aboutsummaryrefslogtreecommitdiff
path: root/lldb/source/Commands/CommandObjectThread.cpp
diff options
context:
space:
mode:
authorhyeongyukim <gusrb406@snu.ac.kr>2021-06-17 19:28:24 +0900
committerJuneyoung Lee <aqjune@gmail.com>2021-06-17 19:46:17 +0900
commit69b0ed9a0a6aeab0b1c93d0a76c66a63c1d6f410 (patch)
treee160c5d9193b6fd802659ad5ce58f641d55055bd /lldb/source/Commands/CommandObjectThread.cpp
parent1a4af2e45ee59cff3d577986b9b7f3f5bd5ab01f (diff)
downloadllvm-69b0ed9a0a6aeab0b1c93d0a76c66a63c1d6f410.zip
llvm-69b0ed9a0a6aeab0b1c93d0a76c66a63c1d6f410.tar.gz
llvm-69b0ed9a0a6aeab0b1c93d0a76c66a63c1d6f410.tar.bz2
[InstCombine] Fix miscompile on GEP+load to icmp fold (PR45210)
As noted in PR45210: https://bugs.llvm.org/show_bug.cgi?id=45210 ...the bug is triggered as Eli say when sext(idx) * ElementSize overflows. ``` // assume that GV is an array of 4-byte elements GEP = gep GV, 0, Idx // this is accessing Idx * 4 L = load GEP    ICI = icmp eq L, value  =>    ICI = icmp eq Idx, NewIdx ``` The foldCmpLoadFromIndexedGlobal function simplifies GEP+load operation to icmp. And there is a problem because Idx * ElementSize can overflow. Let's assume that the wanted value is at offset 0. Then, there are actually four possible values for Idx to match offset 0: 0x00..00, 0x40..00, 0x80..00, 0xC0..00. We should return true for all these values, but currently, the new icmp only returns true for 0x00..00. This problem can be solved by masking off (trailing zeros of ElementSize) bits from Idx. ``` ...  => Idx' = and Idx, 0x3F..FF    ICI = icmp eq Idx', NewIdx ``` Reviewed By: efriedma Differential Revision: https://reviews.llvm.org/D99481
Diffstat (limited to 'lldb/source/Commands/CommandObjectThread.cpp')
0 files changed, 0 insertions, 0 deletions