en Copyright 2015 Java http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#ae6648ce [dfsan] Expose dfsan_get_track_origins to get origin tracking statusThis allows application code checks if origin tracking is on beforeprinting out traces.-dfsan-track-origins can be 0,1,2.The current code only distinguishes 1 and 2 in compile time, but not at runtime.Made runtime distinguish 1 and 2 too.Reviewed By: browneeeDifferential Revision: https://reviews.llvm.org/D105128 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Tue, 29 Jun 2021 06:17:00 +0000 Jianzhou Zhao <jianzhouzh@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#45f6d552 [DFSan] Change shadow and origin memory layouts to match MSan.Previously on x86_64: +--------------------+ 0x800000000000 (top of memory) | application memory | +--------------------+ 0x700000008000 (kAppAddr) | | | unused | | | +--------------------+ 0x300000000000 (kUnusedAddr) | origin | +--------------------+ 0x200000008000 (kOriginAddr) | unused | +--------------------+ 0x200000000000 | shadow memory | +--------------------+ 0x100000008000 (kShadowAddr) | unused | +--------------------+ 0x000000010000 | reserved by kernel | +--------------------+ 0x000000000000 MEM_TO_SHADOW(mem) = mem & ~0x600000000000 SHADOW_TO_ORIGIN(shadow) = kOriginAddr - kShadowAddr + shadowNow for x86_64: +--------------------+ 0x800000000000 (top of memory) | application 3 | +--------------------+ 0x700000000000 | invalid | +--------------------+ 0x610000000000 | origin 1 | +--------------------+ 0x600000000000 | application 2 | +--------------------+ 0x510000000000 | shadow 1 | +--------------------+ 0x500000000000 | invalid | +--------------------+ 0x400000000000 | origin 3 | +--------------------+ 0x300000000000 | shadow 3 | +--------------------+ 0x200000000000 | origin 2 | +--------------------+ 0x110000000000 | invalid | +--------------------+ 0x100000000000 | shadow 2 | +--------------------+ 0x010000000000 | application 1 | +--------------------+ 0x000000000000 MEM_TO_SHADOW(mem) = mem ^ 0x500000000000 SHADOW_TO_ORIGIN(shadow) = shadow + 0x100000000000Reviewed By: stephan.yichao.zhao, gbalatsDifferential Revision: https://reviews.llvm.org/D104896 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Fri, 25 Jun 2021 05:16:36 +0000 Andrew Browne <browneee@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#14407332 [DFSan] Cleanup code for platforms other than Linux x86_64.These other platforms are unsupported and untested.They could be re-added later based on MSan code.Reviewed By: gbalats, stephan.yichao.zhaoDifferential Revision: https://reviews.llvm.org/D104481 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Thu, 17 Jun 2021 21:52:09 +0000 Andrew Browne <browneee@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#c6b5a25e [dfsan] Replace dfs$ prefix with .dfsan suffixThe current naming scheme adds the `dfs$` prefix to allDFSan-instrumented functions. This breaks mangling and prevents stacktrace printers and other tools from automatically demangling functionnames.This new naming scheme is mangling-compatible, with the `.dfsan`suffix being a vendor-specific suffix:https://itanium-cxx-abi.github.io/cxx-abi/abi.html#mangling-structureWith this fix, demangling utils would work out-of-the-box.Reviewed By: stephan.yichao.zhaoDifferential Revision: https://reviews.llvm.org/D104494 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Thu, 17 Jun 2021 21:55:05 +0000 George Balatsouras <gbalats@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#5b4dda55 [dfsan] Add full fast8 supportComplete support for fast8:- amend shadow size and mapping in runtime- remove fast16 mode and -dfsan-fast-16-labels flag- remove legacy mode and make fast8 mode the default- remove dfsan-fast-8-labels flag- remove functions in dfsan interface only applicable to legacy- remove legacy-related instrumentation code and tests- update documentation.Reviewed By: stephan.yichao.zhao, browneeeDifferential Revision: https://reviews.llvm.org/D103745 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Fri, 04 Jun 2021 22:34:02 +0000 George Balatsouras <gbalats@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#7fdf2709 [dfsan] Track origin at loads The first version of origin tracking tracks only memory stores. Although this is sufficient for understanding correct flows, it is hard to figure out where an undefined value is read from. To find reading undefined values, we still have to do a reverse binary search from the last store in the chain with printing and logging at possible code paths. This is quite inefficient. Tracking memory load instructions can help this case. The main issues of tracking loads are performance and code size overheads. With tracking only stores, the code size overhead is 38%, memory overhead is 1x, and cpu overhead is 3x. In practice #load is much larger than #store, so both code size and cpu overhead increases. The first blocker is code size overhead: link fails if we inline tracking loads. The workaround is using external function calls to propagate metadata. This is also the workaround ASan uses. The cpu overhead is ~10x. This is a trade off between debuggability and performance, and will be used only when debugging cases that tracking only stores is not enough.Reviewed By: gbalatsDifferential Revision: https://reviews.llvm.org/D100967 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Wed, 21 Apr 2021 04:54:29 +0000 Jianzhou Zhao <jianzhouzh@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#79b5280a [dfsan] Enable origin tracking with fast8 modeAll related instrumentation tests have been updated.Reviewed By: stephan.yichao.zhaoDifferential Revision: https://reviews.llvm.org/D100903 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Tue, 20 Apr 2021 22:31:58 +0000 George Balatsouras <gbalats@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#d10f173f [dfsan] Add -dfsan-fast-8-labels flagThis is only adding support to the dfsan instrumentation pass but notto the runtime.Added more RUN lines for testing: for each instrumentation test thathad a -dfsan-fast-16-labels invocation, a new invocation was addedusing fast8.Reviewed By: stephan.yichao.zhaoDifferential Revision: https://reviews.llvm.org/D98734 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Tue, 16 Mar 2021 19:05:15 +0000 George Balatsouras <gbalats@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#db7fe6cd [dfsan] Propagate origin tracking at storeThis is a part of https://reviews.llvm.org/D95835.Reviewed By: morehouse, gbalatsDifferential Revision: https://reviews.llvm.org/D97789 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Tue, 02 Mar 2021 18:59:07 +0000 Jianzhou Zhao <jianzhouzh@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#c9075a1c [dfsan] Record dfsan metadata in globalsThis will allow identifying exactly how many shadow bytes were usedduring compilation, for when fast8 mode is introduced.Also, it will provide a consistent matching point for instrumentationtests so that the exact llvm type used (i8 or i16) for the shadow canbe replaced by a pattern substitution. This is handy for tests withmultiple prefixes.Reviewed by: stephan.yichao.zhao, morehouseDifferential Revision: https://reviews.llvm.org/D97409 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Wed, 24 Feb 2021 19:42:30 +0000 George Balatsouras <gbalats@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#a05aa0dd [dfsan] Update memset and dfsan_(set|add)_label with origin trackingThis is a part of https://reviews.llvm.org/D95835.Reviewed-by: morehouseDifferential Revision: https://reviews.llvm.org/D97302 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Tue, 23 Feb 2021 04:24:42 +0000 Jianzhou Zhao <jianzhouzh@google.com> http://172.16.0.5:8080/history/llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll#7e658b2f [dfsan] Instrument origin variable and function definitionsThis is a part of https://reviews.llvm.org/D95835.Reviewed-by: morehouse, gbalatsDifferential Revision: https://reviews.llvm.org/D96977 List of files: /llvm-project-15.0.7/llvm/test/Instrumentation/DataFlowSanitizer/basic.ll Thu, 18 Feb 2021 18:29:21 +0000 Jianzhou Zhao <jianzhouzh@google.com>