1*673dc3d4SNico Weber // RUN: %clangxx_asan -g %s -o %t
2*673dc3d4SNico Weber // RUN: not %run %t 1 2>&1 | FileCheck %s --check-prefix=CHECK-FGETS
3*673dc3d4SNico Weber // RUN: not %run %t 2 2>&1 | FileCheck %s --check-prefix=CHECK-FPUTS
4*673dc3d4SNico Weber // RUN: not %run %t 3 2>&1 | FileCheck %s --check-prefix=CHECK-PUTS
5*673dc3d4SNico Weber 
6*673dc3d4SNico Weber #include <assert.h>
7*673dc3d4SNico Weber #include <stdio.h>
8*673dc3d4SNico Weber #include <stdlib.h>
9*673dc3d4SNico Weber #include <string.h>
10*673dc3d4SNico Weber 
test_fgets(const char * testfile)11*673dc3d4SNico Weber int test_fgets(const char *testfile) {
12*673dc3d4SNico Weber   char buf[2];
13*673dc3d4SNico Weber   FILE *fp = fopen(testfile, "r");
14*673dc3d4SNico Weber   assert(fp);
15*673dc3d4SNico Weber   fgets(buf, sizeof(buf) + 1, fp); // BOOM
16*673dc3d4SNico Weber   fclose(fp);
17*673dc3d4SNico Weber   return 0;
18*673dc3d4SNico Weber }
19*673dc3d4SNico Weber 
test_fputs()20*673dc3d4SNico Weber int test_fputs() {
21*673dc3d4SNico Weber   char buf[1] = {'x'}; // Note: not nul-terminated
22*673dc3d4SNico Weber   FILE *fp = fopen("/dev/null", "w");
23*673dc3d4SNico Weber   assert(fp);
24*673dc3d4SNico Weber   fputs(buf, fp); // BOOM
25*673dc3d4SNico Weber   fclose(fp);
26*673dc3d4SNico Weber   return 0;
27*673dc3d4SNico Weber }
28*673dc3d4SNico Weber 
test_puts()29*673dc3d4SNico Weber int test_puts() {
30*673dc3d4SNico Weber   char *p = strdup("x");
31*673dc3d4SNico Weber   free(p);
32*673dc3d4SNico Weber   puts(p); // BOOM
33*673dc3d4SNico Weber   return 0;
34*673dc3d4SNico Weber }
35*673dc3d4SNico Weber 
main(int argc,char * argv[])36*673dc3d4SNico Weber int main(int argc, char *argv[]) {
37*673dc3d4SNico Weber   assert(argc >= 2);
38*673dc3d4SNico Weber   int testno = argv[1][0] - '0';
39*673dc3d4SNico Weber   if (testno == 1) {
40*673dc3d4SNico Weber     return test_fgets(argv[0]);
41*673dc3d4SNico Weber   }
42*673dc3d4SNico Weber   if (testno == 2)
43*673dc3d4SNico Weber     return test_fputs();
44*673dc3d4SNico Weber   if (testno == 3)
45*673dc3d4SNico Weber     return test_puts();
46*673dc3d4SNico Weber   return 1;
47*673dc3d4SNico Weber }
48*673dc3d4SNico Weber 
49*673dc3d4SNico Weber // CHECK-FGETS: {{.*ERROR: AddressSanitizer: stack-buffer-overflow}}
50*673dc3d4SNico Weber // CHECK-FGETS: #{{.*}} in {{(wrap_|__interceptor_)?}}fgets
51*673dc3d4SNico Weber // CHECK-FPUTS: {{.*ERROR: AddressSanitizer: stack-buffer-overflow}}
52*673dc3d4SNico Weber // CHECK-FPUTS: #{{.*}} in {{(wrap_|__interceptor_)?}}fputs
53*673dc3d4SNico Weber // CHECK-PUTS: {{.*ERROR: AddressSanitizer: heap-use-after-free}}
54*673dc3d4SNico Weber // CHECK-PUTS: #{{.*}} in {{(wrap_|__interceptor_)?}}puts
55