79 lines
1.8 KiB
C
79 lines
1.8 KiB
C
/* { dg-do run } */
|
|
|
|
/* Testcase distilled from glibc's nss_parse_service_list in nss/nsswitch.c
|
|
It can't be distilled further. Fails with `-O2' for i[3456]86. */
|
|
|
|
/* this simulates a bounded-pointer type. */
|
|
struct ucharp { unsigned char *v, *l, *h; };
|
|
|
|
/* this simulates bounded-pointer check prior to pointer dereference. */
|
|
#define AREF(var, idx) ((((((((var).v+(idx)) < (var).l) \
|
|
|| (((var).v+(idx)+1) > (var).h))) \
|
|
&& (__builtin_trap (), 0)), \
|
|
(var).v)[(idx)])
|
|
|
|
struct list
|
|
{
|
|
struct list *next;
|
|
};
|
|
|
|
struct list *
|
|
alloc_list (void)
|
|
{
|
|
static struct list l;
|
|
return &l;
|
|
}
|
|
|
|
int one = 1;
|
|
|
|
void
|
|
foo (struct ucharp cp, struct ucharp lp, struct list **nextp)
|
|
{
|
|
while (1)
|
|
{
|
|
struct list *list;
|
|
while (AREF (lp, 0) && AREF (cp, AREF (lp, 0)))
|
|
++lp.v;
|
|
list = alloc_list ();
|
|
while (AREF (cp, AREF (lp, 0)))
|
|
++lp.v;
|
|
if (AREF (lp, 0) == one)
|
|
do
|
|
++lp.v;
|
|
while (AREF (lp, 0) && AREF (cp, AREF (lp, 0)));
|
|
/* The above AREF (cp, ...) fails because the pseudo created to
|
|
hold cp.v holds garbage, having never been set.
|
|
The easiest way to see the problem is to compile wiht `-O2 -da'
|
|
then look at *.09.loop. Search for something like this:
|
|
|
|
Hoisted regno 183 r/o from (mem/s:SI (reg:SI 16 argp) 10)
|
|
Replaced reg 91, deleting init_insn (213).
|
|
|
|
Now, look for the use of reg 91, which has no set. */
|
|
|
|
*nextp = list;
|
|
nextp = &list->next;
|
|
if (!*lp.v)
|
|
break;
|
|
}
|
|
}
|
|
|
|
extern void exit (int);
|
|
|
|
int
|
|
main (void)
|
|
{
|
|
static unsigned char cp0[] = "\0\0\0\0";
|
|
struct ucharp cp = { cp0, cp0, cp0 + sizeof (cp0) };
|
|
|
|
static unsigned char lp0[] = "\1\1\0\0";
|
|
struct ucharp lp = { lp0, lp0, lp0 + sizeof (lp0) };
|
|
|
|
struct list list;
|
|
struct list *nextp = &list;
|
|
|
|
foo (cp, lp, &nextp);
|
|
|
|
exit (0);
|
|
}
|