https://gcc.gnu.org/bugzilla/show_bug.cgi?id=109094
Bug ID: 109094 Summary: [13 Regression] ICE in -fanalyzer seen in qemu's target/i386/tcg/translate.c Product: gcc Version: 13.0 Status: UNCONFIRMED Severity: normal Priority: P3 Component: analyzer Assignee: dmalcolm at gcc dot gnu.org Reporter: dmalcolm at gcc dot gnu.org Target Milestone: --- Trunk ICEs on the attached: $ ./xgcc -B. -fanalyzer -S ../../src/target_i386_tcg_translate.c \ -Wall -Wno-array-parameter -Wno-unused-function -Wno-unused-variable /home/david/more-coding/gcc-newgit-analyzer-dsl/src/target_i386_tcg_translate.c:48985:29: internal compiler error: in get_region_for_local, at analyzer/region.cc:920 48985 | if (s->base.num_insns > 1 && !is_same_page(&s->base, s->pc + num_bytes - 1)) { | ~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 0x1af2cb3 ana::frame_region::get_region_for_local(ana::region_model_manager*, tree_node*, ana::region_model_context const*) const ../../src/gcc/analyzer/region.cc:920 0x1afc3f8 ana::region_model::get_lvalue_1(ana::path_var, ana::region_model_context*) const ../../src/gcc/analyzer/region-model.cc:2101 0x1afc5c7 ana::region_model::get_lvalue(ana::path_var, ana::region_model_context*) const ../../src/gcc/analyzer/region-model.cc:2153 0x1afcac1 ana::region_model::get_rvalue_1(ana::path_var, ana::region_model_context*) const ../../src/gcc/analyzer/region-model.cc:2219 0x1afcf08 ana::region_model::get_rvalue(ana::path_var, ana::region_model_context*) const ../../src/gcc/analyzer/region-model.cc:2297 0x1afcfc7 ana::region_model::get_rvalue(tree_node*, ana::region_model_context*) const ../../src/gcc/analyzer/region-model.cc:2312 0x1b172ac ana::poisoned_value_diagnostic::check_valid_fpath_p(ana::feasible_node const&, gimple const*) const ../../src/gcc/analyzer/region-model.cc:596 0x2f1f2d7 ana::epath_finder::process_worklist_item(ana::feasible_worklist*, ana::trimmed_graph const&, ana::feasible_graph*, ana::exploded_node const*, gimple const*, ana::pending_diagnostic const&, unsigned int, std::unique_ptr<ana::exploded_path, std::default_delete<ana::exploded_path> >*) const ../../src/gcc/analyzer/diagnostic-manager.cc:538 0x2f1ee71 ana::epath_finder::explore_feasible_paths(ana::exploded_node const*, gimple const*, ana::pending_diagnostic const&, char const*, unsigned int) ../../src/gcc/analyzer/diagnostic-manager.cc:434 0x2f1e9d8 ana::epath_finder::get_best_epath(ana::exploded_node const*, gimple const*, ana::pending_diagnostic const&, char const*, unsigned int, std::unique_ptr<ana::feasibility_problem, std::default_delete<ana::feasibility_problem> >*) ../../src/gcc/analyzer/diagnostic-manager.cc:175 0x2f201fa ana::saved_diagnostic::calc_best_epath(ana::epath_finder*) ../../src/gcc/analyzer/diagnostic-manager.cc:839 0x2f2541d ana::dedupe_winners::add(ana::logger*, ana::epath_finder*, ana::saved_diagnostic*) ../../src/gcc/analyzer/diagnostic-manager.cc:1207 0x2f20d21 ana::diagnostic_manager::emit_saved_diagnostics(ana::exploded_graph const&) ../../src/gcc/analyzer/diagnostic-manager.cc:1357 0x1aa1816 ana::impl_run_checkers(ana::logger*) ../../src/gcc/analyzer/engine.cc:6139 0x1aa1b70 ana::run_checkers() ../../src/gcc/analyzer/engine.cc:6213 0x1a9404a execute ../../src/gcc/analyzer/analyzer-pass.cc:87 Please submit a full bug report, with preprocessed source (by using -freport-bug). Please include the complete backtrace with any bug report. See <https://gcc.gnu.org/bugs/> for instructions. Unfortunately it takes about 12 minutes to ICE. Haven't yet tested with earlier versions.