[llvm-bugs] [Bug 41611] New: Crash in clang::ento::FindUninitializedFields::isNonUnionUninit on vector members

[via llvm-bugs]

https://bugs.llvm.org/show_bug.cgi?id=41611

            Bug ID: 41611
           Summary: Crash in
                    clang::ento::FindUninitializedFields::isNonUnionUninit
                    on vector members
           Product: clang
           Version: trunk
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P
         Component: Static Analyzer
          Assignee: dcoughlin at apple.com
          Reporter: gribozavr at gmail.com
                CC: dcoughlin at apple.com, llvm-bugs at lists.llvm.org

At SVN r359290:

$ cat /tmp/t.cc
struct SimdVec {
  SimdVec() {}
  __attribute__((__vector_size__(16))) long x;
};

void entry() {
  SimdVec v;
}
$ ./bin/clang-tidy -checks="-*,clang-analyzer*" /tmp/t.cc
UNREACHABLE executed at
llvm-project/clang/lib/StaticAnalyzer/Checkers/UninitializedObject/UninitializedObjectChecker.cpp:347!
 #0 0x000000000067f4f4 PrintStackTraceSignalHandler(void*)
(./bin/clang-tidy+0x67f4f4)
 #1 0x000000000067d28c llvm::sys::RunSignalHandlers()
(./bin/clang-tidy+0x67d28c)
 #2 0x000000000067fa38 SignalHandler(int) (./bin/clang-tidy+0x67fa38)
 #3 0x00007f68a65b40c0 __restore_rt
(/lib/x86_64-linux-gnu/libpthread.so.0+0x110c0)
 #4 0x00007f68a513efcf raise (/lib/x86_64-linux-gnu/libc.so.6+0x32fcf)
 #5 0x00007f68a51403fa abort (/lib/x86_64-linux-gnu/libc.so.6+0x343fa)
 #6 0x000000000062e691 (./bin/clang-tidy+0x62e691)
 #7 0x0000000000d2e87e
clang::ento::FindUninitializedFields::isNonUnionUninit(clang::ento::TypedValueRegion
const*, clang::ento::FieldChainInfo) (./bin/clang-tidy+0xd2e87e)
 #8 0x0000000000d2e308
clang::ento::FindUninitializedFields::FindUninitializedFields(llvm::IntrusiveRefCntPtr<clang::ento::ProgramState
const>, clang::ento::TypedValueRegion const*,
clang::ento::UninitObjCheckerOptions const&) (./bin/clang-tidy+0xd2e308)
 #9 0x0000000000d35bc8 void
clang::ento::check::EndFunction::_checkEndFunction<(anonymous
namespace)::UninitializedObjectChecker>(void*, clang::ReturnStmt const*,
clang::ento::CheckerContext&) (./bin/clang-tidy+0xd35bc8)
#10 0x0000000000d7edd9
clang::ento::CheckerManager::runCheckersForEndFunction(clang::ento::NodeBuilderContext&,
clang::ento::ExplodedNodeSet&, clang::ento::ExplodedNode*,
clang::ento::ExprEngine&, clang::ReturnStmt const*) (./bin/clang-tidy+0xd7edd9)
#11 0x0000000000d9ecd8
clang::ento::ExprEngine::processEndOfFunction(clang::ento::NodeBuilderContext&,
clang::ento::ExplodedNode*, clang::ReturnStmt const*)
(./bin/clang-tidy+0xd9ecd8)
#12 0x0000000000d863ff
clang::ento::CoreEngine::HandleBlockEdge(clang::BlockEdge const&,
clang::ento::ExplodedNode*) (./bin/clang-tidy+0xd863ff)
#13 0x0000000000d85dcd
clang::ento::CoreEngine::dispatchWorkItem(clang::ento::ExplodedNode*,
clang::ProgramPoint, clang::ento::WorkListUnit const&)
(./bin/clang-tidy+0xd85dcd)
#14 0x0000000000d8599b
clang::ento::CoreEngine::ExecuteWorkList(clang::LocationContext const*,
unsigned int, llvm::IntrusiveRefCntPtr<clang::ento::ProgramState const>)
(./bin/clang-tidy+0xd8599b)
#15 0x0000000000b2ce87 (anonymous
namespace)::AnalysisConsumer::HandleCode(clang::Decl*, unsigned int,
clang::ento::ExprEngine::InliningModes, llvm::DenseSet<clang::Decl const*,
llvm::DenseMapInfo<clang::Decl const*> >*) (./bin/clang-tidy+0xb2ce87)
#16 0x0000000000b25a05 (anonymous
namespace)::AnalysisConsumer::HandleTranslationUnit(clang::ASTContext&)
(./bin/clang-tidy+0xb25a05)
#17 0x0000000000f152cc
clang::MultiplexConsumer::HandleTranslationUnit(clang::ASTContext&)
(./bin/clang-tidy+0xf152cc)
#18 0x000000000106eba3 clang::ParseAST(clang::Sema&, bool, bool)
(./bin/clang-tidy+0x106eba3)
#19 0x0000000000efd370 clang::FrontendAction::Execute()
(./bin/clang-tidy+0xefd370)
#20 0x0000000000ea21f1
clang::CompilerInstance::ExecuteAction(clang::FrontendAction&)
(./bin/clang-tidy+0xea21f1)
#21 0x0000000000a04906
clang::tooling::FrontendActionFactory::runInvocation(std::shared_ptr<clang::CompilerInvocation>,
clang::FileManager*, std::shared_ptr<clang::PCHContainerOperations>,
clang::DiagnosticConsumer*) (./bin/clang-tidy+0xa04906)
#22 0x00000000006897c5
clang::tidy::runClangTidy(clang::tidy::ClangTidyContext&,
clang::tooling::CompilationDatabase const&,
llvm::ArrayRef<std::__cxx11::basic_string<char, std::char_traits<char>,
std::allocator<char> > >,
llvm::IntrusiveRefCntPtr<llvm::vfs::OverlayFileSystem>, bool,
llvm::StringRef)::ActionFactory::runInvocation(std::shared_ptr<clang::CompilerInvocation>,
clang::FileManager*, std::shared_ptr<clang::PCHContainerOperations>,
clang::DiagnosticConsumer*) (./bin/clang-tidy+0x6897c5)
#23 0x0000000000a04676 clang::tooling::ToolInvocation::runInvocation(char
const*, clang::driver::Compilation*,
std::shared_ptr<clang::CompilerInvocation>,
std::shared_ptr<clang::PCHContainerOperations>) (./bin/clang-tidy+0xa04676)
#24 0x0000000000a03f27 clang::tooling::ToolInvocation::run()
(./bin/clang-tidy+0xa03f27)
#25 0x0000000000a05dae
clang::tooling::ClangTool::run(clang::tooling::ToolAction*)
(./bin/clang-tidy+0xa05dae)
#26 0x00000000006860b3
clang::tidy::runClangTidy(clang::tidy::ClangTidyContext&,
clang::tooling::CompilationDatabase const&,
llvm::ArrayRef<std::__cxx11::basic_string<char, std::char_traits<char>,
std::allocator<char> > >,
llvm::IntrusiveRefCntPtr<llvm::vfs::OverlayFileSystem>, bool, llvm::StringRef)
(./bin/clang-tidy+0x6860b3)
#27 0x0000000000431b7d clang::tidy::clangTidyMain(int, char const**)
(./bin/clang-tidy+0x431b7d)
#28 0x00007f68a512c2b1 __libc_start_main
(/lib/x86_64-linux-gnu/libc.so.6+0x202b1)
#29 0x000000000042fc5a _start (./bin/clang-tidy+0x42fc5a)
Aborted

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-bugs/attachments/20190426/588b00c8/attachment.html>