1*7c3d14c8STreehugger Robot // Test strict_string_checks option in strcat function
2*7c3d14c8STreehugger Robot // RUN: %clang_asan %s -o %t
3*7c3d14c8STreehugger Robot // RUN: not %run %t test1 2>&1 | FileCheck %s --check-prefix=CHECK1-NONSTRICT --check-prefix=CHECK1
4*7c3d14c8STreehugger Robot // RUN: %env_asan_opts=strict_string_checks=false not %run %t test1 2>&1 | FileCheck %s --check-prefix=CHECK1-NONSTRICT --check-prefix=CHECK1
5*7c3d14c8STreehugger Robot // RUN: %env_asan_opts=strict_string_checks=true not %run %t test1 2>&1 | FileCheck %s --check-prefix=CHECK1-STRICT --check-prefix=CHECK1
6*7c3d14c8STreehugger Robot // RUN: not %run %t test2 2>&1 | FileCheck %s --check-prefix=CHECK2-NONSTRICT --check-prefix=CHECK2
7*7c3d14c8STreehugger Robot // RUN: %env_asan_opts=strict_string_checks=false not %run %t test2 2>&1 | FileCheck %s --check-prefix=CHECK2-NONSTRICT --check-prefix=CHECK2
8*7c3d14c8STreehugger Robot // RUN: %env_asan_opts=strict_string_checks=true not %run %t test2 2>&1 | FileCheck %s --check-prefix=CHECK2-STRICT --check-prefix=CHECK2
9*7c3d14c8STreehugger Robot
10*7c3d14c8STreehugger Robot #include <assert.h>
11*7c3d14c8STreehugger Robot #include <stdlib.h>
12*7c3d14c8STreehugger Robot #include <string.h>
13*7c3d14c8STreehugger Robot
test1(char * to,int to_size,char * from)14*7c3d14c8STreehugger Robot void test1(char *to, int to_size, char *from) {
15*7c3d14c8STreehugger Robot // One of arguments points to not allocated memory.
16*7c3d14c8STreehugger Robot char* r = strcat(to + to_size, from);
17*7c3d14c8STreehugger Robot }
18*7c3d14c8STreehugger Robot
test2(char * to,int to_size,char * from)19*7c3d14c8STreehugger Robot void test2(char *to, int to_size, char *from) {
20*7c3d14c8STreehugger Robot // "to" is not zero-terminated.
21*7c3d14c8STreehugger Robot memset(to, 'z', to_size);
22*7c3d14c8STreehugger Robot char* r = strcat(to, from);
23*7c3d14c8STreehugger Robot }
24*7c3d14c8STreehugger Robot
main(int argc,char ** argv)25*7c3d14c8STreehugger Robot int main(int argc, char **argv) {
26*7c3d14c8STreehugger Robot size_t to_size = 100;
27*7c3d14c8STreehugger Robot char *to = (char*)malloc(to_size);
28*7c3d14c8STreehugger Robot size_t from_size = 20;
29*7c3d14c8STreehugger Robot char *from = (char*)malloc(from_size);
30*7c3d14c8STreehugger Robot memset(from, 'z', from_size);
31*7c3d14c8STreehugger Robot from[from_size - 1] = '\0';
32*7c3d14c8STreehugger Robot if (argc != 2) return 1;
33*7c3d14c8STreehugger Robot if (!strcmp(argv[1], "test1")) test1(to, to_size, from);
34*7c3d14c8STreehugger Robot // CHECK1: {{.*ERROR: AddressSanitizer: heap-buffer-overflow on address}}
35*7c3d14c8STreehugger Robot // CHECK1-STRICT: READ of size 1
36*7c3d14c8STreehugger Robot // CHECK1-NONSTRICT: WRITE of size 20
37*7c3d14c8STreehugger Robot if (!strcmp(argv[1], "test2")) test2(to, to_size, from);
38*7c3d14c8STreehugger Robot // CHECK2: {{.*ERROR: AddressSanitizer: heap-buffer-overflow on address}}
39*7c3d14c8STreehugger Robot // CHECK2-STRICT: READ of size 101
40*7c3d14c8STreehugger Robot // CHECK2-NONSTRICT: WRITE of size 20
41*7c3d14c8STreehugger Robot free(to);
42*7c3d14c8STreehugger Robot free(from);
43*7c3d14c8STreehugger Robot return 0;
44*7c3d14c8STreehugger Robot }
45