File: use-after-scope-setjmp.cpp

package info (click to toggle)
swiftlang 6.0.3-2
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid, trixie
  • size: 2,519,992 kB
  • sloc: cpp: 9,107,863; ansic: 2,040,022; asm: 1,135,751; python: 296,500; objc: 82,456; f90: 60,502; lisp: 34,951; pascal: 19,946; sh: 18,133; perl: 7,482; ml: 4,937; javascript: 4,117; makefile: 3,840; awk: 3,535; xml: 914; fortran: 619; cs: 573; ruby: 573
file content (59 lines) | stat: -rw-r--r-- 1,124 bytes parent folder | download | duplicates (4) 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
 
// RUN: %clangxx_hwasan  -mllvm -hwasan-use-stack-safety=0 -mllvm -hwasan-use-after-scope -O2 %s -o %t && \
// RUN:     %run %t 2>&1

// REQUIRES: aarch64-target-arch || riscv64-target-arch
// REQUIRES: stable-runtime

#include <sanitizer/hwasan_interface.h>
#include <setjmp.h>
#include <stdlib.h>
#include <string.h>

#include <sys/types.h>
#include <unistd.h>

volatile const char *stackbuf = nullptr;
jmp_buf jbuf;

__attribute__((noinline)) bool jump() {
  // Fool the compiler so it cannot deduce noreturn.
  if (getpid() != 0) {
    longjmp(jbuf, 1);
    return true;
  }
  return false;
}

bool target() {
  switch (setjmp(jbuf)) {
  case 1:
    return false;
  default:
    break;
  }

  while (true) {
    char buf[4096];
    stackbuf = buf;
    if (!jump()) {
      break;
    };
  }
  return true;
}

int main() {
  target();

  void *untagged = __hwasan_tag_pointer(stackbuf, 0);
  if (stackbuf == untagged) {
    // The buffer wasn't tagged in the first place, so the test will not work
    // as expected.
    return 2;
  }
  if (__hwasan_test_shadow(untagged, 4096) != -1) {
    return 1;
  }

  return 0;
}