[lld-macho] Fix dangling string reference when adding frameworks

[PRESIDENT810]

Summary

In Driver.cpp, addFramework used std::string instance to represent the path of a framework, which will be freed after the function returns. However, this string is stored in loadedArchive, which will be used later to compare with path of newly added frameworks. This caused https://bugs.llvm.org/show_bug.cgi?id=52133. A test is included in this commit to reproduce this bug.

Now resolveDylibPath returns a StringRef instance, and it uses StringSaver to save its data, then returns it to functions on the top. This ensures the resolved framework path is still valid after LC_LINKER_OPTION is parsed.

[oontvoo]

.... and if the StringRef instance's actual string data is released, such lookup will return false even though the value is still present in the map ....

Hmmm, do we have a use-after-free bug somewhere?
IUC, all the StringRef should have their data "saved" in the saver and none of it should get freed while we're still linking

Could you add a test to reproduce this?

[PRESIDENT810]

Add a test case to illustrate where a framework (archive) is loaded twice.

[oontvoo]

lld/test/MachO/multi-loaded-archive.yaml

8–11 ↗

(On Diff #379683)

Could you make sure any any file produced by this test is under %t/ ? our test machines limit where the tests can write

(eg., the main.out should be %t/main.out, similarly, any implicit "current" dir should be spelled out to "%t" when possible)

Thanks!

[oontvoo]

lld/MachO/Driver.cpp

354–356

I think this is where the dangling reference is .

Could you add saver.save(*path) here?
(ie.,addFile(saver.save(*path),/*forceLoadArchive=*/false, isExplicit)) )

Storing the strings themselves are probably better than hash_code.

[oontvoo]

lld/MachO/Driver.cpp

354–356

P.S: Or perhaps the more general fix is to make resolveDylibPath[0] return an Optional<StringRef> (where it already "saves" the string's content into the saver).

[0] https://github.com/llvm/llvm-project/blob/d3cb6bf2d462958f2a6573e6390cca71d13dee6b/lld/MachO/DriverUtils.cpp#L186

[oontvoo]

[clearing queue]

[PRESIDENT810]

Hello.

I added %t to paths in my test, and they should be ok now. I also changed a few functions related to adding frameworks, so now they return StringRef instances instead of std::string, and their values are all saved by saver.save(). In this way I think we don't need to change the key of loadArchives to hash_code.

[oontvoo]

In D111706#3069533, @PRESIDENT810 wrote:

Hello.

I added %t to paths in my test, and they should be ok now. I also changed a few functions related to adding frameworks, so now they return StringRef instances instead of std::string, and their values are all saved by saver.save(). In this way I think we don't need to change the key of loadArchives to hash_code.

Thanks! Looks good!
One last request, can you make the test use simplified asm (rather than yaml) ? The yaml format is kind of hairy and hard to maintain ... it's only used when the obj files cannot be produced any other way.
For this test, I don't think it's necessary to use it.
(There are other similar test in simplified asm, you may see https://github.com/llvm/llvm-project/tree/main/lld/test/MachO for egs).

lld/MachO/Driver.cpp

116

I think this could be resolveDylibPath(saver.save(symlink.str())

Then in resolveDylibPath (ie., DriverUtils.cpp:line 199), you don't save the StringRef because the assumption is that when you see a StringRef, it's already been saved.

lld/MachO/InputFiles.cpp

916–917

pls run clang-format on patch

917–918

this should be saved too?

[int3]

Chiming in late because I just got back from PTO...

Regarding the test: Yeah, we should avoid using yaml if possible. Maybe we could extend lc-linker-option.ll instead of creating a new test? We should also include some comments in the test explaining the motivation for running those particular test commands.

Also, does ASAN catch the use-after-free in this test? Figured it's worth checking to make sure that we are deterministically catching this error.

lld/MachO/Driver.cpp

116

That seems really iffy; resolveDylibPath should return a safely-allocated StringRef regardless of how it's being called. Better to save() twice than to accidentally return an unsaved string.

[oontvoo]

In D111706#3070818, @int3 wrote:

Also, does ASAN catch the use-after-free in this test? Figured it's worth checking to make sure that we are deterministically catching this error.

It did (tried running the tests with ASAN enabled). - except we had no tests covering this path until now :(

[PRESIDENT810]

Hello.

I rewrote my test using llvm IR, and add it to the lc-linker-option.ll test. I also add "saver.save()" wherever a function calls resolveDylibPath without saving the string itself, and removed saving StringRef instance in DriverUtils.cpp:line 199.

[PRESIDENT810]

Shorten my test by removing some irrelevant symbols.

[oontvoo]

LGTM - thanks!
(leaving the lld-macho checkbox for int3, in case he has additional comments ... otherwise, I can check it EOD)

lld/test/MachO/lc-linker-option.ll

50–60

Include a comment here explaining what/why we're testing this (since this isn't testing linker option per se)?
(perhaps include reference to either the bug or this patch)

[int3]

lld/MachO/Driver.cpp

116

maybe you didn't see this comment :) I would prefer we revert to calling saver.save() within resolveDylibPath

[int3]

lld/test/MachO/lc-linker-option.ll

121

this doesn't seem relevant?

[PRESIDENT810]

I removed the unnecessary "Function Attrs" line in my test, and wrote some comments to explain why some lines (which are seemingly not testing linker options) is added to the test.

As for resolveDylibPath, I added a saver.save() inside this function to ensure it always returns a saved StringRef. Previously oontvoo says I might should not save a StringRef, which is assumed to be already saved when used, so I'm not very sure if I should save it here (I'm a beginner of llvm and not sure which is the right way to do it... ). Please contact me if this change needs further modification.

[int3]

Previously oontvoo says I might should not save a StringRef, which is assumed to be already saved when used

We can't always assume that. StringRef is basically just a nicer wrapper around char *. It just means that something else owns the string, but it may not necessarily by the StringSaver.

lld/MachO/Driver.cpp

116

no need for saver.save() here any more

lld/MachO/InputFiles.cpp

906

same, no need for save() here

918

same

948

same

lld/test/MachO/lc-linker-option.ll

51–57

thanks for the detailed comment!

[int3]

Do you have commit permissions, or do you need us to land it for you?

[PRESIDENT810]

Removed some unnecessary saver.save().

I don't think I have permissions to commit this change, so could you please commit it for me? Thank you!

[oontvoo]

In D111706#3074387, @PRESIDENT810 wrote:

Removed some unnecessary saver.save().

I don't think I have permissions to commit this change, so could you please commit it for me? Thank you!

Done! Thanks!
(And sorry for the conflicting comments earlier)

[zequanwu]

This causes lc-linker-option.ll test failure on Windows:

$ ":" "RUN: at line 61"
$ "ln" "-sf" "A" "C:\b\s\w\ir\cache\builder\src\third_party\llvm-bootstrap\tools\lld\test\MachO\Output\lc-linker-option.ll.tmp/foo.framework/Versions/Current"
# command stderr:
'ln': command not found
error: command failed with exit status: 127

[int3]

Looking. Shouldn't be too hard to rewrite the test not to use frameworks

[oontvoo]

In D111706#3076692, @int3 wrote:

Looking. Shouldn't be too hard to rewrite the test not to use frameworks

or maybe we could just cp rather than doing softlink?

P.S: i thought there were some windows buildbots... do they no longer run?

[dyung]

In D111706#3076699, @oontvoo wrote:

In D111706#3076692, @int3 wrote:

Looking. Shouldn't be too hard to rewrite the test not to use frameworks

or maybe we could just cp rather than doing softlink?

P.S: i thought there were some windows buildbots... do they no longer run?

Our internal Windows build bot is also hitting an error on this change. We put the gnuwin32 tools on the path for it, and it appears that it only creates a shortcut since NTFS doesn't really support symbolic links. The linking command eventually fails like this:

$ "ld64.lld" "-arch" "x86_64" "-platform_version" "macos" "10.15" "11.0" "-syslibroot" "C:/Dev/git/merge/lld/test\MachO\Inputs\MacOSX.sdk" "-fatal_warnings" "-demangle" "-ObjC" "C:\Dev\git\merge\build-ps4-test\tools\lld\test\MachO\Output\lc-linker-option.ll.tmp/objfile1.o" "C:\Dev\git\merge\build-ps4-test\tools\lld\test\MachO\Output\lc-linker-option.ll.tmp/objfile2.o" "C:\Dev\git\merge\build-ps4-test\tools\lld\test\MachO\Output\lc-linker-option.ll.tmp/main.o" "-o" "C:\Dev\git\merge\build-ps4-test\tools\lld\test\MachO\Output\lc-linker-option.ll.tmp/main.out" "-arch" "x86_64" "-platform_version" "macos" "11.0.0" "0.0.0" "-FC:\Dev\git\merge\build-ps4-test\tools\lld\test\MachO\Output\lc-linker-option.ll.tmp"
# command stderr:
ld64.lld: error: framework not found for -framework foo
ld64.lld: error: framework not found for -framework foo

Maybe the cp approach would be better for Windows?

[PRESIDENT810]

Now my test uses cp command to create framework instead of ln command. Hope this will do, and if there is any problem, please let me know so I can try other workarounds.

I also noticed that in lld/test/MachO/framework.s, it also uses ln command to create frameworks (and requires shell to disable this test on Windows), see https://github.com/llvm/llvm-project/blob/6b715e9c4d9cc00f59906d48cd57f4c767229093/lld/test/MachO/framework.s#L7. If we can use cp to create frameworks and build successfully, maybe we can modify this test by replacing ln with cp, and enable this test on Windows? I'll be glad to submit another patch about this.

[int3]

I went down a rabbit hole while trying to fix this, discovering two different issues with our framework loading code in the process, which I've filed in https://bugs.llvm.org/show_bug.cgi?id=52246 and https://bugs.llvm.org/show_bug.cgi?id=52247. D112195: [lld-macho] Simplify lc-linker-option.ll and re-enable it on Windows is my follow-up diff.

As for framework.s, I would like us to keep it using symlinks, as I want to emulate a 'real' framework as closely as possible in at least one of our tests.

[PRESIDENT810]

Please ignore my last updated diff, I didn't see int3's latest comment at that time. I will see what I could do about those two new issues, and as for this test, I think maybe I should make it conform to int3's newest revision (https://reviews.llvm.org/D112195).

lld/MachO/Driver.h

 #undef OPTION
 };
 
 void parseLCLinkerOption(InputFile *, unsigned argc, StringRef data);
 
 std::string createResponseFile(const llvm::opt::InputArgList &args);
 
 // Check for both libfoo.dylib and libfoo.tbd (in that order).
-llvm::Optional<std::string> resolveDylibPath(llvm::StringRef path);
+llvm::Optional<StringRef> resolveDylibPath(llvm::StringRef path);
 
 DylibFile *loadDylib(llvm::MemoryBufferRef mbref, DylibFile *umbrella = nullptr,
                      bool isBundleLoader = false);
 
 // Search for all possible combinations of `{root}/{name}.{extension}`.
 // If \p extensions are not specified, then just search for `{root}/{name}`.
 llvm::Optional<llvm::StringRef>
 findPathCombination(const llvm::Twine &name,

lld/MachO/Driver.cpp

if (Optional<StringRef> path = findPathCombination(
       return path;
     return findPathCombination("lib" + name, config->librarySearchPaths,
                                {".a"});
   }
   return findPathCombination("lib" + name, config->librarySearchPaths,
                              {".tbd", ".dylib", ".a"});
 }
 
-static Optional<std::string> findFramework(StringRef name) {
+static Optional<StringRef> findFramework(StringRef name) {
   SmallString<260> symlink;
   StringRef suffix;
   std::tie(name, suffix) = name.split(",");
   for (StringRef dir : config->frameworkSearchPaths) {
     symlink = dir;
     path::append(symlink, name + ".framework", name);
 
     if (!suffix.empty()) {
       // NOTE: we must resolve the symlink before trying the suffixes, because
       // there are no symlinks for the suffixed paths.
       SmallString<260> location;
       if (!fs::real_path(symlink, location)) {
         // only append suffix if realpath() succeeds
         Twine suffixed = location + suffix;
         if (fs::exists(suffixed))
-          return suffixed.str();
+          return saver.save(suffixed.str());
       }
       // Suffix lookup failed, fall through to the no-suffix case.
     }
 
-    if (Optional<std::string> path = resolveDylibPath(symlink))
+    if (Optional<StringRef> path = resolveDylibPath(saver.save(symlink.str())))
       return path;
   }
   return {};
 }
 
 static bool warnIfNotDirectory(StringRef option, StringRef path) {
   if (!fs::exists(path)) {
     warn("directory not found for option -" + option + path);
if (Optional<StringRef> path = findLibrary(name)) {
     }
     return;
   }
   error("library not found for -l" + name);
 }
 
 static void addFramework(StringRef name, bool isNeeded, bool isWeak,
                          bool isReexport, bool isExplicit) {
-  if (Optional<std::string> path = findFramework(name)) {
+  if (Optional<StringRef> path = findFramework(name)) {
     if (auto *dylibFile = dyn_cast_or_null<DylibFile>(
             addFile(*path, /*forceLoadArchive=*/false, isExplicit))) {
       if (isNeeded)
         dylibFile->forceNeeded = true;
       if (isWeak)
         dylibFile->forceWeakImport = true;
       if (isReexport) {
         config->hasReexports = true;
         dylibFile->reexport = true;
       }

lld/MachO/DriverUtils.cpp

 
 static void searchedDylib(const Twine &path, bool found) {
   if (config->printDylibSearch)
     message("searched " + path + (found ? ", found " : ", not found"));
   if (!found)
     depTracker->logFileNotFound(path);
 }
 
-Optional<std::string> macho::resolveDylibPath(StringRef dylibPath) {
+Optional<StringRef> macho::resolveDylibPath(StringRef dylibPath) {
   // TODO: if a tbd and dylib are both present, we should check to make sure
   // they are consistent.
   SmallString<261> tbdPath = dylibPath;
   path::replace_extension(tbdPath, ".tbd");
   bool tbdExists = fs::exists(tbdPath);
   searchedDylib(tbdPath, tbdExists);
   if (tbdExists)
-    return std::string(tbdPath);
+    return saver.save(tbdPath.str());
 
   bool dylibExists = fs::exists(dylibPath);
   searchedDylib(dylibPath, dylibExists);
   if (dylibExists)
-    return std::string(dylibPath);
+    return dylibPath;
   return {};
 }
 
 // It's not uncommon to have multiple attempts to load a single dylib,
 // especially if it's a commonly re-exported core library.
 static DenseMap<CachedHashStringRef, DylibFile *> loadedDylibs;
 
 DylibFile *macho::loadDylib(MemoryBufferRef mbref, DylibFile *umbrella,

lld/MachO/InputFiles.cpp

// 1. Install name basename in -F / -L directories.
     StringRef stem = path::stem(path);
     SmallString<128> frameworkName;
     path::append(frameworkName, path::Style::posix, stem + ".framework", stem);
     bool isFramework = path.endswith(frameworkName);
     if (isFramework) {
       for (StringRef dir : config->frameworkSearchPaths) {
         SmallString<128> candidate = dir;
         path::append(candidate, frameworkName);
-        if (Optional<std::string> dylibPath = resolveDylibPath(candidate))
+        if (Optional<StringRef> dylibPath =
+                resolveDylibPath(saver.save(candidate.str())))
           return loadDylib(*dylibPath, umbrella);
       }
     } else if (Optional<StringRef> dylibPath = findPathCombination(
                    stem, config->librarySearchPaths, {".tbd", ".dylib"}))
       return loadDylib(*dylibPath, umbrella);
   }
 
   // 2. As absolute path.
   if (path::is_absolute(path, path::Style::posix))
     for (StringRef root : config->systemLibraryRoots)
-      if (Optional<std::string> dylibPath =
-              resolveDylibPath((root + path).str()))
+      if (Optional<StringRef> dylibPath =
+              resolveDylibPath(saver.save((root + path).str())))
         return loadDylib(*dylibPath, umbrella);
 
   // 3. As relative path.
 
   // TODO: Handle -dylib_file
 
   // Replace @executable_path, @loader_path, @rpath prefixes in install name.
   SmallString<128> newPath;
static DylibFile *findDylib(StringRef path, DylibFile *umbrella,
   } else if (path.startswith("@rpath/")) {
     for (StringRef rpath : umbrella->rpaths) {
       newPath.clear();
       if (rpath.consume_front("@loader_path/")) {
         fs::real_path(umbrella->getName(), newPath);
         path::remove_filename(newPath);
       }
       path::append(newPath, rpath, path.drop_front(strlen("@rpath/")));
-      if (Optional<std::string> dylibPath = resolveDylibPath(newPath))
+      if (Optional<StringRef> dylibPath =
+              resolveDylibPath(saver.save(newPath.str())))
         return loadDylib(*dylibPath, umbrella);
     }
   }
 
   // FIXME: Should this be further up?
   if (currentTopLevelTapi) {
     for (InterfaceFile &child :
          make_pointee_range(currentTopLevelTapi->documents())) {
       assert(child.documents().empty());
       if (path == child.getInstallName()) {
         auto file = make<DylibFile>(child, umbrella);
         file->parseReexports(child);
         return file;
       }
     }
   }
 
-  if (Optional<std::string> dylibPath = resolveDylibPath(path))
+  if (Optional<StringRef> dylibPath = resolveDylibPath(path))
     return loadDylib(*dylibPath, umbrella);
 
   return nullptr;
 }
 
 // If a re-exported dylib is public (lives in /usr/lib or
 // /System/Library/Frameworks), then it is considered implicitly linked: we
 // should bind to its symbols directly instead of via the re-exporting umbrella

lld/test/MachO/lc-linker-option.ll

 ; LIB2-NEXT:    name /System/Library/Frameworks/CoreFoundation.framework/CoreFoundation
 ; LIB2:          cmd LC_LOAD_DYLIB
 ; LIB2-NEXT: cmdsize
 ; LIB2-NEXT:    name /usr/lib/libc++abi.dylib
 
 ; RUN: llvm-as %t/invalid.ll -o %t/invalid.o
 ; RUN: not %lld %t/invalid.o -o /dev/null 2>&1 | FileCheck --check-prefix=INVALID %s
 ; INVALID: error: -why_load is not allowed in LC_LINKER_OPTION
 
+; RUN: llc %t/foo.ll -o %t/foo.o -filetype=obj
+; RUN: mkdir -p %t/foo.framework/Versions/A
+; RUN: llvm-ar rcs %t/foo.framework/Versions/A/foo %t/foo.o
+; RUN: ln -sf A %t/foo.framework/Versions/Current
+; RUN: ln -sf Versions/Current/foo %t/foo.framework/foo
+; RUN: llc %t/objfile1.ll -o %t/objfile1.o -filetype=obj
+; RUN: llc %t/objfile2.ll -o %t/objfile2.o -filetype=obj
+; RUN: llc %t/main.ll -o %t/main.o -filetype=obj
+; RUN: %lld -demangle -ObjC %t/objfile1.o %t/objfile2.o %t/main.o -o %t/main.out -arch x86_64 -platform_version macos 11.0.0 0.0.0 -F%t
+
 ;--- framework.ll
 target triple = "x86_64-apple-macosx10.15.0"
 target datalayout = "e-m:o-p270:32:32-p271:32:32-p272:64:64-i64:64-f80:128-n8:16:32:64-S128"
 
 !0 = !{!"-framework", !"CoreFoundation"}
 !llvm.linker.options = !{!0}
 
 declare void @_CFBigNumGetInt128(...)

 target datalayout = "e-m:o-p270:32:32-p271:32:32-p272:64:64-i64:64-f80:128-n8:16:32:64-S128"
 
 !0 = !{!"-why_load"}
 !llvm.linker.options = !{!0}
 
 define void @main() {
   ret void
 }
+
+;--- objfile1.ll
+target triple = "x86_64-apple-macosx10.15.0"
+target datalayout = "e-m:o-p270:32:32-p271:32:32-p272:64:64-i64:64-f80:128-n8:16:32:64-S128"
+
+!0 = !{!"-framework", !"foo"}
+!llvm.linker.options = !{!0}
+
+;--- objfile2.ll
+target triple = "x86_64-apple-macosx10.15.0"
+target datalayout = "e-m:o-p270:32:32-p271:32:32-p272:64:64-i64:64-f80:128-n8:16:32:64-S128"
+
+!0 = !{!"-framework", !"foo"}
+!llvm.linker.options = !{!0}
+
+;--- main.ll
+; Function Attrs: noinline norecurse nounwind optnone ssp uwtable mustprogress
+define dso_local i32 @main() #0 {
+  %1 = alloca i32, align 4
+  store i32 0, i32* %1, align 4
+  ret i32 0
+}
+
+;--- foo.ll
+target datalayout = "e-m:o-p270:32:32-p271:32:32-p272:64:64-i64:64-f80:128-n8:16:32:64-S128"
+target triple = "x86_64-apple-macosx10.15.0"
+
+%0 = type opaque
+%struct._class_t = type { %struct._class_t*, %struct._class_t*, i8* (i8*, i8*)**, %struct._class_ro_t* }
+%struct._class_ro_t = type { i32, i32, i32, i8*, i8*, %struct.__method_list_t*, %struct._objc_protocol_list*, %struct._ivar_list_t*, i8*, %struct._prop_list_t* }
+%struct.__method_list_t = type { i32, i32, [0 x %struct._objc_method] }
+%struct._objc_method = type { i8*, i8*, i8* }
+%struct._objc_protocol_list = type { i64, [0 x %struct._protocol_t*] }
+%struct._protocol_t = type { i8*, i8*, %struct._objc_protocol_list*, %struct.__method_list_t*, %struct.__method_list_t*, %struct.__method_list_t*, %struct.__method_list_t*, %struct._prop_list_t*, i32, i32, i8**, i8*, %struct._prop_list_t* }
+%struct._ivar_list_t = type { i32, i32, [0 x %struct._ivar_t] }
+%struct._ivar_t = type { i64*, i8*, i8*, i32, i32 }
+%struct._prop_list_t = type { i32, i32, [0 x %struct._prop_t] }
+%struct._prop_t = type { i8*, i8* }
+
+@"OBJC_CLASS_$_TestClass" = global %struct._class_t { %struct._class_t* @"OBJC_METACLASS_$_TestClass", %struct._class_t* null, i8* (i8*, i8*)** null, %struct._class_ro_t* @"_OBJC_CLASS_RO_$_TestClass" }, section "__DATA, __objc_data", align 8
+@"OBJC_METACLASS_$_TestClass" = global %struct._class_t { %struct._class_t* @"OBJC_METACLASS_$_TestClass", %struct._class_t* @"OBJC_CLASS_$_TestClass", i8* (i8*, i8*)** null, %struct._class_ro_t* @"_OBJC_METACLASS_RO_$_TestClass" }, section "__DATA, __objc_data", align 8
+@OBJC_CLASS_NAME_ = private unnamed_addr constant [10 x i8] c"TestClass\00", section "__TEXT,__objc_classname,cstring_literals", align 1
+@"_OBJC_METACLASS_RO_$_TestClass" = internal global %struct._class_ro_t { i32 131, i32 40, i32 40, i8* null, i8* getelementptr inbounds ([10 x i8], [10 x i8]* @OBJC_CLASS_NAME_, i32 0, i32 0), %struct.__method_list_t* null, %struct._objc_protocol_list* null, %struct._ivar_list_t* null, i8* null, %struct._prop_list_t* null }, section "__DATA, __objc_const", align 8
+@OBJC_METH_VAR_NAME_ = private unnamed_addr constant [14 x i8] c"ExampleMethod\00", section "__TEXT,__objc_methname,cstring_literals", align 1
+@OBJC_METH_VAR_TYPE_ = private unnamed_addr constant [8 x i8] c"v16@0:8\00", section "__TEXT,__objc_methtype,cstring_literals", align 1
+@"_OBJC_$_INSTANCE_METHODS_TestClass" = internal global { i32, i32, [1 x %struct._objc_method] } { i32 24, i32 1, [1 x %struct._objc_method] [%struct._objc_method { i8* getelementptr inbounds ([14 x i8], [14 x i8]* @OBJC_METH_VAR_NAME_, i32 0, i32 0), i8* getelementptr inbounds ([8 x i8], [8 x i8]* @OBJC_METH_VAR_TYPE_, i32 0, i32 0), i8* bitcast (void (%0*, i8*)* @"\01-[TestClass ExampleMethod]" to i8*) }] }, section "__DATA, __objc_const", align 8
+@"_OBJC_CLASS_RO_$_TestClass" = internal global %struct._class_ro_t { i32 130, i32 0, i32 0, i8* null, i8* getelementptr inbounds ([10 x i8], [10 x i8]* @OBJC_CLASS_NAME_, i32 0, i32 0), %struct.__method_list_t* bitcast ({ i32, i32, [1 x %struct._objc_method] }* @"_OBJC_$_INSTANCE_METHODS_TestClass" to %struct.__method_list_t*), %struct._objc_protocol_list* null, %struct._ivar_list_t* null, i8* null, %struct._prop_list_t* null }, section "__DATA, __objc_const", align 8
+@"OBJC_LABEL_CLASS_$" = private global [1 x i8*] [i8* bitcast (%struct._class_t* @"OBJC_CLASS_$_TestClass" to i8*)], section "__DATA,__objc_classlist,regular,no_dead_strip", align 8
[e-mail] = appending global [5 x i8*] [i8* getelementptr inbounds ([10 x i8], [10 x i8]* @OBJC_CLASS_NAME_, i32 0, i32 0), i8* bitcast ([1 x i8*]* @"OBJC_LABEL_CLASS_$" to i8*), i8* getelementptr inbounds ([14 x i8], [14 x i8]* @OBJC_METH_VAR_NAME_, i32 0, i32 0), i8* getelementptr inbounds ([8 x i8], [8 x i8]* @OBJC_METH_VAR_TYPE_, i32 0, i32 0), i8* bitcast ({ i32, i32, [1 x %struct._objc_method] }* @"_OBJC_$_INSTANCE_METHODS_TestClass" to i8*)], section "llvm.metadata"
+
+; Function Attrs: norecurse nounwind optsize readnone ssp uwtable
+define internal void @"\01-[TestClass ExampleMethod]"(%0* nocapture %0, i8* nocapture %1) #0 {
+  ret void
+}
 No newline at end of file