100 lines · plain
1; NOTE: Assertions have been autogenerated by utils/update_test_checks.py UTC_ARGS: --version 22; RUN: opt -passes=hwasan -hwasan-use-stack-safety=0 -hwasan-use-after-scope -S < %s | FileCheck %s3target datalayout = "e-m:e-i8:8:32-i16:16:32-i64:64-i128:128-n32:64-S128"4target triple = "aarch64-unknown-linux-android29"5 6@stackbuf = dso_local local_unnamed_addr global ptr null, align 87@jbuf = dso_local global [32 x i64] zeroinitializer, align 88 9declare void @may_jump()10 11define dso_local noundef i1 @_Z6targetv() sanitize_hwaddress {12; CHECK-LABEL: define dso_local noundef i1 @_Z6targetv13; CHECK-SAME: () #[[ATTR0:[0-9]+]] {14; CHECK-NEXT: entry:15; CHECK-NEXT: [[TMP0:%.*]] = call ptr @llvm.thread.pointer.p0()16; CHECK-NEXT: [[TMP1:%.*]] = getelementptr i8, ptr [[TMP0]], i32 4817; CHECK-NEXT: [[TMP2:%.*]] = load i64, ptr [[TMP1]], align 818; CHECK-NEXT: [[TMP3:%.*]] = ashr i64 [[TMP2]], 319; CHECK-NEXT: [[TMP4:%.*]] = call i64 @llvm.read_register.i64(metadata [[META1:![0-9]+]])20; CHECK-NEXT: [[TMP5:%.*]] = call ptr @llvm.frameaddress.p0(i32 0)21; CHECK-NEXT: [[TMP6:%.*]] = ptrtoint ptr [[TMP5]] to i6422; CHECK-NEXT: [[TMP7:%.*]] = shl i64 [[TMP6]], 4423; CHECK-NEXT: [[TMP8:%.*]] = or i64 [[TMP4]], [[TMP7]]24; CHECK-NEXT: [[TMP9:%.*]] = inttoptr i64 [[TMP2]] to ptr25; CHECK-NEXT: store i64 [[TMP8]], ptr [[TMP9]], align 826; CHECK-NEXT: [[TMP10:%.*]] = ashr i64 [[TMP2]], 5627; CHECK-NEXT: [[TMP11:%.*]] = shl nuw nsw i64 [[TMP10]], 1228; CHECK-NEXT: [[TMP12:%.*]] = xor i64 [[TMP11]], -129; CHECK-NEXT: [[TMP13:%.*]] = add i64 [[TMP2]], 830; CHECK-NEXT: [[TMP14:%.*]] = and i64 [[TMP13]], [[TMP12]]31; CHECK-NEXT: store i64 [[TMP14]], ptr [[TMP1]], align 832; CHECK-NEXT: [[TMP15:%.*]] = or i64 [[TMP2]], 429496729533; CHECK-NEXT: [[HWASAN_SHADOW:%.*]] = add i64 [[TMP15]], 134; CHECK-NEXT: [[TMP16:%.*]] = inttoptr i64 [[HWASAN_SHADOW]] to ptr35; CHECK-NEXT: [[HWASAN_UAR_TAG:%.*]] = lshr i64 [[TMP6]], 5636; CHECK-NEXT: [[BUF:%.*]] = alloca [4096 x i8], align 1637; CHECK-NEXT: [[TMP17:%.*]] = xor i64 [[TMP3]], 038; CHECK-NEXT: [[TMP18:%.*]] = ptrtoint ptr [[BUF]] to i6439; CHECK-NEXT: [[TMP19:%.*]] = and i64 [[TMP18]], 7205759403792793540; CHECK-NEXT: [[TMP20:%.*]] = shl i64 [[TMP17]], 5641; CHECK-NEXT: [[TMP21:%.*]] = or i64 [[TMP19]], [[TMP20]]42; CHECK-NEXT: [[BUF_HWASAN:%.*]] = inttoptr i64 [[TMP21]] to ptr43; CHECK-NEXT: [[TMP22:%.*]] = trunc i64 [[TMP17]] to i844; CHECK-NEXT: [[TMP23:%.*]] = ptrtoint ptr [[BUF]] to i6445; CHECK-NEXT: [[TMP24:%.*]] = and i64 [[TMP23]], 7205759403792793546; CHECK-NEXT: [[TMP25:%.*]] = lshr i64 [[TMP24]], 447; CHECK-NEXT: [[TMP26:%.*]] = getelementptr i8, ptr [[TMP16]], i64 [[TMP25]]48; CHECK-NEXT: call void @llvm.memset.p0.i64(ptr align 1 [[TMP26]], i8 [[TMP22]], i64 256, i1 false)49; CHECK-NEXT: [[CALL:%.*]] = call i32 @setjmp(ptr noundef @jbuf)50; CHECK-NEXT: switch i32 [[CALL]], label [[WHILE_BODY:%.*]] [51; CHECK-NEXT: i32 1, label [[RETURN:%.*]]52; CHECK-NEXT: i32 2, label [[SW_BB1:%.*]]53; CHECK-NEXT: ]54; CHECK: sw.bb1:55; CHECK-NEXT: br label [[RETURN]]56; CHECK: while.body:57; CHECK-NEXT: store ptr [[BUF_HWASAN]], ptr @stackbuf, align 858; CHECK-NEXT: call void @may_jump()59; CHECK-NEXT: br label [[RETURN]]60; CHECK: return:61; CHECK-NEXT: [[RETVAL_0:%.*]] = phi i1 [ true, [[WHILE_BODY]] ], [ true, [[SW_BB1]] ], [ false, [[ENTRY:%.*]] ]62; CHECK-NEXT: [[TMP27:%.*]] = trunc i64 [[HWASAN_UAR_TAG]] to i863; CHECK-NEXT: [[TMP28:%.*]] = ptrtoint ptr [[BUF]] to i6464; CHECK-NEXT: [[TMP29:%.*]] = and i64 [[TMP28]], 7205759403792793565; CHECK-NEXT: [[TMP30:%.*]] = lshr i64 [[TMP29]], 466; CHECK-NEXT: [[TMP31:%.*]] = getelementptr i8, ptr [[TMP16]], i64 [[TMP30]]67; CHECK-NEXT: call void @llvm.memset.p0.i64(ptr align 1 [[TMP31]], i8 [[TMP27]], i64 256, i1 false)68; CHECK-NEXT: ret i1 [[RETVAL_0]]69;70entry:71 %buf = alloca [4096 x i8], align 172 %call = call i32 @setjmp(ptr noundef @jbuf)73 switch i32 %call, label %while.body [74 i32 1, label %return75 i32 2, label %sw.bb176 ]77 78sw.bb1: ; preds = %entry79 br label %return80 81while.body: ; preds = %entry82 call void @llvm.lifetime.start.p0(ptr nonnull %buf) #1083 store ptr %buf, ptr @stackbuf, align 884 ; may_jump may call longjmp, going back to the switch (and then the return),85 ; bypassing the lifetime.end. This is why we need to untag on the return,86 ; rather than the lifetime.end.87 call void @may_jump()88 call void @llvm.lifetime.end.p0(ptr nonnull %buf) #1089 br label %return90 91return: ; preds = %entry, %while.body, %sw.bb192 %retval.0 = phi i1 [ true, %while.body ], [ true, %sw.bb1 ], [ false, %entry ]93 ret i1 %retval.094}95 96declare i32 @setjmp(ptr noundef) returns_twice97 98declare void @llvm.lifetime.start.p0(ptr nocapture)99declare void @llvm.lifetime.end.p0(ptr nocapture)100