[BitcodeReader] Change assert to report_fatal_error
authorFilipe Cabecinhas <me@filcab.net>
Wed, 27 May 2015 01:05:40 +0000 (01:05 +0000)
committerFilipe Cabecinhas <me@filcab.net>
Wed, 27 May 2015 01:05:40 +0000 (01:05 +0000)
It can be triggered by user input.

Bug found with AFL fuzz.

git-svn-id: https://llvm.org/svn/llvm-project/llvm/trunk@238272 91177308-0d34-0410-b5e6-96231b3b80d8

lib/Bitcode/Reader/BitcodeReader.cpp
test/Bitcode/Inputs/invalid-fwdref-type-mismatch-2.bc [new file with mode: 0644]
test/Bitcode/invalid.test

index 95cf51f14190977150ee18cc4ab3fdb1c1df5664..f6d5ccc1a59ef5d9a0a66b9cb57907dec0eab32f 100644 (file)
@@ -785,7 +785,8 @@ Constant *BitcodeReaderValueList::getConstantFwdRef(unsigned Idx,
     resize(Idx + 1);
 
   if (Value *V = ValuePtrs[Idx]) {
-    assert(Ty == V->getType() && "Type mismatch in constant table!");
+    if (Ty != V->getType())
+      report_fatal_error("Type mismatch in constant table!");
     return cast<Constant>(V);
   }
 
diff --git a/test/Bitcode/Inputs/invalid-fwdref-type-mismatch-2.bc b/test/Bitcode/Inputs/invalid-fwdref-type-mismatch-2.bc
new file mode 100644 (file)
index 0000000..8e38340
Binary files /dev/null and b/test/Bitcode/Inputs/invalid-fwdref-type-mismatch-2.bc differ
index 5cdd25387b60079779c72982d6d21dbb1111251c..eb7f979d5745a739912684b4316e013446ace3c2 100644 (file)
@@ -99,6 +99,11 @@ RUN:   FileCheck --check-prefix=FWDREF-TYPE %s
 
 FWDREF-TYPE: Invalid record
 
+RUN: not llvm-dis -disable-output %p/Inputs/invalid-fwdref-type-mismatch-2.bc 2>&1 | \
+RUN:   FileCheck --check-prefix=FWDREF-TYPE-MISMATCH %s
+
+FWDREF-TYPE-MISMATCH: Type mismatch in constant table!
+
 RUN: not llvm-dis -disable-output %p/Inputs/invalid-array-element-type.bc 2>&1 | \
 RUN:   FileCheck --check-prefix=ELEMENT-TYPE %s
 RUN: not llvm-dis -disable-output %p/Inputs/invalid-vector-element-type.bc 2>&1 | \