On Fri, Mar 20, 2015 at 10:53:50AM -0400, Jason Merrill wrote:
> On 03/19/2015 02:05 PM, Jakub Jelinek wrote:
> >Though, a question is if we do (or, if we don't and should) reject say
> >constexpr char s[] = "abc";
> >constexpr int j = 4;
> >constexpr char c = *(&s[j] - 2);
> >because there was out of bound access in there.
> 
> I don't see an out-of-bound access in this example; taking the address of
> one-past-the-end is OK as long as you don't try to access through it.
> 
> >Unfortunately we reject even that (regardless the patch), and yeah, it's
> >because of how POINTER_PLUS_EXPR uses sizetype as a type of the second 
> >operand.
> 
> This seems like something to fix in this patch.
 
In the following version of the patch I tried to address various diagnostic
issues raised in this thread.  Please see the testcase if what I did makes
sense.

> >+          tree t = fold_convert_loc (loc, TREE_TYPE (op01),
> >+                                     TREE_OPERAND (op00, 1));
> >+          t = size_binop_loc (loc, PLUS_EXPR, op01, t);
> 
> This seems to be assuming that the elements are size 1.

Dunno how I flubbed that.  Fixed.

Bootstrapped/regtested on x86_64-linux, ok for trunk?

2015-03-20  Marek Polacek  <pola...@redhat.com>

        PR c++/65398
        * constexpr.c (cxx_fold_indirect_ref): Transform *(&A[i] p+ j) into
        A[i + j].

        * g++.dg/cpp0x/pr65398.C: New test.

diff --git gcc/cp/constexpr.c gcc/cp/constexpr.c
index 1b5f50c..37b619d 100644
--- gcc/cp/constexpr.c
+++ gcc/cp/constexpr.c
@@ -2427,6 +2427,27 @@ cxx_fold_indirect_ref (location_t loc, tree type, tree 
op0, bool *empty_base)
                    break;
                  }
            }
+         /* *(&A[i] p+ j) => A[i + j] */
+         else if (TREE_CODE (op00) == ARRAY_REF
+                  && TREE_CODE (TREE_OPERAND (op00, 1)) == INTEGER_CST
+                  && TREE_CODE (op01) == INTEGER_CST)
+           {
+             tree t = fold_convert_loc (loc, ssizetype,
+                                        TREE_OPERAND (op00, 1));
+             tree nelts
+               = array_type_nelts_top (TREE_TYPE (TREE_OPERAND (op00, 0)));
+             /* Don't fold an out-of-bound access.  */
+             if (!tree_int_cst_le (t, nelts))
+               return NULL_TREE;
+             /* Make sure to treat the second operand of POINTER_PLUS_EXPR
+                as signed.  */
+             op01 = fold_build2_loc (loc, EXACT_DIV_EXPR, ssizetype,
+                                     cp_fold_convert (ssizetype, op01),
+                                     TYPE_SIZE_UNIT (type));
+             t = size_binop_loc (loc, PLUS_EXPR, op01, t);
+             return build4_loc (loc, ARRAY_REF, type, TREE_OPERAND (op00, 0),
+                                t, NULL_TREE, NULL_TREE);
+           }
        }
     }
   /* *(foo *)fooarrptr => (*fooarrptr)[0] */
diff --git gcc/testsuite/g++.dg/cpp0x/pr65398.C 
gcc/testsuite/g++.dg/cpp0x/pr65398.C
index e69de29..4aa7455 100644
--- gcc/testsuite/g++.dg/cpp0x/pr65398.C
+++ gcc/testsuite/g++.dg/cpp0x/pr65398.C
@@ -0,0 +1,62 @@
+// PR c++/65398
+// { dg-do compile { target c++11 } }
+
+#define SA(X) static_assert((X),#X)
+
+constexpr char s[] = "abc";
+constexpr char c1 = *(&s[0] + 0);
+constexpr char c2 = *(&s[0] + 1);
+constexpr char c3 = *(&s[1] + 0);
+constexpr char c4 = *(&s[1] + 1);
+constexpr char c5 = *(&s[2] + 0);
+constexpr char c6 = *(&s[0] + 2);
+constexpr char c7 = *(&s[2] + 1);
+
+constexpr char d1 = *(&s[4] - 0); // { dg-error "array subscript out of bound" 
}
+constexpr char d2 = *(&s[4] - 1);
+constexpr char d3 = *(&s[4] - 2);
+constexpr char d4 = *(&s[4] - 3);
+constexpr char d5 = *(&s[4] - 4);
+constexpr char d6 = *(&s[4] - 5);  // { dg-error "negative array subscript" }
+
+/* Don't accept invalid stuff.  */
+constexpr char e1 = *(&s[5] - 1); // { dg-error "is not a constant expression" 
}
+constexpr char e2 = *(&s[5] - 2); // { dg-error "is not a constant expression" 
}
+constexpr char e3 = *(&s[5] - 3); // { dg-error "is not a constant expression" 
}
+
+SA (c1 == 'a');
+SA (c2 == 'b');
+SA (c3 == 'b');
+SA (c4 == 'c');
+SA (c5 == 'c');
+SA (c6 == 'c');
+SA (c7 == '\0');
+
+constexpr int l[] = { 'c', 'd', 'e', '\0' };
+constexpr int i1 = *(&l[0] + 0);
+constexpr int i2 = *(&l[0] + 1);
+constexpr int i3 = *(&l[1] + 0);
+constexpr int i4 = *(&l[1] + 1);
+constexpr int i5 = *(&l[2] + 0);
+constexpr int i6 = *(&l[0] + 2);
+constexpr int i7 = *(&l[2] + 1);
+
+constexpr char j1 = *(&l[4] - 0); // { dg-error "array subscript out of bound" 
}
+constexpr char j2 = *(&l[4] - 1);
+constexpr char j3 = *(&l[4] - 2);
+constexpr char j4 = *(&l[4] - 3);
+constexpr char j5 = *(&l[4] - 4);
+constexpr char j6 = *(&l[4] - 5);  // { dg-error "negative array subscript" }
+
+/* Don't accept invalid stuff.  */
+constexpr char k1 = *(&l[5] - 1); // { dg-error "is not a constant expression" 
}
+constexpr char k2 = *(&l[5] - 2); // { dg-error "is not a constant expression" 
}
+constexpr char k3 = *(&l[5] - 3); // { dg-error "is not a constant expression" 
}
+
+SA (i1 == 'c');
+SA (i2 == 'd');
+SA (i3 == 'd');
+SA (i4 == 'e');
+SA (i5 == 'e');
+SA (i6 == 'e');
+SA (i7 == '\0');

        Marek

Reply via email to