exp-sgcheck/tests/hp_bounds.c

#include <stdlib.h>

int main(void)
{
   int  y __attribute__((unused));
   int* x = malloc(sizeof(int) * 100);

   y = x[95];   // ok
   y = x[100];  // overrun
   y = x[-1];   // underrun

   return 0;
}