diff options
Diffstat (limited to 'gcc')
| -rw-r--r-- | gcc/cp/class.c | 8 | ||||
| -rw-r--r-- | gcc/testsuite/g++.dg/ubsan/vptr-16.C | 14 |
2 files changed, 20 insertions, 2 deletions
diff --git a/gcc/cp/class.c b/gcc/cp/class.c index bab15524..ca492cd 100644 --- a/gcc/cp/class.c +++ b/gcc/cp/class.c @@ -729,9 +729,13 @@ build_vtbl_ref (tree instance, tree idx) tree build_vfn_ref (tree instance_ptr, tree idx) { - tree aref; + tree obtype = TREE_TYPE (TREE_TYPE (instance_ptr)); + + /* Leave the INDIRECT_REF unfolded so cp_ubsan_maybe_instrument_member_call + can find instance_ptr. */ + tree ind = build1 (INDIRECT_REF, obtype, instance_ptr); - aref = build_vtbl_ref (cp_build_fold_indirect_ref (instance_ptr), idx); + tree aref = build_vtbl_ref (ind, idx); /* When using function descriptors, the address of the vtable entry is treated as a function pointer. */ diff --git a/gcc/testsuite/g++.dg/ubsan/vptr-16.C b/gcc/testsuite/g++.dg/ubsan/vptr-16.C new file mode 100644 index 0000000..a3db66e --- /dev/null +++ b/gcc/testsuite/g++.dg/ubsan/vptr-16.C @@ -0,0 +1,14 @@ +// PR c++/95311 +// { dg-additional-options -fsanitize=undefined } + +class a { + virtual long b() const; +}; +class c : a { +public: + long b() const; +}; +class d : c { + long e(); +}; +long d::e() { b(); return 0; } |