1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
/* Regression test for:
http://code.google.com/p/address-sanitizer/issues/detail?id=37 */
/* { dg-do run { target { *-*-linux* x86_64-*-freebsd* } } } */
/* { dg-require-effective-target clone } */
/* { dg-require-effective-target hw } */
/* { dg-options "-D_GNU_SOURCE" } */
#include <stdio.h>
#include <stdlib.h>
#include <sched.h>
#include <sys/syscall.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <unistd.h>
int Child(void *arg) {
char x[32] = {0}; /* Stack gets poisoned. */
printf("Child: %p\n", x);
_exit(1); /* NoReturn, stack will remain unpoisoned unless we do something. */
}
volatile int zero = 0;
int main(int argc, char **argv) {
int i;
const int kStackSize = 1 << 20;
char __attribute__((aligned(16))) child_stack[kStackSize + 1];
char *sp = child_stack + kStackSize; /* Stack grows down. */
printf("Parent: %p\n", sp);
pid_t clone_pid = clone(Child, sp, CLONE_FILES | CLONE_VM, NULL, 0, 0, 0);
if (clone_pid == -1) {
perror("clone");
return 1;
}
int status;
pid_t wait_result = waitpid(clone_pid, &status, __WCLONE);
if (wait_result < 0) {
perror("waitpid");
return 1;
}
if (wait_result == clone_pid && WIFEXITED(status)) {
/* Make sure the child stack was indeed unpoisoned. */
for (i = 0; i < kStackSize; i++)
child_stack[i] = i;
int ret = child_stack[zero];
return ret;
}
return 1;
}
|
