<html>
<head>
<base href="http://llvm.org/bugs/" />
</head>
<body><span class="vcard"><a class="email" href="mailto:dimitry@andric.com" title="Dimitry Andric <dimitry@andric.com>"> <span class="fn">Dimitry Andric</span></a>
</span> changed
<a class="bz_bug_link
bz_status_REOPENED "
title="REOPENED --- - Bad machine code: MBB exits via unconditional fall-through but its successor differs from its CFG successor"
href="http://llvm.org/bugs/show_bug.cgi?id=21903">bug 21903</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">Status</td>
<td>RESOLVED
</td>
<td>REOPENED
</td>
</tr>
<tr>
<td style="text-align:right;">Resolution</td>
<td>WORKSFORME
</td>
<td>---
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_REOPENED "
title="REOPENED --- - Bad machine code: MBB exits via unconditional fall-through but its successor differs from its CFG successor"
href="http://llvm.org/bugs/show_bug.cgi?id=21903#c3">Comment # 3</a>
on <a class="bz_bug_link
bz_status_REOPENED "
title="REOPENED --- - Bad machine code: MBB exits via unconditional fall-through but its successor differs from its CFG successor"
href="http://llvm.org/bugs/show_bug.cgi?id=21903">bug 21903</a>
from <span class="vcard"><a class="email" href="mailto:dimitry@andric.com" title="Dimitry Andric <dimitry@andric.com>"> <span class="fn">Dimitry Andric</span></a>
</span></b>
<pre>I got very similar crash report for the fontforge port [1], and this results in
a crash, even with trunk r224516. Note that this only happens with assertions
enabled!
The resulting message is very similar, after BB dumps, it gives:
*** Bad machine code: MBB exits via unconditional fall-through but its
successor differs from its CFG successor! ***
- function: SplineIsLinear
- basic block: BB#152 land.end.i573 (0x2b5254f8)
*** Bad machine code: MBB exits via unconditional fall-through but its
successor differs from its CFG successor! ***
- function: SplineIsLinear
- basic block: BB#156 land.end11.i579 (0x2b525644)
*** Bad machine code: MBB exits via unconditional fall-through but its
successor differs from its CFG successor! ***
- function: SplineIsLinear
- basic block: BB#159 if.then17.i588 (0x2b525790)
*** Bad machine code: MBB exits via unconditional fall-through but its
successor differs from its CFG successor! ***
- function: SplineIsLinear
- basic block: BB#160 if.else19.i593 (0x2b5257ec)
*** Bad machine code: MBB exits via unconditional fall-through but its
successor differs from its CFG successor! ***
- function: SplineIsLinear
- basic block: BB#162 if.then27.i600 (0x2b5258a4)
*** Bad machine code: Using an undefined physical register ***
- function: SplineIsLinear
- basic block: BB#163 if.else32.i605 (0x2b525900)
- instruction: FNSTSW16r %AX<imp-def>, %FPSW<imp-use,kill>
- operand 1: %FPSW<imp-use,kill>
fatal error: error in backend: Found 6 machine code errors.
Specifically, the "FNSTSW16r %AX<imp-def>, %FPSW<imp-use,kill>" is precisely
the same as in the Inkscape case. I think this must be some sort of bug in the
(x87) floating point optimization.
I will add a reduced test case after this comment.
[1]
<a href="http://pb2.nyi.freebsd.org/data/head-i386-PR195480-default/2014-12-15_22h55m50s/logs/errors/fontforge-20120731.b_7.log">http://pb2.nyi.freebsd.org/data/head-i386-PR195480-default/2014-12-15_22h55m50s/logs/errors/fontforge-20120731.b_7.log</a></pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are on the CC list for the bug.</li>
</ul>
</body>
</html>