49 lines · cpp
1// __NO_INLINE__ is defined so bsearch needs interceptor.2// RUN: %clangxx_msan -fno-sanitize-memory-param-retval -O0 -g %s -o %t && %run %t3// RUN: %clangxx_msan -fno-sanitize-memory-param-retval -DPOISON_DATA -O0 -g %s -o %t && not %run %t 2>&1 | FileCheck %s4// RUN: %clangxx_msan -fno-sanitize-memory-param-retval -DPOISON_KEY -O0 -g %s -o %t && not %run %t 2>&1 | FileCheck %s5 6// __NO_INLINE__ is undefined so bsearch should be inlined and instrumented and still work as expected.7// RUN: %clangxx_msan -fno-sanitize-memory-param-retval -O2 -g %s -o %t && %run %t8// RUN: %clangxx_msan -fno-sanitize-memory-param-retval -DPOISON_DATA -O2 -g %s -o %t && not %run %t 2>&1 | FileCheck %s9// RUN: %clangxx_msan -fno-sanitize-memory-param-retval -DPOISON_KEY -O2 -g %s -o %t && not %run %t 2>&1 | FileCheck %s10 11#include <assert.h>12#include <stdlib.h>13 14#include <sanitizer/msan_interface.h>15 16long z;17 18__attribute__((noinline, optnone)) void19poison_msan_param_tls(long a, long b, long c, long d, long e, long f) {20 z = a + b + c + d + e + f;21}22 23static int compar(const void *a, const void *b) {24 int r = *(const long *)a - *(const long *)b;25 long x;26 __msan_poison(&x, sizeof(x));27 poison_msan_param_tls(x, x, x, x, x, x);28 return r;29}30 31int main(int argc, char *argv[]) {32 constexpr size_t SZ = 27;33 long p[SZ + 1];34 for (int i = 0; i < SZ + 1; ++i)35 p[i] = i;36 p[SZ] = SZ / 3;37#if defined(POISON_DATA)38 __msan_poison(p, sizeof(long) * SZ / 2);39#elif defined(POISON_KEY)40 __msan_poison(p + SZ, sizeof(long));41#endif42 const long *r = (const long *)bsearch(p + SZ, p, SZ, sizeof(long), compar);43 // CHECK: MemorySanitizer: use-of-uninitialized-value44 45 assert(r == p + SZ / 3);46 47 return 0;48}49