llvm/compiler-rt/test/hwasan/TestCases/double-free.c

// RUN: %clang_hwasan %s -o %t && not %run %t 2>&1 | FileCheck %s

#include <stdlib.h>
#include <stdio.h>
#include <sanitizer/hwasan_interface.h>

int main() {
  __hwasan_enable_allocator_tagging();
  char * volatile x = (char*)malloc(40);
  free(x);
  free(x);
  // CHECK: ERROR: HWAddressSanitizer: invalid-free on address {{.*}} at pc {{[0x]+}}[[PC:.*]] on thread T{{[0-9]+}}
  // CHECK: tags: [[PTR_TAG:..]]/[[MEM_TAG:..]] (ptr/mem)
  // CHECK: #0 {{[0x]+}}{{.*}}[[PC]]
  // If we instrument using calls (default on x86), free is not the top frame
  // of the fault. With TCO the free frame can be replaced with the interceptor.
  // CHECK: in {{.*}}free
  // CHECK: freed by thread {{.*}} here:
  // CHECK: previously allocated by thread {{.*}} here:
  // CHECK: Memory tags around the buggy address (one tag corresponds to 16 bytes):
  // CHECK: =>{{.*}}[[MEM_TAG]]
  fprintf(stderr, "DONE\n");
  __hwasan_disable_allocator_tagging();
// CHECK-NOT: DONE
}