129 lines
5.8 KiB
LLVM
129 lines
5.8 KiB
LLVM
;; When BTI is enabled, keep the range check for a jump table for hardening,
|
|
;; even with an unreachable default.
|
|
;;
|
|
;; We check with and without the branch-target-enforcement module attribute,
|
|
;; and in each case, try overriding it with the opposite function attribute.
|
|
;; Expect to see a range check whenever there is BTI, and not where there
|
|
;; isn't.
|
|
|
|
; RUN: sed s/SPACE/4/ %s | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=BTI-TBB
|
|
; RUN: sed s/SPACE/4/ %s | sed '/test_jumptable/s/{/#0 {/' | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=NOBTI-TBB
|
|
; RUN: sed s/SPACE/4/ %s | sed '/^..for-non-bti-build-sed-will-delete-everything-after-this-line/q' | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=NOBTI-TBB
|
|
; RUN: sed s/SPACE/4/ %s | sed '/test_jumptable/s/{/#1 {/' | sed '/^..for-non-bti-build-sed-will-delete-everything-after-this-line/q' | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=BTI-TBB
|
|
|
|
; RUN: sed s/SPACE/400/ %s | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=BTI-TBH
|
|
; RUN: sed s/SPACE/400/ %s | sed '/test_jumptable/s/{/#0 {/' | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=NOBTI-TBH
|
|
; RUN: sed s/SPACE/400/ %s | sed '/^..for-non-bti-build-sed-will-delete-everything-after-this-line/q' | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=NOBTI-TBH
|
|
; RUN: sed s/SPACE/400/ %s | sed '/test_jumptable/s/{/#1 {/' | sed '/^..for-non-bti-build-sed-will-delete-everything-after-this-line/q' | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=BTI-TBH
|
|
|
|
; RUN: sed s/SPACE/400000/ %s | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=BTI-MOV
|
|
; RUN: sed s/SPACE/400000/ %s | sed '/test_jumptable/s/{/#0 {/' | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=NOBTI-MOV
|
|
; RUN: sed s/SPACE/400000/ %s | sed '/^..for-non-bti-build-sed-will-delete-everything-after-this-line/q' | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=NOBTI-MOV
|
|
; RUN: sed s/SPACE/400000/ %s | sed '/test_jumptable/s/{/#1 {/' | sed '/^..for-non-bti-build-sed-will-delete-everything-after-this-line/q' | llc -mtriple=thumbv8.1m.main-linux-gnu -mattr=+pacbti -o - | FileCheck %s --check-prefix=BTI-MOV
|
|
|
|
declare i32 @llvm.arm.space(i32, i32)
|
|
|
|
attributes #0 = { "branch-target-enforcement"="false" }
|
|
attributes #1 = { "branch-target-enforcement"="true" }
|
|
|
|
define ptr @test_jumptable(ptr %src, ptr %dst) {
|
|
entry:
|
|
%sw = load i32, ptr %src, align 4
|
|
%src.postinc = getelementptr inbounds i32, ptr %src, i32 1
|
|
switch i32 %sw, label %default [
|
|
i32 0, label %sw.0
|
|
i32 1, label %sw.1
|
|
i32 2, label %sw.2
|
|
i32 3, label %sw.3
|
|
]
|
|
|
|
sw.0:
|
|
%store.0 = call i32 @llvm.arm.space(i32 SPACE, i32 14142)
|
|
store i32 %store.0, ptr %dst, align 4
|
|
br label %exit
|
|
|
|
sw.1:
|
|
%store.1 = call i32 @llvm.arm.space(i32 SPACE, i32 31415)
|
|
%dst.1 = getelementptr inbounds i32, ptr %dst, i32 1
|
|
store i32 %store.1, ptr %dst.1, align 4
|
|
br label %exit
|
|
|
|
sw.2:
|
|
%store.2 = call i32 @llvm.arm.space(i32 SPACE, i32 27182)
|
|
%dst.2 = getelementptr inbounds i32, ptr %dst, i32 2
|
|
store i32 %store.2, ptr %dst.2, align 4
|
|
br label %exit
|
|
|
|
sw.3:
|
|
%store.3 = call i32 @llvm.arm.space(i32 SPACE, i32 16180)
|
|
%dst.3 = getelementptr inbounds i32, ptr %dst, i32 3
|
|
store i32 %store.3, ptr %dst.3, align 4
|
|
br label %exit
|
|
|
|
default:
|
|
unreachable
|
|
|
|
exit:
|
|
ret ptr %src.postinc
|
|
}
|
|
|
|
; NOBTI-TBB: test_jumptable:
|
|
; NOBTI-TBB-NEXT: .fnstart
|
|
; NOBTI-TBB-NEXT: @ %bb
|
|
; NOBTI-TBB-NEXT: ldr [[INDEX:r[0-9]+]], [r0], #4
|
|
; NOBTI-TBB-NEXT: .LCPI
|
|
; NOBTI-TBB-NEXT: tbb [pc, [[INDEX]]]
|
|
|
|
; BTI-TBB: test_jumptable:
|
|
; BTI-TBB-NEXT: .fnstart
|
|
; BTI-TBB-NEXT: @ %bb
|
|
; BTI-TBB-NEXT: bti
|
|
; BTI-TBB-NEXT: ldr [[INDEX:r[0-9]+]], [r0], #4
|
|
; BTI-TBB-NEXT: cmp [[INDEX]], #3
|
|
; BTI-TBB-NEXT: bhi .LBB
|
|
; BTI-TBB-NEXT: @ %bb
|
|
; BTI-TBB-NEXT: .LCPI
|
|
; BTI-TBB-NEXT: tbb [pc, [[INDEX]]]
|
|
|
|
; NOBTI-TBH: test_jumptable:
|
|
; NOBTI-TBH-NEXT: .fnstart
|
|
; NOBTI-TBH-NEXT: @ %bb
|
|
; NOBTI-TBH-NEXT: ldr [[INDEX:r[0-9]+]], [r0], #4
|
|
; NOBTI-TBH-NEXT: .LCPI
|
|
; NOBTI-TBH-NEXT: tbh [pc, [[INDEX]], lsl #1]
|
|
|
|
; BTI-TBH: test_jumptable:
|
|
; BTI-TBH-NEXT: .fnstart
|
|
; BTI-TBH-NEXT: @ %bb
|
|
; BTI-TBH-NEXT: bti
|
|
; BTI-TBH-NEXT: ldr [[INDEX:r[0-9]+]], [r0], #4
|
|
; BTI-TBH-NEXT: cmp [[INDEX]], #3
|
|
; BTI-TBH-NEXT: bhi.w .LBB
|
|
; BTI-TBH-NEXT: @ %bb
|
|
; BTI-TBH-NEXT: .LCPI
|
|
; BTI-TBH-NEXT: tbh [pc, [[INDEX]], lsl #1]
|
|
|
|
; NOBTI-MOV: test_jumptable:
|
|
; NOBTI-MOV-NEXT: .fnstart
|
|
; NOBTI-MOV-NEXT: @ %bb
|
|
; NOBTI-MOV-NEXT: ldr [[INDEX:r[0-9]+]], [r0], #4
|
|
; NOBTI-MOV-NEXT: adr.w [[ADDR:r[0-9]+]], .LJTI
|
|
; NOBTI-MOV-NEXT: add.w [[ADDR]], [[ADDR]], [[INDEX]], lsl #2
|
|
; NOBTI-MOV-NEXT: mov pc, [[ADDR]]
|
|
|
|
; BTI-MOV: test_jumptable:
|
|
; BTI-MOV-NEXT: .fnstart
|
|
; BTI-MOV-NEXT: @ %bb
|
|
; BTI-MOV-NEXT: bti
|
|
; BTI-MOV-NEXT: ldr [[INDEX:r[0-9]+]], [r0], #4
|
|
; BTI-MOV-NEXT: cmp [[INDEX]], #3
|
|
; BTI-MOV-NEXT: bls .LBB
|
|
; BTI-MOV-NEXT: b.w .LBB
|
|
; BTI-MOV-NEXT: .LBB
|
|
; BTI-MOV-NEXT: adr.w [[ADDR:r[0-9]+]], .LJTI
|
|
; BTI-MOV-NEXT: add.w [[ADDR]], [[ADDR]], [[INDEX]], lsl #2
|
|
; BTI-MOV-NEXT: mov pc, [[ADDR]]
|
|
|
|
; for-non-bti-build-sed-will-delete-everything-after-this-line
|
|
!llvm.module.flags = !{!0}
|
|
!0 = !{i32 8, !"branch-target-enforcement", i32 1}
|