[llvm-bugs] [Bug 33747] New: use-after-poison in llvm::SelectionDAG::Combine

[via llvm-bugs]

https://bugs.llvm.org/show_bug.cgi?id=33747

            Bug ID: 33747
           Summary: use-after-poison in llvm::SelectionDAG::Combine
           Product: new-bugs
           Version: unspecified
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P
         Component: new bugs
          Assignee: unassignedbugs at nondot.org
          Reporter: kcc at google.com
                CC: llvm-bugs at lists.llvm.org, vitalybuka at google.com

Created attachment 18777
  --> https://bugs.llvm.org/attachment.cgi?id=18777&action=edit
crash.cc

on r307569

clang -cc1 -triple x86_64-unknown-linux-gnu -emit-obj  crash.cc -O2


==1100==ERROR: AddressSanitizer: use-after-poison on address 0x6210001d44a0 at
pc 0x00000763e3ed bp 0x7ffd24a391d0 sp 0x7ffd24a391c8
READ of size 8 at 0x6210001d44a0 thread T0
    #0 0x763e3ec in TrackingMDRef include/llvm/IR/TrackingMDRef.h:34:48
    #1 0x763e3ec in TypedTrackingMDRef include/llvm/IR/TrackingMDRef.h:115
    #2 0x763e3ec in DebugLoc include/llvm/IR/DebugLoc.h:34
    #3 0x763e3ec in SDLoc include/llvm/CodeGen/SelectionDAGNodes.h:1012
    #4 0x763e3ec in visitANY_EXTEND
lib/CodeGen/SelectionDAG/DAGCombiner.cpp:7683
    #5 0x763e3ec in (anonymous namespace)::DAGCombiner::visit(llvm::SDNode*)
lib/CodeGen/SelectionDAG/DAGCombiner.cpp:1467
    #6 0x75e311e in (anonymous namespace)::DAGCombiner::combine(llvm::SDNode*)
lib/CodeGen/SelectionDAG/DAGCombiner.cpp:1520:16
    #7 0x75dd851 in Run lib/CodeGen/SelectionDAG/DAGCombiner.cpp:1368:18
    #8 0x75dd851 in llvm::SelectionDAG::Combine(llvm::CombineLevel,
llvm::AAResults*, llvm::CodeGenOpt::Level)
lib/CodeGen/SelectionDAG/DAGCombiner.cpp:17003
    #9 0x7a7f51a in llvm::SelectionDAGISel::CodeGenAndEmitDAG()
lib/CodeGen/SelectionDAG/SelectionDAGISel.cpp:739:13
    #10 0x7a75563 in
llvm::SelectionDAGISel::SelectAllBasicBlocks(llvm::Function const&)
lib/CodeGen/SelectionDAG/SelectionDAGISel.cpp:1604:7
    #11 0x7a6c1c0 in
llvm::SelectionDAGISel::runOnMachineFunction(llvm::MachineFunction&)
lib/CodeGen/SelectionDAG/SelectionDAGISel.cpp:466:3
    #12 0x2eeecc8 in (anonymous
namespace)::X86DAGToDAGISel::runOnMachineFunction(llvm::MachineFunction&)
lib/Target/X86/X86ISelDAGToDAG.cpp:177:25
    #13 0x3eac0c1 in llvm::MachineFunctionPass::runOnFunction(llvm::Function&)
lib/CodeGen/MachineFunctionPass.cpp:62:13
    #14 0x4a021b4 in llvm::FPPassManager::runOnFunction(llvm::Function&)
lib/IR/LegacyPassManager.cpp:1519:27
    #15 0x4a028a3 in llvm::FPPassManager::runOnModule(llvm::Module&)
lib/IR/LegacyPassManager.cpp:1540:16
    #16 0x4a039c3 in runOnModule lib/IR/LegacyPassManager.cpp:1596:27
    #17 0x4a039c3 in llvm::legacy::PassManagerImpl::run(llvm::Module&)
lib/IR/LegacyPassManager.cpp:1699
    #18 0x619bee7 in EmitAssembly
tools/clang/lib/CodeGen/BackendUtil.cpp:790:19
    #19 0x619bee7 in clang::EmitBackendOutput(clang::DiagnosticsEngine&,
clang::HeaderSearchOptions const&, clang::CodeGenOptions const&,
clang::TargetOptions const&, clang::LangOptions const&, »
    #20 0x7d9343d in
clang::BackendConsumer::HandleTranslationUnit(clang::ASTContext&)
tools/clang/lib/CodeGen/CodeGenAction.cpp:261:7
    #21 0x90c0735 in clang::ParseAST(clang::Sema&, bool, bool)
tools/clang/lib/Parse/ParseAST.cpp:159:13

found by an experimental clang-proto-fuzzer

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-bugs/attachments/20170711/c86300f0/attachment-0001.html>