RPCS3/llvm-mirror
1
0
Fork 0
mirror of https://github.com/RPCS3/llvm-mirror.git synced 2024-10-19 02:52:53 +02:00
Code Issues Projects Releases Wiki Activity

[BitcodeReader] Change assert to report_fatal_error

Browse Source 
It can be triggered by user input.

Bug found with AFL fuzz.

llvm-svn: 238272
This commit is contained in:
Filipe Cabecinhas 2015-05-27 01:05:40 +00:00
parent 41dd91ebe0
commit 829cff9ed4
3 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
lib/Bitcode/Reader/BitcodeReader.cpp
View File

@ -785,7 +785,8 @@ Constant *BitcodeReaderValueList::getConstantFwdRef(unsigned Idx,
resize(Idx + 1);
if (Value *V = ValuePtrs[Idx]) {
assert(Ty == V->getType() && "Type mismatch in constant table!");
if (Ty != V->getType())
report_fatal_error("Type mismatch in constant table!");
return cast<Constant>(V);
}

BIN
test/Bitcode/Inputs/invalid-fwdref-type-mismatch-2.bc Normal file
View File

Binary file not shown.

5
test/Bitcode/invalid.test
View File

@ -99,6 +99,11 @@ RUN: FileCheck --check-prefix=FWDREF-TYPE %s
FWDREF-TYPE: Invalid record
RUN: not llvm-dis -disable-output %p/Inputs/invalid-fwdref-type-mismatch-2.bc 2>&1 | \
RUN: FileCheck --check-prefix=FWDREF-TYPE-MISMATCH %s
FWDREF-TYPE-MISMATCH: Type mismatch in constant table!
RUN: not llvm-dis -disable-output %p/Inputs/invalid-array-element-type.bc 2>&1 | \
RUN: FileCheck --check-prefix=ELEMENT-TYPE %s
RUN: not llvm-dis -disable-output %p/Inputs/invalid-vector-element-type.bc 2>&1 | \