Fix

BugList.md

@@ -103,7 +103,6 @@ Please contact us or submit a PR if something is missing or inaccurate.
 96. DSE removes store before free() incorrectly (https://llvm.org/PR97956)
 97. GlobalOpt breaks !callees metadata (https://llvm.org/PR121265)
 
-
 ### Bugs found in Z3
 1. Incorrect bitblast for fprem (https://github.com/Z3Prover/z3/issues/2369)
 2. Bug in FPA w/ quantifiers (https://github.com/Z3Prover/z3/issues/2596)
@@ -128,3 +127,20 @@ Please contact us or submit a PR if something is missing or inaccurate.
 21. Unsoundness in elim-uncnstr2 (https://github.com/Z3Prover/z3/issues/6506)
 22. Unsound NaN encoding (https://github.com/Z3Prover/z3/issues/6972)
 23. fp.roundToIntegral gives invalid zero_extend application (https://github.com/Z3Prover/z3/issues/7056)
+
+
+### Mutation bugs
+This section is outdated. All bugs are maintained at alive-mutateBuglist.md (under the same folder) instead
+
+#### Confirmed bugs
+1. InstCombine: 2 related logic bugs from over-generalizing "lshr" to "any shr" (https://llvm.org/PR51351)
+2. Inbounds: might cause problem in signed GEP instruction (https://bugs.llvm.org/show_bug.cgi?id=52429)
+3. NUW and NSW flag in InstSimplify (https://reviews.llvm.org/D116322) 
+
+#### Suspected bugs
+1. This bug combines vectors, UB, and non-standard FP (https://alive2.llvm.org/ce/z/jwZ7uS)
+2. LLVM bug. briefly, uitofp(undef) is more defined than undef, the transformation tries to replace uiofp(undef) with undef (in 2nd lane) (https://alive2.llvm.org/ce/z/CYafMt)
+3. Alive2 Bug. bitcast should not change any bits (cite: langref), bitcast in Alive2 (from float to BV) doesn’t follow this rule. (https://alive2.llvm.org/ce/z/CYafMt )
+4. LLVM bug. For the second lane, with the input from cexp, the source evaluates a result with two possible values (either 0x80000000 or 0x00010000, depends on what the undef in %t2 freezes to); the tgt is undef free but it evaluates to a whole different value 0x00000000. (https://alive2.llvm.org/ce/z/_RDXK-)
+5. Alive2 Bug. Alive2 should limit the parapmeter used in malloc. (https://alive2.llvm.org/ce/z/rEGMoF)
+6. Alive2 Bug. Alive2 is not handing nsz correct for fcmp  (https://alive2.llvm.org/ce/z/RWA-EG)

CMakeLists.txt

@@ -121,6 +121,9 @@ add_library(smt STATIC ${SMT_SRCS})
 
 set(TOOLS_SRCS
   tools/transform.cpp
+  tools/mutator-utils/util.cpp
+  tools/mutator-utils/mutator.cpp
+  tools/mutator-utils/mutator_helper.cpp
 )
 
 add_library(tools STATIC ${TOOLS_SRCS})
@@ -214,6 +217,10 @@ if (BUILD_LLVM_UTILS OR BUILD_TV)
     "tools/alive-exec.cpp"
   )
   target_compile_options(alive-exec PRIVATE -fexceptions)
+
+  add_llvm_executable(alive-mutate
+    "tools/alive-mutate.cpp"
+  )
 
 else()
   set(LLVM_UTIL_SRCS "")
@@ -257,11 +264,12 @@ install(TARGETS alive alive-jobserver)
 #add_library(alive2 SHARED ${IR_SRCS} ${SMT_SRCS} ${TOOLS_SRCS} ${UTIL_SRCS} ${LLVM_UTIL_SRCS})
 
 if (BUILD_LLVM_UTILS OR BUILD_TV)
-  llvm_map_components_to_libnames(llvm_libs support core irreader bitwriter analysis passes transformutils)
+  llvm_map_components_to_libnames(llvm_libs support core irreader analysis passes transformutils scalaropts bitwriter)
 #  target_link_libraries(alive2 PRIVATE ${llvm_libs})
   target_link_libraries(alive-tv PRIVATE ${ALIVE_LIBS_LLVM} ${Z3_LIBRARIES} ${HIREDIS_LIBRARIES} ${llvm_libs})
   target_link_libraries(quick-fuzz PRIVATE ${ALIVE_LIBS_LLVM} ${Z3_LIBRARIES} ${HIREDIS_LIBRARIES} ${llvm_libs})
   target_link_libraries(alive-exec PRIVATE ${ALIVE_LIBS_LLVM} ${Z3_LIBRARIES} ${HIREDIS_LIBRARIES} ${llvm_libs})
+  target_link_libraries(alive-mutate PRIVATE ${ALIVE_LIBS_LLVM} ${Z3_LIBRARIES} ${HIREDIS_LIBRARIES} ${llvm_libs})
   install(TARGETS alive-tv quick-fuzz alive-exec)
 endif()
 

alive-mutateBugList.md

@@ -0,0 +1,58 @@
+## Category 1
+This category is for bugs that generating wrong codes from passes
+1. miscompile due to instcombine(https://github.com/llvm/llvm-project/issues/53252)
+2. Another miscompile due to instcombine(https://github.com/llvm/llvm-project/issues/50693)
+3. NewGVN miscompiles(https://github.com/llvm/llvm-project/issues/53218)
+4. arm64 backend bug (https://github.com/llvm/llvm-project/issues/55003 && https://github.com/llvm/llvm-project/issues/55178)
+5. arm64 miscompile (https://github.com/llvm/llvm-project/issues/55201)
+6. arm64 miscompile due to global isel (https://github.com/llvm/llvm-project/issues/55129)
+7. arm64, x86, and x86-64 miscompile from undef and urem (https://github.com/llvm/llvm-project/issues/55271)
+8. or+and miscompile with global isel on arm64 (https://github.com/llvm/llvm-project/issues/55284)
+9. urem+udiv miscompile with global isel on arm64(https://github.com/llvm/llvm-project/issues/55287)
+10. fshl-related miscompile by arm64 and x86-64 backends(https://github.com/llvm/llvm-project/issues/55296)
+11. arm64 miscompile (https://github.com/llvm/llvm-project/issues/55342)
+12. miscompile from multiple backends (https://github.com/llvm/llvm-project/issues/55484)
+13. miscompile from arm64 backend with (icmp ult (sub -6, -8) 3) (https://github.com/llvm/llvm-project/issues/55490)
+14. miscompile of non-canonical add+icmp by arm64 backend (https://github.com/llvm/llvm-project/issues/55627)
+15. shift/zext-related miscompile by aarch64 backend (https://github.com/llvm/llvm-project/issues/55833)
+<!--16. possible zext-related miscompile with global isel on AArch64 (https://github.com/llvm/llvm-project/issues/56733)-->
+16. miscompile a usub.sat on AArch64 (https://github.com/llvm/llvm-project/issues/58109)
+17. miscompile of a frozen poison by AArch64 backend (https://github.com/llvm/llvm-project/issues/58321)
+18. miscompile from aarch64 backend with global isel (https://github.com/llvm/llvm-project/issues/58431)
+19. i34 miscompile in miscombine (https://github.com/llvm/llvm-project/issues/59836)
+20. AArch64 DAG selection miscompile (https://github.com/llvm/llvm-project/issues/90936)
+21. AArch64 global isel miscompile (https://github.com/llvm/llvm-project/issues/90242)
+22. AArch64 global isel miscompile (https://github.com/llvm/llvm-project/issues/90245)
+23. Loop vectorization miscompile (https://github.com/llvm/llvm-project/issues/89958)
+24. Miscompile of negation of selection (https://github.com/llvm/llvm-project/issues/89669)
+25. Miscompile by SimplifyCFG (https://github.com/llvm/llvm-project/issues/89672)
+26. VectorCombine transform leading to srem by poison  (https://github.com/llvm/llvm-project/issues/89390)
+27. miscompile of vanilla integer code by InstCombine (https://github.com/llvm/llvm-project/issues/89516)
+28. instcombine is wrong about a vector fshr->shl transformation (https://github.com/llvm/llvm-project/issues/89338)
+29. AArch64 miscompile of i1 arithmetic with global isel (https://github.com/llvm/llvm-project/issues/72475)
+
+
+## Category 2
+This category is for bugs that crashes
+1. Instcombine crashes(https://github.com/llvm/llvm-project/issues/52884)
+2. newGVN crashes (https://bugs.llvm.org/show_bug.cgi?id=51618)
+3. VectorCombine crashes(https://github.com/llvm/llvm-project/issues/56377)
+4. InstCombine Crashes(https://github.com/llvm/llvm-project/issues/56463)
+5. InstCombine crashes (https://github.com/llvm/llvm-project/issues/56945)
+6. InstSimplify Bug (https://github.com/llvm/llvm-project/issues/56968)
+7. InstCombine Crash (https://github.com/llvm/llvm-project/issues/56981)
+8. opt crash: "Assertion `GV && "Could not find a corresponding global variable"' failed. (https://github.com/llvm/llvm-project/issues/57832)
+9. aarch64 global isel backend crashes on valid input (https://github.com/llvm/llvm-project/issues/58423)
+10. aarch64 global isel backend assertion violation when translating udiv of i1 (https://github.com/llvm/llvm-project/issues/58425)
+11. fprintf() requires two pointer arguments (https://github.com/llvm/llvm-project/issues/59757)
+12. opt -O2 crash Assertion (Value == 0 || llvm::isPowerOf2_64(Value)) && Alignment is neither 0 nor a power of 2 failed, but works under instcombine(https://github.com/llvm/llvm-project/issues/64687)
+13. opt -O2 crash Assertion false && "memory location set"' failed, but works underinstcombine(https://github.com/llvm/llvm-project/issues/64661)
+14. SORA crash (https://github.com/llvm/llvm-project/issues/72035)
+15. vectorcombine crash (https://github.com/llvm/llvm-project/issues/72034)
+16. fatal error in llvm::DAGTypeLegalizer::ExpandIntRes_FP_TO_UINT for AArch64 (https://github.com/llvm/llvm-project/issues/72806)
+17. SROA crash (https://github.com/llvm/llvm-project/issues/72035)
+18. vectorcombine crash (https://github.com/llvm/llvm-project/issues/72034)
+
+## Category 3
+This category is for that the test file is originaly wrong
+1. Wrong test file in Coroutines(https://github.com/llvm/llvm-project/issues/52912)