<html>
<head>
<base href="https://bugs.llvm.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - Crash in ::AddressingModeMatcher::matchOperationAddr(llvm::User*, unsigned int, unsigned int, bool*)"
href="https://bugs.llvm.org/show_bug.cgi?id=35209">35209</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Crash in ::AddressingModeMatcher::matchOperationAddr(llvm::User*, unsigned int, unsigned int, bool*)
</td>
</tr>
<tr>
<th>Product</th>
<td>libraries
</td>
</tr>
<tr>
<th>Version</th>
<td>trunk
</td>
</tr>
<tr>
<th>Hardware</th>
<td>PC
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>enhancement
</td>
</tr>
<tr>
<th>Priority</th>
<td>P
</td>
</tr>
<tr>
<th>Component</th>
<td>Common Code Generator Code
</td>
</tr>
<tr>
<th>Assignee</th>
<td>unassignedbugs@nondot.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>arichardson.kde@gmail.com
</td>
</tr>
<tr>
<th>CC</th>
<td>llvm-bugs@lists.llvm.org
</td>
</tr></table>
<p>
<div>
<pre>After updating my clang checkout I noticed that the FreeBSD kernel compiled for
QEMU MIPS64 didn't boot anymore due to ata_xpt.c being miscompiled. I worked
around the issue by adding a printf() in
<a href="https://github.com/CTSRD-CHERI/cheribsd/commit/44e9de344eebb4dd7f855950f19a895f36d52f91">https://github.com/CTSRD-CHERI/cheribsd/commit/44e9de344eebb4dd7f855950f19a895f36d52f91</a>
. With the latest trunk compiling this file now caused a crash and I managed to
bisect it and found that <a href="https://reviews.llvm.org/rL314794">https://reviews.llvm.org/rL314794</a> was the first
commit exposing this crash.
Crash backtrace:
<span class="quote">> #0 0x0000000003499044 PrintStackTraceSignalHandler(void*) (./bin/clang+0x3499044)
> #1 0x0000000003499396 SignalHandler(int) (./bin/clang+0x3499396)
> #2 0x00007fa9081d1390 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x11390)
> #3 0x0000000002bf3e16 (anonymous namespace)::AddressingModeMatcher::matchOperationAddr(llvm::User*, unsigned int, unsigned int, bool*) (./bin/clang+0x2bf3e16)
> #4 0x0000000002bf3126 (anonymous namespace)::AddressingModeMatcher::matchAddr(llvm::Value*, unsigned int) (./bin/clang+0x2bf3126)
> #5 0x0000000002be8559 (anonymous namespace)::CodeGenPrepare::optimizeMemoryInst(llvm::Instruction*, llvm::Value*, llvm::Type*, unsigned int) (./bin/clang+0x2be8559)
> #6 0x0000000002be12e7 (anonymous namespace)::CodeGenPrepare::optimizeInst(llvm::Instruction*, bool&) (./bin/clang+0x2be12e7)
> #7 0x0000000002bdaaa1 (anonymous namespace)::CodeGenPrepare::runOnFunction(llvm::Function&) (./bin/clang+0x2bdaaa1)
> #8 0x0000000002f9f17f llvm::FPPassManager::runOnFunction(llvm::Function&) (./bin/clang+0x2f9f17f)
> #9 0x0000000002f9f3d3 llvm::FPPassManager::runOnModule(llvm::Module&) (./bin/clang+0x2f9f3d3)
> #10 0x0000000002f9f8d6 llvm::legacy::PassManagerImpl::run(llvm::Module&) (./bin/clang+0x2f9f8d6)
> #11 0x00000000036172cc clang::EmitBackendOutput(clang::DiagnosticsEngine&, clang::HeaderSearchOptions const&, clang::CodeGenOptions const&, clang::TargetOptions const&, clang::LangOptions const&, llvm::DataLayout const&, llvm::Module*, clang::BackendAction, std::unique_ptr<llvm::raw_pwrite_stream, std::default_delete<llvm::raw_pwrite_stream> >) (./bin/clang+0x36172cc)
> #12 0x0000000003b1f7d6 clang::BackendConsumer::HandleTranslationUnit(clang::ASTContext&) (./bin/clang+0x3b1f7d6)
> #13 0x00000000041de596 clang::ParseAST(clang::Sema&, bool, bool) (./bin/clang+0x41de596)
> #14 0x0000000003a8e418 clang::FrontendAction::Execute() (./bin/clang+0x3a8e418)
> #15 0x0000000003a21b71 clang::CompilerInstance::ExecuteAction(clang::FrontendAction&) (./bin/clang+0x3a21b71)
> #16 0x0000000003b19d30 clang::ExecuteCompilerInvocation(clang::CompilerInstance*) (./bin/clang+0x3b19d30)
> #17 0x0000000001f206d6 cc1_main(llvm::ArrayRef<char const*>, char const*, void*) (./bin/clang+0x1f206d6)
> #18 0x0000000001f1eb82 main (./bin/clang+0x1f1eb82)
> #19 0x00007fa906d26830 __libc_start_main /build/glibc-bfm8X4/glibc-2.23/csu/../csu/libc-start.c:325:0
> #20 0x0000000001f1c029 _start (./bin/clang+0x1f1c029)
> Stack dump:
> 0. Program arguments: ./bin/clang -cc1 -internal-isystem /local/scratch/alr48/cheri/build/upstream-llvm-build/lib/clang/6.0.0/include -nostdsysteminc -triple mips64-unknown-freebsd12.0 -emit-obj -mrelocation-model static -ffreestanding -target-cpu mips64 -target-abi n64 -mllvm -mips-ssection-threshold=0 -mllvm -mgpopt -target-linker-version 302.3 -coverage-notes-file /Users/alex/cheri/build/freebsd-mips-build/Users/alex/cheri/freebsd-mips/mips.mips64/sys/MALTA64/ata_xpt.gcno -nostdsysteminc -nobuiltininc -sys-header-deps -D _KERNEL -D HAVE_KERNEL_OPTION_HEADERS -D KERNLOADADDR=0xffffffff80100000 -D __printf__=__freebsd_kprintf__ -O2 -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual -Wundef -Wno-pointer-sign -Wmissing-include-dirs -Wno-unknown-pragmas -Wno-error-tautological-compare -Wno-error-empty-body -Wno-error-parentheses-equality -Wno-error-unused-function -Wno-error-pointer-sign -Wno-error-shift-negative-value -Wno-error-address-of-packed-member -Werror -std=iso9899:1999 -fwrapv -fcolor-diagnostics -vectorize-loops -vectorize-slp -o /dev/null /local/scratch/alr48/cheri/upstream-llvm/tools/clang/test/CodeGen/ata_xpt-bdf4d9-reduce.test.c
> 1. <eof> parser at end of file
> 2. Code generation
> 3. Running pass 'Function Pass Manager' on module '/local/scratch/alr48/cheri/upstream-llvm/tools/clang/test/CodeGen/ata_xpt-bdf4d9-reduce.test.c'.
> 4. Running pass 'CodeGen Prepare' on function '@probestart'
> /home/alr48/bisect-monorepo.sh: line 12: 234626 Segmentation fault (core dumped) ./bin/clang -cc1 -internal-isystem /local/scratch/alr48/cheri/build/upstream-llvm-build/lib/clang/6.0.0/include -nostdsysteminc -triple mips64-unknown-freebsd12.0 -emit-obj -mrelocation-model static -ffreestanding -target-cpu mips64 -target-abi n64 -mllvm -mips-ssection-threshold=0 -mllvm -mgpopt -target-linker-version 302.3 -coverage-notes-file /Users/alex/cheri/build/freebsd-mips-build/Users/alex/cheri/freebsd-mips/mips.mips64/sys/MALTA64/ata_xpt.gcno -nostdsysteminc -nobuiltininc -sys-header-deps -D _KERNEL -D HAVE_KERNEL_OPTION_HEADERS -D KERNLOADADDR=0xffffffff80100000 -D __printf__=__freebsd_kprintf__ -O2 -Wall -Wredundant-decls -Wnested-externs -Wstrict-prototypes -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual -Wundef -Wno-pointer-sign -Wmissing-include-dirs -Wno-unknown-pragmas -Wno-error-tautological-compare -Wno-error-empty-body -Wno-error-parentheses-equality -Wno-error-unused-function -Wno-error-pointer-sign -Wno-error-shift-negative-value -Wno-error-address-of-packed-member -Werror -std=iso9899:1999 -fwrapv -fcolor-diagnostics -vectorize-loops -vectorize-slp -o /dev/null /local/scratch/alr48/cheri/upstream-llvm/tools/clang/test/CodeGen/ata_xpt-bdf4d9-reduce.test.c</span ></pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are on the CC list for the bug.</li>
</ul>
</body>
</html>