diff options
| author | Yonghong Song <yhs@fb.com> | 2019-11-04 22:12:52 -0800 |
|---|---|---|
| committer | Yonghong Song <yhs@fb.com> | 2019-11-04 22:20:23 -0800 |
| commit | 9f34447f3ff525029ec889bf3a82b04678a9d7c0 (patch) | |
| tree | 73851ef0092ae02a8bc95acf739973b66d3b26d8 /llvm/lib/Bitcode/Reader/BitcodeReader.cpp | |
| parent | f65493a83e3bdb402fb1dfa92bcc25707e961147 (diff) | |
| download | bcm5719-llvm-9f34447f3ff525029ec889bf3a82b04678a9d7c0.tar.gz bcm5719-llvm-9f34447f3ff525029ec889bf3a82b04678a9d7c0.zip | |
[BPF] fix a use after free bug
Commit fff2721286e1 ("[BPF] Fix CO-RE bugs with bitfields")
fixed CO-RE handling bitfield issues. But the implementation
introduced a use after free bug. The "Base" of the intrinsic
might be freed so later on accessing the Type of "Base"
might access the freed memory. The failed test case,
CodeGen/BPF/CORE/offset-reloc-middle-chain.ll
is exactly used to test such a case.
Similarly to previous attempt to remember Metadata etc,
remember "Base" pointee Alignment in advance to avoid
such use after free bug.
Diffstat (limited to 'llvm/lib/Bitcode/Reader/BitcodeReader.cpp')
0 files changed, 0 insertions, 0 deletions
