http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59008
--- Comment #5 from Martin Jambor <jamborm at gcc dot gnu.org> --- IPA-CP is decrementing reference count of parameter 1 instead of parameter 2. That happens because the variable param_index in ipcp_discover_new_direct_edges has type bool instead of int. What a stupid mistake. I'll prepare a patch.