[llvm-bugs] [Bug 46872] New: Null-dereference in InstCombinerImpl::foldVectorBinop call to llvm::ConstantExpr::get

[via llvm-bugs]

https://bugs.llvm.org/show_bug.cgi?id=46872

            Bug ID: 46872
           Summary: Null-dereference in InstCombinerImpl::foldVectorBinop
                    call to llvm::ConstantExpr::get
           Product: libraries
           Version: trunk
          Hardware: PC
                OS: Windows NT
            Status: NEW
          Severity: enhancement
          Priority: P
         Component: Scalar Optimizations
          Assignee: unassignedbugs at nondot.org
          Reporter: llvm-dev at redking.me.uk
                CC: lebedev.ri at gmail.com, llvm-bugs at lists.llvm.org,
                    spatel+llvm at rotateright.com

Reduced from https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24434

define <4 x i32> @ossfuzz24434(<4 x i32> %a0) {
  %1 = shufflevector <4 x i32> %a0, <4 x i32> undef, <4 x i32> <i32 0, i32 0,
i32 1, i32 1>
  %2 = and <4 x i32> bitcast (<2 x i64> <i64 ptrtoint (<4 x i32> (<4 x i32>)*
@pr20114 to i64), i64 ptrtoint (<4 x i32> (<4 x i32>)* @pr20114 to i64)> to <4
x i32>), %1
  %3 = insertelement <4 x i32> %2, i32 2147483647, i64 0
  ret <4 x i32> %3
}

opt -instcombine

PLEASE submit a bug report to https://bugs.llvm.org/ and include the crash
backtrace.
Stack dump:
0.      Program arguments: opt -instcombine fuzz24434.ll -o bar.bc
1.      Running pass 'Function Pass Manager' on module 'fuzz24434.ll'.
2.      Running pass 'Combine redundant instructions' on function '@pr20114'
opt(_ZN4llvm3sys15PrintStackTraceERNS_11raw_ostreamE+0x2a)[0x7ff01674e19a]
opt(_ZN4llvm3sys17RunSignalHandlersEv+0x34)[0x7ff01674bf94]
opt(+0x294c975)[0x7ff01674c975]
/lib/x86_64-linux-gnu/libpthread.so.0(+0x12890)[0x7ff0135f2890]
opt(_ZN4llvm12ConstantExpr3getEjPNS_8ConstantES2_jPNS_4TypeE+0x2d)[0x7ff015f3ce2d]
opt(+0x24057cc)[0x7ff0162057cc]
opt(+0x2438b3a)[0x7ff016238b3a]
opt(+0x240f521)[0x7ff01620f521]
opt(+0x2411187)[0x7ff016211187]
opt(_ZN4llvm24InstructionCombiningPass13runOnFunctionERNS_8FunctionE+0x66e)[0x7ff016212dae]
opt(_ZN4llvm13FPPassManager13runOnFunctionERNS_8FunctionE+0x356)[0x7ff01600c6a6]
opt(_ZN4llvm13FPPassManager11runOnModuleERNS_6ModuleE+0x39)[0x7ff01600d119]
opt(_ZN4llvm6legacy15PassManagerImpl3runERNS_6ModuleE+0x389)[0x7ff01600bfc9]

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-bugs/attachments/20200728/5836a521/attachment.html>