File: address-range-limit.mm

package info (click to toggle)
llvm-toolchain-3.7 1%3A3.7.1-5
  • links: PTS, VCS
  • area: main
  • in suites: stretch
  • size: 345,556 kB
  • ctags: 362,199
  • sloc: cpp: 2,156,381; ansic: 458,339; objc: 91,547; python: 89,988; asm: 86,305; sh: 21,479; makefile: 6,853; perl: 5,601; ml: 5,458; pascal: 3,933; lisp: 2,429; xml: 686; cs: 239; php: 202; csh: 117
file content (38 lines) | stat: -rw-r--r-- 1,168 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
// Regression test for https://code.google.com/p/address-sanitizer/issues/detail?id=368.

// RUN: %clang_asan %s -Wno-deprecated-declarations -flat_namespace -bundle -undefined suppress -o %t.bundle
// RUN: %clang_asan %s -Wno-deprecated-declarations -o %t -framework Foundation && not %run %t 2>&1 | FileCheck %s

#import <Foundation/Foundation.h>
#import <mach-o/dyld.h>

#include <string>

int main(int argc, char *argv[]) {
  for (int i = 0; i < 10; i++) {
    NSObjectFileImage im;

	std::string path = std::string(argv[0]) + ".bundle";
    NSObjectFileImageReturnCode rc =
        NSCreateObjectFileImageFromFile(path.c_str(), &im);
    if (rc != NSObjectFileImageSuccess) {
      fprintf(stderr, "Could not load bundle.\n");
      exit(-1);
    }

    NSModule handle = NSLinkModule(im, "a.bundle", 0);
    if (handle == 0) {
      fprintf(stderr, "Could not load bundle.\n");
      exit(-1);
    }
    printf("h: %p\n", handle);
  }

  char *ptr = (char *)malloc(10);
  ptr[10] = 'x';  // BOOM
}

// CHECK: AddressSanitizer: heap-buffer-overflow
// CHECK: WRITE of size 1
// CHECK: {{#0 .* in main}}
// CHECK: is located 0 bytes to the right of 10-byte region