1*d21b3d34SFangrui Song // RUN: %clangxx_msan -fsanitize-memory-track-origins=0 -O3 %s -o %t && \
2*d21b3d34SFangrui Song // RUN:     not %run %t va_arg_tls >%t.out 2>&1
3*d21b3d34SFangrui Song // RUN: FileCheck %s --check-prefix=CHECK < %t.out
4*d21b3d34SFangrui Song 
5*d21b3d34SFangrui Song // RUN: %clangxx_msan -fsanitize-memory-track-origins=0 -O3 %s -o %t && \
6*d21b3d34SFangrui Song // RUN:     not %run %t overflow >%t.out 2>&1
7*d21b3d34SFangrui Song // RUN: FileCheck %s --check-prefix=CHECK < %t.out
8*d21b3d34SFangrui Song 
9*d21b3d34SFangrui Song // RUN: %clangxx_msan -fsanitize-memory-track-origins=2 -O3 %s -o %t && \
10*d21b3d34SFangrui Song // RUN:     not %run %t va_arg_tls >%t.out 2>&1
11*d21b3d34SFangrui Song // RUN: FileCheck %s --check-prefixes=CHECK,CHECK-ORIGIN < %t.out
12*d21b3d34SFangrui Song 
13*d21b3d34SFangrui Song // RUN: %clangxx_msan -fsanitize-memory-track-origins=2 -O3 %s -o %t && \
14*d21b3d34SFangrui Song // RUN:     not %run %t overflow >%t.out 2>&1
15*d21b3d34SFangrui Song // RUN: FileCheck %s --check-prefixes=CHECK,CHECK-ORIGIN < %t.out
16*d21b3d34SFangrui Song 
17*d21b3d34SFangrui Song // Check that shadow and origin are passed through va_args.
18*d21b3d34SFangrui Song 
19*d21b3d34SFangrui Song // Copying origins on AArch64, MIPS and PowerPC isn't supported yet.
20*d21b3d34SFangrui Song // XFAIL: aarch64
21*d21b3d34SFangrui Song // XFAIL: mips
22*d21b3d34SFangrui Song // XFAIL: powerpc64
23*d21b3d34SFangrui Song 
24*d21b3d34SFangrui Song #include <stdarg.h>
25*d21b3d34SFangrui Song #include <string.h>
26*d21b3d34SFangrui Song 
27*d21b3d34SFangrui Song __attribute__((noinline))
sum(int n,...)28*d21b3d34SFangrui Song int sum(int n, ...) {
29*d21b3d34SFangrui Song   va_list args;
30*d21b3d34SFangrui Song   int i, sum = 0, arg;
31*d21b3d34SFangrui Song   volatile int temp;
32*d21b3d34SFangrui Song   va_start(args, n);
33*d21b3d34SFangrui Song   for (i = 0; i < n; i++) {
34*d21b3d34SFangrui Song     arg = va_arg(args, int);
35*d21b3d34SFangrui Song     sum += arg;
36*d21b3d34SFangrui Song   }
37*d21b3d34SFangrui Song   va_end(args);
38*d21b3d34SFangrui Song   return sum;
39*d21b3d34SFangrui Song }
40*d21b3d34SFangrui Song 
main(int argc,char * argv[])41*d21b3d34SFangrui Song int main(int argc, char *argv[]) {
42*d21b3d34SFangrui Song   volatile int uninit;
43*d21b3d34SFangrui Song   volatile int a = 1, b = 2;
44*d21b3d34SFangrui Song   if (argc == 2) {
45*d21b3d34SFangrui Song     // Shadow/origin will be passed via va_arg_tls/va_arg_origin_tls.
46*d21b3d34SFangrui Song     if (strcmp(argv[1], "va_arg_tls") == 0) {
47*d21b3d34SFangrui Song       return sum(3, uninit, a, b);
48*d21b3d34SFangrui Song     }
49*d21b3d34SFangrui Song     // Shadow/origin of |uninit| will be passed via overflow area.
50*d21b3d34SFangrui Song     if (strcmp(argv[1], "overflow") == 0) {
51*d21b3d34SFangrui Song       return sum(7,
52*d21b3d34SFangrui Song         a, a, a, a, a, a, uninit
53*d21b3d34SFangrui Song       );
54*d21b3d34SFangrui Song     }
55*d21b3d34SFangrui Song   }
56*d21b3d34SFangrui Song   return 0;
57*d21b3d34SFangrui Song }
58*d21b3d34SFangrui Song 
59*d21b3d34SFangrui Song // CHECK: WARNING: MemorySanitizer: use-of-uninitialized-value
60*d21b3d34SFangrui Song // CHECK-ORIGIN: Uninitialized value was created by an allocation of 'uninit' in the stack frame of function 'main'
61