| Issue |
55511
|
| Summary |
clang crashes on valid code at -Os and above on x86_64-linux-gnu: Segmentation fault
|
| Labels |
new issue
|
| Assignees |
|
| Reporter |
zhendongsu
|
It appears to be a recent regression.
```
[523] % clangtk -v
clang version 15.0.0 (https://github.com/llvm/llvm-project.git 6e23cd2bf073ab5eb5a103b935af54046d007c52)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /local/suz-local/opfuzz/bin
Found candidate GCC installation: /usr/lib/gcc/i686-linux-gnu/8
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/10
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/6
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/6.5.0
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/7
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/7.5.0
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/8
Selected GCC installation: /usr/lib/gcc/x86_64-linux-gnu/10
Candidate multilib: .;@m64
Selected multilib: .;@m64
[524] %
[524] % clangtk -Os small.c
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace, preprocessed source, and associated run script.
Stack dump:
0. Program arguments: /local/suz-local/software/local/clang-trunk/bin/clang-15 -cc1 -triple x86_64-unknown-linux-gnu -emit-obj --mrelax-relocations -disable-free -clear-ast-before-backend -main-file-name small.c -mrelocation-model pic -pic-level 2 -pic-is-pie -mframe-pointer=none -fmath-errno -ffp-contract=on -fno-rounding-math -mconstructor-aliases -funwind-tables=2 -target-cpu x86-64 -tune-cpu generic -mllvm -treat-scalable-fixed-error-as-warning -debugger-tuning=gdb -fcoverage-compilation-dir=/local/suz-local/software/emitesting/bugs/20220516-clangtk-m64-O3-build-161829/delta -resource-dir /local/suz-local/software/local/clang-trunk/lib/clang/15.0.0 -I /usr/local/include/csmith -I /local/suz-local/software/local/include -internal-isystem /local/suz-local/software/local/clang-trunk/lib/clang/15.0.0/include -internal-isystem /usr/local/include -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/10/../../../../x86_64-linux-gnu/include -internal-externc-isystem /usr/include/x86_64-linux-gnu -internal-externc-isystem /include -internal-externc-isystem /usr/include -Os -fdebug-compilation-dir=/local/suz-local/software/emitesting/bugs/20220516-clangtk-m64-O3-build-161829/delta -ferror-limit 19 -fgnuc-version=4.2.1 -fcolor-diagnostics -vectorize-loops -vectorize-slp -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /tmp/small-3a128b.o -x c small.c
1. <eof> parser at end of file
2. Optimizer
#0 0x000055a1b9f28adf PrintStackTraceSignalHandler(void*) Signals.cpp:0:0
#1 0x000055a1b9f2654c SignalHandler(int) Signals.cpp:0:0
#2 0x00007fa786e8a980 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x12980)
#3 0x000055a1b8fb063b computeKnownBitsFromAssume(llvm::Value const*, llvm::KnownBits&, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#4 0x000055a1b8facdad computeKnownBits(llvm::Value const*, llvm::APInt const&, llvm::KnownBits&, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#5 0x000055a1b8fad41b computeKnownBits(llvm::Value const*, llvm::KnownBits&, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#6 0x000055a1b8faac1b computeKnownBitsFromOperator(llvm::Operator const*, llvm::APInt const&, llvm::KnownBits&, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#7 0x000055a1b8fad215 computeKnownBits(llvm::Value const*, llvm::APInt const&, llvm::KnownBits&, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#8 0x000055a1b8faa2aa computeKnownBitsFromOperator(llvm::Operator const*, llvm::APInt const&, llvm::KnownBits&, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#9 0x000055a1b8fad215 computeKnownBits(llvm::Value const*, llvm::APInt const&, llvm::KnownBits&, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#10 0x000055a1b8faa45a computeKnownBitsFromOperator(llvm::Operator const*, llvm::APInt const&, llvm::KnownBits&, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#11 0x000055a1b8fad215 computeKnownBits(llvm::Value const*, llvm::APInt const&, llvm::KnownBits&, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#12 0x000055a1b8fad41b computeKnownBits(llvm::Value const*, llvm::KnownBits&, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#13 0x000055a1b8fb05d8 computeKnownBits(llvm::Value const*, unsigned int, (anonymous namespace)::Query const&) ValueTracking.cpp:0:0
#14 0x000055a1b8fb2bdb llvm::computeKnownBits(llvm::Value const*, llvm::DataLayout const&, unsigned int, llvm::AssumptionCache*, llvm::Instruction const*, llvm::DominatorTree const*, llvm::OptimizationRemarkEmitter*, bool) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2ae9bdb)
#15 0x000055a1b8f1e842 llvm::ScalarEvolution::GetMinTrailingZerosImpl(llvm::SCEV const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a55842)
#16 0x000055a1b8f1e5d6 llvm::ScalarEvolution::GetMinTrailingZeros(llvm::SCEV const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a555d6)
#17 0x000055a1b8f1e97c llvm::ScalarEvolution::GetMinTrailingZerosImpl(llvm::SCEV const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a5597c)
#18 0x000055a1b8f1e5d6 llvm::ScalarEvolution::GetMinTrailingZeros(llvm::SCEV const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a555d6)
#19 0x000055a1b8f1ea4c llvm::ScalarEvolution::GetMinTrailingZerosImpl(llvm::SCEV const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a55a4c)
#20 0x000055a1b8f1e5d6 llvm::ScalarEvolution::GetMinTrailingZeros(llvm::SCEV const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a555d6)
#21 0x000055a1b8f2f66f llvm::ScalarEvolution::getRangeRef(llvm::SCEV const*, llvm::ScalarEvolution::RangeSignHint) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a6666f)
#22 0x000055a1b8f316c5 llvm::ScalarEvolution::isKnownNonNegative(llvm::SCEV const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a686c5)
#23 0x000055a1b8f52077 llvm::ScalarEvolution::getGEPExpr(llvm::GEPOperator*, llvm::SmallVectorImpl<llvm::SCEV const*> const&) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a89077)
#24 0x000055a1b8f5222d llvm::ScalarEvolution::createNodeForGEP(llvm::GEPOperator*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a8922d)
#25 0x000055a1b8f385db llvm::ScalarEvolution::createSCEV(llvm::Value*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a6f5db)
#26 0x000055a1b8f39c4f llvm::ScalarEvolution::getSCEV(llvm::Value*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a70c4f)
#27 0x000055a1b8f4d252 llvm::ScalarEvolution::computeSCEVAtScope(llvm::SCEV const*, llvm::Loop const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a84252)
#28 0x000055a1b8f4dc45 llvm::ScalarEvolution::getSCEVAtScope(llvm::SCEV const*, llvm::Loop const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a84c45)
#29 0x000055a1b8f4da84 llvm::ScalarEvolution::computeSCEVAtScope(llvm::SCEV const*, llvm::Loop const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a84a84)
#30 0x000055a1b8f4dc45 llvm::ScalarEvolution::getSCEVAtScope(llvm::SCEV const*, llvm::Loop const*) (/local/suz-local/software/local/clang-trunk/bin/clang-15+0x2a84c45)
...
clang-15: error: unable to execute command: Segmentation fault
clang-15: error: clang frontend command failed due to signal (use -v to see invocation)
clang version 15.0.0 (https://github.com/llvm/llvm-project.git 6e23cd2bf073ab5eb5a103b935af54046d007c52)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /local/suz-local/opfuzz/bin
clang-15: note: diagnostic msg:
********************
PLEASE ATTACH THE FOLLOWING FILES TO THE BUG REPORT:
Preprocessed source(s) and associated run script(s) are located at:
clang-15: note: diagnostic msg: /tmp/small-ba1158.c
clang-15: note: diagnostic msg: /tmp/small-ba1158.sh
clang-15: note: diagnostic msg:
********************
[525] %
[525] % cat small.c
int a[6], b, c, d, e, f, g, i;
int main() {
for (c = 0; c > -2; c--)
;
f = ~(c - 1);
if (f < 2)
for (; d; d--)
for (i = 0; i < 10; i++)
for (g = 0; g < 6; g++)
for (e = 0; e < 3; e++)
for (c = 0; c < 6; c++) {
b = a[(b ^ 5) & 15];
b = a[(b ^ 5) & 15];
b = a[(b ^ 5) & 15];
}
return 0;
}
```
Compiler Explorer: https://godbolt.org/z/vnos8Toqv
@fhahn
![]()
_______________________________________________
llvm-bugs mailing list
[email protected]
https://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-bugs
