derek.holloway
7502bf64a4
CodeQL / Analyze (actions) (push) Canceled after 0s
CodeQL / Analyze (python) (push) Canceled after 0s
pre-commit / pre-commit (push) Canceled after 0s
Multi-Arch CI / setup (push) Canceled after 0s
Publish build_manylinux_x86_64 images / publish_build_manylinux_x86_64 (push) Canceled after 0s
Setup (Multi-Arch) / setup (push) Canceled after 0s
Multi-Arch CI / Linux::${{ fromJSON(needs.setup.outputs.linux_build_config || '{}').build_variant_label || 'skip' }} (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Publish no_rocm_image_ubi10 image / publish_no_rocm_image_ubi10 (push) Canceled after 0s
Multi-Arch CI / Windows::${{ fromJSON(needs.setup.outputs.windows_build_config || '{}').build_variant_label || 'skip' }} (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Multi-Arch CI / Manifest Diff (push) Canceled after 0s
TheRock Manifest Diff Report / Generate Manifest Diff Report (push) Canceled after 0s
Multi-Arch CI / CI Summary (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04 (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04_ocl_rt images / publish_no_rocm_image_ubuntu24_04_ocl_rt (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_rocgdb (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04_rocgdb images / publish_no_rocm_image_ubuntu24_04_rocgdb (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_ocl_rt (push) Canceled after 0s
Publish TheRock Docker image / build-and-push-image (push) Canceled after 0s
Unit Tests / Unit Tests :: ubuntu-24.04 (push) Canceled after 0s
Unit Tests / Unit Tests :: windows-2022 (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_media (push) Canceled after 0s
Unit Tests / Unit Tests Summary (push) Canceled after 0s
Publish no_rocm_image_ubuntu24_04 images / publish_no_rocm_image_ubuntu24_04_openmpi (push) Canceled after 0s
75 lines
2.4 KiB
ArmAsm
75 lines
2.4 KiB
ArmAsm
// RUN: %clang %cflags -march=armv8.3-a -mbranch-protection=pac-ret %s %p/../../Inputs/asm_main.c -o %t.exe
|
|
// RUN: llvm-bolt-binary-analysis --scanners=ptrauth-pac-ret %t.exe 2>&1 | FileCheck %s
|
|
|
|
|
|
// Verify that we can also detect gadgets across basic blocks
|
|
|
|
.globl f_crossbb1
|
|
.type f_crossbb1,@function
|
|
f_crossbb1:
|
|
paciasp
|
|
stp x29, x30, [sp, #-16]!
|
|
ldp x29, x30, [sp], #16
|
|
cbnz x0, 1f
|
|
autiasp
|
|
1:
|
|
ret
|
|
.size f_crossbb1, .-f_crossbb1
|
|
// CHECK-LABEL: GS-PAUTH: non-protected ret found in function f_crossbb1, basic block {{[^,]+}}, at address
|
|
// CHECK-NEXT: The instruction is {{[0-9a-f]+}}: ret
|
|
// CHECK-NEXT: The 1 instructions that write to the affected registers after any authentication are:
|
|
// CHECK-NEXT: 1. {{[0-9a-f]+}}: ldp x29, x30, [sp], #0x10
|
|
|
|
// A test that checks that the dataflow state tracking across when merging BBs
|
|
// seems to work:
|
|
.globl f_mergebb1
|
|
.type f_mergebb1,@function
|
|
f_mergebb1:
|
|
paciasp
|
|
2:
|
|
stp x29, x30, [sp, #-16]!
|
|
ldp x29, x30, [sp], #16
|
|
sub x0, x0, #1
|
|
cbnz x0, 1f
|
|
autiasp
|
|
b 2b
|
|
1:
|
|
ret
|
|
.size f_mergebb1, .-f_mergebb1
|
|
// CHECK-LABEL: GS-PAUTH: non-protected ret found in function f_mergebb1, basic block {{[^,]+}}, at address
|
|
// CHECK-NEXT: The instruction is {{[0-9a-f]+}}: ret
|
|
// CHECK-NEXT: The 1 instructions that write to the affected registers after any authentication are:
|
|
// CHECK-NEXT: 1. {{[0-9a-f]+}}: ldp x29, x30, [sp], #0x10
|
|
|
|
.globl f_shrinkwrapping
|
|
.type f_shrinkwrapping,@function
|
|
f_shrinkwrapping:
|
|
cbz x0, 1f
|
|
paciasp
|
|
stp x29, x30, [sp, #-16]!
|
|
ldp x29, x30, [sp], #16
|
|
autiasp
|
|
1:
|
|
ret
|
|
.size f_shrinkwrapping, .-f_shrinkwrapping
|
|
// CHECK-NOT: f_shrinkwrapping
|
|
|
|
.globl f_multi_auth_insts
|
|
.type f_multi_auth_insts,@function
|
|
f_multi_auth_insts:
|
|
paciasp
|
|
stp x29, x30, [sp, #-16]!
|
|
ldp x29, x30, [sp], #16
|
|
cbnz x0, 1f
|
|
autibsp
|
|
b 2f
|
|
1:
|
|
autiasp
|
|
2:
|
|
ret
|
|
.size f_multi_auth_insts, .-f_multi_auth_insts
|
|
// CHECK-NOT: f_multi_auth_insts
|
|
|
|
// TODO: also verify that false negatives exist in across-BB gadgets in functions
|
|
// for which bolt cannot reconstruct the call graph.
|