59 lines · c
1// NOTE: Assertions have been autogenerated by utils/update_cc_test_checks.py UTC_ARGS: --version 52// RUN: %clang_cc1 -triple=x86_64 -emit-llvm -o - -std=c23 %s | FileCheck %s3 4/* WG14 N2819: No5 * Disambiguate the storage class of some compound literals6 */7 8int *escaped;9 10// CHECK-LABEL: define dso_local i32 @f(11// CHECK-SAME: ptr noundef [[PTR:%.*]]) #[[ATTR0:[0-9]+]] {12// CHECK-NEXT: [[ENTRY:.*:]]13// CHECK-NEXT: [[PTR_ADDR:%.*]] = alloca ptr, align 814// CHECK-NEXT: store ptr [[PTR]], ptr [[PTR_ADDR]], align 815// CHECK-NEXT: [[TMP0:%.*]] = load ptr, ptr [[PTR_ADDR]], align 816// CHECK-NEXT: store ptr [[TMP0]], ptr @escaped, align 817// CHECK-NEXT: ret i32 118//19int f(int *ptr) { escaped = ptr; return 1; }20 21// CHECK-LABEL: define dso_local i32 @g(22// CHECK-SAME: ptr noundef [[PARA:%.*]]) #[[ATTR0]] {23// CHECK-NEXT: [[ENTRY:.*:]]24// CHECK-NEXT: [[PARA_ADDR:%.*]] = alloca ptr, align 825// CHECK-NEXT: [[DOTCOMPOUNDLITERAL:%.*]] = alloca [27 x i32], align 426// CHECK-NEXT: store ptr [[PARA]], ptr [[PARA_ADDR]], align 827// CHECK-NEXT: call void @llvm.memset.p0.i64(ptr align 4 [[DOTCOMPOUNDLITERAL]], i8 0, i64 108, i1 false)28// CHECK-NEXT: [[ARRAYDECAY:%.*]] = getelementptr inbounds [27 x i32], ptr [[DOTCOMPOUNDLITERAL]], i64 0, i64 029// CHECK-NEXT: [[CALL:%.*]] = call i32 @f(ptr noundef [[ARRAYDECAY]])30// CHECK-NEXT: [[TMP0:%.*]] = zext i32 [[CALL]] to i6431// CHECK-NEXT: ret i32 032//33int g(char *para [f(( int [27]) { 0 })]) {34 return 0;35}36 37// CHECK-LABEL: define dso_local i32 @main(38// CHECK-SAME: ) #[[ATTR0]] {39// CHECK-NEXT: [[ENTRY:.*:]]40// CHECK-NEXT: [[RETVAL:%.*]] = alloca i32, align 441// CHECK-NEXT: store i32 0, ptr [[RETVAL]], align 442// CHECK-NEXT: [[CALL:%.*]] = call i32 @g(ptr noundef null)43// CHECK-NEXT: [[TMP0:%.*]] = load ptr, ptr @escaped, align 844// CHECK-NEXT: store i32 12, ptr [[TMP0]], align 445// CHECK-NEXT: [[TMP1:%.*]] = load ptr, ptr @escaped, align 846// CHECK-NEXT: [[TMP2:%.*]] = load i32, ptr [[TMP1]], align 447// CHECK-NEXT: ret i32 [[TMP2]]48//49int main() {50 // Sets 'escaped' to the address of the array created by the compound literal.51 g(nullptr);52 53 // The lifetime of that object should have ended when g() returned, so this54 // should be a use-after-free.55 *escaped = 12;56 return *escaped;57}58 59