[Bug analyzer/96962] New: [11 Regression] ICE in gimple_call_arg, at gimple.h:3256

[Bug analyzer/96962] New: [11 Regression] ICE in gimple_call_arg, at gimple.h:3256

[asolokha at gmx dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96962

            Bug ID: 96962
           Summary: [11 Regression] ICE in gimple_call_arg, at
                    gimple.h:3256
           Product: gcc
           Version: 11.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: analyzer
          Assignee: dmalcolm at gcc dot gnu.org
          Reporter: asolokha at gmx dot com
  Target Milestone: ---
            Target: x86_64-unknown-linux

gcc-11.0.0-alpha20200906 snapshot (g:23f8b90c401842afcbaa50a7fd3c2f37818f4396)
ICEs when compiling the following testcase w/ -mptwrite -fanalyzer:

void
t5 (unsigned long long b4)
{
  __builtin_ia32_ptwrite64 (b4);
}

% gcc-11.0.0 -mptwrite -fanalyzer -c hr2tho5k.c
during IPA pass: analyzer
hr2tho5k.c: In function 't5':
hr2tho5k.c:4:3: internal compiler error: in gimple_call_arg, at gimple.h:3256
    4 |   __builtin_ia32_ptwrite64 (b4);
      |   ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
0x723b86 gimple_call_arg
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/gimple.h:3256
0x723c82 gimple_call_arg
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/tree.h:3295
0x723c82 ana::call_details::get_arg_tree(unsigned int) const
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/analyzer/region-model-impl-calls.cc:103
0x723c82 ana::call_details::get_arg_svalue(unsigned int) const
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/analyzer/region-model-impl-calls.cc:111
0x723c82 ana::region_model::impl_call_memset(ana::call_details const&)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/analyzer/region-model-impl-calls.cc:284
0x111c7fd ana::region_model::on_call_pre(gcall const*,
ana::region_model_context*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/analyzer/region-model.cc:677
0x10fb2a4 ana::exploded_node::on_stmt(ana::exploded_graph&, ana::supernode
const*, gimple const*, ana::program_state*) const
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/analyzer/engine.cc:1083
0x10fc10d ana::exploded_graph::process_node(ana::exploded_node*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/analyzer/engine.cc:2526
0x10fcbfa ana::exploded_graph::process_worklist()
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/analyzer/engine.cc:2341
0x10fed4f ana::impl_run_checkers(ana::logger*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/analyzer/engine.cc:4107
0x10ff97c ana::run_checkers()
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/analyzer/engine.cc:4175
0x10f42f8 execute
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200906/work/gcc-11-20200906/gcc/analyzer/analyzer-pass.cc:84

[Bug analyzer/96962] [11 Regression] ICE in gimple_call_arg, at gimple.h:3256

[dmalcolm at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96962

David Malcolm <dmalcolm at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |ASSIGNED
   Last reconfirmed|                            |2020-09-07
     Ever confirmed|0                           |1

--- Comment #1 from David Malcolm <dmalcolm at gcc dot gnu.org> ---
Thanks for filing this; confirmed.

[Bug analyzer/96962] [11 Regression] ICE in gimple_call_arg, at gimple.h:3256

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96962

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|---                         |11.0

[Bug analyzer/96962] [11 Regression] ICE in gimple_call_arg, at gimple.h:3256

[cvs-commit at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96962

--- Comment #2 from CVS Commits <cvs-commit at gcc dot gnu.org> ---
The master branch has been updated by David Malcolm <dmalcolm@gcc.gnu.org>:

https://gcc.gnu.org/g:47997a32e63b77ec88a7131a5d540f108c698661

commit r11-3050-g47997a32e63b77ec88a7131a5d540f108c698661
Author: David Malcolm <dmalcolm@redhat.com>
Date:   Mon Sep 7 17:16:37 2020 -0400

    analyzer: fix ICE on machine-specific builtins [PR96962]

    In g:ee7bfbe5eb70a23bbf3a2cedfdcbd2ea1a20c3f2 I added a
      switch (DECL_UNCHECKED_FUNCTION_CODE (callee_fndecl))
    to region_model::on_call_pre guarded by
      fndecl_built_in_p (callee_fndecl).
    I meant to handle only normal built-ins, whereas this
    single-argument overload of fndecl_built_in_p returns true for any
    kind of built-in.

    PR analyzer/96962 reports a case where this matches for a
    machine-specific builtin, leading to an ICE.  Fixed thusly.

    gcc/analyzer/ChangeLog:
            PR analyzer/96962
            * region-model.cc (region_model::on_call_pre): Fix guard on switch
            on built-ins to only consider BUILT_IN_NORMAL, rather than other
            kinds of build-ins.

[Bug analyzer/96962] [11 Regression] ICE in gimple_call_arg, at gimple.h:3256

[dmalcolm at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96962

David Malcolm <dmalcolm at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #3 from David Malcolm <dmalcolm at gcc dot gnu.org> ---
Should be fixed by the above commit.