diff options
| author | Sjoerd Meijer <sjoerd.meijer@arm.com> | 2021-10-05 12:12:39 +0100 |
|---|---|---|
| committer | Sjoerd Meijer <sjoerd.meijer@arm.com> | 2021-10-05 12:56:32 +0100 |
| commit | cdfc678572d60af414daf56a5f2f5811f7e6ca31 (patch) | |
| tree | 4ecdef71d0784fd53a682ddd90b1f546c62cd7fe /clang/lib/FrontendTool/ExecuteCompilerInvocation.cpp | |
| parent | 40e00063bcb77873274504094116f29ecc2d1080 (diff) | |
| download | llvm-cdfc678572d60af414daf56a5f2f5811f7e6ca31.zip llvm-cdfc678572d60af414daf56a5f2f5811f7e6ca31.tar.gz llvm-cdfc678572d60af414daf56a5f2f5811f7e6ca31.tar.bz2 | |
[SCCPSolver] Fix use-after-free in markArgInFuncSpecialization
In SCCPSolver::markArgInFuncSpecialization, the ValueState map may be
reallocated *after* the initial ValueLatticeElement reference is grabbed, but
*before* its use in copy initialization. This causes a use-after-free. To fix
this, this commit changes the behavior to create the new ValueLatticeElement
before assigning the old one to it.
Patch by: https://github.com/duck-37/
Differential Revision: https://reviews.llvm.org/D111112
Diffstat (limited to 'clang/lib/FrontendTool/ExecuteCompilerInvocation.cpp')
0 files changed, 0 insertions, 0 deletions