1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
// RUN: %clangxx_msan %s -O0 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 %run %t
// RUN: %clangxx_msan %s -O1 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 %run %t
// RUN: %clangxx_msan %s -O2 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 %run %t
// RUN: %clangxx_msan %s -DVPTRA=1 -O2 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 not %run %t
// RUN: %clangxx_msan %s -DVPTRCA=1 -O2 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 not %run %t
// RUN: %clangxx_msan %s -DVPTRCB=1 -O2 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 not %run %t
// RUN: %clangxx_msan %s -DVPTRC=1 -O2 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 not %run %t
// Expected to quit due to invalid access when invoking
// function using vtable.
#include <sanitizer/msan_interface.h>
#include <stdio.h>
#include <assert.h>
class A {
public:
int x;
~A() {}
virtual void A_Foo() {}
};
class B {
public:
int y;
~B() {}
virtual void B_Foo() {}
};
class C : public A, public B {
public:
int z;
~C() {}
virtual void C_Foo() {}
};
int main() {
A *a = new A();
a->~A();
// Shouldn't be allowed to invoke function via vtable.
#ifdef VPTRA
a->A_Foo();
#endif
C *c = new C();
c->~C();
#ifdef VPTRCA
c->A_Foo();
#endif
#ifdef VPTRCB
c->B_Foo();
#endif
#ifdef VPTRC
c->C_Foo();
#endif
return 0;
}
|
