[BitcodeReader] Diagnose type mismatches with aliases
authorFilipe Cabecinhas <me@filcab.net>
Wed, 3 Jun 2015 01:30:13 +0000 (01:30 +0000)
committerFilipe Cabecinhas <me@filcab.net>
Wed, 3 Jun 2015 01:30:13 +0000 (01:30 +0000)
Bug found with AFL fuzz.

git-svn-id: https://llvm.org/svn/llvm-project/llvm/trunk@238895 91177308-0d34-0410-b5e6-96231b3b80d8

lib/Bitcode/Reader/BitcodeReader.cpp
test/Bitcode/Inputs/invalid-alias-type-mismatch.bc [new file with mode: 0644]
test/Bitcode/invalid.test

index 9e5e46aae0b05d0699028bcca5552036fd48f67f..75b3b9fd73c566bae6d628e826f1ca9dcb007423 100644 (file)
@@ -2065,9 +2065,12 @@ std::error_code BitcodeReader::ResolveGlobalAndAliasInits() {
     if (ValID >= ValueList.size()) {
       AliasInits.push_back(AliasInitWorklist.back());
     } else {
-      if (Constant *C = dyn_cast_or_null<Constant>(ValueList[ValID]))
-        AliasInitWorklist.back().first->setAliasee(C);
-      else
+      if (Constant *C = dyn_cast_or_null<Constant>(ValueList[ValID])) {
+        GlobalAlias *Alias = AliasInitWorklist.back().first;
+        if (C->getType() != Alias->getType())
+          return Error("Alias and aliasee types don't match");
+        Alias->setAliasee(C);
+      } else
         return Error("Expected a constant");
     }
     AliasInitWorklist.pop_back();
diff --git a/test/Bitcode/Inputs/invalid-alias-type-mismatch.bc b/test/Bitcode/Inputs/invalid-alias-type-mismatch.bc
new file mode 100644 (file)
index 0000000..5c42989
Binary files /dev/null and b/test/Bitcode/Inputs/invalid-alias-type-mismatch.bc differ
index b120047e4518cd4ac0d2df9e8d0afd2ee5d86ffc..0aab553bb61557d69b9ce0c549006f105c84fe3f 100644 (file)
@@ -197,3 +197,8 @@ RUN: not llvm-dis -disable-output %p/Inputs/invalid-vector-length.bc 2>&1 | \
 RUN:   FileCheck --check-prefix=VECTOR-LENGTH %s
 
 VECTOR-LENGTH: Invalid vector length
+
+RUN: not llvm-dis -disable-output %p/Inputs/invalid-alias-type-mismatch.bc 2>&1 | \
+RUN:   FileCheck --check-prefix=ALIAS-TYPE-MISMATCH %s
+
+ALIAS-TYPE-MISMATCH: Alias and aliasee types don't match