[Bug analyzer/100244] [11/12 Regression] ICE: Segmentation fault (in describe_state_change)

[cvs-commit at gcc dot gnu.org via Gcc-bugs]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=100244

--- Comment #2 from CVS Commits <cvs-commit at gcc dot gnu.org> ---
The master branch has been updated by David Malcolm <dmalc...@gcc.gnu.org>:

https://gcc.gnu.org/g:61bfff562e3b6091d5a0a412a7d496bd523868a8

commit r12-108-g61bfff562e3b6091d5a0a412a7d496bd523868a8
Author: David Malcolm <dmalc...@redhat.com>
Date:   Sat Apr 24 19:49:31 2021 -0400

    analyzer: fix ICE on NULL change.m_expr [PR100244]

    PR analyzer/100244 reports an ICE on a -Wanalyzer-free-of-non-heap
    due to a case where free_of_non_heap::describe_state_change can be
    passed a NULL change.m_expr for a suitably complicated symbolic value.

    Bulletproof it by checking for change.m_expr being NULL before
    dereferencing it.

    gcc/analyzer/ChangeLog:
            PR analyzer/100244
            * sm-malloc.cc (free_of_non_heap::describe_state_change):
            Bulletproof against change.m_expr being NULL.

    gcc/testsuite/ChangeLog:
            PR analyzer/100244
            * g++.dg/analyzer/pr100244.C: New test.