catch-undef-behavior.c revision ad95481b2769ad61f23afc5e2c31f11c66090657
1// RUN: %clang_cc1 -fsanitize=alignment,null,object-size,shift,return,signed-integer-overflow,vla-bound,float-cast-overflow,integer-divide-by-zero -emit-llvm %s -o - -triple x86_64-linux-gnu | FileCheck %s 2// RUN: %clang_cc1 -fsanitize=null -emit-llvm %s -o - -triple x86_64-linux-gnu | FileCheck %s --check-prefix=CHECK-NULL 3// RUN: %clang_cc1 -fsanitize=signed-integer-overflow -emit-llvm %s -o - -triple x86_64-linux-gnu | FileCheck %s --check-prefix=CHECK-OVERFLOW 4 5// CHECK: @[[INT:.*]] = private unnamed_addr constant { i16, i16, [6 x i8] } { i16 0, i16 11, [6 x i8] c"'int'\00" } 6 7// FIXME: When we only emit each type once, use [[INT]] more below. 8// CHECK: @[[LINE_100:.*]] = private unnamed_addr constant {{.*}}, i32 100, i32 5 {{.*}} @[[INT]], i64 4, i8 1 9// CHECK: @[[LINE_200:.*]] = {{.*}}, i32 200, i32 10 {{.*}}, i64 4, i8 0 10// CHECK: @[[LINE_300_A:.*]] = {{.*}}, i32 300, i32 12 {{.*}} @{{.*}}, {{.*}} @{{.*}} 11// CHECK: @[[LINE_300_B:.*]] = {{.*}}, i32 300, i32 12 {{.*}} @{{.*}}, {{.*}} @{{.*}} 12// CHECK: @[[LINE_400:.*]] = {{.*}}, i32 400, i32 12 {{.*}} @{{.*}}, {{.*}} @{{.*}} 13// CHECK: @[[LINE_500:.*]] = {{.*}}, i32 500, i32 10 {{.*}} @{{.*}}, i64 4, i8 0 } 14// CHECK: @[[LINE_600:.*]] = {{.*}}, i32 600, i32 3 {{.*}} @{{.*}}, i64 4, i8 1 } 15 16// CHECK: @[[STRUCT_S:.*]] = private unnamed_addr constant { i16, i16, [11 x i8] } { i16 -1, i16 0, [11 x i8] c"'struct S'\00" } 17 18// CHECK: @[[LINE_700:.*]] = {{.*}}, i32 700, i32 14 {{.*}} @[[STRUCT_S]], i64 4, i8 3 } 19// CHECK: @[[LINE_800:.*]] = {{.*}}, i32 800, i32 12 {{.*}} @{{.*}} } 20// CHECK: @[[LINE_900:.*]] = {{.*}}, i32 900, i32 11 {{.*}} @{{.*}} } 21 22// CHECK-NULL: @[[LINE_100:.*]] = private unnamed_addr constant {{.*}}, i32 100, i32 5 {{.*}} 23 24// PR6805 25// CHECK: @foo 26// CHECK-NULL: @foo 27void foo() { 28 union { int i; } u; 29 // CHECK: %[[CHECK0:.*]] = icmp ne {{.*}}* %[[PTR:.*]], null 30 31 // CHECK: %[[I8PTR:.*]] = bitcast i32* %[[PTR]] to i8* 32 // CHECK-NEXT: %[[SIZE:.*]] = call i64 @llvm.objectsize.i64(i8* %[[I8PTR]], i1 false) 33 // CHECK-NEXT: %[[CHECK1:.*]] = icmp uge i64 %[[SIZE]], 4 34 // CHECK-NEXT: %[[CHECK01:.*]] = and i1 %[[CHECK0]], %[[CHECK1]] 35 36 // CHECK: %[[PTRTOINT:.*]] = ptrtoint {{.*}}* %[[PTR]] to i64 37 // CHECK-NEXT: %[[MISALIGN:.*]] = and i64 %[[PTRTOINT]], 3 38 // CHECK-NEXT: %[[CHECK2:.*]] = icmp eq i64 %[[MISALIGN]], 0 39 40 // CHECK: %[[OK:.*]] = and i1 %[[CHECK01]], %[[CHECK2]] 41 // CHECK-NEXT: br i1 %[[OK]] 42 43 // CHECK: %[[ARG:.*]] = ptrtoint {{.*}} %[[PTR]] to i64 44 // CHECK-NEXT: call void @__ubsan_handle_type_mismatch_abort(i8* bitcast ({{.*}} @[[LINE_100]] to i8*), i64 %[[ARG]]) noreturn nounwind 45 46 // With -fsanitize=null, only perform the null check. 47 // CHECK-NULL: %[[NULL:.*]] = icmp ne {{.*}}, null 48 // CHECK-NULL: br i1 %[[NULL]] 49 // CHECK-NULL: call void @__ubsan_handle_type_mismatch_abort(i8* bitcast ({{.*}} @[[LINE_100]] to i8*), i64 %{{.*}}) noreturn nounwind 50#line 100 51 u.i=1; 52} 53 54// CHECK: @bar 55int bar(int *a) { 56 // CHECK: %[[SIZE:.*]] = call i64 @llvm.objectsize.i64 57 // CHECK-NEXT: icmp uge i64 %[[SIZE]], 4 58 59 // CHECK: %[[PTRINT:.*]] = ptrtoint 60 // CHECK-NEXT: %[[MISALIGN:.*]] = and i64 %[[PTRINT]], 3 61 // CHECK-NEXT: icmp eq i64 %[[MISALIGN]], 0 62 63 // CHECK: %[[ARG:.*]] = ptrtoint 64 // CHECK-NEXT: call void @__ubsan_handle_type_mismatch_abort(i8* bitcast ({{.*}} @[[LINE_200]] to i8*), i64 %[[ARG]]) noreturn nounwind 65#line 200 66 return *a; 67} 68 69// CHECK: @addr_space 70int addr_space(int __attribute__((address_space(256))) *a) { 71 // CHECK-NOT: __ubsan 72 return *a; 73} 74 75// CHECK: @lsh_overflow 76int lsh_overflow(int a, int b) { 77 // CHECK: %[[INBOUNDS:.*]] = icmp ule i32 %[[RHS:.*]], 31 78 // CHECK-NEXT: br i1 %[[INBOUNDS]] 79 80 // FIXME: Only emit one trap block here. 81 // CHECK: %[[ARG1:.*]] = zext 82 // CHECK-NEXT: %[[ARG2:.*]] = zext 83 // CHECK-NEXT: call void @__ubsan_handle_shift_out_of_bounds_abort(i8* bitcast ({{.*}} @[[LINE_300_A]] to i8*), i64 %[[ARG1]], i64 %[[ARG2]]) noreturn nounwind 84 85 // CHECK: %[[SHIFTED_OUT_WIDTH:.*]] = sub nuw nsw i32 31, %[[RHS]] 86 // CHECK-NEXT: %[[SHIFTED_OUT:.*]] = lshr i32 %[[LHS:.*]], %[[SHIFTED_OUT_WIDTH]] 87 // CHECK-NEXT: %[[NO_OVERFLOW:.*]] = icmp eq i32 %[[SHIFTED_OUT]], 0 88 // CHECK-NEXT: br i1 %[[NO_OVERFLOW]] 89 90 // CHECK: %[[ARG1:.*]] = zext 91 // CHECK-NEXT: %[[ARG2:.*]] = zext 92 // CHECK-NEXT: call void @__ubsan_handle_shift_out_of_bounds_abort(i8* bitcast ({{.*}} @[[LINE_300_B]] to i8*), i64 %[[ARG1]], i64 %[[ARG2]]) noreturn nounwind 93 94 // CHECK: %[[RET:.*]] = shl i32 %[[LHS]], %[[RHS]] 95 // CHECK-NEXT: ret i32 %[[RET]] 96#line 300 97 return a << b; 98} 99 100// CHECK: @rsh_inbounds 101int rsh_inbounds(int a, int b) { 102 // CHECK: %[[INBOUNDS:.*]] = icmp ult i32 %[[RHS:.*]], 32 103 // CHECK: br i1 %[[INBOUNDS]] 104 105 // CHECK: %[[ARG1:.*]] = zext 106 // CHECK-NEXT: %[[ARG2:.*]] = zext 107 // CHECK-NEXT: call void @__ubsan_handle_shift_out_of_bounds_abort(i8* bitcast ({{.*}} @[[LINE_400]] to i8*), i64 %[[ARG1]], i64 %[[ARG2]]) noreturn nounwind 108 109 // CHECK: %[[RET:.*]] = ashr i32 %[[LHS]], %[[RHS]] 110 // CHECK-NEXT: ret i32 %[[RET]] 111#line 400 112 return a >> b; 113} 114 115// CHECK: @load 116int load(int *p) { 117 // CHECK: call void @__ubsan_handle_type_mismatch_abort(i8* bitcast ({{.*}} @[[LINE_500]] to i8*), i64 %{{.*}}) noreturn nounwind 118#line 500 119 return *p; 120} 121 122// CHECK: @store 123void store(int *p, int q) { 124 // CHECK: call void @__ubsan_handle_type_mismatch_abort(i8* bitcast ({{.*}} @[[LINE_600]] to i8*), i64 %{{.*}}) noreturn nounwind 125#line 600 126 *p = q; 127} 128 129struct S { int k; }; 130 131// CHECK: @member_access 132int *member_access(struct S *p) { 133 // CHECK: call void @__ubsan_handle_type_mismatch_abort(i8* bitcast ({{.*}} @[[LINE_700]] to i8*), i64 %{{.*}}) noreturn nounwind 134#line 700 135 return &p->k; 136} 137 138// CHECK: @signed_overflow 139int signed_overflow(int a, int b) { 140 // CHECK: %[[ARG1:.*]] = zext 141 // CHECK-NEXT: %[[ARG2:.*]] = zext 142 // CHECK-NEXT: call void @__ubsan_handle_add_overflow_abort(i8* bitcast ({{.*}} @[[LINE_800]] to i8*), i64 %[[ARG1]], i64 %[[ARG2]]) noreturn nounwind 143#line 800 144 return a + b; 145} 146 147// CHECK: @no_return 148int no_return() { 149 // Reaching the end of a noreturn function is fine in C. 150 // FIXME: If the user explicitly requests -fsanitize=return, we should catch 151 // that here even though it's not undefined behavior. 152 // CHECK-NOT: call 153 // CHECK-NOT: unreachable 154 // CHECK: ret i32 155} 156 157// CHECK: @vla_bound 158void vla_bound(int n) { 159 // CHECK: icmp sgt i32 %[[PARAM:.*]], 0 160 // 161 // CHECK: %[[ARG:.*]] = zext i32 %[[PARAM]] to i64 162 // CHECK-NEXT: call void @__ubsan_handle_vla_bound_not_positive_abort(i8* bitcast ({{.*}} @[[LINE_900]] to i8*), i64 %[[ARG]]) noreturn nounwind 163#line 900 164 int arr[n * 3]; 165} 166 167// CHECK: @int_float_no_overflow 168float int_float_no_overflow(__int128 n) { 169 // CHECK-NOT: call void @__ubsan_handle 170 return n; 171} 172 173// CHECK: @int_float_overflow 174float int_float_overflow(unsigned __int128 n) { 175 // This is 2**104. FLT_MAX is 2**128 - 2**104. 176 // CHECK: icmp ule i128 %{{.*}}, -20282409603651670423947251286016 177 // CHECK: call void @__ubsan_handle_float_cast_overflow_abort( 178 return n; 179} 180 181// CHECK: @int_fp16_overflow 182void int_fp16_overflow(int n, __fp16 *p) { 183 // CHECK: %[[GE:.*]] = icmp sge i32 %{{.*}}, -65504 184 // CHECK: %[[LE:.*]] = icmp sle i32 %{{.*}}, 65504 185 // CHECK: and i1 %[[GE]], %[[LE]] 186 // CHECK: call void @__ubsan_handle_float_cast_overflow_abort( 187 *p = n; 188} 189 190// CHECK: @float_int_overflow 191int float_int_overflow(float f) { 192 // CHECK: %[[GE:.*]] = fcmp oge float %[[F:.*]], 0xC1E0000000000000 193 // CHECK: %[[LE:.*]] = fcmp ole float %[[F]], 0x41DFFFFFE0000000 194 // CHECK: and i1 %[[GE]], %[[LE]] 195 // CHECK: call void @__ubsan_handle_float_cast_overflow_abort( 196 return f; 197} 198 199// CHECK: @float_uint_overflow 200unsigned float_uint_overflow(float f) { 201 // CHECK: %[[GE:.*]] = fcmp oge float %[[F:.*]], 0.{{0*}}e+00 202 // CHECK: %[[LE:.*]] = fcmp ole float %[[F]], 0x41EFFFFFE0000000 203 // CHECK: and i1 %[[GE]], %[[LE]] 204 // CHECK: call void @__ubsan_handle_float_cast_overflow_abort( 205 return f; 206} 207 208// CHECK: @fp16_char_overflow 209signed char fp16_char_overflow(__fp16 *p) { 210 // CHECK: %[[GE:.*]] = fcmp oge float %[[F:.*]], -1.28{{0*}}e+02 211 // CHECK: %[[LE:.*]] = fcmp ole float %[[F]], 1.27{{0*}}e+02 212 // CHECK: and i1 %[[GE]], %[[LE]] 213 // CHECK: call void @__ubsan_handle_float_cast_overflow_abort( 214 return *p; 215} 216 217// CHECK: @float_float_overflow 218float float_float_overflow(double f) { 219 // CHECK: %[[GE:.*]] = fcmp oge double %[[F:.*]], 0xC7EFFFFFE0000000 220 // CHECK: %[[LE:.*]] = fcmp ole double %[[F]], 0x47EFFFFFE0000000 221 // CHECK: and i1 %[[GE]], %[[LE]] 222 // CHECK: call void @__ubsan_handle_float_cast_overflow_abort( 223 return f; 224} 225 226// CHECK: @int_divide_overflow 227// CHECK-OVERFLOW: @int_divide_overflow 228int int_divide_overflow(int a, int b) { 229 // CHECK: %[[ZERO:.*]] = icmp ne i32 %[[B:.*]], 0 230 // CHECK-OVERFLOW-NOT: icmp ne i32 %{{.*}}, 0 231 232 // CHECK: %[[AOK:.*]] = icmp ne i32 %[[A:.*]], -2147483648 233 // CHECK-NEXT: %[[BOK:.*]] = icmp ne i32 %[[B]], -1 234 // CHECK-NEXT: %[[OVER:.*]] = or i1 %[[AOK]], %[[BOK]] 235 236 // CHECK-OVERFLOW: %[[AOK:.*]] = icmp ne i32 %[[A:.*]], -2147483648 237 // CHECK-OVERFLOW-NEXT: %[[BOK:.*]] = icmp ne i32 %[[B:.*]], -1 238 // CHECK-OVERFLOW-NEXT: %[[OK:.*]] = or i1 %[[AOK]], %[[BOK]] 239 240 // CHECK: %[[OK:.*]] = and i1 %[[ZERO]], %[[OVER]] 241 242 // CHECK: br i1 %[[OK]] 243 // CHECK-OVERFLOW: br i1 %[[OK]] 244 return a / b; 245 246 // CHECK: } 247 // CHECK-OVERFLOW: } 248} 249