  <rguenther@suse.de>

    PR lto/65193
    Backport from mainline
    2014-07-24  Jan Hubicka  <hubicka@ucw.cz>

    * lto-streamer-out.c (tree_is_indexable): Consider IMPORTED_DECL
    as non-indexable.

    * g++.dg/lto/pr65193_0.C: New testcase.

Added:
    branches/gcc-4_8-branch/gcc/testsuite/g++.dg/lto/pr65193_0.C
Modified:
    branches/gcc-4_8-branch/gcc/ChangeLog
    branches/gcc-4_8-branch/gcc/lto-streamer-out.c
    branches/gcc-4_8-branch/gcc/testsuite/ChangeLog