[Bug sanitizer/103519] New: Address sanitizer check missing for AVX512 masked load

[Bug sanitizer/103519] New: Address sanitizer check missing for AVX512 masked load

[dlong at cadence dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103519

            Bug ID: 103519
           Summary: Address sanitizer check missing for AVX512 masked load
           Product: gcc
           Version: 11.2.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: sanitizer
          Assignee: unassigned at gcc dot gnu.org
          Reporter: dlong at cadence dot com
                CC: dodji at gcc dot gnu.org, dvyukov at gcc dot gnu.org,
                    jakub at gcc dot gnu.org, kcc at gcc dot gnu.org, marxin at gcc dot gnu.org
  Target Milestone: ---

Example with generated assembly available here: https://godbolt.org/z/WTo5sGThb

In this:

#include <x86intrin.h>

__m512d v;

void
access(float const *addr)
{
  __m512d val;
  __m256 val1;
  __mmask8 const k3 = 0x3f;
  val1=_mm256_maskz_loadu_ps(k3, addr);
  val=_mm512_cvtps_pd(val1);
  _mm512_storeu_pd((double *)&v, val);
}

when compiled with AVX512 instructions and -fsanitize=address, no address check
is generated for the maskz_load.

(FWIW, if the mask is folded into the conversion using maskz_cvtps_pd instead
then a check is generated.  However it's a check for a full 32-byte access even
though the CPU will only actually access 24-bytes due to the mask.)

[Bug sanitizer/103519] Address sanitizer check missing for AVX512 masked load

[dlong at cadence dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103519

David Long <dlong at cadence dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dlong at cadence dot com

--- Comment #1 from David Long <dlong at cadence dot com> ---
(In case the godbolt link happens to disappear at some point, compilation
options are -mavx512f -mavx512vl -mfma -mbmi2 -O -fsanitize=address)

[Bug sanitizer/103519] Address sanitizer check missing for AVX512 masked load

[crazylht at gmail dot com]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103519

--- Comment #2 from Hongtao.liu <crazylht at gmail dot com> ---
get_mem_refs_of_builtin_call doesn't handle target-specific builtins.

[Bug sanitizer/103519] Address sanitizer check missing for AVX512 masked load

[rguenth at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103519

Richard Biener <rguenth at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
   Last reconfirmed|                            |2021-12-02
     Ever confirmed|0                           |1
             Target|                            |x86_64-*-*

--- Comment #3 from Richard Biener <rguenth at gcc dot gnu.org> ---
There's currently no way to do that.

[Bug sanitizer/103519] Address sanitizer check missing for AVX512 masked load

[jakub at gcc dot gnu.org]

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103519

--- Comment #4 from Jakub Jelinek <jakub at gcc dot gnu.org> ---
There could be a target hook for that, or the builtin expansion could emit the
sanitization code itself.  But I bet we have hundreds of various load intrinsic
builtins on various targets...