This avoids crashes with __builtin_next_arg on non-parameters.  For
the specific testcase we arrive with an anonymous SSA_NAME so that
SSA_NAME_VAR becomes NULL and we crash.

Bootstrapped and tested on x86_64-unknown-linux-gnu, pushed.

2021-02-24  Richard Biener  <rguent...@suse.de>

        PR c/99224
        * builtins.c (fold_builtin_next_arg): Avoid NULL arg.

        * gcc.dg/pr99224.c: New testcase.
---
 gcc/builtins.c                 | 3 ++-
 gcc/testsuite/gcc.dg/pr99224.c | 6 ++++++
 2 files changed, 8 insertions(+), 1 deletion(-)
 create mode 100644 gcc/testsuite/gcc.dg/pr99224.c

diff --git a/gcc/builtins.c b/gcc/builtins.c
index 0aed008687c..42150cee0bd 100644
--- a/gcc/builtins.c
+++ b/gcc/builtins.c
@@ -12597,7 +12597,8 @@ fold_builtin_next_arg (tree exp, bool va_start_p)
       arg = CALL_EXPR_ARG (exp, 0);
     }
 
-  if (TREE_CODE (arg) == SSA_NAME)
+  if (TREE_CODE (arg) == SSA_NAME
+      && SSA_NAME_VAR (arg))
     arg = SSA_NAME_VAR (arg);
 
   /* We destructively modify the call to be __builtin_va_start (ap, 0)
diff --git a/gcc/testsuite/gcc.dg/pr99224.c b/gcc/testsuite/gcc.dg/pr99224.c
new file mode 100644
index 00000000000..f6e9ac8eba3
--- /dev/null
+++ b/gcc/testsuite/gcc.dg/pr99224.c
@@ -0,0 +1,6 @@
+/* { dg-do compile } */
+
+void f (char *c, ...)
+{
+  __builtin_next_arg (*c); /* { dg-warning "not last named argument" } */
+}
-- 
2.26.2

Reply via email to