[Patch] Fix ICE at -O3 during IPCP

[Eric Botcazou]

Hi,

the attached testcase causes an ICE at -O3 on x86 during IPCP:

#0  internal_error (gmsgid=0x98733cb "in %s, at %s:%d")
    at /home/eric/gnat/gnat-head/src/gcc/diagnostic.c:672
#1  0x0865d5c4 in fancy_abort (
    file=0x98e03a0 "/home/eric/gnat/gnat-head/src/gcc/tree.c", line=6199,
    function=0x98e1aa3 "tree_low_cst")
    at /home/eric/gnat/gnat-head/src/gcc/diagnostic.c:728
#2  0x08d2674b in tree_low_cst (t=0x0, pos=1)
    at /home/eric/gnat/gnat-head/src/gcc/tree.c:6199
#3  0x08bd77f9 in build_ref_for_offset_1 (res=0xffffcc68, type=0xf7d96ec4,
    offset=32, exp_type=0xf7d9672c)
    at /home/eric/gnat/gnat-head/src/gcc/tree-sra.c:1246
#4  0x08bd7c9b in build_ref_for_offset (expr=0xffffcc68, type=0xf7d96ec4,
    offset=32, exp_type=0xf7d9672c, allow_ptr=0 '\0')
    at /home/eric/gnat/gnat-head/src/gcc/tree-sra.c:1324
#5  0x08deedbb in ipcp_lattice_from_jfunc (info=0x9f50f54, lat=0xffffccec,
    jfunc=0x9f28cf8) at /home/eric/gnat/gnat-head/src/gcc/ipa-cp.c:333

(gdb) frame 5
#5  0x08deedbb in ipcp_lattice_from_jfunc (info=0x9f50f54, lat=0xffffccec,
    jfunc=0x9f28cf8) at /home/eric/gnat/gnat-head/src/gcc/ipa-cp.c:333
333           ok = build_ref_for_offset (&t, TREE_TYPE (t),
(gdb) p debug_generic_expr(t)
p__data.F

p__data.F has variable size because it contains the field A which originally 
had variable size...  but has no size anymore since it has been cleared in 
free_lang_data_in_decl:

  if (TREE_CODE (decl) == PARM_DECL
      || TREE_CODE (decl) == FIELD_DECL
      || TREE_CODE (decl) == RESULT_DECL)
    {
      tree unit_size = DECL_SIZE_UNIT (decl);
      tree size = DECL_SIZE (decl);
      if ((unit_size && TREE_CODE (unit_size) != INTEGER_CST)
	  || (size && TREE_CODE (size) != INTEGER_CST))
	{
	  DECL_SIZE_UNIT (decl) = NULL_TREE;
	  DECL_SIZE (decl) = NULL_TREE;
	}

so tree_low_cst is called on the NULL pointer

#3  0x08bd77f9 in build_ref_for_offset_1 (res=0xffffcc68, type=0xf7d96ec4,
    offset=32, exp_type=0xf7d9672c)
    at /home/eric/gnat/gnat-head/src/gcc/tree-sra.c:1246
1246                  size = tree_low_cst (DECL_SIZE (fld), 1);
(gdb) frame 2
#2  0x08d2674b in tree_low_cst (t=0x0, pos=1)
    at /home/eric/gnat/gnat-head/src/gcc/tree.c:6199
6199      gcc_assert (host_integerp (t, pos));

and aborts.

Should build_ref_for_offset_1 be prepared to deal with sizeless fields?
It is already prepared to deal with sizeless arrays immediately below:

	case ARRAY_TYPE:
	  tr_size = TYPE_SIZE (TREE_TYPE (type));
	  if (!tr_size || !host_integerp (tr_size, 1))
	    return false;
	  el_size = tree_low_cst (tr_size, 1);

Patch attached, tested on i586-suse-linux, OK for mainline?


2009-10-19  Eric Botcazou  <ebotcazou@adacore.com>

	* tree-sra.c (build_ref_for_offset_1) <RECORD_TYPE>: Skip fields
	without size or size that can be represented as a host integer.


2009-10-19  Eric Botcazou  <ebotcazou@adacore.com>

	* gnat.dg/discr21.ad[sb]: New test.
	* gnat.dg/discr21_pkg.ads: New helper.


-- 
Eric Botcazou
-------------- next part --------------
A non-text attachment was scrubbed...
Name: p.diff
Type: text/x-diff
Size: 579 bytes
Desc: not available
URL: <http://gcc.gnu.org/pipermail/gcc-patches/attachments/20091019/06514040/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: discr21.adb
Type: text/x-adasrc
Size: 584 bytes
Desc: not available
URL: <http://gcc.gnu.org/pipermail/gcc-patches/attachments/20091019/06514040/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: discr21.ads
Type: text/x-adasrc
Size: 52 bytes
Desc: not available
URL: <http://gcc.gnu.org/pipermail/gcc-patches/attachments/20091019/06514040/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: discr21_pkg.ads
Type: text/x-adasrc
Size: 351 bytes
Desc: not available
URL: <http://gcc.gnu.org/pipermail/gcc-patches/attachments/20091019/06514040/attachment-0003.bin>