[LLVMbugs] [Bug 12965] New: analyzer crashes with SIGSEGV

[bugzilla-daemon at llvm.org]

http://llvm.org/bugs/show_bug.cgi?id=12965

             Bug #: 12965
           Summary: analyzer crashes with SIGSEGV
           Product: clang
           Version: trunk
          Platform: PC
        OS/Version: FreeBSD
            Status: NEW
          Severity: normal
          Priority: P
         Component: Static Analyzer
        AssignedTo: kremenek at apple.com
        ReportedBy: wollman at freebsd.org
                CC: llvmbugs at cs.uiuc.edu
    Classification: Unclassified


Created attachment 8654
  --> http://llvm.org/bugs/attachment.cgi?id=8654
source file demonstrating the crash

Using FreeBSD/amd64 8.3-RELEASE-p1, clang-devel port (trunk r154687), the
analyzer crashes with SIGSEGV on a trivial source file.  GDB session:

wollman at hergotha(321)$ gdb /usr/local/bin/clang
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "amd64-marcel-freebsd"...(no debugging symbols
found)...
(gdb) run -cc1 -triple amd64-portbld-freebsd8.3 -analyze -disable-free
-main-file-name setkerntz.c -analyzer-store=region
-analyzer-opt-analyze-nested-blocks -analyzer-eagerly-assume
-analyzer-ipa=inlining -analyzer-checker=core -analyzer-checker=unix
-analyzer-checker=deadcode
-analyzer-checker=security.insecureAPI.UncheckedReturn
-analyzer-checker=security.insecureAPI.getpw
-analyzer-checker=security.insecureAPI.gets
-analyzer-checker=security.insecureAPI.mktemp
-analyzer-checker=security.insecureAPI.mkstemp
-analyzer-checker=security.insecureAPI.vfork -analyzer-output plist -w
-mrelocation-model static -mdisable-fp-elim -masm-verbose -mconstructor-aliases
-target-cpu x86-64 -target-linker-version 2.15 -momit-leaf-frame-pointer
-resource-dir /usr/local/bin/../lib/clang/3.1 -fmodule-cache-path
/var/tmp/clang-module-cache -fdebug-compilation-dir /home/wollman -ferror-limit
19 -fmessage-length 0 -mstackrealign -fgnu-runtime -fobjc-runtime-has-arc
-fobjc-runtime-has-weak -fobjc-dispatch-method=non-legacy
-fdiagnostics-show-option -analyzer-output=html -o /tmp/scan-build-2012-05-27-1
-x c setkerntz.c
Starting program: /usr/local/bin/clang -cc1 -triple amd64-portbld-freebsd8.3
-analyze -disable-free -main-file-name setkerntz.c -analyzer-store=region
-analyzer-opt-analyze-nested-blocks -analyzer-eagerly-assume
-analyzer-ipa=inlining -analyzer-checker=core -analyzer-checker=unix
-analyzer-checker=deadcode
-analyzer-checker=security.insecureAPI.UncheckedReturn
-analyzer-checker=security.insecureAPI.getpw
-analyzer-checker=security.insecureAPI.gets
-analyzer-checker=security.insecureAPI.mktemp
-analyzer-checker=security.insecureAPI.mkstemp
-analyzer-checker=security.insecureAPI.vfork -analyzer-output plist -w
-mrelocation-model static -mdisable-fp-elim -masm-verbose -mconstructor-aliases
-target-cpu x86-64 -target-linker-version 2.15 -momit-leaf-frame-pointer
-resource-dir /usr/local/bin/../lib/clang/3.1 -fmodule-cache-path
/var/tmp/clang-module-cache -fdebug-compilation-dir /home/wollman -ferror-limit
19 -fmessage-length 0 -mstackrealign -fgnu-runtime -fobjc-runtime-has-arc
-fobjc-runtime-has-weak -fobjc-dispatch-method=non-legacy
-fdiagnostics-show-option -analyzer-output=html -o /tmp/scan-build-2012-05-27-1
-x c setkerntz.c
(no debugging symbols found)...[New LWP 100703]
(no debugging symbols found)...(no debugging symbols found)...(no debugging
symbols found)...(no debugging symbols found)...(no debugging symbols found)...
[New Thread 8034041c0 (LWP 100703/initial thread)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 8034041c0 (LWP 100703/initial thread)]
0x0000000000000000 in ?? ()
(gdb) bt
#0  0x0000000000000000 in ?? ()
#1  0x00000000010115bf in clang::ento::CreateAnalysisConsumer ()
#2  0x0000000001011ec5 in clang::ento::CreateAnalysisConsumer ()
#3  0x0000000000ace2b4 in clang::ParseAST ()
#4  0x0000000000737a43 in clang::ASTFrontendAction::ExecuteAction ()
#5  0x0000000000737b7c in clang::FrontendAction::Execute ()
#6  0x000000000070e2e2 in clang::CompilerInstance::ExecuteAction ()
#7  0x00000000006e8dfe in clang::ExecuteCompilerInvocation ()
#8  0x00000000006dd289 in cc1_main ()
#9  0x00000000006e5e5c in main ()

There is no problem compiling the source file when not running the analyzer.

-- 
Configure bugmail: http://llvm.org/bugs/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.