[Bug c++/67595] New: concepts code causes segfault

[Bug c++/67595] New: concepts code causes segfault

[ryan.burn at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=67595

            Bug ID: 67595
           Summary: concepts code causes segfault
           Product: gcc
           Version: 6.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: c++
          Assignee: unassigned at gcc dot gnu.org
          Reporter: ryan.burn at gmail dot com
  Target Milestone: ---

Created attachment 36339
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=36339&action=edit
code that reproduces segfault

The attached code causes a segfault with the latest version of gcc

g++ --version
g++ (GCC) 6.0.0 20150915 (experimental)
Copyright (C) 2015 Free Software Foundation, Inc.
This is free software; see the source for copying conditions.  There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

result of compiling is:
g++: internal compiler error: Segmentation fault (program cc1plus)
Please submit a full bug report,
with preprocessed source if appropriate.
See <http://gcc.gnu.org/bugs.html> for instructions.

[Bug c++/67595] concepts code causes segfault

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=67595

Markus Trippelsdorf <trippels at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2015-09-16
                 CC|                            |trippels at gcc dot gnu.org
     Ever confirmed|0                           |1

--- Comment #1 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
Confirmed. It is a stack overflow.

Program received signal SIGSEGV, Segmentation fault.
[Switching to process 26351]
0x000000000078dd35 in cp_build_qualified_type_real
(type=type@entry=0x7ffff7296930, type_quals=type_quals@entry=0,
complain=complain@entry=3) at ../../gcc/gcc/cp/tree.c:1028
1028    {
(gdb) bt
#0  0x000000000078dd35 in cp_build_qualified_type_real
(type=type@entry=0x7ffff7296930, type_quals=type_quals@entry=0,
complain=complain@entry=3)
    at ../../gcc/gcc/cp/tree.c:1028
#1  0x00000000005c859f in strip_top_quals (t=0x7ffff7296930) at
../../gcc/gcc/cp/call.c:1085
#2  standard_conversion (to=to@entry=0x7ffff7296930,
from=from@entry=0x7ffff70e01f8, expr=expr@entry=0x7ffff70dce70,
c_cast_p=c_cast_p@entry=false, flags=flags@entry=5)
    at ../../gcc/gcc/cp/call.c:1109
#3  0x00000000005d3124 in implicit_conversion (to=to@entry=0x7ffff7296930,
from=from@entry=0x7ffff70e01f8, expr=expr@entry=0x7ffff70dce70,
c_cast_p=c_cast_p@entry=false, 
    flags=5, complain=complain@entry=0) at ../../gcc/gcc/cp/call.c:1803
#4  0x00000000005d5633 in add_function_candidate
(candidates=candidates@entry=0x7ffffbfff2e8, fn=fn@entry=0x7ffff721c0e0,
ctype=ctype@entry=0x0, first_arg=<optimized out>, 
    args=0x7fffdb0000c8, access_path=access_path@entry=0x0,
conversion_path=0x0, flags=<optimized out>, complain=0) at
../../gcc/gcc/cp/call.c:2120
#5  0x00000000005d6d38 in add_candidates (fns=0x7ffff700a160,
fns@entry=0x7ffff700a360, first_arg=first_arg@entry=0x0,
args=args@entry=0x7fffdb0000c8, 
    return_type=return_type@entry=0x0, explicit_targs=0x0, template_only=false,
conversion_path=0x0, access_path=0x0, flags=1, candidates=0x7ffffbfff2e8,
complain=0)
    at ../../gcc/gcc/cp/call.c:5326
#6  0x00000000005d9374 in perform_overload_resolution
(fn=fn@entry=0x7ffff700a360, args=0x7fffdb0000c8,
candidates=candidates@entry=0x7ffffbfff2e8, 
    any_viable_p=any_viable_p@entry=0x7ffffbfff2e7, complain=complain@entry=0)
at ../../gcc/gcc/cp/call.c:4012
#7  0x00000000005dbd1d in build_operator_new_call
(fnname=fnname@entry=0x7ffff70f4aa8, args=args@entry=0x7ffffbfff578,
size=size@entry=0x7ffffbfff398, 
    cookie_size=cookie_size@entry=0x7ffffbfff3a0,
size_check=size_check@entry=0x0, fn=fn@entry=0x7ffffbfff450, complain=0) at
../../gcc/gcc/cp/call.c:4198
#8  0x00000000007482f9 in build_new_1
(placement=placement@entry=0x7ffffbfff578, type=<optimized out>,
type@entry=0x7ffff58a13f0, nelts=<optimized out>, nelts@entry=0x0, 
    init=init@entry=0x7ffffbfff580,
globally_qualified_p=globally_qualified_p@entry=false,
complain=complain@entry=0) at ../../gcc/gcc/cp/init.c:2636
#9  0x0000000000749b83 in build_new (placement=placement@entry=0x7ffffbfff578,
type=type@entry=0x7ffff58a13f0, nelts=<optimized out>,
init=init@entry=0x7ffffbfff580, 
    use_global_new=0, complain=complain@entry=0) at
../../gcc/gcc/cp/init.c:3098
#10 0x0000000000645ed4 in tsubst_copy_and_build (t=t@entry=0x7fffdaffc460,
args=args@entry=0x7fffdaffbcc0, complain=<optimized out>, complain@entry=0, 
    in_decl=in_decl@entry=0x0, function_p=function_p@entry=false,
integral_constant_expression_p=integral_constant_expression_p@entry=false) at
../../gcc/gcc/cp/pt.c:15628
#11 0x0000000000636ce0 in tsubst_expr (t=0x7fffdaffc460,
args=args@entry=0x7fffdaffbcc0, complain=complain@entry=0,
in_decl=in_decl@entry=0x0, 
    integral_constant_expression_p=integral_constant_expression_p@entry=false)
at ../../gcc/gcc/cp/pt.c:15044
#12 0x00000000007fb67c in (anonymous namespace)::satisfy_expression_constraint
(complain=0, in_decl=0x0, args=0x7fffdaffbcc0, t=0x7fffdaffbfc0)
    at ../../gcc/gcc/cp/constraint.cc:1727
#13 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffbfc0,
args=args@entry=0x7fffdaffbcc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1901
#14 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffbcc0, t=0x7fffdaffdf50) at
../../gcc/gcc/cp/constraint.cc:1856
#15 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffdf50,
args=args@entry=0x7fffdaffbcc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#16 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffbcc0, t=0x7fffdaffdf78) at
../../gcc/gcc/cp/constraint.cc:1856
#17 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffdf78,
args=args@entry=0x7fffdaffbcc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#18 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffbcc0, t=0x7fffdaffdfc8) at
../../gcc/gcc/cp/constraint.cc:1856
#19 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffdfc8,
args=args@entry=0x7fffdaffbcc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#20 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffbcc0, t=0x7fffdaffd618) at
../../gcc/gcc/cp/constraint.cc:1856
#21 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffd618,
args=args@entry=0x7fffdaffbcc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#22 0x00000000007fbcdc in (anonymous
namespace)::satisfy_parameterized_constraint (complain=0, in_decl=0x0,
args=0x7fffdaffbcc0, t=0x7fffdaffd6e0)
    at ../../gcc/gcc/cp/constraint.cc:1841
#23 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffd6e0,
args=args@entry=0x7fffdaffbcc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1916
#24 0x00000000007fbdfc in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffbcc0, t=0x7fffdb000000) at
../../gcc/gcc/cp/constraint.cc:1859
#25 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdb000000,
args=args@entry=0x7fffdaffbcc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#26 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffbcc0, t=0x7fffdb000078) at
../../gcc/gcc/cp/constraint.cc:1856
#27 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdb000078,
args=args@entry=0x7fffdaffbcc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#28 0x00000000007fbcdc in (anonymous
namespace)::satisfy_parameterized_constraint (complain=0, in_decl=0x0,
args=0x7fffdaffbcc0, t=0x7fffdb0000a0)
    at ../../gcc/gcc/cp/constraint.cc:1841
#29 (anonymous namespace)::satisfy_constraint_1 (t=t@entry=0x7fffdb0000a0,
args=0x7fffdaffbcc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1916
#30 0x00000000007fc1d7 in (anonymous namespace)::satisfy_constraint
(t=0x7fffdb0000a0, args=<optimized out>) at ../../gcc/gcc/cp/constraint.cc:1949
#31 0x00000000007fd455 in constraints_satisfied_p (t=t@entry=0x7fffdaffbca0,
args=args@entry=0x7fffdaffbcc0) at ../../gcc/gcc/cp/constraint.cc:2069
#32 0x00000000006718e5 in do_auto_deduction (type=type@entry=0x7ffff57531f8,
init=init@entry=0x7fffdaffbc80, auto_node=auto_node@entry=0x7ffff599f738, 
    complain=complain@entry=0, context=context@entry=adc_requirement) at
../../gcc/gcc/cp/pt.c:23055
#33 0x00000000007fbda6 in (anonymous
namespace)::satisfy_argument_deduction_constraint (complain=0, in_decl=0x0,
args=0x7fffdaffb540, t=<optimized out>)
    at ../../gcc/gcc/cp/constraint.cc:1803
#34 (anonymous namespace)::satisfy_constraint_1 (t=<optimized out>,
args=args@entry=0x7fffdaffb540, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1910
#35 0x00000000007fbdfc in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffb540, t=0x7fffdaffd438) at
../../gcc/gcc/cp/constraint.cc:1859
#36 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffd438,
args=args@entry=0x7fffdaffb540, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#37 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffb540, t=0x7fffdaffd460) at
../../gcc/gcc/cp/constraint.cc:1856
#38 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffd460,
args=args@entry=0x7fffdaffb540, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#39 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffb540, t=0x7fffdaffd4b0) at
../../gcc/gcc/cp/constraint.cc:1856
#40 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffd4b0,
args=args@entry=0x7fffdaffb540, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#41 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffb540, t=0x7fffdaffd4d8) at
../../gcc/gcc/cp/constraint.cc:1856
#42 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffd4d8,
args=args@entry=0x7fffdaffb540, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#43 0x00000000007fbcdc in (anonymous
namespace)::satisfy_parameterized_constraint (complain=0, in_decl=0x0,
args=0x7fffdaffb540, t=0x7fffdaffd500)
    at ../../gcc/gcc/cp/constraint.cc:1841
#44 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffd500,
args=args@entry=0x7fffdaffb540, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1916
#45 0x00000000007fbdfc in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffb540, t=0x7fffdaffd528) at
../../gcc/gcc/cp/constraint.cc:1859
#46 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffd528,
args=args@entry=0x7fffdaffb540, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#47 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaffb540, t=0x7fffdaffd5a0) at
../../gcc/gcc/cp/constraint.cc:1856
#48 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffd5a0,
args=args@entry=0x7fffdaffb540, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#49 0x00000000007fbcdc in (anonymous
namespace)::satisfy_parameterized_constraint (complain=0, in_decl=0x0,
args=0x7fffdaffb540, t=0x7fffdaffd5c8)
    at ../../gcc/gcc/cp/constraint.cc:1841
#50 (anonymous namespace)::satisfy_constraint_1 (t=t@entry=0x7fffdaffd5c8,
args=0x7fffdaffb540, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1916
#51 0x00000000007fc1d7 in (anonymous namespace)::satisfy_constraint
(t=0x7fffdaffd5c8, args=<optimized out>) at ../../gcc/gcc/cp/constraint.cc:1949
#52 0x00000000007fd455 in constraints_satisfied_p (t=t@entry=0x7fffdaffb520,
args=args@entry=0x7fffdaffb540) at ../../gcc/gcc/cp/constraint.cc:2069
#53 0x00000000006718e5 in do_auto_deduction (type=type@entry=0x7ffff57531f8,
init=init@entry=0x7fffdaffb500, auto_node=auto_node@entry=0x7ffff599f738, 
    complain=complain@entry=0, context=context@entry=adc_requirement) at
../../gcc/gcc/cp/pt.c:23055
#54 0x00000000007fbda6 in (anonymous
namespace)::satisfy_argument_deduction_constraint (complain=0, in_decl=0x0,
args=0x7fffdaff8dc0, t=<optimized out>)
    at ../../gcc/gcc/cp/constraint.cc:1803
#55 (anonymous namespace)::satisfy_constraint_1 (t=<optimized out>,
args=args@entry=0x7fffdaff8dc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1910
#56 0x00000000007fbdfc in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaff8dc0, t=0x7fffdaffa9b0) at
../../gcc/gcc/cp/constraint.cc:1859
#57 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffa9b0,
args=args@entry=0x7fffdaff8dc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#58 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaff8dc0, t=0x7fffdaffa9d8) at
../../gcc/gcc/cp/constraint.cc:1856
#59 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffa9d8,
args=args@entry=0x7fffdaff8dc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#60 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaff8dc0, t=0x7fffdaffaa28) at
../../gcc/gcc/cp/constraint.cc:1856
#61 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffaa28,
args=args@entry=0x7fffdaff8dc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#62 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaff8dc0, t=0x7fffdaffaa50) at
../../gcc/gcc/cp/constraint.cc:1856
#63 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffaa50,
args=args@entry=0x7fffdaff8dc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#64 0x00000000007fbcdc in (anonymous
namespace)::satisfy_parameterized_constraint (complain=0, in_decl=0x0,
args=0x7fffdaff8dc0, t=0x7fffdaffaa78)
    at ../../gcc/gcc/cp/constraint.cc:1841
#65 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffaa78,
args=args@entry=0x7fffdaff8dc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1916
#66 0x00000000007fbdfc in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaff8dc0, t=0x7fffdaffaaa0) at
../../gcc/gcc/cp/constraint.cc:1859
#67 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffaaa0,
args=args@entry=0x7fffdaff8dc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#68 0x00000000007fb866 in (anonymous namespace)::satisfy_conjunction
(complain=0, in_decl=0x0, args=0x7fffdaff8dc0, t=0x7fffdaffab18) at
../../gcc/gcc/cp/constraint.cc:1856
#69 (anonymous namespace)::satisfy_constraint_1 (t=0x7fffdaffab18,
args=args@entry=0x7fffdaff8dc0, in_decl=0x0, complain=0) at
../../gcc/gcc/cp/constraint.cc:1919
#70 0x00000000007fbcdc in (anonymous
namespace)::satisfy_parameterized_constraint (complain=0, in_decl=0x0,
args=0x7fffdaff8dc0, t=0x7fffdaffab40)
...

Reducing.

[Bug c++/67595] concepts code causes segfault

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=67595

--- Comment #2 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
template <class X> concept bool allocatable = requires{ { new X }->X * };
template <class X> concept bool semiregular = allocatable<X>;
template <class X> concept bool readable = requires{ requires semiregular<X> };
template <class X> int weak_input_iterator = requires (X x){ { x }->readable };
template <class X> concept bool input_iterator{ weak_input_iterator<X> };
template <class X>
concept bool forward_iterator = requires{ requires input_iterator<X> };
template <class X>
concept bool bidirectional_iterator = requires{ requires forward_iterator<X> };
template <class X>
concept bool random_access_iterator
    = requires{ requires bidirectional_iterator<X> };
void fn1 (random_access_iterator);
int
main ()
{
  int v;
  fn1 (v);
}

[Bug c++/67595] concepts code causes segfault

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=67595

--- Comment #3 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
Or even more:

template <class X> concept bool allocatable = requires{{new X}->X * };
template <class X> concept bool semiregular = allocatable<X>;
template <class X> concept bool readable = requires{requires semiregular<X>};
template <class> int weak_input_iterator = requires{{0}->readable};
template <class X> bool input_iterator{weak_input_iterator<X>};
template <class X> bool forward_iterator{input_iterator<X>};
template <class X> bool bidirectional_iterator{forward_iterator<X>};
template <class X>
concept bool random_access_iterator{bidirectional_iterator<X>};
void fn1(random_access_iterator);
int main() { fn1(0); }