mirror of
https://gcc.gnu.org/git/gcc.git
synced 2024-11-30 15:24:07 +08:00
e03e58c184
/home/marxin/Programming/gcc2/libsanitizer/ubsan/ubsan_value.cpp:77:25: runtime error: left shift of 0x0000000000000000fffffffffffffffb by 96 places cannot be represented in type '__int128' #0 0x7ffff754edfe in __ubsan::Value::getSIntValue() const /home/marxin/Programming/gcc2/libsanitizer/ubsan/ubsan_value.cpp:77 #1 0x7ffff7548719 in __ubsan::Value::isNegative() const /home/marxin/Programming/gcc2/libsanitizer/ubsan/ubsan_value.h:190 #2 0x7ffff7542a34 in handleShiftOutOfBoundsImpl /home/marxin/Programming/gcc2/libsanitizer/ubsan/ubsan_handlers.cpp:338 #3 0x7ffff75431b7 in __ubsan_handle_shift_out_of_bounds /home/marxin/Programming/gcc2/libsanitizer/ubsan/ubsan_handlers.cpp:370 #4 0x40067f in main (/home/marxin/Programming/testcases/a.out+0x40067f) #5 0x7ffff72c8b24 in __libc_start_main (/lib64/libc.so.6+0x27b24) #6 0x4005bd in _start (/home/marxin/Programming/testcases/a.out+0x4005bd) Differential Revision: https://reviews.llvm.org/D97263 Cherry-pick from 16ede0956cb1f4b692dfa619ccfa6ab1de28e19b.
161 lines
5.2 KiB
C++
161 lines
5.2 KiB
C++
//===-- ubsan_value.cpp ---------------------------------------------------===//
|
|
//
|
|
// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
|
|
// See https://llvm.org/LICENSE.txt for license information.
|
|
// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
|
|
//
|
|
//===----------------------------------------------------------------------===//
|
|
//
|
|
// Representation of a runtime value, as marshaled from the generated code to
|
|
// the ubsan runtime.
|
|
//
|
|
//===----------------------------------------------------------------------===//
|
|
|
|
#include "ubsan_platform.h"
|
|
#if CAN_SANITIZE_UB
|
|
#include "ubsan_value.h"
|
|
#include "sanitizer_common/sanitizer_common.h"
|
|
#include "sanitizer_common/sanitizer_libc.h"
|
|
#include "sanitizer_common/sanitizer_mutex.h"
|
|
|
|
// TODO(dliew): Prefer '__APPLE__' here over 'SANITIZER_MAC', as the latter is
|
|
// unclear. rdar://58124919 tracks using a more obviously portable guard.
|
|
#if defined(__APPLE__)
|
|
#include <dlfcn.h>
|
|
#endif
|
|
|
|
using namespace __ubsan;
|
|
|
|
typedef const char *(*ObjCGetClassNameTy)(void *);
|
|
|
|
const char *__ubsan::getObjCClassName(ValueHandle Pointer) {
|
|
#if defined(__APPLE__)
|
|
// We need to query the ObjC runtime for some information, but do not want
|
|
// to introduce a static dependency from the ubsan runtime onto ObjC. Try to
|
|
// grab a handle to the ObjC runtime used by the process.
|
|
static bool AttemptedDlopen = false;
|
|
static void *ObjCHandle = nullptr;
|
|
static void *ObjCObjectGetClassName = nullptr;
|
|
|
|
// Prevent threads from racing to dlopen().
|
|
static __sanitizer::StaticSpinMutex Lock;
|
|
{
|
|
__sanitizer::SpinMutexLock Guard(&Lock);
|
|
|
|
if (!AttemptedDlopen) {
|
|
ObjCHandle = dlopen(
|
|
"/usr/lib/libobjc.A.dylib",
|
|
RTLD_LAZY // Only bind symbols when used.
|
|
| RTLD_LOCAL // Only make symbols available via the handle.
|
|
| RTLD_NOLOAD // Do not load the dylib, just grab a handle if the
|
|
// image is already loaded.
|
|
| RTLD_FIRST // Only search the image pointed-to by the handle.
|
|
);
|
|
AttemptedDlopen = true;
|
|
if (!ObjCHandle)
|
|
return nullptr;
|
|
ObjCObjectGetClassName = dlsym(ObjCHandle, "object_getClassName");
|
|
}
|
|
}
|
|
|
|
if (!ObjCObjectGetClassName)
|
|
return nullptr;
|
|
|
|
return ObjCGetClassNameTy(ObjCObjectGetClassName)((void *)Pointer);
|
|
#else
|
|
return nullptr;
|
|
#endif
|
|
}
|
|
|
|
SIntMax Value::getSIntValue() const {
|
|
CHECK(getType().isSignedIntegerTy());
|
|
if (isInlineInt()) {
|
|
// Val was zero-extended to ValueHandle. Sign-extend from original width
|
|
// to SIntMax.
|
|
const unsigned ExtraBits =
|
|
sizeof(SIntMax) * 8 - getType().getIntegerBitWidth();
|
|
return SIntMax(UIntMax(Val) << ExtraBits) >> ExtraBits;
|
|
}
|
|
if (getType().getIntegerBitWidth() == 64)
|
|
return *reinterpret_cast<s64*>(Val);
|
|
#if HAVE_INT128_T
|
|
if (getType().getIntegerBitWidth() == 128)
|
|
return *reinterpret_cast<s128*>(Val);
|
|
#else
|
|
if (getType().getIntegerBitWidth() == 128)
|
|
UNREACHABLE("libclang_rt.ubsan was built without __int128 support");
|
|
#endif
|
|
UNREACHABLE("unexpected bit width");
|
|
}
|
|
|
|
UIntMax Value::getUIntValue() const {
|
|
CHECK(getType().isUnsignedIntegerTy());
|
|
if (isInlineInt())
|
|
return Val;
|
|
if (getType().getIntegerBitWidth() == 64)
|
|
return *reinterpret_cast<u64*>(Val);
|
|
#if HAVE_INT128_T
|
|
if (getType().getIntegerBitWidth() == 128)
|
|
return *reinterpret_cast<u128*>(Val);
|
|
#else
|
|
if (getType().getIntegerBitWidth() == 128)
|
|
UNREACHABLE("libclang_rt.ubsan was built without __int128 support");
|
|
#endif
|
|
UNREACHABLE("unexpected bit width");
|
|
}
|
|
|
|
UIntMax Value::getPositiveIntValue() const {
|
|
if (getType().isUnsignedIntegerTy())
|
|
return getUIntValue();
|
|
SIntMax Val = getSIntValue();
|
|
CHECK(Val >= 0);
|
|
return Val;
|
|
}
|
|
|
|
/// Get the floating-point value of this object, extended to a long double.
|
|
/// These are always passed by address (our calling convention doesn't allow
|
|
/// them to be passed in floating-point registers, so this has little cost).
|
|
FloatMax Value::getFloatValue() const {
|
|
CHECK(getType().isFloatTy());
|
|
if (isInlineFloat()) {
|
|
switch (getType().getFloatBitWidth()) {
|
|
#if 0
|
|
// FIXME: OpenCL / NEON 'half' type. LLVM can't lower the conversion
|
|
// from '__fp16' to 'long double'.
|
|
case 16: {
|
|
__fp16 Value;
|
|
internal_memcpy(&Value, &Val, 4);
|
|
return Value;
|
|
}
|
|
#endif
|
|
case 32: {
|
|
float Value;
|
|
#if defined(__BYTE_ORDER__) && __BYTE_ORDER__ == __ORDER_BIG_ENDIAN__
|
|
// For big endian the float value is in the last 4 bytes.
|
|
// On some targets we may only have 4 bytes so we count backwards from
|
|
// the end of Val to account for both the 32-bit and 64-bit cases.
|
|
internal_memcpy(&Value, ((const char*)(&Val + 1)) - 4, 4);
|
|
#else
|
|
internal_memcpy(&Value, &Val, 4);
|
|
#endif
|
|
return Value;
|
|
}
|
|
case 64: {
|
|
double Value;
|
|
internal_memcpy(&Value, &Val, 8);
|
|
return Value;
|
|
}
|
|
}
|
|
} else {
|
|
switch (getType().getFloatBitWidth()) {
|
|
case 64: return *reinterpret_cast<double*>(Val);
|
|
case 80: return *reinterpret_cast<long double*>(Val);
|
|
case 96: return *reinterpret_cast<long double*>(Val);
|
|
case 128: return *reinterpret_cast<long double*>(Val);
|
|
}
|
|
}
|
|
UNREACHABLE("unexpected floating point bit width");
|
|
}
|
|
|
|
#endif // CAN_SANITIZE_UB
|