https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96639
Bug ID: 96639 Summary: [11 Regression] ICE: Segmentation fault (in useless_type_conversion_p) Product: gcc Version: 11.0 Status: UNCONFIRMED Severity: normal Priority: P3 Component: analyzer Assignee: dmalcolm at gcc dot gnu.org Reporter: asolokha at gmx dot com Target Milestone: --- gcc-11.0.0-alpha20200816 snapshot (g:c99116aeeb9644ebddec653ee8b19de4d38b65bd) ICEs when compiling the following testcase w/ -fanalyzer: void * calloc (__SIZE_TYPE__, __SIZE_TYPE__); int x7 (void) { int **md = calloc (1, 1); return md[0][0]; } % gcc-11.0.0 -fanalyzer -c at88dqtc.c during IPA pass: analyzer at88dqtc.c: In function 'x7': at88dqtc.c:9:15: internal compiler error: Segmentation fault 9 | return md[0][0]; | ~~~~~^~~ 0xd7da1f crash_signal /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/toplev.c:327 0xab1798 useless_type_conversion_p(tree_node*, tree_node*) /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/gimple-expr.c:71 0x1108dce types_compatible_p /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/gimple-expr.h:67 0x1108dce ana::region::get_subregions_for_binding(ana::region_model_manager*, generic_wide_int<fixed_wide_int_storage<128> >, generic_wide_int<fixed_wide_int_storage<128> >, tree_node*, auto_vec<ana::region const*, 0ul>*) const /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/region.cc:262 0x113822c ana::binding_cluster::get_representative_path_vars(ana::region_model const*, hash_set<ana::svalue const*, false, default_hash_traits<ana::svalue const*> >*, ana::region const*, ana::svalue const*, auto_vec<ana::path_var, 0ul>*) const /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/store.cc:1121 0x11392e7 ana::store::get_representative_path_vars(ana::region_model const*, hash_set<ana::svalue const*, false, default_hash_traits<ana::svalue const*> >*, ana::svalue const*, auto_vec<ana::path_var, 0ul>*) const /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/store.cc:1805 0x110dc5d ana::region_model::get_representative_path_var(ana::svalue const*, hash_set<ana::svalue const*, false, default_hash_traits<ana::svalue const*> >*) const /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/region-model.cc:1806 0x110e3a7 ana::region_model::get_representative_tree(ana::svalue const*) const /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/region-model.cc:1851 0x10f8474 ana::impl_sm_context::get_diagnostic_tree(tree_node*) /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/engine.cc:295 0x11320df on_stmt /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/sm-malloc.cc:805 0x10f318f ana::exploded_node::on_stmt(ana::exploded_graph&, ana::supernode const*, gimple const*, ana::program_state*) const /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/engine.cc:1098 0x10f426d ana::exploded_graph::process_node(ana::exploded_node*) /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/engine.cc:2526 0x10f4d5a ana::exploded_graph::process_worklist() /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/engine.cc:2341 0x10f6e8f ana::impl_run_checkers(ana::logger*) /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/engine.cc:4107 0x10f7aac ana::run_checkers() /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/engine.cc:4175 0x10ec468 execute /var/tmp/portage/sys-devel/gcc-11.0.0_alpha20200816/work/gcc-11-20200816/gcc/analyzer/analyzer-pass.cc:84