[Bug sanitizer/80998] Implement -fsanitize=pointer-overflow
aldyh at gcc dot gnu.org
gcc-bugzilla@gcc.gnu.org
Wed Sep 13 15:56:00 GMT 2017
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=80998
--- Comment #7 from Aldy Hernandez <aldyh at gcc dot gnu.org> ---
Author: aldyh
Date: Wed Sep 13 15:55:42 2017
New Revision: 252134
URL: https://gcc.gnu.org/viewcvs?rev=252134&root=gcc&view=rev
Log:
PR sanitizer/80998
* sanopt.c (pass_sanopt::execute): Handle IFN_UBSAN_PTR.
* tree-ssa-alias.c (call_may_clobber_ref_p_1): Likewise.
* flag-types.h (enum sanitize_code): Add SANITIZER_POINTER_OVERFLOW.
Or it into SANITIZER_UNDEFINED.
* ubsan.c: Include gimple-fold.h and varasm.h.
(ubsan_expand_ptr_ifn): New function.
(instrument_pointer_overflow): New function.
(maybe_instrument_pointer_overflow): New function.
(instrument_object_size): Formatting fix.
(pass_ubsan::execute): Call instrument_pointer_overflow
and maybe_instrument_pointer_overflow.
* internal-fn.c (expand_UBSAN_PTR): New function.
* ubsan.h (ubsan_expand_ptr_ifn): Declare.
* sanitizer.def (__ubsan_handle_pointer_overflow,
__ubsan_handle_pointer_overflow_abort): New builtins.
* tree-ssa-tail-merge.c (merge_stmts_p): Handle IFN_UBSAN_PTR.
* internal-fn.def (UBSAN_PTR): New internal function.
* opts.c (sanitizer_opts): Add pointer-overflow.
* lto-streamer-in.c (input_function): Handle IFN_UBSAN_PTR.
* fold-const.c (build_range_check): Compute pointer range check in
integral type if pointer arithmetics would be needed. Formatting
fixes.
gcc/testsuite/
* c-c++-common/ubsan/ptr-overflow-1.c: New test.
* c-c++-common/ubsan/ptr-overflow-2.c: New test.
libsanitizer/
* ubsan/ubsan_handlers.cc: Cherry-pick upstream r304461.
* ubsan/ubsan_checks.inc: Likewise.
* ubsan/ubsan_handlers.h: Likewise.
Added:
branches/range-gen2/gcc/testsuite/c-c++-common/ubsan/ptr-overflow-1.c
branches/range-gen2/gcc/testsuite/c-c++-common/ubsan/ptr-overflow-2.c
Modified:
branches/range-gen2/gcc/ChangeLog
branches/range-gen2/gcc/flag-types.h
branches/range-gen2/gcc/fold-const.c
branches/range-gen2/gcc/internal-fn.c
branches/range-gen2/gcc/internal-fn.def
branches/range-gen2/gcc/lto-streamer-in.c
branches/range-gen2/gcc/opts.c
branches/range-gen2/gcc/sanitizer.def
branches/range-gen2/gcc/sanopt.c
branches/range-gen2/gcc/testsuite/ChangeLog
branches/range-gen2/gcc/tree-ssa-alias.c
branches/range-gen2/gcc/tree-ssa-tail-merge.c
branches/range-gen2/gcc/ubsan.c
branches/range-gen2/gcc/ubsan.h
branches/range-gen2/libsanitizer/ChangeLog
branches/range-gen2/libsanitizer/ubsan/ubsan_checks.inc
branches/range-gen2/libsanitizer/ubsan/ubsan_handlers.cc
branches/range-gen2/libsanitizer/ubsan/ubsan_handlers.h
More information about the Gcc-bugs
mailing list