
The __builtin_counted_by_ref builtin is used on a flexible array pointer and returns a pointer to the "counted_by" attribute's COUNT argument, which is a field in the same non-anonymous struct as the flexible array member. This is useful for automatically setting the count field without needing the programmer's intervention. Otherwise it's possible to get this anti-pattern: ptr = alloc(<ty>, ..., COUNT); ptr->FAM[9] = 42; /* <<< Sanitizer will complain */ ptr->count = COUNT; To prevent this anti-pattern, the user can create an allocator that automatically performs the assignment: #define alloc(TY, FAM, COUNT) ({ \ TY __p = alloc(get_size(TY, COUNT)); \ if (__builtin_counted_by_ref(__p->FAM)) \ *__builtin_counted_by_ref(__p->FAM) = COUNT; \ __p; \ }) The builtin's behavior is heavily dependent upon the "counted_by" attribute existing. It's main utility is during allocation to avoid the above anti-pattern. If the flexible array member doesn't have that attribute, the builtin becomes a no-op. Therefore, if the flexible array member has a "count" field not referenced by "counted_by", it must be set explicitly after the allocation as this builtin will return a "nullptr" and the assignment will most likely be elided. --------- Co-authored-by: Bill Wendling <isanbard@gmail.com> Co-authored-by: Aaron Ballman <aaron@aaronballman.com>
178 lines
7.7 KiB
C
178 lines
7.7 KiB
C
// NOTE: Assertions have been autogenerated by utils/update_cc_test_checks.py UTC_ARGS: --version 5
|
|
// RUN: %clang_cc1 -triple x86_64-unknown-unknown -emit-llvm -o - %s | FileCheck %s --check-prefix=X86_64
|
|
// RUN: %clang_cc1 -triple i386-unknown-unknown -emit-llvm -o - %s | FileCheck %s --check-prefix=I386
|
|
|
|
struct a {
|
|
char x;
|
|
short count;
|
|
int array[] __attribute__((counted_by(count)));
|
|
};
|
|
|
|
// X86_64-LABEL: define dso_local ptr @test1(
|
|
// X86_64-SAME: i32 noundef [[SIZE:%.*]]) #[[ATTR0:[0-9]+]] {
|
|
// X86_64-NEXT: [[ENTRY:.*:]]
|
|
// X86_64-NEXT: [[SIZE_ADDR:%.*]] = alloca i32, align 4
|
|
// X86_64-NEXT: [[P:%.*]] = alloca ptr, align 8
|
|
// X86_64-NEXT: store i32 [[SIZE]], ptr [[SIZE_ADDR]], align 4
|
|
// X86_64-NEXT: [[TMP0:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// X86_64-NEXT: [[CONV:%.*]] = sext i32 [[TMP0]] to i64
|
|
// X86_64-NEXT: [[MUL:%.*]] = mul i64 4, [[CONV]]
|
|
// X86_64-NEXT: [[ADD:%.*]] = add i64 4, [[MUL]]
|
|
// X86_64-NEXT: [[CALL:%.*]] = call ptr @malloc(i64 noundef [[ADD]]) #[[ATTR2:[0-9]+]]
|
|
// X86_64-NEXT: store ptr [[CALL]], ptr [[P]], align 8
|
|
// X86_64-NEXT: [[TMP1:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// X86_64-NEXT: [[CONV1:%.*]] = trunc i32 [[TMP1]] to i16
|
|
// X86_64-NEXT: [[TMP2:%.*]] = load ptr, ptr [[P]], align 8
|
|
// X86_64-NEXT: [[DOT_COUNTED_BY_GEP:%.*]] = getelementptr inbounds [[STRUCT_A:%.*]], ptr [[TMP2]], i32 0, i32 1
|
|
// X86_64-NEXT: store i16 [[CONV1]], ptr [[DOT_COUNTED_BY_GEP]], align 2
|
|
// X86_64-NEXT: [[TMP3:%.*]] = load ptr, ptr [[P]], align 8
|
|
// X86_64-NEXT: ret ptr [[TMP3]]
|
|
//
|
|
// I386-LABEL: define dso_local ptr @test1(
|
|
// I386-SAME: i32 noundef [[SIZE:%.*]]) #[[ATTR0:[0-9]+]] {
|
|
// I386-NEXT: [[ENTRY:.*:]]
|
|
// I386-NEXT: [[SIZE_ADDR:%.*]] = alloca i32, align 4
|
|
// I386-NEXT: [[P:%.*]] = alloca ptr, align 4
|
|
// I386-NEXT: store i32 [[SIZE]], ptr [[SIZE_ADDR]], align 4
|
|
// I386-NEXT: [[TMP0:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// I386-NEXT: [[MUL:%.*]] = mul i32 4, [[TMP0]]
|
|
// I386-NEXT: [[ADD:%.*]] = add i32 4, [[MUL]]
|
|
// I386-NEXT: [[CALL:%.*]] = call ptr @malloc(i32 noundef [[ADD]]) #[[ATTR2:[0-9]+]]
|
|
// I386-NEXT: store ptr [[CALL]], ptr [[P]], align 4
|
|
// I386-NEXT: [[TMP1:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// I386-NEXT: [[CONV:%.*]] = trunc i32 [[TMP1]] to i16
|
|
// I386-NEXT: [[TMP2:%.*]] = load ptr, ptr [[P]], align 4
|
|
// I386-NEXT: [[DOT_COUNTED_BY_GEP:%.*]] = getelementptr inbounds [[STRUCT_A:%.*]], ptr [[TMP2]], i32 0, i32 1
|
|
// I386-NEXT: store i16 [[CONV]], ptr [[DOT_COUNTED_BY_GEP]], align 2
|
|
// I386-NEXT: [[TMP3:%.*]] = load ptr, ptr [[P]], align 4
|
|
// I386-NEXT: ret ptr [[TMP3]]
|
|
//
|
|
struct a *test1(int size) {
|
|
struct a *p = __builtin_malloc(sizeof(struct a) + sizeof(int) * size);
|
|
|
|
*__builtin_counted_by_ref(p->array) = size;
|
|
return p;
|
|
}
|
|
|
|
struct b {
|
|
int _filler;
|
|
struct {
|
|
int __filler;
|
|
struct {
|
|
int ___filler;
|
|
struct {
|
|
char count;
|
|
};
|
|
};
|
|
};
|
|
struct {
|
|
int filler_;
|
|
struct {
|
|
int filler__;
|
|
struct {
|
|
long array[] __attribute__((counted_by(count)));
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
// X86_64-LABEL: define dso_local ptr @test2(
|
|
// X86_64-SAME: i32 noundef [[SIZE:%.*]]) #[[ATTR0]] {
|
|
// X86_64-NEXT: [[ENTRY:.*:]]
|
|
// X86_64-NEXT: [[SIZE_ADDR:%.*]] = alloca i32, align 4
|
|
// X86_64-NEXT: [[P:%.*]] = alloca ptr, align 8
|
|
// X86_64-NEXT: store i32 [[SIZE]], ptr [[SIZE_ADDR]], align 4
|
|
// X86_64-NEXT: [[TMP0:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// X86_64-NEXT: [[CONV:%.*]] = sext i32 [[TMP0]] to i64
|
|
// X86_64-NEXT: [[MUL:%.*]] = mul i64 4, [[CONV]]
|
|
// X86_64-NEXT: [[ADD:%.*]] = add i64 4, [[MUL]]
|
|
// X86_64-NEXT: [[CALL:%.*]] = call ptr @malloc(i64 noundef [[ADD]]) #[[ATTR2]]
|
|
// X86_64-NEXT: store ptr [[CALL]], ptr [[P]], align 8
|
|
// X86_64-NEXT: [[TMP1:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// X86_64-NEXT: [[CONV1:%.*]] = trunc i32 [[TMP1]] to i8
|
|
// X86_64-NEXT: [[TMP2:%.*]] = load ptr, ptr [[P]], align 8
|
|
// X86_64-NEXT: [[DOT_COUNTED_BY_GEP:%.*]] = getelementptr inbounds [[STRUCT_B:%.*]], ptr [[TMP2]], i32 0, i32 1, i32 1, i32 1, i32 0
|
|
// X86_64-NEXT: store i8 [[CONV1]], ptr [[DOT_COUNTED_BY_GEP]], align 1
|
|
// X86_64-NEXT: [[TMP3:%.*]] = load ptr, ptr [[P]], align 8
|
|
// X86_64-NEXT: ret ptr [[TMP3]]
|
|
//
|
|
// I386-LABEL: define dso_local ptr @test2(
|
|
// I386-SAME: i32 noundef [[SIZE:%.*]]) #[[ATTR0]] {
|
|
// I386-NEXT: [[ENTRY:.*:]]
|
|
// I386-NEXT: [[SIZE_ADDR:%.*]] = alloca i32, align 4
|
|
// I386-NEXT: [[P:%.*]] = alloca ptr, align 4
|
|
// I386-NEXT: store i32 [[SIZE]], ptr [[SIZE_ADDR]], align 4
|
|
// I386-NEXT: [[TMP0:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// I386-NEXT: [[MUL:%.*]] = mul i32 4, [[TMP0]]
|
|
// I386-NEXT: [[ADD:%.*]] = add i32 4, [[MUL]]
|
|
// I386-NEXT: [[CALL:%.*]] = call ptr @malloc(i32 noundef [[ADD]]) #[[ATTR2]]
|
|
// I386-NEXT: store ptr [[CALL]], ptr [[P]], align 4
|
|
// I386-NEXT: [[TMP1:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// I386-NEXT: [[CONV:%.*]] = trunc i32 [[TMP1]] to i8
|
|
// I386-NEXT: [[TMP2:%.*]] = load ptr, ptr [[P]], align 4
|
|
// I386-NEXT: [[DOT_COUNTED_BY_GEP:%.*]] = getelementptr inbounds [[STRUCT_B:%.*]], ptr [[TMP2]], i32 0, i32 1, i32 1, i32 1, i32 0
|
|
// I386-NEXT: store i8 [[CONV]], ptr [[DOT_COUNTED_BY_GEP]], align 1
|
|
// I386-NEXT: [[TMP3:%.*]] = load ptr, ptr [[P]], align 4
|
|
// I386-NEXT: ret ptr [[TMP3]]
|
|
//
|
|
struct b *test2(int size) {
|
|
struct b *p = __builtin_malloc(sizeof(struct a) + sizeof(int) * size);
|
|
|
|
*__builtin_counted_by_ref(p->array) = size;
|
|
return p;
|
|
}
|
|
|
|
struct c {
|
|
char x;
|
|
short count;
|
|
int array[];
|
|
};
|
|
|
|
// X86_64-LABEL: define dso_local ptr @test3(
|
|
// X86_64-SAME: i32 noundef [[SIZE:%.*]]) #[[ATTR0]] {
|
|
// X86_64-NEXT: [[ENTRY:.*:]]
|
|
// X86_64-NEXT: [[SIZE_ADDR:%.*]] = alloca i32, align 4
|
|
// X86_64-NEXT: [[P:%.*]] = alloca ptr, align 8
|
|
// X86_64-NEXT: [[__IGNORED:%.*]] = alloca i64, align 8
|
|
// X86_64-NEXT: store i32 [[SIZE]], ptr [[SIZE_ADDR]], align 4
|
|
// X86_64-NEXT: [[TMP0:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// X86_64-NEXT: [[CONV:%.*]] = sext i32 [[TMP0]] to i64
|
|
// X86_64-NEXT: [[MUL:%.*]] = mul i64 4, [[CONV]]
|
|
// X86_64-NEXT: [[ADD:%.*]] = add i64 4, [[MUL]]
|
|
// X86_64-NEXT: [[CALL:%.*]] = call ptr @malloc(i64 noundef [[ADD]]) #[[ATTR2]]
|
|
// X86_64-NEXT: store ptr [[CALL]], ptr [[P]], align 8
|
|
// X86_64-NEXT: [[TMP1:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// X86_64-NEXT: [[CONV1:%.*]] = sext i32 [[TMP1]] to i64
|
|
// X86_64-NEXT: store i64 [[CONV1]], ptr [[__IGNORED]], align 8
|
|
// X86_64-NEXT: [[TMP2:%.*]] = load ptr, ptr [[P]], align 8
|
|
// X86_64-NEXT: ret ptr [[TMP2]]
|
|
//
|
|
// I386-LABEL: define dso_local ptr @test3(
|
|
// I386-SAME: i32 noundef [[SIZE:%.*]]) #[[ATTR0]] {
|
|
// I386-NEXT: [[ENTRY:.*:]]
|
|
// I386-NEXT: [[SIZE_ADDR:%.*]] = alloca i32, align 4
|
|
// I386-NEXT: [[P:%.*]] = alloca ptr, align 4
|
|
// I386-NEXT: [[__IGNORED:%.*]] = alloca i32, align 4
|
|
// I386-NEXT: store i32 [[SIZE]], ptr [[SIZE_ADDR]], align 4
|
|
// I386-NEXT: [[TMP0:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// I386-NEXT: [[MUL:%.*]] = mul i32 4, [[TMP0]]
|
|
// I386-NEXT: [[ADD:%.*]] = add i32 4, [[MUL]]
|
|
// I386-NEXT: [[CALL:%.*]] = call ptr @malloc(i32 noundef [[ADD]]) #[[ATTR2]]
|
|
// I386-NEXT: store ptr [[CALL]], ptr [[P]], align 4
|
|
// I386-NEXT: [[TMP1:%.*]] = load i32, ptr [[SIZE_ADDR]], align 4
|
|
// I386-NEXT: store i32 [[TMP1]], ptr [[__IGNORED]], align 4
|
|
// I386-NEXT: [[TMP2:%.*]] = load ptr, ptr [[P]], align 4
|
|
// I386-NEXT: ret ptr [[TMP2]]
|
|
//
|
|
struct c *test3(int size) {
|
|
struct c *p = __builtin_malloc(sizeof(struct c) + sizeof(int) * size);
|
|
unsigned long int __ignored;
|
|
|
|
*_Generic(
|
|
__builtin_counted_by_ref(p->array),
|
|
void *: &__ignored,
|
|
default: __builtin_counted_by_ref(p->array)) = size;
|
|
|
|
return p;
|
|
}
|