[Bug libstdc++/82558] [8 Regression] V8 JavaScript engine segfaults since r249235

[trippels at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=82558

Markus Trippelsdorf <trippels at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2017-10-15
     Ever confirmed|0                           |1

--- Comment #2 from Markus Trippelsdorf <trippels at gcc dot gnu.org> ---
markus@x4 /tmp % cat test.cpp
#include <vector>

int main() {
  std::vector<bool> bv;
  std::fill(bv.begin(), bv.end(), false);
}

markus@x4 /tmp % g++ -fsanitize=undefined test.cpp
markus@x4 /tmp % ./a.out
/home/markus/tmp/cache/gcc_test/usr/local/include/c++/8.0.0/bits/stl_bvector.h:396:36:
runtime error: shift exponent 64 is too large for 64-bit type 'long unsigned
int'
/home/markus/tmp/cache/gcc_test/usr/local/include/c++/8.0.0/bits/stl_bvector.h:402:12:
runtime error: load of null pointer of type '_Bit_type'
[1]    24985 segmentation fault  ./a.out