CFI: wrong type passed to llvm.type.test with multiple inheritance devirtualization

[dmikulin]

Summary

Fix for https://bugs.llvm.org/show_bug.cgi?id=43390

[filcab]

It seems there's a FIXME anticipating this problem.

@pcc: Can you double-check, please?

Thank you,
Filipe

[pcc]

Can you add a CodeGenCXX test as well, please?

[dmikulin]

Added a new CodeGetCXX test case

[dmikulin]

@pcc : poke

[pcc]

LGTM

clang/lib/CodeGen/CGExprCXX.cpp

if (UseVirtualCall) {
     Callee = CGCallee::forVirtual(CE, MD, This.getAddress(), Ty);
   } else {
     if (SanOpts.has(SanitizerKind::CFINVCall) &&
         MD->getParent()->isDynamicClass()) {
       llvm::Value *VTable;
       const CXXRecordDecl *RD;
       std::tie(VTable, RD) =
           CGM.getCXXABI().LoadVTablePtr(*this, This.getAddress(),
-                                        MD->getParent());
+                                        CalleeDecl->getParent());
       EmitVTablePtrCheckForCall(RD, VTable, CFITCK_NVCall, CE->getBeginLoc());
     }
 
     if (getLangOpts().AppleKext && MD->isVirtual() && HasQualifier)
       Callee = BuildAppleKextVirtualCall(MD, Qualifier, Ty);
     else if (!DevirtualizedMethod)
       Callee =
           CGCallee::forDirect(CGM.GetAddrOfFunction(MD, Ty), GlobalDecl(MD));

compiler-rt/test/cfi/multiple-inheritance2.cpp

+// Test that virtual functions of the derived class can be called through
+// pointers of both base classes without CFI errors.
+// Related to Bugzilla 43390.
+
+// RUN: %clangxx_cfi -o %t1 %s
+// RUN: %run %t1 2>&1 | FileCheck --check-prefix=CFI %s
+
+// CFI: In f1
+// CFI: In f2
+// CFI-NOT: control flow integrity check
+
+// REQUIRES: cxxabi
+
+#include <stdio.h>
+
+class A1 {
+public:
+    virtual void f1() = 0;
+};
+
+class A2 {
+public:
+    virtual void f2() = 0;
+};
+
+
+class B : public A1, public A2 {
+public:
+    void f2() final { fprintf(stderr, "In f2\n"); }
+    void f1() final { fprintf(stderr, "In f1\n"); }
+};
+
+int main() {
+    B b;
+
+    static_cast<A1*>(&b)->f1();
+    static_cast<A2*>(&b)->f2();
+}