xref: /aosp_15_r20/external/clang/test/CodeGen/cfi-check-fail.c (revision 67e74705e28f6214e480b399dd47ea732279e315)
1*67e74705SXin Li // RUN: %clang_cc1 -triple x86_64-unknown-linux -O0 -fsanitize-cfi-cross-dso \
2*67e74705SXin Li // RUN:     -fsanitize=cfi-icall,cfi-nvcall,cfi-vcall,cfi-unrelated-cast,cfi-derived-cast \
3*67e74705SXin Li // RUN:     -fsanitize-trap=cfi-icall,cfi-nvcall -fsanitize-recover=cfi-vcall,cfi-unrelated-cast \
4*67e74705SXin Li // RUN:     -emit-llvm -o - %s | FileCheck %s
5*67e74705SXin Li 
caller(void (* f)())6*67e74705SXin Li void caller(void (*f)()) {
7*67e74705SXin Li   f();
8*67e74705SXin Li }
9*67e74705SXin Li 
10*67e74705SXin Li // CHECK: define weak_odr hidden void @__cfi_check_fail(i8*, i8*)
11*67e74705SXin Li // CHECK: store i8* %0, i8** %[[ALLOCA0:.*]], align 8
12*67e74705SXin Li // CHECK: store i8* %1, i8** %[[ALLOCA1:.*]], align 8
13*67e74705SXin Li // CHECK: %[[DATA:.*]] = load i8*, i8** %[[ALLOCA0]], align 8
14*67e74705SXin Li // CHECK: %[[ADDR:.*]] = load i8*, i8** %[[ALLOCA1]], align 8
15*67e74705SXin Li // CHECK: %[[ICMP_NOT_NULL:.*]] = icmp ne i8* %[[DATA]], null
16*67e74705SXin Li // CHECK: br i1 %[[ICMP_NOT_NULL]], label %[[CONT0:.*]], label %[[TRAP:.*]],
17*67e74705SXin Li 
18*67e74705SXin Li // CHECK: [[TRAP]]:
19*67e74705SXin Li // CHECK-NEXT:   call void @llvm.trap()
20*67e74705SXin Li // CHECK-NEXT:   unreachable
21*67e74705SXin Li 
22*67e74705SXin Li // CHECK: [[CONT0]]:
23*67e74705SXin Li // CHECK:   %[[A:.*]] = bitcast i8* %[[DATA]] to { i8, { i8*, i32, i32 }, i8* }*
24*67e74705SXin Li // CHECK:   %[[KINDPTR:.*]] = getelementptr {{.*}} %[[A]], i32 0, i32 0
25*67e74705SXin Li // CHECK:   %[[KIND:.*]] = load i8, i8* %[[KINDPTR]], align 4
26*67e74705SXin Li // CHECK:   %[[VTVALID0:.*]] = call i1 @llvm.type.test(i8* %[[ADDR]], metadata !"all-vtables")
27*67e74705SXin Li // CHECK:   %[[VTVALID:.*]] = zext i1 %[[VTVALID0]] to i64
28*67e74705SXin Li // CHECK:   %[[NOT_0:.*]] = icmp ne i8 %[[KIND]], 0
29*67e74705SXin Li // CHECK:   br i1 %[[NOT_0]], label %[[CONT1:.*]], label %[[HANDLE0:.*]], !prof
30*67e74705SXin Li 
31*67e74705SXin Li // CHECK: [[HANDLE0]]:
32*67e74705SXin Li // CHECK:   %[[DATA0:.*]] = ptrtoint i8* %[[DATA]] to i64,
33*67e74705SXin Li // CHECK:   %[[ADDR0:.*]] = ptrtoint i8* %[[ADDR]] to i64,
34*67e74705SXin Li // CHECK:   call void @__ubsan_handle_cfi_check_fail(i64 %[[DATA0]], i64 %[[ADDR0]], i64 %[[VTVALID]])
35*67e74705SXin Li // CHECK:   br label %[[CONT1]]
36*67e74705SXin Li 
37*67e74705SXin Li // CHECK: [[CONT1]]:
38*67e74705SXin Li // CHECK:   %[[NOT_1:.*]] = icmp ne i8 %[[KIND]], 1
39*67e74705SXin Li // CHECK:   br i1 %[[NOT_1]], label %[[CONT2:.*]], label %[[HANDLE1:.*]], !nosanitize
40*67e74705SXin Li 
41*67e74705SXin Li // CHECK: [[HANDLE1]]:
42*67e74705SXin Li // CHECK-NEXT:   call void @llvm.trap()
43*67e74705SXin Li // CHECK-NEXT:   unreachable
44*67e74705SXin Li 
45*67e74705SXin Li // CHECK: [[CONT2]]:
46*67e74705SXin Li // CHECK:   %[[NOT_2:.*]] = icmp ne i8 %[[KIND]], 2
47*67e74705SXin Li // CHECK:   br i1 %[[NOT_2]], label %[[CONT3:.*]], label %[[HANDLE2:.*]], !prof
48*67e74705SXin Li 
49*67e74705SXin Li // CHECK: [[HANDLE2]]:
50*67e74705SXin Li // CHECK:   %[[DATA2:.*]] = ptrtoint i8* %[[DATA]] to i64,
51*67e74705SXin Li // CHECK:   %[[ADDR2:.*]] = ptrtoint i8* %[[ADDR]] to i64,
52*67e74705SXin Li // CHECK:   call void @__ubsan_handle_cfi_check_fail_abort(i64 %[[DATA2]], i64 %[[ADDR2]], i64 %[[VTVALID]])
53*67e74705SXin Li // CHECK:   unreachable
54*67e74705SXin Li 
55*67e74705SXin Li // CHECK: [[CONT3]]:
56*67e74705SXin Li // CHECK:   %[[NOT_3:.*]] = icmp ne i8 %[[KIND]], 3
57*67e74705SXin Li // CHECK:   br i1 %[[NOT_3]], label %[[CONT4:.*]], label %[[HANDLE3:.*]], !prof
58*67e74705SXin Li 
59*67e74705SXin Li // CHECK: [[HANDLE3]]:
60*67e74705SXin Li // CHECK:   %[[DATA3:.*]] = ptrtoint i8* %[[DATA]] to i64,
61*67e74705SXin Li // CHECK:   %[[ADDR3:.*]] = ptrtoint i8* %[[ADDR]] to i64,
62*67e74705SXin Li // CHECK:   call void @__ubsan_handle_cfi_check_fail(i64 %[[DATA3]], i64 %[[ADDR3]], i64 %[[VTVALID]])
63*67e74705SXin Li // CHECK:   br label %[[CONT4]]
64*67e74705SXin Li 
65*67e74705SXin Li // CHECK: [[CONT4]]:
66*67e74705SXin Li // CHECK:   %[[NOT_4:.*]] = icmp ne i8 %[[KIND]], 4
67*67e74705SXin Li // CHECK:   br i1 %[[NOT_4]], label %[[CONT5:.*]], label %[[HANDLE4:.*]], !nosanitize
68*67e74705SXin Li 
69*67e74705SXin Li // CHECK: [[HANDLE4]]:
70*67e74705SXin Li // CHECK-NEXT:   call void @llvm.trap()
71*67e74705SXin Li // CHECK-NEXT:   unreachable
72*67e74705SXin Li 
73*67e74705SXin Li // CHECK: [[CONT5]]:
74*67e74705SXin Li // CHECK:   ret void
75