Wire up the `-fsanitize=alloc-token` command-line option, hooking up
the `AllocToken` pass -- it provides allocation tokens to compatible
runtime allocators, enabling different heap organization strategies,
e.g. hardening schemes based on heap partitioning.
The instrumentation rewrites standard allocation calls into variants
that accept an additional `size_t token_id` argument. For example,
calls to `malloc(size)` become `__alloc_token_malloc(size, token_id)`,
and a C++ `new MyType` expression will call
`__alloc_token__Znwm(size, token_id)`.
Currently untyped allocation calls do not yet have `!alloc_token`
metadata, and therefore receive the fallback token only. This will be
fixed in subsequent changes through best-effort type-inference.
One benefit of the instrumentation approach is that it can be applied
transparently to large codebases, and scales in deployment as other
sanitizers.
Similarly to other sanitizers, instrumentation can selectively be
controlled using `__attribute__((no_sanitize("alloc-token")))`. Support
for sanitizer ignorelists to disable instrumentation for specific
functions or source files is implemented.
See clang/docs/AllocToken.rst for more usage instructions.
Link:
https://discourse.llvm.org/t/rfc-a-framework-for-allocator-partitioning-hints/87434
---
This change is part of the following series:
1. https://github.com/llvm/llvm-project/pull/160131
2. https://github.com/llvm/llvm-project/pull/156838
3. https://github.com/llvm/llvm-project/pull/162098
4. https://github.com/llvm/llvm-project/pull/162099
5. https://github.com/llvm/llvm-project/pull/156839
6. https://github.com/llvm/llvm-project/pull/156840
7. https://github.com/llvm/llvm-project/pull/156841
8. https://github.com/llvm/llvm-project/pull/156842
142 lines
5.6 KiB
C++
142 lines
5.6 KiB
C++
// RUN: %clang_cc1 -fsanitize=alloc-token -triple x86_64-linux-gnu -std=c++20 -fexceptions -fcxx-exceptions -emit-llvm -disable-llvm-passes %s -o - | FileCheck %s
|
|
|
|
#include "../Analysis/Inputs/system-header-simulator-cxx.h"
|
|
extern "C" {
|
|
void *aligned_alloc(size_t alignment, size_t size);
|
|
void *malloc(size_t size);
|
|
void *calloc(size_t num, size_t size);
|
|
void *realloc(void *ptr, size_t size);
|
|
void *reallocarray(void *ptr, size_t nmemb, size_t size);
|
|
void *memalign(size_t alignment, size_t size);
|
|
void *valloc(size_t size);
|
|
void *pvalloc(size_t size);
|
|
int posix_memalign(void **memptr, size_t alignment, size_t size);
|
|
|
|
struct __sized_ptr_t {
|
|
void *p;
|
|
size_t n;
|
|
};
|
|
enum class __hot_cold_t : uint8_t;
|
|
__sized_ptr_t __size_returning_new(size_t size);
|
|
__sized_ptr_t __size_returning_new_hot_cold(size_t, __hot_cold_t);
|
|
__sized_ptr_t __size_returning_new_aligned(size_t, std::align_val_t);
|
|
__sized_ptr_t __size_returning_new_aligned_hot_cold(size_t, std::align_val_t, __hot_cold_t);
|
|
}
|
|
|
|
void *sink; // prevent optimizations from removing the calls
|
|
|
|
// CHECK-LABEL: define dso_local void @_Z16test_malloc_likev(
|
|
// CHECK: call ptr @malloc(i64 noundef 4)
|
|
// CHECK: call ptr @calloc(i64 noundef 3, i64 noundef 4)
|
|
// CHECK: call ptr @realloc(ptr noundef {{.*}}, i64 noundef 8)
|
|
// CHECK: call ptr @reallocarray(ptr noundef {{.*}}, i64 noundef 5, i64 noundef 8)
|
|
// CHECK: call align 128 ptr @aligned_alloc(i64 noundef 128, i64 noundef 1024)
|
|
// CHECK: call ptr @memalign(i64 noundef 16, i64 noundef 256)
|
|
// CHECK: call ptr @valloc(i64 noundef 4096)
|
|
// CHECK: call ptr @pvalloc(i64 noundef 8192)
|
|
// CHECK: call i32 @posix_memalign(ptr noundef @sink, i64 noundef 64, i64 noundef 4)
|
|
void test_malloc_like() {
|
|
sink = malloc(sizeof(int));
|
|
sink = calloc(3, sizeof(int));
|
|
sink = realloc(sink, sizeof(long));
|
|
sink = reallocarray(sink, 5, sizeof(long));
|
|
sink = aligned_alloc(128, 1024);
|
|
sink = memalign(16, 256);
|
|
sink = valloc(4096);
|
|
sink = pvalloc(8192);
|
|
posix_memalign(&sink, 64, sizeof(int));
|
|
}
|
|
|
|
// CHECK-LABEL: define dso_local void @_Z17test_operator_newv(
|
|
// CHECK: call noalias noundef nonnull ptr @_Znwm(i64 noundef 4)
|
|
// CHECK: call noalias noundef nonnull ptr @_Znwm(i64 noundef 4)
|
|
void test_operator_new() {
|
|
sink = __builtin_operator_new(sizeof(int));
|
|
sink = ::operator new(sizeof(int));
|
|
}
|
|
|
|
// CHECK-LABEL: define dso_local void @_Z25test_operator_new_nothrowv(
|
|
// CHECK: call noalias noundef ptr @_ZnwmRKSt9nothrow_t(i64 noundef 4, ptr noundef nonnull align 1 dereferenceable(1) @_ZSt7nothrow)
|
|
// CHECK: call noalias noundef ptr @_ZnwmRKSt9nothrow_t(i64 noundef 4, ptr noundef nonnull align 1 dereferenceable(1) @_ZSt7nothrow)
|
|
void test_operator_new_nothrow() {
|
|
sink = __builtin_operator_new(sizeof(int), std::nothrow);
|
|
sink = ::operator new(sizeof(int), std::nothrow);
|
|
}
|
|
|
|
// CHECK-LABEL: define dso_local noundef ptr @_Z8test_newv(
|
|
// CHECK: call noalias noundef nonnull ptr @_Znwm(i64 noundef 4){{.*}} !alloc_token [[META_INT:![0-9]+]]
|
|
int *test_new() {
|
|
return new int;
|
|
}
|
|
|
|
// CHECK-LABEL: define dso_local noundef ptr @_Z14test_new_arrayv(
|
|
// CHECK: call noalias noundef nonnull ptr @_Znam(i64 noundef 40){{.*}} !alloc_token [[META_INT]]
|
|
int *test_new_array() {
|
|
return new int[10];
|
|
}
|
|
|
|
// CHECK-LABEL: define dso_local noundef ptr @_Z16test_new_nothrowv(
|
|
// CHECK: call noalias noundef ptr @_ZnwmRKSt9nothrow_t(i64 noundef 4, ptr noundef nonnull align 1 dereferenceable(1) @_ZSt7nothrow){{.*}} !alloc_token [[META_INT]]
|
|
int *test_new_nothrow() {
|
|
return new (std::nothrow) int;
|
|
}
|
|
|
|
// CHECK-LABEL: define dso_local noundef ptr @_Z22test_new_array_nothrowv(
|
|
// CHECK: call noalias noundef ptr @_ZnamRKSt9nothrow_t(i64 noundef 40, ptr noundef nonnull align 1 dereferenceable(1) @_ZSt7nothrow){{.*}} !alloc_token [[META_INT]]
|
|
int *test_new_array_nothrow() {
|
|
return new (std::nothrow) int[10];
|
|
}
|
|
|
|
// CHECK-LABEL: define dso_local void @_Z23test_size_returning_newv(
|
|
// CHECK: call { ptr, i64 } @__size_returning_new(i64 noundef 8)
|
|
// CHECK: call { ptr, i64 } @__size_returning_new_hot_cold(i64 noundef 8, i8 noundef zeroext 1)
|
|
// CHECK: call { ptr, i64 } @__size_returning_new_aligned(i64 noundef 8, i64 noundef 32)
|
|
// CHECK: call { ptr, i64 } @__size_returning_new_aligned_hot_cold(i64 noundef 8, i64 noundef 32, i8 noundef zeroext 1)
|
|
void test_size_returning_new() {
|
|
sink = __size_returning_new(sizeof(long)).p;
|
|
sink = __size_returning_new_hot_cold(sizeof(long), __hot_cold_t{1}).p;
|
|
sink = __size_returning_new_aligned(sizeof(long), std::align_val_t{32}).p;
|
|
sink = __size_returning_new_aligned_hot_cold(sizeof(long), std::align_val_t{32}, __hot_cold_t{1}).p;
|
|
}
|
|
|
|
class TestClass {
|
|
public:
|
|
virtual void Foo();
|
|
virtual ~TestClass();
|
|
int data[16];
|
|
};
|
|
|
|
void may_throw();
|
|
|
|
// CHECK-LABEL: define dso_local noundef ptr @_Z27test_exception_handling_newv(
|
|
// CHECK: invoke noalias noundef nonnull ptr @_Znwm(i64 noundef 72)
|
|
// CHECK-NEXT: !alloc_token [[META_TESTCLASS:![0-9]+]]
|
|
TestClass *test_exception_handling_new() {
|
|
try {
|
|
TestClass *obj = new TestClass();
|
|
may_throw();
|
|
return obj;
|
|
} catch (...) {
|
|
return nullptr;
|
|
}
|
|
}
|
|
|
|
// CHECK-LABEL: define dso_local noundef ptr @_Z14test_new_classv(
|
|
// CHECK: call noalias noundef nonnull ptr @_Znwm(i64 noundef 72){{.*}} !alloc_token [[META_TESTCLASS]]
|
|
TestClass *test_new_class() {
|
|
TestClass *obj = new TestClass();
|
|
obj->data[0] = 42;
|
|
return obj;
|
|
}
|
|
|
|
// CHECK-LABEL: define dso_local noundef ptr @_Z20test_new_class_arrayv(
|
|
// CHECK: call noalias noundef nonnull ptr @_Znam(i64 noundef 728){{.*}} !alloc_token [[META_TESTCLASS]]
|
|
TestClass *test_new_class_array() {
|
|
TestClass* arr = new TestClass[10];
|
|
arr[0].data[0] = 123;
|
|
return arr;
|
|
}
|
|
|
|
// CHECK: [[META_INT]] = !{!"int"}
|
|
// CHECK: [[META_TESTCLASS]] = !{!"TestClass"}
|