15d71de26cedae3dafc17449fe0182045c0bd20e8Stephen Hines// RUN: %clang_cl_asan -O0 %s -Fe%t 22d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// RUN: not %run %t 2>&1 | FileCheck %s 32d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines 42d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines#include <malloc.h> 52d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines 62d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hinesint main() { 72d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines int *buffer = (int*)calloc(42, sizeof(int)); 82d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines free(buffer); 92d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines buffer[0] = 42; 102d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK: AddressSanitizer: heap-use-after-free on address [[ADDR:0x[0-9a-f]+]] 112d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK: WRITE of size 4 at [[ADDR]] thread T0 122d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK-NEXT: {{#0 .* main .*calloc_uaf.cc}}:[[@LINE-3]] 132d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK: [[ADDR]] is located 0 bytes inside of 168-byte region 142d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK: freed by thread T0 here: 152d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK-NEXT: {{#0 .* free }} 162d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK-NEXT: {{#1 .* main .*calloc_uaf.cc}}:[[@LINE-8]] 172d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK: previously allocated by thread T0 here: 182d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK-NEXT: {{#0 .* calloc }} 192d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK-NEXT: {{#1 .* main .*calloc_uaf.cc}}:[[@LINE-12]] 202d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines} 21