blob: c38871ea53623d950fcc548c63b59fd9c34788e8 [file] [log] [blame]
Pirama Arumuga Nainarcdce50b2015-07-01 12:26:56 -07001// Test haystack overflow in strcasestr function
Pirama Arumuga Nainar799172d2016-03-03 15:50:30 -08002// RUN: %clang_asan %s -o %t && %env_asan_opts=strict_string_checks=true not %run %t 2>&1 | FileCheck %s
Pirama Arumuga Nainarcdce50b2015-07-01 12:26:56 -07003
4// Test intercept_strstr asan option
5// Disable other interceptors because strlen may be called inside strcasestr
Pirama Arumuga Nainar799172d2016-03-03 15:50:30 -08006// RUN: %env_asan_opts=intercept_strstr=false:replace_str=false %run %t 2>&1
Pirama Arumuga Nainarcdce50b2015-07-01 12:26:56 -07007
8// There's no interceptor for strcasestr on Windows
9// XFAIL: win32
10
11#define _GNU_SOURCE
12#include <assert.h>
13#include <string.h>
Pirama Arumuga Nainar799172d2016-03-03 15:50:30 -080014#include <sanitizer/asan_interface.h>
Pirama Arumuga Nainarcdce50b2015-07-01 12:26:56 -070015
16int main(int argc, char **argv) {
17 char *r = 0;
18 char s2[] = "c";
Pirama Arumuga Nainar799172d2016-03-03 15:50:30 -080019 char s1[4] = "abC";
20 __asan_poison_memory_region ((char *)&s1[2], 2);
Pirama Arumuga Nainarcdce50b2015-07-01 12:26:56 -070021 r = strcasestr(s1, s2);
Pirama Arumuga Nainar799172d2016-03-03 15:50:30 -080022 // CHECK:'s1' <== Memory access at offset {{[0-9]+}} partially overflows this variable
23 assert(r == s1 + 2);
Pirama Arumuga Nainarcdce50b2015-07-01 12:26:56 -070024 return 0;
25}