为什么会生成这块LLVM指令块?

时间:2017-06-21 22:01:18

标签: llvm llvm-clang llvm-ir

DataFlowSanitizer传递LLVM 3.8.0,64位(Ubuntu 16.04.2)从源生成以下IR:

来源:

test.c的

#include <sanitizer/dfsan_interface.h>

int main(void) {
  int i = 1;

  dfsan_label i_label = dfsan_create_label("i", 0);
  dfsan_set_label(i_label, &i, sizeof(i));

  return 0;
}

生成IR的命令:

clang -c -emit-llvm -fsanitize=dataflow test.c -o test.bc
llvm-dis test.bc

反汇编:

test.ll

; Function Attrs: nounwind uwtable
define i32 @main() #0 {
entry:
  %0 = alloca i16
  %retval = alloca i32, align 4
  %i = alloca i32, align 4
  %1 = alloca i16
  %i_label = alloca i16, align 2
  store i16 0, i16* %0
  store i32 0, i32* %retval, align 4

  ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
  %2 = ptrtoint i32* %i to i64
  %3 = and i64 %2, -123145302310913
  %4 = mul i64 %3, 2
  %5 = inttoptr i64 %4 to i16*
  %6 = bitcast i16* %5 to i64*
  store i64 0, i64* %6, align 2
  ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;

  store i32 1, i32* %i, align 4
  %call = call zeroext i16 @dfsan_create_label(i8* getelementptr inbounds ([2 x i8], [2 x i8]* @.str, i32 0, i32 0), i8* null)
  store i16 0, i16* %1
  store i16 %call, i16* %i_label, align 2
  %7 = load i16, i16* %1
  %8 = load i16, i16* %i_label, align 2
  %9 = bitcast i32* %i to i8*
  call void @dfsan_set_label(i16 zeroext %8, i8* %9, i64 4)
  ret i32 0
}

我不明白为什么我分离出的指令块正在生成。查看Transform / Instrumentation / DataFlowsanitizer.cpp,我找不到插入上述检测的代码。任何人都可以解释这种行为吗?

0 个答案:

没有答案