Emit dead goto-instructions on MIR StatementDead
#3063
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
karkhaz
force-pushed
the
kk-emit-dead-statement
branch
3 times, most recently
from
62ebeaa to
d4a82ab
Compare
This instruction corresponds to the cprover language's code_deadt and marks the point where a variable goes out of scope. This new statement type is needed in a future commit where MIR StorageDead statements get codegenned into these new Dead statements.
Kani now codegens goto-program Dead instructions when it sees MIR StatementDead statements. This commit fixes model-checking#3061.
This turns off a MIR pass that drops StatementLive and StatementDead nodes. These nodes are needed for us to detect when local variables go out of scope.
This is because new Dead instructions are being generated.
karkhaz
force-pushed
the
kk-emit-dead-statement
branch
from
d4a82ab to
d77ac68
Compare
celinval
reviewed
Mar 12, 2024
zhassan-aws
reviewed
Mar 12, 2024
zhassan-aws
approved these changes
Mar 13, 2024
zhassan-aws
added a commit
that referenced
this pull request
Mar 13, 2024
These are the original release notes for the reference: ## What's Changed * Automatic cargo update to 2024-02-26 by @github-actions in #3043 * Upgrade rust toolchain to 2024-02-17 by @celinval in #3040 * Upgrade `windows-targets` crate to version 0.52.4 by @adpaco-aws in #3049 * Fix `codegen_atomic_binop` for `atomic_ptr` by @qinheping in #3047 * Upgrade Rust toolchain to `nightly-2024-02-25` by @adpaco-aws in #3048 * Update s2n-quic submodule by @zhassan-aws in #3050 * Update s2n-quic submodule weekly through dependabot by @zhassan-aws in #3053 * Retrieve info for recursion tracker reliably by @feliperodri in #3045 * Automatic cargo update to 2024-03-04 by @github-actions in #3055 * Upgrade Rust toolchain to `nightly-2024-03-01` by @adpaco-aws in #3052 * Add `--use-local-toolchain` to Kani setup by @jaisnan in #3056 * Replace internal reverse_postorder by a stable one by @celinval in #3064 * Add option to override `--crate-name` from `kani` by @adpaco-aws in #3054 * cargo update and fix macos CI by @zhassan-aws in #3067 * Bump tests/perf/s2n-quic from `d103836` to `1a7faa8` by @dependabot in #3066 * Upgrade toolchain to 2024-03-11 by @zhassan-aws in #3071 * Emit `dead` goto-instructions on MIR StatementDead by @karkhaz in #3063 **Full Changelog**: kani-0.47.0...kani-0.48.0
I confirmed that these scenario is correctly captured by the fix. I'll open a PR that integrates that test. |
zhassan-aws
added a commit
that referenced
this pull request
Mar 14, 2024
This is a follow-up on #3063 that adds a test with multiple crates to make sure this scenario is correctly handled and that Kani reports the bug. By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 and MIT licenses.
This was referenced Mar 14, 2024
tautschnig
pushed a commit
that referenced
this pull request
Apr 5, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This commit adds a new
Deadgoto-instruction that gets codegenedwhenever Kani sees a MIR
StatementDeadstatement. This newgoto instruction corresponds to the CBMC code_deadt statement
that marks the point where a local variable goes out of scope.
This new instruction is needed to detect invalid accesses of dead local
variables.
The commit also codegens a CBMC
Declinstruction upon seeing a MIRStatementLive. This ensures that variables that go out of scope at the
end of a loop are not falsely marked as having a dead dereference when
they are accessed on the next loop iteration.
Resolves #3061
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 and MIT licenses.