1 ; Test basic address sanitizer instrumentation.
3 ; RUN: opt < %s -asan -asan-module -S | FileCheck %s
5 target datalayout = "e-p:64:64:64-i1:8:8-i8:8:8-i16:16:16-i32:32:32-i64:64:64-f32:32:32-f64:64:64-v64:64:64-v128:128:128-a0:0:64-s0:64:64-f80:128:128-n8:16:32:64"
6 target triple = "x86_64-unknown-linux-gnu"
8 define i32 @test_load(i32* %a) sanitize_address {
9 ; CHECK-LABEL: @test_load
11 ; CHECK: %[[LOAD_ADDR:[^ ]*]] = ptrtoint i32* %a to i64
12 ; CHECK: lshr i64 %[[LOAD_ADDR]], 3
14 ; CHECK: %[[LOAD_SHADOW_PTR:[^ ]*]] = inttoptr
15 ; CHECK: %[[LOAD_SHADOW:[^ ]*]] = load i8* %[[LOAD_SHADOW_PTR]]
17 ; CHECK: br i1 %{{.*}}, label %{{.*}}, label %{{.*}}!prof ![[PROF:[0-9]+]]
19 ; First instrumentation block refines the shadow test.
20 ; CHECK: and i64 %[[LOAD_ADDR]], 7
21 ; CHECK: add i64 %{{.*}}, 3
22 ; CHECK: trunc i64 %{{.*}} to i8
23 ; CHECK: icmp sge i8 %{{.*}}, %[[LOAD_SHADOW]]
24 ; CHECK: br i1 %{{.*}}, label %{{.*}}, label %{{.*}}
26 ; The crash block reports the error.
27 ; CHECK: call void @__asan_report_load4(i64 %[[LOAD_ADDR]])
31 ; CHECK: %tmp1 = load i32* %a
32 ; CHECK: ret i32 %tmp1
37 %tmp1 = load i32* %a, align 4
41 define void @test_store(i32* %a) sanitize_address {
42 ; CHECK-LABEL: @test_store
44 ; CHECK: %[[STORE_ADDR:[^ ]*]] = ptrtoint i32* %a to i64
45 ; CHECK: lshr i64 %[[STORE_ADDR]], 3
47 ; CHECK: %[[STORE_SHADOW_PTR:[^ ]*]] = inttoptr
48 ; CHECK: %[[STORE_SHADOW:[^ ]*]] = load i8* %[[STORE_SHADOW_PTR]]
50 ; CHECK: br i1 %{{.*}}, label %{{.*}}, label %{{.*}}
52 ; First instrumentation block refines the shadow test.
53 ; CHECK: and i64 %[[STORE_ADDR]], 7
54 ; CHECK: add i64 %{{.*}}, 3
55 ; CHECK: trunc i64 %{{.*}} to i8
56 ; CHECK: icmp sge i8 %{{.*}}, %[[STORE_SHADOW]]
57 ; CHECK: br i1 %{{.*}}, label %{{.*}}, label %{{.*}}
59 ; The crash block reports the error.
60 ; CHECK: call void @__asan_report_store4(i64 %[[STORE_ADDR]])
64 ; CHECK: store i32 42, i32* %a
69 store i32 42, i32* %a, align 4
73 ; Check that asan leaves just one alloca.
75 declare void @alloca_test_use([10 x i8]*)
76 define void @alloca_test() sanitize_address {
78 %x = alloca [10 x i8], align 1
79 %y = alloca [10 x i8], align 1
80 %z = alloca [10 x i8], align 1
81 call void @alloca_test_use([10 x i8]* %x)
82 call void @alloca_test_use([10 x i8]* %y)
83 call void @alloca_test_use([10 x i8]* %z)
87 ; CHECK-LABEL: define void @alloca_test()
92 define void @LongDoubleTest(x86_fp80* nocapture %a) nounwind uwtable sanitize_address {
94 store x86_fp80 0xK3FFF8000000000000000, x86_fp80* %a, align 16
98 ; CHECK-LABEL: LongDoubleTest
99 ; CHECK: __asan_report_store_n
100 ; CHECK: __asan_report_store_n
104 define void @i40test(i40* %a, i40* %b) nounwind uwtable sanitize_address {
107 store i40 %t, i40* %b, align 8
111 ; CHECK-LABEL: i40test
112 ; CHECK: __asan_report_load_n{{.*}}, i64 5)
113 ; CHECK: __asan_report_load_n{{.*}}, i64 5)
114 ; CHECK: __asan_report_store_n{{.*}}, i64 5)
115 ; CHECK: __asan_report_store_n{{.*}}, i64 5)
118 define void @i64test_align1(i64* %b) nounwind uwtable sanitize_address {
120 store i64 0, i64* %b, align 1
124 ; CHECK-LABEL: i64test_align1
125 ; CHECK: __asan_report_store_n{{.*}}, i64 8)
126 ; CHECK: __asan_report_store_n{{.*}}, i64 8)
130 define void @i80test(i80* %a, i80* %b) nounwind uwtable sanitize_address {
133 store i80 %t, i80* %b, align 8
137 ; CHECK-LABEL: i80test
138 ; CHECK: __asan_report_load_n{{.*}}, i64 10)
139 ; CHECK: __asan_report_load_n{{.*}}, i64 10)
140 ; CHECK: __asan_report_store_n{{.*}}, i64 10)
141 ; CHECK: __asan_report_store_n{{.*}}, i64 10)
144 ; asan should not instrument functions with available_externally linkage.
145 define available_externally i32 @f_available_externally(i32* %a) sanitize_address {
150 ; CHECK-LABEL: @f_available_externally
151 ; CHECK-NOT: __asan_report
154 declare void @llvm.memset.p0i8.i64(i8* nocapture, i8, i64, i32, i1) nounwind
155 declare void @llvm.memmove.p0i8.p0i8.i64(i8* nocapture, i8* nocapture readonly, i64, i32, i1) nounwind
156 declare void @llvm.memcpy.p0i8.p0i8.i64(i8* nocapture, i8* nocapture readonly, i64, i32, i1) nounwind
158 define void @memintr_test(i8* %a, i8* %b) nounwind uwtable sanitize_address {
160 tail call void @llvm.memset.p0i8.i64(i8* %a, i8 0, i64 100, i32 1, i1 false)
161 tail call void @llvm.memmove.p0i8.p0i8.i64(i8* %a, i8* %b, i64 100, i32 1, i1 false)
162 tail call void @llvm.memcpy.p0i8.p0i8.i64(i8* %a, i8* %b, i64 100, i32 1, i1 false)
166 ; CHECK-LABEL: memintr_test
167 ; CHECK: __asan_memset
168 ; CHECK: __asan_memmove
169 ; CHECK: __asan_memcpy
173 ; CHECK: ![[PROF]] = !{!"branch_weights", i32 1, i32 100000}