<html>
<head>
<base href="https://llvm.org/bugs/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW --- - core assertion failure (`state' in void {anonymous}::VLASizeChecker::checkPreStmt())"
href="https://llvm.org/bugs/show_bug.cgi?id=28450">28450</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>core assertion failure (`state' in void {anonymous}::VLASizeChecker::checkPreStmt())
</td>
</tr>
<tr>
<th>Product</th>
<td>clang
</td>
</tr>
<tr>
<th>Version</th>
<td>trunk
</td>
</tr>
<tr>
<th>Hardware</th>
<td>PC
</td>
</tr>
<tr>
<th>OS</th>
<td>Linux
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>normal
</td>
</tr>
<tr>
<th>Priority</th>
<td>P
</td>
</tr>
<tr>
<th>Component</th>
<td>Static Analyzer
</td>
</tr>
<tr>
<th>Assignee</th>
<td>kremenek@apple.com
</td>
</tr>
<tr>
<th>Reporter</th>
<td>bagnara@cs.unipr.it
</td>
</tr>
<tr>
<th>CC</th>
<td>llvm-bugs@lists.llvm.org
</td>
</tr>
<tr>
<th>Classification</th>
<td>Unclassified
</td>
</tr></table>
<p>
<div>
<pre>Created <span class=""><a href="attachment.cgi?id=16707" name="attach_16707" title="Testcase (from GCC testsuite) allowing to reproduce the failure.">attachment 16707</a> <a href="attachment.cgi?id=16707&action=edit" title="Testcase (from GCC testsuite) allowing to reproduce the failure.">[details]</a></span>
Testcase (from GCC testsuite) allowing to reproduce the failure.
$ ~/llvm-build/bin/clang -cc1 -analyze -analyzer-checker=core 20040811-1.c
clang:
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Checkers/VLASizeChecker.cpp:176:
void {anonymous}::VLASizeChecker::checkPreStmt(const clang::DeclStmt*,
clang::ento::CheckerContext&) const: Assertion `state' failed.
#0 0x000000000304f1c1 llvm::sys::PrintStackTrace(llvm::raw_ostream&)
/home/roberto/llvm/lib/Support/Unix/Signals.inc:402:0
#1 0x000000000304f51c PrintStackTraceSignalHandler(void*)
/home/roberto/llvm/lib/Support/Unix/Signals.inc:470:0
#2 0x000000000304d7f2 llvm::sys::RunSignalHandlers()
/home/roberto/llvm/lib/Support/Signals.cpp:44:0
#3 0x000000000304eb39 SignalHandler(int)
/home/roberto/llvm/lib/Support/Unix/Signals.inc:256:0
#4 0x00007fdae9a72330 __restore_rt
(/lib/x86_64-linux-gnu/libpthread.so.0+0x10330)
#5 0x00007fdae885ec37 gsignal
/build/eglibc-oGUzwX/eglibc-2.19/signal/../nptl/sysdeps/unix/sysv/linux/raise.c:56:0
#6 0x00007fdae8862028 abort
/build/eglibc-oGUzwX/eglibc-2.19/stdlib/abort.c:91:0
#7 0x00007fdae8857bf6 __assert_fail_base
/build/eglibc-oGUzwX/eglibc-2.19/assert/assert.c:92:0
#8 0x00007fdae8857ca2 (/lib/x86_64-linux-gnu/libc.so.6+0x2fca2)
#9 0x0000000005110ef7 (anonymous
namespace)::VLASizeChecker::checkPreStmt(clang::DeclStmt const*,
clang::ento::CheckerContext&) const
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Checkers/VLASizeChecker.cpp:179:0
#10 0x000000000511125c void
clang::ento::check::PreStmt<clang::DeclStmt>::_checkStmt<(anonymous
namespace)::VLASizeChecker>(void*, clang::Stmt const*,
clang::ento::CheckerContext&)
/home/roberto/llvm/tools/clang/include/clang/StaticAnalyzer/Core/Checker.h:86:0
#11 0x00000000051b2696 clang::ento::CheckerFn<void (clang::Stmt const*,
clang::ento::CheckerContext&)>::operator()(clang::Stmt const*,
clang::ento::CheckerContext&) const
/home/roberto/llvm/tools/clang/include/clang/StaticAnalyzer/Core/CheckerManager.h:60:0
#12 0x00000000051acc20 (anonymous
namespace)::CheckStmtContext::runChecker(clang::ento::CheckerFn<void
(clang::Stmt const*, clang::ento::CheckerContext&)>, clang::ento::NodeBuilder&,
clang::ento::ExplodedNode*)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Core/CheckerManager.cpp:161:0
#13 0x00000000051af44f void expandGraphWithCheckers<(anonymous
namespace)::CheckStmtContext>((anonymous namespace)::CheckStmtContext,
clang::ento::ExplodedNodeSet&, clang::ento::ExplodedNodeSet const&)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Core/CheckerManager.cpp:121:0
#14 0x00000000051accd0 clang::ento::CheckerManager::runCheckersForStmt(bool,
clang::ento::ExplodedNodeSet&, clang::ento::ExplodedNodeSet const&, clang::Stmt
const*, clang::ento::ExprEngine&, bool)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Core/CheckerManager.cpp:175:0
#15 0x00000000051e49c2
clang::ento::CheckerManager::runCheckersForPreStmt(clang::ento::ExplodedNodeSet&,
clang::ento::ExplodedNodeSet const&, clang::Stmt const*,
clang::ento::ExprEngine&)
/home/roberto/llvm/tools/clang/include/clang/StaticAnalyzer/Core/CheckerManager.h:192:0
#16 0x00000000051f8560 clang::ento::ExprEngine::VisitDeclStmt(clang::DeclStmt
const*, clang::ento::ExplodedNode*, clang::ento::ExplodedNodeSet&)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Core/ExprEngineC.cpp:489:0
#17 0x00000000051dca18 clang::ento::ExprEngine::Visit(clang::Stmt const*,
clang::ento::ExplodedNode*, clang::ento::ExplodedNodeSet&)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Core/ExprEngine.cpp:1200:0
#18 0x00000000051d9034 clang::ento::ExprEngine::ProcessStmt(clang::CFGStmt,
clang::ento::ExplodedNode*)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Core/ExprEngine.cpp:449:0
#19 0x00000000051d8382
clang::ento::ExprEngine::processCFGElement(clang::CFGElement,
clang::ento::ExplodedNode*, unsigned int, clang::ento::NodeBuilderContext*)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Core/ExprEngine.cpp:297:0
#20 0x00000000051c74d1 clang::ento::CoreEngine::HandlePostStmt(clang::CFGBlock
const*, unsigned int, clang::ento::ExplodedNode*)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Core/CoreEngine.cpp:522:0
#21 0x00000000051c64be
clang::ento::CoreEngine::dispatchWorkItem(clang::ento::ExplodedNode*,
clang::ProgramPoint, clang::ento::WorkListUnit const&)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Core/CoreEngine.cpp:280:0
#22 0x00000000051c609e
clang::ento::CoreEngine::ExecuteWorkList(clang::LocationContext const*,
unsigned int, llvm::IntrusiveRefCntPtr<clang::ento::ProgramState const>)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Core/CoreEngine.cpp:217:0
#23 0x00000000043f22c2
clang::ento::ExprEngine::ExecuteWorkList(clang::LocationContext const*,
unsigned int)
/home/roberto/llvm/tools/clang/include/clang/StaticAnalyzer/Core/PathSensitive/ExprEngine.h:109:0
#24 0x00000000043bb65c (anonymous
namespace)::AnalysisConsumer::ActionExprEngine(clang::Decl*, bool,
clang::ento::ExprEngine::InliningModes, llvm::DenseSet<clang::Decl const*,
llvm::DenseMapInfo<clang::Decl const*> >*)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Frontend/AnalysisConsumer.cpp:668:0
#25 0x00000000043bb77c (anonymous
namespace)::AnalysisConsumer::RunPathSensitiveChecks(clang::Decl*,
clang::ento::ExprEngine::InliningModes, llvm::DenseSet<clang::Decl const*,
llvm::DenseMapInfo<clang::Decl const*> >*)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Frontend/AnalysisConsumer.cpp:685:0
#26 0x00000000043bb43e (anonymous
namespace)::AnalysisConsumer::HandleCode(clang::Decl*, unsigned int,
clang::ento::ExprEngine::InliningModes, llvm::DenseSet<clang::Decl const*,
llvm::DenseMapInfo<clang::Decl const*> >*)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Frontend/AnalysisConsumer.cpp:632:0
#27 0x00000000043baaae (anonymous
namespace)::AnalysisConsumer::HandleDeclsCallGraph(unsigned int)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Frontend/AnalysisConsumer.cpp:498:0
#28 0x00000000043bae71 (anonymous
namespace)::AnalysisConsumer::HandleTranslationUnit(clang::ASTContext&)
/home/roberto/llvm/tools/clang/lib/StaticAnalyzer/Frontend/AnalysisConsumer.cpp:549:0
#29 0x00000000044413f6 clang::ParseAST(clang::Sema&, bool, bool)
/home/roberto/llvm/tools/clang/lib/Parse/ParseAST.cpp:169:0
#30 0x00000000037712d2 clang::ASTFrontendAction::ExecuteAction()
/home/roberto/llvm/tools/clang/lib/Frontend/FrontendAction.cpp:558:0
#31 0x0000000003770d97 clang::FrontendAction::Execute()
/home/roberto/llvm/tools/clang/lib/Frontend/FrontendAction.cpp:461:0
#32 0x0000000003722802
clang::CompilerInstance::ExecuteAction(clang::FrontendAction&)
/home/roberto/llvm/tools/clang/lib/Frontend/CompilerInstance.cpp:877:0
#33 0x000000000386cffb
clang::ExecuteCompilerInvocation(clang::CompilerInstance*)
/home/roberto/llvm/tools/clang/lib/FrontendTool/ExecuteCompilerInvocation.cpp:241:0
#34 0x00000000017f3d8b cc1_main(llvm::ArrayRef<char const*>, char const*,
void*) /home/roberto/llvm/tools/clang/tools/driver/cc1_main.cpp:116:0
#35 0x00000000017ea400 ExecuteCC1Tool(llvm::ArrayRef<char const*>,
llvm::StringRef) /home/roberto/llvm/tools/clang/tools/driver/driver.cpp:301:0
#36 0x00000000017eaef9 main
/home/roberto/llvm/tools/clang/tools/driver/driver.cpp:382:0
#37 0x00007fdae8849f45 __libc_start_main
/build/eglibc-oGUzwX/eglibc-2.19/csu/libc-start.c:321:0
#38 0x00000000017e7de9 _start (/home/roberto/llvm-build/bin/clang+0x17e7de9)
Stack dump:
0. Program arguments: /home/roberto/llvm-build/bin/clang -cc1 -analyze
-analyzer-checker=core 20040811-1.c
1. <eof> parser at end of file
2. While analyzing stack:
#0 int main()
3. 20040811-1.c:11:3: Error evaluating statement
4. 20040811-1.c:11:3: Error evaluating statement
Aborted</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are on the CC list for the bug.</li>
</ul>
</body>
</html>