[Bug analyzer/97233] New: [11 Regression] ICE in deref_rvalue, at analyzer/region-model.cc:1465

[Bug analyzer/97233] New: [11 Regression] ICE in deref_rvalue, at analyzer/region-model.cc:1465

[asolokha at gmx dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97233

            Bug ID: 97233
           Summary: [11 Regression] ICE in deref_rvalue, at
                    analyzer/region-model.cc:1465
           Product: gcc
           Version: 11.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: analyzer
          Assignee: dmalcolm at gcc dot gnu.org
          Reporter: asolokha at gmx dot com
  Target Milestone: ---

gcc-11.0.0-alpha20200927 snapshot (g:e24817aa7a1c6d12039b486ab5ea9b5ee0a46cd4)
ICEs when compiling the following testcase w/ -fanalyzer:

void
longjmp (__SIZE_TYPE__, int);

void
e7 (__SIZE_TYPE__ gr)
{
  longjmp (gr, 1);
}

% gcc-11.0.0 -fanalyzer -c tdkztnou.c
during IPA pass: analyzer
tdkztnou.c: In function 'e7':
tdkztnou.c:7:3: internal compiler error: in deref_rvalue, at
analyzer/region-model.cc:1465
    7 |   longjmp (gr, 1);
      |   ^~~~~~~~~~~~~~~
0x7345b8 ana::region_model::deref_rvalue(ana::svalue const*, tree_node*,
ana::region_model_context*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200927/work/gcc-11-20200927/gcc/analyzer/region-model.cc:1465
0x1128c06 ana::exploded_node::on_longjmp(ana::exploded_graph&, gcall const*,
ana::program_state*, ana::region_model_context*) const
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200927/work/gcc-11-20200927/gcc/analyzer/engine.cc:1283
0x1129383 ana::exploded_node::on_stmt(ana::exploded_graph&, ana::supernode
const*, gimple const*, ana::program_state*) const
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200927/work/gcc-11-20200927/gcc/analyzer/engine.cc:1133
0x112ae65 ana::exploded_graph::process_node(ana::exploded_node*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200927/work/gcc-11-20200927/gcc/analyzer/engine.cc:2811
0x112b94a ana::exploded_graph::process_worklist()
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200927/work/gcc-11-20200927/gcc/analyzer/engine.cc:2446
0x112da6d ana::impl_run_checkers(ana::logger*)
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200927/work/gcc-11-20200927/gcc/analyzer/engine.cc:4498
0x112e8bc ana::run_checkers()
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200927/work/gcc-11-20200927/gcc/analyzer/engine.cc:4569
0x1121e38 execute
       
/var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200927/work/gcc-11-20200927/gcc/analyzer/analyzer-pass.cc:84

[Bug analyzer/97233] [11 Regression] ICE in deref_rvalue, at analyzer/region-model.cc:1465

[cvs-commit at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97233

--- Comment #1 from CVS Commits <cvs-commit at gcc dot gnu.org> ---
The master branch has been updated by David Malcolm <dmalcolm@gcc.gnu.org>:

https://gcc.gnu.org/g:01eabbeadb645959d5dcb0f00f41c3565a8f54f1

commit r11-3512-g01eabbeadb645959d5dcb0f00f41c3565a8f54f1
Author: David Malcolm <dmalcolm@redhat.com>
Date:   Mon Sep 28 15:42:31 2020 -0400

    analyzer: fix ICE on non-pointer longjmp [PR97233]

    gcc/analyzer/ChangeLog:
            PR analyzer/97233
            * analyzer.cc (is_longjmp_call_p): Require the initial argument
            to be a pointer.
            * engine.cc (exploded_node::on_longjmp): Likewise.

    gcc/testsuite/ChangeLog:
            PR analyzer/97233
            * gcc.dg/analyzer/pr97233.c: New test.

[Bug analyzer/97233] [11 Regression] ICE in deref_rvalue, at analyzer/region-model.cc:1465

[dmalcolm at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97233

David Malcolm <dmalcolm at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |FIXED

--- Comment #2 from David Malcolm <dmalcolm at gcc dot gnu.org> ---
Thanks for filing this bug.  It should be fixed by the above commit.

[Bug analyzer/97233] [11 Regression] ICE in deref_rvalue, at analyzer/region-model.cc:1465

[pinskia at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=97233

Andrew Pinski <pinskia at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |ice-on-valid-code
   Target Milestone|---                         |11.0