; NOTE: Assertions have been autogenerated by utils/update_llc_test_checks.py UTC_ARGS: --version 5
; RUN: llc -mtriple=i386-pc-windows-msvc < %s -o - | FileCheck -check-prefix=MSVC-X86 %s
; RUN: llc -mtriple=x86_64-pc-windows-msvc < %s -o - | FileCheck -check-prefix=MSVC-X64 %s

; Make sure fastisel falls back and does something secure.
; RUN: llc -mtriple=i686-pc-windows-msvc -O0 < %s -o - | FileCheck -check-prefix=MSVC-X86-O0 %s
; RUN: llc -mtriple=x86_64-pc-windows-msvc -O0 < %s -o - | FileCheck -check-prefix=MSVC-X64-O0 %s

@"\01LC" = internal constant [11 x i8] c"buf == %s\0A\00"    ; <ptr> [#uses=1]

define void @test(ptr %a) nounwind ssp {
; MSVC-X86-LABEL: test:
; MSVC-X86:       # %bb.0: # %entry
; MSVC-X86-NEXT:    pushl %esi
; MSVC-X86-NEXT:    subl $12, %esp
; MSVC-X86-NEXT:    movl ___security_cookie, %eax
; MSVC-X86-NEXT:    xorl %esp, %eax
; MSVC-X86-NEXT:    movl %eax, {{[0-9]+}}(%esp)
; MSVC-X86-NEXT:    movl %esp, %esi
; MSVC-X86-NEXT:    pushl {{[0-9]+}}(%esp)
; MSVC-X86-NEXT:    pushl %esi
; MSVC-X86-NEXT:    calll _strcpy
; MSVC-X86-NEXT:    addl $8, %esp
; MSVC-X86-NEXT:    pushl %esi
; MSVC-X86-NEXT:    pushl $LC
; MSVC-X86-NEXT:    calll _printf
; MSVC-X86-NEXT:    addl $8, %esp
; MSVC-X86-NEXT:    movl {{[0-9]+}}(%esp), %ecx
; MSVC-X86-NEXT:    xorl %esp, %ecx
; MSVC-X86-NEXT:    calll @__security_check_cookie@4
; MSVC-X86-NEXT:    addl $12, %esp
; MSVC-X86-NEXT:    popl %esi
; MSVC-X86-NEXT:    retl
;
; MSVC-X64-LABEL: test:
; MSVC-X64:       # %bb.0: # %entry
; MSVC-X64-NEXT:    pushq %rsi
; MSVC-X64-NEXT:    subq $64, %rsp
; MSVC-X64-NEXT:    movq %rcx, %rdx
; MSVC-X64-NEXT:    movq __security_cookie(%rip), %rax
; MSVC-X64-NEXT:    xorq %rsp, %rax
; MSVC-X64-NEXT:    movq %rax, {{[0-9]+}}(%rsp)
; MSVC-X64-NEXT:    movq %rcx, {{[0-9]+}}(%rsp)
; MSVC-X64-NEXT:    leaq {{[0-9]+}}(%rsp), %rsi
; MSVC-X64-NEXT:    movq %rsi, %rcx
; MSVC-X64-NEXT:    callq strcpy
; MSVC-X64-NEXT:    leaq LC(%rip), %rcx
; MSVC-X64-NEXT:    movq %rsi, %rdx
; MSVC-X64-NEXT:    callq printf
; MSVC-X64-NEXT:    movq {{[0-9]+}}(%rsp), %rcx
; MSVC-X64-NEXT:    xorq %rsp, %rcx
; MSVC-X64-NEXT:    cmpq __security_cookie(%rip), %rcx
; MSVC-X64-NEXT:    jne .LBB0_2
; MSVC-X64-NEXT:  # %bb.1:
; MSVC-X64-NEXT:    addq $64, %rsp
; MSVC-X64-NEXT:    popq %rsi
; MSVC-X64-NEXT:    retq
; MSVC-X64-NEXT:  .LBB0_2:
; MSVC-X64-NEXT:    callq __security_check_cookie
; MSVC-X64-NEXT:    int3
;
; MSVC-X86-O0-LABEL: test:
; MSVC-X86-O0:       # %bb.0: # %entry
; MSVC-X86-O0-NEXT:    subl $20, %esp
; MSVC-X86-O0-NEXT:    movl {{[0-9]+}}(%esp), %eax
; MSVC-X86-O0-NEXT:    movl ___security_cookie, %eax
; MSVC-X86-O0-NEXT:    xorl %esp, %eax
; MSVC-X86-O0-NEXT:    movl %eax, {{[0-9]+}}(%esp)
; MSVC-X86-O0-NEXT:    movl {{[0-9]+}}(%esp), %ecx
; MSVC-X86-O0-NEXT:    movl %esp, %eax
; MSVC-X86-O0-NEXT:    movl %ecx, 4(%eax)
; MSVC-X86-O0-NEXT:    leal {{[0-9]+}}(%esp), %ecx
; MSVC-X86-O0-NEXT:    movl %ecx, (%eax)
; MSVC-X86-O0-NEXT:    calll _strcpy
; MSVC-X86-O0-NEXT:    leal LC, %ecx
; MSVC-X86-O0-NEXT:    leal {{[0-9]+}}(%esp), %eax
; MSVC-X86-O0-NEXT:    movl %ecx, (%esp)
; MSVC-X86-O0-NEXT:    movl %eax, {{[0-9]+}}(%esp)
; MSVC-X86-O0-NEXT:    calll _printf
; MSVC-X86-O0-NEXT:  # %bb.1: # %return
; MSVC-X86-O0-NEXT:    movl {{[0-9]+}}(%esp), %ecx
; MSVC-X86-O0-NEXT:    xorl %esp, %ecx
; MSVC-X86-O0-NEXT:    calll @__security_check_cookie@4
; MSVC-X86-O0-NEXT:    addl $20, %esp
; MSVC-X86-O0-NEXT:    retl
;
; MSVC-X64-O0-LABEL: test:
; MSVC-X64-O0:       # %bb.0: # %entry
; MSVC-X64-O0-NEXT:    subq $56, %rsp
; MSVC-X64-O0-NEXT:    movq __security_cookie(%rip), %rax
; MSVC-X64-O0-NEXT:    xorq %rsp, %rax
; MSVC-X64-O0-NEXT:    movq %rax, {{[0-9]+}}(%rsp)
; MSVC-X64-O0-NEXT:    movq %rcx, {{[0-9]+}}(%rsp)
; MSVC-X64-O0-NEXT:    movq {{[0-9]+}}(%rsp), %rdx
; MSVC-X64-O0-NEXT:    leaq {{[0-9]+}}(%rsp), %rcx
; MSVC-X64-O0-NEXT:    callq strcpy
; MSVC-X64-O0-NEXT:    leaq LC(%rip), %rcx
; MSVC-X64-O0-NEXT:    leaq {{[0-9]+}}(%rsp), %rdx
; MSVC-X64-O0-NEXT:    callq printf
; MSVC-X64-O0-NEXT:  # %bb.1: # %return
; MSVC-X64-O0-NEXT:    movq {{[0-9]+}}(%rsp), %rcx
; MSVC-X64-O0-NEXT:    xorq %rsp, %rcx
; MSVC-X64-O0-NEXT:    callq __security_check_cookie
; MSVC-X64-O0-NEXT:    addq $56, %rsp
; MSVC-X64-O0-NEXT:    retq
entry:
 %a_addr = alloca ptr    ; <ptr> [#uses=2]
 %buf = alloca [8 x i8]    ; <ptr> [#uses=2]
 store ptr %a, ptr %a_addr
 %0 = load ptr, ptr %a_addr, align 4    ; <ptr> [#uses=1]
 %1 = call ptr @strcpy(ptr %buf, ptr %0) nounwind   ; <ptr> [#uses=0]
 %2 = call i32 (ptr, ...) @printf(ptr @"\01LC", ptr %buf) nounwind    ; <i32> [#uses=0]
 br label %return

return:    ; preds = %entry
 ret void
}

declare void @escape(ptr)

define void @test_vla(i32 %n) nounwind ssp {
; MSVC-X86-LABEL: test_vla:
; MSVC-X86:       # %bb.0:
; MSVC-X86-NEXT:    pushl %ebp
; MSVC-X86-NEXT:    movl %esp, %ebp
; MSVC-X86-NEXT:    pushl %eax
; MSVC-X86-NEXT:    movl 8(%ebp), %eax
; MSVC-X86-NEXT:    movl ___security_cookie, %ecx
; MSVC-X86-NEXT:    xorl %ebp, %ecx
; MSVC-X86-NEXT:    movl %ecx, -4(%ebp)
; MSVC-X86-NEXT:    shll $2, %eax
; MSVC-X86-NEXT:    calll __chkstk
; MSVC-X86-NEXT:    movl %esp, %eax
; MSVC-X86-NEXT:    pushl %eax
; MSVC-X86-NEXT:    calll _escape
; MSVC-X86-NEXT:    addl $4, %esp
; MSVC-X86-NEXT:    movl -4(%ebp), %ecx
; MSVC-X86-NEXT:    xorl %ebp, %ecx
; MSVC-X86-NEXT:    calll @__security_check_cookie@4
; MSVC-X86-NEXT:    movl %ebp, %esp
; MSVC-X86-NEXT:    popl %ebp
; MSVC-X86-NEXT:    retl
;
; MSVC-X64-LABEL: test_vla:
; MSVC-X64:       # %bb.0:
; MSVC-X64-NEXT:    pushq %rbp
; MSVC-X64-NEXT:    subq $16, %rsp
; MSVC-X64-NEXT:    leaq {{[0-9]+}}(%rsp), %rbp
; MSVC-X64-NEXT:    movq __security_cookie(%rip), %rax
; MSVC-X64-NEXT:    xorq %rbp, %rax
; MSVC-X64-NEXT:    movq %rax, -8(%rbp)
; MSVC-X64-NEXT:    movl %ecx, %eax
; MSVC-X64-NEXT:    leaq 15(,%rax,4), %rax
; MSVC-X64-NEXT:    andq $-16, %rax
; MSVC-X64-NEXT:    callq __chkstk
; MSVC-X64-NEXT:    subq %rax, %rsp
; MSVC-X64-NEXT:    movq %rsp, %rcx
; MSVC-X64-NEXT:    subq $32, %rsp
; MSVC-X64-NEXT:    callq escape
; MSVC-X64-NEXT:    addq $32, %rsp
; MSVC-X64-NEXT:    movq -8(%rbp), %rcx
; MSVC-X64-NEXT:    xorq %rbp, %rcx
; MSVC-X64-NEXT:    cmpq __security_cookie(%rip), %rcx
; MSVC-X64-NEXT:    jne .LBB1_2
; MSVC-X64-NEXT:  # %bb.1:
; MSVC-X64-NEXT:    movq %rbp, %rsp
; MSVC-X64-NEXT:    popq %rbp
; MSVC-X64-NEXT:    retq
; MSVC-X64-NEXT:  .LBB1_2:
; MSVC-X64-NEXT:    subq $32, %rsp
; MSVC-X64-NEXT:    callq __security_check_cookie
; MSVC-X64-NEXT:    addq $32, %rsp
; MSVC-X64-NEXT:    int3
;
; MSVC-X86-O0-LABEL: test_vla:
; MSVC-X86-O0:       # %bb.0:
; MSVC-X86-O0-NEXT:    pushl %ebp
; MSVC-X86-O0-NEXT:    movl %esp, %ebp
; MSVC-X86-O0-NEXT:    pushl %eax
; MSVC-X86-O0-NEXT:    movl 8(%ebp), %eax
; MSVC-X86-O0-NEXT:    movl ___security_cookie, %ecx
; MSVC-X86-O0-NEXT:    xorl %ebp, %ecx
; MSVC-X86-O0-NEXT:    movl %ecx, -4(%ebp)
; MSVC-X86-O0-NEXT:    shll $2, %eax
; MSVC-X86-O0-NEXT:    calll __chkstk
; MSVC-X86-O0-NEXT:    movl %esp, %eax
; MSVC-X86-O0-NEXT:    subl $4, %esp
; MSVC-X86-O0-NEXT:    movl %eax, (%esp)
; MSVC-X86-O0-NEXT:    calll _escape
; MSVC-X86-O0-NEXT:    addl $4, %esp
; MSVC-X86-O0-NEXT:    movl -4(%ebp), %ecx
; MSVC-X86-O0-NEXT:    xorl %ebp, %ecx
; MSVC-X86-O0-NEXT:    calll @__security_check_cookie@4
; MSVC-X86-O0-NEXT:    movl %ebp, %esp
; MSVC-X86-O0-NEXT:    popl %ebp
; MSVC-X86-O0-NEXT:    retl
;
; MSVC-X64-O0-LABEL: test_vla:
; MSVC-X64-O0:       # %bb.0:
; MSVC-X64-O0-NEXT:    pushq %rbp
; MSVC-X64-O0-NEXT:    subq $16, %rsp
; MSVC-X64-O0-NEXT:    leaq {{[0-9]+}}(%rsp), %rbp
; MSVC-X64-O0-NEXT:    movq __security_cookie(%rip), %rax
; MSVC-X64-O0-NEXT:    xorq %rbp, %rax
; MSVC-X64-O0-NEXT:    movq %rax, -8(%rbp)
; MSVC-X64-O0-NEXT:    movl %ecx, %eax
; MSVC-X64-O0-NEXT:    # kill: def $rax killed $eax
; MSVC-X64-O0-NEXT:    leaq 15(,%rax,4), %rax
; MSVC-X64-O0-NEXT:    andq $-16, %rax
; MSVC-X64-O0-NEXT:    callq __chkstk
; MSVC-X64-O0-NEXT:    subq %rax, %rsp
; MSVC-X64-O0-NEXT:    movq %rsp, %rcx
; MSVC-X64-O0-NEXT:    subq $32, %rsp
; MSVC-X64-O0-NEXT:    callq escape
; MSVC-X64-O0-NEXT:    addq $32, %rsp
; MSVC-X64-O0-NEXT:    movq -8(%rbp), %rcx
; MSVC-X64-O0-NEXT:    xorq %rbp, %rcx
; MSVC-X64-O0-NEXT:    subq $32, %rsp
; MSVC-X64-O0-NEXT:    callq __security_check_cookie
; MSVC-X64-O0-NEXT:    movq %rbp, %rsp
; MSVC-X64-O0-NEXT:    popq %rbp
; MSVC-X64-O0-NEXT:    retq
  %vla = alloca i32, i32 %n
  call void @escape(ptr %vla)
  ret void
}

; This case is interesting because we address local variables with RBX but XOR
; the guard value with RBP. That's fine, either value will do, as long as they
; are the same across the life of the frame.

define void @test_vla_realign(i32 %n) nounwind ssp {
; MSVC-X86-LABEL: test_vla_realign:
; MSVC-X86:       # %bb.0:
; MSVC-X86-NEXT:    pushl %ebp
; MSVC-X86-NEXT:    movl %esp, %ebp
; MSVC-X86-NEXT:    pushl %edi
; MSVC-X86-NEXT:    pushl %esi
; MSVC-X86-NEXT:    andl $-32, %esp
; MSVC-X86-NEXT:    subl $32, %esp
; MSVC-X86-NEXT:    movl %esp, %esi
; MSVC-X86-NEXT:    movl 8(%ebp), %eax
; MSVC-X86-NEXT:    movl ___security_cookie, %ecx
; MSVC-X86-NEXT:    xorl %ebp, %ecx
; MSVC-X86-NEXT:    movl %ecx, 12(%esi)
; MSVC-X86-NEXT:    shll $2, %eax
; MSVC-X86-NEXT:    calll __chkstk
; MSVC-X86-NEXT:    movl %esp, %edi
; MSVC-X86-NEXT:    movl %esi, %eax
; MSVC-X86-NEXT:    pushl %eax
; MSVC-X86-NEXT:    calll _escape
; MSVC-X86-NEXT:    addl $4, %esp
; MSVC-X86-NEXT:    pushl %edi
; MSVC-X86-NEXT:    calll _escape
; MSVC-X86-NEXT:    addl $4, %esp
; MSVC-X86-NEXT:    movl 12(%esi), %ecx
; MSVC-X86-NEXT:    xorl %ebp, %ecx
; MSVC-X86-NEXT:    calll @__security_check_cookie@4
; MSVC-X86-NEXT:    leal -8(%ebp), %esp
; MSVC-X86-NEXT:    popl %esi
; MSVC-X86-NEXT:    popl %edi
; MSVC-X86-NEXT:    popl %ebp
; MSVC-X86-NEXT:    retl
;
; MSVC-X64-LABEL: test_vla_realign:
; MSVC-X64:       # %bb.0:
; MSVC-X64-NEXT:    pushq %rbp
; MSVC-X64-NEXT:    pushq %rsi
; MSVC-X64-NEXT:    pushq %rbx
; MSVC-X64-NEXT:    subq $32, %rsp
; MSVC-X64-NEXT:    leaq {{[0-9]+}}(%rsp), %rbp
; MSVC-X64-NEXT:    andq $-32, %rsp
; MSVC-X64-NEXT:    movq %rsp, %rbx
; MSVC-X64-NEXT:    movq __security_cookie(%rip), %rax
; MSVC-X64-NEXT:    xorq %rbp, %rax
; MSVC-X64-NEXT:    movq %rax, 24(%rbx)
; MSVC-X64-NEXT:    movl %ecx, %eax
; MSVC-X64-NEXT:    leaq 15(,%rax,4), %rax
; MSVC-X64-NEXT:    andq $-16, %rax
; MSVC-X64-NEXT:    callq __chkstk
; MSVC-X64-NEXT:    subq %rax, %rsp
; MSVC-X64-NEXT:    movq %rsp, %rsi
; MSVC-X64-NEXT:    subq $32, %rsp
; MSVC-X64-NEXT:    movq %rbx, %rcx
; MSVC-X64-NEXT:    callq escape
; MSVC-X64-NEXT:    movq %rsi, %rcx
; MSVC-X64-NEXT:    callq escape
; MSVC-X64-NEXT:    addq $32, %rsp
; MSVC-X64-NEXT:    movq 24(%rbx), %rcx
; MSVC-X64-NEXT:    xorq %rbp, %rcx
; MSVC-X64-NEXT:    cmpq __security_cookie(%rip), %rcx
; MSVC-X64-NEXT:    jne .LBB2_2
; MSVC-X64-NEXT:  # %bb.1:
; MSVC-X64-NEXT:    movq %rbp, %rsp
; MSVC-X64-NEXT:    popq %rbx
; MSVC-X64-NEXT:    popq %rsi
; MSVC-X64-NEXT:    popq %rbp
; MSVC-X64-NEXT:    retq
; MSVC-X64-NEXT:  .LBB2_2:
; MSVC-X64-NEXT:    subq $32, %rsp
; MSVC-X64-NEXT:    callq __security_check_cookie
; MSVC-X64-NEXT:    addq $32, %rsp
; MSVC-X64-NEXT:    int3
;
; MSVC-X86-O0-LABEL: test_vla_realign:
; MSVC-X86-O0:       # %bb.0:
; MSVC-X86-O0-NEXT:    pushl %ebp
; MSVC-X86-O0-NEXT:    movl %esp, %ebp
; MSVC-X86-O0-NEXT:    pushl %esi
; MSVC-X86-O0-NEXT:    andl $-32, %esp
; MSVC-X86-O0-NEXT:    subl $64, %esp
; MSVC-X86-O0-NEXT:    movl %esp, %esi
; MSVC-X86-O0-NEXT:    movl 8(%ebp), %eax
; MSVC-X86-O0-NEXT:    movl ___security_cookie, %ecx
; MSVC-X86-O0-NEXT:    xorl %ebp, %ecx
; MSVC-X86-O0-NEXT:    movl %ecx, 48(%esi)
; MSVC-X86-O0-NEXT:    shll $2, %eax
; MSVC-X86-O0-NEXT:    calll __chkstk
; MSVC-X86-O0-NEXT:    movl %esp, %eax
; MSVC-X86-O0-NEXT:    movl %eax, 28(%esi) # 4-byte Spill
; MSVC-X86-O0-NEXT:    leal 32(%esi), %eax
; MSVC-X86-O0-NEXT:    subl $4, %esp
; MSVC-X86-O0-NEXT:    movl %eax, (%esp)
; MSVC-X86-O0-NEXT:    calll _escape
; MSVC-X86-O0-NEXT:    movl 28(%esi), %eax # 4-byte Reload
; MSVC-X86-O0-NEXT:    movl %eax, (%esp)
; MSVC-X86-O0-NEXT:    calll _escape
; MSVC-X86-O0-NEXT:    addl $4, %esp
; MSVC-X86-O0-NEXT:    movl 48(%esi), %ecx
; MSVC-X86-O0-NEXT:    xorl %ebp, %ecx
; MSVC-X86-O0-NEXT:    calll @__security_check_cookie@4
; MSVC-X86-O0-NEXT:    leal -4(%ebp), %esp
; MSVC-X86-O0-NEXT:    popl %esi
; MSVC-X86-O0-NEXT:    popl %ebp
; MSVC-X86-O0-NEXT:    retl
;
; MSVC-X64-O0-LABEL: test_vla_realign:
; MSVC-X64-O0:       # %bb.0:
; MSVC-X64-O0-NEXT:    pushq %rbp
; MSVC-X64-O0-NEXT:    pushq %rbx
; MSVC-X64-O0-NEXT:    subq $72, %rsp
; MSVC-X64-O0-NEXT:    leaq {{[0-9]+}}(%rsp), %rbp
; MSVC-X64-O0-NEXT:    andq $-32, %rsp
; MSVC-X64-O0-NEXT:    movq %rsp, %rbx
; MSVC-X64-O0-NEXT:    movq __security_cookie(%rip), %rax
; MSVC-X64-O0-NEXT:    xorq %rbp, %rax
; MSVC-X64-O0-NEXT:    movq %rax, 64(%rbx)
; MSVC-X64-O0-NEXT:    movl %ecx, %eax
; MSVC-X64-O0-NEXT:    # kill: def $rax killed $eax
; MSVC-X64-O0-NEXT:    leaq 15(,%rax,4), %rax
; MSVC-X64-O0-NEXT:    andq $-16, %rax
; MSVC-X64-O0-NEXT:    callq __chkstk
; MSVC-X64-O0-NEXT:    subq %rax, %rsp
; MSVC-X64-O0-NEXT:    movq %rsp, %rax
; MSVC-X64-O0-NEXT:    movq %rax, 24(%rbx) # 8-byte Spill
; MSVC-X64-O0-NEXT:    leaq 32(%rbx), %rcx
; MSVC-X64-O0-NEXT:    subq $32, %rsp
; MSVC-X64-O0-NEXT:    callq escape
; MSVC-X64-O0-NEXT:    movq 24(%rbx), %rcx # 8-byte Reload
; MSVC-X64-O0-NEXT:    callq escape
; MSVC-X64-O0-NEXT:    addq $32, %rsp
; MSVC-X64-O0-NEXT:    movq 64(%rbx), %rcx
; MSVC-X64-O0-NEXT:    xorq %rbp, %rcx
; MSVC-X64-O0-NEXT:    subq $32, %rsp
; MSVC-X64-O0-NEXT:    callq __security_check_cookie
; MSVC-X64-O0-NEXT:    leaq 8(%rbp), %rsp
; MSVC-X64-O0-NEXT:    popq %rbx
; MSVC-X64-O0-NEXT:    popq %rbp
; MSVC-X64-O0-NEXT:    retq
  %realign = alloca i32, align 32
  %vla = alloca i32, i32 %n
  call void @escape(ptr %realign)
  call void @escape(ptr %vla)
  ret void
}

declare ptr @strcpy(ptr, ptr) nounwind

declare i32 @printf(ptr, ...) nounwind