[llvm-bugs] [Bug 33142] New: clang crashes with "-mllvm -enable-newgvn": Assertion `idx < size()' failed.

via llvm-bugs llvm-bugs at lists.llvm.org
Tue May 23 08:53:44 PDT 2017


https://bugs.llvm.org/show_bug.cgi?id=33142

            Bug ID: 33142
           Summary: clang crashes with "-mllvm -enable-newgvn": Assertion
                    `idx < size()' failed.
           Product: clang
           Version: trunk
          Hardware: PC
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P
         Component: libclang
          Assignee: unassignedclangbugs at nondot.org
          Reporter: helloqirun at gmail.com
                CC: klimek at google.com, llvm-bugs at lists.llvm.org

The following code crashes the current trunk version at "-O2" and above with
"-mllvm -enable-newgvn". Level "-O1" works fine.


$ clang-trunk --version
clang version 5.0.0 (trunk 303617)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /usr/local/bin


$ clang-trunk -mllvm -enable-newgvn abc.c -O2
abc.c:8:7: warning: incompatible pointer types assigning to 'long *' from 'void
()' [-Wincompatible-pointer-types]
    d = fn1;
      ^ ~~~
abc.c:11:14: warning: incompatible pointer to integer conversion assigning to
'char' from 'long *' [-Wint-conversion]
    *d || (c = d);
             ^ ~
clang-5.0: /home/absozero/trunk/llvm/include/llvm/ADT/SmallVector.h:148:
llvm::SmallVectorTemplateCommon::reference
llvm::SmallVectorTemplateCommon<llvm::Value *,
void>::operator[](llvm::SmallVectorTemplateCommon::size_type) [T = llvm::Value
*]: Assertion `idx < size()' failed.
#0 0x0000000001cf8624 PrintStackTraceSignalHandler(void*)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x1cf8624)
#1 0x0000000001cf8946 SignalHandler(int)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x1cf8946)
#2 0x00007ff42fe22330 __restore_rt
(/lib/x86_64-linux-gnu/libpthread.so.0+0x10330)
#3 0x00007ff42e99fc37 gsignal
/build/eglibc-oGUzwX/eglibc-2.19/signal/../nptl/sysdeps/unix/sysv/linux/raise.c:56:0
#4 0x00007ff42e9a3028 abort
/build/eglibc-oGUzwX/eglibc-2.19/stdlib/abort.c:91:0
#5 0x00007ff42e998bf6 __assert_fail_base
/build/eglibc-oGUzwX/eglibc-2.19/assert/assert.c:92:0
#6 0x00007ff42e998ca2 (/lib/x86_64-linux-gnu/libc.so.6+0x2fca2)
#7 0x00000000013664ff llvm::BasicAAResult::aliasPHI(llvm::PHINode const*,
unsigned long, llvm::AAMDNodes const&, llvm::Value const*, unsigned long,
llvm::AAMDNodes const&, llvm::Value const*)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x13664ff)
#8 0x0000000001363341 llvm::BasicAAResult::aliasCheck(llvm::Value const*,
unsigned long, llvm::AAMDNodes, llvm::Value const*, unsigned long,
llvm::AAMDNodes, llvm::Value const*, llvm::Value const*)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x1363341)
#9 0x0000000001362c1f llvm::BasicAAResult::alias(llvm::MemoryLocation const&,
llvm::MemoryLocation const&)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x1362c1f)
#10 0x0000000001352740 llvm::AAResults::getModRefInfo(llvm::StoreInst const*,
llvm::MemoryLocation const&)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x1352740)
#11 0x00000000013fb5c3 llvm::FindAvailablePtrLoadStore(llvm::Value*,
llvm::Type*, bool, llvm::BasicBlock*,
llvm::ilist_iterator<llvm::ilist_detail::node_options<llvm::Instruction, true,
false, void>, false, false>&, unsigned int, llvm::AAResults*, bool*, unsigned
int*) (/home/absozero/trunk/root-clang/bin/clang-5.0+0x13fb5c3)
#12 0x0000000001b4789d
llvm::JumpThreadingPass::SimplifyPartiallyRedundantLoad(llvm::LoadInst*)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x1b4789d)
#13 0x0000000001b42c9a llvm::JumpThreadingPass::ProcessBlock(llvm::BasicBlock*)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x1b42c9a)
#14 0x0000000001b42190 llvm::JumpThreadingPass::runImpl(llvm::Function&,
llvm::TargetLibraryInfo*, llvm::LazyValueInfo*, llvm::AAResults*, bool,
std::unique_ptr<llvm::BlockFrequencyInfo,
std::default_delete<llvm::BlockFrequencyInfo> >,
std::unique_ptr<llvm::BranchProbabilityInfo,
std::default_delete<llvm::BranchProbabilityInfo> >)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x1b42190)
#15 0x0000000001b4df8b (anonymous
namespace)::JumpThreading::runOnFunction(llvm::Function&)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x1b4df8b)
#16 0x000000000188127f llvm::FPPassManager::runOnFunction(llvm::Function&)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x188127f)
#17 0x00000000026ff066 (anonymous
namespace)::CGPassManager::runOnModule(llvm::Module&)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x26ff066)
#18 0x00000000018819d5 llvm::legacy::PassManagerImpl::run(llvm::Module&)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x18819d5)
#19 0x0000000001e82beb clang::EmitBackendOutput(clang::DiagnosticsEngine&,
clang::HeaderSearchOptions const&, clang::CodeGenOptions const&,
clang::TargetOptions const&, clang::LangOptions const&, llvm::DataLayout
const&, llvm::Module*, clang::BackendAction,
std::unique_ptr<llvm::raw_pwrite_stream,
std::default_delete<llvm::raw_pwrite_stream> >)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x1e82beb)
#20 0x000000000258c907
clang::BackendConsumer::HandleTranslationUnit(clang::ASTContext&)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x258c907)
#21 0x00000000029f0926 clang::ParseAST(clang::Sema&, bool, bool)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x29f0926)
#22 0x000000000225da48 clang::FrontendAction::Execute()
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x225da48)
#23 0x000000000220fea1
clang::CompilerInstance::ExecuteAction(clang::FrontendAction&)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x220fea1)
#24 0x00000000022e17c5
clang::ExecuteCompilerInvocation(clang::CompilerInstance*)
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x22e17c5)
#25 0x000000000083e824 cc1_main(llvm::ArrayRef<char const*>, char const*,
void*) (/home/absozero/trunk/root-clang/bin/clang-5.0+0x83e824)
#26 0x000000000083c6e5 main
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x83c6e5)
#27 0x00007ff42e98af45 __libc_start_main
/build/eglibc-oGUzwX/eglibc-2.19/csu/libc-start.c:321:0
#28 0x00000000008397e9 _start
(/home/absozero/trunk/root-clang/bin/clang-5.0+0x8397e9)
Stack dump:
0.      Program arguments: /home/absozero/trunk/root-clang/bin/clang-5.0 -cc1
-triple x86_64-unknown-linux-gnu -emit-obj -disable-free -main-file-name abc.c
-mrelocation-model static -mthread-model posix -fmath-errno -masm-verbose
-mconstructor-aliases -munwind-tables -fuse-init-array -target-cpu x86-64
-momit-leaf-frame-pointer -dwarf-column-info -debugger-tuning=gdb -resource-dir
/home/absozero/trunk/root-clang/lib/clang/5.0.0 -internal-isystem
/usr/local/include -internal-isystem
/home/absozero/trunk/root-clang/lib/clang/5.0.0/include
-internal-externc-isystem /usr/include/x86_64-linux-gnu
-internal-externc-isystem /include -internal-externc-isystem /usr/include -O2
-fdebug-compilation-dir /home/absozero/projects/reduction/crash -ferror-limit
19 -fmessage-length 172 -fobjc-runtime=gcc -fdiagnostics-show-option
-fcolor-diagnostics -vectorize-loops -vectorize-slp -mllvm -enable-newgvn -o
/tmp/abc-edbe72.o -x c abc.c
1.      <eof> parser at end of file
2.      Per-module optimization passes
3.      Running pass 'CallGraph Pass Manager' on module 'abc.c'.
4.      Running pass 'Jump Threading' on function '@fn1'
clang-5.0: error: unable to execute command: Aborted (core dumped)
clang-5.0: error: clang frontend command failed due to signal (use -v to see
invocation)
clang version 5.0.0 (trunk 303617)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /usr/local/bin
clang-5.0: note: diagnostic msg: PLEASE submit a bug report to
http://llvm.org/bugs/ and include the crash backtrace, preprocessed source, and
associated run script.
clang-5.0: note: diagnostic msg:
********************

PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
Preprocessed source(s) and associated run script(s) are located at:
clang-5.0: note: diagnostic msg: /tmp/abc-2fc14e.c
clang-5.0: note: diagnostic msg: /tmp/abc-2fc14e.sh
clang-5.0: note: diagnostic msg:

********************



$ cat abc.c
int a;
long b;
char c;
void fn1() {
  long *d = &b;
  for (; a <= 71;) {
    char e = e && b;
    d = fn1;
  }
  for (; a <= 2;)
    *d || (c = d);
}

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-bugs/attachments/20170523/69dd3e18/attachment.html>


More information about the llvm-bugs mailing list