1 | // RUN: %clangxx_asan -fsized-deallocation -O0 %s -o %t |
2 | // RUN: not %run %t scalar 2>&1 | FileCheck %s -check-prefix=SCALAR |
3 | // RUN: %env_asan_opts=new_delete_type_mismatch=1 not %run %t scalar 2>&1 | FileCheck %s -check-prefix=SCALAR |
4 | // RUN: not %run %t array 2>&1 | FileCheck %s -check-prefix=ARRAY |
5 | // RUN: %env_asan_opts=new_delete_type_mismatch=1 not %run %t array 2>&1 | FileCheck %s -check-prefix=ARRAY |
6 | // RUN: %env_asan_opts=new_delete_type_mismatch=0 %run %t scalar |
7 | // RUN: %env_asan_opts=new_delete_type_mismatch=0 %run %t array |
8 | |
9 | #include <new> |
10 | #include <stdio.h> |
11 | #include <string> |
12 | |
13 | inline void break_optimization(void *arg) { |
14 | __asm__ __volatile__("" : : "r" (arg) : "memory" ); |
15 | } |
16 | |
17 | struct S12 { |
18 | int a, b, c; |
19 | }; |
20 | |
21 | struct S20 { |
22 | int a, b, c, d, e; |
23 | }; |
24 | |
25 | struct D1 { |
26 | int a, b, c; |
27 | ~D1() { fprintf(stderr, format: "D1::~D1\n" ); } |
28 | }; |
29 | |
30 | struct D2 { |
31 | int a, b, c, d, e; |
32 | ~D2() { fprintf(stderr, format: "D2::~D2\n" ); } |
33 | }; |
34 | |
35 | void Del12(S12 *x) { |
36 | break_optimization(arg: x); |
37 | delete x; |
38 | } |
39 | void Del12NoThrow(S12 *x) { |
40 | break_optimization(arg: x); |
41 | operator delete(x, std::nothrow); |
42 | } |
43 | void Del12Ar(S12 *x) { |
44 | break_optimization(arg: x); |
45 | delete [] x; |
46 | } |
47 | void Del12ArNoThrow(S12 *x) { |
48 | break_optimization(arg: x); |
49 | operator delete[](x, std::nothrow); |
50 | } |
51 | |
52 | int main(int argc, char **argv) { |
53 | if (argc != 2) return 1; |
54 | std::string flag = argv[1]; |
55 | // These are correct. |
56 | Del12(x: new S12); |
57 | Del12NoThrow(x: new S12); |
58 | Del12Ar(x: new S12[100]); |
59 | Del12ArNoThrow(x: new S12[100]); |
60 | |
61 | // Here we pass wrong type of pointer to delete, |
62 | // but [] and nothrow variants of delete are not sized. |
63 | Del12Ar(x: reinterpret_cast<S12*>(new S20[100])); |
64 | Del12NoThrow(x: reinterpret_cast<S12*>(new S20)); |
65 | Del12ArNoThrow(x: reinterpret_cast<S12*>(new S20[100])); |
66 | fprintf(stderr, format: "OK SO FAR\n" ); |
67 | // SCALAR: OK SO FAR |
68 | // ARRAY: OK SO FAR |
69 | if (flag == "scalar" ) { |
70 | // Here asan should bark as we are passing a wrong type of pointer |
71 | // to sized delete. |
72 | Del12(x: reinterpret_cast<S12*>(new S20)); |
73 | // SCALAR: AddressSanitizer: new-delete-type-mismatch |
74 | // SCALAR: object passed to delete has wrong type: |
75 | // SCALAR: size of the allocated type: 20 bytes; |
76 | // SCALAR: size of the deallocated type: 12 bytes. |
77 | // SCALAR: is located 0 bytes inside of 20-byte region |
78 | // SCALAR: SUMMARY: AddressSanitizer: new-delete-type-mismatch |
79 | } else if (flag == "array" ) { |
80 | D1 *d1 = reinterpret_cast<D1*>(new D2[10]); |
81 | break_optimization(arg: d1); |
82 | delete [] d1; |
83 | // ARRAY-NOT: D2::~D2 |
84 | // ARRAY: D1::~D1 |
85 | // ARRAY: AddressSanitizer: new-delete-type-mismatch |
86 | // ARRAY: size of the allocated type: 20{{4|8}} bytes; |
87 | // ARRAY: size of the deallocated type: 12{{4|8}} bytes. |
88 | } |
89 | } |
90 | |