68 lines · c
1// Test how stack frames are reported (not fully implemented yet).2// RUN: %clang_hwasan %s -o %t3// RUN: not %run %t 3 2 -1 2>&1 | FileCheck %s --check-prefix=R3214// REQUIRES: pointer-tagging5 6#include <stdint.h>7#include <stdlib.h>8void USE(void *x) { // pretend_to_do_something(void *x)9 __asm__ __volatile__("" : : "r" (x) : "memory");10}11void USE2(void *a, void *b) { USE(a); USE(b); }12void USE4(void *a, void *b, void *c, void *d) { USE2(a, b); USE2(c, d); }13 14void BAR(int depth, int err_depth, int offset);15 16uint64_t *leaked_ptr;17 18void FOO(int depth, int err_depth, int offset) {19 uint8_t v1;20 uint16_t v2;21 uint32_t v4;22 uint64_t v8;23 uint64_t v16[2];24 uint64_t v32[4];25 uint64_t v48[3];26 USE4(&v1, &v2, &v4, &v8); USE4(&v16, &v32, &v48, 0);27 leaked_ptr = &v16[0];28 if (depth)29 BAR(depth - 1, err_depth, offset);30 31 if (err_depth == depth)32 v16[offset] = 0; // maybe OOB.33 if (err_depth == -depth)34 leaked_ptr[offset] = 0; // maybe UAR.35 USE(&v16);36}37 38void BAR(int depth, int err_depth, int offset) {39 uint64_t x16[2];40 uint64_t x32[4];41 USE2(&x16, &x32);42 leaked_ptr = &x16[0];43 if (depth)44 FOO(depth - 1, err_depth, offset);45 if (err_depth == depth)46 x16[offset] = 0; // maybe OOB47 if (err_depth == -depth)48 leaked_ptr[offset] = 0; // maybe UAR49 USE(&x16);50}51 52 53int main(int argc, char **argv) {54 if (argc != 4) return -1;55 int depth = atoi(argv[1]);56 int err_depth = atoi(argv[2]);57 int offset = atoi(argv[3]);58 FOO(depth, err_depth, offset);59 return 0;60}61 62// R321: HWAddressSanitizer: tag-mismatch63// R321-NEXT: WRITE of size 864// R321: in BAR65// R321-NEXT: in FOO66// R321-NEXT: in main67// R321: is located in stack of thread T068