| Issue |
176455
|
| Summary |
Verifier crashes on llvm.aarch64.neon.smull intrinsic with invalid return type
|
| Labels |
new issue
|
| Assignees |
|
| Reporter |
sairam2661
|
**Test Commit**
[0b2f3cfb72a76fa90f3ec2a234caabe0d0712590](https://github.com/llvm/llvm-project/commit/0b2f3cfb72a76fa90f3ec2a234caabe0d0712590)
**Description**
The verifier crashes with an assertion failure instead of gracefully rejecting invalid IR when `llvm.aarch64.neon.smull` is called with a `<2 x i1>` return type.
**Steps to reproduce**
- Minimized test case, `input.ll`
```
define <2 x i1> @test(<2 x i32> %b) {
%2 = tail call <2 x i1> @llvm.aarch64.neon.smull.v2i1(<2 x i32> %b, <2 x i32> %b)
ret <2 x i1> %2
}
```
**Command**
```
opt -passes=verify -S input.ll
```
**Output**
```
opt: /workdir/llvm-project/llvm/include/llvm/IR/DerivedTypes.h:517: static VectorType *llvm::VectorType::getTruncatedElementVectorType(VectorType *): Assertion `(EltBits & 1) == 0 && "Cannot truncate vector element with odd bit-width"' failed.
PLEASE submit a bug report to https://github.com/llvm/llvm-project/issues/ and include the crash backtrace and instructions to reproduce the bug.
Stack dump:
0. Program arguments: /workdir/llvm-project/build-libcxx/bin/opt -passes=verify -S /tmp/tmpxp45zjtx.ll
#0 0x00007f0a75ee7728 llvm::sys::PrintStackTrace(llvm::raw_ostream&, int) (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMSupport.so.22.0git+0x1d3728)
#1 0x00007f0a75ee49d5 llvm::sys::RunSignalHandlers() (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMSupport.so.22.0git+0x1d09d5)
#2 0x00007f0a75ee83c6 SignalHandler(int, siginfo_t*, void*) Signals.cpp:0:0
#3 0x00007f0a80010420 __restore_rt (/lib/x86_64-linux-gnu/libpthread.so.0+0x14420)
#4 0x00007f0a759fb00b raise /build/glibc-B3wQXB/glibc-2.31/signal/../sysdeps/unix/sysv/linux/raise.c:51:1
#5 0x00007f0a759da859 abort /build/glibc-B3wQXB/glibc-2.31/stdlib/abort.c:81:7
#6 0x00007f0a759da729 get_sysdep_segment_value /build/glibc-B3wQXB/glibc-2.31/intl/loadmsgcat.c:509:8
#7 0x00007f0a759da729 _nl_load_domain /build/glibc-B3wQXB/glibc-2.31/intl/loadmsgcat.c:970:34
#8 0x00007f0a759ebfd6 (/lib/x86_64-linux-gnu/libc.so.6+0x33fd6)
#9 0x00007f0a762e8a32 (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMCore.so.22.0git+0x24fa32)
#10 0x00007f0a762e6803 matchIntrinsicType(llvm::Type*, llvm::ArrayRef<llvm::Intrinsic::IITDescriptor>&, llvm::SmallVectorImpl<llvm::Type*>&, llvm::SmallVectorImpl<std::__1::pair<llvm::Type*, llvm::ArrayRef<llvm::Intrinsic::IITDescriptor>>>&, bool) Intrinsics.cpp:0:0
#11 0x00007f0a762e5ea5 llvm::Intrinsic::matchIntrinsicSignature(llvm::FunctionType*, llvm::ArrayRef<llvm::Intrinsic::IITDescriptor>&, llvm::SmallVectorImpl<llvm::Type*>&) (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMCore.so.22.0git+0x24cea5)
#12 0x00007f0a762e6fe9 llvm::Intrinsic::getIntrinsicSignature(unsigned int, llvm::FunctionType*, llvm::SmallVectorImpl<llvm::Type*>&) (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMCore.so.22.0git+0x24dfe9)
#13 0x00007f0a76810edf llvm::LLParser::validateEndOfModule(bool) (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMAsmParser.so.22.0git+0x34edf)
#14 0x00007f0a7680fe3a llvm::LLParser::Run(bool, llvm::function_ref<std::__1::optional<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>> (llvm::StringRef, llvm::StringRef)>) (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMAsmParser.so.22.0git+0x33e3a)
#15 0x00007f0a76861642 parseAssemblyInto(llvm::MemoryBufferRef, llvm::Module*, llvm::ModuleSummaryIndex*, llvm::SMDiagnostic&, llvm::SlotMapping*, bool, llvm::function_ref<std::__1::optional<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>> (llvm::StringRef, llvm::StringRef)>, llvm::AsmParserContext*) Parser.cpp:0:0
#16 0x00007f0a76861802 llvm::parseAssembly(llvm::MemoryBufferRef, llvm::SMDiagnostic&, llvm::LLVMContext&, llvm::SlotMapping*, llvm::function_ref<std::__1::optional<std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char>>> (llvm::StringRef, llvm::StringRef)>, llvm::AsmParserContext*) (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMAsmParser.so.22.0git+0x85802)
#17 0x00007f0a768993b8 llvm::parseIR(llvm::MemoryBufferRef, llvm::SMDiagnostic&, llvm::LLVMContext&, llvm::ParserCallbacks, llvm::AsmParserContext*) (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMIRReader.so.22.0git+0x33b8)
#18 0x00007f0a76899cdf llvm::parseIRFile(llvm::StringRef, llvm::SMDiagnostic&, llvm::LLVMContext&, llvm::ParserCallbacks, llvm::AsmParserContext*) (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMIRReader.so.22.0git+0x3cdf)
#19 0x00007f0a7ffd536e optMain (/workdir/llvm-project/build-libcxx/bin/../lib/libLLVMOptDriver.so.22.0git+0x3636e)
#20 0x00007f0a759dc083 __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:342:3
#21 0x000055fe509f807e _start (/workdir/llvm-project/build-libcxx/bin/opt+0x207e)
```
P.S. This is a fuzzer generated test case, but I'm not sure on how to label the issue with it.
![]()
_______________________________________________
llvm-bugs mailing list
[email protected]
https://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-bugs
