1 /* PR sanitizer/80998 */
2 /* { dg-do run } */
3 /* { dg-options "-fsanitize=pointer-overflow -fsanitize-recover=pointer-overflow -fno-ipa-icf -Wall" } */
4
5 __attribute__((noinline, noclone)) char * f1 (char *p) { return p + 1; }
6 __attribute__((noinline, noclone)) char * f2 (char *p) { return p - 1; }
7 __attribute__((noinline, noclone)) char * f3 (char *p, int i) { return p + i; }
8 __attribute__((noinline, noclone)) char * f4 (char *p, int i) { return p + i; }
9 __attribute__((noinline, noclone)) char * f5 (char *p, int i) { return p - i; }
10 __attribute__((noinline, noclone)) char * f6 (char *p, int i) { return p - i; }
11 __attribute__((noinline, noclone)) char * f7 (char *p, unsigned long int i) { return p + i; }
12 __attribute__((noinline, noclone)) char * f8 (char *p, unsigned long int i) { return p + i; }
13 __attribute__((noinline, noclone)) char * f9 (char *p, unsigned long int i) { return p - i; }
14 __attribute__((noinline, noclone)) char * f10 (char *p, unsigned long int i) { return p - i; }
15 struct S { int a; int b; int c[64]; };
16 __attribute__((noinline, noclone)) int *f11 (struct S *p) { return &p->a; }
17 __attribute__((noinline, noclone)) int *f12 (struct S *p) { return &p->b; }
18 __attribute__((noinline, noclone)) int *f13 (struct S *p) { return &p->c[64]; }
19 __attribute__((noinline, noclone)) int *f14 (struct S *p, int i) { return &p->c[i]; }
20 __attribute__((noinline, noclone)) int *f15 (struct S *p, int i) { return &p->c[i]; }
21 __attribute__((noinline, noclone)) int *f16 (struct S *p) { return &p->a; }
22 __attribute__((noinline, noclone)) int *f17 (struct S *p) { return &p->b; }
23 __attribute__((noinline, noclone)) int *f18 (struct S *p) { return &p->c[64]; }
24 __attribute__((noinline, noclone)) int *f19 (struct S *p, int i) { return &p->c[i]; }
25 __attribute__((noinline, noclone)) int *f20 (struct S *p, int i) { return &p->c[i]; }
26 __attribute__((noinline, noclone)) int *f21 (struct S *p) { return &p->a; }
27 __attribute__((noinline, noclone)) int *f22 (struct S *p) { return &p->b; }
28 __attribute__((noinline, noclone)) int *f23 (struct S *p) { return &p->c[64]; }
29 __attribute__((noinline, noclone)) int *f24 (struct S *p, int i) { return &p->c[i]; }
30 __attribute__((noinline, noclone)) int *f25 (struct S *p, int i) { return &p->c[i]; }
31
32 char *volatile p;
33 __UINTPTR_TYPE__ volatile u;
34 struct S *volatile q;
35 int *volatile r;
36
37 int
38 main ()
39 {
40 u = ~(__UINTPTR_TYPE__) 0;
41 p = (char *) u;
42 p = f1 (p);
43 u = 0;
44 p = (char *) u;
45 p = f2 (p);
46 u = -(__UINTPTR_TYPE__) 7;
47 p = (char *) u;
48 p = f3 (p, 7);
49 u = 3;
50 p = (char *) u;
51 p = f4 (p, -4);
52 u = 23;
53 p = (char *) u;
54 p = f5 (p, 27);
55 u = -(__UINTPTR_TYPE__) 15;
56 p = (char *) u;
57 p = f6 (p, -15);
58 u = -(__UINTPTR_TYPE__) 29;
59 p = (char *) u;
60 p = f7 (p, 31);
61 u = 23;
62 p = (char *) u;
63 p = f9 (p, 24);
64 if (sizeof (unsigned long) < sizeof (char *))
65 return 0;
66 u = 7;
67 p = (char *) u;
68 p = f8 (p, -8);
69 u = -(__UINTPTR_TYPE__) 25;
70 p = (char *) u;
71 p = f10 (p, -25);
72 u = ~(__UINTPTR_TYPE__) 0;
73 q = (struct S *) u;
74 r = f11 (q);
75 r = f12 (q);
76 r = f13 (q);
77 r = f14 (q, 0);
78 r = f15 (q, 63);
79 u = ~(__UINTPTR_TYPE__) 0 - (17 * sizeof (int));
80 q = (struct S *) u;
81 r = f16 (q);
82 r = f17 (q);
83 r = f18 (q);
84 r = f19 (q, 0);
85 r = f20 (q, 63);
86 u = 3 * sizeof (int);
87 q = (struct S *) u;
88 r = f21 (q);
89 r = f22 (q);
90 r = f23 (q);
91 r = f24 (q, -2);
92 r = f25 (q, -6);
93 return 0;
94 }
95
96 /* { dg-output ":5:6\[79]\[^\n\r]*runtime error: applying non-zero offset to non-null pointer (0\[xX])?\[fF]\+ produced null pointer(\n|\r\n|\r)" } */
97 /* { dg-output "\[^\n\r]*:6:6\[79]\[^\n\r]*runtime error: applying non-zero offset \[0-9]\+ to null pointer(\n|\r\n|\r)" } */
98 /* { dg-output "\[^\n\r]*:7:7\[46]\[^\n\r]*runtime error: applying non-zero offset to non-null pointer (0\[xX])?\[fF]\+9 produced null pointer(\n|\r\n|\r)" } */
99 /* { dg-output "\[^\n\r]*:8:7\[46]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?0\+3 overflowed to (0\[xX])?\[fF]\+(\n|\r\n|\r)" } */
100 /* { dg-output "\[^\n\r]*:9:7\[46]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?0\+17 overflowed to (0\[xX])?\[fF]\+\[cC](\n|\r\n|\r)" } */
101 /* { dg-output "\[^\n\r]*:10:7\[46]\[^\n\r]*runtime error: applying non-zero offset to non-null pointer (0\[xX])?\[fF]\+1 produced null pointer(\n|\r\n|\r)" } */
102 /* { dg-output "\[^\n\r]*:11:\[89]\[80]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?\[fF]\+\[eE]3 overflowed to (0\[xX])?0\+2(\n|\r\n|\r)" } */
103 /* { dg-output "\[^\n\r]*:13:\[89]\[80]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?0\+17 overflowed to (0\[xX])?\[fF]\+(\n|\r\n|\r)" } */
104 /* { dg-output "\[^\n\r]*:12:\[89]\[80]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?0\+7 overflowed to (0\[xX])?\[fF]\+(\n|\r\n|\r)" } */
105 /* { dg-output "\[^\n\r]*:14:\[89]\[91]\[^\n\r]*runtime error: applying non-zero offset to non-null pointer (0\[xX])?\[fF]\+\[eE]7 produced null pointer" } */
106 /* { dg-output "(\n|\r\n|\r)" { target int32 } } */
107 /* { dg-output "\[^\n\r]*:17:\[67]\[82]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?\[fF]\+ overflowed to (0\[xX])?0\+3(\n|\r\n|\r)" { target int32 } } */
108 /* { dg-output "\[^\n\r]*:18:\[67]\[86]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?\[fF]\+ overflowed to (0\[xX])?0\+107(\n|\r\n|\r)" { target int32 } } */
109 /* { dg-output "\[^\n\r]*:19:\[78]\[52]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?\[fF]\+ overflowed to (0\[xX])?0\+7(\n|\r\n|\r)" { target int32 } } */
110 /* { dg-output "\[^\n\r]*:20:\[78]\[52]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?\[fF]\+ overflowed to (0\[xX])?0\+103(\n|\r\n|\r)" { target int32 } } */
111 /* { dg-output "\[^\n\r]*:23:\[67]\[86]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?\[fF]\+\[bB]\[bB] overflowed to (0\[xX])?0\+\[cC]3(\n|\r\n|\r)" { target int32 } } */
112 /* { dg-output "\[^\n\r]*:25:\[78]\[52]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?\[fF]\+\[bB]\[bB] overflowed to (0\[xX])?0\+\[bB]\[fF](\n|\r\n|\r)" { target int32 } } */
113 /* { dg-output "\[^\n\r]*:30:\[78]\[52]\[^\n\r]*runtime error: pointer index expression with base (0\[xX])?0\+\[cC] overflowed to (0\[xX])?\[fF]\+\[cC]" { target int32 } } */