[Bug analyzer/100244] [11 Regression] ICE: Segmentation fault (in describe_state_change)

[cvs-commit at gcc dot gnu.org via Gcc-bugs]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=100244

--- Comment #4 from CVS Commits <cvs-commit at gcc dot gnu.org> ---
The releases/gcc-11 branch has been updated by David Malcolm
<dmalc...@gcc.gnu.org>:

https://gcc.gnu.org/g:1187f297f7ef6a3dc86103b642d463f7a7bd6096

commit r11-8670-g1187f297f7ef6a3dc86103b642d463f7a7bd6096
Author: David Malcolm <dmalc...@redhat.com>
Date:   Fri Jul 2 15:19:43 2021 -0400

    analyzer: fix ICE on NULL change.m_expr [PR100244]

    PR analyzer/100244 reports an ICE on a -Wanalyzer-free-of-non-heap
    due to a case where free_of_non_heap::describe_state_change can be
    passed a NULL change.m_expr for a suitably complicated symbolic value.

    Bulletproof it by checking for change.m_expr being NULL before
    dereferencing it.

    gcc/analyzer/ChangeLog:
            PR analyzer/100244
            * sm-malloc.cc (free_of_non_heap::describe_state_change):
            Bulletproof against change.m_expr being NULL.

    gcc/testsuite/ChangeLog:
            PR analyzer/100244
            * g++.dg/analyzer/pr100244.C: New test.

    Signed-off-by: David Malcolm <dmalc...@redhat.com>