SEGFAULT with complex testbench with enabled expression coverage #1194
Description
I have a fairly complex testbench, which produces a segfault when elaborated with nvc if expression coverage is enabled. All other coverage types are working, only expression coverage leads to the segfault. Sadly, my trys to reduce the testbench for a MWE weren't successful so far.
My first thought was maybe another problem with generic packages and protected types, but also when commenting out these code parts, the segfault remains.
nvc --std=19 -L ./ -e --no-collapse --cover=statement,fsm-state,functional,branch,toggle,expression \
--cover-spec=Coverage.sfile test
*** Caught signal 11 (SEGV_MAPERR) [address=0x74, ip=0x55b2900218f0] ***
[0x55b28ff5444d] ../src/util.c:906 signal_handler.lto_priv.0
[0x7f669ff98f8f] (/usr/lib/x86_64-linux-gnu/libc.so.6)
[0x55b2900218f0] ../src/cov/cov-data.c:641 cover_add_items_for
[0x55b28ffda291] ../src/lower.c:1853 lower_logic_expr_coverage
[0x55b28ffda291] ../src/lower.c:2425 lower_fcall.lto_priv.0
[0x55b28ffdea03] ../src/lower.c:5138 lower_expr.lto_priv.0
[0x55b28fff5417] ../src/lower.c:12808 lower_rvalue
[0x55b28ffd72b9] ../src/lower.c:1256 lower_subprogram_arg.lto_priv.0
[0x55b28ffda1cd] ../src/lower.c:2413 lower_fcall.lto_priv.0
[0x55b28ffdea03] ../src/lower.c:5138 lower_expr.lto_priv.0
[0x55b28fff5417] ../src/lower.c:12808 lower_rvalue
[0x55b28fff6597] ../src/lower.c:11832 lower_inertial_actual_process
[0x55b28fff4a6f] ../src/lower.c:13379 unit_registry_get
[0x55b29001b3ba] ../src/cgen.c:102 cgen_find_dependencies.lto_priv.0
[0x55b2900210b0] ../src/cgen.c:397 cgen
[0x55b28ff4f2c3] ../src/nvc.c:585 elaborate
[0x55b28ff4b853] ../src/nvc.c:2430 process_command
[0x55b28ff47f8b] ../src/nvc.c:2600 main
nvc 1.17-devel (1.16.0.r6.ge7b521fe) (Using LLVM 14.0.6) [x86_64-pc-linux-gnu]
Please report this bug at https://github.com/nickg/nvc/issues