test/DeterministicAllocation/use-after-free-loh.c


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

// RUN: %clang %s -emit-llvm -g -c -o %t.bc
// RUN: rm -rf %t.klee-out
// RUN: %klee -kdalloc -kdalloc-quarantine=1 -output-dir=%t.klee-out %t.bc -exit-on-error >%t.output 2>&1
// RUN: FileCheck %s -input-file=%t.output

#include <stdlib.h>
#include <string.h>

int main() {
  void *ptr = malloc(4096);
  free(ptr);

  // CHECK: use after free
  memset(ptr, 0, 4096);

  return 0;
}