1 | // RUN: %clangxx_hwasan -O2 %s -o %t -DTEST=basic_hook_works && not %run %t \ |
2 | // RUN: 2>&1 | FileCheck %s -check-prefix=CHECK-BASIC |
3 | // RUN: %clangxx_hwasan -O2 %s -o %t -DTEST=ignore && %run %t \ |
4 | // RUN: 2>&1 | FileCheck %s -check-prefix=CHECK-IGNORE |
5 | // RUN: %clangxx_hwasan -O2 %s -o %t -DTEST=ignore_twice && not %run %t \ |
6 | // RUN: 2>&1 | FileCheck %s -check-prefix=CHECK-IGNORE-2 |
7 | // RUN: %clangxx_hwasan -O2 %s -o %t -DTEST=double_delete && not %run %t \ |
8 | // RUN: 2>&1 | FileCheck %s -check-prefix=CHECK-DOUBLE-DELETE |
9 | |
10 | #include <sanitizer/hwasan_interface.h> |
11 | #include <stdio.h> |
12 | #include <stdlib.h> |
13 | |
14 | static char *volatile glob_ptr; |
15 | bool ignore_free = false; |
16 | |
17 | #if (__APPLE__) |
18 | // Required for dyld macOS 12.0+ |
19 | # define WEAK_ON_APPLE __attribute__((weak)) |
20 | #else // !(__APPLE__) |
21 | # define WEAK_ON_APPLE |
22 | #endif // (__APPLE__) |
23 | |
24 | extern "C" { |
25 | WEAK_ON_APPLE void __sanitizer_free_hook(const volatile void *ptr) { |
26 | if (ptr == glob_ptr) |
27 | fprintf(stderr, format: "Free Hook\n" ); |
28 | } |
29 | |
30 | WEAK_ON_APPLE int __sanitizer_ignore_free_hook(const volatile void *ptr) { |
31 | if (ptr != glob_ptr) |
32 | return 0; |
33 | fprintf(stderr, format: ignore_free ? "Free Ignored\n" : "Free Respected\n" ); |
34 | return ignore_free; |
35 | } |
36 | } // extern "C" |
37 | |
38 | void allocate() { glob_ptr = reinterpret_cast<char *volatile>(malloc(size: 100)); } |
39 | void deallocate() { free(ptr: reinterpret_cast<void *>(glob_ptr)); } |
40 | |
41 | void basic_hook_works() { |
42 | allocate(); |
43 | deallocate(); // CHECK-BASIC-NOT: Free Ignored |
44 | // CHECK-BASIC: Free Respected |
45 | // CHECK-BASIC: Free Hook |
46 | *glob_ptr = 0; // CHECK-BASIC: HWAddressSanitizer: tag-mismatch |
47 | } |
48 | |
49 | void ignore() { |
50 | allocate(); |
51 | ignore_free = true; |
52 | deallocate(); |
53 | // CHECK-IGNORE: Free Ignored |
54 | // CHECK-IGNORE-NOT: Free Respected |
55 | // CHECK-IGNORE-NOT: Free Hook |
56 | // CHECK-IGNORE-NOT: HWAddressSanitizer |
57 | *glob_ptr = 0; |
58 | } |
59 | |
60 | void ignore_twice() { |
61 | allocate(); |
62 | ignore_free = true; |
63 | deallocate(); // CHECK-IGNORE-2: Free Ignored |
64 | *glob_ptr = 0; |
65 | ignore_free = false; |
66 | deallocate(); // CHECK-IGNORE-2-NOT: Free Ignored |
67 | // CHECK-IGNORE-2: Free Respected |
68 | // CHECK-IGNORE-2: Free Hook |
69 | *glob_ptr = 0; // CHECK-IGNORE-2: HWAddressSanitizer: tag-mismatch |
70 | } |
71 | |
72 | void ignore_a_lot() { |
73 | allocate(); |
74 | ignore_free = true; |
75 | for (int i = 0; i < 10000; ++i) { |
76 | deallocate(); // CHECK-IGNORE-3: Free Ignored |
77 | *glob_ptr = 0; |
78 | } |
79 | ignore_free = false; |
80 | deallocate(); // CHECK-IGNORE-3: Free Respected |
81 | // CHECK-IGNORE-3: Free Hook |
82 | *glob_ptr = 0; // CHECK-IGNORE-3: HWAddressSanitizer: tag-mismatch |
83 | } |
84 | |
85 | void double_delete() { |
86 | allocate(); |
87 | ignore_free = true; |
88 | deallocate(); // CHECK-DOUBLE-DELETE: Free Ignored |
89 | deallocate(); // CHECK-DOUBLE-DELETE: Free Ignored |
90 | ignore_free = false; |
91 | deallocate(); // CHECK-DOUBLE-DELETE: Free Respected |
92 | // CHECK-DOUBLE-DELETE: Free Hook |
93 | deallocate(); // CHECK-DOUBLE-DELETE: HWAddressSanitizer: invalid-free |
94 | } |
95 | |
96 | int main() { |
97 | __hwasan_enable_allocator_tagging(); |
98 | TEST(); |
99 | return 0; |
100 | } |
101 | |