1 // __cfi_check_fail codegen when not all CFI checkers are enabled.
2 // RUN: %clang_cc1 -triple x86_64-unknown-linux -O0 -fsanitize-cfi-cross-dso \
3 // RUN: -fsanitize=cfi-vcall \
4 // RUN: -emit-llvm -o - %s | FileCheck %s
5
6 // Check that blacklist does not affect generated code.
7 // RUN: echo "src:*" > %t-all.blacklist
8 // RUN: %clang_cc1 -triple x86_64-unknown-linux -O0 -fsanitize-cfi-cross-dso \
9 // RUN: -fsanitize=cfi-vcall -fsanitize-blacklist=%t-all.blacklist \
10 // RUN: -emit-llvm -o - %s | FileCheck %s
11
caller(void (* f)())12 void caller(void (*f)()) {
13 f();
14 }
15
16 // CHECK: define weak_odr hidden void @__cfi_check_fail(i8* %0, i8* %1)
17 // CHECK: store i8* %0, i8** %[[ALLOCA0:.*]], align 8
18 // CHECK: store i8* %1, i8** %[[ALLOCA1:.*]], align 8
19 // CHECK: %[[DATA:.*]] = load i8*, i8** %[[ALLOCA0]], align 8
20 // CHECK: %[[ADDR:.*]] = load i8*, i8** %[[ALLOCA1]], align 8
21 // CHECK: %[[ICMP_NOT_NULL:.*]] = icmp ne i8* %[[DATA]], null
22 // CHECK: br i1 %[[ICMP_NOT_NULL]], label %[[CONT0:.*]], label %[[TRAP:.*]],
23
24 // CHECK: [[TRAP]]:
25 // CHECK-NEXT: call void @llvm.trap()
26 // CHECK-NEXT: unreachable
27
28 // CHECK: [[CONT0]]:
29 // CHECK: %[[A:.*]] = bitcast i8* %[[DATA]] to { i8, { i8*, i32, i32 }, i8* }*
30 // CHECK: %[[KINDPTR:.*]] = getelementptr {{.*}} %[[A]], i32 0, i32 0
31 // CHECK: %[[KIND:.*]] = load i8, i8* %[[KINDPTR]], align 4
32 // CHECK: %[[VTVALID0:.*]] = call i1 @llvm.type.test(i8* %[[ADDR]], metadata !"all-vtables")
33 // CHECK: %[[VTVALID:.*]] = zext i1 %[[VTVALID0]] to i64
34 // CHECK: %[[NOT_0:.*]] = icmp ne i8 %[[KIND]], 0
35 // CHECK: br i1 %[[NOT_0]], label %[[CONT1:.*]], label %[[HANDLE0:.*]], !prof
36
37 // CHECK: [[HANDLE0]]:
38 // CHECK: %[[DATA0:.*]] = ptrtoint i8* %[[DATA]] to i64,
39 // CHECK: %[[ADDR0:.*]] = ptrtoint i8* %[[ADDR]] to i64,
40 // CHECK: call void @__ubsan_handle_cfi_check_fail_abort(i64 %[[DATA0]], i64 %[[ADDR0]], i64 %[[VTVALID]])
41 // CHECK: unreachable
42
43 // CHECK: [[CONT1]]:
44 // CHECK: %[[NOT_1:.*]] = icmp ne i8 %[[KIND]], 1
45 // CHECK: br i1 %[[NOT_1]], label %[[CONT2:.*]], label %[[HANDLE1:.*]], !nosanitize
46
47 // CHECK: [[HANDLE1]]:
48 // CHECK-NEXT: call void @llvm.trap()
49 // CHECK-NEXT: unreachable
50
51 // CHECK: [[CONT2]]:
52 // CHECK: %[[NOT_2:.*]] = icmp ne i8 %[[KIND]], 2
53 // CHECK: br i1 %[[NOT_2]], label %[[CONT3:.*]], label %[[HANDLE2:.*]], !nosanitize
54
55 // CHECK: [[HANDLE2]]:
56 // CHECK-NEXT: call void @llvm.trap()
57 // CHECK-NEXT: unreachable
58
59 // CHECK: [[CONT3]]:
60 // CHECK: %[[NOT_3:.*]] = icmp ne i8 %[[KIND]], 3
61 // CHECK: br i1 %[[NOT_3]], label %[[CONT4:.*]], label %[[HANDLE3:.*]], !nosanitize
62
63 // CHECK: [[HANDLE3]]:
64 // CHECK-NEXT: call void @llvm.trap()
65 // CHECK-NEXT: unreachable
66
67 // CHECK: [[CONT4]]:
68 // CHECK: %[[NOT_4:.*]] = icmp ne i8 %[[KIND]], 4
69 // CHECK: br i1 %[[NOT_4]], label %[[CONT5:.*]], label %[[HANDLE4:.*]], !nosanitize
70
71 // CHECK: [[HANDLE4]]:
72 // CHECK-NEXT: call void @llvm.trap()
73 // CHECK-NEXT: unreachable
74
75 // CHECK: [[CONT5]]:
76 // CHECK: ret void
77