blob: 31d87f43e12cb8b1882dd89158c3cdd45f80f933 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
|
// RUN: %clang %s -fsanitize=shift -emit-llvm -g %O0opt -c -o %t.bc
// RUN: rm -rf %t.klee-out
// RUN: %klee --output-dir=%t.klee-out --emit-all-errors --ubsan-runtime %t.bc 2>&1 | FileCheck %s
#include "klee/klee.h"
int lsh_overflow(signed int a, signed int b) {
// CHECK: runtime/Sanitizer/ubsan/ubsan_handlers.cpp:35: shift out of bounds
return a << b;
}
int main() {
signed int a;
signed int b;
volatile signed int result;
klee_make_symbolic(&a, sizeof(a), "a");
klee_make_symbolic(&b, sizeof(b), "b");
result = lsh_overflow(a, b);
return 0;
}
|