1; Test basic address sanitizer instrumentation. 2; 3; RUN: opt < %s -asan -S | FileCheck %s 4 5target datalayout = "e-p:64:64:64-i1:8:8-i8:8:8-i16:16:16-i32:32:32-i64:64:64-f32:32:32-f64:64:64-v64:64:64-v128:128:128-a0:0:64-s0:64:64-f80:128:128-n8:16:32:64" 6target triple = "x86_64-unknown-linux-gnu" 7 8define i32 @test_load(i32* %a) sanitize_address { 9; CHECK: @test_load 10; CHECK-NOT: load 11; CHECK: %[[LOAD_ADDR:[^ ]*]] = ptrtoint i32* %a to i64 12; CHECK: lshr i64 %[[LOAD_ADDR]], 3 13; CHECK: {{or|add}} 14; CHECK: %[[LOAD_SHADOW_PTR:[^ ]*]] = inttoptr 15; CHECK: %[[LOAD_SHADOW:[^ ]*]] = load i8* %[[LOAD_SHADOW_PTR]] 16; CHECK: icmp ne i8 17; CHECK: br i1 %{{.*}}, label %{{.*}}, label %{{.*}} 18; 19; First instrumentation block refines the shadow test. 20; CHECK: and i64 %[[LOAD_ADDR]], 7 21; CHECK: add i64 %{{.*}}, 3 22; CHECK: trunc i64 %{{.*}} to i8 23; CHECK: icmp sge i8 %{{.*}}, %[[LOAD_SHADOW]] 24; CHECK: br i1 %{{.*}}, label %{{.*}}, label %{{.*}} 25; 26; The crash block reports the error. 27; CHECK: call void @__asan_report_load4(i64 %[[LOAD_ADDR]]) 28; CHECK: unreachable 29; 30; The actual load. 31; CHECK: %tmp1 = load i32* %a 32; CHECK: ret i32 %tmp1 33 34 35 36entry: 37 %tmp1 = load i32* %a 38 ret i32 %tmp1 39} 40 41define void @test_store(i32* %a) sanitize_address { 42; CHECK: @test_store 43; CHECK-NOT: store 44; CHECK: %[[STORE_ADDR:[^ ]*]] = ptrtoint i32* %a to i64 45; CHECK: lshr i64 %[[STORE_ADDR]], 3 46; CHECK: {{or|add}} 47; CHECK: %[[STORE_SHADOW_PTR:[^ ]*]] = inttoptr 48; CHECK: %[[STORE_SHADOW:[^ ]*]] = load i8* %[[STORE_SHADOW_PTR]] 49; CHECK: icmp ne i8 50; CHECK: br i1 %{{.*}}, label %{{.*}}, label %{{.*}} 51; 52; First instrumentation block refines the shadow test. 53; CHECK: and i64 %[[STORE_ADDR]], 7 54; CHECK: add i64 %{{.*}}, 3 55; CHECK: trunc i64 %{{.*}} to i8 56; CHECK: icmp sge i8 %{{.*}}, %[[STORE_SHADOW]] 57; CHECK: br i1 %{{.*}}, label %{{.*}}, label %{{.*}} 58; 59; The crash block reports the error. 60; CHECK: call void @__asan_report_store4(i64 %[[STORE_ADDR]]) 61; CHECK: unreachable 62; 63; The actual load. 64; CHECK: store i32 42, i32* %a 65; CHECK: ret void 66; 67 68entry: 69 store i32 42, i32* %a 70 ret void 71} 72 73; Check that asan leaves just one alloca. 74 75declare void @alloca_test_use([10 x i8]*) 76define void @alloca_test() sanitize_address { 77entry: 78 %x = alloca [10 x i8], align 1 79 %y = alloca [10 x i8], align 1 80 %z = alloca [10 x i8], align 1 81 call void @alloca_test_use([10 x i8]* %x) 82 call void @alloca_test_use([10 x i8]* %y) 83 call void @alloca_test_use([10 x i8]* %z) 84 ret void 85} 86 87; CHECK: define void @alloca_test() 88; CHECK: = alloca 89; CHECK-NOT: = alloca 90; CHECK: ret void 91 92; Check that asan does not touch allocas with alignment > 32. 93define void @alloca_alignment_test() sanitize_address { 94entry: 95 %x = alloca [10 x i8], align 64 96 %y = alloca [10 x i8], align 128 97 %z = alloca [10 x i8], align 256 98 call void @alloca_test_use([10 x i8]* %x) 99 call void @alloca_test_use([10 x i8]* %y) 100 call void @alloca_test_use([10 x i8]* %z) 101 ret void 102} 103 104; CHECK: define void @alloca_alignment_test() 105; CHECK: = alloca{{.*}} align 64 106; CHECK: = alloca{{.*}} align 128 107; CHECK: = alloca{{.*}} align 256 108; CHECK: ret void 109 110 111define void @LongDoubleTest(x86_fp80* nocapture %a) nounwind uwtable sanitize_address { 112entry: 113 store x86_fp80 0xK3FFF8000000000000000, x86_fp80* %a, align 16 114 ret void 115} 116 117; CHECK: LongDoubleTest 118; CHECK: __asan_report_store_n 119; CHECK: __asan_report_store_n 120; CHECK: ret void 121 122 123define void @i40test(i40* %a, i40* %b) nounwind uwtable sanitize_address { 124 entry: 125 %t = load i40* %a 126 store i40 %t, i40* %b, align 8 127 ret void 128} 129 130; CHECK: i40test 131; CHECK: __asan_report_load_n{{.*}}, i64 5) 132; CHECK: __asan_report_load_n{{.*}}, i64 5) 133; CHECK: __asan_report_store_n{{.*}}, i64 5) 134; CHECK: __asan_report_store_n{{.*}}, i64 5) 135; CHECK: ret void 136 137define void @i80test(i80* %a, i80* %b) nounwind uwtable sanitize_address { 138 entry: 139 %t = load i80* %a 140 store i80 %t, i80* %b, align 8 141 ret void 142} 143 144; CHECK: i80test 145; CHECK: __asan_report_load_n{{.*}}, i64 10) 146; CHECK: __asan_report_load_n{{.*}}, i64 10) 147; CHECK: __asan_report_store_n{{.*}}, i64 10) 148; CHECK: __asan_report_store_n{{.*}}, i64 10) 149; CHECK: ret void 150 151; asan should not instrument functions with available_externally linkage. 152define available_externally i32 @f_available_externally(i32* %a) sanitize_address { 153entry: 154 %tmp1 = load i32* %a 155 ret i32 %tmp1 156} 157; CHECK: @f_available_externally 158; CHECK-NOT: __asan_report 159; CHECK: ret i32 160 161 162