[LLVMbugs] [Bug 7760] New: Segfault, bus error with -libcall-aa

[bugzilla-daemon at llvm.org]

http://llvm.org/bugs/show_bug.cgi?id=7760

           Summary: Segfault, bus error with -libcall-aa
           Product: new-bugs
           Version: 2.6
          Platform: PC
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P
         Component: new bugs
        AssignedTo: unassignedbugs at nondot.org
        ReportedBy: collinwinter at google.com
                CC: llvmbugs at cs.uiuc.edu, nlewycky at google.com


Created an attachment (id=5293)
 --> (http://llvm.org/bugs/attachment.cgi?id=5293)
Reduced test case for LICM error

I've found a bunch of problems in -libcall-aa. I know it's not enabled in any
of the standard opt pipelines, but I wanted to report them anyway. I've tested
this as of r109867.


Running `opt llvm-segfault.ll -libcall-aa -sink -jump-threading -o /dev/null`
results in malloc errors and an eventual segfault. Things are too broken for
gdb to be able to give a backtrace.

$ /Users/collinwinter/src/llvm/obj/Release+Debug+Asserts/bin/opt
~/llvm-segfault.ll -libcall-aa -sink -jump-threading -o /dev/null
opt(91528) malloc: *** error for object 0x54f4a6: Non-aligned pointer being
freed
*** set a breakpoint in malloc_error_break to debug
Segmentation fault


Running `opt licm.ll -libcall-aa -licm -o /dev/null` results in the following
stack trace:

0  opt               0x0054e748 llvm::SearchForAddressOfSpecialSymbol(char
const*) + 1048
1  opt               0x0054f4a6 llvm::sys::RemoveFileOnSignal(llvm::sys::Path
const&, std::string*) + 1334
2  libSystem.B.dylib 0x954a92bb _sigtramp + 43
3  libSystem.B.dylib 0xffffffff _sigtramp + 1790274927
4  opt               0x004bd1e9 llvm::createPrintFunctionPass(std::string
const&, llvm::raw_ostream*, bool) + 105
5  opt               0x000a8fec (anonymous
namespace)::LICM::canSinkOrHoistInst(llvm::Instruction&) + 188
6  opt               0x000acc2f (anonymous
namespace)::LICM::SinkRegion(llvm::DomTreeNodeBase<llvm::BasicBlock>*) + 367
7  opt               0x000acb4e (anonymous
namespace)::LICM::SinkRegion(llvm::DomTreeNodeBase<llvm::BasicBlock>*) + 142
8  opt               0x000ad25c (anonymous
namespace)::LICM::runOnLoop(llvm::Loop*, llvm::LPPassManager&) + 1420
9  opt               0x002a5f0c
llvm::LPPassManager::runOnFunction(llvm::Function&) + 1276
10 opt               0x004b652b
llvm::FPPassManager::runOnFunction(llvm::Function&) + 523
11 opt               0x004b66af llvm::FPPassManager::runOnModule(llvm::Module&)
+ 175
12 opt               0x004b5df6 llvm::MPPassManager::runOnModule(llvm::Module&)
+ 566
13 opt               0x004b61c4 llvm::PassManagerImpl::run(llvm::Module&) + 164
14 opt               0x004b62bb llvm::PassManager::run(llvm::Module&) + 27
15 opt               0x0000c714 main + 3156
16 opt               0x000020e6 start + 54
Stack dump:
0.    Program arguments:
/Users/collinwinter/src/llvm/obj/Release+Debug+Asserts/bin/opt
/Users/collinwinter/licm.ll -libcall-aa -licm -o /dev/null 
1.    Running pass 'Function Pass Manager' on module
'/Users/collinwinter/licm.ll'.
2.    Running pass 'Loop Pass Manager' on function
'@_ZN5clang17PartialDiagnostic7StorageD2Ev'
3.    Running pass 'Loop Invariant Code Motion' on basic block '%for.cond'
Bus error

-- 
Configure bugmail: http://llvm.org/bugs/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.