ExternalVendorCode/genode
1
0
Fork 0
mirror of https://github.com/genodelabs/genode.git synced 2025-05-03 01:02:56 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix use-after-free warnings in test-libc

Browse Source
This commit is contained in:
Christian Helmuth 2023-09-25 08:04:53 +02:00
parent cc1a6041a7
commit 15d1beca1b
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
repos/libports/src/test/libc/main.cc
View File

@ -87,13 +87,16 @@ int main(int argc, char **argv)
printf("Malloc: check realloc\n"); printf("Malloc: check realloc\n");
{ {
static char realloc_data[32];
memset(realloc_data, 13, 32);
void *addr = malloc(32); void *addr = malloc(32);
memset(addr, 13, 32); memcpy(addr, realloc_data, 32);
for (unsigned i = 0; i < ROUNDS; ++i) { for (unsigned i = 0; i < ROUNDS; ++i) {
size_t const size = 32 + 11*i; size_t const size = 32 + 11*i;
char *a = (char *)realloc(addr, size); char *a = (char *)realloc(addr, size);
if (memcmp(addr, a, 32) || a[32] != 0) { if (memcmp(realloc_data, a, 32) || a[32] != 0) {
printf("realloc data error"); printf("realloc data error");
++error_count; ++error_count;
} }
@ -108,7 +111,7 @@ int main(int argc, char **argv)
for (int i = ROUNDS - 1; i >= 0; --i) { for (int i = ROUNDS - 1; i >= 0; --i) {
size_t const size = 32 + 11*i; size_t const size = 32 + 11*i;
char *a = (char *)realloc(addr, size); char *a = (char *)realloc(addr, size);
if (memcmp(addr, a, 32) || a[32] != 0) { if (memcmp(realloc_data, a, 32) || a[32] != 0) {
printf("realloc data error"); printf("realloc data error");
++error_count; ++error_count;
} }
@ -126,12 +129,12 @@ int main(int argc, char **argv)
for (unsigned i = 0; i < 4; ++i) { for (unsigned i = 0; i < 4; ++i) {
size_t const size = 250*1024*1024; size_t const size = 250*1024*1024;
void *addr = malloc(size); void *addr = malloc(size);
free(addr);
if ((unsigned long)addr & 0xf) { if ((unsigned long)addr & 0xf) {
printf("large malloc(%zu) returned addr = %p - ERROR\n", size, addr); printf("large malloc(%zu) returned addr = %p - ERROR\n", size, addr);
++error_count; ++error_count;
} }
free(addr);
} }
{ {