2012-08-15 19:26:57 +08:00
|
|
|
// RUN: %clangxx_asan -m64 -O0 %s -o %t && %t 2>&1 | %symbolize > %t.out
|
|
|
|
// RUN: FileCheck %s < %t.out && FileCheck %s --check-prefix=CHECK-%os < %t.out
|
|
|
|
// RUN: %clangxx_asan -m64 -O1 %s -o %t && %t 2>&1 | %symbolize > %t.out
|
|
|
|
// RUN: FileCheck %s < %t.out && FileCheck %s --check-prefix=CHECK-%os < %t.out
|
|
|
|
// RUN: %clangxx_asan -m64 -O2 %s -o %t && %t 2>&1 | %symbolize > %t.out
|
|
|
|
// RUN: FileCheck %s < %t.out && FileCheck %s --check-prefix=CHECK-%os < %t.out
|
|
|
|
// RUN: %clangxx_asan -m64 -O3 %s -o %t && %t 2>&1 | %symbolize > %t.out
|
|
|
|
// RUN: FileCheck %s < %t.out && FileCheck %s --check-prefix=CHECK-%os < %t.out
|
|
|
|
// RUN: %clangxx_asan -m32 -O0 %s -o %t && %t 2>&1 | %symbolize > %t.out
|
|
|
|
// RUN: FileCheck %s < %t.out && FileCheck %s --check-prefix=CHECK-%os < %t.out
|
|
|
|
// RUN: %clangxx_asan -m32 -O1 %s -o %t && %t 2>&1 | %symbolize > %t.out
|
|
|
|
// RUN: FileCheck %s < %t.out && FileCheck %s --check-prefix=CHECK-%os < %t.out
|
|
|
|
// RUN: %clangxx_asan -m32 -O2 %s -o %t && %t 2>&1 | %symbolize > %t.out
|
|
|
|
// RUN: FileCheck %s < %t.out && FileCheck %s --check-prefix=CHECK-%os < %t.out
|
|
|
|
// RUN: %clangxx_asan -m32 -O3 %s -o %t && %t 2>&1 | %symbolize > %t.out
|
|
|
|
// RUN: FileCheck %s < %t.out && FileCheck %s --check-prefix=CHECK-%os < %t.out
|
2012-08-15 16:29:17 +08:00
|
|
|
|
|
|
|
#include <stdlib.h>
|
|
|
|
int main() {
|
|
|
|
char *x = (char*)malloc(10 * sizeof(char));
|
|
|
|
free(x);
|
|
|
|
return x[5];
|
|
|
|
// CHECK: {{.*ERROR: AddressSanitizer heap-use-after-free on address}}
|
|
|
|
// CHECK: {{0x.* at pc 0x.* bp 0x.* sp 0x.*}}
|
|
|
|
// CHECK: {{READ of size 1 at 0x.* thread T0}}
|
2012-08-15 19:26:57 +08:00
|
|
|
// CHECK: {{ #0 0x.* in main .*use-after-free.cc:22}}
|
2012-08-15 16:29:17 +08:00
|
|
|
// CHECK: {{0x.* is located 5 bytes inside of 10-byte region .0x.*,0x.*}}
|
|
|
|
// CHECK: {{freed by thread T0 here:}}
|
|
|
|
|
|
|
|
// CHECK-Linux: {{ #0 0x.* in .*free}}
|
2012-08-15 19:26:57 +08:00
|
|
|
// CHECK-Linux: {{ #1 0x.* in main .*use-after-free.cc:21}}
|
2012-08-15 16:29:17 +08:00
|
|
|
|
|
|
|
// CHECK-Darwin: {{ #0 0x.* in .*mz_free.*}}
|
|
|
|
// We override free() on Darwin, thus no malloc_zone_free
|
|
|
|
// CHECK-Darwin: {{ #1 0x.* in wrap_free}}
|
2012-08-15 19:26:57 +08:00
|
|
|
// CHECK-Darwin: {{ #2 0x.* in main .*use-after-free.cc:21}}
|
2012-08-15 16:29:17 +08:00
|
|
|
|
|
|
|
// CHECK: {{previously allocated by thread T0 here:}}
|
|
|
|
|
|
|
|
// CHECK-Linux: {{ #0 0x.* in .*malloc}}
|
2012-08-15 19:26:57 +08:00
|
|
|
// CHECK-Linux: {{ #1 0x.* in main .*use-after-free.cc:20}}
|
2012-08-15 16:29:17 +08:00
|
|
|
|
|
|
|
// CHECK-Darwin: {{ #0 0x.* in .*mz_malloc.*}}
|
|
|
|
// CHECK-Darwin: {{ #1 0x.* in malloc_zone_malloc.*}}
|
|
|
|
// CHECK-Darwin: {{ #2 0x.* in malloc.*}}
|
2012-08-15 19:26:57 +08:00
|
|
|
// CHECK-Darwin: {{ #3 0x.* in main .*use-after-free.cc:20}}
|
2012-08-15 16:29:17 +08:00
|
|
|
}
|