| Issue |
177951
|
| Summary |
mlir-opt crash on shape.from_extents with ub.poison during --buffer-deallocation-simplification pass
|
| Labels |
new issue
|
| Assignees |
|
| Reporter |
Subway2023
|
# Description
mlir-opt version: 22.1.0-rc1
mlir-opt crashes when running the --buffer-deallocation-simplification pass on IR containing shape.from_extents with a ub.poison index value.
# Reproduce
location: If the **smt.solver** is commented out, the crash no longer occurs.
```
module {
func.func @main() {
%0 = ub.poison : index
%1 = ml_program.token
%2 = shape.from_extents %0 : index
smt.solver(%1, %2) : (!ml_program.token, !shape.shape) -> () {
^bb0(%arg0: !ml_program.token, %arg1: !shape.shape):
smt.yield
}
return
}
}
```
```
mlir-opt --buffer-deallocation-simplification test.mlir
```
```
mlir-opt: /mnt/sdd1/mlir/tool/llvm-project-llvmorg-22.1.0-rc1/llvm/include/llvm/Support/Casting.h:566: decltype(auto) llvm::cast(From&) [with To = mlir::IntegerAttr; From = mlir::Attribute]: Assertion `isa<To>(Val) && "cast<Ty>() argument of incompatible type!"' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace and instructions to reproduce the bug.
Stack dump:
0. Program arguments: /mnt/sdd1/sbw/mlir/tool/llvmorg-22.1.0-install/bin/mlir-opt --buffer-deallocation-simplification /mnt/sdd1/sbw/mlir/data/genProgram_0125_filtered/genProgram_0125_valid/260214_b1fd_6.mlir
#0 0x00005c9b5806de32 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/mnt/sdd1/sbw/mlir/tool/llvmorg-22.1.0-install/bin/mlir-opt+0x252fe32)
#1 0x00005c9b5806a5af llvm::sys::RunSignalHandlers() (/mnt/sdd1/sbw/mlir/tool/llvmorg-22.1.0-install/bin/mlir-opt+0x252c5af)
#2 0x00005c9b5806a6fc SignalHandler(int, siginfo_t*, void*) Signals.cpp:0:0
#3 0x0000706b59445330 (/lib/x86_64-linux-gnu/libc.so.6+0x45330)
#4 0x0000706b5949eb2c __pthread_kill_implementation ./nptl/pthread_kill.c:44:76
#5 0x0000706b5949eb2c __pthread_kill_internal ./nptl/pthread_kill.c:78:10
#6 0x0000706b5949eb2c pthread_kill ./nptl/pthread_kill.c:89:10
#7 0x0000706b5944527e raise ./signal/../sysdeps/posix/raise.c:27:6
#8 0x0000706b594288ff abort ./stdlib/abort.c:81:7
#9 0x0000706b5942881b _nl_load_domain ./intl/loadmsgcat.c:1177:9
#10 0x0000706b5943b517 (/lib/x86_64-linux-gnu/libc.so.6+0x3b517)
```
![]()
_______________________________________________
llvm-bugs mailing list
[email protected]
https://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-bugs
