diff options
| author | Florian Hahn <flo@fhahn.com> | 2019-03-07 17:50:16 +0000 |
|---|---|---|
| committer | Florian Hahn <flo@fhahn.com> | 2019-03-07 17:50:16 +0000 |
| commit | 6ca0985aa572f25635f28ce8385dba112d56b6e9 (patch) | |
| tree | 177ee4d2f62eab9633735f908c92cc8a5f8be93c /llvm/test/Transforms/LoopVectorize | |
| parent | bd53e768d22c2c0e329bc08b2002ebd1d74ffaa6 (diff) | |
| download | bcm5719-llvm-6ca0985aa572f25635f28ce8385dba112d56b6e9.tar.gz bcm5719-llvm-6ca0985aa572f25635f28ce8385dba112d56b6e9.zip | |
[InterleavedAccessAnalysis] Fix integer overflow in insertMember.
Without checking for integer overflow, invalid members can be added
e.g. if the calculated key overflows, becomes positive and the largest key.
This fixes
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7560
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13128
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13229
Reviewers: Ayal, anna, hsaito, efriedma
Reviewed By: efriedma
Differential Revision: https://reviews.llvm.org/D55538
llvm-svn: 355613
Diffstat (limited to 'llvm/test/Transforms/LoopVectorize')
| -rw-r--r-- | llvm/test/Transforms/LoopVectorize/X86/interleaved-accesses-large-gap.ll | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/llvm/test/Transforms/LoopVectorize/X86/interleaved-accesses-large-gap.ll b/llvm/test/Transforms/LoopVectorize/X86/interleaved-accesses-large-gap.ll new file mode 100644 index 00000000000..15ec344cc3d --- /dev/null +++ b/llvm/test/Transforms/LoopVectorize/X86/interleaved-accesses-large-gap.ll @@ -0,0 +1,40 @@ +; RUN: opt < %s -loop-vectorize -mtriple x86_64 -S | FileCheck %s + +%struct.ST4 = type { i32, i32, i32, i32 } + +; The gaps between the memory access in this function are too large for +; interleaving. + +; Test from https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7560 +define void @test1(%struct.ST4* noalias %B) { +; CHECK-LABEL: @test1 +; CHECK-NEXT: entry: +; CHECK-NEXT: br label %for.body + +; CHECK-LABEL: for.body: +; CHECK: store i32 +; CHECK: store i32 +; CHECK: store i32 +; CHECK: store i32 +; CHECK-NOT: store +; +entry: + br label %for.body + +for.body: ; preds = %for.body, %entry + %indvars.iv = phi i64 [ 0, %entry ], [ %indvars.iv.next, %for.body ] + %p1 = getelementptr inbounds %struct.ST4, %struct.ST4* %B, i64 %indvars.iv, i32 0 + store i32 65536, i32* %p1, align 4 + %p2 = getelementptr i32, i32* %p1, i32 -2147483648 + store i32 65536, i32* %p2, align 4 + %p3 = getelementptr inbounds %struct.ST4, %struct.ST4* %B, i64 %indvars.iv, i32 2 + store i32 10, i32* %p3, align 4 + %p4 = getelementptr inbounds %struct.ST4, %struct.ST4* %B, i64 %indvars.iv, i32 3 + store i32 12, i32* %p4, align 4 + %indvars.iv.next = add nuw nsw i64 %indvars.iv, 1 + %exitcond = icmp eq i64 %indvars.iv.next, 1024 + br i1 %exitcond, label %for.cond.cleanup, label %for.body + +for.cond.cleanup: ; preds = %for.body + ret void +} |
