|
111
|
1 /* { dg-do run } */
|
|
|
2 /* { dg-options "-fno-builtin-malloc -fno-builtin-strncpy" } */
|
|
|
3 /* { dg-shouldfail "asan" } */
|
|
|
4
|
|
|
5 #include <string.h>
|
|
|
6 #include <stdlib.h>
|
|
|
7 int main(int argc, char **argv) {
|
|
|
8 char *hello = (char*)malloc(6);
|
|
|
9 strcpy(hello, "hello");
|
|
|
10 char *short_buffer = (char*)malloc(9);
|
|
|
11 strncpy(short_buffer, hello, 10); /* BOOM */
|
|
|
12 return short_buffer[8];
|
|
|
13 }
|
|
|
14
|
|
|
15 /* { dg-output "WRITE of size \[0-9\]* at 0x\[0-9a-f\]+ thread T0\[^\n\r]*(\n|\r\n|\r)" } */
|
|
|
16 /* { dg-output " #0 0x\[0-9a-f\]+ +(in _*(interceptor_|wrap_|)strncpy|\[(\])\[^\n\r]*(\n|\r\n|\r)" } */
|
|
|
17 /* { dg-output " #1 0x\[0-9a-f\]+ +(in _*main (\[^\n\r]*strncpy-overflow-1.c:11|\[^\n\r]*:0|\[^\n\r]*\\+0x\[0-9a-z\]*)|\[(\]).*(\n|\r\n|\r)" } */
|
|
|
18 /* { dg-output "\[^\n\r]*0x\[0-9a-f\]+ is located 0 bytes to the right of 9-byte region\[^\n\r]*(\n|\r\n|\r)" } */
|
|
|
19 /* { dg-output "\[^\n\r]*allocated by thread T0 here:\[^\n\r]*(\n|\r\n|\r)" } */
|
|
|
20 /* { dg-output " #0 0x\[0-9a-f\]+ +(in _*(interceptor_|wrap_|)malloc|\[(\])\[^\n\r]*(\n|\r\n|\r)" } */
|
|
|
21 /* { dg-output " #1 0x\[0-9a-f\]+ +(in _*main (\[^\n\r]*strncpy-overflow-1.c:10|\[^\n\r]*:0|\[^\n\r]*\\+0x\[0-9a-z\]*)|\[(\])\[^\n\r]*(\n|\r\n|\r)" } */
|
