| // RUN: %clangxx_asan -fsanitize=use-after-return -O0 %s -o %t && \ |
| // RUN: not %t 2>&1 | FileCheck %s |
| // RUN: %clangxx_asan -fsanitize=use-after-return -O2 %s -o %t && \ |
| // RUN: not %t 2>&1 | FileCheck %s |
| |
| #include <stdio.h> |
| #include <string.h> |
| #include <stdlib.h> |
| |
| __attribute__((noinline)) |
| char *pretend_to_do_something(char *x) { |
| __asm__ __volatile__("" : : "r" (x) : "memory"); |
| return x; |
| } |
| |
| __attribute__((noinline)) |
| char *LeakStack() { |
| char x[1024]; |
| memset(x, 0, sizeof(x)); |
| return pretend_to_do_something(x); |
| } |
| |
| template<size_t kFrameSize> |
| __attribute__((noinline)) |
| void RecuriveFunctionWithStackFrame(int depth) { |
| if (depth <= 0) return; |
| char x[kFrameSize]; |
| x[0] = depth; |
| pretend_to_do_something(x); |
| RecuriveFunctionWithStackFrame<kFrameSize>(depth - 1); |
| } |
| |
| int main(int argc, char **argv) { |
| int n_iter = argc >= 2 ? atoi(argv[1]) : 1000; |
| int depth = argc >= 3 ? atoi(argv[2]) : 500; |
| for (int i = 0; i < n_iter; i++) { |
| RecuriveFunctionWithStackFrame<10>(depth); |
| RecuriveFunctionWithStackFrame<100>(depth); |
| RecuriveFunctionWithStackFrame<500>(depth); |
| RecuriveFunctionWithStackFrame<1024>(depth); |
| RecuriveFunctionWithStackFrame<2000>(depth); |
| RecuriveFunctionWithStackFrame<5000>(depth); |
| RecuriveFunctionWithStackFrame<10000>(depth); |
| } |
| char *stale_stack = LeakStack(); |
| RecuriveFunctionWithStackFrame<1024>(10); |
| stale_stack[100]++; |
| // CHECK: ERROR: AddressSanitizer: stack-use-after-return on address |
| // CHECK: is located in stack of thread T0 at offset 132 in frame |
| // CHECK: in LeakStack(){{.*}}heavy_uar_test.cc: |
| // CHECK: [32, 1056) 'x' |
| return 0; |
| } |