1*d21b3d34SFangrui Song // RUN: %clangxx_msan -fsanitize-memory-track-origins=0 -O3 %s -o %t && \
2*d21b3d34SFangrui Song // RUN: not %run %t va_arg_tls >%t.out 2>&1
3*d21b3d34SFangrui Song // RUN: FileCheck %s --check-prefix=CHECK < %t.out
4*d21b3d34SFangrui Song
5*d21b3d34SFangrui Song // RUN: %clangxx_msan -fsanitize-memory-track-origins=0 -O3 %s -o %t && \
6*d21b3d34SFangrui Song // RUN: not %run %t overflow >%t.out 2>&1
7*d21b3d34SFangrui Song // RUN: FileCheck %s --check-prefix=CHECK < %t.out
8*d21b3d34SFangrui Song
9*d21b3d34SFangrui Song // RUN: %clangxx_msan -fsanitize-memory-track-origins=2 -O3 %s -o %t && \
10*d21b3d34SFangrui Song // RUN: not %run %t va_arg_tls >%t.out 2>&1
11*d21b3d34SFangrui Song // RUN: FileCheck %s --check-prefixes=CHECK,CHECK-ORIGIN < %t.out
12*d21b3d34SFangrui Song
13*d21b3d34SFangrui Song // RUN: %clangxx_msan -fsanitize-memory-track-origins=2 -O3 %s -o %t && \
14*d21b3d34SFangrui Song // RUN: not %run %t overflow >%t.out 2>&1
15*d21b3d34SFangrui Song // RUN: FileCheck %s --check-prefixes=CHECK,CHECK-ORIGIN < %t.out
16*d21b3d34SFangrui Song
17*d21b3d34SFangrui Song // Check that shadow and origin are passed through va_args.
18*d21b3d34SFangrui Song
19*d21b3d34SFangrui Song // Copying origins on AArch64, MIPS and PowerPC isn't supported yet.
20*d21b3d34SFangrui Song // XFAIL: aarch64
21*d21b3d34SFangrui Song // XFAIL: mips
22*d21b3d34SFangrui Song // XFAIL: powerpc64
23*d21b3d34SFangrui Song
24*d21b3d34SFangrui Song #include <stdarg.h>
25*d21b3d34SFangrui Song #include <string.h>
26*d21b3d34SFangrui Song
27*d21b3d34SFangrui Song __attribute__((noinline))
sum(int n,...)28*d21b3d34SFangrui Song int sum(int n, ...) {
29*d21b3d34SFangrui Song va_list args;
30*d21b3d34SFangrui Song int i, sum = 0, arg;
31*d21b3d34SFangrui Song volatile int temp;
32*d21b3d34SFangrui Song va_start(args, n);
33*d21b3d34SFangrui Song for (i = 0; i < n; i++) {
34*d21b3d34SFangrui Song arg = va_arg(args, int);
35*d21b3d34SFangrui Song sum += arg;
36*d21b3d34SFangrui Song }
37*d21b3d34SFangrui Song va_end(args);
38*d21b3d34SFangrui Song return sum;
39*d21b3d34SFangrui Song }
40*d21b3d34SFangrui Song
main(int argc,char * argv[])41*d21b3d34SFangrui Song int main(int argc, char *argv[]) {
42*d21b3d34SFangrui Song volatile int uninit;
43*d21b3d34SFangrui Song volatile int a = 1, b = 2;
44*d21b3d34SFangrui Song if (argc == 2) {
45*d21b3d34SFangrui Song // Shadow/origin will be passed via va_arg_tls/va_arg_origin_tls.
46*d21b3d34SFangrui Song if (strcmp(argv[1], "va_arg_tls") == 0) {
47*d21b3d34SFangrui Song return sum(3, uninit, a, b);
48*d21b3d34SFangrui Song }
49*d21b3d34SFangrui Song // Shadow/origin of |uninit| will be passed via overflow area.
50*d21b3d34SFangrui Song if (strcmp(argv[1], "overflow") == 0) {
51*d21b3d34SFangrui Song return sum(7,
52*d21b3d34SFangrui Song a, a, a, a, a, a, uninit
53*d21b3d34SFangrui Song );
54*d21b3d34SFangrui Song }
55*d21b3d34SFangrui Song }
56*d21b3d34SFangrui Song return 0;
57*d21b3d34SFangrui Song }
58*d21b3d34SFangrui Song
59*d21b3d34SFangrui Song // CHECK: WARNING: MemorySanitizer: use-of-uninitialized-value
60*d21b3d34SFangrui Song // CHECK-ORIGIN: Uninitialized value was created by an allocation of 'uninit' in the stack frame of function 'main'
61