test/Feature/ubsan/ubsan_enum.c


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

// RUN: %clangxx %s -fsanitize=enum -emit-llvm -g %O0opt -c -o %t.bc
// RUN: rm -rf %t.klee-out
// RUN: %klee --output-dir=%t.klee-out --emit-all-errors --ubsan-runtime %t.bc 2>&1 | FileCheck %s

#include "klee/klee.h"

enum E { a = 1 } e;

int main() {
  unsigned char x;
  volatile bool result;

  klee_make_symbolic(&x, sizeof(x), "x");

  for (unsigned char *p = (unsigned char *)&e; p != (unsigned char *)(&e + 1); ++p)
    *p = x;

  // CHECK: runtime/Sanitizer/ubsan/ubsan_handlers.cpp:35: load invalid value
  result = (int)e != -1;

  return 0;
}