| 1 | // REQUIRES: asserts |
| 2 | // RUN: %clang_cc1 -x objective-c -emit-llvm -triple x86_64-apple-macosx10.10.0 -fsanitize=nullability-return,returns-nonnull-attribute,nullability-arg,nonnull-attribute %s -o - -w | FileCheck %s |
| 3 | |
| 4 | // If both the annotation and the attribute are present, prefer the attribute, |
| 5 | // since it actually affects IRGen. |
| 6 | |
| 7 | // CHECK-LABEL: define nonnull i32* @f1 |
| 8 | __attribute__((returns_nonnull)) int *_Nonnull f1(int *_Nonnull p) { |
| 9 | // CHECK: entry: |
| 10 | // CHECK-NEXT: [[SLOC_PTR:%.*]] = alloca i8* |
| 11 | // CHECK-NEXT: [[ADDR:%.*]] = alloca i32* |
| 12 | // CHECK-NEXT: store i8* null, i8** [[SLOC_PTR]] |
| 13 | // CHECK-NEXT: store i32* [[P:%.*]], i32** [[ADDR]] |
| 14 | // CHECK-NEXT: store {{.*}} [[SLOC_PTR]] |
| 15 | // CHECK-NEXT: [[ARG:%.*]] = load i32*, i32** [[ADDR]] |
| 16 | // CHECK-NEXT: [[SLOC:%.*]] = load {{.*}} [[SLOC_PTR]] |
| 17 | // CHECK-NEXT: [[SLOC_NONNULL:%.*]] = icmp ne i8* [[SLOC]], null |
| 18 | // CHECK-NEXT: br i1 [[SLOC_NONNULL]], label %nullcheck |
| 19 | // |
| 20 | // CHECK: nullcheck: |
| 21 | // CHECK-NEXT: [[ICMP:%.*]] = icmp ne i32* [[ARG]], null, !nosanitize |
| 22 | // CHECK-NEXT: br i1 [[ICMP]], label %[[CONT:.+]], label %[[HANDLE:[^,]+]] |
| 23 | // CHECK: [[HANDLE]]: |
| 24 | // CHECK: call void @__ubsan_handle_nonnull_return |
| 25 | // CHECK-NEXT: unreachable, !nosanitize |
| 26 | // CHECK: [[CONT]]: |
| 27 | // CHECK-NEXT: br label %no.nullcheck |
| 28 | // CHECK: no.nullcheck: |
| 29 | // CHECK-NEXT: ret i32* [[ARG]] |
| 30 | return p; |
| 31 | } |
| 32 | |
| 33 | // CHECK-LABEL: define void @f2 |
| 34 | void f2(int *_Nonnull __attribute__((nonnull)) p) {} |
| 35 | |
| 36 | // CHECK-LABEL: define void @call_f2 |
| 37 | void call_f2() { |
| 38 | // CHECK: call void @__ubsan_handle_nonnull_arg_abort |
| 39 | // CHECK-NOT: call void @__ubsan_handle_nonnull_arg_abort |
| 40 | f2((void *)0); |
| 41 | } |
| 42 | |
| 43 | // If the return value isn't meant to be checked, make sure we don't check it. |
| 44 | // CHECK-LABEL: define i32* @f3 |
| 45 | int *f3(int *p) { |
| 46 | // CHECK-NOT: return.sloc |
| 47 | // CHECK-NOT: call{{.*}}ubsan |
| 48 | return p; |
| 49 | } |
| 50 | |
| 51 | // Check for a valid "return" source location, even when there is no return |
| 52 | // statement, to avoid accidentally calling the runtime. |
| 53 | |
| 54 | // CHECK-LABEL: define nonnull i32* @f4 |
| 55 | __attribute__((returns_nonnull)) int *f4() { |
| 56 | // CHECK: store i8* null, i8** [[SLOC_PTR:%.*]] |
| 57 | // CHECK: [[SLOC:%.*]] = load {{.*}} [[SLOC_PTR]] |
| 58 | // CHECK: [[SLOC_NONNULL:%.*]] = icmp ne i8* [[SLOC]], null |
| 59 | // CHECK: br i1 [[SLOC_NONNULL]], label %nullcheck |
| 60 | // CHECK: nullcheck: |
| 61 | } |
| 62 | |