Testcase, compile at -O2. A clone "g.clone.0" is formed which is the same as "g", only the second argument has been dropped. The bug is that in the CALL_EXPR the type of the called function is still the original type.
// begin testcase static __attribute__((noinline)) int g(int i, int j) { if (j != 0) return 0; return i; } int f(int i) { return g(i, 0); } // end testcase Breaking on verify_gimple_call, and waiting until after "Assembling functions: g.clone.0 float" is printed, notice how the type of the addr_expr is a pointer to "type <function_type 0x7ffff70c2540 type <integer_type 0x7ffff7e8c540 int>", while the type of g.clone.0 (see arg 0) is "type <function_type 0x7ffff70c2e40 type <integer_type 0x7ffff7e8c540 int>", and these two types do not match, though they should. (gdb) call debug_tree(fn) <addr_expr 0x7ffff7ff0b00 type <pointer_type 0x7ffff70c26c0 type <function_type 0x7ffff70c2540 type <integer_type 0x7ffff7e8c540 int> QI size <integer_cst 0x7ffff7e7b7e0 constant 8> unit size <integer_cst 0x7ffff7e7b810 constant 1> align 8 symtab 0 alias set -1 canonical type 0x7ffff70c2540 arg-types <tree_list 0x7ffff70da3c0 value <integer_type 0x7ffff7e8c540 int> chain <tree_list 0x7ffff70da390 value <integer_type 0x7ffff7e8c540 int> chain <tree_list 0x7ffff7e999f0 value <void_type 0x7ffff7e9b3c0 void>>>> pointer_to_this <pointer_type 0x7ffff70c26c0>> unsigned DI size <integer_cst 0x7ffff7e7bb70 constant 64> unit size <integer_cst 0x7ffff7e7bba0 constant 8> align 64 symtab 0 alias set -1 canonical type 0x7ffff70c26c0> readonly constant arg 0 <function_decl 0x7ffff7123200 g.clone.0 type <function_type 0x7ffff70c2e40 type <integer_type 0x7ffff7e8c540 int> QI size <integer_cst 0x7ffff7e7b7e0 8> unit size <integer_cst 0x7ffff7e7b810 1> align 8 symtab 0 alias set -1 canonical type 0x7ffff70c2540 arg-types <tree_list 0x7ffff70daa20 value <integer_type 0x7ffff7e8c540 int> chain <tree_list 0x7ffff7e999f0>> pointer_to_this <pointer_type 0x7ffff70c26c0>> readonly addressable asm_written used nothrow static decl_5 QI file clone.c line 1 col 38 align 8 attributes <tree_list 0x7ffff70da3f0> initial <error_mark 0x7ffff7e86e60> abstract_origin <function_decl 0x7ffff70c1c00 g> arguments <parm_decl 0x7ffff7e84d80 i type <integer_type 0x7ffff7e8c540 int> used SI file clone.c line 1 col 44 size <integer_cst 0x7ffff7e7ba80 constant 32> unit size <integer_cst 0x7ffff7e7b6f0 constant 4> align 32 context <function_decl 0x7ffff7123200 g.clone.0> abstract_origin <parm_decl 0x7ffff7e846c0 i> (reg/v:SI 0 ax [orig:59 i ] [59]) arg-type <integer_type 0x7ffff7e8c540 int> incoming-rtl (reg:SI 5 di [ i ])> result <result_decl 0x7ffff70db100 D.2707 type <integer_type 0x7ffff7e8c540 int> used ignored regdecl SI file clone.c line 1 col 38 size <integer_cst 0x7ffff7e7ba80 32> unit size <integer_cst 0x7ffff7e7b6f0 4> align 32 context <function_decl 0x7ffff7123200 g.clone.0> abstract_origin <result_decl 0x7ffff70db000 D.1606> (reg:SI 58 [ <retval> ])> (mem:QI (symbol_ref:DI ("g.clone.0") [flags 0x3] <function_decl 0x7ffff7123200 g.clone.0>) [0 S1 A8])> clone.c:5:16> -- Summary: Type of ADDR_EXPR in CALL_EXPR not rebuilt when function is cloned Product: gcc Version: 4.5.0 Status: UNCONFIRMED Severity: normal Priority: P3 Component: tree-optimization AssignedTo: unassigned at gcc dot gnu dot org ReportedBy: baldrick at free dot fr http://gcc.gnu.org/bugzilla/show_bug.cgi?id=41355