aboutsummaryrefslogtreecommitdiff
path: root/instrumentation
diff options
context:
space:
mode:
authorvan Hauser <vh@thc.org>2021-02-16 09:51:31 +0100
committerGitHub <noreply@github.com>2021-02-16 09:51:31 +0100
commit686719cdca6ed7cc1090ab3d05020e4ad66f2bb7 (patch)
treeed0ac5ff80ceb30ee4b7dc8f2ee0b4663e69525a /instrumentation
parent145c673a80878d92013882eda6ef56e6948c397b (diff)
parent6caec2169cef890ba8a62715c2c26cc0608626e3 (diff)
downloadafl++-686719cdca6ed7cc1090ab3d05020e4ad66f2bb7.tar.gz
Merge pull request #746 from f0rki/cmplog-intcast-fix
CMPLOG llvm pass: use CreateIntCast to cast to the right integer type
Diffstat (limited to 'instrumentation')
-rw-r--r--instrumentation/cmplog-instructions-pass.cc204
1 files changed, 31 insertions, 173 deletions
diff --git a/instrumentation/cmplog-instructions-pass.cc b/instrumentation/cmplog-instructions-pass.cc
index 6b071b48..50ade9fd 100644
--- a/instrumentation/cmplog-instructions-pass.cc
+++ b/instrumentation/cmplog-instructions-pass.cc
@@ -19,12 +19,13 @@
#include <stdlib.h>
#include <unistd.h>
+#include <iostream>
#include <list>
#include <string>
#include <fstream>
#include <sys/time.h>
-#include "llvm/Config/llvm-config.h"
+#include "llvm/Config/llvm-config.h"
#include "llvm/ADT/Statistic.h"
#include "llvm/IR/IRBuilder.h"
#include "llvm/IR/LegacyPassManager.h"
@@ -113,8 +114,6 @@ bool CmpLogInstructions::hookInstrs(Module &M) {
IntegerType *Int64Ty = IntegerType::getInt64Ty(C);
IntegerType *Int128Ty = IntegerType::getInt128Ty(C);
- char *is_lto = getenv("_AFL_LTO_COMPILE");
-
#if LLVM_VERSION_MAJOR < 9
Constant *
#else
@@ -267,20 +266,10 @@ bool CmpLogInstructions::hookInstrs(Module &M) {
unsigned int max_size = Val->getType()->getIntegerBitWidth(), cast_size;
unsigned char do_cast = 0;
- if (!SI->getNumCases() || max_size < 16) { continue; }
-
- if (max_size % 8) {
-
- if (is_lto) {
+ if (!SI->getNumCases() || max_size < 16 || max_size % 8) {
- continue; // LTO cannot bitcast from _ExtInt() :(
-
- } else {
-
- max_size = (((max_size / 8) + 1) * 8);
- do_cast = 1;
-
- }
+ // if (!be_quiet) errs() << "skip trivial switch..\n";
+ continue;
}
@@ -297,7 +286,6 @@ bool CmpLogInstructions::hookInstrs(Module &M) {
}
- if (is_lto) { continue; } // LTO cannot bitcast _ExtInt() :(
max_size = 128;
do_cast = 1;
@@ -314,7 +302,6 @@ bool CmpLogInstructions::hookInstrs(Module &M) {
cast_size = max_size;
break;
default:
- if (is_lto) { continue; } // LTO cannot bitcast _ExtInt() :(
cast_size = 128;
do_cast = 1;
@@ -323,38 +310,8 @@ bool CmpLogInstructions::hookInstrs(Module &M) {
Value *CompareTo = Val;
if (do_cast) {
-
- ConstantInt *cint = dyn_cast<ConstantInt>(Val);
- if (cint) {
-
- uint64_t val = cint->getZExtValue();
- // fprintf(stderr, "ConstantInt: %lu\n", val);
- switch (cast_size) {
-
- case 8:
- CompareTo = ConstantInt::get(Int8Ty, val);
- break;
- case 16:
- CompareTo = ConstantInt::get(Int16Ty, val);
- break;
- case 32:
- CompareTo = ConstantInt::get(Int32Ty, val);
- break;
- case 64:
- CompareTo = ConstantInt::get(Int64Ty, val);
- break;
- case 128:
- CompareTo = ConstantInt::get(Int128Ty, val);
- break;
-
- }
-
- } else {
-
- CompareTo = IRB.CreateBitCast(Val, IntegerType::get(C, cast_size));
-
- }
-
+ CompareTo =
+ IRB.CreateIntCast(CompareTo, IntegerType::get(C, cast_size), false);
}
for (SwitchInst::CaseIt i = SI->case_begin(), e = SI->case_end(); i != e;
@@ -374,29 +331,8 @@ bool CmpLogInstructions::hookInstrs(Module &M) {
Value *new_param = cint;
if (do_cast) {
-
- uint64_t val = cint->getZExtValue();
- // fprintf(stderr, "ConstantInt: %lu\n", val);
- switch (cast_size) {
-
- case 8:
- new_param = ConstantInt::get(Int8Ty, val);
- break;
- case 16:
- new_param = ConstantInt::get(Int16Ty, val);
- break;
- case 32:
- new_param = ConstantInt::get(Int32Ty, val);
- break;
- case 64:
- new_param = ConstantInt::get(Int64Ty, val);
- break;
- case 128:
- new_param = ConstantInt::get(Int128Ty, val);
- break;
-
- }
-
+ new_param =
+ IRB.CreateIntCast(cint, IntegerType::get(C, cast_size), false);
}
if (new_param) {
@@ -554,22 +490,7 @@ bool CmpLogInstructions::hookInstrs(Module &M) {
}
- if (!max_size || max_size < 16) { continue; }
-
- if (max_size % 8) {
-
- if (is_lto) {
-
- continue; // LTO cannot bitcast from _ExtInt() :(
-
- } else {
-
- max_size = (((max_size / 8) + 1) * 8);
- do_cast = 1;
-
- }
-
- }
+ if (!max_size || max_size % 8 || max_size < 16) { continue; }
if (max_size > 128) {
@@ -581,7 +502,6 @@ bool CmpLogInstructions::hookInstrs(Module &M) {
}
- if (is_lto) { continue; } // LTO cannot bitcast from _ExtInt() :(
max_size = 128;
do_cast = 1;
@@ -598,94 +518,32 @@ bool CmpLogInstructions::hookInstrs(Module &M) {
cast_size = max_size;
break;
default:
- if (is_lto) { continue; } // LTO cannot bitcast from _ExtInt() :(
cast_size = 128;
do_cast = 1;
}
- if (do_cast) {
-
- // F*cking LLVM optimized out any kind of bitcasts of ConstantInt values
- // creating illegal calls. WTF. So we have to work around this.
-
- ConstantInt *cint = dyn_cast<ConstantInt>(op0);
- if (cint) {
-
- uint64_t val = cint->getZExtValue();
- // fprintf(stderr, "ConstantInt: %lu\n", val);
- ConstantInt *new_param = NULL;
- switch (cast_size) {
-
- case 8:
- new_param = ConstantInt::get(Int8Ty, val);
- break;
- case 16:
- new_param = ConstantInt::get(Int16Ty, val);
- break;
- case 32:
- new_param = ConstantInt::get(Int32Ty, val);
- break;
- case 64:
- new_param = ConstantInt::get(Int64Ty, val);
- break;
- case 128:
- new_param = ConstantInt::get(Int128Ty, val);
- break;
-
- }
-
- if (!new_param) { continue; }
- args.push_back(new_param);
-
- } else {
-
- Value *V0 = IRB.CreateBitCast(op0, IntegerType::get(C, cast_size));
- args.push_back(V0);
-
- }
-
- cint = dyn_cast<ConstantInt>(op1);
- if (cint) {
-
- uint64_t val = cint->getZExtValue();
- ConstantInt *new_param = NULL;
- switch (cast_size) {
-
- case 8:
- new_param = ConstantInt::get(Int8Ty, val);
- break;
- case 16:
- new_param = ConstantInt::get(Int16Ty, val);
- break;
- case 32:
- new_param = ConstantInt::get(Int32Ty, val);
- break;
- case 64:
- new_param = ConstantInt::get(Int64Ty, val);
- break;
- case 128:
- new_param = ConstantInt::get(Int128Ty, val);
- break;
-
- }
-
- if (!new_param) { continue; }
- args.push_back(new_param);
-
- } else {
-
- Value *V1 = IRB.CreateBitCast(op1, IntegerType::get(C, cast_size));
- args.push_back(V1);
-
- }
-
- } else {
-
- args.push_back(op0);
- args.push_back(op1);
-
- }
+ // errs() << "[CMPLOG] cmp " << *cmpInst << "(in function " <<
+ // cmpInst->getFunction()->getName() << ")\n";
+
+ // first bitcast to integer type of the same bitsize as the original
+ // type (this is a nop, if already integer)
+ Value *op0_i = IRB.CreateBitCast(
+ op0, IntegerType::get(C, op0->getType()->getPrimitiveSizeInBits()));
+ // then create a int cast, which does zext, trunc or bitcast. In our case
+ // usually zext to the next larger supported type (this is a nop if
+ // already the right type)
+ Value *V0 =
+ IRB.CreateIntCast(op0_i, IntegerType::get(C, cast_size), false);
+ args.push_back(V0);
+ Value *op1_i = IRB.CreateBitCast(
+ op1, IntegerType::get(C, op1->getType()->getPrimitiveSizeInBits()));
+ Value *V1 =
+ IRB.CreateIntCast(op1_i, IntegerType::get(C, cast_size), false);
+ args.push_back(V1);
+
+ // errs() << "[CMPLOG] casted parameters:\n0: " << *V0 << "\n1: " << *V1
+ // << "\n";
ConstantInt *attribute = ConstantInt::get(Int8Ty, attr);
args.push_back(attribute);