1*673dc3d4SNico Weber // RUN: %clang_cl_asan -Od %s -Fe%t
2*673dc3d4SNico Weber // RUN: not %run %t 2>&1 | FileCheck %s
3*673dc3d4SNico Weber 
4*673dc3d4SNico Weber #include <malloc.h>
5*673dc3d4SNico Weber 
main()6*673dc3d4SNico Weber int main() {
7*673dc3d4SNico Weber   char *buffer = (char*)realloc(0, 32),
8*673dc3d4SNico Weber        *stale = buffer;
9*673dc3d4SNico Weber   buffer = (char*)realloc(buffer, 64);
10*673dc3d4SNico Weber   // The 'stale' may now point to a free'd memory.
11*673dc3d4SNico Weber   stale[0] = 42;
12*673dc3d4SNico Weber // CHECK: AddressSanitizer: heap-use-after-free on address [[ADDR:0x[0-9a-f]+]]
13*673dc3d4SNico Weber // CHECK: WRITE of size 1 at [[ADDR]] thread T0
14*673dc3d4SNico Weber // CHECK-NEXT: {{#0 .* main .*use_after_realloc.cpp}}:[[@LINE-3]]
15*673dc3d4SNico Weber // CHECK: [[ADDR]] is located 0 bytes inside of 32-byte region
16*673dc3d4SNico Weber // CHECK: freed by thread T0 here:
17*673dc3d4SNico Weber // CHECK-NEXT: {{#0 .* realloc }}
18*673dc3d4SNico Weber // CHECK-NEXT: {{#1 .* main .*use_after_realloc.cpp}}:[[@LINE-9]]
19*673dc3d4SNico Weber // CHECK: previously allocated by thread T0 here:
20*673dc3d4SNico Weber // CHECK-NEXT: {{#0 .* realloc }}
21*673dc3d4SNico Weber // CHECK-NEXT: {{#1 .* main .*use_after_realloc.cpp}}:[[@LINE-14]]
22*673dc3d4SNico Weber   free(buffer);
23*673dc3d4SNico Weber }
24