[Bug analyzer/93511] New: ICE in make_region_for_type analyzing zlib/gzwrite.c

[dmalcolm at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=93511

            Bug ID: 93511
           Summary: ICE in make_region_for_type analyzing zlib/gzwrite.c
           Product: gcc
           Version: 10.0
            Status: UNCONFIRMED
          Keywords: ice-on-valid-code
          Severity: normal
          Priority: P3
         Component: analyzer
          Assignee: dmalcolm at gcc dot gnu.org
          Reporter: dmalcolm at gcc dot gnu.org
            Blocks: 93388
  Target Milestone: ---

I attempted a bootstrap with -fanalyzer as per PR 93388.

One of the two ICEs seen with 66af5a226acd0edfbafcbcac76ed268cee0612ed:

../../../src/zlib/gzwrite.c: In function ‘gz_write.part.0’:
../../../src/zlib/gzwrite.c:213:13: internal compiler error: in
make_region_for_type, at analyzer/region-model.cc:5961
  213 |             memcpy(state->in + have, buf, copy);
      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
0x1881443 make_region_for_type
        ../../../src/gcc/analyzer/region-model.cc:5961
0x18814a5 ana::region_model::add_region_for_type(ana::region_id, tree_node*)
        ../../../src/gcc/analyzer/region-model.cc:5971
0x1882b0d ana::region_model::get_or_create_view(ana::region_id, tree_node*)
        ../../../src/gcc/analyzer/region-model.cc:6546
0x187866c ana::array_region::get_element(ana::region_model*, ana::region_id,
ana::svalue_id, ana::region_model_context*)
        ../../../src/gcc/analyzer/region-model.cc:2182
0x18829eb ana::region_model::get_or_create_mem_ref(tree_node*, ana::svalue_id,
ana::svalue_id, ana::region_model_context*)
        ../../../src/gcc/analyzer/region-model.cc:6504
0x1882a50 ana::region_model::get_or_create_pointer_plus_expr(tree_node*,
ana::svalue_id, ana::svalue_id, ana::region_model_context*)
        ../../../src/gcc/analyzer/region-model.cc:6524
0x187c701 ana::region_model::on_assignment(gassign const*,
ana::region_model_context*)
        ../../../src/gcc/analyzer/region-model.cc:3955
0x184cdea ana::exploded_node::on_stmt(ana::exploded_graph&, ana::supernode
const*, gimple const*, ana::program_state*, ana::state_change*) const
        ../../../src/gcc/analyzer/engine.cc:948
0x1850c03 ana::exploded_graph::process_node(ana::exploded_node*)
        ../../../src/gcc/analyzer/engine.cc:2411
0x1850536 ana::exploded_graph::process_worklist()
        ../../../src/gcc/analyzer/engine.cc:2231
0x1852fb8 ana::impl_run_checkers(ana::logger*)
        ../../../src/gcc/analyzer/engine.cc:3552
0x1853295 ana::run_checkers()
        ../../../src/gcc/analyzer/engine.cc:3609
0x184b42e execute
        ../../../src/gcc/analyzer/analyzer-pass.cc:84


Referenced Bugs:

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=93388
[Bug 93388] ensure -fanalyzer works with our C code