1*74ad3115SFilipe Cabecinhas // RUN: %clangxx_asan %s -o %t
2*74ad3115SFilipe Cabecinhas // RUN: not %run %t 0 2>&1 | FileCheck %s
3*74ad3115SFilipe Cabecinhas // RUN: not %run %t n 2>&1 | FileCheck %s -check-prefix=CHECK -check-prefix=NON_EXEC
4*74ad3115SFilipe Cabecinhas 
5*74ad3115SFilipe Cabecinhas // Only Linux and FreeBSD list every memory region in MemoryMappingLayout, for now.
6*74ad3115SFilipe Cabecinhas // REQUIRES: linux || freebsd
7*74ad3115SFilipe Cabecinhas 
8*74ad3115SFilipe Cabecinhas #include <assert.h>
9*74ad3115SFilipe Cabecinhas 
10*74ad3115SFilipe Cabecinhas typedef void void_f();
11*74ad3115SFilipe Cabecinhas int main(int argc, char **argv) {
12*74ad3115SFilipe Cabecinhas   char *array = new char[42];
13*74ad3115SFilipe Cabecinhas   void_f *func;
14*74ad3115SFilipe Cabecinhas   assert(argc > 1);
15*74ad3115SFilipe Cabecinhas   if (argv[1][0] == '0') {
16*74ad3115SFilipe Cabecinhas     func = (void_f *)0x04;
17*74ad3115SFilipe Cabecinhas   } else {
18*74ad3115SFilipe Cabecinhas     assert(argv[1][0] == 'n');
19*74ad3115SFilipe Cabecinhas     func = (void_f *)array;
20*74ad3115SFilipe Cabecinhas   }
21*74ad3115SFilipe Cabecinhas 
22*74ad3115SFilipe Cabecinhas   func();
23*74ad3115SFilipe Cabecinhas   // x86 reports the SEGV with both address=X and pc=X.
24*74ad3115SFilipe Cabecinhas   // On PowerPC64 ELFv1, the pointer is taken to be a function-descriptor
25*74ad3115SFilipe Cabecinhas   // pointer out of which three 64-bit quantities are read. This will SEGV, but
26*74ad3115SFilipe Cabecinhas   // the compiler is free to choose the order. As a result, the address is
27*74ad3115SFilipe Cabecinhas   // either X, X+0x8 or X+0x10. The pc is still in main() because it has not
28*74ad3115SFilipe Cabecinhas   // actually made the call when the faulting access occurs.
29*74ad3115SFilipe Cabecinhas   // CHECK: DEADLYSIGNAL
30*74ad3115SFilipe Cabecinhas   // CHECK: {{AddressSanitizer: (SEGV|access-violation).*(address|pc) }}
31*74ad3115SFilipe Cabecinhas   // NON_EXEC: PC is at a non-executable region. Maybe a wild jump?
32*74ad3115SFilipe Cabecinhas   return 0;
33*74ad3115SFilipe Cabecinhas }
34