Can Mctoll lift code that contains functions from assert.h?

[JBarmada]

I have a test.c file which contains assert() and I am running into issues while trying to lift the file to LLVM IR due to: "const: Assertion `MO.isMetadata() && "Unexpected non-metadata operand in branch instruction"' failed." which AI says is due to the asserts. So my title question comes to mind. Any help is appreciated!

[bharadwajy]

Can you please share the procedure to reproduce the failure including sources or the binary you are trying to raise?

Thanks!

[JBarmada]

I actually abandoned my attempt to lift assert functions which were located in main and instead did the following but still ran into issues:
I have a test.c which contains some asserts and I have a code.c which contains the function the asserts are testing. This is all from the human eval benchmark.

here is code.c:

#include <stdio.h>
#include <stdlib.h>
#include <math.h>

int func0(float numbers[], int size, float threshold) {
    int i, j;
    for (i = 0; i < size; i++) {
        for (j = i + 1; j < size; j++) {
            if (fabs(numbers[i] - numbers[j]) < threshold) {
                return 1;
            }
        }
    }
    return 10;
}

I compile it to code.so using the following:
clang -g -O2 -shared -fPIC -o code.so code.c -lm

then I use the following command to tell mctoll to lift:
/home/jad.barmada/llvm-project/build/bin/llvm-mctoll -d -debug -I prototypes.h code.so

and i get the following error:

clang version 15.0.7 (https://github.com/llvm/llvm-project.git 8dfdcc7b7bf66834a761bd8de445840ef68e4d1a)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir:
Found candidate GCC installation: /../lib/gcc/x86_64-linux-gnu/10
Found candidate GCC installation: /../lib/gcc/x86_64-linux-gnu/11
Found candidate GCC installation: /../lib/gcc/x86_64-linux-gnu/4.8
Found candidate GCC installation: /../lib/gcc/x86_64-linux-gnu/4.8.5
Found candidate GCC installation: /../lib/gcc/x86_64-linux-gnu/9
Selected GCC installation: /../lib/gcc/x86_64-linux-gnu/11
Candidate multilib: .;@m64
Selected multilib: .;@m64
Processing: /home/jad.barmada/mctoll-x86-x86/prototypes.h.
clang version 15.0.7 (https://github.com/llvm/llvm-project.git 8dfdcc7b7bf66834a761bd8de445840ef68e4d1a)
Target: x86_64-unknown-linux-gnu
Thread model: posix
InstalledDir: /home/jad.barmada/llvm-project/build/bin
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/10
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/11
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.8
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/4.8.5
Found candidate GCC installation: /usr/lib/gcc/x86_64-linux-gnu/9
Selected GCC installation: /usr/lib/gcc/x86_64-linux-gnu/11
Candidate multilib: .;@m64
Selected multilib: .;@m64
clang Invocation:
"/home/jad.barmada/llvm-project/build/bin/clang-tool" "-cc1" "-triple" "x86_64-unknown-linux-gnu" "-fsyntax-only" "-disable-free" "-clear-ast-before-backend" "-main-file-name" "prototypes.h" "-mrelocation-model" "static" "-mframe-pointer=all" "-fmath-errno" "-ffp-contract=on" "-fno-rounding-math" "-mconstructor-aliases" "-funwind-tables=2" "-target-cpu" "x86-64" "-tune-cpu" "generic" "-debugger-tuning=gdb" "-v" "-fcoverage-compilation-dir=/home/jad.barmada/mctoll-x86-x86" "-resource-dir" "/home/jad.barmada/llvm-project/build/lib/clang/15.0.7" "-internal-isystem" "/home/jad.barmada/llvm-project/build/lib/clang/15.0.7/include" "-internal-isystem" "/usr/local/include" "-internal-isystem" "/usr/lib/gcc/x86_64-linux-gnu/11/../../../../x86_64-linux-gnu/include" "-internal-externc-isystem" "/usr/include/x86_64-linux-gnu" "-internal-externc-isystem" "/include" "-internal-externc-isystem" "/usr/include" "-fdebug-compilation-dir=/home/jad.barmada/mctoll-x86-x86" "-ferror-limit" "19" "-fgnuc-version=4.2.1" "-fcolor-diagnostics" "-faddrsig" "-D__GCC_HAVE_DWARF2_CFI_ASM=1" "-x" "c-header" "/home/jad.barmada/mctoll-x86-x86/prototypes.h"

clang -cc1 version 15.0.7 based upon LLVM 15.0.7 default target x86_64-unknown-linux-gnu
ignoring nonexistent directory "/usr/lib/gcc/x86_64-linux-gnu/11/../../../../x86_64-linux-gnu/include"
ignoring nonexistent directory "/include"
#include "..." search starts here:
#include <...> search starts here:
***(removed a lot of output for brevity sake)

; manualp1.so: file format elf64-x86-64

BEGIN Disassembly of Functions in Section : .text

Function func0:
END Disassembly of Functions in Section : .text
Function: func0
Parsed MCInst List
0x00000000000000c0: <MCInst #1781 MOV32ri >
0x00000000000000c5: <MCInst #3026 TEST32rr >
0x00000000000000c7: <MCInst #1245 JCC_1 >
0x00000000000000c9: <MCInst #1784 MOV32rr >
0x00000000000000cc: <MCInst #17676 XOR32rr >
0x00000000000000cf: <MCInst #1829 MOVAPSrm >
0x00000000000000d6: <MCInst #1801 MOV64rr >
0x00000000000000d9: <MCInst #1801 MOV64rr >
0x00000000000000dc: <MCInst #1264 JMP_1 >
0x00000000000000de: <MCInst #2008 NOOP>
0x00000000000000e0: <MCInst #410 ADD64ri8 >
0x00000000000000e4: <MCInst #945 DEC64r >
0x00000000000000e7: <MCInst #793 CMP64rr >
0x00000000000000ea: <MCInst #1245 JCC_1 >
0x00000000000000ec: <MCInst #1801 MOV64rr >
0x00000000000000ef: <MCInst #1186 INC64r >
0x00000000000000f2: <MCInst #793 CMP64rr >
0x00000000000000f5: <MCInst #1245 JCC_1 >
0x00000000000000f7: <MCInst #1899 MOVSSrm >
0x00000000000000fc: <MCInst #1781 MOV32ri >
0x0000000000000101: <MCInst #2013 NOOPW >
0x0000000000000110: <MCInst #1830 MOVAPSrr >
0x0000000000000113: <MCInst #2958 SUBSSrm_Int >
0x0000000000000118: <MCInst #537 ANDPSrr >
0x000000000000011b: <MCInst #3075 UCOMISSrr >
0x000000000000011e: <MCInst #1245 JCC_1 >
0x0000000000000120: <MCInst #1186 INC64r >
0x0000000000000123: <MCInst #793 CMP64rr >
0x0000000000000126: <MCInst #1245 JCC_1 >
0x0000000000000128: <MCInst #1264 JMP_1 >
0x000000000000012a: <MCInst #1781 MOV32ri >
0x000000000000012f: <MCInst #2567 RET64>
Generated CFG

Machine code for function func0: TracksLiveness

bb.0:
successors: %bb.10, %bb.1

$eax = MOV32ri 10, <0x55b468796af8>
TEST32rr $esi, $esi, <0x55b4687af318>, implicit-def $eflags
JCC_1 102, 14, <0x55b46883f748>, implicit $eflags

bb.1:
; predecessors: %bb.0
successors: %bb.4

$r8d = MOV32rr $esi, <0x55b4688e3458>
$r9d = XOR32rr $r9d(tied-def 0), $r9d, <0x55b4688e34b8>, implicit-def $eflags
$xmm1 = MOVAPSrm $rip, 1, $noreg, 3818, $noreg, <0x55b4687a2a58>
$rdx = MOV64rr $r8, <0x55b468815108>
$rcx = MOV64rr $rdi, <0x55b468840ec8>
JMP_1 14, <0x55b46879a468>

bb.2:
successors: %bb.3

NOOP <0x55b46879a668>

bb.3:
; predecessors: %bb.2, %bb.4, %bb.8
successors: %bb.10, %bb.4

$rcx = ADD64ri8 $rcx(tied-def 0), 4, <0x55b46879ed98>, implicit-def $eflags
$rdx = DEC64r $rdx(tied-def 0), <0x55b46879eeb8>, implicit-def $eflags
CMP64rr $r9, $r8, <0x55b46879efd8>, implicit-def $eflags
JCC_1 67, 4, <0x55b46879fba8>, implicit $eflags

bb.4:
; predecessors: %bb.1, %bb.3
successors: %bb.3, %bb.5

$rsi = MOV64rr $r9, <0x55b46879fd58>
$r9 = INC64r $r9(tied-def 0), <0x55b46879fe78>, implicit-def $eflags
CMP64rr $r9, $r8, <0x55b4688bed78>, implicit-def $eflags
JCC_1 -23, 3, <0x55b4688bee98>, implicit $eflags

bb.5:
; predecessors: %bb.4
successors: %bb.6

$xmm2 = MOVSSrm $rdi, 4, $rsi, 0, $noreg, <0x55b4688bf068>
$esi = MOV32ri 1, <0x55b4688bf188>
NOOPW $rax, 1, $rax, 0, $cs, <0x55b4688bf2a8>

bb.6:
; predecessors: %bb.5, %bb.7
successors: %bb.9, %bb.7

$xmm3 = MOVAPSrr $xmm2, <0x55b46883cee8>
$xmm3 = SUBSSrm_Int $xmm3(tied-def 0), $rcx, 4, $rsi, 0, $noreg, <0x55b46881a5c8>, implicit $mxcsr
$xmm3 = ANDPSrr $xmm3(tied-def 0), $xmm1, <0x55b46881a6e8>
UCOMISSrr $xmm0, $xmm3, <0x55b46881a808>, implicit-def $eflags, implicit $mxcsr
JCC_1 10, 7, <0x55b46881a928>, implicit $eflags

bb.7:
; predecessors: %bb.6
successors: %bb.6, %bb.8

$rsi = INC64r $rsi(tied-def 0), <0x55b46881aaf8>, implicit-def $eflags
CMP64rr $rdx, $rsi, <0x55b46883cfd8>, implicit-def $eflags
JCC_1 -24, 5, <0x55b46883d0f8>, implicit $eflags

bb.8:
; predecessors: %bb.7
successors: %bb.3

JMP_1 -74, <0x55b46883d2c8>

bb.9:
; predecessors: %bb.6
successors: %bb.10

$eax = MOV32ri 1, <0x55b46883d448>

bb.10:
; predecessors: %bb.0, %bb.3, %bb.9

RET64 <0x55b46881ab78>

End machine code for function func0.

Build Prototype for : func0
CFG : After Raising Jump Tables

Machine code for function func0: TracksLiveness

bb.0:
successors: %bb.10, %bb.1

$eax = MOV32ri 10, <0x55b468796af8>
TEST32rr $esi, $esi, <0x55b4687af318>, implicit-def $eflags
JCC_1 102, 14, <0x55b46883f748>, implicit $eflags

bb.1:
; predecessors: %bb.0
successors: %bb.4

$r8d = MOV32rr $esi, <0x55b4688e3458>
$r9d = XOR32rr $r9d(tied-def 0), $r9d, <0x55b4688e34b8>, implicit-def $eflags
$xmm1 = MOVAPSrm $rip, 1, $noreg, 3818, $noreg, <0x55b4687a2a58>
$rdx = MOV64rr $r8, <0x55b468815108>
$rcx = MOV64rr $rdi, <0x55b468840ec8>
JMP_1 14, <0x55b46879a468>

bb.2:
successors: %bb.3

NOOP <0x55b46879a668>

bb.3:
; predecessors: %bb.2, %bb.4, %bb.8
successors: %bb.10, %bb.4

$rcx = ADD64ri8 $rcx(tied-def 0), 4, <0x55b46879ed98>, implicit-def $eflags
$rdx = DEC64r $rdx(tied-def 0), <0x55b46879eeb8>, implicit-def $eflags
CMP64rr $r9, $r8, <0x55b46879efd8>, implicit-def $eflags
JCC_1 67, 4, <0x55b46879fba8>, implicit $eflags

bb.4:
; predecessors: %bb.1, %bb.3
successors: %bb.3, %bb.5

$rsi = MOV64rr $r9, <0x55b46879fd58>
$r9 = INC64r $r9(tied-def 0), <0x55b46879fe78>, implicit-def $eflags
CMP64rr $r9, $r8, <0x55b4688bed78>, implicit-def $eflags
JCC_1 -23, 3, <0x55b4688bee98>, implicit $eflags

bb.5:
; predecessors: %bb.4
successors: %bb.6

$xmm2 = MOVSSrm $rdi, 4, $rsi, 0, $noreg, <0x55b4688bf068>
$esi = MOV32ri 1, <0x55b4688bf188>
NOOPW $rax, 1, $rax, 0, $cs, <0x55b4688bf2a8>

bb.6:
; predecessors: %bb.5, %bb.7
successors: %bb.9, %bb.7

$xmm3 = MOVAPSrr $xmm2, <0x55b46883cee8>
$xmm3 = SUBSSrm_Int $xmm3(tied-def 0), $rcx, 4, $rsi, 0, $noreg, <0x55b46881a5c8>, implicit $mxcsr
$xmm3 = ANDPSrr $xmm3(tied-def 0), $xmm1, <0x55b46881a6e8>
UCOMISSrr $xmm0, $xmm3, <0x55b46881a808>, implicit-def $eflags, implicit $mxcsr
JCC_1 10, 7, <0x55b46881a928>, implicit $eflags

bb.7:
; predecessors: %bb.6
successors: %bb.6, %bb.8

$rsi = INC64r $rsi(tied-def 0), <0x55b46881aaf8>, implicit-def $eflags
CMP64rr $rdx, $rsi, <0x55b46883cfd8>, implicit-def $eflags
JCC_1 -24, 5, <0x55b46883d0f8>, implicit $eflags

bb.8:
; predecessors: %bb.7
successors: %bb.3

JMP_1 -74, <0x55b46883d2c8>

bb.9:
; predecessors: %bb.6
successors: %bb.10

$eax = MOV32ri 1, <0x55b46883d448>

bb.10:
; predecessors: %bb.0, %bb.3, %bb.9

RET64 <0x55b46881ab78>

End machine code for function func0.

Raised Function Prototypes:
declare dso_local i32 @Func0(i64 %arg1, i32 %arg2, double %arg3)

Build Prototype for : func0
Raised Function Prototypes:
declare dso_local i32 @Func0(i64 %arg1, i32 %arg2, double %arg3)

*** Please submit an issue at https://github.com/microsoft/llvm-mctoll
*** along with a back trace and a reproducer, if possible.
Stack dump:
0. Program arguments: /home/jad.barmada/llvm-project/build/bin/llvm-mctoll -d -debug -I prototypes.h manualp1.so
#0 0x000055b46499eaa5 PrintStackTraceSignalHandler(void*) Signals.cpp:0:0
#1 0x000055b46499c54e SignalHandler(int) Signals.cpp:0:0
#2 0x000015511670a520 (/lib/x86_64-linux-gnu/libc.so.6+0x42520)
#3 0x000055b464ffb557 llvm::mctoll::X86RaisedValueTracker::reinterpretSSERegValue(llvm::Value*, llvm::Type*, llvm::BasicBlock*, llvm::Instruction*) (/home/jad.barmada/llvm-project/build/bin/llvm-mctoll+0x15b6557)
#4 0x000055b464fe0a37 llvm::mctoll::X86MachineInstructionRaiser::raiseBinaryOpRegToRegMachineInstr(llvm::MachineInstr const&) (/home/jad.barmada/llvm-project/build/bin/llvm-mctoll+0x159ba37)
#5 0x000055b464fe8185 llvm::mctoll::X86MachineInstructionRaiser::raiseMachineFunction() (/home/jad.barmada/llvm-project/build/bin/llvm-mctoll+0x15a3185)
#6 0x000055b464fe858a llvm::mctoll::X86MachineInstructionRaiser::raise() (/home/jad.barmada/llvm-project/build/bin/llvm-mctoll+0x15a358a)
#7 0x000055b464fcfd82 llvm::mctoll::MachineFunctionRaiser::runRaiserPasses() (/home/jad.barmada/llvm-project/build/bin/llvm-mctoll+0x158ad82)
#8 0x000055b464fce0bc llvm::mctoll::ModuleRaiser::runMachineFunctionPasses() (/home/jad.barmada/llvm-project/build/bin/llvm-mctoll+0x15890bc)
#9 0x000055b46414b8ad disassembleObject(llvm::object::ObjectFile const*, bool) (.constprop.0) llvm-mctoll.cpp:0:0
#10 0x000055b4640f59a4 main (/home/jad.barmada/llvm-project/build/bin/llvm-mctoll+0x6b09a4)
#11 0x00001551166f1d90 (/lib/x86_64-linux-gnu/libc.so.6+0x29d90)
#12 0x00001551166f1e40 __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e40)
#13 0x000055b4641394d5 _start (/home/jad.barmada/llvm-project/build/bin/llvm-mctoll+0x6f44d5)
Floating point exception

edit: the name of the file may be slightly different but it is the same exact content as shared above.