Turn an assert into report_fatal_error since it's reachable based on user input
authorFilipe Cabecinhas <me@filcab.net>
Wed, 29 Apr 2015 01:58:31 +0000 (01:58 +0000)
committerFilipe Cabecinhas <me@filcab.net>
Wed, 29 Apr 2015 01:58:31 +0000 (01:58 +0000)
Bug found with AFL fuzz.

llvm-svn: 236076

llvm/lib/Bitcode/Reader/BitstreamReader.cpp
llvm/test/Bitcode/Inputs/invalid-array-op-not-2nd-to-last.bc [new file with mode: 0644]
llvm/test/Bitcode/invalid.test

index 2f34532..dff6d18 100644 (file)
@@ -199,7 +199,8 @@ unsigned BitstreamCursor::readRecord(unsigned AbbrevID,
       unsigned NumElts = ReadVBR(6);
 
       // Get the element encoding.
-      assert(i+2 == e && "array op not second to last?");
+      if (i+2 != e)
+       report_fatal_error("Array op not second to last");
       const BitCodeAbbrevOp &EltEnc = Abbv->getOperandInfo(++i);
       if (EltEnc.getEncoding() == BitCodeAbbrevOp::Array ||
           EltEnc.getEncoding() == BitCodeAbbrevOp::Blob)
diff --git a/llvm/test/Bitcode/Inputs/invalid-array-op-not-2nd-to-last.bc b/llvm/test/Bitcode/Inputs/invalid-array-op-not-2nd-to-last.bc
new file mode 100644 (file)
index 0000000..a4b94f8
Binary files /dev/null and b/llvm/test/Bitcode/Inputs/invalid-array-op-not-2nd-to-last.bc differ
index 6dfab58..41173d1 100644 (file)
@@ -105,3 +105,8 @@ RUN: not llvm-dis -disable-output %p/Inputs/invalid-vector-element-type.bc 2>&1
 RUN:   FileCheck --check-prefix=ELEMENT-TYPE %s
 
 ELEMENT-TYPE: Invalid type
+
+RUN: not llvm-dis -disable-output %p/Inputs/invalid-array-op-not-2nd-to-last.bc 2>&1 | \
+RUN:   FileCheck --check-prefix=ARRAY-NOT-2LAST %s
+
+ARRAY-NOT-2LAST: Array op not second to last