1 // RUN: %clangxx_msan %s -O0 -fsanitize-memory-use-after-dtor -o %t && %run %t
2 // RUN: %clangxx_msan %s -O1 -fsanitize-memory-use-after-dtor -o %t && %run %t
3 // RUN: %clangxx_msan %s -O2 -fsanitize-memory-use-after-dtor -o %t && %run %t
4 // RUN: %clangxx_msan %s -DCVPTR=1 -O2 -fsanitize-memory-use-after-dtor -fsanitize-memory-track-origins -o %t && not %run %t 2>&1 | FileCheck %s --check-prefixes=CVPTR
5 // RUN: %clangxx_msan %s -DEAVPTR=1 -O2 -fsanitize-memory-use-after-dtor -fsanitize-memory-track-origins -o %t && not %run %t 2>&1 | FileCheck %s --check-prefixes=EAVPTR
6 // RUN: %clangxx_msan %s -DEDVPTR=1 -O2 -fsanitize-memory-use-after-dtor -fsanitize-memory-track-origins -o %t && not %run %t 2>&1 | FileCheck %s --check-prefixes=EDVPTR
7
8 // Expected to quit due to invalid access when invoking
9 // function using vtable.
10
11 class A {
12 public:
13 int x;
~A()14 virtual ~A() {
15 // Should succeed
16 this->A_Foo();
17 }
A_Foo()18 virtual void A_Foo() {}
19 };
20
21 class B : public virtual A {
22 public:
23 int y;
~B()24 virtual ~B() {}
A_Foo()25 virtual void A_Foo() {}
26 };
27
28 class C : public B {
29 public:
30 int z;
31 };
32
33 class D {
34 public:
35 int w;
~D()36 ~D() {}
D_Foo()37 virtual void D_Foo() {}
38 };
39
40 class E : public virtual A, public virtual D {
41 public:
42 int u;
~E()43 ~E() {}
A_Foo()44 void A_Foo() {}
45 };
46
main()47 int main() {
48 // Simple linear inheritance
49 C *c = new C();
50 c->~C();
51 // This fails
52 #ifdef CVPTR
53 c->A_Foo();
54 // CVPTR: Virtual table ptr was destroyed
55 // CVPTR: {{#0 0x.* in __sanitizer_dtor_callback_vptr}}
56 // CVPTR: {{#1 0x.* in ~C .*cpp:}}[[@LINE-28]]:
57 // CVPTR: {{#2 0x.* in main .*cpp:}}[[@LINE-7]]:
58 #endif
59
60 // Multiple inheritance, so has multiple vtables
61 E *e = new E();
62 e->~E();
63 // Both of these fail
64 #ifdef EAVPTR
65 e->A_Foo();
66 // EAVPTR: Virtual table ptr was destroyed
67 // EAVPTR: {{#0 0x.* in __sanitizer_dtor_callback_vptr}}
68 // EAVPTR: {{#1 0x.* in ~E .*cpp:}}[[@LINE-25]]:
69 // EAVPTR: {{#2 0x.* in main .*cpp:}}[[@LINE-7]]:
70 #endif
71
72 #ifdef EDVPTR
73 e->D_Foo();
74 // EDVPTR: Virtual table ptr was destroyed
75 // EDVPTR: {{#0 0x.* in __sanitizer_dtor_callback_vptr}}
76 // EDVPTR: {{#1 0x.* in ~E .*cpp:}}[[@LINE-33]]:
77 // EDVPTR: {{#2 0x.* in main .*cpp:}}[[@LINE-15]]:
78 #endif
79 }
80