aboutsummaryrefslogtreecommitdiff
path: root/test/msan/dtor-multiple-inheritance.cc
blob: 0704bf7b31916f72a30f4c3799667db9d1d71d0c (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
// Defines diamond multiple inheritance structure
//   A
//  / \
// B   C
//  \ /
//   Derived

// RUN: %clangxx_msan %s -O0 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 %run %t >%t.out 2>&1

// RUN: %clangxx_msan %s -O1 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 %run %t >%t.out 2>&1

// RUN: %clangxx_msan %s -O2 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 %run %t >%t.out 2>&1

#include <sanitizer/msan_interface.h>
#include <assert.h>

int *temp_x;
int *temp_y;
int *temp_z;
int *temp_w;

class A {
public:
  int x;
  A() { x = 5; }
  virtual ~A() {
    assert(__msan_test_shadow(&this->x, sizeof(this->x) == -1));
    // Memory owned by subclasses is poisoned.
    assert(__msan_test_shadow(temp_y, sizeof(*temp_y)) != -1);
    assert(__msan_test_shadow(temp_z, sizeof(*temp_z)) != -1);
    assert(__msan_test_shadow(temp_w, sizeof(*temp_w)) != -1);
  }
};

struct B : virtual public A {
public:
  int y;
  B() { y = 10; }
  virtual ~B() {
    assert(__msan_test_shadow(&this->y, sizeof(this->y)) == -1);
    // Memory accessible via vtable still reachable.
    assert(__msan_test_shadow(&this->x, sizeof(this->x)) == -1);
    // Memory in sibling and subclass is poisoned.
    assert(__msan_test_shadow(temp_z, sizeof(*temp_z)) != -1);
    assert(__msan_test_shadow(temp_w, sizeof(*temp_w)) != -1);
  }
};

struct C : virtual public A {
public:
  int z;
  C() { z = 15; }
  virtual ~C() {
    assert(__msan_test_shadow(&this->z, sizeof(this->z)) == -1);
    // Memory accessible via vtable still reachable.
    assert(__msan_test_shadow(&this->x, sizeof(this->x)) == -1);
    // Sibling class is unpoisoned.
    assert(__msan_test_shadow(temp_y, sizeof(*temp_y)) == -1);
    // Memory in subclasses is poisoned.
    assert(__msan_test_shadow(temp_w, sizeof(*temp_w)) != -1);
  }
};

class Derived : public B, public C {
public:
  int w;
  Derived() { w = 10; }
  ~Derived() {
    assert(__msan_test_shadow(&this->x, sizeof(this->x)) == -1);
    // Members accessed through the vtable are still accessible.
    assert(__msan_test_shadow(&this->y, sizeof(this->y)) == -1);
    assert(__msan_test_shadow(&this->z, sizeof(this->z)) == -1);
    assert(__msan_test_shadow(&this->w, sizeof(this->w)) == -1);
  }
};


int main() {
  Derived *d = new Derived();

  // Keep track of members inherited from virtual bases,
  // since the virtual base table is inaccessible after destruction.
  temp_x = &d->x;
  temp_y = &d->y;
  temp_z = &d->z;
  temp_w = &d->w;

  // Order of destruction: Derived, C, B, A
  d->~Derived();
  // Verify that local pointer is unpoisoned, and that the object's
  // members are.
  assert(__msan_test_shadow(&d, sizeof(d)) == -1);
  assert(__msan_test_shadow(temp_x, sizeof(*temp_x)) != -1);
  assert(__msan_test_shadow(temp_y, sizeof(*temp_y)) != -1);
  assert(__msan_test_shadow(temp_z, sizeof(*temp_z)) != -1);
  assert(__msan_test_shadow(temp_w, sizeof(*temp_w)) != -1);
  return 0;
}