16a211c5814e25d6745a5058cc0e499e5235d3821Stephen Hines// RUN: %clang_cl_asan -O0 %s -Fe%t 22d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// RUN: not %run %t 2>&1 | FileCheck %s 32d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines 42d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines#include <windows.h> 52d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines 62d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hinesint main() { 72d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines char *buffer = new char[42]; 82d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines delete [] buffer; 92d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines buffer[0] = 42; 102d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK: AddressSanitizer: heap-use-after-free on address [[ADDR:0x[0-9a-f]+]] 112d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK: WRITE of size 1 at [[ADDR]] thread T0 122d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK: {{#0 .* main .*operator_array_new_uaf.cc}}:[[@LINE-3]] 132d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK: [[ADDR]] is located 0 bytes inside of 42-byte region 142d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK-LABEL: freed by thread T0 here: 156d1862363c88c183b0ed7740fca876342cf0474bStephen Hines// FIXME: The 'operator delete' frame should have []. 166d1862363c88c183b0ed7740fca876342cf0474bStephen Hines// CHECK: {{#0 .* operator delete}} 176d1862363c88c183b0ed7740fca876342cf0474bStephen Hines// CHECK: {{#1 .* main .*operator_array_new_uaf.cc}}:[[@LINE-9]] 182d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines// CHECK-LABEL: previously allocated by thread T0 here: 196d1862363c88c183b0ed7740fca876342cf0474bStephen Hines// FIXME: The 'operator new' frame should have []. 206d1862363c88c183b0ed7740fca876342cf0474bStephen Hines// CHECK: {{#0 .* operator new}} 216d1862363c88c183b0ed7740fca876342cf0474bStephen Hines// CHECK: {{#1 .* main .*operator_array_new_uaf.cc}}:[[@LINE-14]] 222d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines return 0; 232d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines} 242d1fdb26e458c4ddc04155c1d421bced3ba90cd0Stephen Hines 25