riscv64: Fix underflow in call relocation handling (#5951)
Under some test case layouts the call relocation panicking with an underflow. Use `wrapping_sub` to signal that this is expected. The fuzzer took a while to generate such a test case. And I can't introduce it as a regression test because when running via the regular clif-util run tests the layout is different and the test case passes! I think this is because in the fuzzer we only add one trampoline, while in clif-util we build trampolines for each funcion in the file. Co-authored-by: Jamey Sharp <jsharp@fastly.com>
This commit is contained in:
@@ -120,10 +120,18 @@ impl CompiledBlob {
|
||||
// See https://github.com/riscv-non-isa/riscv-elf-psabi-doc/blob/master/riscv-elf.adoc#pc-relative-symbol-addresses
|
||||
// for a better explanation of the following code.
|
||||
//
|
||||
// Unlike the regular symbol relocations, here both "sub-relocations" point
|
||||
// to the same address.
|
||||
// Unlike the regular symbol relocations, here both "sub-relocations" point to the same address.
|
||||
//
|
||||
// `pcrel` is a signed value (+/- 2GiB range), when splitting it into two parts, we need to
|
||||
// ensure that `hi20` is close enough to `pcrel` to be able to add `lo12` to it and still
|
||||
// get a valid address.
|
||||
//
|
||||
// `lo12` is also a signed offset (+/- 2KiB range) relative to the `hi20` value.
|
||||
//
|
||||
// `hi20` should also be shifted right to be the "true" value. But we also need it
|
||||
// left shifted for the `lo12` calculation and it also matches the instruction encoding.
|
||||
let hi20 = pcrel.wrapping_add(0x800) & 0xFFFFF000;
|
||||
let lo12 = (pcrel - hi20) & 0xFFF;
|
||||
let lo12 = pcrel.wrapping_sub(hi20) & 0xFFF;
|
||||
|
||||
unsafe {
|
||||
// Do a R_RISCV_PCREL_HI20 on the `auipc`
|
||||
|
||||
Reference in New Issue
Block a user