[Bug sanitizer/91707] [10/11 Regression] spurious stringop-overflow warning with -fsanitize=undefined

[Bug sanitizer/91707] [10/11 Regression] spurious stringop-overflow warning with -fsanitize=undefined

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91707

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|10.0                        |10.2

--- Comment #7 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
GCC 10.1 has been released.

[Bug sanitizer/91707] [10/11 Regression] spurious stringop-overflow warning with -fsanitize=undefined

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91707

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|10.2                        |10.3

--- Comment #8 from Richard Biener <rguenth at gcc dot gnu.org> ---
GCC 10.2 is released, adjusting target milestone.

[Bug sanitizer/91707] [10/11 Regression] spurious stringop-overflow warning with -fsanitize=undefined

[msebor at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91707

Martin Sebor <msebor at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Last reconfirmed|2019-09-09 00:00:00         |2021-1-21
      Known to fail|10.0                        |10.2.0, 11.0

--- Comment #9 from Martin Sebor <msebor at gcc dot gnu.org> ---
No change in GCC 11.

[Bug sanitizer/91707] [10/11 Regression] spurious stringop-overflow warning with -fsanitize=undefined

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91707

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|10.3                        |10.4

--- Comment #10 from Richard Biener <rguenth at gcc dot gnu.org> ---
GCC 10.3 is being released, retargeting bugs to GCC 10.4.

[Bug sanitizer/91707] [10/11/12 Regression] spurious stringop-overflow warning with -fsanitize=undefined

[msebor at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91707

Martin Sebor <msebor at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Last reconfirmed|2021-01-21 00:00:00         |2021-12-15
      Known to fail|11.0                        |11.2.0, 12.0

--- Comment #11 from Martin Sebor <msebor at gcc dot gnu.org> ---
GCC 11 still issues the same -Wstringop-overflow as GCC 10 plus another one for
the call to md_copy_dims():

In function ‘real_from_complex_dims’,
    inlined from ‘md_test’ at pr91707.c:14:4:
pr91707.c:7:13: warning: writing 8 bytes into a region of size 0
[-Wstringop-overflow=]
    7 |    odims[0] = 2;
      |    ~~~~~~~~~^~~
pr91707.c: In function ‘md_test’:
pr91707.c:13:9: note: destination object ‘dimsR.8’ of size 0
   13 |    long dimsR[D + 1];
      |         ^~~~~
In function ‘real_from_complex_dims’,
    inlined from ‘md_test’ at pr91707.c:14:4:
pr91707.c:8:4: warning: ‘md_copy_dims’ accessing 34359738360 bytes in a region
of size 0 [-Wstringop-overflow=]
    8 |    md_copy_dims(D, odims + 1, idims);
      |    ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pr91707.c: In function ‘md_test’:
pr91707.c:8:4: note: referencing argument 2 of type ‘long int *’
pr91707.c:2:13: note: in a call to function ‘md_copy_dims’
    2 | extern void md_copy_dims(unsigned int D, long odims[D], const long
idims[D]);
      |             ^~~~~~~~~~~~

The second warning is for the md_copy_dims() call in the following IL:

  <bb 5> [count: 0]:
  md_copy_dims (4294967295, &MEM <unsigned char[0:18446744073709551615]> [(void
*)&dimsR.8 + 8B], idims_13(D));
  __builtin___ubsan_handle_vla_bound_not_positive (&*.Lubsan_data1, 0);

  <bb 6> [local count: 1073741824]:
  dimsR.8 ={v} {CLOBBER};
  return;

The first warning is gone in GCC 12 and only the second one remains.  It's
triggered by the same md_copy_dims() call with the first argument in excess of
the size of the arrays passed to the function:

  <bb 7> [count: 0]:
  _29 = dimsR.1_23 + 8;
  md_copy_dims (4294967295, _29, idims_13(D));
  __builtin___ubsan_handle_vla_bound_not_positive (&*.Lubsan_data1, 0);

[Bug sanitizer/91707] [10/11/12 Regression] spurious stringop-overflow warning with -fsanitize=undefined

[msebor at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91707

--- Comment #12 from Martin Sebor <msebor at gcc dot gnu.org> ---
Here's a slightly simplified test case for GCC 12:

$ cat z.c && gcc -O2 -S -Wall -fsanitize=undefined z.c
extern void f (unsigned n, long[n], const long[n]);

void g (unsigned n, const long a[n])
{
   long b[n + 1];
   f (n, b + 1, a);

   long c[n + 1];
   (void)c;
}
z.c: In function ‘g’:
z.c:6:4: warning: ‘f’ accessing 34359738360 bytes in a region of size 0
[-Wstringop-overflow=]
    6 |    f (n, b + 1, a);
      |    ^~~~~~~~~~~~~~~
z.c:6:4: note: referencing argument 2 of type ‘long int[]’
z.c:6:4: note: referencing argument 3 of type ‘const long int[]’
z.c:1:13: note: in a call to function ‘f’
    1 | extern void f (unsigned n, long[n], const long[n]);
      |             ^

[Bug sanitizer/91707] [10/11/12/13 Regression] spurious stringop-overflow warning with -fsanitize=undefined

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91707

Jakub Jelinek <jakub at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|10.4                        |10.5

--- Comment #13 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
GCC 10.4 is being released, retargeting bugs to GCC 10.5.

[Bug sanitizer/91707] [11/12/13/14 Regression] spurious stringop-overflow warning with -fsanitize=undefined

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=91707

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|10.5                        |11.5

--- Comment #14 from Richard Biener <rguenth at gcc dot gnu.org> ---
GCC 10 branch is being closed.