safely optimizing casts between
play

Safely Optimizing Casts between Pointers and Integers Juneyoung Lee - PowerPoint PPT Presentation

Jan 18, 2023 •2.54k likes •3.34k views

EuroLLVM19 SRC Safely Optimizing Casts between Pointers and Integers Juneyoung Lee Seoul National Univ. Chung-Kil Hur MPI-SWS Ralf Jung Zhengyang Liu University of Utah John Regehr Nuno P. Lopes Microsoft Research 1 Overview

  1. EuroLLVM’19 SRC Safely Optimizing Casts between Pointers and Integers Juneyoung Lee Seoul National Univ. Chung-Kil Hur MPI-SWS Ralf Jung Zhengyang Liu University of Utah John Regehr Nuno P. Lopes Microsoft Research 1

  2. Overview Assembly LLVM IR (x86-64, ARM, ..) [0, 2 64 ) [0, 2 64 ) + provenance Pointer [0, 2 64 ) [0, 2 64 ) + ? Integer 2

  3. Problem: Pointer as a Pure Integer We use C syntax for LLVM IR code for readability char p[1],q[1] = {0}; int ip = (int)(p+1); int iq = (int)q; if (iq == ip) { *(p+1) = 10; print(q[0]); } * https://godbolt.org/z/9eNt6w 3

  4. Problem: Pointer as a Pure Integer We use C syntax for LLVM IR code for readability char p[1],q[1] = {0}; int ip = (int)(p+1); int iq = (int)q; if (iq == ip) { *(p+1) = 10; print(q[0]); } * https://godbolt.org/z/9eNt6w 3

  5. Problem: Pointer as a Pure Integer We use C syntax for LLVM IR code for readability char p[1],q[1] = {0}; int ip = (int)(p+1); int iq = (int)q; if (iq == ip) { *(p+1) = 10; print(q[0]); } * https://godbolt.org/z/9eNt6w 3

  6. Problem: Pointer as a Pure Integer We use C syntax for LLVM IR code for readability char p[1],q[1] = {0}; int ip = (int)(p+1); int iq = (int)q; if (iq == ip) { *(p+1) = 10; print(q[0]); } * https://godbolt.org/z/9eNt6w 3

  7. Problem: Pointer as a Pure Integer We use C syntax for LLVM IR code for readability char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 3

  8. Problem: Pointer as a Pure Integer Memory: 0x0 char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 3

  9. Problem: Pointer as a Pure Integer - Memory: 0x0 0x100 0x100 char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 3

  10. Problem: Pointer as a Pure Integer 0 - Memory: 0x0 0x100 0x101 0x100 0x101 char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 3

  11. Problem: Pointer as a Pure Integer 0 - Memory: 0x0 0x100 0x101 0x100 0x101 char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; true if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 3

  12. Problem: Pointer as a Pure Integer 0 - Memory: 0x0 0x100 0x101 0x100 0x101 char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); 0x101 int iq = (int)q; int iq = (int)q; true if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 3

  13. Problem: Pointer as a Pure Integer 0 - 10 Memory: 0x0 0x100 0x101 0x100 0x101 char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); 0x101 int iq = (int)q; int iq = (int)q; true if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 3

  14. Problem: Pointer as a Pure Integer 0 - 10 Memory: 0x0 0x100 0x101 0x100 0x101 char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); 0x101 int iq = (int)q; int iq = (int)q; true if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 3

  15. Problem: Pointer as a Pure Integer 0 - 10 Memory: 0x0 0x100 0x101 0x100 0x101 char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); 0x101 int iq = (int)q; int iq = (int)q; true if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } 10 * https://godbolt.org/z/9eNt6w 3

  16. Problem: Pointer as a Pure Integer 0 - 10 Memory: 0x0 0x100 0x101 0x100 0x101 char p[1],q[1] = {0}; Problem with “pointer as a pure integer” char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); 0x101 int iq = (int)q; int iq = (int)q; true if (iq == ip) { if (iq == ip) { Cannot protect accesses from different blocks *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } 10 * https://godbolt.org/z/9eNt6w 3

  17. LLVM’s Solution: Pointers have Provenance - 0 0 Memory: 0x0 0x100 0x101 0x100 0x101 char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 4

  18. LLVM’s Solution: Pointers have Provenance Provenance Provenance - 0 p: - 0 0 q: 0 Memory: 0x0 0x100 0x100 0x101 0x101 (p,0x100) (q,0x101) char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 4

  19. LLVM’s Solution: Pointers have Provenance Provenance Provenance - 0 p: - 0 0 q: 0 Memory: 0x0 0x100 0x100 0x101 0x101 (p,0x100) (q,0x101) char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; true if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } * https://godbolt.org/z/9eNt6w 4

  20. LLVM’s Solution: Pointers have Provenance Provenance Provenance - 0 p: - 0 0 q: 0 Memory: 0x0 0x100 0x100 0x101 0x101 (p,0x100) (q,0x101) char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; true if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } (p,0x101) * https://godbolt.org/z/9eNt6w 4

  21. LLVM’s Solution: Pointers have Provenance Provenance Provenance - 0 p: - 0 0 q: 0 Memory: 0x0 0x100 0x100 0x101 0x101 (p,0x100) (q,0x101) char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; true if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } (p,0x101) * https://godbolt.org/z/9eNt6w 4

  22. LLVM’s Solution: Pointers have Provenance Provenance Provenance - 0 p: - 0 0 q: 0 Memory: 0x0 0x100 0x100 0x101 0x101 (p,0x100) (q,0x101) char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; true if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); Undefined Behavior } prop. } (p,0x101) because p ≠ q * https://godbolt.org/z/9eNt6w 4

  23. What about Integers? Assembly LLVM IR (x86-64, ARM, ..) [0, 2 64 ) [0, 2 64 ) + provenance Pointer Casting [0, 2 64 ) [0, 2 64 ) + ? Integer 5

  24. Miscompilation with PtrIntCast char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } 6

  25. Miscompilation with PtrIntCast char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } 6

  26. Miscompilation with PtrIntCast int. eq. char p[1],q[1]={0}; char p[1],q[1]={0}; prop. int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(char*)(int)(p+1)=10; *(char*)iq = 10; print(q[0]); print(q[0]); } } cast elim. char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; constant print(q[0]); print(0); } prop. } 6

  27. Miscompilation with PtrIntCast int. eq. char p[1],q[1]={0}; char p[1],q[1]={0}; prop. int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(char*)(int)(p+1)=10; *(char*)iq = 10; print(q[0]); print(q[0]); } } char p[1],q[1] = {0}; char p[1],q[1] = {0}; int ip = (int)(p+1); int ip = (int)(p+1); int iq = (int)q; int iq = (int)q; if (iq == ip) { if (iq == ip) { *(p+1) = 10; *(p+1) = 10; print(q[0]); print(0); } } 7

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Supplementary Material Purification of maize nucleotide pyrophosphatase/phosphodiesterase casts

Supplementary Material Purification of maize nucleotide pyrophosphatase/phosphodiesterase casts

Supplementary Material Purification of maize nucleotide pyrophosphatase/phosphodiesterase casts doubt on the existence of zeatin cis-trans isomerase in plants Tom Hluska, Marek ebela, Ren Lenobel, Ivo Frbort, Petr Galuszka

288 views • 6 slides
Ultrasound Technology and Missing Women in India: Analyses and Now-casts Based on Google

Ultrasound Technology and Missing Women in India: Analyses and Now-casts Based on Google

Ultrasound Technology and Missing Women in India: Analyses and Now-casts Based on Google Searches Ridhi Kashyap 1 , Francesco Billari 1 , Nicol` o Cavalli 1 , Eric Qian 2 , and Ingmar Weber 3 1 Nuffield College and Department of

2.38k views • 21 slides
Optimizing re me dia tio n a ppro a c he s Optimizing re me dia tio n a ppro a c he s a t mine

Optimizing re me dia tio n a ppro a c he s Optimizing re me dia tio n a ppro a c he s a t mine

Optimizing re me dia tio n a ppro a c he s Optimizing re me dia tio n a ppro a c he s a t mine site s: ho w unde rsta nding b io g e o c he mic a l pro c e sse s a nd b io g e o c he mic a l pro c e sse s a nd mo de ling c a n g uide

394 views • 26 slides
Project MOSAIC M-CASTS Whats an M-CAST A regularly scheduled but informal way to share

Project MOSAIC M-CASTS Whats an M-CAST A regularly scheduled but informal way to share

Project MOSAIC M-CASTS Whats an M-CAST A regularly scheduled but informal way to share ideas about teaching and develop collaborations for further development of those ideas. Broadcast via Internet. Most are presentations, but some

543 views • 30 slides
Semantic Casts: Contracts and Structural Subtyping in a Nominal World Robby Findler University

Semantic Casts: Contracts and Structural Subtyping in a Nominal World Robby Findler University

Semantic Casts: Contracts and Structural Subtyping in a Nominal World Robby Findler University of Chicago Matthew Flatt University of Utah Matthias Felleisen Northeastern University 1 Component marketplace - McIlroy's vision (1969) -

1.01k views • 73 slides
OUR OBJECTIVE : OPTIMIZING YOUR TRANSACTION 1 OPTIMIZING YOUR TRANSACTION, is bringing added

OUR OBJECTIVE : OPTIMIZING YOUR TRANSACTION 1 OPTIMIZING YOUR TRANSACTION, is bringing added

OUR OBJECTIVE : OPTIMIZING YOUR TRANSACTION 1 OPTIMIZING YOUR TRANSACTION, is bringing added value to you appropriate for each stage of your project. 2 p.4 Presentation of Trianon Corporate Finance Our team p.12 References p.15 p.24

288 views • 24 slides
Chatting Safely Online commonsense.org/education Shareable with attribution for noncommercial

Chatting Safely Online commonsense.org/education Shareable with attribution for noncommercial

DIGITAL CITIZENSHIP | GRADE 6 Chatting Safely Online commonsense.org/education Shareable with attribution for noncommercial use. Remixing is permitted. Essential Question How do you chat safely with people you meet online?

418 views • 17 slides
How to safely reduce Michigans $2 billion corrections budget Laura Sager Executive

How to safely reduce Michigans $2 billion corrections budget Laura Sager Executive

How to safely reduce Michigans $2 billion corrections budget Laura Sager Executive Director October 30, 2014 1 Citizens Alliance on Prisons and Public Spending CAPPS Mission: Safely reduce the prisoner population,

338 views • 21 slides
Optimizing over the Split Closure Optimizing over the Split Closure Anureet Saxena ACO PhD

Optimizing over the Split Closure Optimizing over the Split Closure Anureet Saxena ACO PhD

Optimizing over the Split Closure Optimizing over the Split Closure Anureet Saxena ACO PhD Student, Tepper School of Business, Carnegie Mellon University. (Joint Work with Egon Balas) MIP Model MIP Model min cx Contains x j 0 j 2 N x j

837 views • 56 slides
Fast Rope Optimizing IDIQs as a Prime and a S ub Feb 2016 Optimizing IDIQ and GWACs Prime

Fast Rope Optimizing IDIQs as a Prime and a S ub Feb 2016 Optimizing IDIQ and GWACs Prime

Fast Rope Optimizing IDIQs as a Prime and a S ub Feb 2016 Optimizing IDIQ and GWACs Prime Perspective Panelist Keith Bull Miller, S martronix Fabian Plath, NES Associates Richard Goudie, Optech Michael

655 views • 18 slides
Techniques Used for Optimizing 3D Techniques Used for Optimizing 3D Geovisualization of Terez n

Techniques Used for Optimizing 3D Techniques Used for Optimizing 3D Geovisualization of Terez n

Techniques Used for Optimizing 3D Techniques Used for Optimizing 3D Geovisualization of Terez n n Geovisualization of Terez Memorial Memorial Karel Jedli ka, Vclav ada, Radek Fiala, Pavel Hjek, Karel Jane ka, Jan Jeek, Jan

453 views • 20 slides
Safely back to work in the new normal Alliance Overview April 2020 Enabling workers to return to

Safely back to work in the new normal Alliance Overview April 2020 Enabling workers to return to

Safely back to work in the new normal Alliance Overview April 2020 Enabling workers to return to work safely The COVID-19 health crisis and continued lockdown in many markets is posing unparalleled challenges to people and economies around the

349 views • 19 slides
John Wrapp Waste Disposition Manager March 10, 2016 Safely Delivering DOEs Vision for the 1

John Wrapp Waste Disposition Manager March 10, 2016 Safely Delivering DOEs Vision for the 1

Safely Delivering DOEs Vision for the East Tennessee Technology Park Mission The Disposition of Former No Path To Disposal Wastes A ETTP 2016 Update John Wrapp Waste Disposition Manager March 10, 2016 Safely Delivering DOEs

271 views • 9 slides
Optimizing the perfectly matched layer by F. Collino, P . B. Monk Norbert Stoop Optimizing the

Optimizing the perfectly matched layer by F. Collino, P . B. Monk Norbert Stoop Optimizing the

Optimizing the perfectly matched layer by F. Collino, P . B. Monk Norbert Stoop Optimizing the perfectly matched layer p. 1 Overview PML constructed using a change of variables Cartesian coordinates (review) Comparison to Brengers

736 views • 34 slides
COVID 19 Lead Worker Representative Training Return to Workplace Safely Protocol June 2020

COVID 19 Lead Worker Representative Training Return to Workplace Safely Protocol June 2020

COVID 19 Lead Worker Representative Training Return to Workplace Safely Protocol June 2020 Covid 19 Return to the Workplace Safely The Governments Covid 19 Return to Work Safely Protocol requires each workplace to appoint at least one

281 views • 15 slides
Harry Potter, Wicca, and Bible Prophecy The girl with supernatural powers who learns

Harry Potter, Wicca, and Bible Prophecy The girl with supernatural powers who learns

Harry Potter, Wicca, and Bible Prophecy The girl with supernatural powers who learns to use her witchcraft wisely. tv.yahoo.com Buffys friend Willow casts spells and practices Witchcraft. Buffys friend Willow casts

447 views • 29 slides
Lecture 9/Chapter 7 Summarize values of a quantitative (measurement) variable by telling center,

Lecture 9/Chapter 7 Summarize values of a quantitative (measurement) variable by telling center,

Definitions (Review) Lecture 9/Chapter 7 Summarize values of a quantitative (measurement) variable by telling center, spread, shape. Summarizing and Displaying Center : measure of what is typical in the Measurement (Quantitative) Data

346 views • 5 slides
Emotional Intelligence Shaun Murphy & John Rivera PhD, PHR, HRMP, SHRM-SCP July 1, 2015 1

Emotional Intelligence Shaun Murphy & John Rivera PhD, PHR, HRMP, SHRM-SCP July 1, 2015 1

Emotional Intelligence Shaun Murphy & John Rivera PhD, PHR, HRMP, SHRM-SCP July 1, 2015 1 Employee Issues 2 Management Issues 3 Just an Issue 4 Remember? Someone who influenced you & your life. What did that person do? 5

659 views • 22 slides
Notes on TRACK Distributions J.F Ostiguy/ APC ostiguy@fnal.gov Ostiguy - Notes on TRACK

Notes on TRACK Distributions J.F Ostiguy/ APC ostiguy@fnal.gov Ostiguy - Notes on TRACK

Notes on TRACK Distributions J.F Ostiguy/ APC ostiguy@fnal.gov Ostiguy - Notes on TRACK Distributions Motivation For the purpose of comparison between codes, we often need to either translate an existing particle distribution to TRACK

488 views • 16 slides
Chapter 6: Probability I t Introduction to Probability d ti t P b bilit The role of

Chapter 6: Probability I t Introduction to Probability d ti t P b bilit The role of

Chapter 6: Probability I t Introduction to Probability d ti t P b bilit The role of inferential statistics is to use the sample data as the basis for th l d t th b i f answering questions about the population. To

591 views • 36 slides
Environmental Management (EM) Nationwide Multiple Award ID/IQ (Unrestricted) Post Award

Environmental Management (EM) Nationwide Multiple Award ID/IQ (Unrestricted) Post Award

Environmental Management (EM) Nationwide Multiple Award ID/IQ (Unrestricted) Post Award Orientation 1 Agenda Introductions Post Award Orientation Purpose IDIQ Program Description and Objectives Contract Information

749 views • 46 slides
Complexity-Effective Issue Queue Design Under Load-Hit Speculation Tali Moreshet and R. Iris

Complexity-Effective Issue Queue Design Under Load-Hit Speculation Tali Moreshet and R. Iris

Complexity-Effective Issue Queue Design Under Load-Hit Speculation Tali Moreshet and R. Iris Bahar Brown University Division of Engineering Motivation Pipelines are getting deeper Higher clock frequencies Increased architectural

652 views • 23 slides
The Shanghai Lectures 2019 HeronRobots Pathfinder Lectures Natural and Artificial Intelligence in

The Shanghai Lectures 2019 HeronRobots Pathfinder Lectures Natural and Artificial Intelligence in

The Shanghai Lectures 2019 HeronRobots Pathfinder Lectures Natural and Artificial Intelligence in Embodied Physical Agents The ShanghAI Lectures An experiment in global teaching Fabio Bonsignorio The ShanghAI Lectures and Heron

743 views • 63 slides
Precision Atomic Optics at the IQ - Perspectives in applied & fundamental sciences AG

Precision Atomic Optics at the IQ - Perspectives in applied & fundamental sciences AG

Precision Atomic Optics at the IQ - Perspectives in applied & fundamental sciences AG Wolfgang Ertmer Institut fr Quantenoptik, Hannover Leibniz Universitt Hannover II nd generation atom optical experiments Heritage of PHARAO/ACES

811 views • 41 slides

More recommend