[llvm-bugs] [Bug 50788] New: clang crashes on valid code at -O1 and above on x86_64-linux-gnu

via llvm-bugs llvm-bugs at lists.llvm.org
Mon Jun 21 09:20:06 PDT 2021 

https://bugs.llvm.org/show_bug.cgi?id=50788

            Bug ID: 50788
           Summary: clang crashes on valid code at -O1 and above on
                    x86_64-linux-gnu
           Product: libraries
           Version: trunk
          Hardware: PC
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P
         Component: Transformation Utilities
          Assignee: unassignedbugs at nondot.org
          Reporter: zhendong.su at inf.ethz.ch
                CC: llvm-bugs at lists.llvm.org

[542] % clangtk -v
clang version 13.0.0 (https://github.com/llvm/llvm-project.git
3063a5472266f05add4e5b85f34141ba2e66fa2e)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /local/suz-local/opfuzz/bin
Found candidate GCC installation: /usr/lib/gcc/i686-linux-gnu/8
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/6
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/6.5.0
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/7
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/7.5.0
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/8
Selected GCC installation: /usr/lib/gcc/x86_64-linux-gnu/7.5.0
Candidate multilib: .;@m64
Candidate multilib: 32;@m32
Candidate multilib: x32;@mx32
Selected multilib: .;@m64
[543] % 
[543] % clangtk -O0 -c small.c
[544] % 
[544] % clangtk -O1 -c small.c
PLEASE submit a bug report to https://bugs.llvm.org/ and include the crash
backtrace, preprocessed source, and associated run script.
Stack dump:
0.      Program arguments: clangtk -I/usr/local/include/csmith -O1 -c small.c
1.      <eof> parser at end of file
2.      Optimizer
 #0 0x000055fad4a6011f PrintStackTraceSignalHandler(void*) Signals.cpp:0:0
 #1 0x000055fad4a5df40 llvm::sys::CleanupOnSignal(unsigned long)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x37d9f40)
 #2 0x000055fad49add58 CrashRecoverySignalHandler(int)
CrashRecoveryContext.cpp:0:0
 #3 0x00007f196d813980 __restore_rt
(/lib/x86_64-linux-gnu/libpthread.so.0+0x12980)
 #4 0x000055fad39a8152
llvm::FunctionAnalysisManagerCGSCCProxy::run(llvm::LazyCallGraph::SCC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>&,
llvm::LazyCallGraph&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x2724152)
 #5 0x000055fad5bddc5e
llvm::detail::AnalysisPassModel<llvm::LazyCallGraph::SCC,
llvm::FunctionAnalysisManagerCGSCCProxy, llvm::PreservedAnalyses,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC,
llvm::LazyCallGraph&>::Invalidator,
llvm::LazyCallGraph&>::run(llvm::LazyCallGraph::SCC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>&,
llvm::LazyCallGraph&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x4959c5e)
 #6 0x000055fad39a73cf llvm::AnalysisManager<llvm::LazyCallGraph::SCC,
llvm::LazyCallGraph&>::getResultImpl(llvm::AnalysisKey*,
llvm::LazyCallGraph::SCC&, llvm::LazyCallGraph&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x27233cf)
 #7 0x000055fad39a7933 llvm::FunctionAnalysisManagerCGSCCProxy::Result&
llvm::AnalysisManager<llvm::LazyCallGraph::SCC,
llvm::LazyCallGraph&>::getResult<llvm::FunctionAnalysisManagerCGSCCProxy>(llvm::LazyCallGraph::SCC&,
llvm::LazyCallGraph&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x2723933)
 #8 0x000055fad39ab94d llvm::PassManager<llvm::LazyCallGraph::SCC,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&>::run(llvm::LazyCallGraph::SCC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>&,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x272794d)
 #9 0x000055fad4366981 llvm::detail::PassModel<llvm::LazyCallGraph::SCC,
llvm::PassManager<llvm::LazyCallGraph::SCC,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&>, llvm::PreservedAnalyses,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&>::run(llvm::LazyCallGraph::SCC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>&,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x30e2981)
#10 0x000055fad39aeeb8
llvm::DevirtSCCRepeatedPass::run(llvm::LazyCallGraph::SCC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>&,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x272aeb8)
#11 0x000055fad4366941 llvm::detail::PassModel<llvm::LazyCallGraph::SCC,
llvm::DevirtSCCRepeatedPass, llvm::PreservedAnalyses,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&>::run(llvm::LazyCallGraph::SCC&,
llvm::AnalysisManager<llvm::LazyCallGraph::SCC, llvm::LazyCallGraph&>&,
llvm::LazyCallGraph&, llvm::CGSCCUpdateResult&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x30e2941)
#12 0x000055fad39ad46b
llvm::ModuleToPostOrderCGSCCPassAdaptor::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x272946b)
#13 0x000055fad43669c1 llvm::detail::PassModel<llvm::Module,
llvm::ModuleToPostOrderCGSCCPassAdaptor, llvm::PreservedAnalyses,
llvm::AnalysisManager<llvm::Module> >::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x30e29c1)
#14 0x000055fad4262ff4 llvm::PassManager<llvm::Module,
llvm::AnalysisManager<llvm::Module> >::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x2fdeff4)
#15 0x000055fad4369653 llvm::ModuleInlinerWrapperPass::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x30e5653)
#16 0x000055fad5a8f1a1 llvm::detail::PassModel<llvm::Module,
llvm::ModuleInlinerWrapperPass, llvm::PreservedAnalyses,
llvm::AnalysisManager<llvm::Module> >::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x480b1a1)
#17 0x000055fad4262ff4 llvm::PassManager<llvm::Module,
llvm::AnalysisManager<llvm::Module> >::run(llvm::Module&,
llvm::AnalysisManager<llvm::Module>&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x2fdeff4)
#18 0x000055fad4d49684 (anonymous
namespace)::EmitAssemblyHelper::EmitAssemblyWithNewPassManager(clang::BackendAction,
std::unique_ptr<llvm::raw_pwrite_stream,
std::default_delete<llvm::raw_pwrite_stream> >) BackendUtil.cpp:0:0
#19 0x000055fad4d4e633 clang::EmitBackendOutput(clang::DiagnosticsEngine&,
clang::HeaderSearchOptions const&, clang::CodeGenOptions const&,
clang::TargetOptions const&, clang::LangOptions const&, llvm::StringRef,
llvm::Module*, clang::BackendAction, std::unique_ptr<llvm::raw_pwrite_stream,
std::default_delete<llvm::raw_pwrite_stream> >)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x3aca633)
#20 0x000055fad5a1352a
clang::BackendConsumer::HandleTranslationUnit(clang::ASTContext&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x478f52a)
#21 0x000055fad68dfac9 clang::ParseAST(clang::Sema&, bool, bool)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x565bac9)
#22 0x000055fad5a136c8 clang::CodeGenAction::ExecuteAction()
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x478f6c8)
#23 0x000055fad5371651 clang::FrontendAction::Execute()
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x40ed651)
#24 0x000055fad530dbda
clang::CompilerInstance::ExecuteAction(clang::FrontendAction&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x4089bda)
#25 0x000055fad543fb0a
clang::ExecuteCompilerInvocation(clang::CompilerInstance*)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x41bbb0a)
#26 0x000055fad261833c cc1_main(llvm::ArrayRef<char const*>, char const*,
void*) (/local/suz-local/software/local/clang-trunk/bin/clang-13+0x139433c)
#27 0x000055fad26136e9 ExecuteCC1Tool(llvm::SmallVectorImpl<char const*>&)
driver.cpp:0:0
#28 0x000055fad51bf695 void llvm::function_ref<void
()>::callback_fn<clang::driver::CC1Command::Execute(llvm::ArrayRef<llvm::Optional<llvm::StringRef>
>, std::__cxx11::basic_string<char, std::char_traits<char>,
std::allocator<char> >*, bool*) const::'lambda'()>(long) Job.cpp:0:0
#29 0x000055fad49ae343
llvm::CrashRecoveryContext::RunSafely(llvm::function_ref<void ()>)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x372a343)
#30 0x000055fad51c1844
clang::driver::CC1Command::Execute(llvm::ArrayRef<llvm::Optional<llvm::StringRef>
>, std::__cxx11::basic_string<char, std::char_traits<char>,
std::allocator<char> >*, bool*) const
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x3f3d844)
#31 0x000055fad5197d9a
clang::driver::Compilation::ExecuteCommand(clang::driver::Command const&,
clang::driver::Command const*&) const
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x3f13d9a)
#32 0x000055fad5198a3f
clang::driver::Compilation::ExecuteJobs(clang::driver::JobList const&,
llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*> >&) const
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x3f14a3f)
#33 0x000055fad51a22ea
clang::driver::Driver::ExecuteCompilation(clang::driver::Compilation&,
llvm::SmallVectorImpl<std::pair<int, clang::driver::Command const*> >&)
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x3f1e2ea)
#34 0x000055fad2540e78 main
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x12bce78)
#35 0x00007f196c4a7bf7 __libc_start_main
/build/glibc-S9d2JN/glibc-2.27/csu/../csu/libc-start.c:344:0
#36 0x000055fad261325a _start
(/local/suz-local/software/local/clang-trunk/bin/clang-13+0x138f25a)
clang-13: error: clang frontend command failed with exit code 139 (use -v to
see invocation)
clang version 13.0.0 (https://github.com/llvm/llvm-project.git
3063a5472266f05add4e5b85f34141ba2e66fa2e)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /local/suz-local/opfuzz/bin
clang-13: note: diagnostic msg: 
********************

PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
Preprocessed source(s) and associated run script(s) are located at:
clang-13: note: diagnostic msg: /tmp/small-f0cda5.c
clang-13: note: diagnostic msg: /tmp/small-f0cda5.sh
clang-13: note: diagnostic msg: 

********************
[545] % 
[545] % cat small.c
extern void m(int, int);
extern int l (void);
int a, b, c, d, e, f, g;
static void h();
static void i();
void j() {
  while (1)
    ;
}
void k() {
  for (c = 0; c < 6;)
    while (e)
      while (1)
        k();
  h();
}
void h() {
  i();
  while (c)
    k();
  i();
  h();
}
void i() {
  j();
  g = l();
  if (g)
    while (1)
      m(g && a, 0);
  if ((l() && f) > b)
    while (d)
      h();
}

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-bugs/attachments/20210621/250985c2/attachment-0001.html>

More information about the llvm-bugs mailing list