SlideShare une entreprise Scribd logo
1  sur  34
Télécharger pour lire hors ligne
Introduction to LLVM
on Program Analysis
Tao He
elfinhe@gmail.com
Department of Computer Science, Sun Yat-Sen University
Department of Computer Science and Engineering, HKUST
Group Discussion
June 2012
HKUST, Hong Kong, China
1/34
Outline
 Objectives
 A quick scenario
 LLVM IR
 ‘opt’ command
 Installation of LLVM
2/34
Objectives -
What do we want to do?
3/34
Objectives
 To implement a symbolic execution engine.
 A expression-based engine [BH07]
different from
most existing implementations (path-based
engines).
 Program analysis on C programs.
 To generate static single assignment (SSA)
representation of C first.
4/34
[BH07] Domagoj Babić and Alan J. Hu. Structural Abstraction of Software Verification Conditions. In Proceedings
of the 19th international conference on Computer aided verification (CAV'07), Lecture Notes in Computer Science,
2007, Volume 4590/2007, 366-378
A Quick Scenario -
What can LLVM do?
5/34
!A Quick Scenario
6/34
 Given a C program:
 #include <stdio.h>
 int branch(int n){
 if (n>0) printf("Positiven");
 else if (n==0) printf("Zeron");
 else if (n<0) printf("Negativen");
 return 0;
 }
 int main() {
 branch(-4); branch(0); branch(6);
 return 0;
 }
!A Quick Scenario
7/34
 Generate immediate representation (IR) of
LLVM – the SSA representation in LLVM
 clang -O3 -emit-llvm hello.c -S -o hello.ll
 define i32 @main() nounwind uwtable {
 %1 = alloca i32, align 4
 store i32 0, i32* %1
 %2 = call i32 @branch(i32 -4)
 %3 = call i32 @branch(i32 0)
 %4 = call i32 @branch(i32 6)
 ret i32 0
 }
 ...
[SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes.
URL: http://llvm.org/docs/Passes.html.
!A Quick Scenario
8/34
 Print call graph
 opt method_para_int_branch.ll -S -dot-
callgraph 2>output_file >/dev/null
 dot -Tsvg in.dot -o out.svg
[SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes.
URL: http://llvm.org/docs/Passes.html.
!A Quick Scenario
9/34
 Print control flow graph (CFG)
 opt method_para_int_branch.ll -S -dot-cfg
2>output_file >/dev/null
[SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes.
URL: http://llvm.org/docs/Passes.html.
# A Quick Scenario
10/34
 More:
 Dead Global Elimination
 Interprocedural Constant Propagation
 Dead Argument Elimination
 Inlining
 Reassociation
 Loop Invariant Code Motion
 Loop Opts
 Memory Promotion
 Dead Store Elimination
 Aggressive Dead Code Elimination
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
What is the SSA representation in LLVM?
- LLVM IR
11/34
LLVM IR
12/34
 “A Static Single Assignment (SSA) based
representation that provides type safety, low-
level operations, flexibility, and the capability
of representing 'all' high-level languages
cleanly.”
[Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
LLVM IR
13/34
 Three address code
 SSA-based
 Three different forms
 An in-memory compiler IR
 An on-disk bitcode representation (suitable for
fast loading by a Just-In-Time compiler)
 A human readable assembly language
representation
[Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
LLVM IR
14/34
 An example
 To multiply the integer variable '%X' by 8
 Syntax:
 <result> = mul <ty> <op1>, <op2>
 IR code:
 %result = mul i32 %X, 8
 More
 For floating point, use fmul
[Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
LLVM IR
15/34
 Another example
 Instruction jump – to change control flow
 Branches or loops
 Syntax:
 br i1 <cond>, label <iftrue>, label <iffalse>
 br label <dest> ; Unconditional branch
[Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
LLVM IR
16/34
 IR code:
 Test:
 %cond = icmp eq i32 %a, %b
 br i1 %cond, label %IfEqual, label %IfUnequal
 IfEqual:
 ret i32 1
 IfUnequal:
[Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
LLVM IR
17/34
 3rd
example
 Function call
 A simplified syntax:
 <result> = call <ty> <fnptrval>(<function args>)
 IR code:
 call i32 (i8*, ...)* @printf(i8* %msg, i32 12, i8 42)
[Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
LLVM IR
18/34
 4th
example
 Function definition
 A simplified syntax:
 define <ResultType> @<FunctionName> ([argument list]) { ... }
 IR code:
 define i32 @main() { … }
 define i32 @test(i32 %X, ...) { … }
[Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
LLVM IR
19/34
 The majority of instructions in C programs:
 Operations (binary/bitwise)
 Jumps
 Function calls
 Function definitions
 Many keywords in LLVM IR will not be
used for C programs. (e.g., invoke)
[Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
How to analyze programs
by using LLVM?
- ‘opt’ command
20/34
‘opt’ command
 Compiler is organized as a series of ‘passes’:
 Each pass is one analysis or transformation
21/34
[SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes.
URL: http://llvm.org/docs/Passes.html.
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
!‘opt’ command
 An example
 -dot-callgraph
22/34
[SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes.
URL: http://llvm.org/docs/Passes.html.
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
!‘opt’ command
23/34
An example
Print call graph: -dot-callgraph
 opt method_para_int_branch.ll -S -dot-
callgraph 2>output_file >/dev/null
 dot -Tsvg in.dot -o out.svg
[SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes.
URL: http://llvm.org/docs/Passes.html.
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
How to write your own pass?
24/34
How to write your own pass?
 Four types of pass:
 ModulePass: general interprocedural pass
 CallGraphSCCPass: bottom-up on the call graph
 FunctionPass: process a function at a time
 BasicBlockPass: process a basic block at a time
25/34
How to write your own pass?
 Two important classes
 User: http://llvm.org/docs/doxygen/html/classllvm_1_1User.html
 This class defines the interface that one who uses a
Value must implement.
 Instructions
 Constants
 Operators
 Value: http://llvm.org/docs/doxygen/html/classllvm_1_1Value.html
 It is the base class of all values computed by a
program that may be used as operands to other
values.
 e.g., instruction and function.
26/34
How to write your own pass?
 An example – print function names
27/34
How to write your own pass?
 An example – print function names
 First generate bytecode:
 clang -emit-llvm hello.c -o hello.bc
 Then
28/34
How to write your own pass?
 Another example – print def-use chain
29/34
How to install LLVM?
30/34
How to install LLVM?
 To compile programs faster and use built-in
transformation and analysis
 Install both ‘llvm’ and ‘clang’ from package
management software
 E.g., Synaptic, yum, apt.
 To write your own pass
 Build from source code and add your own pass
 http://llvm.org/docs/GettingStarted.html#quickstart
 http://llvm.org/docs/WritingAnLLVMPass.html
31/34
LLVM IR
32/34
 The majority of instructions in C programs:
 Operation (binary/bitwise)
 Jump
 Function call
 Function definition
[Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html
[LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini
Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
Q & A
33/34
Thank you!
Contact me via elfinhe@gmail.com
34/34

Contenu connexe

Tendances

Transpilers(Source-to-Source Compilers)
Transpilers(Source-to-Source Compilers)Transpilers(Source-to-Source Compilers)
Transpilers(Source-to-Source Compilers)Shivang Bajaniya
 
LinkedIn - Disassembling Dalvik Bytecode
LinkedIn - Disassembling Dalvik BytecodeLinkedIn - Disassembling Dalvik Bytecode
LinkedIn - Disassembling Dalvik BytecodeAlain Leon
 
C++ question and answers
C++ question and answersC++ question and answers
C++ question and answersAdenKheire
 
Installation of PC-Lint and its using in Visual Studio 2005
Installation of PC-Lint and its using in Visual Studio 2005Installation of PC-Lint and its using in Visual Studio 2005
Installation of PC-Lint and its using in Visual Studio 2005PVS-Studio
 
Linker and loader upload
Linker and loader   uploadLinker and loader   upload
Linker and loader uploadBin Yang
 
Towards easy program migration using language virtualization
 Towards easy program migration using language virtualization Towards easy program migration using language virtualization
Towards easy program migration using language virtualizationESUG
 
PIL - A Platform Independent Language
PIL - A Platform Independent LanguagePIL - A Platform Independent Language
PIL - A Platform Independent Languagezefhemel
 
Nakov dot net-framework-overview-english
Nakov dot net-framework-overview-englishNakov dot net-framework-overview-english
Nakov dot net-framework-overview-englishsrivathsan.10
 
Overview of c++
Overview of c++Overview of c++
Overview of c++geeeeeet
 
Compilation of c
Compilation of cCompilation of c
Compilation of cWay2itech
 
Tail Call Elimination in Open Smalltalk
Tail Call Elimination in Open SmalltalkTail Call Elimination in Open Smalltalk
Tail Call Elimination in Open SmalltalkESUG
 
Net Framework Overview
Net Framework OverviewNet Framework Overview
Net Framework OverviewLuis Goldster
 
In-depth look at the Flex compiler and HFCD
In-depth look at the Flex compiler and HFCDIn-depth look at the Flex compiler and HFCD
In-depth look at the Flex compiler and HFCDStop Coding
 
CORBA Programming with TAOX11/C++11 tutorial
CORBA Programming with TAOX11/C++11 tutorialCORBA Programming with TAOX11/C++11 tutorial
CORBA Programming with TAOX11/C++11 tutorialRemedy IT
 
OFI libfabric Tutorial
OFI libfabric TutorialOFI libfabric Tutorial
OFI libfabric Tutorialdgoodell
 

Tendances (20)

Transpilers(Source-to-Source Compilers)
Transpilers(Source-to-Source Compilers)Transpilers(Source-to-Source Compilers)
Transpilers(Source-to-Source Compilers)
 
LinkedIn - Disassembling Dalvik Bytecode
LinkedIn - Disassembling Dalvik BytecodeLinkedIn - Disassembling Dalvik Bytecode
LinkedIn - Disassembling Dalvik Bytecode
 
C++ question and answers
C++ question and answersC++ question and answers
C++ question and answers
 
Installation of PC-Lint and its using in Visual Studio 2005
Installation of PC-Lint and its using in Visual Studio 2005Installation of PC-Lint and its using in Visual Studio 2005
Installation of PC-Lint and its using in Visual Studio 2005
 
Linker and loader upload
Linker and loader   uploadLinker and loader   upload
Linker and loader upload
 
Towards easy program migration using language virtualization
 Towards easy program migration using language virtualization Towards easy program migration using language virtualization
Towards easy program migration using language virtualization
 
PIL - A Platform Independent Language
PIL - A Platform Independent LanguagePIL - A Platform Independent Language
PIL - A Platform Independent Language
 
Nakov dot net-framework-overview-english
Nakov dot net-framework-overview-englishNakov dot net-framework-overview-english
Nakov dot net-framework-overview-english
 
Overview of c++
Overview of c++Overview of c++
Overview of c++
 
C++vs java
C++vs javaC++vs java
C++vs java
 
Compilation of c
Compilation of cCompilation of c
Compilation of c
 
C compilation process
C compilation processC compilation process
C compilation process
 
Tail Call Elimination in Open Smalltalk
Tail Call Elimination in Open SmalltalkTail Call Elimination in Open Smalltalk
Tail Call Elimination in Open Smalltalk
 
Net Framework Overview
Net Framework OverviewNet Framework Overview
Net Framework Overview
 
How a Compiler Works ?
How a Compiler Works ?How a Compiler Works ?
How a Compiler Works ?
 
In-depth look at the Flex compiler and HFCD
In-depth look at the Flex compiler and HFCDIn-depth look at the Flex compiler and HFCD
In-depth look at the Flex compiler and HFCD
 
C Programming - Refresher - Part I
C Programming - Refresher - Part I C Programming - Refresher - Part I
C Programming - Refresher - Part I
 
CORBA Programming with TAOX11/C++11 tutorial
CORBA Programming with TAOX11/C++11 tutorialCORBA Programming with TAOX11/C++11 tutorial
CORBA Programming with TAOX11/C++11 tutorial
 
OFI libfabric Tutorial
OFI libfabric TutorialOFI libfabric Tutorial
OFI libfabric Tutorial
 
Mixing Python and Java
Mixing Python and JavaMixing Python and Java
Mixing Python and Java
 

Similaire à Introduction to llvm

.NET Profilers and IL Rewriting - DDD Melbourne 2
.NET Profilers and IL Rewriting - DDD Melbourne 2.NET Profilers and IL Rewriting - DDD Melbourne 2
.NET Profilers and IL Rewriting - DDD Melbourne 2Shaun Wilde
 
Eclipse Visualization and Performance Monitoring
Eclipse Visualization and Performance MonitoringEclipse Visualization and Performance Monitoring
Eclipse Visualization and Performance MonitoringChris Laffra
 
Chap_6Lesson02Emsys3EInterruptBasedIOs.pdf
Chap_6Lesson02Emsys3EInterruptBasedIOs.pdfChap_6Lesson02Emsys3EInterruptBasedIOs.pdf
Chap_6Lesson02Emsys3EInterruptBasedIOs.pdfMAHESHV559910
 
torque - Automation Testing Tool for C-C++ on Linux
torque -  Automation Testing Tool for C-C++ on Linuxtorque -  Automation Testing Tool for C-C++ on Linux
torque - Automation Testing Tool for C-C++ on LinuxJITENDRA LENKA
 
Aspect Oriented Programming Through C#.NET
Aspect Oriented Programming Through C#.NETAspect Oriented Programming Through C#.NET
Aspect Oriented Programming Through C#.NETWaqas Tariq
 
LDTT : A Low Level Driver Unit Testing Tool
LDTT : A Low Level Driver Unit Testing Tool LDTT : A Low Level Driver Unit Testing Tool
LDTT : A Low Level Driver Unit Testing Tool ijseajournal
 
Linaro Connect 2016 (BKK16) - Introduction to LISA
Linaro Connect 2016 (BKK16) - Introduction to LISALinaro Connect 2016 (BKK16) - Introduction to LISA
Linaro Connect 2016 (BKK16) - Introduction to LISAPatrick Bellasi
 
Project_Report (BARC-Jerin)_final
Project_Report (BARC-Jerin)_finalProject_Report (BARC-Jerin)_final
Project_Report (BARC-Jerin)_finalJerin John
 
LIBPF: A LIBRARY FOR PROCESS FLOWSHEETING IN C++
LIBPF: A LIBRARY FOR PROCESS FLOWSHEETING IN C++LIBPF: A LIBRARY FOR PROCESS FLOWSHEETING IN C++
LIBPF: A LIBRARY FOR PROCESS FLOWSHEETING IN C++libpf
 
.NET Core, ASP.NET Core Course, Session 3
.NET Core, ASP.NET Core Course, Session 3.NET Core, ASP.NET Core Course, Session 3
.NET Core, ASP.NET Core Course, Session 3aminmesbahi
 
OORPT Dynamic Analysis
OORPT Dynamic AnalysisOORPT Dynamic Analysis
OORPT Dynamic Analysislienhard
 
LIFT: A Legacy InFormation retrieval Tool
LIFT: A Legacy InFormation retrieval ToolLIFT: A Legacy InFormation retrieval Tool
LIFT: A Legacy InFormation retrieval ToolKellyton Brito
 
powershell-is-dead-epic-learnings-london
powershell-is-dead-epic-learnings-londonpowershell-is-dead-epic-learnings-london
powershell-is-dead-epic-learnings-londonnettitude_labs
 
Building and deploying LLM applications with Apache Airflow
Building and deploying LLM applications with Apache AirflowBuilding and deploying LLM applications with Apache Airflow
Building and deploying LLM applications with Apache AirflowKaxil Naik
 

Similaire à Introduction to llvm (20)

Clotho: Saving Programs from Malformed Strings and Incorrect String-handling
Clotho: Saving Programs from Malformed Strings and Incorrect String-handling�Clotho: Saving Programs from Malformed Strings and Incorrect String-handling�
Clotho: Saving Programs from Malformed Strings and Incorrect String-handling
 
SOHIL_RM (1).pptx
SOHIL_RM (1).pptxSOHIL_RM (1).pptx
SOHIL_RM (1).pptx
 
.NET Profilers and IL Rewriting - DDD Melbourne 2
.NET Profilers and IL Rewriting - DDD Melbourne 2.NET Profilers and IL Rewriting - DDD Melbourne 2
.NET Profilers and IL Rewriting - DDD Melbourne 2
 
Codeql Variant Analysis
Codeql Variant AnalysisCodeql Variant Analysis
Codeql Variant Analysis
 
Eclipse Visualization and Performance Monitoring
Eclipse Visualization and Performance MonitoringEclipse Visualization and Performance Monitoring
Eclipse Visualization and Performance Monitoring
 
Chap_6Lesson02Emsys3EInterruptBasedIOs.pdf
Chap_6Lesson02Emsys3EInterruptBasedIOs.pdfChap_6Lesson02Emsys3EInterruptBasedIOs.pdf
Chap_6Lesson02Emsys3EInterruptBasedIOs.pdf
 
torque - Automation Testing Tool for C-C++ on Linux
torque -  Automation Testing Tool for C-C++ on Linuxtorque -  Automation Testing Tool for C-C++ on Linux
torque - Automation Testing Tool for C-C++ on Linux
 
Aspect Oriented Programming Through C#.NET
Aspect Oriented Programming Through C#.NETAspect Oriented Programming Through C#.NET
Aspect Oriented Programming Through C#.NET
 
LDTT : A Low Level Driver Unit Testing Tool
LDTT : A Low Level Driver Unit Testing Tool LDTT : A Low Level Driver Unit Testing Tool
LDTT : A Low Level Driver Unit Testing Tool
 
Linaro Connect 2016 (BKK16) - Introduction to LISA
Linaro Connect 2016 (BKK16) - Introduction to LISALinaro Connect 2016 (BKK16) - Introduction to LISA
Linaro Connect 2016 (BKK16) - Introduction to LISA
 
Project_Report (BARC-Jerin)_final
Project_Report (BARC-Jerin)_finalProject_Report (BARC-Jerin)_final
Project_Report (BARC-Jerin)_final
 
LIBPF: A LIBRARY FOR PROCESS FLOWSHEETING IN C++
LIBPF: A LIBRARY FOR PROCESS FLOWSHEETING IN C++LIBPF: A LIBRARY FOR PROCESS FLOWSHEETING IN C++
LIBPF: A LIBRARY FOR PROCESS FLOWSHEETING IN C++
 
.NET Core, ASP.NET Core Course, Session 3
.NET Core, ASP.NET Core Course, Session 3.NET Core, ASP.NET Core Course, Session 3
.NET Core, ASP.NET Core Course, Session 3
 
OORPT Dynamic Analysis
OORPT Dynamic AnalysisOORPT Dynamic Analysis
OORPT Dynamic Analysis
 
Intro-Soft-Engg-2.pptx
Intro-Soft-Engg-2.pptxIntro-Soft-Engg-2.pptx
Intro-Soft-Engg-2.pptx
 
LIFT: A Legacy InFormation retrieval Tool
LIFT: A Legacy InFormation retrieval ToolLIFT: A Legacy InFormation retrieval Tool
LIFT: A Legacy InFormation retrieval Tool
 
powershell-is-dead-epic-learnings-london
powershell-is-dead-epic-learnings-londonpowershell-is-dead-epic-learnings-london
powershell-is-dead-epic-learnings-london
 
Building and deploying LLM applications with Apache Airflow
Building and deploying LLM applications with Apache AirflowBuilding and deploying LLM applications with Apache Airflow
Building and deploying LLM applications with Apache Airflow
 
Ch1
Ch1Ch1
Ch1
 
Software Development with PHP & Laravel
Software Development  with PHP & LaravelSoftware Development  with PHP & Laravel
Software Development with PHP & Laravel
 

Plus de Tao He

Java 并发编程笔记:01. 并行与并发 —— 概念
Java 并发编程笔记:01. 并行与并发 —— 概念Java 并发编程笔记:01. 并行与并发 —— 概念
Java 并发编程笔记:01. 并行与并发 —— 概念Tao He
 
A software fault localization technique based on program mutations
A software fault localization technique based on program mutationsA software fault localization technique based on program mutations
A software fault localization technique based on program mutationsTao He
 
Testing survey
Testing surveyTesting survey
Testing surveyTao He
 
Testing survey by_directions
Testing survey by_directionsTesting survey by_directions
Testing survey by_directionsTao He
 
Smart debugger
Smart debuggerSmart debugger
Smart debuggerTao He
 
Mutation testing
Mutation testingMutation testing
Mutation testingTao He
 
C语言benchmark覆盖信息收集总结4
C语言benchmark覆盖信息收集总结4C语言benchmark覆盖信息收集总结4
C语言benchmark覆盖信息收集总结4Tao He
 
Django
DjangoDjango
DjangoTao He
 
基于覆盖信息的软件错误定位技术综述
基于覆盖信息的软件错误定位技术综述基于覆盖信息的软件错误定位技术综述
基于覆盖信息的软件错误定位技术综述Tao He
 
Java覆盖信息收集工具比较
Java覆盖信息收集工具比较Java覆盖信息收集工具比较
Java覆盖信息收集工具比较Tao He
 
Testing group’s work on fault localization
Testing group’s work on fault localizationTesting group’s work on fault localization
Testing group’s work on fault localizationTao He
 
Muffler a tool using mutation to facilitate fault localization 2.0
Muffler a tool using mutation to facilitate fault localization 2.0Muffler a tool using mutation to facilitate fault localization 2.0
Muffler a tool using mutation to facilitate fault localization 2.0Tao He
 
Muffler a tool using mutation to facilitate fault localization 2.3
Muffler a tool using mutation to facilitate fault localization 2.3Muffler a tool using mutation to facilitate fault localization 2.3
Muffler a tool using mutation to facilitate fault localization 2.3Tao He
 
Semantic Parsing in Bayesian Anti Spam
Semantic Parsing in Bayesian Anti SpamSemantic Parsing in Bayesian Anti Spam
Semantic Parsing in Bayesian Anti SpamTao He
 
Problems
ProblemsProblems
ProblemsTao He
 
A survey of software testing
A survey of software testingA survey of software testing
A survey of software testingTao He
 
Cleansing test suites from coincidental correctness to enhance falut localiza...
Cleansing test suites from coincidental correctness to enhance falut localiza...Cleansing test suites from coincidental correctness to enhance falut localiza...
Cleansing test suites from coincidental correctness to enhance falut localiza...Tao He
 
Concrete meta research - how to collect, manage, and read papers?
Concrete meta research - how to collect, manage, and read papers?Concrete meta research - how to collect, manage, and read papers?
Concrete meta research - how to collect, manage, and read papers?Tao He
 

Plus de Tao He (18)

Java 并发编程笔记:01. 并行与并发 —— 概念
Java 并发编程笔记:01. 并行与并发 —— 概念Java 并发编程笔记:01. 并行与并发 —— 概念
Java 并发编程笔记:01. 并行与并发 —— 概念
 
A software fault localization technique based on program mutations
A software fault localization technique based on program mutationsA software fault localization technique based on program mutations
A software fault localization technique based on program mutations
 
Testing survey
Testing surveyTesting survey
Testing survey
 
Testing survey by_directions
Testing survey by_directionsTesting survey by_directions
Testing survey by_directions
 
Smart debugger
Smart debuggerSmart debugger
Smart debugger
 
Mutation testing
Mutation testingMutation testing
Mutation testing
 
C语言benchmark覆盖信息收集总结4
C语言benchmark覆盖信息收集总结4C语言benchmark覆盖信息收集总结4
C语言benchmark覆盖信息收集总结4
 
Django
DjangoDjango
Django
 
基于覆盖信息的软件错误定位技术综述
基于覆盖信息的软件错误定位技术综述基于覆盖信息的软件错误定位技术综述
基于覆盖信息的软件错误定位技术综述
 
Java覆盖信息收集工具比较
Java覆盖信息收集工具比较Java覆盖信息收集工具比较
Java覆盖信息收集工具比较
 
Testing group’s work on fault localization
Testing group’s work on fault localizationTesting group’s work on fault localization
Testing group’s work on fault localization
 
Muffler a tool using mutation to facilitate fault localization 2.0
Muffler a tool using mutation to facilitate fault localization 2.0Muffler a tool using mutation to facilitate fault localization 2.0
Muffler a tool using mutation to facilitate fault localization 2.0
 
Muffler a tool using mutation to facilitate fault localization 2.3
Muffler a tool using mutation to facilitate fault localization 2.3Muffler a tool using mutation to facilitate fault localization 2.3
Muffler a tool using mutation to facilitate fault localization 2.3
 
Semantic Parsing in Bayesian Anti Spam
Semantic Parsing in Bayesian Anti SpamSemantic Parsing in Bayesian Anti Spam
Semantic Parsing in Bayesian Anti Spam
 
Problems
ProblemsProblems
Problems
 
A survey of software testing
A survey of software testingA survey of software testing
A survey of software testing
 
Cleansing test suites from coincidental correctness to enhance falut localiza...
Cleansing test suites from coincidental correctness to enhance falut localiza...Cleansing test suites from coincidental correctness to enhance falut localiza...
Cleansing test suites from coincidental correctness to enhance falut localiza...
 
Concrete meta research - how to collect, manage, and read papers?
Concrete meta research - how to collect, manage, and read papers?Concrete meta research - how to collect, manage, and read papers?
Concrete meta research - how to collect, manage, and read papers?
 

Dernier

Kawika Technologies pvt ltd Software Development Company in Trivandrum
Kawika Technologies pvt ltd Software Development Company in TrivandrumKawika Technologies pvt ltd Software Development Company in Trivandrum
Kawika Technologies pvt ltd Software Development Company in TrivandrumKawika Technologies
 
Why Choose Brain Inventory For Ecommerce Development.pdf
Why Choose Brain Inventory For Ecommerce Development.pdfWhy Choose Brain Inventory For Ecommerce Development.pdf
Why Choose Brain Inventory For Ecommerce Development.pdfBrain Inventory
 
AI Embracing Every Shade of Human Beauty
AI Embracing Every Shade of Human BeautyAI Embracing Every Shade of Human Beauty
AI Embracing Every Shade of Human BeautyRaymond Okyere-Forson
 
OpenChain Webinar: Universal CVSS Calculator
OpenChain Webinar: Universal CVSS CalculatorOpenChain Webinar: Universal CVSS Calculator
OpenChain Webinar: Universal CVSS CalculatorShane Coughlan
 
How Does the Epitome of Spyware Differ from Other Malicious Software?
How Does the Epitome of Spyware Differ from Other Malicious Software?How Does the Epitome of Spyware Differ from Other Malicious Software?
How Does the Epitome of Spyware Differ from Other Malicious Software?AmeliaSmith90
 
Sales Territory Management: A Definitive Guide to Expand Sales Coverage
Sales Territory Management: A Definitive Guide to Expand Sales CoverageSales Territory Management: A Definitive Guide to Expand Sales Coverage
Sales Territory Management: A Definitive Guide to Expand Sales CoverageDista
 
20240319 Car Simulator Plan.pptx . Plan for a JavaScript Car Driving Simulator.
20240319 Car Simulator Plan.pptx . Plan for a JavaScript Car Driving Simulator.20240319 Car Simulator Plan.pptx . Plan for a JavaScript Car Driving Simulator.
20240319 Car Simulator Plan.pptx . Plan for a JavaScript Car Driving Simulator.Sharon Liu
 
Top Software Development Trends in 2024
Top Software Development Trends in  2024Top Software Development Trends in  2024
Top Software Development Trends in 2024Mind IT Systems
 
Streamlining Your Application Builds with Cloud Native Buildpacks
Streamlining Your Application Builds  with Cloud Native BuildpacksStreamlining Your Application Builds  with Cloud Native Buildpacks
Streamlining Your Application Builds with Cloud Native BuildpacksVish Abrams
 
JS-Experts - Cybersecurity for Generative AI
JS-Experts - Cybersecurity for Generative AIJS-Experts - Cybersecurity for Generative AI
JS-Experts - Cybersecurity for Generative AIIvo Andreev
 
Fields in Java and Kotlin and what to expect.pptx
Fields in Java and Kotlin and what to expect.pptxFields in Java and Kotlin and what to expect.pptx
Fields in Java and Kotlin and what to expect.pptxJoão Esperancinha
 
eAuditor Audits & Inspections - conduct field inspections
eAuditor Audits & Inspections - conduct field inspectionseAuditor Audits & Inspections - conduct field inspections
eAuditor Audits & Inspections - conduct field inspectionsNirav Modi
 
Your Vision, Our Expertise: TECUNIQUE's Tailored Software Teams
Your Vision, Our Expertise: TECUNIQUE's Tailored Software TeamsYour Vision, Our Expertise: TECUNIQUE's Tailored Software Teams
Your Vision, Our Expertise: TECUNIQUE's Tailored Software TeamsJaydeep Chhasatia
 
Generative AI for Cybersecurity - EC-Council
Generative AI for Cybersecurity - EC-CouncilGenerative AI for Cybersecurity - EC-Council
Generative AI for Cybersecurity - EC-CouncilVICTOR MAESTRE RAMIREZ
 
Leveraging DxSherpa's Generative AI Services to Unlock Human-Machine Harmony
Leveraging DxSherpa's Generative AI Services to Unlock Human-Machine HarmonyLeveraging DxSherpa's Generative AI Services to Unlock Human-Machine Harmony
Leveraging DxSherpa's Generative AI Services to Unlock Human-Machine Harmonyelliciumsolutionspun
 
Growing Oxen: channel operators and retries
Growing Oxen: channel operators and retriesGrowing Oxen: channel operators and retries
Growing Oxen: channel operators and retriesSoftwareMill
 
ARM Talk @ Rejekts - Will ARM be the new Mainstream in our Data Centers_.pdf
ARM Talk @ Rejekts - Will ARM be the new Mainstream in our Data Centers_.pdfARM Talk @ Rejekts - Will ARM be the new Mainstream in our Data Centers_.pdf
ARM Talk @ Rejekts - Will ARM be the new Mainstream in our Data Centers_.pdfTobias Schneck
 
IA Generativa y Grafos de Neo4j: RAG time
IA Generativa y Grafos de Neo4j: RAG timeIA Generativa y Grafos de Neo4j: RAG time
IA Generativa y Grafos de Neo4j: RAG timeNeo4j
 
online pdf editor software solutions.pdf
online pdf editor software solutions.pdfonline pdf editor software solutions.pdf
online pdf editor software solutions.pdfMeon Technology
 

Dernier (20)

Salesforce AI Associate Certification.pptx
Salesforce AI Associate Certification.pptxSalesforce AI Associate Certification.pptx
Salesforce AI Associate Certification.pptx
 
Kawika Technologies pvt ltd Software Development Company in Trivandrum
Kawika Technologies pvt ltd Software Development Company in TrivandrumKawika Technologies pvt ltd Software Development Company in Trivandrum
Kawika Technologies pvt ltd Software Development Company in Trivandrum
 
Why Choose Brain Inventory For Ecommerce Development.pdf
Why Choose Brain Inventory For Ecommerce Development.pdfWhy Choose Brain Inventory For Ecommerce Development.pdf
Why Choose Brain Inventory For Ecommerce Development.pdf
 
AI Embracing Every Shade of Human Beauty
AI Embracing Every Shade of Human BeautyAI Embracing Every Shade of Human Beauty
AI Embracing Every Shade of Human Beauty
 
OpenChain Webinar: Universal CVSS Calculator
OpenChain Webinar: Universal CVSS CalculatorOpenChain Webinar: Universal CVSS Calculator
OpenChain Webinar: Universal CVSS Calculator
 
How Does the Epitome of Spyware Differ from Other Malicious Software?
How Does the Epitome of Spyware Differ from Other Malicious Software?How Does the Epitome of Spyware Differ from Other Malicious Software?
How Does the Epitome of Spyware Differ from Other Malicious Software?
 
Sales Territory Management: A Definitive Guide to Expand Sales Coverage
Sales Territory Management: A Definitive Guide to Expand Sales CoverageSales Territory Management: A Definitive Guide to Expand Sales Coverage
Sales Territory Management: A Definitive Guide to Expand Sales Coverage
 
20240319 Car Simulator Plan.pptx . Plan for a JavaScript Car Driving Simulator.
20240319 Car Simulator Plan.pptx . Plan for a JavaScript Car Driving Simulator.20240319 Car Simulator Plan.pptx . Plan for a JavaScript Car Driving Simulator.
20240319 Car Simulator Plan.pptx . Plan for a JavaScript Car Driving Simulator.
 
Top Software Development Trends in 2024
Top Software Development Trends in  2024Top Software Development Trends in  2024
Top Software Development Trends in 2024
 
Streamlining Your Application Builds with Cloud Native Buildpacks
Streamlining Your Application Builds  with Cloud Native BuildpacksStreamlining Your Application Builds  with Cloud Native Buildpacks
Streamlining Your Application Builds with Cloud Native Buildpacks
 
JS-Experts - Cybersecurity for Generative AI
JS-Experts - Cybersecurity for Generative AIJS-Experts - Cybersecurity for Generative AI
JS-Experts - Cybersecurity for Generative AI
 
Fields in Java and Kotlin and what to expect.pptx
Fields in Java and Kotlin and what to expect.pptxFields in Java and Kotlin and what to expect.pptx
Fields in Java and Kotlin and what to expect.pptx
 
eAuditor Audits & Inspections - conduct field inspections
eAuditor Audits & Inspections - conduct field inspectionseAuditor Audits & Inspections - conduct field inspections
eAuditor Audits & Inspections - conduct field inspections
 
Your Vision, Our Expertise: TECUNIQUE's Tailored Software Teams
Your Vision, Our Expertise: TECUNIQUE's Tailored Software TeamsYour Vision, Our Expertise: TECUNIQUE's Tailored Software Teams
Your Vision, Our Expertise: TECUNIQUE's Tailored Software Teams
 
Generative AI for Cybersecurity - EC-Council
Generative AI for Cybersecurity - EC-CouncilGenerative AI for Cybersecurity - EC-Council
Generative AI for Cybersecurity - EC-Council
 
Leveraging DxSherpa's Generative AI Services to Unlock Human-Machine Harmony
Leveraging DxSherpa's Generative AI Services to Unlock Human-Machine HarmonyLeveraging DxSherpa's Generative AI Services to Unlock Human-Machine Harmony
Leveraging DxSherpa's Generative AI Services to Unlock Human-Machine Harmony
 
Growing Oxen: channel operators and retries
Growing Oxen: channel operators and retriesGrowing Oxen: channel operators and retries
Growing Oxen: channel operators and retries
 
ARM Talk @ Rejekts - Will ARM be the new Mainstream in our Data Centers_.pdf
ARM Talk @ Rejekts - Will ARM be the new Mainstream in our Data Centers_.pdfARM Talk @ Rejekts - Will ARM be the new Mainstream in our Data Centers_.pdf
ARM Talk @ Rejekts - Will ARM be the new Mainstream in our Data Centers_.pdf
 
IA Generativa y Grafos de Neo4j: RAG time
IA Generativa y Grafos de Neo4j: RAG timeIA Generativa y Grafos de Neo4j: RAG time
IA Generativa y Grafos de Neo4j: RAG time
 
online pdf editor software solutions.pdf
online pdf editor software solutions.pdfonline pdf editor software solutions.pdf
online pdf editor software solutions.pdf
 

Introduction to llvm

  • 1. Introduction to LLVM on Program Analysis Tao He elfinhe@gmail.com Department of Computer Science, Sun Yat-Sen University Department of Computer Science and Engineering, HKUST Group Discussion June 2012 HKUST, Hong Kong, China 1/34
  • 2. Outline  Objectives  A quick scenario  LLVM IR  ‘opt’ command  Installation of LLVM 2/34
  • 3. Objectives - What do we want to do? 3/34
  • 4. Objectives  To implement a symbolic execution engine.  A expression-based engine [BH07] different from most existing implementations (path-based engines).  Program analysis on C programs.  To generate static single assignment (SSA) representation of C first. 4/34 [BH07] Domagoj Babić and Alan J. Hu. Structural Abstraction of Software Verification Conditions. In Proceedings of the 19th international conference on Computer aided verification (CAV'07), Lecture Notes in Computer Science, 2007, Volume 4590/2007, 366-378
  • 5. A Quick Scenario - What can LLVM do? 5/34
  • 6. !A Quick Scenario 6/34  Given a C program:  #include <stdio.h>  int branch(int n){  if (n>0) printf("Positiven");  else if (n==0) printf("Zeron");  else if (n<0) printf("Negativen");  return 0;  }  int main() {  branch(-4); branch(0); branch(6);  return 0;  }
  • 7. !A Quick Scenario 7/34  Generate immediate representation (IR) of LLVM – the SSA representation in LLVM  clang -O3 -emit-llvm hello.c -S -o hello.ll  define i32 @main() nounwind uwtable {  %1 = alloca i32, align 4  store i32 0, i32* %1  %2 = call i32 @branch(i32 -4)  %3 = call i32 @branch(i32 0)  %4 = call i32 @branch(i32 6)  ret i32 0  }  ... [SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes. URL: http://llvm.org/docs/Passes.html.
  • 8. !A Quick Scenario 8/34  Print call graph  opt method_para_int_branch.ll -S -dot- callgraph 2>output_file >/dev/null  dot -Tsvg in.dot -o out.svg [SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes. URL: http://llvm.org/docs/Passes.html.
  • 9. !A Quick Scenario 9/34  Print control flow graph (CFG)  opt method_para_int_branch.ll -S -dot-cfg 2>output_file >/dev/null [SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes. URL: http://llvm.org/docs/Passes.html.
  • 10. # A Quick Scenario 10/34  More:  Dead Global Elimination  Interprocedural Constant Propagation  Dead Argument Elimination  Inlining  Reassociation  Loop Invariant Code Motion  Loop Opts  Memory Promotion  Dead Store Elimination  Aggressive Dead Code Elimination [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 11. What is the SSA representation in LLVM? - LLVM IR 11/34
  • 12. LLVM IR 12/34  “A Static Single Assignment (SSA) based representation that provides type safety, low- level operations, flexibility, and the capability of representing 'all' high-level languages cleanly.” [Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 13. LLVM IR 13/34  Three address code  SSA-based  Three different forms  An in-memory compiler IR  An on-disk bitcode representation (suitable for fast loading by a Just-In-Time compiler)  A human readable assembly language representation [Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 14. LLVM IR 14/34  An example  To multiply the integer variable '%X' by 8  Syntax:  <result> = mul <ty> <op1>, <op2>  IR code:  %result = mul i32 %X, 8  More  For floating point, use fmul [Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 15. LLVM IR 15/34  Another example  Instruction jump – to change control flow  Branches or loops  Syntax:  br i1 <cond>, label <iftrue>, label <iffalse>  br label <dest> ; Unconditional branch [Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 16. LLVM IR 16/34  IR code:  Test:  %cond = icmp eq i32 %a, %b  br i1 %cond, label %IfEqual, label %IfUnequal  IfEqual:  ret i32 1  IfUnequal: [Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 17. LLVM IR 17/34  3rd example  Function call  A simplified syntax:  <result> = call <ty> <fnptrval>(<function args>)  IR code:  call i32 (i8*, ...)* @printf(i8* %msg, i32 12, i8 42) [Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 18. LLVM IR 18/34  4th example  Function definition  A simplified syntax:  define <ResultType> @<FunctionName> ([argument list]) { ... }  IR code:  define i32 @main() { … }  define i32 @test(i32 %X, ...) { … } [Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 19. LLVM IR 19/34  The majority of instructions in C programs:  Operations (binary/bitwise)  Jumps  Function calls  Function definitions  Many keywords in LLVM IR will not be used for C programs. (e.g., invoke) [Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 20. How to analyze programs by using LLVM? - ‘opt’ command 20/34
  • 21. ‘opt’ command  Compiler is organized as a series of ‘passes’:  Each pass is one analysis or transformation 21/34 [SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes. URL: http://llvm.org/docs/Passes.html. [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 22. !‘opt’ command  An example  -dot-callgraph 22/34 [SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes. URL: http://llvm.org/docs/Passes.html. [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 23. !‘opt’ command 23/34 An example Print call graph: -dot-callgraph  opt method_para_int_branch.ll -S -dot- callgraph 2>output_file >/dev/null  dot -Tsvg in.dot -o out.svg [SH] Reid Spencer and Gordon Henriksen. LLVM's Analysis and Transform Passes. URL: http://llvm.org/docs/Passes.html. [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 24. How to write your own pass? 24/34
  • 25. How to write your own pass?  Four types of pass:  ModulePass: general interprocedural pass  CallGraphSCCPass: bottom-up on the call graph  FunctionPass: process a function at a time  BasicBlockPass: process a basic block at a time 25/34
  • 26. How to write your own pass?  Two important classes  User: http://llvm.org/docs/doxygen/html/classllvm_1_1User.html  This class defines the interface that one who uses a Value must implement.  Instructions  Constants  Operators  Value: http://llvm.org/docs/doxygen/html/classllvm_1_1Value.html  It is the base class of all values computed by a program that may be used as operands to other values.  e.g., instruction and function. 26/34
  • 27. How to write your own pass?  An example – print function names 27/34
  • 28. How to write your own pass?  An example – print function names  First generate bytecode:  clang -emit-llvm hello.c -o hello.bc  Then 28/34
  • 29. How to write your own pass?  Another example – print def-use chain 29/34
  • 30. How to install LLVM? 30/34
  • 31. How to install LLVM?  To compile programs faster and use built-in transformation and analysis  Install both ‘llvm’ and ‘clang’ from package management software  E.g., Synaptic, yum, apt.  To write your own pass  Build from source code and add your own pass  http://llvm.org/docs/GettingStarted.html#quickstart  http://llvm.org/docs/WritingAnLLVMPass.html 31/34
  • 32. LLVM IR 32/34  The majority of instructions in C programs:  Operation (binary/bitwise)  Jump  Function call  Function definition [Lat] Chris Lattner. LLVM Language Reference Manual. URL: http://llvm.org/docs/LangRef.html [LA04] Chris Lattner and Vikram Adve. The LLVM Compiler Framework and Infrastructure Tutorial. Mini Workshop on Compiler Research Infrastructures (LCPC'04), West Lafayette, Indiana, Sep. 2004.
  • 34. Thank you! Contact me via elfinhe@gmail.com 34/34