public inbox for gcc-bugs@sourceware.org
help / color / mirror / Atom feed
* [Bug sanitizer/115273] New: [12 Regression] passing zero to ctz() check missing
@ 2024-05-29 10:37 bic60176 at gmail dot com
  2024-05-29 10:38 ` [Bug sanitizer/115273] " bic60176 at gmail dot com
                   ` (4 more replies)
  0 siblings, 5 replies; 6+ messages in thread
From: bic60176 at gmail dot com @ 2024-05-29 10:37 UTC (permalink / raw)
  To: gcc-bugs

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=115273

            Bug ID: 115273
           Summary: [12 Regression] passing zero to ctz() check missing
           Product: gcc
           Version: 12.3.0
            Status: UNCONFIRMED
          Severity: normal
          Priority: P3
         Component: sanitizer
          Assignee: unassigned at gcc dot gnu.org
          Reporter: bic60176 at gmail dot com
                CC: dodji at gcc dot gnu.org, dvyukov at gcc dot gnu.org,
                    jakub at gcc dot gnu.org, kcc at gcc dot gnu.org
  Target Milestone: ---

Created attachment 58305
  --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=58305&action=edit
testcase

OS: Ubuntu 22.04.3 LTS
We found a case that UBSAN missed checking if zero is passed to __builtin_ctz()
when compiling with gcc-12.3.0.
When compiling with gcc-11.4.0, gcc-13.2.0, and gcc-14.1.0, UBSAN can detect
the undefined behavior.

$ ../compiler-builds/gcc-12.3.0_build/bin/gcc -fsanitize=undefined -g -lgcc_s
-I/home/csmith/include/csmith-2.3.0 testcase.c -o exec

$ timeout 1s ./exec 2>exec.err

$ cat exec.err

$ ../compiler-builds/gcc-11.4.0_build/bin/gcc -fsanitize=undefined -g -lgcc_s
-I/home/csmith/include/csmith-2.3.0 testcase.c -o exec

$ timeout 1s ./exec 2>exec.err
testcase.c:957:44: runtime error: passing zero to ctz(), which is not a valid
argument testcase.c:997:25: runtime error: passing zero to ctz(), which is not
a valid argument testcase.c:957: runtime error: passing zero to ctz(), which is
not a valid argument testcase.c:997: runtime error: passing zero to ctz(),
which is not a valid argument testcase.c:957: runtime error: passing zero to
ctz(), which is not a valid argument testcase.c:997: runtime error: passing
zero to ctz(), which is not a valid argument testcase.c:957: runtime error:
passing zero to ctz(), which is not a valid argument testcase.c:997: runtime
error: passing zero to ctz(), which is not a valid argument testcase.c:957:
runtime error: passing zero to ctz(), which is not a valid argument
testcase.c:997: runtime error: passing zero to ctz(), which is not a valid
argument testcase.c:957: runtime error: passing zero to ctz(), which is not a
valid argument testcase.c:997: runtime error: passing zero to ctz(), which is
not a valid argument testcase.c:957: runtime error: passing zero to ctz(),
which is not a valid argument testcase.c:997: runtime error: passing zero to
ctz(), which is not a valid argument testcase.c:957: runtime error: passing
zero to ctz(), which is not a valid argument testcase.c:997: runtime error:
passing zero to ctz(), which is not a valid argument testcase.c:957: runtime
error: passing zero to ctz(), which is not a valid argument testcase.c:997:
runtime error: passing zero to ctz(), which is not a valid argument
testcase.c:957: runtime error: passing zero to ctz(), which is not a valid
argument testcase.c:997: runtime error: passing zero to ctz(), which is not a
valid argument

^ permalink raw reply	[flat|nested] 6+ messages in thread
end of thread, other threads:[~2024-06-02  1:52 UTC | newest]

Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-05-29 10:37 [Bug sanitizer/115273] New: [12 Regression] passing zero to ctz() check missing bic60176 at gmail dot com
2024-05-29 10:38 ` [Bug sanitizer/115273] " bic60176 at gmail dot com
2024-05-29 11:20 ` rguenth at gcc dot gnu.org
2024-06-02  1:45 ` pinskia at gcc dot gnu.org
2024-06-02  1:46 ` pinskia at gcc dot gnu.org
2024-06-02  1:51 ` pinskia at gcc dot gnu.org

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).