<html>
<head>
<base href="https://bugs.llvm.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - Crash in clang::ento::FindUninitializedFields::isNonUnionUninit on vector members"
href="https://bugs.llvm.org/show_bug.cgi?id=41611">41611</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Crash in clang::ento::FindUninitializedFields::isNonUnionUninit on vector members
</td>
</tr>
<tr>
<th>Product</th>
<td>clang
</td>
</tr>
<tr>
<th>Version</th>
<td>trunk
</td>
</tr>
<tr>
<th>Hardware</th>
<td>All
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>enhancement
</td>
</tr>
<tr>
<th>Priority</th>
<td>P
</td>
</tr>
<tr>
<th>Component</th>
<td>Static Analyzer
</td>
</tr>
<tr>
<th>Assignee</th>
<td>dcoughlin@apple.com
</td>
</tr>
<tr>
<th>Reporter</th>
<td>gribozavr@gmail.com
</td>
</tr>
<tr>
<th>CC</th>
<td>dcoughlin@apple.com, llvm-bugs@lists.llvm.org
</td>
</tr></table>
<p>
<div>
<pre>At SVN r359290:
$ cat /tmp/t.cc
struct SimdVec {
SimdVec() {}
__attribute__((__vector_size__(16))) long x;
};
void entry() {
SimdVec v;
}
$ ./bin/clang-tidy -checks="-*,clang-analyzer*" /tmp/t.cc
UNREACHABLE executed at
llvm-project/clang/lib/StaticAnalyzer/Checkers/UninitializedObject/UninitializedObjectChecker.cpp:347!
#0 0x000000000067f4f4 PrintStackTraceSignalHandler(void*)
(./bin/clang-tidy+0x67f4f4)
#1 0x000000000067d28c llvm::sys::RunSignalHandlers()
(./bin/clang-tidy+0x67d28c)
#2 0x000000000067fa38 SignalHandler(int) (./bin/clang-tidy+0x67fa38)
#3 0x00007f68a65b40c0 __restore_rt
(/lib/x86_64-linux-gnu/libpthread.so.0+0x110c0)
#4 0x00007f68a513efcf raise (/lib/x86_64-linux-gnu/libc.so.6+0x32fcf)
#5 0x00007f68a51403fa abort (/lib/x86_64-linux-gnu/libc.so.6+0x343fa)
#6 0x000000000062e691 (./bin/clang-tidy+0x62e691)
#7 0x0000000000d2e87e
clang::ento::FindUninitializedFields::isNonUnionUninit(clang::ento::TypedValueRegion
const*, clang::ento::FieldChainInfo) (./bin/clang-tidy+0xd2e87e)
#8 0x0000000000d2e308
clang::ento::FindUninitializedFields::FindUninitializedFields(llvm::IntrusiveRefCntPtr<clang::ento::ProgramState
const>, clang::ento::TypedValueRegion const*,
clang::ento::UninitObjCheckerOptions const&) (./bin/clang-tidy+0xd2e308)
#9 0x0000000000d35bc8 void
clang::ento::check::EndFunction::_checkEndFunction<(anonymous
namespace)::UninitializedObjectChecker>(void*, clang::ReturnStmt const*,
clang::ento::CheckerContext&) (./bin/clang-tidy+0xd35bc8)
#10 0x0000000000d7edd9
clang::ento::CheckerManager::runCheckersForEndFunction(clang::ento::NodeBuilderContext&,
clang::ento::ExplodedNodeSet&, clang::ento::ExplodedNode*,
clang::ento::ExprEngine&, clang::ReturnStmt const*) (./bin/clang-tidy+0xd7edd9)
#11 0x0000000000d9ecd8
clang::ento::ExprEngine::processEndOfFunction(clang::ento::NodeBuilderContext&,
clang::ento::ExplodedNode*, clang::ReturnStmt const*)
(./bin/clang-tidy+0xd9ecd8)
#12 0x0000000000d863ff
clang::ento::CoreEngine::HandleBlockEdge(clang::BlockEdge const&,
clang::ento::ExplodedNode*) (./bin/clang-tidy+0xd863ff)
#13 0x0000000000d85dcd
clang::ento::CoreEngine::dispatchWorkItem(clang::ento::ExplodedNode*,
clang::ProgramPoint, clang::ento::WorkListUnit const&)
(./bin/clang-tidy+0xd85dcd)
#14 0x0000000000d8599b
clang::ento::CoreEngine::ExecuteWorkList(clang::LocationContext const*,
unsigned int, llvm::IntrusiveRefCntPtr<clang::ento::ProgramState const>)
(./bin/clang-tidy+0xd8599b)
#15 0x0000000000b2ce87 (anonymous
namespace)::AnalysisConsumer::HandleCode(clang::Decl*, unsigned int,
clang::ento::ExprEngine::InliningModes, llvm::DenseSet<clang::Decl const*,
llvm::DenseMapInfo<clang::Decl const*> >*) (./bin/clang-tidy+0xb2ce87)
#16 0x0000000000b25a05 (anonymous
namespace)::AnalysisConsumer::HandleTranslationUnit(clang::ASTContext&)
(./bin/clang-tidy+0xb25a05)
#17 0x0000000000f152cc
clang::MultiplexConsumer::HandleTranslationUnit(clang::ASTContext&)
(./bin/clang-tidy+0xf152cc)
#18 0x000000000106eba3 clang::ParseAST(clang::Sema&, bool, bool)
(./bin/clang-tidy+0x106eba3)
#19 0x0000000000efd370 clang::FrontendAction::Execute()
(./bin/clang-tidy+0xefd370)
#20 0x0000000000ea21f1
clang::CompilerInstance::ExecuteAction(clang::FrontendAction&)
(./bin/clang-tidy+0xea21f1)
#21 0x0000000000a04906
clang::tooling::FrontendActionFactory::runInvocation(std::shared_ptr<clang::CompilerInvocation>,
clang::FileManager*, std::shared_ptr<clang::PCHContainerOperations>,
clang::DiagnosticConsumer*) (./bin/clang-tidy+0xa04906)
#22 0x00000000006897c5
clang::tidy::runClangTidy(clang::tidy::ClangTidyContext&,
clang::tooling::CompilationDatabase const&,
llvm::ArrayRef<std::__cxx11::basic_string<char, std::char_traits<char>,
std::allocator<char> > >,
llvm::IntrusiveRefCntPtr<llvm::vfs::OverlayFileSystem>, bool,
llvm::StringRef)::ActionFactory::runInvocation(std::shared_ptr<clang::CompilerInvocation>,
clang::FileManager*, std::shared_ptr<clang::PCHContainerOperations>,
clang::DiagnosticConsumer*) (./bin/clang-tidy+0x6897c5)
#23 0x0000000000a04676 clang::tooling::ToolInvocation::runInvocation(char
const*, clang::driver::Compilation*,
std::shared_ptr<clang::CompilerInvocation>,
std::shared_ptr<clang::PCHContainerOperations>) (./bin/clang-tidy+0xa04676)
#24 0x0000000000a03f27 clang::tooling::ToolInvocation::run()
(./bin/clang-tidy+0xa03f27)
#25 0x0000000000a05dae
clang::tooling::ClangTool::run(clang::tooling::ToolAction*)
(./bin/clang-tidy+0xa05dae)
#26 0x00000000006860b3
clang::tidy::runClangTidy(clang::tidy::ClangTidyContext&,
clang::tooling::CompilationDatabase const&,
llvm::ArrayRef<std::__cxx11::basic_string<char, std::char_traits<char>,
std::allocator<char> > >,
llvm::IntrusiveRefCntPtr<llvm::vfs::OverlayFileSystem>, bool, llvm::StringRef)
(./bin/clang-tidy+0x6860b3)
#27 0x0000000000431b7d clang::tidy::clangTidyMain(int, char const**)
(./bin/clang-tidy+0x431b7d)
#28 0x00007f68a512c2b1 __libc_start_main
(/lib/x86_64-linux-gnu/libc.so.6+0x202b1)
#29 0x000000000042fc5a _start (./bin/clang-tidy+0x42fc5a)
Aborted</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are on the CC list for the bug.</li>
</ul>
</body>
</html>