can someone look at an ICE in the name mangler?

[Joe Buck <jbuck at synopsys dot COM>]

This is gnats bug #4447.  It appears that in some cases, if the name
mangler is handed a template function name where there are non-type
template arguments, in a context where an expression is given for such an
argument, the name mangler dereferences a null pointer and crashes.  It
seems that the reason is that the template argument is not simplified
before passing it to the mangler when the compiler attempts to mark a
function as addressible; see

http://gcc.gnu.org/ml/gcc-bugs/2001-10/msg00043.html

This is a regression from 2.95.x to 3.0, and is still present.  It was
probably introduced as part of the new ABI work.

I'm hoping that to an expert, a fix (that would be safe to include in
3.0.2) would be a simple matter, as it's very difficult to do nontrivial
work with non-type template arguments in the presence of this bug.  Would
someone who's familiar with the name mangler be willing to look at this
case?