diff options
author | Luca Dariz <l.dariz@imamoter.cnr.t> | 2014-09-05 14:43:52 +0200 |
---|---|---|
committer | Cristian Cadar <c.cadar@imperial.ac.uk> | 2015-02-13 18:49:49 +0000 |
commit | 8055aff448f1505e764d60ab10f7a202ee702761 (patch) | |
tree | 11ddbe787923f068170a31530865115702a8c160 /lib/Module | |
parent | d026e99496355647665af965e27d8baf244e62d3 (diff) | |
download | klee-8055aff448f1505e764d60ab10f7a202ee702761.tar.gz |
Detect overflow of unsigned add, sub and mul operations
This requires clang with -fsanitize=unsigned-integer-overflow tested with clang and llvm 3.4.2
Diffstat (limited to 'lib/Module')
-rw-r--r-- | lib/Module/IntrinsicCleaner.cpp | 14 |
1 files changed, 10 insertions, 4 deletions
diff --git a/lib/Module/IntrinsicCleaner.cpp b/lib/Module/IntrinsicCleaner.cpp index 0f095269..ebdbd3a6 100644 --- a/lib/Module/IntrinsicCleaner.cpp +++ b/lib/Module/IntrinsicCleaner.cpp @@ -117,6 +117,7 @@ bool IntrinsicCleanerPass::runOnBasicBlock(BasicBlock &b, Module &M) { } case Intrinsic::uadd_with_overflow: + case Intrinsic::usub_with_overflow: case Intrinsic::umul_with_overflow: { IRBuilder<> builder(ii->getParent(), ii); @@ -124,13 +125,18 @@ bool IntrinsicCleanerPass::runOnBasicBlock(BasicBlock &b, Module &M) { Value *op2 = ii->getArgOperand(1); Value *result = 0; - if (ii->getIntrinsicID() == Intrinsic::uadd_with_overflow) + Value *overflow = 0; + if (ii->getIntrinsicID() == Intrinsic::uadd_with_overflow){ result = builder.CreateAdd(op1, op2); - else + overflow = builder.CreateICmpULT(result, op1); + } else if (ii->getIntrinsicID() == Intrinsic::usub_with_overflow){ + result = builder.CreateSub(op1, op2); + overflow = builder.CreateICmpUGT(result, op1); + } else if (ii->getIntrinsicID() == Intrinsic::umul_with_overflow){ result = builder.CreateMul(op1, op2); + overflow = builder.CreateICmpULT(result, op1); + } - Value *overflow = builder.CreateICmpULT(result, op1); - Value *resultStruct = builder.CreateInsertValue(UndefValue::get(ii->getType()), result, 0); resultStruct = builder.CreateInsertValue(resultStruct, overflow, 1); |