1 // Tests use-after-return detection and reporting. 2 // RUN: %clang_hwasan -g %s -o %t && not %run %t 2>&1 | FileCheck %s 3 // RUN: %clang_hwasan -g %s -o %t && not %env_hwasan_opts=symbolize=0 %run %t 2>&1 | FileCheck %s --check-prefix=NOSYM 4 5 // REQUIRES: stable-runtime 6 7 // Stack histories currently are not recorded on x86. 8 // XFAIL: x86_64 9 10 void USE(void *x) { // pretend_to_do_something(void *x) 11 __asm__ __volatile__("" : : "r" (x) : "memory"); 12 } 13 14 __attribute__((noinline)) 15 char *buggy() { 16 char zzz[0x1000]; 17 char *volatile p = zzz; 18 return p; 19 } 20 21 __attribute__((noinline)) void Unrelated1() { int A[2]; USE(&A[0]); } 22 __attribute__((noinline)) void Unrelated2() { int BB[3]; USE(&BB[0]); } 23 __attribute__((noinline)) void Unrelated3() { int CCC[4]; USE(&CCC[0]); } 24 25 int main() { 26 char *p = buggy(); 27 Unrelated1(); 28 Unrelated2(); 29 Unrelated3(); 30 return *p; 31 // CHECK: READ of size 1 at 32 // CHECK: #0 {{.*}} in main{{.*}}stack-uar.c:[[@LINE-2]] 33 // CHECK: Cause: stack tag-mismatch 34 // CHECK: is located in stack of thread 35 // CHECK: Potentially referenced stack objects: 36 // CHECK-NEXT: zzz in buggy {{.*}}stack-uar.c:[[@LINE-20]] 37 // CHECK-NEXT: Memory tags around the buggy address 38 39 // NOSYM: Previously allocated frames: 40 // NOSYM-NEXT: record_addr:0x{{.*}} record:0x{{.*}} ({{.*}}/stack-uar.c.tmp+0x{{.*}}){{$}} 41 // NOSYM-NEXT: record_addr:0x{{.*}} record:0x{{.*}} ({{.*}}/stack-uar.c.tmp+0x{{.*}}){{$}} 42 // NOSYM-NEXT: record_addr:0x{{.*}} record:0x{{.*}} ({{.*}}/stack-uar.c.tmp+0x{{.*}}){{$}} 43 // NOSYM-NEXT: record_addr:0x{{.*}} record:0x{{.*}} ({{.*}}/stack-uar.c.tmp+0x{{.*}}){{$}} 44 // NOSYM-NEXT: Memory tags around the buggy address 45 46 // CHECK: SUMMARY: HWAddressSanitizer: tag-mismatch {{.*}} in main 47 } 48