[Bug analyzer/121135] New: ICE in -fanalyzer state diagram output on attr-malloc-CVE-2019-19078-usb-leak.c

[dmalcolm at gcc dot gnu.org via Gcc-bugs]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=121135

            Bug ID: 121135
           Summary: ICE in -fanalyzer state diagram output on
                    attr-malloc-CVE-2019-19078-usb-leak.c
           Product: gcc
           Version: unknown
            Status: UNCONFIRMED
          Keywords: diagnostic
          Severity: normal
          Priority: P3
         Component: analyzer
          Assignee: dmalcolm at gcc dot gnu.org
          Reporter: dmalcolm at gcc dot gnu.org
  Target Milestone: ---

I get an ICE with trunk on:
  ./xgcc -B. -S -fanalyzer \
    
../../src/gcc/testsuite/c-c++-common/analyzer/attr-malloc-CVE-2019-19078-usb-leak.c
\
     -fdiagnostics-add-output=sarif \
     -fdiagnostics-add-output=experimental-html:show-state-diagrams=yes

while writing out the HTML output here:

#1  0x000000000360d721 in ana::analyzer_state_graph::create_state_node
(this=0x4ec1370, reg=...)
    at ../../src/gcc/analyzer/ana-state-to-diagnostic-state.cc:367
367           gcc_unreachable ();

where:

(gdb) list
362           break;
363     
364         case RK_FIELD:
365         case RK_ELEMENT:
366           /* These should be handled in
populate_state_node_for_typed_region.  */
367           gcc_unreachable ();
368           break;