https://gcc.gnu.org/bugzilla/show_bug.cgi?id=96841
--- Comment #1 from CVS Commits <cvs-commit at gcc dot gnu.org> --- The master branch has been updated by David Malcolm <dmalc...@gcc.gnu.org>: https://gcc.gnu.org/g:29f5db8ef81fac4db8e66e5f06fdf1d469e8161c commit r11-3471-g29f5db8ef81fac4db8e66e5f06fdf1d469e8161c Author: David Malcolm <dmalc...@redhat.com> Date: Fri Sep 25 17:15:42 2020 -0400 analyzer: fix ICEs treeifying offset_region [PR96646, PR96841] gcc/analyzer/ChangeLog: PR analyzer/96646 PR analyzer/96841 * region-model.cc (region_model::get_representative_path_var): When handling offset_region, wrap the MEM_REF's first argument in an ADDR_EXPR of pointer type, rather than simply using the tree for the parent region. Require the MEM_REF's second argument to be an integer constant. gcc/testsuite/ChangeLog: PR analyzer/96646 PR analyzer/96841 * gcc.dg/analyzer/pr96646.c: New test. * gcc.dg/analyzer/pr96841.c: New test.