1 // RUN: %clangxx_asan -O2 %s -o %t 2 // RUN: ASAN_OPTIONS=fast_unwind_on_fatal=1 %t 2>&1 | %symbolize | FileCheck %s --check-prefix=CHECK-FAST 3 // RUN: ASAN_OPTIONS=fast_unwind_on_fatal=0 %t 2>&1 | %symbolize | FileCheck %s --check-prefix=CHECK-SLOW 4 5 // Test how well we unwind in presence of qsort in the stack 6 // (i.e. if we can unwind through a function compiled w/o frame pointers). 7 // https://code.google.com/p/address-sanitizer/issues/detail?id=137 8 #include <stdlib.h> 9 #include <stdio.h> 10 11 int global_array[10]; 12 volatile int one = 1; 13 14 extern "C" { 15 int QsortCallback(const void *a, const void *b) { 16 char *x = (char*)a; 17 char *y = (char*)b; 18 printf("Calling QsortCallback\n"); 19 global_array[one * 10] = 0; // BOOM 20 return (int)*x - (int)*y; 21 } 22 23 __attribute__((noinline)) 24 void MyQsort(char *a, size_t size) { 25 printf("Calling qsort\n"); 26 qsort(a, size, sizeof(char), QsortCallback); 27 printf("Done\n"); // Avoid tail call. 28 } 29 } // extern "C" 30 31 int main() { 32 char a[2] = {1, 2}; 33 MyQsort(a, 2); 34 } 35 36 // Fast unwind: can not unwind through qsort. 37 38 // CHECK-FAST: ERROR: AddressSanitizer: global-buffer-overflow 39 // CHECK-FAST: #0{{.*}} in QsortCallback 40 // CHECK-FAST-NOT: MyQsort 41 // CHECK-FAST: is located 0 bytes to the right of global variable 'global_array 42 43 // CHECK-SLOW: ERROR: AddressSanitizer: global-buffer-overflow 44 // CHECK-SLOW: #0{{.*}} in QsortCallback 45 // CHECK-SLOW: #{{.*}} in MyQsort 46 // CHECK-SLOW: #{{.*}} in main 47 // CHECK-SLOW: is located 0 bytes to the right of global variable 'global_array 48