1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
// RUN: %clang_asan -O0 %s -o %t
// RUN: %run %t 0x00 2>&1 | FileCheck %s -check-prefix=X00
// RUN: not %run %t 0xf1 2>&1 | FileCheck %s -check-prefix=XF1
// RUN: not %run %t 0xf2 2>&1 | FileCheck %s -check-prefix=XF2
// RUN: not %run %t 0xf3 2>&1 | FileCheck %s -check-prefix=XF3
// RUN: not %run %t 0xf5 2>&1 | FileCheck %s -check-prefix=XF5
// RUN: not %run %t 0xf8 2>&1 | FileCheck %s -check-prefix=XF8
#include <assert.h>
#include <sanitizer/asan_interface.h>
#include <stddef.h>
#include <stdio.h>
#include <stdlib.h>
void __asan_set_shadow_00(size_t addr, size_t size);
void __asan_set_shadow_01(size_t addr, size_t size);
void __asan_set_shadow_02(size_t addr, size_t size);
void __asan_set_shadow_03(size_t addr, size_t size);
void __asan_set_shadow_04(size_t addr, size_t size);
void __asan_set_shadow_05(size_t addr, size_t size);
void __asan_set_shadow_06(size_t addr, size_t size);
void __asan_set_shadow_07(size_t addr, size_t size);
void __asan_set_shadow_f1(size_t addr, size_t size);
void __asan_set_shadow_f2(size_t addr, size_t size);
void __asan_set_shadow_f3(size_t addr, size_t size);
void __asan_set_shadow_f5(size_t addr, size_t size);
void __asan_set_shadow_f8(size_t addr, size_t size);
char* a;
void f(long arg) {
size_t shadow_offset;
size_t shadow_scale;
__asan_get_shadow_mapping(&shadow_scale, &shadow_offset);
size_t addr = (((size_t)a) >> shadow_scale) + shadow_offset;
switch (arg) {
// X00-NOT: AddressSanitizer
// X00: PASS
case 0x00:
return __asan_set_shadow_00(addr, 1);
// X01: AddressSanitizer: stack-buffer-overflow
// X01: [01]
case 0x01:
return __asan_set_shadow_01(addr, 1);
// X02: AddressSanitizer: stack-buffer-overflow
// X02: [02]
case 0x02:
return __asan_set_shadow_02(addr, 1);
// X03: AddressSanitizer: stack-buffer-overflow
// X03: [03]
case 0x03:
return __asan_set_shadow_03(addr, 1);
// X04: AddressSanitizer: stack-buffer-overflow
// X04: [04]
case 0x04:
return __asan_set_shadow_04(addr, 1);
// X05: AddressSanitizer: stack-buffer-overflow
// X05: [05]
case 0x05:
return __asan_set_shadow_05(addr, 1);
// X06: AddressSanitizer: stack-buffer-overflow
// X06: [06]
case 0x06:
return __asan_set_shadow_06(addr, 1);
// X07: AddressSanitizer: stack-buffer-overflow
// X07: [07]
case 0x07:
return __asan_set_shadow_07(addr, 1);
// XF1: AddressSanitizer: stack-buffer-underflow
// XF1: [f1]
case 0xf1:
return __asan_set_shadow_f1(addr, 1);
// XF2: AddressSanitizer: stack-buffer-overflow
// XF2: [f2]
case 0xf2:
return __asan_set_shadow_f2(addr, 1);
// XF3: AddressSanitizer: stack-buffer-overflow
// XF3: [f3]
case 0xf3:
return __asan_set_shadow_f3(addr, 1);
// XF5: AddressSanitizer: stack-use-after-return
// XF5: [f5]
case 0xf5:
return __asan_set_shadow_f5(addr, 1);
// XF8: AddressSanitizer: stack-use-after-scope
// XF8: [f8]
case 0xf8:
return __asan_set_shadow_f8(addr, 1);
}
assert(0);
}
int main(int argc, char **argv) {
assert(argc > 1);
a = malloc(8);
long arg = strtol(argv[1], 0, 16);
f(arg);
*a = 1;
printf("PASS\n");
return 0;
}
|
