1*7c3d14c8STreehugger Robot // RUN: %clang_asan -O0 %s -o %t 2*7c3d14c8STreehugger Robot // RUN: not %run %t 2>&1 | FileCheck %s 3*7c3d14c8STreehugger Robot 4*7c3d14c8STreehugger Robot // Since ASan is built with -fomit-frame-pointer, backtrace is not able to 5*7c3d14c8STreehugger Robot // symbolicate the trace past ASan runtime on i386. (This is fixed in 6*7c3d14c8STreehugger Robot // latest OS X.) 7*7c3d14c8STreehugger Robot // REQUIRES: asan-64-bits 8*7c3d14c8STreehugger Robot 9*7c3d14c8STreehugger Robot #include <execinfo.h> 10*7c3d14c8STreehugger Robot #include <sanitizer/common_interface_defs.h> 11*7c3d14c8STreehugger Robot #include <stdio.h> 12*7c3d14c8STreehugger Robot #include <stdlib.h> 13*7c3d14c8STreehugger Robot death_function()14*7c3d14c8STreehugger Robotvoid death_function() { 15*7c3d14c8STreehugger Robot fprintf(stderr, "DEATH CALLBACK\n"); 16*7c3d14c8STreehugger Robot 17*7c3d14c8STreehugger Robot void* callstack[128]; 18*7c3d14c8STreehugger Robot int i, frames = backtrace(callstack, 128); 19*7c3d14c8STreehugger Robot char** strs = backtrace_symbols(callstack, frames); 20*7c3d14c8STreehugger Robot for (i = 0; i < frames; ++i) { 21*7c3d14c8STreehugger Robot fprintf(stderr, "%s\n", strs[i]); 22*7c3d14c8STreehugger Robot } 23*7c3d14c8STreehugger Robot free(strs); 24*7c3d14c8STreehugger Robot 25*7c3d14c8STreehugger Robot fprintf(stderr, "END OF BACKTRACE\n"); 26*7c3d14c8STreehugger Robot } 27*7c3d14c8STreehugger Robot fault_function()28*7c3d14c8STreehugger Robotint fault_function() { 29*7c3d14c8STreehugger Robot char *x = (char*)malloc(10 * sizeof(char)); 30*7c3d14c8STreehugger Robot free(x); 31*7c3d14c8STreehugger Robot return x[5]; // BOOM 32*7c3d14c8STreehugger Robot } 33*7c3d14c8STreehugger Robot main()34*7c3d14c8STreehugger Robotint main() { 35*7c3d14c8STreehugger Robot __sanitizer_set_death_callback(death_function); 36*7c3d14c8STreehugger Robot fault_function(); 37*7c3d14c8STreehugger Robot return 0; 38*7c3d14c8STreehugger Robot } 39*7c3d14c8STreehugger Robot 40*7c3d14c8STreehugger Robot // CHECK: {{.*ERROR: AddressSanitizer: heap-use-after-free on address}} 41*7c3d14c8STreehugger Robot // CHECK: {{READ of size 1 at 0x.* thread T0}} 42*7c3d14c8STreehugger Robot // CHECK: {{ #0 0x.* in fault_function}} 43*7c3d14c8STreehugger Robot 44*7c3d14c8STreehugger Robot // CHECK: DEATH CALLBACK 45*7c3d14c8STreehugger Robot // CHECK: death_function 46*7c3d14c8STreehugger Robot // CHECK: fault_function 47*7c3d14c8STreehugger Robot // CHECK: main 48*7c3d14c8STreehugger Robot // CHECK: END OF BACKTRACE 49