ziglang/zig
262
5.9k
Fork
You've already forked zig
760

Compiler crash: unreachable reached instead of runtime reference to comptime var error in codegen lowerPtr #30088

Closed
opened 2025年12月03日 02:29:09 +01:00 by euclidianAce · 2 comments

Zig Version

0.16.0-dev.1503+738d2be9d

Steps to Reproduce and Observed Behavior

Attempt to compile the following repro.zig

pubfnmain()void{constblah=comptimeblk:{varbuf:u8=0;break:blk.{.a=&buf};};@import("std").debug.print("{any}\n",.{blah});}

With a debug build of the compiler:

$ zig build-exe repro.zig
Compiler crash context:
(no context)
thread 6370 panic: reached unreachable code
[...]/zig/src/codegen.zig:742:56: 0x28f6a46 in lowerPtr (main.zig)
 .arr_elem, .comptime_field, .comptime_alloc => unreachable,
 ^
[...]/zig/src/codegen.zig:444:29: 0x23dbe8f in generateSymbol (main.zig)
 .ptr => try lowerPtr(bin_file, pt, src_loc, val.toIntern(), w, reloc_parent, 0),
 ^
[...]/zig/src/link/Dwarf.zig:2130:35: 0x4219deb in blockValue (main.zig)
 try codegen.generateSymbol(
 ^
[...]/zig/src/link/Dwarf.zig:4579:59: 0x45e6496 in updateContainerTypeWriterError (main.zig)
 try wip_nav.blockValue(ty_src_loc, .fromInterned(field_init));
 ^
[...]/zig/src/link/Dwarf.zig:4383:48: 0x3d5c046 in updateContainerType (main.zig)
 return dwarf.updateContainerTypeWriterError(pt, type_index) catch |err| switch (err) {
 ^
[...]/zig/src/link/Elf/ZigObject.zig:1718:59: 0x33303fd in updateContainerType (main.zig)
 if (self.dwarf) |*dwarf| try dwarf.updateContainerType(pt, ty);
 ^
[...]/zig/src/link/Elf.zig:1710:53: 0x3330c23 in updateContainerType (main.zig)
 return self.zigObjectPtr().?.updateContainerType(pt, ty) catch |err| switch (err) {
 ^
[...]/zig/src/link.zig:787:91: 0x2cde4f3 in updateContainerType (main.zig)
 return @as(*tag.Type(), @fieldParentPtr("base", base)).updateContainerType(pt, ty);
 ^
[...]/zig/src/link.zig:1549:43: 0x2843282 in doZcuTask (main.zig)
 lf.updateContainerType(pt, ty) catch |err| switch (err) {
 ^
[...]/zig/src/link/Queue.zig:318:23: 0x28209a7 in flushTaskQueue (main.zig)
 link.doZcuTask(comp, tid, task);
 ^
[...]/lib/std/Thread/Pool.zig:180:50: 0x2821153 in runFn (std.zig)
 @call(.auto, func, .{id.?} ++ closure.arguments);
 ^
[...]/lib/std/Thread/Pool.zig:293:27: 0x22b6d20 in worker (std.zig)
 runnable.runFn(runnable, id);
 ^
[...]/lib/std/Thread.zig:559:13: 0x20dac90 in callFn__anon_198523 (std.zig)
 @call(.auto, f, args);
 ^
[...]/lib/std/Thread.zig:1535:30: 0x1f6a500 in entryFn (std.zig)
 return callFn(f, self.fn_args);
 ^
[...]/lib/std/os/linux/x86_64.zig:105:5: 0x1cdc725 in clone (std.zig)
 asm volatile (
 ^
Error: nu::shell::core_dumped
 ×ばつ External command core dumped
 ╭─[entry #11:1:1]
 1 │ zig build-exe repro.zig
 · ─┬─
 · ╰── core dumped with SIGABRT (6)
 ╰────

Something about breaking with a struct allows this to slip through the cracks, since applying either

< break :blk .{ .a = &buf };
---
> break :blk .{ &buf };
< break :blk .{ .a = &buf };
---
> break :blk &buf;

produces the correct error.

In the inciting code this ended up happening due to a slice that wasn't dereferenced to an array that erroneously worked in 0.14.

Expected Behavior

The compiler not to crash and report the usual runtime reference to comptime memory.

### Zig Version 0.16.0-dev.1503+738d2be9d ### Steps to Reproduce and Observed Behavior Attempt to compile the following `repro.zig` ```zig pub fn main() void { const blah = comptime blk: { var buf: u8 = 0; break :blk .{ .a = &buf }; }; @import("std").debug.print("{any}\n", .{blah}); } ``` With a debug build of the compiler: ``` $ zig build-exe repro.zig Compiler crash context: (no context) thread 6370 panic: reached unreachable code [...]/zig/src/codegen.zig:742:56: 0x28f6a46 in lowerPtr (main.zig) .arr_elem, .comptime_field, .comptime_alloc => unreachable, ^ [...]/zig/src/codegen.zig:444:29: 0x23dbe8f in generateSymbol (main.zig) .ptr => try lowerPtr(bin_file, pt, src_loc, val.toIntern(), w, reloc_parent, 0), ^ [...]/zig/src/link/Dwarf.zig:2130:35: 0x4219deb in blockValue (main.zig) try codegen.generateSymbol( ^ [...]/zig/src/link/Dwarf.zig:4579:59: 0x45e6496 in updateContainerTypeWriterError (main.zig) try wip_nav.blockValue(ty_src_loc, .fromInterned(field_init)); ^ [...]/zig/src/link/Dwarf.zig:4383:48: 0x3d5c046 in updateContainerType (main.zig) return dwarf.updateContainerTypeWriterError(pt, type_index) catch |err| switch (err) { ^ [...]/zig/src/link/Elf/ZigObject.zig:1718:59: 0x33303fd in updateContainerType (main.zig) if (self.dwarf) |*dwarf| try dwarf.updateContainerType(pt, ty); ^ [...]/zig/src/link/Elf.zig:1710:53: 0x3330c23 in updateContainerType (main.zig) return self.zigObjectPtr().?.updateContainerType(pt, ty) catch |err| switch (err) { ^ [...]/zig/src/link.zig:787:91: 0x2cde4f3 in updateContainerType (main.zig) return @as(*tag.Type(), @fieldParentPtr("base", base)).updateContainerType(pt, ty); ^ [...]/zig/src/link.zig:1549:43: 0x2843282 in doZcuTask (main.zig) lf.updateContainerType(pt, ty) catch |err| switch (err) { ^ [...]/zig/src/link/Queue.zig:318:23: 0x28209a7 in flushTaskQueue (main.zig) link.doZcuTask(comp, tid, task); ^ [...]/lib/std/Thread/Pool.zig:180:50: 0x2821153 in runFn (std.zig) @call(.auto, func, .{id.?} ++ closure.arguments); ^ [...]/lib/std/Thread/Pool.zig:293:27: 0x22b6d20 in worker (std.zig) runnable.runFn(runnable, id); ^ [...]/lib/std/Thread.zig:559:13: 0x20dac90 in callFn__anon_198523 (std.zig) @call(.auto, f, args); ^ [...]/lib/std/Thread.zig:1535:30: 0x1f6a500 in entryFn (std.zig) return callFn(f, self.fn_args); ^ [...]/lib/std/os/linux/x86_64.zig:105:5: 0x1cdc725 in clone (std.zig) asm volatile ( ^ Error: nu::shell::core_dumped ×ばつ External command core dumped ╭─[entry #11:1:1] 1 │ zig build-exe repro.zig · ─┬─ · ╰── core dumped with SIGABRT (6) ╰──── ``` Something about breaking with a struct allows this to slip through the cracks, since applying either ```diff < break :blk .{ .a = &buf }; --- > break :blk .{ &buf }; ``` ```diff < break :blk .{ .a = &buf }; --- > break :blk &buf; ``` produces the correct error. In the inciting code this ended up happening due to a slice that wasn't dereferenced to an array that erroneously worked in 0.14. ### Expected Behavior The compiler not to crash and report the usual runtime reference to comptime memory.
Owner
Copy link

#31403 doesn't close this because the underlying bug still exists. #31403 just masked it by (for now) disabling lowering struct default values into DWARF. As of #31403 you can reproduce a crash by doing this instead:

constT=T:{varbuf:u8=0;break:T@TypeOf(.{.ptr=&buf});};comptime{_=T;}

(For any compiler devs: the struct type being created by the anonymous struct initialization is having its ptr field made comptime with value &buf, which is invalid because &buf is not a "runtime value", which default field values are required to be. The field needs to be made non-comptime in that case! See similar logic in Sema.arrayInitAnon, look for values_no_comptime.)

#31403 doesn't close this because the underlying bug still exists. #31403 just masked it by (for now) disabling lowering struct default values into DWARF. As of #31403 you can reproduce a crash by doing this instead: ```zig const T = T: { var buf: u8 = 0; break :T @TypeOf(.{ .ptr = &buf }); }; comptime { _ = T; } ``` (For any compiler devs: the struct type being created by the anonymous struct initialization is having its `ptr` field made `comptime` with value `&buf`, which is invalid because `&buf` is not a "runtime value", which default field values are required to be. The field needs to be made non-`comptime` in that case! See similar logic in `Sema.arrayInitAnon`, look for `values_no_comptime`.)
Contributor
Copy link

#31403 doesn't close this because the underlying bug still exists. #31403 just masked it by (for now) disabling lowering struct default values into DWARF.

Ah sorry I misinterpreted the issue, I'll give fixing it a try :)

> #31403 doesn't close this because the underlying bug still exists. #31403 just masked it by (for now) disabling lowering struct default values into DWARF. Ah sorry I misinterpreted the issue, I'll give fixing it a try :)
justusk added this to the 0.17.0 milestone 2026年06月16日 11:54:51 +02:00
Sign in to join this conversation.
No Branch/Tag specified
master
elfv2
spork8
restricted
0.16.x
panic-rewrite
parking-futex-lockfree
windows-Io-cleanup
Io-watch
ParseCommandLineOptions
windows-async-files
poll-ring
debug-file-leaks-differently
debug-file-leaks
ProcessPrng
elfv2-dyn
jobserver
threadtheft
io-threaded-no-queue
0.15.x
Io.net
comptime-allocator
restricted-function-pointers
cli
wasm-linker-writer
wrangle-writer-buffering
sha1-stream
async-await-demo
fixes
0.14.x
ast-node-methods
macos-debug-info
make-vs-configure
fuzz-macos
sans-aro
ArrayList-reserve
incr-bug
llvm-ir-nosanitize-metadata
ci-tarballs
ci-scripts
threadpool
0.12.x
new-pkg-hash
json-diagnostics
more-doctests
rework-comptime-mutation
0.11.x
ci-perf-comment
stage2-async
0.10.x
autofix
0.9.x
aro
hcs
0.8.x
0.7.x
0.16.0
0.15.2
0.15.1
0.15.0
0.14.1
0.14.0
0.12.1
0.13.0
0.12.0
0.11.0
0.10.1
0.10.0
0.9.1
0.9.0
0.8.1
0.8.0
0.7.1
0.7.0
0.6.0
0.5.0
0.4.0
0.3.0
0.2.0
0.1.1
0.1.0
Labels
Clear labels
abi/f32
abi/ilp32
abi/sf
accepted
This proposal is planned.
arch/21k
arch/6502
arch/aarch64
arch/alpha
arch/amdgcn
arch/arc
arch/arc32
arch/arc64
arch/arm
arch/avr
arch/bfin
arch/bpf
arch/colossus
arch/cris
arch/csky
arch/dlx
arch/epiphany
arch/fr30
arch/frv
arch/hexagon
arch/hppa
arch/hppa64
arch/ia64
arch/kalimba
arch/kvx
arch/lanai
arch/lm32
arch/loongarch32
arch/loongarch64
arch/m32r
arch/m68k
arch/m88k
arch/mcore
arch/microblaze
arch/mips
arch/mips64
arch/mmix
arch/moxie
arch/mrisc32
arch/msp430
arch/nds32
arch/ns32k
arch/nvptx
arch/or1k
arch/powerpc
arch/powerpc64
arch/propeller
arch/riscv32
arch/riscv64
arch/rl78
arch/rx
arch/s390x
arch/sh
arch/sparc
arch/sparc64
arch/spirv
arch/spu
arch/tricore
arch/v850
arch/vax
arch/vc4
arch/ve
arch/wasm
arch/x86
arch/x86_64
arch/xcore
arch/xtensa
autodoc
The web application for interactive documentation and generation of its assets.
backend/c
The C backend outputs C source code.
backend/llvm
The LLVM backend outputs an LLVM bitcode module.
backend/self-hosted
The self-hosted backends produce machine code directly.
binutils
Zig's included binary utilities: zig ar, zig dlltool, zig lib, zig ranlib, zig objcopy, and zig rc.
breaking
Implementing this issue could cause existing code to no longer compile or have different behavior.
build system
The Zig build system - zig build, std.Build, the build runner, and package management.
debug info
An issue related to debug information (e.g. DWARF) produced by the Zig compiler.
docs
An issue with documentation, e.g. the language reference or standard library doc comments.
error message
This issue points out an error message that is unhelpful and should be improved.
frontend
Tokenization, parsing, AstGen, ZonGen, Sema, Legalize, and Liveness.
fuzzing
An issue related to Zig's integrated fuzz testing.
incremental
Reuse of internal compiler state for faster compilation.
lib/c
This issue relates to Zig's libc implementation and/or vendored libcs.
lib/compiler-rt
This issue relates to Zig's compiler-rt library.
lib/cxx
This issue relates to Zig's vendored libc++ and/or libc++abi.
lib/std
This issue relates to Zig's standard library.
lib/tsan
This issue relates to Zig's vendored libtsan.
lib/ubsan-rt
This issue relates to Zig's ubsan-rt library.
lib/unwind
This issue relates to Zig's vendored libunwind.
linking
Zig's integrated object file and incremental linker.
miscompilation
The compiler reports success but produces semantically incorrect code.
os/android
os/contiki
os/dragonfly
os/driverkit
os/emscripten
os/freebsd
os/fuchsia
os/haiku
os/hermit
os/hurd
os/illumos
os/ios
os/linux
os/maccatalyst
os/macos
os/managarm
os/netbsd
os/ohos
os/openbsd
os/plan9
os/redox
os/rtems
os/serenity
os/tvos
os/uefi
os/visionos
os/wasi
os/watchos
os/windows
proposal
This issue suggests language modifications. If it also has the "accepted" label then it is planned.
release notes
This issue or pull request should be mentioned in the release notes.
testing
This issue is related to testing the compiler, standard library, or other parts of Zig.
zig cc
Zig as a drop-in C-family compiler.
zig fmt
The Zig source code formatter.
zig reduce
The Zig source code reduction tool.
bounty
https://ziglang.org/news/announcing-donor-bounties
bug
Observed behavior contradicts documented or intended behavior.
contributor-friendly
This issue is limited in scope and/or knowledge of project internals.
downstream
An issue with a third-party project that uses this project.
enhancement
Solving this issue will likely involve adding new logic or components to the codebase.
infra
An issue related to project infrastructure, e.g. continuous integration.
optimization
A task to improve performance and/or resource usage.
question
No questions on the issue tracker; use a community space instead.
regression
Something that used to work in a previous version stopped working
upstream
An issue with a third-party project that this project uses.
use case
Describes a real use case that is difficult or impossible, but does not propose a solution.
No labels
abi/f32
abi/ilp32
abi/sf
accepted
arch/21k
arch/6502
arch/aarch64
arch/alpha
arch/amdgcn
arch/arc
arch/arc32
arch/arc64
arch/arm
arch/avr
arch/bfin
arch/bpf
arch/colossus
arch/cris
arch/csky
arch/dlx
arch/epiphany
arch/fr30
arch/frv
arch/hexagon
arch/hppa
arch/hppa64
arch/ia64
arch/kalimba
arch/kvx
arch/lanai
arch/lm32
arch/loongarch32
arch/loongarch64
arch/m32r
arch/m68k
arch/m88k
arch/mcore
arch/microblaze
arch/mips
arch/mips64
arch/mmix
arch/moxie
arch/mrisc32
arch/msp430
arch/nds32
arch/ns32k
arch/nvptx
arch/or1k
arch/powerpc
arch/powerpc64
arch/propeller
arch/riscv32
arch/riscv64
arch/rl78
arch/rx
arch/s390x
arch/sh
arch/sparc
arch/sparc64
arch/spirv
arch/spu
arch/tricore
arch/v850
arch/vax
arch/vc4
arch/ve
arch/wasm
arch/x86
arch/x86_64
arch/xcore
arch/xtensa
autodoc
backend/c
backend/llvm
backend/self-hosted
binutils
breaking
build system
debug info
docs
error message
frontend
fuzzing
incremental
lib/c
lib/compiler-rt
lib/cxx
lib/std
lib/tsan
lib/ubsan-rt
lib/unwind
linking
miscompilation
os/android
os/contiki
os/dragonfly
os/driverkit
os/emscripten
os/freebsd
os/fuchsia
os/haiku
os/hermit
os/hurd
os/illumos
os/ios
os/linux
os/maccatalyst
os/macos
os/managarm
os/netbsd
os/ohos
os/openbsd
os/plan9
os/redox
os/rtems
os/serenity
os/tvos
os/uefi
os/visionos
os/wasi
os/watchos
os/windows
proposal
release notes
testing
zig cc
zig fmt
zig reduce
bounty
bug
contributor-friendly
downstream
enhancement
infra
optimization
question
regression
upstream
use case
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ziglang/zig#30088
Reference in a new issue
ziglang/zig
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?