<html>
<head>
<base href="https://bugs.llvm.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - Assertion `NumValues == VTs.NumVTs && "NumValues wasn't wide enough for its operands!"' failed"
href="https://bugs.llvm.org/show_bug.cgi?id=37000">37000</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Assertion `NumValues == VTs.NumVTs && "NumValues wasn't wide enough for its operands!"' failed
</td>
</tr>
<tr>
<th>Product</th>
<td>tools
</td>
</tr>
<tr>
<th>Version</th>
<td>trunk
</td>
</tr>
<tr>
<th>Hardware</th>
<td>PC
</td>
</tr>
<tr>
<th>OS</th>
<td>Linux
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>enhancement
</td>
</tr>
<tr>
<th>Priority</th>
<td>P
</td>
</tr>
<tr>
<th>Component</th>
<td>llc
</td>
</tr>
<tr>
<th>Assignee</th>
<td>unassignedbugs@nondot.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>glider@google.com
</td>
</tr>
<tr>
<th>CC</th>
<td>llvm-bugs@lists.llvm.org
</td>
</tr></table>
<p>
<div>
<pre>Created <span class=""><a href="attachment.cgi?id=20156" name="attach_20156" title="Reproducer">attachment 20156</a> <a href="attachment.cgi?id=20156&action=edit" title="Reproducer">[details]</a></span>
Reproducer
The attached IR piece triggers the following bug in llc (and Clang):
$ llc s_p_i.ll
llc:
/usr/local/google/src/llvm-msan-fix/llvm/include/llvm/CodeGen/SelectionDAGNodes.h:1032:
llvm::SDNode::SDNode(unsigned int, unsigned int, llvm::DebugLoc,
llvm::SDVTList): Assertion `NumValues == VTs.NumVTs && "NumValues wasn't wide
enough for its operands!"' failed.
#0 0x00005629a4e7224a llvm::sys::PrintStackTrace(llvm::raw_ostream&)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1f8d24a)
#1 0x00005629a4e6ff86 llvm::sys::RunSignalHandlers()
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1f8af86)
#2 0x00005629a4e702f5 SignalHandler(int)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1f8b2f5)
#3 0x00007f107e7ba0c0 __restore_rt
(/lib/x86_64-linux-gnu/libpthread.so.0+0x110c0)
#4 0x00007f107d34bfcf gsignal (/lib/x86_64-linux-gnu/libc.so.6+0x32fcf)
#5 0x00007f107d34d3fa abort (/lib/x86_64-linux-gnu/libc.so.6+0x343fa)
#6 0x00007f107d344e37 (/lib/x86_64-linux-gnu/libc.so.6+0x2be37)
#7 0x00007f107d344ee2 (/lib/x86_64-linux-gnu/libc.so.6+0x2bee2)
#8 0x00005629a4cf4a71 llvm::SDNode::SDNode(unsigned int, unsigned int,
llvm::DebugLoc, llvm::SDVTList)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1e0fa71)
#9 0x00005629a4cf4af5 llvm::SDNode* llvm::SelectionDAG::newSDNode<llvm::SDNode,
unsigned int&, unsigned int, llvm::DebugLoc const&, llvm::SDVTList>(unsigned
int&&&, unsigned int&&, llvm::DebugLoc const&&&, llvm::SDVTList&&) (.isra.630)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1e0faf5)
#10 0x00005629a4d191ae llvm::SelectionDAG::getNode(unsigned int, llvm::SDLoc
const&, llvm::SDVTList, llvm::ArrayRef<llvm::SDValue>)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1e341ae)
#11 0x00005629a4d19395
llvm::SelectionDAG::getMergeValues(llvm::ArrayRef<llvm::SDValue>, llvm::SDLoc
const&)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1e34395)
#12 0x00005629a4cca280 llvm::SelectionDAGBuilder::getValueImpl(llvm::Value
const*)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1de5280)
#13 0x00005629a4ccaba2 llvm::SelectionDAGBuilder::getValue(llvm::Value const*)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1de5ba2)
#14 0x00005629a4cd6bef llvm::SelectionDAGBuilder::visitStore(llvm::StoreInst
const&)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1df1bef)
#15 0x00005629a4cf237e llvm::SelectionDAGBuilder::visit(llvm::Instruction
const&)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1e0d37e)
#16 0x00005629a4d3bbef
llvm::SelectionDAGISel::SelectBasicBlock(llvm::ilist_iterator<llvm::ilist_detail::node_options<llvm::Instruction,
true, false, void>, false, true>,
llvm::ilist_iterator<llvm::ilist_detail::node_options<llvm::Instruction, true,
false, void>, false, true>, bool&)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1e56bef)
#17 0x00005629a4d4066a
llvm::SelectionDAGISel::SelectAllBasicBlocks(llvm::Function const&)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1e5b66a)
#18 0x00005629a4d42593
llvm::SelectionDAGISel::runOnMachineFunction(llvm::MachineFunction&)
(.part.887)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1e5d593)
#19 0x00005629a407b924 (anonymous
namespace)::X86DAGToDAGISel::runOnMachineFunction(llvm::MachineFunction&)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1196924)
#20 0x00005629a457d755
llvm::MachineFunctionPass::runOnFunction(llvm::Function&)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x1698755)
#21 0x00005629a48ddbd9 llvm::FPPassManager::runOnFunction(llvm::Function&)
(/usr/local/google/src/llvm-msan-fix/llvm/llvm_cmake_build/bin//llc+0x19f8bd9)
The bug goes away if I change the array size from 65536 to e.g. 32768.
A similar bug has also been reported by oss-fuzz:
<a href="https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6716">https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6716</a></pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are on the CC list for the bug.</li>
</ul>
</body>
</html>