2012-12-19 11:22:04 +00:00
|
|
|
; RUN: opt < %s -msan -msan-check-access-address=0 -S | FileCheck %s
|
2013-11-21 11:37:16 +00:00
|
|
|
; RUN: opt < %s -msan -msan-check-access-address=0 -msan-track-origins=1 -S | FileCheck -check-prefix=CHECK -check-prefix=CHECK-ORIGINS %s
|
2013-05-28 13:07:43 +00:00
|
|
|
|
2012-11-29 09:57:20 +00:00
|
|
|
target datalayout = "e-p:64:64:64-i1:8:8-i8:8:8-i16:16:16-i32:32:32-i64:64:64-f32:32:32-f64:64:64-v64:64:64-v128:128:128-a0:0:64-s0:64:64-f80:128:128-n8:16:32:64-S128"
|
2013-05-21 12:27:47 +00:00
|
|
|
target triple = "x86_64-unknown-linux-gnu"
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
; Check the presence of __msan_init
|
|
|
|
|
; CHECK: @llvm.global_ctors {{.*}} @__msan_init
|
|
|
|
|
|
2013-05-16 09:14:05 +00:00
|
|
|
; Check the presence and the linkage type of __msan_track_origins and
|
|
|
|
|
; other interface symbols.
|
2013-05-31 12:04:29 +00:00
|
|
|
; CHECK-NOT: @__msan_track_origins
|
|
|
|
|
; CHECK-ORIGINS: @__msan_track_origins = weak_odr constant i32 1
|
|
|
|
|
; CHECK-NOT: @__msan_keep_going = weak_odr constant i32 0
|
2013-05-16 09:14:05 +00:00
|
|
|
; CHECK: @__msan_retval_tls = external thread_local(initialexec) global [{{.*}}]
|
|
|
|
|
; CHECK: @__msan_retval_origin_tls = external thread_local(initialexec) global i32
|
|
|
|
|
; CHECK: @__msan_param_tls = external thread_local(initialexec) global [{{.*}}]
|
|
|
|
|
; CHECK: @__msan_param_origin_tls = external thread_local(initialexec) global [{{.*}}]
|
|
|
|
|
; CHECK: @__msan_va_arg_tls = external thread_local(initialexec) global [{{.*}}]
|
|
|
|
|
; CHECK: @__msan_va_arg_overflow_size_tls = external thread_local(initialexec) global i64
|
|
|
|
|
; CHECK: @__msan_origin_tls = external thread_local(initialexec) global i32
|
2012-12-05 12:49:41 +00:00
|
|
|
|
2012-12-14 13:43:11 +00:00
|
|
|
|
2012-12-06 11:41:03 +00:00
|
|
|
; Check instrumentation of stores
|
2012-12-14 13:43:11 +00:00
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @Store(i32* nocapture %p, i32 %x) nounwind uwtable sanitize_memory {
|
2012-12-06 11:41:03 +00:00
|
|
|
entry:
|
|
|
|
|
store i32 %x, i32* %p, align 4
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @Store
|
|
|
|
|
; CHECK: load {{.*}} @__msan_param_tls
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK-ORIGINS: load {{.*}} @__msan_param_origin_tls
|
2012-12-06 11:41:03 +00:00
|
|
|
; CHECK: store
|
|
|
|
|
; CHECK-ORIGINS: icmp
|
|
|
|
|
; CHECK-ORIGINS: br i1
|
|
|
|
|
; CHECK-ORIGINS: <label>
|
|
|
|
|
; CHECK-ORIGINS: store
|
|
|
|
|
; CHECK-ORIGINS: br label
|
|
|
|
|
; CHECK-ORIGINS: <label>
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK: store
|
|
|
|
|
; CHECK: ret void
|
2012-12-06 11:41:03 +00:00
|
|
|
|
|
|
|
|
|
2012-12-14 13:43:11 +00:00
|
|
|
; Check instrumentation of aligned stores
|
|
|
|
|
; Shadow store has the same alignment as the original store; origin store
|
|
|
|
|
; does not specify explicit alignment.
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @AlignedStore(i32* nocapture %p, i32 %x) nounwind uwtable sanitize_memory {
|
2012-12-14 13:43:11 +00:00
|
|
|
entry:
|
|
|
|
|
store i32 %x, i32* %p, align 32
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @AlignedStore
|
|
|
|
|
; CHECK: load {{.*}} @__msan_param_tls
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK-ORIGINS: load {{.*}} @__msan_param_origin_tls
|
2012-12-14 13:43:11 +00:00
|
|
|
; CHECK: store {{.*}} align 32
|
|
|
|
|
; CHECK-ORIGINS: icmp
|
|
|
|
|
; CHECK-ORIGINS: br i1
|
|
|
|
|
; CHECK-ORIGINS: <label>
|
2012-12-26 11:55:09 +00:00
|
|
|
; CHECK-ORIGINS: store {{.*}} align 32
|
2012-12-14 13:43:11 +00:00
|
|
|
; CHECK-ORIGINS: br label
|
|
|
|
|
; CHECK-ORIGINS: <label>
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK: store {{.*}} align 32
|
|
|
|
|
; CHECK: ret void
|
2012-12-14 13:43:11 +00:00
|
|
|
|
|
|
|
|
|
2012-11-29 09:57:20 +00:00
|
|
|
; load followed by cmp: check that we load the shadow and call __msan_warning.
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @LoadAndCmp(i32* nocapture %a) nounwind uwtable sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
2015-02-27 21:17:42 +00:00
|
|
|
%0 = load i32, i32* %a, align 4
|
2012-11-29 09:57:20 +00:00
|
|
|
%tobool = icmp eq i32 %0, 0
|
|
|
|
|
br i1 %tobool, label %if.end, label %if.then
|
|
|
|
|
|
|
|
|
|
if.then: ; preds = %entry
|
|
|
|
|
tail call void (...)* @foo() nounwind
|
|
|
|
|
br label %if.end
|
|
|
|
|
|
|
|
|
|
if.end: ; preds = %entry, %if.then
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare void @foo(...)
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @LoadAndCmp
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK: = load
|
|
|
|
|
; CHECK: = load
|
|
|
|
|
; CHECK: call void @__msan_warning_noreturn()
|
2012-11-29 13:11:09 +00:00
|
|
|
; CHECK-NEXT: call void asm sideeffect
|
|
|
|
|
; CHECK-NEXT: unreachable
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret void
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
; Check that we store the shadow for the retval.
|
2013-02-28 11:25:14 +00:00
|
|
|
define i32 @ReturnInt() nounwind uwtable readnone sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
|
|
|
|
ret i32 123
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ReturnInt
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK: store i32 0,{{.*}}__msan_retval_tls
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret i32
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
; Check that we get the shadow for the retval.
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @CopyRetVal(i32* nocapture %a) nounwind uwtable sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
|
|
|
|
%call = tail call i32 @ReturnInt() nounwind
|
|
|
|
|
store i32 %call, i32* %a, align 4
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @CopyRetVal
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK: load{{.*}}__msan_retval_tls
|
|
|
|
|
; CHECK: store
|
|
|
|
|
; CHECK: store
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret void
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
; Check that we generate PHIs for shadow.
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @FuncWithPhi(i32* nocapture %a, i32* %b, i32* nocapture %c) nounwind uwtable sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
|
|
|
|
%tobool = icmp eq i32* %b, null
|
|
|
|
|
br i1 %tobool, label %if.else, label %if.then
|
|
|
|
|
|
|
|
|
|
if.then: ; preds = %entry
|
2015-02-27 21:17:42 +00:00
|
|
|
%0 = load i32, i32* %b, align 4
|
2012-11-29 09:57:20 +00:00
|
|
|
br label %if.end
|
|
|
|
|
|
|
|
|
|
if.else: ; preds = %entry
|
2015-02-27 21:17:42 +00:00
|
|
|
%1 = load i32, i32* %c, align 4
|
2012-11-29 09:57:20 +00:00
|
|
|
br label %if.end
|
|
|
|
|
|
|
|
|
|
if.end: ; preds = %if.else, %if.then
|
|
|
|
|
%t.0 = phi i32 [ %0, %if.then ], [ %1, %if.else ]
|
|
|
|
|
store i32 %t.0, i32* %a, align 4
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @FuncWithPhi
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK: = phi
|
|
|
|
|
; CHECK-NEXT: = phi
|
|
|
|
|
; CHECK: store
|
|
|
|
|
; CHECK: store
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret void
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
; Compute shadow for "x << 10"
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @ShlConst(i32* nocapture %x) nounwind uwtable sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
2015-02-27 21:17:42 +00:00
|
|
|
%0 = load i32, i32* %x, align 4
|
2012-11-29 09:57:20 +00:00
|
|
|
%1 = shl i32 %0, 10
|
|
|
|
|
store i32 %1, i32* %x, align 4
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ShlConst
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK: = load
|
|
|
|
|
; CHECK: = load
|
|
|
|
|
; CHECK: shl
|
|
|
|
|
; CHECK: shl
|
|
|
|
|
; CHECK: store
|
|
|
|
|
; CHECK: store
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret void
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
; Compute shadow for "10 << x": it should have 'sext i1'.
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @ShlNonConst(i32* nocapture %x) nounwind uwtable sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
2015-02-27 21:17:42 +00:00
|
|
|
%0 = load i32, i32* %x, align 4
|
2012-11-29 09:57:20 +00:00
|
|
|
%1 = shl i32 10, %0
|
|
|
|
|
store i32 %1, i32* %x, align 4
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ShlNonConst
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK: = load
|
|
|
|
|
; CHECK: = load
|
|
|
|
|
; CHECK: = sext i1
|
|
|
|
|
; CHECK: store
|
|
|
|
|
; CHECK: store
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret void
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
; SExt
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @SExt(i32* nocapture %a, i16* nocapture %b) nounwind uwtable sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
2015-02-27 21:17:42 +00:00
|
|
|
%0 = load i16, i16* %b, align 2
|
2012-11-29 09:57:20 +00:00
|
|
|
%1 = sext i16 %0 to i32
|
|
|
|
|
store i32 %1, i32* %a, align 4
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @SExt
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK: = load
|
|
|
|
|
; CHECK: = load
|
|
|
|
|
; CHECK: = sext
|
|
|
|
|
; CHECK: = sext
|
|
|
|
|
; CHECK: store
|
|
|
|
|
; CHECK: store
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret void
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
; memset
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @MemSet(i8* nocapture %x) nounwind uwtable sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
|
|
|
|
call void @llvm.memset.p0i8.i64(i8* %x, i8 42, i64 10, i32 1, i1 false)
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare void @llvm.memset.p0i8.i64(i8* nocapture, i8, i64, i32, i1) nounwind
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @MemSet
|
2012-11-29 12:43:56 +00:00
|
|
|
; CHECK: call i8* @__msan_memset
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret void
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
; memcpy
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @MemCpy(i8* nocapture %x, i8* nocapture %y) nounwind uwtable sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
|
|
|
|
call void @llvm.memcpy.p0i8.p0i8.i64(i8* %x, i8* %y, i64 10, i32 1, i1 false)
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare void @llvm.memcpy.p0i8.p0i8.i64(i8* nocapture, i8* nocapture, i64, i32, i1) nounwind
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @MemCpy
|
2012-11-29 12:43:56 +00:00
|
|
|
; CHECK: call i8* @__msan_memcpy
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret void
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
; memmove is lowered to a call
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @MemMove(i8* nocapture %x, i8* nocapture %y) nounwind uwtable sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
|
|
|
|
call void @llvm.memmove.p0i8.p0i8.i64(i8* %x, i8* %y, i64 10, i32 1, i1 false)
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare void @llvm.memmove.p0i8.p0i8.i64(i8* nocapture, i8* nocapture, i64, i32, i1) nounwind
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @MemMove
|
2012-11-29 12:43:56 +00:00
|
|
|
; CHECK: call i8* @__msan_memmove
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret void
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
; Check that we propagate shadow for "select"
|
|
|
|
|
|
2013-11-21 11:37:16 +00:00
|
|
|
define i32 @Select(i32 %a, i32 %b, i1 %c) nounwind uwtable readnone sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
2013-11-21 11:37:16 +00:00
|
|
|
%cond = select i1 %c, i32 %a, i32 %b
|
2012-11-29 09:57:20 +00:00
|
|
|
ret i32 %cond
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @Select
|
2014-03-25 13:08:34 +00:00
|
|
|
; CHECK: select i1
|
2014-03-25 14:15:14 +00:00
|
|
|
; CHECK-DAG: or i32
|
|
|
|
|
; CHECK-DAG: xor i32
|
|
|
|
|
; CHECK: or i32
|
2014-03-25 14:32:05 +00:00
|
|
|
; CHECK-DAG: select i1
|
|
|
|
|
; CHECK-ORIGINS-DAG: select
|
|
|
|
|
; CHECK-ORIGINS-DAG: select
|
|
|
|
|
; CHECK-DAG: select i1
|
2014-03-25 13:08:34 +00:00
|
|
|
; CHECK: store i32{{.*}}@__msan_retval_tls
|
|
|
|
|
; CHECK-ORIGINS: store i32{{.*}}@__msan_retval_origin_tls
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret i32
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
|
2012-12-25 14:56:21 +00:00
|
|
|
; Check that we propagate origin for "select" with vector condition.
|
|
|
|
|
; Select condition is flattened to i1, which is then used to select one of the
|
|
|
|
|
; argument origins.
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define <8 x i16> @SelectVector(<8 x i16> %a, <8 x i16> %b, <8 x i1> %c) nounwind uwtable readnone sanitize_memory {
|
2012-12-25 14:56:21 +00:00
|
|
|
entry:
|
|
|
|
|
%cond = select <8 x i1> %c, <8 x i16> %a, <8 x i16> %b
|
|
|
|
|
ret <8 x i16> %cond
|
|
|
|
|
}
|
|
|
|
|
|
2013-09-03 10:04:11 +00:00
|
|
|
; CHECK: @SelectVector
|
|
|
|
|
; CHECK: select <8 x i1>
|
2014-03-25 14:15:14 +00:00
|
|
|
; CHECK-DAG: or <8 x i16>
|
|
|
|
|
; CHECK-DAG: xor <8 x i16>
|
|
|
|
|
; CHECK: or <8 x i16>
|
2014-03-25 14:32:05 +00:00
|
|
|
; CHECK-DAG: select <8 x i1>
|
|
|
|
|
; CHECK-ORIGINS-DAG: select
|
|
|
|
|
; CHECK-ORIGINS-DAG: select
|
|
|
|
|
; CHECK-DAG: select <8 x i1>
|
2014-03-25 13:08:34 +00:00
|
|
|
; CHECK: store <8 x i16>{{.*}}@__msan_retval_tls
|
|
|
|
|
; CHECK-ORIGINS: store i32{{.*}}@__msan_retval_origin_tls
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK: ret <8 x i16>
|
|
|
|
|
|
2012-12-25 14:56:21 +00:00
|
|
|
|
2013-10-14 09:52:09 +00:00
|
|
|
; Check that we propagate origin for "select" with scalar condition and vector
|
|
|
|
|
; arguments. Select condition shadow is sign-extended to the vector type and
|
|
|
|
|
; mixed into the result shadow.
|
|
|
|
|
|
|
|
|
|
define <8 x i16> @SelectVector2(<8 x i16> %a, <8 x i16> %b, i1 %c) nounwind uwtable readnone sanitize_memory {
|
|
|
|
|
entry:
|
|
|
|
|
%cond = select i1 %c, <8 x i16> %a, <8 x i16> %b
|
|
|
|
|
ret <8 x i16> %cond
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @SelectVector2
|
|
|
|
|
; CHECK: select i1
|
2014-03-25 14:15:14 +00:00
|
|
|
; CHECK-DAG: or <8 x i16>
|
|
|
|
|
; CHECK-DAG: xor <8 x i16>
|
2014-03-25 13:08:34 +00:00
|
|
|
; CHECK: or <8 x i16>
|
2014-03-25 14:32:05 +00:00
|
|
|
; CHECK-DAG: select i1
|
|
|
|
|
; CHECK-ORIGINS-DAG: select i1
|
|
|
|
|
; CHECK-ORIGINS-DAG: select i1
|
|
|
|
|
; CHECK-DAG: select i1
|
2013-10-14 09:52:09 +00:00
|
|
|
; CHECK: ret <8 x i16>
|
|
|
|
|
|
|
|
|
|
|
2013-09-03 13:05:29 +00:00
|
|
|
define { i64, i64 } @SelectStruct(i1 zeroext %x, { i64, i64 } %a, { i64, i64 } %b) readnone sanitize_memory {
|
|
|
|
|
entry:
|
|
|
|
|
%c = select i1 %x, { i64, i64 } %a, { i64, i64 } %b
|
|
|
|
|
ret { i64, i64 } %c
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @SelectStruct
|
|
|
|
|
; CHECK: select i1 {{.*}}, { i64, i64 }
|
|
|
|
|
; CHECK-NEXT: select i1 {{.*}}, { i64, i64 } { i64 -1, i64 -1 }, { i64, i64 }
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK-ORIGINS: select i1
|
2013-11-21 12:00:24 +00:00
|
|
|
; CHECK-ORIGINS: select i1
|
2013-09-03 13:05:29 +00:00
|
|
|
; CHECK-NEXT: select i1 {{.*}}, { i64, i64 }
|
|
|
|
|
; CHECK: ret { i64, i64 }
|
|
|
|
|
|
|
|
|
|
|
2014-03-25 13:08:34 +00:00
|
|
|
define { i64*, double } @SelectStruct2(i1 zeroext %x, { i64*, double } %a, { i64*, double } %b) readnone sanitize_memory {
|
|
|
|
|
entry:
|
|
|
|
|
%c = select i1 %x, { i64*, double } %a, { i64*, double } %b
|
|
|
|
|
ret { i64*, double } %c
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @SelectStruct2
|
|
|
|
|
; CHECK: select i1 {{.*}}, { i64, i64 }
|
|
|
|
|
; CHECK-NEXT: select i1 {{.*}}, { i64, i64 } { i64 -1, i64 -1 }, { i64, i64 }
|
|
|
|
|
; CHECK-ORIGINS: select i1
|
|
|
|
|
; CHECK-ORIGINS: select i1
|
|
|
|
|
; CHECK-NEXT: select i1 {{.*}}, { i64*, double }
|
|
|
|
|
; CHECK: ret { i64*, double }
|
|
|
|
|
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define i8* @IntToPtr(i64 %x) nounwind uwtable readnone sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
|
|
|
|
%0 = inttoptr i64 %x to i8*
|
|
|
|
|
ret i8* %0
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @IntToPtr
|
2015-02-27 21:17:42 +00:00
|
|
|
; CHECK: load i64, i64*{{.*}}__msan_param_tls
|
|
|
|
|
; CHECK-ORIGINS-NEXT: load i32, i32*{{.*}}__msan_param_origin_tls
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK-NEXT: inttoptr
|
|
|
|
|
; CHECK-NEXT: store i64{{.*}}__msan_retval_tls
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK: ret i8*
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define i8* @IntToPtr_ZExt(i16 %x) nounwind uwtable readnone sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
|
|
|
|
%0 = inttoptr i16 %x to i8*
|
|
|
|
|
ret i8* %0
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @IntToPtr_ZExt
|
2015-02-27 21:17:42 +00:00
|
|
|
; CHECK: load i16, i16*{{.*}}__msan_param_tls
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK: zext
|
|
|
|
|
; CHECK-NEXT: inttoptr
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK-NEXT: store i64{{.*}}__msan_retval_tls
|
|
|
|
|
; CHECK: ret i8*
|
2012-11-29 09:57:20 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
; Check that we insert exactly one check on udiv
|
|
|
|
|
; (2nd arg shadow is checked, 1st arg shadow is propagated)
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define i32 @Div(i32 %a, i32 %b) nounwind uwtable readnone sanitize_memory {
|
2012-11-29 09:57:20 +00:00
|
|
|
entry:
|
|
|
|
|
%div = udiv i32 %a, %b
|
|
|
|
|
ret i32 %div
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @Div
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK: icmp
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: call void @__msan_warning
|
2012-11-29 09:57:20 +00:00
|
|
|
; CHECK-NOT: icmp
|
|
|
|
|
; CHECK: udiv
|
|
|
|
|
; CHECK-NOT: icmp
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret i32
|
2012-11-29 14:05:53 +00:00
|
|
|
|
|
|
|
|
|
2012-11-29 14:25:47 +00:00
|
|
|
; Check that we propagate shadow for x<0, x>=0, etc (i.e. sign bit tests)
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define zeroext i1 @ICmpSLT(i32 %x) nounwind uwtable readnone sanitize_memory {
|
2012-11-29 14:25:47 +00:00
|
|
|
%1 = icmp slt i32 %x, 0
|
|
|
|
|
ret i1 %1
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ICmpSLT
|
2012-11-29 14:25:47 +00:00
|
|
|
; CHECK: icmp slt
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
2012-11-29 14:25:47 +00:00
|
|
|
; CHECK: icmp slt
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
|
|
|
|
; CHECK: ret i1
|
2012-11-29 14:25:47 +00:00
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define zeroext i1 @ICmpSGE(i32 %x) nounwind uwtable readnone sanitize_memory {
|
2012-11-29 14:25:47 +00:00
|
|
|
%1 = icmp sge i32 %x, 0
|
|
|
|
|
ret i1 %1
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ICmpSGE
|
2013-01-28 11:42:28 +00:00
|
|
|
; CHECK: icmp slt
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
2012-11-29 14:25:47 +00:00
|
|
|
; CHECK: icmp sge
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
|
|
|
|
; CHECK: ret i1
|
2012-11-29 14:25:47 +00:00
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define zeroext i1 @ICmpSGT(i32 %x) nounwind uwtable readnone sanitize_memory {
|
2012-11-29 14:25:47 +00:00
|
|
|
%1 = icmp sgt i32 0, %x
|
|
|
|
|
ret i1 %1
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ICmpSGT
|
2013-01-28 11:42:28 +00:00
|
|
|
; CHECK: icmp slt
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
2012-11-29 14:25:47 +00:00
|
|
|
; CHECK: icmp sgt
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
|
|
|
|
; CHECK: ret i1
|
2012-11-29 14:25:47 +00:00
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define zeroext i1 @ICmpSLE(i32 %x) nounwind uwtable readnone sanitize_memory {
|
2012-11-29 14:25:47 +00:00
|
|
|
%1 = icmp sle i32 0, %x
|
|
|
|
|
ret i1 %1
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ICmpSLE
|
2013-01-28 11:42:28 +00:00
|
|
|
; CHECK: icmp slt
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
2012-11-29 14:25:47 +00:00
|
|
|
; CHECK: icmp sle
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
|
|
|
|
; CHECK: ret i1
|
2012-11-29 14:25:47 +00:00
|
|
|
|
|
|
|
|
|
2013-01-15 16:44:52 +00:00
|
|
|
; Check that we propagate shadow for x<0, x>=0, etc (i.e. sign bit tests)
|
|
|
|
|
; of the vector arguments.
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define <2 x i1> @ICmpSLT_vector(<2 x i32*> %x) nounwind uwtable readnone sanitize_memory {
|
2013-01-15 16:44:52 +00:00
|
|
|
%1 = icmp slt <2 x i32*> %x, zeroinitializer
|
|
|
|
|
ret <2 x i1> %1
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @ICmpSLT_vector
|
|
|
|
|
; CHECK: icmp slt <2 x i64>
|
|
|
|
|
; CHECK-NOT: call void @__msan_warning
|
|
|
|
|
; CHECK: icmp slt <2 x i32*>
|
|
|
|
|
; CHECK-NOT: call void @__msan_warning
|
|
|
|
|
; CHECK: ret <2 x i1>
|
|
|
|
|
|
|
|
|
|
|
2013-01-28 11:42:28 +00:00
|
|
|
; Check that we propagate shadow for unsigned relational comparisons with
|
|
|
|
|
; constants
|
2013-01-25 15:31:10 +00:00
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define zeroext i1 @ICmpUGTConst(i32 %x) nounwind uwtable readnone sanitize_memory {
|
2013-01-25 15:31:10 +00:00
|
|
|
entry:
|
2013-01-28 11:42:28 +00:00
|
|
|
%cmp = icmp ugt i32 %x, 7
|
2013-01-25 15:31:10 +00:00
|
|
|
ret i1 %cmp
|
|
|
|
|
}
|
|
|
|
|
|
2013-01-28 11:42:28 +00:00
|
|
|
; CHECK: @ICmpUGTConst
|
|
|
|
|
; CHECK: icmp ugt i32
|
2013-01-25 15:31:10 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
2013-01-28 11:42:28 +00:00
|
|
|
; CHECK: icmp ugt i32
|
2013-01-25 15:31:10 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
2013-01-28 11:42:28 +00:00
|
|
|
; CHECK: icmp ugt i32
|
2013-01-25 15:31:10 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
|
|
|
|
; CHECK: ret i1
|
|
|
|
|
|
|
|
|
|
|
2012-12-26 11:55:09 +00:00
|
|
|
; Check that loads of shadow have the same aligment as the original loads.
|
|
|
|
|
; Check that loads of origin have the aligment of max(4, original alignment).
|
2012-11-29 14:05:53 +00:00
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define i32 @ShadowLoadAlignmentLarge() nounwind uwtable sanitize_memory {
|
2012-11-29 14:05:53 +00:00
|
|
|
%y = alloca i32, align 64
|
2015-02-27 21:17:42 +00:00
|
|
|
%1 = load volatile i32, i32* %y, align 64
|
2012-11-29 14:05:53 +00:00
|
|
|
ret i32 %1
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ShadowLoadAlignmentLarge
|
2015-02-27 21:17:42 +00:00
|
|
|
; CHECK: load volatile i32, i32* {{.*}} align 64
|
|
|
|
|
; CHECK: load i32, i32* {{.*}} align 64
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret i32
|
2012-11-29 14:05:53 +00:00
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define i32 @ShadowLoadAlignmentSmall() nounwind uwtable sanitize_memory {
|
2012-11-29 14:05:53 +00:00
|
|
|
%y = alloca i32, align 2
|
2015-02-27 21:17:42 +00:00
|
|
|
%1 = load volatile i32, i32* %y, align 2
|
2012-11-29 14:05:53 +00:00
|
|
|
ret i32 %1
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ShadowLoadAlignmentSmall
|
2015-02-27 21:17:42 +00:00
|
|
|
; CHECK: load volatile i32, i32* {{.*}} align 2
|
|
|
|
|
; CHECK: load i32, i32* {{.*}} align 2
|
|
|
|
|
; CHECK-ORIGINS: load i32, i32* {{.*}} align 4
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK: ret i32
|
2012-12-26 11:55:09 +00:00
|
|
|
|
2012-11-30 12:12:20 +00:00
|
|
|
|
|
|
|
|
; Test vector manipulation instructions.
|
2012-12-04 11:42:05 +00:00
|
|
|
; Check that the same bit manipulation is applied to the shadow values.
|
|
|
|
|
; Check that there is a zero test of the shadow of %idx argument, where present.
|
2012-11-30 12:12:20 +00:00
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define i32 @ExtractElement(<4 x i32> %vec, i32 %idx) sanitize_memory {
|
2012-11-30 12:12:20 +00:00
|
|
|
%x = extractelement <4 x i32> %vec, i32 %idx
|
|
|
|
|
ret i32 %x
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ExtractElement
|
2012-11-30 12:12:20 +00:00
|
|
|
; CHECK: extractelement
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: call void @__msan_warning
|
2012-11-30 12:12:20 +00:00
|
|
|
; CHECK: extractelement
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret i32
|
2012-11-30 12:12:20 +00:00
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define <4 x i32> @InsertElement(<4 x i32> %vec, i32 %idx, i32 %x) sanitize_memory {
|
2012-11-30 12:12:20 +00:00
|
|
|
%vec1 = insertelement <4 x i32> %vec, i32 %x, i32 %idx
|
|
|
|
|
ret <4 x i32> %vec1
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @InsertElement
|
2012-11-30 12:12:20 +00:00
|
|
|
; CHECK: insertelement
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: call void @__msan_warning
|
2012-11-30 12:12:20 +00:00
|
|
|
; CHECK: insertelement
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret <4 x i32>
|
2012-11-30 12:12:20 +00:00
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define <4 x i32> @ShuffleVector(<4 x i32> %vec, <4 x i32> %vec1) sanitize_memory {
|
2012-11-30 12:12:20 +00:00
|
|
|
%vec2 = shufflevector <4 x i32> %vec, <4 x i32> %vec1,
|
|
|
|
|
<4 x i32> <i32 0, i32 4, i32 1, i32 5>
|
|
|
|
|
ret <4 x i32> %vec2
|
|
|
|
|
}
|
|
|
|
|
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: @ShuffleVector
|
2012-11-30 12:12:20 +00:00
|
|
|
; CHECK: shufflevector
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK-NOT: call void @__msan_warning
|
2012-11-30 12:12:20 +00:00
|
|
|
; CHECK: shufflevector
|
2012-12-04 11:42:05 +00:00
|
|
|
; CHECK: ret <4 x i32>
|
2012-12-05 14:39:55 +00:00
|
|
|
|
2012-12-19 11:22:04 +00:00
|
|
|
|
2012-12-05 14:39:55 +00:00
|
|
|
; Test bswap intrinsic instrumentation
|
2013-02-28 11:25:14 +00:00
|
|
|
define i32 @BSwap(i32 %x) nounwind uwtable readnone sanitize_memory {
|
2012-12-05 14:39:55 +00:00
|
|
|
%y = tail call i32 @llvm.bswap.i32(i32 %x)
|
|
|
|
|
ret i32 %y
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare i32 @llvm.bswap.i32(i32) nounwind readnone
|
|
|
|
|
|
|
|
|
|
; CHECK: @BSwap
|
|
|
|
|
; CHECK-NOT: call void @__msan_warning
|
|
|
|
|
; CHECK: @llvm.bswap.i32
|
|
|
|
|
; CHECK-NOT: call void @__msan_warning
|
|
|
|
|
; CHECK: @llvm.bswap.i32
|
|
|
|
|
; CHECK-NOT: call void @__msan_warning
|
|
|
|
|
; CHECK: ret i32
|
2012-12-19 11:22:04 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
; Store intrinsic.
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @StoreIntrinsic(i8* %p, <4 x float> %x) nounwind uwtable sanitize_memory {
|
2012-12-19 11:22:04 +00:00
|
|
|
call void @llvm.x86.sse.storeu.ps(i8* %p, <4 x float> %x)
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare void @llvm.x86.sse.storeu.ps(i8*, <4 x float>) nounwind
|
|
|
|
|
|
|
|
|
|
; CHECK: @StoreIntrinsic
|
|
|
|
|
; CHECK-NOT: br
|
|
|
|
|
; CHECK-NOT: = or
|
|
|
|
|
; CHECK: store <4 x i32> {{.*}} align 1
|
|
|
|
|
; CHECK: call void @llvm.x86.sse.storeu.ps
|
|
|
|
|
; CHECK: ret void
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
; Load intrinsic.
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define <16 x i8> @LoadIntrinsic(i8* %p) nounwind uwtable sanitize_memory {
|
2012-12-19 11:22:04 +00:00
|
|
|
%call = call <16 x i8> @llvm.x86.sse3.ldu.dq(i8* %p)
|
|
|
|
|
ret <16 x i8> %call
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare <16 x i8> @llvm.x86.sse3.ldu.dq(i8* %p) nounwind
|
|
|
|
|
|
|
|
|
|
; CHECK: @LoadIntrinsic
|
2015-02-27 21:17:42 +00:00
|
|
|
; CHECK: load <16 x i8>, <16 x i8>* {{.*}} align 1
|
|
|
|
|
; CHECK-ORIGINS: [[ORIGIN:%[01-9a-z]+]] = load i32, i32* {{.*}}
|
2012-12-19 11:22:04 +00:00
|
|
|
; CHECK-NOT: br
|
|
|
|
|
; CHECK-NOT: = or
|
|
|
|
|
; CHECK: call <16 x i8> @llvm.x86.sse3.ldu.dq
|
|
|
|
|
; CHECK: store <16 x i8> {{.*}} @__msan_retval_tls
|
|
|
|
|
; CHECK-ORIGINS: store i32 {{.*}}[[ORIGIN]], i32* @__msan_retval_origin_tls
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK: ret <16 x i8>
|
2012-12-19 11:22:04 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
; Simple NoMem intrinsic
|
|
|
|
|
; Check that shadow is OR'ed, and origin is Select'ed
|
|
|
|
|
; And no shadow checks!
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define <8 x i16> @Paddsw128(<8 x i16> %a, <8 x i16> %b) nounwind uwtable sanitize_memory {
|
2012-12-19 11:22:04 +00:00
|
|
|
%call = call <8 x i16> @llvm.x86.sse2.padds.w(<8 x i16> %a, <8 x i16> %b)
|
|
|
|
|
ret <8 x i16> %call
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare <8 x i16> @llvm.x86.sse2.padds.w(<8 x i16> %a, <8 x i16> %b) nounwind
|
|
|
|
|
|
|
|
|
|
; CHECK: @Paddsw128
|
2015-02-27 21:17:42 +00:00
|
|
|
; CHECK-NEXT: load <8 x i16>, <8 x i16>* {{.*}} @__msan_param_tls
|
|
|
|
|
; CHECK-ORIGINS: load i32, i32* {{.*}} @__msan_param_origin_tls
|
|
|
|
|
; CHECK-NEXT: load <8 x i16>, <8 x i16>* {{.*}} @__msan_param_tls
|
|
|
|
|
; CHECK-ORIGINS: load i32, i32* {{.*}} @__msan_param_origin_tls
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK-NEXT: = or <8 x i16>
|
2012-12-19 11:22:04 +00:00
|
|
|
; CHECK-ORIGINS: = bitcast <8 x i16> {{.*}} to i128
|
|
|
|
|
; CHECK-ORIGINS-NEXT: = icmp ne i128 {{.*}}, 0
|
|
|
|
|
; CHECK-ORIGINS-NEXT: = select i1 {{.*}}, i32 {{.*}}, i32
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK-NEXT: call <8 x i16> @llvm.x86.sse2.padds.w
|
|
|
|
|
; CHECK-NEXT: store <8 x i16> {{.*}} @__msan_retval_tls
|
2012-12-19 11:22:04 +00:00
|
|
|
; CHECK-ORIGINS: store i32 {{.*}} @__msan_retval_origin_tls
|
2013-11-21 11:37:16 +00:00
|
|
|
; CHECK-NEXT: ret <8 x i16>
|
2012-12-25 16:04:38 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
; Test handling of vectors of pointers.
|
|
|
|
|
; Check that shadow of such vector is a vector of integers.
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define <8 x i8*> @VectorOfPointers(<8 x i8*>* %p) nounwind uwtable sanitize_memory {
|
2015-02-27 21:17:42 +00:00
|
|
|
%x = load <8 x i8*>, <8 x i8*>* %p
|
2012-12-25 16:04:38 +00:00
|
|
|
ret <8 x i8*> %x
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @VectorOfPointers
|
2015-02-27 21:17:42 +00:00
|
|
|
; CHECK: load <8 x i8*>, <8 x i8*>*
|
|
|
|
|
; CHECK: load <8 x i64>, <8 x i64>*
|
2012-12-25 16:04:38 +00:00
|
|
|
; CHECK: store <8 x i64> {{.*}} @__msan_retval_tls
|
|
|
|
|
; CHECK: ret <8 x i8*>
|
2013-01-10 22:36:33 +00:00
|
|
|
|
|
|
|
|
; Test handling of va_copy.
|
|
|
|
|
|
|
|
|
|
declare void @llvm.va_copy(i8*, i8*) nounwind
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @VACopy(i8* %p1, i8* %p2) nounwind uwtable sanitize_memory {
|
2013-01-10 22:36:33 +00:00
|
|
|
call void @llvm.va_copy(i8* %p1, i8* %p2) nounwind
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @VACopy
|
|
|
|
|
; CHECK: call void @llvm.memset.p0i8.i64({{.*}}, i8 0, i64 24, i32 8, i1 false)
|
|
|
|
|
; CHECK: ret void
|
2013-01-22 12:30:52 +00:00
|
|
|
|
|
|
|
|
|
2013-08-23 12:11:00 +00:00
|
|
|
; Test that va_start instrumentation does not use va_arg_tls*.
|
|
|
|
|
; It should work with a local stack copy instead.
|
|
|
|
|
|
|
|
|
|
%struct.__va_list_tag = type { i32, i32, i8*, i8* }
|
|
|
|
|
declare void @llvm.va_start(i8*) nounwind
|
|
|
|
|
|
|
|
|
|
; Function Attrs: nounwind uwtable
|
2014-07-03 11:49:50 +00:00
|
|
|
define void @VAStart(i32 %x, ...) sanitize_memory {
|
2013-08-23 12:11:00 +00:00
|
|
|
entry:
|
|
|
|
|
%x.addr = alloca i32, align 4
|
|
|
|
|
%va = alloca [1 x %struct.__va_list_tag], align 16
|
|
|
|
|
store i32 %x, i32* %x.addr, align 4
|
[opaque pointer type] Add textual IR support for explicit type parameter to getelementptr instruction
One of several parallel first steps to remove the target type of pointers,
replacing them with a single opaque pointer type.
This adds an explicit type parameter to the gep instruction so that when the
first parameter becomes an opaque pointer type, the type to gep through is
still available to the instructions.
* This doesn't modify gep operators, only instructions (operators will be
handled separately)
* Textual IR changes only. Bitcode (including upgrade) and changing the
in-memory representation will be in separate changes.
* geps of vectors are transformed as:
getelementptr <4 x float*> %x, ...
->getelementptr float, <4 x float*> %x, ...
Then, once the opaque pointer type is introduced, this will ultimately look
like:
getelementptr float, <4 x ptr> %x
with the unambiguous interpretation that it is a vector of pointers to float.
* address spaces remain on the pointer, not the type:
getelementptr float addrspace(1)* %x
->getelementptr float, float addrspace(1)* %x
Then, eventually:
getelementptr float, ptr addrspace(1) %x
Importantly, the massive amount of test case churn has been automated by
same crappy python code. I had to manually update a few test cases that
wouldn't fit the script's model (r228970,r229196,r229197,r229198). The
python script just massages stdin and writes the result to stdout, I
then wrapped that in a shell script to handle replacing files, then
using the usual find+xargs to migrate all the files.
update.py:
import fileinput
import sys
import re
ibrep = re.compile(r"(^.*?[^%\w]getelementptr inbounds )(((?:<\d* x )?)(.*?)(| addrspace\(\d\)) *\*(|>)(?:$| *(?:%|@|null|undef|blockaddress|getelementptr|addrspacecast|bitcast|inttoptr|\[\[[a-zA-Z]|\{\{).*$))")
normrep = re.compile( r"(^.*?[^%\w]getelementptr )(((?:<\d* x )?)(.*?)(| addrspace\(\d\)) *\*(|>)(?:$| *(?:%|@|null|undef|blockaddress|getelementptr|addrspacecast|bitcast|inttoptr|\[\[[a-zA-Z]|\{\{).*$))")
def conv(match, line):
if not match:
return line
line = match.groups()[0]
if len(match.groups()[5]) == 0:
line += match.groups()[2]
line += match.groups()[3]
line += ", "
line += match.groups()[1]
line += "\n"
return line
for line in sys.stdin:
if line.find("getelementptr ") == line.find("getelementptr inbounds"):
if line.find("getelementptr inbounds") != line.find("getelementptr inbounds ("):
line = conv(re.match(ibrep, line), line)
elif line.find("getelementptr ") != line.find("getelementptr ("):
line = conv(re.match(normrep, line), line)
sys.stdout.write(line)
apply.sh:
for name in "$@"
do
python3 `dirname "$0"`/update.py < "$name" > "$name.tmp" && mv "$name.tmp" "$name"
rm -f "$name.tmp"
done
The actual commands:
From llvm/src:
find test/ -name *.ll | xargs ./apply.sh
From llvm/src/tools/clang:
find test/ -name *.mm -o -name *.m -o -name *.cpp -o -name *.c | xargs -I '{}' ../../apply.sh "{}"
From llvm/src/tools/polly:
find test/ -name *.ll | xargs ./apply.sh
After that, check-all (with llvm, clang, clang-tools-extra, lld,
compiler-rt, and polly all checked out).
The extra 'rm' in the apply.sh script is due to a few files in clang's test
suite using interesting unicode stuff that my python script was throwing
exceptions on. None of those files needed to be migrated, so it seemed
sufficient to ignore those cases.
Reviewers: rafael, dexonsmith, grosser
Differential Revision: http://reviews.llvm.org/D7636
git-svn-id: https://llvm.org/svn/llvm-project/llvm/trunk@230786 91177308-0d34-0410-b5e6-96231b3b80d8
2015-02-27 19:29:02 +00:00
|
|
|
%arraydecay = getelementptr inbounds [1 x %struct.__va_list_tag], [1 x %struct.__va_list_tag]* %va, i32 0, i32 0
|
2013-08-23 12:11:00 +00:00
|
|
|
%arraydecay1 = bitcast %struct.__va_list_tag* %arraydecay to i8*
|
|
|
|
|
call void @llvm.va_start(i8* %arraydecay1)
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @VAStart
|
|
|
|
|
; CHECK: call void @llvm.va_start
|
|
|
|
|
; CHECK-NOT: @__msan_va_arg_tls
|
|
|
|
|
; CHECK-NOT: @__msan_va_arg_overflow_size_tls
|
|
|
|
|
; CHECK: ret void
|
|
|
|
|
|
|
|
|
|
|
2013-01-22 12:30:52 +00:00
|
|
|
; Test handling of volatile stores.
|
|
|
|
|
; Check that MemorySanitizer does not add a check of the value being stored.
|
|
|
|
|
|
2013-02-28 11:25:14 +00:00
|
|
|
define void @VolatileStore(i32* nocapture %p, i32 %x) nounwind uwtable sanitize_memory {
|
2013-01-22 12:30:52 +00:00
|
|
|
entry:
|
|
|
|
|
store volatile i32 %x, i32* %p, align 4
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @VolatileStore
|
|
|
|
|
; CHECK-NOT: @__msan_warning
|
|
|
|
|
; CHECK: ret void
|
2013-02-28 11:25:14 +00:00
|
|
|
|
|
|
|
|
|
2014-07-03 11:56:30 +00:00
|
|
|
; Test that checks are omitted and returned value is always initialized if
|
2013-02-28 11:25:14 +00:00
|
|
|
; sanitize_memory attribute is missing.
|
|
|
|
|
|
|
|
|
|
define i32 @NoSanitizeMemory(i32 %x) uwtable {
|
|
|
|
|
entry:
|
|
|
|
|
%tobool = icmp eq i32 %x, 0
|
|
|
|
|
br i1 %tobool, label %if.end, label %if.then
|
|
|
|
|
|
|
|
|
|
if.then: ; preds = %entry
|
|
|
|
|
tail call void @bar()
|
|
|
|
|
br label %if.end
|
|
|
|
|
|
|
|
|
|
if.end: ; preds = %entry, %if.then
|
|
|
|
|
ret i32 %x
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare void @bar()
|
|
|
|
|
|
|
|
|
|
; CHECK: @NoSanitizeMemory
|
|
|
|
|
; CHECK-NOT: @__msan_warning
|
2014-07-03 11:56:30 +00:00
|
|
|
; CHECK: store i32 0, {{.*}} @__msan_retval_tls
|
2013-02-28 11:25:14 +00:00
|
|
|
; CHECK-NOT: @__msan_warning
|
|
|
|
|
; CHECK: ret i32
|
2013-05-28 13:07:43 +00:00
|
|
|
|
|
|
|
|
|
2013-07-03 14:39:14 +00:00
|
|
|
; Test that stack allocations are unpoisoned in functions missing
|
|
|
|
|
; sanitize_memory attribute
|
|
|
|
|
|
|
|
|
|
define i32 @NoSanitizeMemoryAlloca() {
|
|
|
|
|
entry:
|
|
|
|
|
%p = alloca i32, align 4
|
|
|
|
|
%x = call i32 @NoSanitizeMemoryAllocaHelper(i32* %p)
|
|
|
|
|
ret i32 %x
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare i32 @NoSanitizeMemoryAllocaHelper(i32* %p)
|
|
|
|
|
|
|
|
|
|
; CHECK: @NoSanitizeMemoryAlloca
|
|
|
|
|
; CHECK: call void @llvm.memset.p0i8.i64(i8* {{.*}}, i8 0, i64 4, i32 4, i1 false)
|
|
|
|
|
; CHECK: call i32 @NoSanitizeMemoryAllocaHelper(i32*
|
|
|
|
|
; CHECK: ret i32
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
; Test that undef is unpoisoned in functions missing
|
|
|
|
|
; sanitize_memory attribute
|
|
|
|
|
|
|
|
|
|
define i32 @NoSanitizeMemoryUndef() {
|
|
|
|
|
entry:
|
|
|
|
|
%x = call i32 @NoSanitizeMemoryUndefHelper(i32 undef)
|
|
|
|
|
ret i32 %x
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare i32 @NoSanitizeMemoryUndefHelper(i32 %x)
|
|
|
|
|
|
|
|
|
|
; CHECK: @NoSanitizeMemoryAlloca
|
|
|
|
|
; CHECK: store i32 0, i32* {{.*}} @__msan_param_tls
|
|
|
|
|
; CHECK: call i32 @NoSanitizeMemoryUndefHelper(i32 undef)
|
|
|
|
|
; CHECK: ret i32
|
|
|
|
|
|
|
|
|
|
|
2014-07-07 13:28:31 +00:00
|
|
|
; Test PHINode instrumentation in blacklisted functions
|
|
|
|
|
|
|
|
|
|
define i32 @NoSanitizeMemoryPHI(i32 %x) {
|
|
|
|
|
entry:
|
|
|
|
|
%tobool = icmp ne i32 %x, 0
|
|
|
|
|
br i1 %tobool, label %cond.true, label %cond.false
|
|
|
|
|
|
|
|
|
|
cond.true: ; preds = %entry
|
|
|
|
|
br label %cond.end
|
|
|
|
|
|
|
|
|
|
cond.false: ; preds = %entry
|
|
|
|
|
br label %cond.end
|
|
|
|
|
|
|
|
|
|
cond.end: ; preds = %cond.false, %cond.true
|
|
|
|
|
%cond = phi i32 [ undef, %cond.true ], [ undef, %cond.false ]
|
|
|
|
|
ret i32 %cond
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: [[A:%.*]] = phi i32 [ undef, %cond.true ], [ undef, %cond.false ]
|
|
|
|
|
; CHECK: store i32 0, i32* bitcast {{.*}} @__msan_retval_tls
|
|
|
|
|
; CHECK: ret i32 [[A]]
|
|
|
|
|
|
|
|
|
|
|
2014-07-17 09:10:37 +00:00
|
|
|
; Test that there are no __msan_param_origin_tls stores when
|
|
|
|
|
; argument shadow is a compile-time zero constant (which is always the case
|
|
|
|
|
; in functions missing sanitize_memory attribute).
|
|
|
|
|
|
|
|
|
|
define i32 @NoSanitizeMemoryParamTLS(i32* nocapture readonly %x) {
|
|
|
|
|
entry:
|
2015-02-27 21:17:42 +00:00
|
|
|
%0 = load i32, i32* %x, align 4
|
2014-07-17 09:10:37 +00:00
|
|
|
%call = tail call i32 @NoSanitizeMemoryParamTLSHelper(i32 %0)
|
|
|
|
|
ret i32 %call
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
declare i32 @NoSanitizeMemoryParamTLSHelper(i32 %x)
|
|
|
|
|
|
|
|
|
|
; CHECK-LABEL: define i32 @NoSanitizeMemoryParamTLS(
|
|
|
|
|
; CHECK-NOT: __msan_param_origin_tls
|
|
|
|
|
; CHECK: ret i32
|
|
|
|
|
|
|
|
|
|
|
2013-05-28 13:07:43 +00:00
|
|
|
; Test argument shadow alignment
|
|
|
|
|
|
|
|
|
|
define <2 x i64> @ArgumentShadowAlignment(i64 %a, <2 x i64> %b) sanitize_memory {
|
|
|
|
|
entry:
|
|
|
|
|
ret <2 x i64> %b
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK: @ArgumentShadowAlignment
|
2015-02-27 21:17:42 +00:00
|
|
|
; CHECK: load <2 x i64>, <2 x i64>* {{.*}} @__msan_param_tls {{.*}}, align 8
|
2013-05-28 13:07:43 +00:00
|
|
|
; CHECK: store <2 x i64> {{.*}} @__msan_retval_tls {{.*}}, align 8
|
|
|
|
|
; CHECK: ret <2 x i64>
|
|
|
|
|
|
|
|
|
|
|
2013-11-11 13:37:10 +00:00
|
|
|
; Test origin propagation for insertvalue
|
|
|
|
|
|
|
|
|
|
define { i64, i32 } @make_pair_64_32(i64 %x, i32 %y) sanitize_memory {
|
|
|
|
|
entry:
|
|
|
|
|
%a = insertvalue { i64, i32 } undef, i64 %x, 0
|
|
|
|
|
%b = insertvalue { i64, i32 } %a, i32 %y, 1
|
|
|
|
|
ret { i64, i32 } %b
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; CHECK-ORIGINS: @make_pair_64_32
|
|
|
|
|
; First element shadow
|
|
|
|
|
; CHECK-ORIGINS: insertvalue { i64, i32 } { i64 -1, i32 -1 }, i64 {{.*}}, 0
|
|
|
|
|
; First element origin
|
|
|
|
|
; CHECK-ORIGINS: icmp ne i64
|
|
|
|
|
; CHECK-ORIGINS: select i1
|
|
|
|
|
; First element app value
|
|
|
|
|
; CHECK-ORIGINS: insertvalue { i64, i32 } undef, i64 {{.*}}, 0
|
|
|
|
|
; Second element shadow
|
|
|
|
|
; CHECK-ORIGINS: insertvalue { i64, i32 } {{.*}}, i32 {{.*}}, 1
|
|
|
|
|
; Second element origin
|
|
|
|
|
; CHECK-ORIGINS: icmp ne i32
|
|
|
|
|
; CHECK-ORIGINS: select i1
|
|
|
|
|
; Second element app value
|
|
|
|
|
; CHECK-ORIGINS: insertvalue { i64, i32 } {{.*}}, i32 {{.*}}, 1
|
|
|
|
|
; CHECK-ORIGINS: ret { i64, i32 }
|
2014-03-13 13:17:11 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
; Test shadow propagation for aggregates passed through ellipsis.
|
|
|
|
|
|
|
|
|
|
%struct.StructByVal = type { i32, i32, i32, i32 }
|
|
|
|
|
|
|
|
|
|
declare void @VAArgStructFn(i32 %guard, ...)
|
|
|
|
|
|
|
|
|
|
define void @VAArgStruct(%struct.StructByVal* nocapture %s) sanitize_memory {
|
|
|
|
|
entry:
|
|
|
|
|
%agg.tmp2 = alloca %struct.StructByVal, align 8
|
|
|
|
|
%0 = bitcast %struct.StructByVal* %s to i8*
|
|
|
|
|
%agg.tmp.sroa.0.0..sroa_cast = bitcast %struct.StructByVal* %s to i64*
|
2015-02-27 21:17:42 +00:00
|
|
|
%agg.tmp.sroa.0.0.copyload = load i64, i64* %agg.tmp.sroa.0.0..sroa_cast, align 4
|
[opaque pointer type] Add textual IR support for explicit type parameter to getelementptr instruction
One of several parallel first steps to remove the target type of pointers,
replacing them with a single opaque pointer type.
This adds an explicit type parameter to the gep instruction so that when the
first parameter becomes an opaque pointer type, the type to gep through is
still available to the instructions.
* This doesn't modify gep operators, only instructions (operators will be
handled separately)
* Textual IR changes only. Bitcode (including upgrade) and changing the
in-memory representation will be in separate changes.
* geps of vectors are transformed as:
getelementptr <4 x float*> %x, ...
->getelementptr float, <4 x float*> %x, ...
Then, once the opaque pointer type is introduced, this will ultimately look
like:
getelementptr float, <4 x ptr> %x
with the unambiguous interpretation that it is a vector of pointers to float.
* address spaces remain on the pointer, not the type:
getelementptr float addrspace(1)* %x
->getelementptr float, float addrspace(1)* %x
Then, eventually:
getelementptr float, ptr addrspace(1) %x
Importantly, the massive amount of test case churn has been automated by
same crappy python code. I had to manually update a few test cases that
wouldn't fit the script's model (r228970,r229196,r229197,r229198). The
python script just massages stdin and writes the result to stdout, I
then wrapped that in a shell script to handle replacing files, then
using the usual find+xargs to migrate all the files.
update.py:
import fileinput
import sys
import re
ibrep = re.compile(r"(^.*?[^%\w]getelementptr inbounds )(((?:<\d* x )?)(.*?)(| addrspace\(\d\)) *\*(|>)(?:$| *(?:%|@|null|undef|blockaddress|getelementptr|addrspacecast|bitcast|inttoptr|\[\[[a-zA-Z]|\{\{).*$))")
normrep = re.compile( r"(^.*?[^%\w]getelementptr )(((?:<\d* x )?)(.*?)(| addrspace\(\d\)) *\*(|>)(?:$| *(?:%|@|null|undef|blockaddress|getelementptr|addrspacecast|bitcast|inttoptr|\[\[[a-zA-Z]|\{\{).*$))")
def conv(match, line):
if not match:
return line
line = match.groups()[0]
if len(match.groups()[5]) == 0:
line += match.groups()[2]
line += match.groups()[3]
line += ", "
line += match.groups()[1]
line += "\n"
return line
for line in sys.stdin:
if line.find("getelementptr ") == line.find("getelementptr inbounds"):
if line.find("getelementptr inbounds") != line.find("getelementptr inbounds ("):
line = conv(re.match(ibrep, line), line)
elif line.find("getelementptr ") != line.find("getelementptr ("):
line = conv(re.match(normrep, line), line)
sys.stdout.write(line)
apply.sh:
for name in "$@"
do
python3 `dirname "$0"`/update.py < "$name" > "$name.tmp" && mv "$name.tmp" "$name"
rm -f "$name.tmp"
done
The actual commands:
From llvm/src:
find test/ -name *.ll | xargs ./apply.sh
From llvm/src/tools/clang:
find test/ -name *.mm -o -name *.m -o -name *.cpp -o -name *.c | xargs -I '{}' ../../apply.sh "{}"
From llvm/src/tools/polly:
find test/ -name *.ll | xargs ./apply.sh
After that, check-all (with llvm, clang, clang-tools-extra, lld,
compiler-rt, and polly all checked out).
The extra 'rm' in the apply.sh script is due to a few files in clang's test
suite using interesting unicode stuff that my python script was throwing
exceptions on. None of those files needed to be migrated, so it seemed
sufficient to ignore those cases.
Reviewers: rafael, dexonsmith, grosser
Differential Revision: http://reviews.llvm.org/D7636
git-svn-id: https://llvm.org/svn/llvm-project/llvm/trunk@230786 91177308-0d34-0410-b5e6-96231b3b80d8
2015-02-27 19:29:02 +00:00
|
|
|
%agg.tmp.sroa.2.0..sroa_idx = getelementptr inbounds %struct.StructByVal, %struct.StructByVal* %s, i64 0, i32 2
|
2014-03-13 13:17:11 +00:00
|
|
|
%agg.tmp.sroa.2.0..sroa_cast = bitcast i32* %agg.tmp.sroa.2.0..sroa_idx to i64*
|
2015-02-27 21:17:42 +00:00
|
|
|
%agg.tmp.sroa.2.0.copyload = load i64, i64* %agg.tmp.sroa.2.0..sroa_cast, align 4
|
2014-03-13 13:17:11 +00:00
|
|
|
%1 = bitcast %struct.StructByVal* %agg.tmp2 to i8*
|
|
|
|
|
call void @llvm.memcpy.p0i8.p0i8.i64(i8* %1, i8* %0, i64 16, i32 4, i1 false)
|
|
|
|
|
call void (i32, ...)* @VAArgStructFn(i32 undef, i64 %agg.tmp.sroa.0.0.copyload, i64 %agg.tmp.sroa.2.0.copyload, i64 %agg.tmp.sroa.0.0.copyload, i64 %agg.tmp.sroa.2.0.copyload, %struct.StructByVal* byval align 8 %agg.tmp2)
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; "undef" and the first 2 structs go to general purpose registers;
|
|
|
|
|
; the third struct goes to the overflow area byval
|
|
|
|
|
|
|
|
|
|
; CHECK: @VAArgStruct
|
|
|
|
|
; undef
|
|
|
|
|
; CHECK: store i32 -1, i32* {{.*}}@__msan_va_arg_tls {{.*}}, align 8
|
|
|
|
|
; first struct through general purpose registers
|
|
|
|
|
; CHECK: store i64 {{.*}}, i64* {{.*}}@__msan_va_arg_tls{{.*}}, i64 8){{.*}}, align 8
|
|
|
|
|
; CHECK: store i64 {{.*}}, i64* {{.*}}@__msan_va_arg_tls{{.*}}, i64 16){{.*}}, align 8
|
|
|
|
|
; second struct through general purpose registers
|
|
|
|
|
; CHECK: store i64 {{.*}}, i64* {{.*}}@__msan_va_arg_tls{{.*}}, i64 24){{.*}}, align 8
|
|
|
|
|
; CHECK: store i64 {{.*}}, i64* {{.*}}@__msan_va_arg_tls{{.*}}, i64 32){{.*}}, align 8
|
|
|
|
|
; third struct through the overflow area byval
|
|
|
|
|
; CHECK: ptrtoint %struct.StructByVal* {{.*}} to i64
|
|
|
|
|
; CHECK: bitcast { i32, i32, i32, i32 }* {{.*}}@__msan_va_arg_tls {{.*}}, i64 176
|
|
|
|
|
; CHECK: call void @llvm.memcpy.p0i8.p0i8.i64
|
|
|
|
|
; CHECK: store i64 16, i64* @__msan_va_arg_overflow_size_tls
|
|
|
|
|
; CHECK: call void (i32, ...)* @VAArgStructFn
|
|
|
|
|
; CHECK: ret void
|
2014-06-30 20:12:27 +00:00
|
|
|
|
|
|
|
|
declare i32 @InnerTailCall(i32 %a)
|
|
|
|
|
|
2014-07-03 11:56:30 +00:00
|
|
|
define void @MismatchedReturnTypeTailCall(i32 %a) sanitize_memory {
|
2014-06-30 20:12:27 +00:00
|
|
|
%b = tail call i32 @InnerTailCall(i32 %a)
|
|
|
|
|
ret void
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
; We used to strip off the 'tail' modifier, but now that we unpoison return slot
|
|
|
|
|
; shadow before the call, we don't need to anymore.
|
|
|
|
|
|
|
|
|
|
; CHECK-LABEL: define void @MismatchedReturnTypeTailCall
|
|
|
|
|
; CHECK: tail call i32 @InnerTailCall
|
|
|
|
|
; CHECK: ret void
|
