diff options
| author | Denis Khalikov <d.khalikov@partner.samsung.com> | 2017-11-07 19:10:03 +0300 |
|---|---|---|
| committer | Denis Khalikov <d.khalikov@partner.samsung.com> | 2017-11-09 18:40:35 +0300 |
| commit | 2fdbd3fb5ab97bcb33a8d1ae9950125ca544e10c (patch) | |
| tree | aa007c243bb6b8731d8f5ae3106d68a35f93fc25 | |
| parent | 91dc6cda498f9cd7c608bd1494ddcd2aacee9e84 (diff) | |
| download | linaro-gcc-2fdbd3fb5ab97bcb33a8d1ae9950125ca544e10c.tar.gz linaro-gcc-2fdbd3fb5ab97bcb33a8d1ae9950125ca544e10c.tar.bz2 linaro-gcc-2fdbd3fb5ab97bcb33a8d1ae9950125ca544e10c.zip | |
[ISan] Fix ICE with ISan and -ftree-loop-vectorize
In case we want to vectorize the loop, we can not
rely only on TREE_OVERFLOW flag, while folding the INTEGER_CST,
which represents the step of vectorization.
We still should check TYPE_OVERFLOW_WRAPS flag instead
TYPE_OVERFLOW_SANITIZED flag, because the step could
be already marked as TREE_OVERFLOW == 1.
Change-Id: I1288b7e3b587c5773b184636bdfdada168b8941f
| -rw-r--r-- | gcc/fold-const.c | 5 | ||||
| -rw-r--r-- | gcc/testsuite/c-c++-common/isan/loop-vect.c | 21 |
2 files changed, 24 insertions, 2 deletions
diff --git a/gcc/fold-const.c b/gcc/fold-const.c index 17ff6408f1a..23ee11ff53d 100644 --- a/gcc/fold-const.c +++ b/gcc/fold-const.c @@ -550,8 +550,9 @@ fold_negate_expr (location_t loc, tree t) if (TREE_OVERFLOW (tem) == TREE_OVERFLOW (t) || (ANY_INTEGRAL_TYPE_P (type) && !TYPE_OVERFLOW_TRAPS (type) - && !TYPE_OVERFLOW_SANITIZED (type)) - || (flag_sanitize & (SANITIZE_SI_OVERFLOW | SANITIZE_UI_OVERFLOW)) == 0) + && TYPE_OVERFLOW_WRAPS (type)) + || (flag_sanitize & (SANITIZE_SI_OVERFLOW | SANITIZE_UI_OVERFLOW)) + == 0) return tem; break; diff --git a/gcc/testsuite/c-c++-common/isan/loop-vect.c b/gcc/testsuite/c-c++-common/isan/loop-vect.c new file mode 100644 index 00000000000..39446523583 --- /dev/null +++ b/gcc/testsuite/c-c++-common/isan/loop-vect.c @@ -0,0 +1,21 @@ +/* { dg-do compile } */ +/* { dg-options "-fsanitize=unsigned-integer-overflow" } */ + +typedef struct { + int r; + int i; +} kiss_fft_cpx; + +typedef struct { + int inmem[0]; +} TonalityAnalysisState; + +float a; +kiss_fft_cpx b[0]; +TonalityAnalysisState c; + +void foo() { + int i = 0; + for (; i < 40; i++) + b[-i].i = a * c.inmem[i]; +} |