From f15fb032efeb9da81f3ca341879b3eccea98b1b6 Mon Sep 17 00:00:00 2001 From: Filipe Cabecinhas Date: Wed, 29 Apr 2015 01:27:01 +0000 Subject: Make sure that isValidElementType(Type) before calling {Array,Struct}Type::get(Type) Bug found with AFL fuzz. llvm-svn: 236073 --- llvm/lib/Bitcode/Reader/BitcodeReader.cpp | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'llvm/lib/Bitcode/Reader/BitcodeReader.cpp') diff --git a/llvm/lib/Bitcode/Reader/BitcodeReader.cpp b/llvm/lib/Bitcode/Reader/BitcodeReader.cpp index 6656478754e..a381c30170e 100644 --- a/llvm/lib/Bitcode/Reader/BitcodeReader.cpp +++ b/llvm/lib/Bitcode/Reader/BitcodeReader.cpp @@ -1474,7 +1474,8 @@ std::error_code BitcodeReader::ParseTypeTableBody() { case bitc::TYPE_CODE_ARRAY: // ARRAY: [numelts, eltty] if (Record.size() < 2) return Error("Invalid record"); - if ((ResultTy = getTypeByID(Record[1]))) + if ((ResultTy = getTypeByID(Record[1])) && + StructType::isValidElementType(ResultTy)) ResultTy = ArrayType::get(ResultTy, Record[0]); else return Error("Invalid type"); @@ -1482,7 +1483,8 @@ std::error_code BitcodeReader::ParseTypeTableBody() { case bitc::TYPE_CODE_VECTOR: // VECTOR: [numelts, eltty] if (Record.size() < 2) return Error("Invalid record"); - if ((ResultTy = getTypeByID(Record[1]))) + if ((ResultTy = getTypeByID(Record[1])) && + StructType::isValidElementType(ResultTy)) ResultTy = VectorType::get(ResultTy, Record[0]); else return Error("Invalid type"); -- cgit v1.2.3