1 // RUN: %clang_cc1 -fsanitize=alignment,null,object-size,shift-base,shift-exponent,return,signed-integer-overflow,vla-bound,float-cast-overflow,integer-divide-by-zero,bool,returns-nonnull-attribute,nonnull-attribute -fsanitize-recover=alignment,null,object-size,shift-base,shift-exponent,signed-integer-overflow,vla-bound,float-cast-overflow,integer-divide-by-zero,bool,returns-nonnull-attribute,nonnull-attribute -emit-llvm %s -o - -triple x86_64-linux-gnu | FileCheck %s --check-prefix=CHECK-COMMON --check-prefix=CHECK-UBSAN
2 // RUN: %clang_cc1 -fsanitize-trap=alignment,null,object-size,shift-base,shift-exponent,return,signed-integer-overflow,vla-bound,float-cast-overflow,integer-divide-by-zero,bool,returns-nonnull-attribute,nonnull-attribute -fsanitize-recover=alignment,null,object-size,shift-base,shift-exponent,signed-integer-overflow,vla-bound,float-cast-overflow,integer-divide-by-zero,bool,returns-nonnull-attribute,nonnull-attribute -fsanitize=alignment,null,object-size,shift-base,shift-exponent,return,signed-integer-overflow,vla-bound,float-cast-overflow,integer-divide-by-zero,bool,returns-nonnull-attribute,nonnull-attribute -fsanitize-recover=alignment,null,object-size,shift-base,shift-exponent,signed-integer-overflow,vla-bound,float-cast-overflow,integer-divide-by-zero,bool,returns-nonnull-attribute,nonnull-attribute -emit-llvm %s -o - -triple x86_64-linux-gnu | FileCheck %s --check-prefix=CHECK-COMMON --check-prefix=CHECK-TRAP
3 // RUN: %clang_cc1 -fsanitize=null -fsanitize-recover=null -emit-llvm %s -o - -triple x86_64-linux-gnu | FileCheck %s --check-prefix=CHECK-NULL
4 // RUN: %clang_cc1 -fsanitize=signed-integer-overflow -emit-llvm %s -o - -triple x86_64-linux-gnu | FileCheck %s --check-prefix=CHECK-OVERFLOW
5 // REQUIRES: asserts
6 
7 // CHECK-UBSAN: @[[INT:.*]] = private unnamed_addr constant { i16, i16, [6 x i8] } { i16 0, i16 11, [6 x i8] c"'int'\00" }
8 
9 // FIXME: When we only emit each type once, use [[INT]] more below.
10 // CHECK-UBSAN: @[[LINE_100:.*]] = private unnamed_addr global {{.*}}, i32 100, i32 5 {{.*}} @[[INT]], i64 4, i8 1
11 // CHECK-UBSAN: @[[LINE_200:.*]] = {{.*}}, i32 200, i32 10 {{.*}}, i64 4, i8 0
12 // CHECK-UBSAN: @[[LINE_300:.*]] = {{.*}}, i32 300, i32 12 {{.*}} @{{.*}}, {{.*}} @{{.*}}
13 // CHECK-UBSAN: @[[LINE_400:.*]] = {{.*}}, i32 400, i32 12 {{.*}} @{{.*}}, {{.*}} @{{.*}}
14 // CHECK-UBSAN: @[[LINE_500:.*]] = {{.*}}, i32 500, i32 10 {{.*}} @{{.*}}, i64 4, i8 0 }
15 // CHECK-UBSAN: @[[LINE_600:.*]] = {{.*}}, i32 600, i32 3 {{.*}} @{{.*}}, i64 4, i8 1 }
16 
17 // CHECK-UBSAN: @[[STRUCT_S:.*]] = private unnamed_addr constant { i16, i16, [11 x i8] } { i16 -1, i16 0, [11 x i8] c"'struct S'\00" }
18 
19 // CHECK-UBSAN: @[[LINE_700:.*]] = {{.*}}, i32 700, i32 14 {{.*}} @[[STRUCT_S]], i64 4, i8 3 }
20 // CHECK-UBSAN: @[[LINE_800:.*]] = {{.*}}, i32 800, i32 12 {{.*}} @{{.*}} }
21 // CHECK-UBSAN: @[[LINE_900:.*]] = {{.*}}, i32 900, i32 11 {{.*}} @{{.*}} }
22 // CHECK-UBSAN: @[[LINE_1000:.*]] = {{.*}}, i32 1000, i32 10 {{.*}} @{{.*}} }
23 // CHECK-UBSAN: @[[FP16:.*]] = private unnamed_addr constant { i16, i16, [9 x i8] } { i16 1, i16 16, [9 x i8] c"'__fp16'\00" }
24 // CHECK-UBSAN: @[[LINE_1100:.*]] = {{.*}}, i32 1100, i32 8 {{.*}} @{{.*}} }
25 // CHECK-UBSAN: @[[LINE_1200:.*]] = {{.*}}, i32 1200, i32 10 {{.*}} @{{.*}} }
26 // CHECK-UBSAN: @[[LINE_1300:.*]] = {{.*}}, i32 1300, i32 10 {{.*}} @{{.*}} }
27 // CHECK-UBSAN: @[[LINE_1400:.*]] = {{.*}}, i32 1400, i32 10 {{.*}} @{{.*}} }
28 // Make sure we check the fp16 type_mismatch data so we can easily match the signed char float_cast_overflow
29 // CHECK-UBSAN: @[[LINE_1500:.*]] = {{.*}}, i32 1500, i32 10 {{.*}} @[[FP16]], {{.*}} }
30 // CHECK-UBSAN: @[[SCHAR:.*]] = private unnamed_addr constant { i16, i16, [14 x i8] } { i16 0, i16 7, [14 x i8] c"'signed char'\00" }
31 // CHECK-UBSAN: @[[LINE_1500:.*]] = {{.*}}, i32 1500, i32 10 {{.*}} @[[FP16]], {{.*}} }
32 // CHECK-UBSAN: @[[LINE_1600:.*]] = {{.*}}, i32 1600, i32 10 {{.*}} @{{.*}} }
33 
34 // CHECK-NULL: @[[LINE_100:.*]] = private unnamed_addr global {{.*}}, i32 100, i32 5 {{.*}}
35 
36 // PR6805
37 // CHECK-COMMON-LABEL: @foo
38 // CHECK-NULL-LABEL: @foo
39 void foo() {
40   union { int i; } u;
41   // CHECK-COMMON:      %[[CHECK0:.*]] = icmp ne {{.*}}* %[[PTR:.*]], null
42 
43   // CHECK-COMMON:      %[[I8PTR:.*]] = bitcast i32* %[[PTR]] to i8*
44   // CHECK-COMMON-NEXT: %[[SIZE:.*]] = call i64 @llvm.objectsize.i64.p0i8(i8* %[[I8PTR]], i1 false)
45   // CHECK-COMMON-NEXT: %[[CHECK1:.*]] = icmp uge i64 %[[SIZE]], 4
46 
47   // CHECK-COMMON:      %[[PTRTOINT:.*]] = ptrtoint {{.*}}* %[[PTR]] to i64
48   // CHECK-COMMON-NEXT: %[[MISALIGN:.*]] = and i64 %[[PTRTOINT]], 3
49   // CHECK-COMMON-NEXT: %[[CHECK2:.*]] = icmp eq i64 %[[MISALIGN]], 0
50 
51   // CHECK-COMMON:       %[[CHECK01:.*]] = and i1 %[[CHECK0]], %[[CHECK1]]
52   // CHECK-COMMON-NEXT:  %[[OK:.*]] = and i1 %[[CHECK01]], %[[CHECK2]]
53 
54   // CHECK-UBSAN: br i1 %[[OK]], {{.*}} !prof ![[WEIGHT_MD:.*]], !nosanitize
55   // CHECK-TRAP:  br i1 %[[OK]], {{.*}}
56 
57   // CHECK-UBSAN:      %[[ARG:.*]] = ptrtoint {{.*}} %[[PTR]] to i64
58   // CHECK-UBSAN-NEXT: call void @__ubsan_handle_type_mismatch(i8* bitcast ({{.*}} @[[LINE_100]] to i8*), i64 %[[ARG]])
59 
60   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW:#[0-9]+]]
61   // CHECK-TRAP-NEXT: unreachable
62 
63   // With -fsanitize=null, only perform the null check.
64   // CHECK-NULL: %[[NULL:.*]] = icmp ne {{.*}}, null
65   // CHECK-NULL: br i1 %[[NULL]]
66   // CHECK-NULL: call void @__ubsan_handle_type_mismatch(i8* bitcast ({{.*}} @[[LINE_100]] to i8*), i64 %{{.*}})
67 #line 100
68   u.i=1;
69 }
70 
71 // CHECK-COMMON-LABEL: @bar
72 int bar(int *a) {
73   // CHECK-COMMON:      %[[SIZE:.*]] = call i64 @llvm.objectsize.i64
74   // CHECK-COMMON-NEXT: icmp uge i64 %[[SIZE]], 4
75 
76   // CHECK-COMMON:      %[[PTRINT:.*]] = ptrtoint
77   // CHECK-COMMON-NEXT: %[[MISALIGN:.*]] = and i64 %[[PTRINT]], 3
78   // CHECK-COMMON-NEXT: icmp eq i64 %[[MISALIGN]], 0
79 
80   // CHECK-UBSAN:      %[[ARG:.*]] = ptrtoint
81   // CHECK-UBSAN-NEXT: call void @__ubsan_handle_type_mismatch(i8* bitcast ({{.*}} @[[LINE_200]] to i8*), i64 %[[ARG]])
82 
83   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
84   // CHECK-TRAP-NEXT: unreachable
85 
86 #line 200
87   return *a;
88 }
89 
90 // CHECK-UBSAN-LABEL: @addr_space
91 int addr_space(int __attribute__((address_space(256))) *a) {
92   // CHECK-UBSAN-NOT: __ubsan
93   return *a;
94 }
95 
96 // CHECK-COMMON-LABEL: @lsh_overflow
97 int lsh_overflow(int a, int b) {
98   // CHECK-COMMON:      %[[RHS_INBOUNDS:.*]] = icmp ule i32 %[[RHS:.*]], 31
99   // CHECK-COMMON-NEXT: br i1 %[[RHS_INBOUNDS]], label %[[CHECK_BB:.*]], label %[[CONT_BB:.*]],
100 
101   // CHECK-COMMON:      [[CHECK_BB]]:
102   // CHECK-COMMON-NEXT: %[[SHIFTED_OUT_WIDTH:.*]] = sub nuw nsw i32 31, %[[RHS]]
103   // CHECK-COMMON-NEXT: %[[SHIFTED_OUT:.*]] = lshr i32 %[[LHS:.*]], %[[SHIFTED_OUT_WIDTH]]
104   // CHECK-COMMON-NEXT: %[[NO_OVERFLOW:.*]] = icmp eq i32 %[[SHIFTED_OUT]], 0
105   // CHECK-COMMON-NEXT: br label %[[CONT_BB]]
106 
107   // CHECK-COMMON:      [[CONT_BB]]:
108   // CHECK-COMMON-NEXT: %[[VALID_BASE:.*]] = phi i1 [ true, {{.*}} ], [ %[[NO_OVERFLOW]], %[[CHECK_BB]] ]
109   // CHECK-COMMON-NEXT: %[[VALID:.*]] = and i1 %[[RHS_INBOUNDS]], %[[VALID_BASE]]
110 
111   // CHECK-UBSAN: br i1 %[[VALID]], {{.*}} !prof ![[WEIGHT_MD]]
112   // CHECK-TRAP:  br i1 %[[VALID]]
113 
114   // CHECK-UBSAN:      %[[ARG1:.*]] = zext
115   // CHECK-UBSAN-NEXT: %[[ARG2:.*]] = zext
116   // CHECK-UBSAN-NEXT: call void @__ubsan_handle_shift_out_of_bounds(i8* bitcast ({{.*}} @[[LINE_300]] to i8*), i64 %[[ARG1]], i64 %[[ARG2]])
117   // CHECK-UBSAN-NOT:  call void @__ubsan_handle_shift_out_of_bounds
118 
119   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
120   // CHECK-TRAP:      unreachable
121   // CHECK-TRAP-NOT:  call void @llvm.trap()
122 
123   // CHECK-COMMON:      %[[RET:.*]] = shl i32 %[[LHS]], %[[RHS]]
124   // CHECK-COMMON-NEXT: ret i32 %[[RET]]
125 #line 300
126   return a << b;
127 }
128 
129 // CHECK-COMMON-LABEL: @rsh_inbounds
130 int rsh_inbounds(int a, int b) {
131   // CHECK-COMMON:      %[[INBOUNDS:.*]] = icmp ule i32 %[[RHS:.*]], 31
132   // CHECK-COMMON:      br i1 %[[INBOUNDS]]
133 
134   // CHECK-UBSAN:      %[[ARG1:.*]] = zext
135   // CHECK-UBSAN-NEXT: %[[ARG2:.*]] = zext
136   // CHECK-UBSAN-NEXT: call void @__ubsan_handle_shift_out_of_bounds(i8* bitcast ({{.*}} @[[LINE_400]] to i8*), i64 %[[ARG1]], i64 %[[ARG2]])
137 
138   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
139   // CHECK-TRAP-NEXT: unreachable
140 
141   // CHECK-COMMON:      %[[RET:.*]] = ashr i32 {{.*}}, %[[RHS]]
142   // CHECK-COMMON-NEXT: ret i32 %[[RET]]
143 #line 400
144   return a >> b;
145 }
146 
147 // CHECK-COMMON-LABEL: @load
148 int load(int *p) {
149   // CHECK-UBSAN: call void @__ubsan_handle_type_mismatch(i8* bitcast ({{.*}} @[[LINE_500]] to i8*), i64 %{{.*}})
150 
151   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
152   // CHECK-TRAP-NEXT: unreachable
153 #line 500
154   return *p;
155 }
156 
157 // CHECK-COMMON-LABEL: @store
158 void store(int *p, int q) {
159   // CHECK-UBSAN: call void @__ubsan_handle_type_mismatch(i8* bitcast ({{.*}} @[[LINE_600]] to i8*), i64 %{{.*}})
160 
161   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
162   // CHECK-TRAP-NEXT: unreachable
163 #line 600
164   *p = q;
165 }
166 
167 struct S { int k; };
168 
169 // CHECK-COMMON-LABEL: @member_access
170 int *member_access(struct S *p) {
171   // CHECK-UBSAN: call void @__ubsan_handle_type_mismatch(i8* bitcast ({{.*}} @[[LINE_700]] to i8*), i64 %{{.*}})
172 
173   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
174   // CHECK-TRAP-NEXT: unreachable
175 #line 700
176   return &p->k;
177 }
178 
179 // CHECK-COMMON-LABEL: @signed_overflow
180 int signed_overflow(int a, int b) {
181   // CHECK-UBSAN:      %[[ARG1:.*]] = zext
182   // CHECK-UBSAN-NEXT: %[[ARG2:.*]] = zext
183   // CHECK-UBSAN-NEXT: call void @__ubsan_handle_add_overflow(i8* bitcast ({{.*}} @[[LINE_800]] to i8*), i64 %[[ARG1]], i64 %[[ARG2]])
184 
185   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
186   // CHECK-TRAP-NEXT: unreachable
187 #line 800
188   return a + b;
189 }
190 
191 // CHECK-COMMON-LABEL: @no_return
192 int no_return() {
193   // Reaching the end of a noreturn function is fine in C.
194   // FIXME: If the user explicitly requests -fsanitize=return, we should catch
195   //        that here even though it's not undefined behavior.
196   // CHECK-COMMON-NOT: call
197   // CHECK-COMMON-NOT: unreachable
198   // CHECK-COMMON: ret i32
199 }
200 
201 // CHECK-UBSAN-LABEL: @vla_bound
202 void vla_bound(int n) {
203   // CHECK-UBSAN:      icmp sgt i32 %[[PARAM:.*]], 0
204   //
205   // CHECK-UBSAN:      %[[ARG:.*]] = zext i32 %[[PARAM]] to i64
206   // CHECK-UBSAN-NEXT: call void @__ubsan_handle_vla_bound_not_positive(i8* bitcast ({{.*}} @[[LINE_900]] to i8*), i64 %[[ARG]])
207 #line 900
208   int arr[n * 3];
209 }
210 
211 // CHECK-UBSAN-LABEL: @int_float_no_overflow
212 float int_float_no_overflow(__int128 n) {
213   // CHECK-UBSAN-NOT: call void @__ubsan_handle
214   return n;
215 }
216 
217 // CHECK-COMMON-LABEL: @int_float_overflow
218 float int_float_overflow(unsigned __int128 n) {
219   // This is 2**104. FLT_MAX is 2**128 - 2**104.
220   // CHECK-COMMON: %[[INBOUNDS:.*]] = icmp ule i128 %{{.*}}, -20282409603651670423947251286016
221   // CHECK-COMMON-NEXT: br i1 %[[INBOUNDS]]
222 
223   // CHECK-UBSAN: call void @__ubsan_handle_float_cast_overflow(i8* bitcast ({{.*}} @[[LINE_1000]] to i8*),
224 
225   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
226   // CHECK-TRAP-NEXT: unreachable
227 #line 1000
228   return n;
229 }
230 
231 // CHECK-COMMON-LABEL: @int_fp16_overflow
232 void int_fp16_overflow(int n, __fp16 *p) {
233   // CHECK-COMMON: %[[GE:.*]] = icmp sge i32 %{{.*}}, -65504
234   // CHECK-COMMON: %[[LE:.*]] = icmp sle i32 %{{.*}}, 65504
235   // CHECK-COMMON: %[[INBOUNDS:.*]] = and i1 %[[GE]], %[[LE]]
236   // CHECK-COMMON-NEXT: br i1 %[[INBOUNDS]]
237 
238   // CHECK-UBSAN: call void @__ubsan_handle_float_cast_overflow(i8* bitcast ({{.*}} @[[LINE_1100]] to i8*),
239 
240   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
241   // CHECK-TRAP-NEXT: unreachable
242 #line 1100
243   *p = n;
244 }
245 
246 // CHECK-COMMON-LABEL: @float_int_overflow
247 int float_int_overflow(float f) {
248   // CHECK-COMMON: %[[GE:.*]] = fcmp ogt float %[[F:.*]], 0xC1E0000020000000
249   // CHECK-COMMON: %[[LE:.*]] = fcmp olt float %[[F]], 0x41E0000000000000
250   // CHECK-COMMON: %[[INBOUNDS:.*]] = and i1 %[[GE]], %[[LE]]
251   // CHECK-COMMON-NEXT: br i1 %[[INBOUNDS]]
252 
253   // CHECK-UBSAN: %[[CAST:.*]] = bitcast float %[[F]] to i32
254   // CHECK-UBSAN: %[[ARG:.*]] = zext i32 %[[CAST]] to i64
255   // CHECK-UBSAN: call void @__ubsan_handle_float_cast_overflow(i8* bitcast ({{.*}} @[[LINE_1200]] to i8*), i64 %[[ARG]]
256 
257   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
258   // CHECK-TRAP-NEXT: unreachable
259 #line 1200
260   return f;
261 }
262 
263 // CHECK-COMMON-LABEL: @long_double_int_overflow
264 int long_double_int_overflow(long double ld) {
265   // CHECK-UBSAN: alloca x86_fp80
266 
267   // CHECK-COMMON: %[[GE:.*]] = fcmp ogt x86_fp80 %[[F:.*]], 0xKC01E800000010000000
268   // CHECK-COMMON: %[[LE:.*]] = fcmp olt x86_fp80 %[[F]], 0xK401E800000000000000
269   // CHECK-COMMON: %[[INBOUNDS:.*]] = and i1 %[[GE]], %[[LE]]
270   // CHECK-COMMON-NEXT: br i1 %[[INBOUNDS]]
271 
272   // CHECK-UBSAN: store x86_fp80 %[[F]], x86_fp80* %[[ALLOCA:.*]], !nosanitize
273   // CHECK-UBSAN: %[[ARG:.*]] = ptrtoint x86_fp80* %[[ALLOCA]] to i64
274   // CHECK-UBSAN: call void @__ubsan_handle_float_cast_overflow(i8* bitcast ({{.*}} @[[LINE_1300]] to i8*), i64 %[[ARG]]
275 
276   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
277   // CHECK-TRAP-NEXT: unreachable
278 #line 1300
279   return ld;
280 }
281 
282 // CHECK-COMMON-LABEL: @float_uint_overflow
283 unsigned float_uint_overflow(float f) {
284   // CHECK-COMMON: %[[GE:.*]] = fcmp ogt float %[[F:.*]], -1.{{0*}}e+00
285   // CHECK-COMMON: %[[LE:.*]] = fcmp olt float %[[F]], 0x41F0000000000000
286   // CHECK-COMMON: %[[INBOUNDS:.*]] = and i1 %[[GE]], %[[LE]]
287   // CHECK-COMMON-NEXT: br i1 %[[INBOUNDS]]
288 
289   // CHECK-UBSAN: call void @__ubsan_handle_float_cast_overflow(i8* bitcast ({{.*}} @[[LINE_1400]] to i8*),
290 
291   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
292   // CHECK-TRAP-NEXT: unreachable
293 #line 1400
294   return f;
295 }
296 
297 // CHECK-COMMON-LABEL: @fp16_char_overflow
298 signed char fp16_char_overflow(__fp16 *p) {
299   // CHECK-COMMON: %[[GE:.*]] = fcmp ogt float %[[F:.*]], -1.29{{0*}}e+02
300   // CHECK-COMMON: %[[LE:.*]] = fcmp olt float %[[F]], 1.28{{0*}}e+02
301   // CHECK-COMMON: %[[INBOUNDS:.*]] = and i1 %[[GE]], %[[LE]]
302   // CHECK-COMMON-NEXT: br i1 %[[INBOUNDS]]
303 
304   // CHECK-UBSAN: call void @__ubsan_handle_float_cast_overflow(i8* bitcast ({{.*}} @[[LINE_1500]] to i8*),
305 
306   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
307   // CHECK-TRAP-NEXT: unreachable
308 #line 1500
309   return *p;
310 }
311 
312 // CHECK-COMMON-LABEL: @float_float_overflow
313 float float_float_overflow(double f) {
314   // CHECK-COMMON: %[[F:.*]] = call double @llvm.fabs.f64(
315   // CHECK-COMMON: %[[GE:.*]] = fcmp ogt double %[[F]], 0x47EFFFFFE0000000
316   // CHECK-COMMON: %[[LE:.*]] = fcmp olt double %[[F]], 0x7FF0000000000000
317   // CHECK-COMMON: %[[OUTOFBOUNDS:.*]] = and i1 %[[GE]], %[[LE]]
318   // CHECK-COMMON: %[[INBOUNDS:.*]] = xor i1 %[[OUTOFBOUNDS]], true
319   // CHECK-COMMON-NEXT: br i1 %[[INBOUNDS]]
320 
321   // CHECK-UBSAN: call void @__ubsan_handle_float_cast_overflow(i8* bitcast ({{.*}} @[[LINE_1600]] to i8*),
322 
323   // CHECK-TRAP:      call void @llvm.trap() [[NR_NUW]]
324   // CHECK-TRAP-NEXT: unreachable
325 #line 1600
326   return f;
327 }
328 
329 // CHECK-COMMON-LABEL:   @int_divide_overflow
330 // CHECK-OVERFLOW-LABEL: @int_divide_overflow
331 int int_divide_overflow(int a, int b) {
332   // CHECK-COMMON:         %[[ZERO:.*]] = icmp ne i32 %[[B:.*]], 0
333   // CHECK-OVERFLOW-NOT:  icmp ne i32 %{{.*}}, 0
334 
335   // CHECK-COMMON:               %[[AOK:.*]] = icmp ne i32 %[[A:.*]], -2147483648
336   // CHECK-COMMON-NEXT:          %[[BOK:.*]] = icmp ne i32 %[[B]], -1
337   // CHECK-COMMON-NEXT:          %[[OVER:.*]] = or i1 %[[AOK]], %[[BOK]]
338   // CHECK-COMMON:         %[[OK:.*]] = and i1 %[[ZERO]], %[[OVER]]
339   // CHECK-COMMON:         br i1 %[[OK]]
340 
341   // CHECK-OVERFLOW:      %[[AOK:.*]] = icmp ne i32 %[[A:.*]], -2147483648
342   // CHECK-OVERFLOW-NEXT: %[[BOK:.*]] = icmp ne i32 %[[B:.*]], -1
343   // CHECK-OVERFLOW-NEXT: %[[OK:.*]] = or i1 %[[AOK]], %[[BOK]]
344   // CHECK-OVERFLOW:      br i1 %[[OK]]
345 
346   // CHECK-TRAP: call void @llvm.trap() [[NR_NUW]]
347   // CHECK-TRAP: unreachable
348   return a / b;
349 
350   // CHECK-COMMON:          }
351   // CHECK-OVERFLOW: }
352 }
353 
354 // CHECK-COMMON-LABEL: @sour_bool
355 _Bool sour_bool(_Bool *p) {
356   // CHECK-COMMON: %[[OK:.*]] = icmp ule i8 {{.*}}, 1
357   // CHECK-COMMON: br i1 %[[OK]]
358 
359   // CHECK-UBSAN: call void @__ubsan_handle_load_invalid_value(i8* bitcast ({{.*}}), i64 {{.*}})
360 
361   // CHECK-TRAP: call void @llvm.trap() [[NR_NUW]]
362   // CHECK-TRAP: unreachable
363   return *p;
364 }
365 
366 // CHECK-COMMON-LABEL: @ret_nonnull
367 __attribute__((returns_nonnull))
368 int *ret_nonnull(int *a) {
369   // CHECK-COMMON: [[OK:%.*]] = icmp ne i32* {{.*}}, null
370   // CHECK-COMMON: br i1 [[OK]]
371 
372   // CHECK-UBSAN: call void @__ubsan_handle_nonnull_return
373 
374   // CHECK-TRAP: call void @llvm.trap() [[NR_NUW]]
375   // CHECK-TRAP: unreachable
376   return a;
377 }
378 
379 // CHECK-COMMON-LABEL: @call_decl_nonnull
380 __attribute__((nonnull)) void decl_nonnull(int *a);
381 void call_decl_nonnull(int *a) {
382   // CHECK-COMMON: [[OK:%.*]] = icmp ne i32* {{.*}}, null
383   // CHECK-COMMON: br i1 [[OK]]
384 
385   // CHECK-UBSAN: call void @__ubsan_handle_nonnull_arg
386 
387   // CHECK-TRAP: call void @llvm.trap() [[NR_NUW]]
388   // CHECK-TRAP: unreachable
389   decl_nonnull(a);
390 }
391 
392 extern void *memcpy (void *, const void *, unsigned) __attribute__((nonnull(1, 2)));
393 
394 // CHECK-COMMON-LABEL: @call_memcpy_nonnull
395 void call_memcpy_nonnull(void *p, void *q, int sz) {
396   // CHECK-COMMON: icmp ne i8* {{.*}}, null
397   // CHECK-UBSAN: call void @__ubsan_handle_nonnull_arg
398   // CHECK-TRAP: call void @llvm.trap()
399 
400   // CHECK-COMMON: icmp ne i8* {{.*}}, null
401   // CHECK-UBSAN: call void @__ubsan_handle_nonnull_arg
402   // CHECK-TRAP: call void @llvm.trap()
403   memcpy(p, q, sz);
404 }
405 
406 extern void *memmove (void *, const void *, unsigned) __attribute__((nonnull(1, 2)));
407 
408 // CHECK-COMMON-LABEL: @call_memmove_nonnull
409 void call_memmove_nonnull(void *p, void *q, int sz) {
410   // CHECK-COMMON: icmp ne i8* {{.*}}, null
411   // CHECK-UBSAN: call void @__ubsan_handle_nonnull_arg
412   // CHECK-TRAP: call void @llvm.trap()
413 
414   // CHECK-COMMON: icmp ne i8* {{.*}}, null
415   // CHECK-UBSAN: call void @__ubsan_handle_nonnull_arg
416   // CHECK-TRAP: call void @llvm.trap()
417   memmove(p, q, sz);
418 }
419 
420 // CHECK-COMMON-LABEL: @call_nonnull_variadic
421 __attribute__((nonnull)) void nonnull_variadic(int a, ...);
422 void call_nonnull_variadic(int a, int *b) {
423   // CHECK-COMMON: [[OK:%.*]] = icmp ne i32* {{.*}}, null
424   // CHECK-COMMON: br i1 [[OK]]
425 
426   // CHECK-UBSAN: call void @__ubsan_handle_nonnull_arg
427   // CHECK-UBSAN-NOT: __ubsan_handle_nonnull_arg
428 
429   // CHECK-COMMON: call void (i32, ...) @nonnull_variadic
430   nonnull_variadic(a, b);
431 }
432 
433 // CHECK-UBSAN: ![[WEIGHT_MD]] = !{!"branch_weights", i32 1048575, i32 1}
434 
435 // CHECK-TRAP: attributes [[NR_NUW]] = { noreturn nounwind }
436