[Bug analyzer/96644] New: [11 Regression] ICE in get_region_for_unexpected_tree_code, at analyzer/region-model-manager.cc:930

[Bug analyzer/96644] New: [11 Regression] ICE in get_region_for_unexpected_tree_code, at analyzer/region-model-manager.cc:930

[asolokha at gmx dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96644

            Bug ID: 96644
           Summary: [11 Regression] ICE in
                    get_region_for_unexpected_tree_code, at
                    analyzer/region-model-manager.cc:930
           Product: gcc
           Version: 11.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: analyzer
          Assignee: dmalcolm at gcc dot gnu.org
          Reporter: asolokha at gmx dot com
  Target Milestone: ---

gcc-11.0.0-alpha20200816 snapshot (g:c99116aeeb9644ebddec653ee8b19de4d38b65bd)
ICEs when compiling the following testcase w/ -O1 -fanalyzer:

int oh[1];
int *x3;

int *
cm (char *m0)
{
  return oh;
}

void
ek (void)
{
  for (;;)
    {
      char *b2 = 0;

      if (*b2 != 0)
        ++b2;

      x3 = cm (b2);
    }
}

% gcc-11.0.0 -O1 -fanalyzer -c kwnoqaib.c
during IPA pass: analyzer
kwnoqaib.c: In function 'cm':
kwnoqaib.c:7:10: internal compiler error: in
get_region_for_unexpected_tree_code, at analyzer/region-model-manager.cc:930
    7 |   return oh;
      |          ^~
0x7221bf
ana::region_model_manager::get_region_for_unexpected_tree_code(ana::region_model_context*,
tree_node*, dump_location_t const&)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/region-model-manager.cc:930
0x110e6bb ana::region_model::get_lvalue_1(ana::path_var,
ana::region_model_context*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/region-model.cc:960
0x110eaa8 ana::region_model::get_lvalue(ana::path_var,
ana::region_model_context*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/region-model.cc:1055
0x110eaa8 ana::region_model::get_lvalue(tree_node*, ana::region_model_context*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/region-model.cc:1066
0x110eb5a ana::region_model::on_return(greturn const*,
ana::region_model_context*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/region-model.cc:831
0x10ef3de ana::exploded_path::feasible_p(ana::logger*,
ana::feasibility_problem**, ana::engine*, ana::exploded_graph const*) const
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/engine.cc:2940
0x185077c ana::dedupe_winners::add(ana::logger*, shortest_paths<ana::eg_traits,
ana::exploded_path> const&, ana::exploded_graph const*, ana::saved_diagnostic*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/diagnostic-manager.cc:381
0x184e70f ana::diagnostic_manager::emit_saved_diagnostics(ana::exploded_graph
const&)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/diagnostic-manager.cc:518
0x10f6eb4 ana::impl_run_checkers(ana::logger*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/engine.cc:4121
0x10f7aac ana::run_checkers()
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/engine.cc:4175
0x10ec468 execute
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/analyzer-pass.cc:84

[Bug analyzer/96644] [11 Regression] ICE in get_region_for_unexpected_tree_code, at analyzer/region-model-manager.cc:930

[cvs-commit at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96644

--- Comment #1 from CVS Commits <cvs-commit at gcc dot gnu.org> ---
The master branch has been updated by David Malcolm <dmalcolm@gcc.gnu.org>:

https://gcc.gnu.org/g:b00a83047574eb6f8d1e670ad439609125873506

commit r11-2725-gb00a83047574eb6f8d1e670ad439609125873506
Author: David Malcolm <dmalcolm@redhat.com>
Date:   Mon Aug 17 12:30:56 2020 -0400

    analyzer: fix ICE on NULL dereference [PR96644]

    gcc/analyzer/ChangeLog:
            PR analyzer/96644
            * region-model-manager.cc (get_region_for_unexpected_tree_code):
            Handle ctxt being NULL.

    gcc/testsuite/ChangeLog:
            PR analyzer/96644
            * gcc.dg/analyzer/pr96644.c: New test.

[Bug analyzer/96644] [11 Regression] ICE in get_region_for_unexpected_tree_code, at analyzer/region-model-manager.cc:930

[dmalcolm at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96644

David Malcolm <dmalcolm at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|UNCONFIRMED                 |RESOLVED

--- Comment #2 from David Malcolm <dmalcolm at gcc dot gnu.org> ---
Thanks for filing this.  Should be fixed by the above commit.