Alexey Samsonov | 783b817 | 2015-03-03 22:15:35 +0000 | [diff] [blame] | 1 | // RUN: %clang_cc1 -std=c++11 -fsanitize=signed-integer-overflow,integer-divide-by-zero,float-divide-by-zero,shift-base,shift-exponent,unreachable,return,vla-bound,alignment,null,vptr,object-size,float-cast-overflow,bool,enum,array-bounds,function -fsanitize-recover=signed-integer-overflow,integer-divide-by-zero,float-divide-by-zero,shift-base,shift-exponent,vla-bound,alignment,null,vptr,object-size,float-cast-overflow,bool,enum,array-bounds,function -emit-llvm %s -o - -triple x86_64-linux-gnu | FileCheck %s |
Alexey Samsonov | 8845952 | 2015-01-12 22:39:12 +0000 | [diff] [blame] | 2 | // RUN: %clang_cc1 -std=c++11 -fsanitize=vptr,address -fsanitize-recover=vptr,address -emit-llvm %s -o - -triple x86_64-linux-gnu | FileCheck %s --check-prefix=CHECK-ASAN |
| 3 | // RUN: %clang_cc1 -std=c++11 -fsanitize=vptr -fsanitize-recover=vptr -emit-llvm %s -o - -triple x86_64-linux-gnu | FileCheck %s --check-prefix=DOWNCAST-NULL |
Peter Collingbourne | 69b004d | 2015-02-25 23:18:42 +0000 | [diff] [blame] | 4 | // RUN: %clang_cc1 -std=c++11 -fsanitize=function -emit-llvm %s -o - -triple x86_64-linux-gnux32 | FileCheck %s --check-prefix=CHECK-X32 |
| 5 | // RUN: %clang_cc1 -std=c++11 -fsanitize=function -emit-llvm %s -o - -triple i386-linux-gnu | FileCheck %s --check-prefix=CHECK-X86 |
Richard Smith | 69d0d26 | 2012-08-24 00:54:33 +0000 | [diff] [blame] | 6 | |
Richard Smith | be024a8 | 2012-12-18 00:22:45 +0000 | [diff] [blame] | 7 | struct S { |
| 8 | double d; |
| 9 | int a, b; |
| 10 | virtual int f(); |
| 11 | }; |
| 12 | |
Alexey Samsonov | 6c12414 | 2014-07-18 17:50:06 +0000 | [diff] [blame] | 13 | // Check that type descriptor global is not modified by ASan. |
| 14 | // CHECK-ASAN: [[TYPE_DESCR:@[0-9]+]] = private unnamed_addr constant { i16, i16, [4 x i8] } { i16 -1, i16 0, [4 x i8] c"'S'\00" } |
| 15 | |
| 16 | // Check that type mismatch handler is not modified by ASan. |
| 17 | // CHECK-ASAN: private unnamed_addr global { { [{{.*}} x i8]*, i32, i32 }, { i16, i16, [4 x i8] }*, i8*, i8 } { {{.*}}, { i16, i16, [4 x i8] }* [[TYPE_DESCR]], {{.*}} } |
| 18 | |
Richard Smith | 2c5868c | 2013-02-13 21:18:23 +0000 | [diff] [blame] | 19 | struct T : S {}; |
| 20 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 21 | // CHECK-LABEL: @_Z17reference_binding |
Richard Smith | be024a8 | 2012-12-18 00:22:45 +0000 | [diff] [blame] | 22 | void reference_binding(int *p, S *q) { |
Richard Smith | 69d0d26 | 2012-08-24 00:54:33 +0000 | [diff] [blame] | 23 | // C++ core issue 453: If an lvalue to which a reference is directly bound |
| 24 | // designates neither an existing object or function of an appropriate type, |
| 25 | // nor a region of storage of suitable size and alignment to contain an object |
| 26 | // of the reference's type, the behavior is undefined. |
| 27 | |
| 28 | // CHECK: icmp ne {{.*}}, null |
| 29 | |
| 30 | // CHECK: %[[SIZE:.*]] = call i64 @llvm.objectsize.i64 |
| 31 | // CHECK-NEXT: icmp uge i64 %[[SIZE]], 4 |
| 32 | |
| 33 | // CHECK: %[[PTRINT:.*]] = ptrtoint |
| 34 | // CHECK-NEXT: %[[MISALIGN:.*]] = and i64 %[[PTRINT]], 3 |
| 35 | // CHECK-NEXT: icmp eq i64 %[[MISALIGN]], 0 |
| 36 | int &r = *p; |
Richard Smith | 69d0d26 | 2012-08-24 00:54:33 +0000 | [diff] [blame] | 37 | |
Richard Smith | be024a8 | 2012-12-18 00:22:45 +0000 | [diff] [blame] | 38 | // A reference is not required to refer to an object within its lifetime. |
| 39 | // CHECK-NOT: __ubsan_handle_dynamic_type_cache_miss |
| 40 | S &r2 = *q; |
| 41 | } |
Richard Smith | 69d0d26 | 2012-08-24 00:54:33 +0000 | [diff] [blame] | 42 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 43 | // CHECK-LABEL: @_Z13member_access |
Alexey Samsonov | 6c12414 | 2014-07-18 17:50:06 +0000 | [diff] [blame] | 44 | // CHECK-ASAN-LABEL: @_Z13member_access |
Richard Smith | 69d0d26 | 2012-08-24 00:54:33 +0000 | [diff] [blame] | 45 | void member_access(S *p) { |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 46 | // (1a) Check 'p' is appropriately sized and aligned for member access. |
Richard Smith | 69d0d26 | 2012-08-24 00:54:33 +0000 | [diff] [blame] | 47 | |
| 48 | // CHECK: icmp ne {{.*}}, null |
| 49 | |
| 50 | // CHECK: %[[SIZE:.*]] = call i64 @llvm.objectsize.i64 |
| 51 | // CHECK-NEXT: icmp uge i64 %[[SIZE]], 24 |
| 52 | |
| 53 | // CHECK: %[[PTRINT:.*]] = ptrtoint |
| 54 | // CHECK-NEXT: %[[MISALIGN:.*]] = and i64 %[[PTRINT]], 7 |
| 55 | // CHECK-NEXT: icmp eq i64 %[[MISALIGN]], 0 |
| 56 | |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 57 | // (1b) Check that 'p' actually points to an 'S'. |
| 58 | |
| 59 | // CHECK: %[[VPTRADDR:.*]] = bitcast {{.*}} to i64* |
David Blaikie | a953f28 | 2015-02-27 21:19:58 +0000 | [diff] [blame] | 60 | // CHECK-NEXT: %[[VPTR:.*]] = load i64, i64* %[[VPTRADDR]] |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 61 | // |
| 62 | // hash_16_bytes: |
| 63 | // |
| 64 | // If this number changes, it indicates that either the mangled name of ::S |
| 65 | // has changed, or that LLVM's hashing function has changed. The latter case |
| 66 | // is OK if the hashing function is still stable. |
Richard Smith | 9421156 | 2012-10-25 22:27:30 +0000 | [diff] [blame] | 67 | // |
| 68 | // The two hash values are for 64- and 32-bit Clang binaries, respectively. |
| 69 | // FIXME: We should produce a 64-bit value either way. |
| 70 | // |
| 71 | // CHECK-NEXT: xor i64 {{-4030275160588942838|2562089159}}, %[[VPTR]] |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 72 | // CHECK-NEXT: mul i64 {{.*}}, -7070675565921424023 |
| 73 | // CHECK-NEXT: lshr i64 {{.*}}, 47 |
| 74 | // CHECK-NEXT: xor i64 |
| 75 | // CHECK-NEXT: xor i64 %[[VPTR]] |
| 76 | // CHECK-NEXT: mul i64 {{.*}}, -7070675565921424023 |
| 77 | // CHECK-NEXT: lshr i64 {{.*}}, 47 |
| 78 | // CHECK-NEXT: xor i64 |
| 79 | // CHECK-NEXT: %[[HASH:.*]] = mul i64 {{.*}}, -7070675565921424023 |
| 80 | // |
| 81 | // Check the hash against the table: |
| 82 | // |
| 83 | // CHECK-NEXT: %[[IDX:.*]] = and i64 %{{.*}}, 127 |
David Blaikie | 218b783 | 2015-02-27 19:18:17 +0000 | [diff] [blame] | 84 | // CHECK-NEXT: getelementptr inbounds [128 x i64], [128 x i64]* @__ubsan_vptr_type_cache, i32 0, i64 %[[IDX]] |
David Blaikie | a953f28 | 2015-02-27 21:19:58 +0000 | [diff] [blame] | 85 | // CHECK-NEXT: %[[CACHEVAL:.*]] = load i64, i64* |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 86 | // CHECK-NEXT: icmp eq i64 %[[CACHEVAL]], %[[HASH]] |
| 87 | // CHECK-NEXT: br i1 |
| 88 | |
Will Dietz | 3676d56 | 2012-12-30 20:53:28 +0000 | [diff] [blame] | 89 | // CHECK: call void @__ubsan_handle_dynamic_type_cache_miss({{.*}}, i64 %{{.*}}, i64 %[[HASH]]) |
Will Dietz | 88e0233 | 2012-12-02 19:50:33 +0000 | [diff] [blame] | 90 | // CHECK-NOT: unreachable |
| 91 | // CHECK: {{.*}}: |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 92 | |
Richard Smith | 69d0d26 | 2012-08-24 00:54:33 +0000 | [diff] [blame] | 93 | // (2) Check 'p->b' is appropriately sized and aligned for a load. |
| 94 | |
| 95 | // FIXME: Suppress this in the trivial case of a member access, because we |
| 96 | // know we've just checked the member access expression itself. |
| 97 | |
| 98 | // CHECK: %[[SIZE:.*]] = call i64 @llvm.objectsize.i64 |
| 99 | // CHECK-NEXT: icmp uge i64 %[[SIZE]], 4 |
| 100 | |
| 101 | // CHECK: %[[PTRINT:.*]] = ptrtoint |
| 102 | // CHECK-NEXT: %[[MISALIGN:.*]] = and i64 %[[PTRINT]], 3 |
| 103 | // CHECK-NEXT: icmp eq i64 %[[MISALIGN]], 0 |
| 104 | int k = p->b; |
| 105 | |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 106 | // (3a) Check 'p' is appropriately sized and aligned for member function call. |
Richard Smith | 69d0d26 | 2012-08-24 00:54:33 +0000 | [diff] [blame] | 107 | |
| 108 | // CHECK: icmp ne {{.*}}, null |
| 109 | |
| 110 | // CHECK: %[[SIZE:.*]] = call i64 @llvm.objectsize.i64 |
| 111 | // CHECK-NEXT: icmp uge i64 %[[SIZE]], 24 |
| 112 | |
| 113 | // CHECK: %[[PTRINT:.*]] = ptrtoint |
| 114 | // CHECK-NEXT: %[[MISALIGN:.*]] = and i64 %[[PTRINT]], 7 |
| 115 | // CHECK-NEXT: icmp eq i64 %[[MISALIGN]], 0 |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 116 | |
| 117 | // (3b) Check that 'p' actually points to an 'S' |
| 118 | |
David Blaikie | a953f28 | 2015-02-27 21:19:58 +0000 | [diff] [blame] | 119 | // CHECK: load i64, i64* |
Richard Smith | 3750e77 | 2012-10-25 23:05:00 +0000 | [diff] [blame] | 120 | // CHECK-NEXT: xor i64 {{-4030275160588942838|2562089159}}, |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 121 | // [...] |
David Blaikie | 218b783 | 2015-02-27 19:18:17 +0000 | [diff] [blame] | 122 | // CHECK: getelementptr inbounds [128 x i64], [128 x i64]* @__ubsan_vptr_type_cache, i32 0, i64 % |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 123 | // CHECK: br i1 |
Will Dietz | 3676d56 | 2012-12-30 20:53:28 +0000 | [diff] [blame] | 124 | // CHECK: call void @__ubsan_handle_dynamic_type_cache_miss({{.*}}, i64 %{{.*}}, i64 %{{.*}}) |
Will Dietz | 88e0233 | 2012-12-02 19:50:33 +0000 | [diff] [blame] | 125 | // CHECK-NOT: unreachable |
| 126 | // CHECK: {{.*}}: |
Richard Smith | 1048356 | 2012-10-25 21:59:45 +0000 | [diff] [blame] | 127 | |
Richard Smith | 69d0d26 | 2012-08-24 00:54:33 +0000 | [diff] [blame] | 128 | k = p->f(); |
| 129 | } |
Richard Smith | 3e056de | 2012-08-25 00:32:28 +0000 | [diff] [blame] | 130 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 131 | // CHECK-LABEL: @_Z12lsh_overflow |
Richard Smith | 3e056de | 2012-08-25 00:32:28 +0000 | [diff] [blame] | 132 | int lsh_overflow(int a, int b) { |
Alexey Samsonov | 783b817 | 2015-03-03 22:15:35 +0000 | [diff] [blame] | 133 | // CHECK: %[[RHS_INBOUNDS:.*]] = icmp ule i32 %[[RHS:.*]], 31 |
| 134 | // CHECK-NEXT: %[[SHIFTED_OUT_WIDTH:.*]] = sub nuw nsw i32 31, %[[RHS]] |
Richard Smith | 3e056de | 2012-08-25 00:32:28 +0000 | [diff] [blame] | 135 | // CHECK-NEXT: %[[SHIFTED_OUT:.*]] = lshr i32 %[[LHS:.*]], %[[SHIFTED_OUT_WIDTH]] |
| 136 | |
| 137 | // This is present for C++11 but not for C: C++ core issue 1457 allows a '1' |
| 138 | // to be shifted into the sign bit, but not out of it. |
| 139 | // CHECK-NEXT: %[[SHIFTED_OUT_NOT_SIGN:.*]] = lshr i32 %[[SHIFTED_OUT]], 1 |
| 140 | |
| 141 | // CHECK-NEXT: %[[NO_OVERFLOW:.*]] = icmp eq i32 %[[SHIFTED_OUT_NOT_SIGN]], 0 |
Will Dietz | 11d0a9f | 2013-02-25 22:37:49 +0000 | [diff] [blame] | 142 | |
Alexey Samsonov | 783b817 | 2015-03-03 22:15:35 +0000 | [diff] [blame] | 143 | // CHECK-NEXT: %[[VALID:.*]] = and i1 %[[RHS_INBOUNDS]], %[[NO_OVERFLOW]] |
Will Dietz | 11d0a9f | 2013-02-25 22:37:49 +0000 | [diff] [blame] | 144 | // CHECK-NEXT: br i1 %[[VALID]] |
| 145 | |
| 146 | // CHECK: call void @__ubsan_handle_shift_out_of_bounds |
| 147 | // CHECK-NOT: call void @__ubsan_handle_shift_out_of_bounds |
Richard Smith | 3e056de | 2012-08-25 00:32:28 +0000 | [diff] [blame] | 148 | |
| 149 | // CHECK: %[[RET:.*]] = shl i32 %[[LHS]], %[[RHS]] |
| 150 | // CHECK-NEXT: ret i32 %[[RET]] |
| 151 | return a << b; |
| 152 | } |
Richard Smith | 9f9e582 | 2012-10-04 23:52:29 +0000 | [diff] [blame] | 153 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 154 | // CHECK-LABEL: @_Z9no_return |
Richard Smith | 9f9e582 | 2012-10-04 23:52:29 +0000 | [diff] [blame] | 155 | int no_return() { |
Bill Wendling | e1c4a1b | 2013-02-22 09:10:20 +0000 | [diff] [blame] | 156 | // CHECK: call void @__ubsan_handle_missing_return(i8* bitcast ({{.*}}* @{{.*}} to i8*)) [[NR_NUW:#[0-9]+]] |
Richard Smith | e30752c | 2012-10-09 19:52:38 +0000 | [diff] [blame] | 157 | // CHECK-NEXT: unreachable |
Richard Smith | 9f9e582 | 2012-10-04 23:52:29 +0000 | [diff] [blame] | 158 | } |
Richard Smith | 1629da9 | 2012-12-13 07:11:50 +0000 | [diff] [blame] | 159 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 160 | // CHECK-LABEL: @_Z9sour_bool |
Richard Smith | 1629da9 | 2012-12-13 07:11:50 +0000 | [diff] [blame] | 161 | bool sour_bool(bool *p) { |
| 162 | // CHECK: %[[OK:.*]] = icmp ule i8 {{.*}}, 1 |
| 163 | // CHECK: br i1 %[[OK]] |
Will Dietz | 3676d56 | 2012-12-30 20:53:28 +0000 | [diff] [blame] | 164 | // CHECK: call void @__ubsan_handle_load_invalid_value(i8* bitcast ({{.*}}), i64 {{.*}}) |
Richard Smith | 1629da9 | 2012-12-13 07:11:50 +0000 | [diff] [blame] | 165 | return *p; |
| 166 | } |
| 167 | |
| 168 | enum E1 { e1a = 0, e1b = 127 } e1; |
| 169 | enum E2 { e2a = -1, e2b = 64 } e2; |
| 170 | enum E3 { e3a = (1u << 31) - 1 } e3; |
| 171 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 172 | // CHECK-LABEL: @_Z14bad_enum_value |
Richard Smith | 1629da9 | 2012-12-13 07:11:50 +0000 | [diff] [blame] | 173 | int bad_enum_value() { |
| 174 | // CHECK: %[[E1:.*]] = icmp ule i32 {{.*}}, 127 |
| 175 | // CHECK: br i1 %[[E1]] |
Will Dietz | 3676d56 | 2012-12-30 20:53:28 +0000 | [diff] [blame] | 176 | // CHECK: call void @__ubsan_handle_load_invalid_value( |
Richard Smith | 1629da9 | 2012-12-13 07:11:50 +0000 | [diff] [blame] | 177 | int a = e1; |
| 178 | |
| 179 | // CHECK: %[[E2HI:.*]] = icmp sle i32 {{.*}}, 127 |
| 180 | // CHECK: %[[E2LO:.*]] = icmp sge i32 {{.*}}, -128 |
| 181 | // CHECK: %[[E2:.*]] = and i1 %[[E2HI]], %[[E2LO]] |
| 182 | // CHECK: br i1 %[[E2]] |
Will Dietz | 3676d56 | 2012-12-30 20:53:28 +0000 | [diff] [blame] | 183 | // CHECK: call void @__ubsan_handle_load_invalid_value( |
Richard Smith | 1629da9 | 2012-12-13 07:11:50 +0000 | [diff] [blame] | 184 | int b = e2; |
| 185 | |
| 186 | // CHECK: %[[E3:.*]] = icmp ule i32 {{.*}}, 2147483647 |
| 187 | // CHECK: br i1 %[[E3]] |
Will Dietz | 3676d56 | 2012-12-30 20:53:28 +0000 | [diff] [blame] | 188 | // CHECK: call void @__ubsan_handle_load_invalid_value( |
Richard Smith | 1629da9 | 2012-12-13 07:11:50 +0000 | [diff] [blame] | 189 | int c = e3; |
| 190 | return a + b + c; |
| 191 | } |
Richard Smith | 2c5868c | 2013-02-13 21:18:23 +0000 | [diff] [blame] | 192 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 193 | // CHECK-LABEL: @_Z20bad_downcast_pointer |
Alexey Samsonov | 32f59d8 | 2014-07-18 18:15:39 +0000 | [diff] [blame] | 194 | // DOWNCAST-NULL-LABEL: @_Z20bad_downcast_pointer |
Richard Smith | 2c5868c | 2013-02-13 21:18:23 +0000 | [diff] [blame] | 195 | void bad_downcast_pointer(S *p) { |
| 196 | // CHECK: %[[NONNULL:.*]] = icmp ne {{.*}}, null |
| 197 | // CHECK: br i1 %[[NONNULL]], |
| 198 | |
Alexey Samsonov | 32f59d8 | 2014-07-18 18:15:39 +0000 | [diff] [blame] | 199 | // A null poiner access is guarded without -fsanitize=null. |
| 200 | // DOWNCAST-NULL: %[[NONNULL:.*]] = icmp ne {{.*}}, null |
| 201 | // DOWNCAST-NULL: br i1 %[[NONNULL]], |
| 202 | |
Matt Arsenault | 2f15263 | 2013-10-07 19:00:18 +0000 | [diff] [blame] | 203 | // CHECK: %[[SIZE:.*]] = call i64 @llvm.objectsize.i64.p0i8( |
Richard Smith | 2c5868c | 2013-02-13 21:18:23 +0000 | [diff] [blame] | 204 | // CHECK: %[[E1:.*]] = icmp uge i64 %[[SIZE]], 24 |
| 205 | // CHECK: %[[MISALIGN:.*]] = and i64 %{{.*}}, 7 |
| 206 | // CHECK: %[[E2:.*]] = icmp eq i64 %[[MISALIGN]], 0 |
| 207 | // CHECK: %[[E12:.*]] = and i1 %[[E1]], %[[E2]] |
| 208 | // CHECK: br i1 %[[E12]], |
| 209 | |
| 210 | // CHECK: call void @__ubsan_handle_type_mismatch |
| 211 | // CHECK: br label |
| 212 | |
| 213 | // CHECK: br i1 %{{.*}}, |
| 214 | |
| 215 | // CHECK: call void @__ubsan_handle_dynamic_type_cache_miss |
| 216 | // CHECK: br label |
| 217 | (void) static_cast<T*>(p); |
| 218 | } |
| 219 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 220 | // CHECK-LABEL: @_Z22bad_downcast_reference |
Richard Smith | 2c5868c | 2013-02-13 21:18:23 +0000 | [diff] [blame] | 221 | void bad_downcast_reference(S &p) { |
| 222 | // CHECK: %[[E1:.*]] = icmp ne {{.*}}, null |
| 223 | // CHECK-NOT: br i1 |
Alexey Samsonov | e396bfc | 2014-11-11 22:03:54 +0000 | [diff] [blame] | 224 | |
Matt Arsenault | 2f15263 | 2013-10-07 19:00:18 +0000 | [diff] [blame] | 225 | // CHECK: %[[SIZE:.*]] = call i64 @llvm.objectsize.i64.p0i8( |
Richard Smith | 2c5868c | 2013-02-13 21:18:23 +0000 | [diff] [blame] | 226 | // CHECK: %[[E2:.*]] = icmp uge i64 %[[SIZE]], 24 |
Alexey Samsonov | e396bfc | 2014-11-11 22:03:54 +0000 | [diff] [blame] | 227 | |
Richard Smith | 2c5868c | 2013-02-13 21:18:23 +0000 | [diff] [blame] | 228 | // CHECK: %[[MISALIGN:.*]] = and i64 %{{.*}}, 7 |
| 229 | // CHECK: %[[E3:.*]] = icmp eq i64 %[[MISALIGN]], 0 |
Alexey Samsonov | e396bfc | 2014-11-11 22:03:54 +0000 | [diff] [blame] | 230 | |
| 231 | // CHECK: %[[E12:.*]] = and i1 %[[E1]], %[[E2]] |
Richard Smith | 2c5868c | 2013-02-13 21:18:23 +0000 | [diff] [blame] | 232 | // CHECK: %[[E123:.*]] = and i1 %[[E12]], %[[E3]] |
| 233 | // CHECK: br i1 %[[E123]], |
| 234 | |
| 235 | // CHECK: call void @__ubsan_handle_type_mismatch |
| 236 | // CHECK: br label |
| 237 | |
| 238 | // CHECK: br i1 %{{.*}}, |
| 239 | |
| 240 | // CHECK: call void @__ubsan_handle_dynamic_type_cache_miss |
| 241 | // CHECK: br label |
| 242 | (void) static_cast<T&>(p); |
| 243 | } |
Bill Wendling | e1c4a1b | 2013-02-22 09:10:20 +0000 | [diff] [blame] | 244 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 245 | // CHECK-LABEL: @_Z11array_index |
Richard Smith | 539e4a7 | 2013-02-23 02:53:19 +0000 | [diff] [blame] | 246 | int array_index(const int (&a)[4], int n) { |
| 247 | // CHECK: %[[K1_OK:.*]] = icmp ult i64 %{{.*}}, 4 |
| 248 | // CHECK: br i1 %[[K1_OK]] |
| 249 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 250 | int k1 = a[n]; |
| 251 | |
| 252 | // CHECK: %[[R1_OK:.*]] = icmp ule i64 %{{.*}}, 4 |
| 253 | // CHECK: br i1 %[[R1_OK]] |
| 254 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 255 | const int *r1 = &a[n]; |
| 256 | |
| 257 | // CHECK: %[[K2_OK:.*]] = icmp ult i64 %{{.*}}, 8 |
| 258 | // CHECK: br i1 %[[K2_OK]] |
| 259 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 260 | int k2 = ((const int(&)[8])a)[n]; |
| 261 | |
| 262 | // CHECK: %[[K3_OK:.*]] = icmp ult i64 %{{.*}}, 4 |
| 263 | // CHECK: br i1 %[[K3_OK]] |
| 264 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 265 | int k3 = n[a]; |
| 266 | |
| 267 | return k1 + *r1 + k2; |
| 268 | } |
| 269 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 270 | // CHECK-LABEL: @_Z17multi_array_index |
Richard Smith | 539e4a7 | 2013-02-23 02:53:19 +0000 | [diff] [blame] | 271 | int multi_array_index(int n, int m) { |
| 272 | int arr[4][6]; |
| 273 | |
| 274 | // CHECK: %[[IDX2_OK:.*]] = icmp ult i64 %{{.*}}, 6 |
| 275 | // CHECK: br i1 %[[IDX2_OK]] |
| 276 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 277 | |
| 278 | // CHECK: %[[IDX1_OK:.*]] = icmp ult i64 %{{.*}}, 4 |
| 279 | // CHECK: br i1 %[[IDX1_OK]] |
| 280 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 281 | return arr[n][m]; |
| 282 | } |
| 283 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 284 | // CHECK-LABEL: @_Z11array_arith |
Richard Smith | 539e4a7 | 2013-02-23 02:53:19 +0000 | [diff] [blame] | 285 | int array_arith(const int (&a)[4], int n) { |
| 286 | // CHECK: %[[K1_OK:.*]] = icmp ule i64 %{{.*}}, 4 |
| 287 | // CHECK: br i1 %[[K1_OK]] |
| 288 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 289 | const int *k1 = a + n; |
| 290 | |
| 291 | // CHECK: %[[K2_OK:.*]] = icmp ule i64 %{{.*}}, 8 |
| 292 | // CHECK: br i1 %[[K2_OK]] |
| 293 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 294 | const int *k2 = (const int(&)[8])a + n; |
| 295 | |
| 296 | return *k1 + *k2; |
| 297 | } |
| 298 | |
| 299 | struct ArrayMembers { |
| 300 | int a1[5]; |
| 301 | int a2[1]; |
| 302 | }; |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 303 | // CHECK-LABEL: @_Z18struct_array_index |
Richard Smith | 539e4a7 | 2013-02-23 02:53:19 +0000 | [diff] [blame] | 304 | int struct_array_index(ArrayMembers *p, int n) { |
| 305 | // CHECK: %[[IDX_OK:.*]] = icmp ult i64 %{{.*}}, 5 |
| 306 | // CHECK: br i1 %[[IDX_OK]] |
| 307 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 308 | return p->a1[n]; |
| 309 | } |
| 310 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 311 | // CHECK-LABEL: @_Z16flex_array_index |
Richard Smith | 539e4a7 | 2013-02-23 02:53:19 +0000 | [diff] [blame] | 312 | int flex_array_index(ArrayMembers *p, int n) { |
| 313 | // CHECK-NOT: call void @__ubsan_handle_out_of_bounds( |
| 314 | return p->a2[n]; |
| 315 | } |
| 316 | |
Richard Smith | 2847b22 | 2013-02-24 01:56:24 +0000 | [diff] [blame] | 317 | extern int incomplete[]; |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 318 | // CHECK-LABEL: @_Z22incomplete_array_index |
Richard Smith | 2847b22 | 2013-02-24 01:56:24 +0000 | [diff] [blame] | 319 | int incomplete_array_index(int n) { |
| 320 | // CHECK-NOT: call void @__ubsan_handle_out_of_bounds( |
| 321 | return incomplete[n]; |
| 322 | } |
| 323 | |
Richard Smith | 539e4a7 | 2013-02-23 02:53:19 +0000 | [diff] [blame] | 324 | typedef __attribute__((ext_vector_type(4))) int V4I; |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 325 | // CHECK-LABEL: @_Z12vector_index |
Richard Smith | 539e4a7 | 2013-02-23 02:53:19 +0000 | [diff] [blame] | 326 | int vector_index(V4I v, int n) { |
| 327 | // CHECK: %[[IDX_OK:.*]] = icmp ult i64 %{{.*}}, 4 |
| 328 | // CHECK: br i1 %[[IDX_OK]] |
| 329 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 330 | return v[n]; |
| 331 | } |
| 332 | |
Alexey Samsonov | c993933 | 2014-07-17 23:53:44 +0000 | [diff] [blame] | 333 | // CHECK-LABEL: @_Z12string_index |
Richard Smith | 539e4a7 | 2013-02-23 02:53:19 +0000 | [diff] [blame] | 334 | char string_index(int n) { |
| 335 | // CHECK: %[[IDX_OK:.*]] = icmp ult i64 %{{.*}}, 6 |
| 336 | // CHECK: br i1 %[[IDX_OK]] |
| 337 | // CHECK: call void @__ubsan_handle_out_of_bounds( |
| 338 | return "Hello"[n]; |
| 339 | } |
| 340 | |
Filipe Cabecinhas | 178a8df | 2013-08-08 01:08:17 +0000 | [diff] [blame] | 341 | class A // align=4 |
| 342 | { |
| 343 | int a1, a2, a3; |
| 344 | }; |
| 345 | |
| 346 | class B // align=8 |
| 347 | { |
| 348 | long b1, b2; |
| 349 | }; |
| 350 | |
| 351 | class C : public A, public B // align=16 |
| 352 | { |
| 353 | alignas(16) int c1; |
| 354 | }; |
| 355 | |
| 356 | // Make sure we check the alignment of the pointer after subtracting any |
| 357 | // offset. The pointer before subtraction doesn't need to be aligned for |
| 358 | // the destination type. |
| 359 | |
Nick Lewycky | 8b4e379 | 2013-09-11 02:03:20 +0000 | [diff] [blame] | 360 | // CHECK-LABEL: define void @_Z16downcast_pointerP1B(%class.B* %b) |
Filipe Cabecinhas | 178a8df | 2013-08-08 01:08:17 +0000 | [diff] [blame] | 361 | void downcast_pointer(B *b) { |
| 362 | (void) static_cast<C*>(b); |
| 363 | // Alignment check from EmitTypeCheck(TCK_DowncastPointer, ...) |
David Blaikie | 218b783 | 2015-02-27 19:18:17 +0000 | [diff] [blame] | 364 | // CHECK: [[SUB:%[.a-z0-9]*]] = getelementptr i8, i8* {{.*}}, i64 -16 |
Filipe Cabecinhas | 178a8df | 2013-08-08 01:08:17 +0000 | [diff] [blame] | 365 | // CHECK-NEXT: [[C:%[0-9]*]] = bitcast i8* [[SUB]] to %class.C* |
| 366 | // null check goes here |
Filipe Cabecinhas | b2eb1d9 | 2013-08-08 01:24:29 +0000 | [diff] [blame] | 367 | // CHECK: [[FROM_PHI:%[0-9]*]] = phi %class.C* [ [[C]], {{.*}} ], {{.*}} |
Filipe Cabecinhas | 178a8df | 2013-08-08 01:08:17 +0000 | [diff] [blame] | 368 | // Objectsize check goes here |
| 369 | // CHECK: [[C_INT:%[0-9]*]] = ptrtoint %class.C* [[FROM_PHI]] to i64 |
| 370 | // CHECK-NEXT: [[MASKED:%[0-9]*]] = and i64 [[C_INT]], 15 |
| 371 | // CHECK-NEXT: [[TEST:%[0-9]*]] = icmp eq i64 [[MASKED]], 0 |
| 372 | // AND the alignment test with the objectsize test. |
| 373 | // CHECK-NEXT: [[AND:%[0-9]*]] = and i1 {{.*}}, [[TEST]] |
Filipe Cabecinhas | b2eb1d9 | 2013-08-08 01:24:29 +0000 | [diff] [blame] | 374 | // CHECK-NEXT: br i1 [[AND]] |
Filipe Cabecinhas | 178a8df | 2013-08-08 01:08:17 +0000 | [diff] [blame] | 375 | } |
| 376 | |
Hal Finkel | a2347ba | 2014-07-18 15:52:10 +0000 | [diff] [blame] | 377 | // CHECK-LABEL: define void @_Z18downcast_referenceR1B(%class.B* dereferenceable({{[0-9]+}}) %b) |
Filipe Cabecinhas | 178a8df | 2013-08-08 01:08:17 +0000 | [diff] [blame] | 378 | void downcast_reference(B &b) { |
| 379 | (void) static_cast<C&>(b); |
| 380 | // Alignment check from EmitTypeCheck(TCK_DowncastReference, ...) |
David Blaikie | 218b783 | 2015-02-27 19:18:17 +0000 | [diff] [blame] | 381 | // CHECK: [[SUB:%[.a-z0-9]*]] = getelementptr i8, i8* {{.*}}, i64 -16 |
Filipe Cabecinhas | 178a8df | 2013-08-08 01:08:17 +0000 | [diff] [blame] | 382 | // CHECK-NEXT: [[C:%[0-9]*]] = bitcast i8* [[SUB]] to %class.C* |
| 383 | // Objectsize check goes here |
| 384 | // CHECK: [[C_INT:%[0-9]*]] = ptrtoint %class.C* [[C]] to i64 |
| 385 | // CHECK-NEXT: [[MASKED:%[0-9]*]] = and i64 [[C_INT]], 15 |
| 386 | // CHECK-NEXT: [[TEST:%[0-9]*]] = icmp eq i64 [[MASKED]], 0 |
| 387 | // AND the alignment test with the objectsize test. |
Alexey Samsonov | e396bfc | 2014-11-11 22:03:54 +0000 | [diff] [blame] | 388 | // CHECK: [[AND:%[0-9]*]] = and i1 {{.*}}, [[TEST]] |
Filipe Cabecinhas | b2eb1d9 | 2013-08-08 01:24:29 +0000 | [diff] [blame] | 389 | // CHECK-NEXT: br i1 [[AND]] |
Filipe Cabecinhas | 178a8df | 2013-08-08 01:08:17 +0000 | [diff] [blame] | 390 | } |
| 391 | |
Peter Collingbourne | 6b46e38 | 2014-12-03 02:37:10 +0000 | [diff] [blame] | 392 | // CHECK-LABEL: @_Z22indirect_function_callPFviE({{.*}} prologue <{ i32, i8* }> <{ i32 1413876459, i8* bitcast ({ i8*, i8* }* @_ZTIFvPFviEE to i8*) }> |
Peter Collingbourne | 69b004d | 2015-02-25 23:18:42 +0000 | [diff] [blame] | 393 | // CHECK-X32: @_Z22indirect_function_callPFviE({{.*}} prologue <{ i32, i8* }> <{ i32 1413875435, i8* bitcast ({ i8*, i8* }* @_ZTIFvPFviEE to i8*) }> |
| 394 | // CHECK-X86: @_Z22indirect_function_callPFviE({{.*}} prologue <{ i32, i8* }> <{ i32 1413875435, i8* bitcast ({ i8*, i8* }* @_ZTIFvPFviEE to i8*) }> |
Peter Collingbourne | b453cd6 | 2013-10-20 21:29:19 +0000 | [diff] [blame] | 395 | void indirect_function_call(void (*p)(int)) { |
| 396 | // CHECK: [[PTR:%[0-9]*]] = bitcast void (i32)* {{.*}} to <{ i32, i8* }>* |
| 397 | |
| 398 | // Signature check |
David Blaikie | 218b783 | 2015-02-27 19:18:17 +0000 | [diff] [blame] | 399 | // CHECK-NEXT: [[SIGPTR:%[0-9]*]] = getelementptr <{ i32, i8* }>, <{ i32, i8* }>* [[PTR]], i32 0, i32 0 |
David Blaikie | a953f28 | 2015-02-27 21:19:58 +0000 | [diff] [blame] | 400 | // CHECK-NEXT: [[SIG:%[0-9]*]] = load i32, i32* [[SIGPTR]] |
Peter Collingbourne | b453cd6 | 2013-10-20 21:29:19 +0000 | [diff] [blame] | 401 | // CHECK-NEXT: [[SIGCMP:%[0-9]*]] = icmp eq i32 [[SIG]], 1413876459 |
| 402 | // CHECK-NEXT: br i1 [[SIGCMP]] |
| 403 | |
| 404 | // RTTI pointer check |
David Blaikie | 218b783 | 2015-02-27 19:18:17 +0000 | [diff] [blame] | 405 | // CHECK: [[RTTIPTR:%[0-9]*]] = getelementptr <{ i32, i8* }>, <{ i32, i8* }>* [[PTR]], i32 0, i32 1 |
David Blaikie | a953f28 | 2015-02-27 21:19:58 +0000 | [diff] [blame] | 406 | // CHECK-NEXT: [[RTTI:%[0-9]*]] = load i8*, i8** [[RTTIPTR]] |
Peter Collingbourne | b453cd6 | 2013-10-20 21:29:19 +0000 | [diff] [blame] | 407 | // CHECK-NEXT: [[RTTICMP:%[0-9]*]] = icmp eq i8* [[RTTI]], bitcast ({ i8*, i8* }* @_ZTIFviE to i8*) |
| 408 | // CHECK-NEXT: br i1 [[RTTICMP]] |
| 409 | p(42); |
| 410 | } |
| 411 | |
Alexey Samsonov | eb47d8a | 2014-10-13 23:59:00 +0000 | [diff] [blame] | 412 | namespace UpcastPointerTest { |
| 413 | struct S {}; |
| 414 | struct T : S { double d; }; |
| 415 | struct V : virtual S {}; |
| 416 | |
| 417 | // CHECK-LABEL: upcast_pointer |
| 418 | S* upcast_pointer(T* t) { |
| 419 | // Check for null pointer |
| 420 | // CHECK: %[[NONNULL:.*]] = icmp ne {{.*}}, null |
| 421 | // CHECK: br i1 %[[NONNULL]] |
| 422 | |
| 423 | // Check alignment |
| 424 | // CHECK: %[[MISALIGN:.*]] = and i64 %{{.*}}, 7 |
| 425 | // CHECK: icmp eq i64 %[[MISALIGN]], 0 |
| 426 | |
| 427 | // CHECK: call void @__ubsan_handle_type_mismatch |
| 428 | return t; |
| 429 | } |
| 430 | |
| 431 | V getV(); |
| 432 | |
| 433 | // CHECK-LABEL: upcast_to_vbase |
| 434 | void upcast_to_vbase() { |
| 435 | // No need to check for null here, as we have a temporary here. |
| 436 | |
| 437 | // CHECK-NOT: br i1 |
| 438 | |
| 439 | // CHECK: call i64 @llvm.objectsize |
| 440 | // CHECK: call void @__ubsan_handle_type_mismatch |
| 441 | // CHECK: call void @__ubsan_handle_dynamic_type_cache_miss |
| 442 | const S& s = getV(); |
| 443 | } |
| 444 | } |
| 445 | |
Nick Lewycky | 8b4e379 | 2013-09-11 02:03:20 +0000 | [diff] [blame] | 446 | namespace CopyValueRepresentation { |
| 447 | // CHECK-LABEL: define {{.*}} @_ZN23CopyValueRepresentation2S3aSERKS0_ |
| 448 | // CHECK-NOT: call {{.*}} @__ubsan_handle_load_invalid_value |
| 449 | // CHECK-LABEL: define {{.*}} @_ZN23CopyValueRepresentation2S4aSEOS0_ |
| 450 | // CHECK-NOT: call {{.*}} @__ubsan_handle_load_invalid_value |
Rafael Espindola | e5df59f | 2015-01-22 00:24:57 +0000 | [diff] [blame] | 451 | // CHECK-LABEL: define {{.*}} @_ZN23CopyValueRepresentation2S1C2ERKS0_ |
Nick Lewycky | 8b4e379 | 2013-09-11 02:03:20 +0000 | [diff] [blame] | 452 | // CHECK-NOT: call {{.*}} __ubsan_handle_load_invalid_value |
| 453 | // CHECK-LABEL: define {{.*}} @_ZN23CopyValueRepresentation2S2C2ERKS0_ |
| 454 | // CHECK: __ubsan_handle_load_invalid_value |
Rafael Espindola | e5df59f | 2015-01-22 00:24:57 +0000 | [diff] [blame] | 455 | // CHECK-LABEL: define {{.*}} @_ZN23CopyValueRepresentation2S5C2ERKS0_ |
Nick Lewycky | 8b4e379 | 2013-09-11 02:03:20 +0000 | [diff] [blame] | 456 | // CHECK-NOT: call {{.*}} __ubsan_handle_load_invalid_value |
| 457 | |
| 458 | struct CustomCopy { CustomCopy(); CustomCopy(const CustomCopy&); }; |
| 459 | struct S1 { |
| 460 | CustomCopy CC; |
| 461 | bool b; |
| 462 | }; |
| 463 | void callee1(S1); |
| 464 | void test1() { |
| 465 | S1 s11; |
| 466 | callee1(s11); |
| 467 | S1 s12; |
| 468 | s12 = s11; |
| 469 | } |
| 470 | |
| 471 | static bool some_global_bool; |
| 472 | struct ExprCopy { |
| 473 | ExprCopy(); |
| 474 | ExprCopy(const ExprCopy&, bool b = some_global_bool); |
| 475 | }; |
| 476 | struct S2 { |
| 477 | ExprCopy EC; |
| 478 | bool b; |
| 479 | }; |
| 480 | void callee2(S2); |
| 481 | void test2(void) { |
| 482 | S2 s21; |
| 483 | callee2(s21); |
| 484 | S2 s22; |
| 485 | s22 = s21; |
| 486 | } |
| 487 | |
| 488 | struct CustomAssign { CustomAssign &operator=(const CustomAssign&); }; |
| 489 | struct S3 { |
| 490 | CustomAssign CA; |
| 491 | bool b; |
| 492 | }; |
| 493 | void test3() { |
| 494 | S3 x, y; |
| 495 | x = y; |
| 496 | } |
| 497 | |
| 498 | struct CustomMove { |
| 499 | CustomMove(); |
| 500 | CustomMove(const CustomMove&&); |
| 501 | CustomMove &operator=(const CustomMove&&); |
| 502 | }; |
| 503 | struct S4 { |
| 504 | CustomMove CM; |
| 505 | bool b; |
| 506 | }; |
| 507 | void test4() { |
| 508 | S4 x, y; |
| 509 | x = static_cast<S4&&>(y); |
| 510 | } |
| 511 | |
| 512 | struct EnumCustomCopy { |
| 513 | EnumCustomCopy(); |
| 514 | EnumCustomCopy(const EnumCustomCopy&); |
| 515 | }; |
| 516 | struct S5 { |
| 517 | EnumCustomCopy ECC; |
| 518 | bool b; |
| 519 | }; |
| 520 | void callee5(S5); |
| 521 | void test5() { |
| 522 | S5 s51; |
| 523 | callee5(s51); |
| 524 | S5 s52; |
| 525 | s52 = s51; |
| 526 | } |
| 527 | } |
| 528 | |
Bill Wendling | e1c4a1b | 2013-02-22 09:10:20 +0000 | [diff] [blame] | 529 | // CHECK: attributes [[NR_NUW]] = { noreturn nounwind } |