blob: d8e8bc518dd45b9fd58b171a12f5bee23db08816 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
|
// This test checks that __memcpy_chk find the kind of errors it was
// designed to find
// It requires clang >= 10, otherwise a direct call to memcpy is
// emitted instead of to __memcpy_chk
// REQUIRES: geq-llvm-10.0
// RUN: %clang %s -emit-llvm -O2 -g -c -D_FORTIFY_SOURCE=1 -o %t2.bc
// RUN: rm -rf %t.klee-out
// RUN: %klee --output-dir=%t.klee-out %t2.bc
// RUN: FileCheck --check-prefix=CHECK-BC --input-file %t.klee-out/assembly.ll %s
// CHECK-BC: @__memcpy_chk
// RUN: test -f %t.klee-out/test000001.ptr.err
// RUN: FileCheck --input-file %t.klee-out/test000001.ptr.err %s
// CHECK: memcpy overflow
#include "klee/klee.h"
#include <assert.h>
#include <stdlib.h>
#include <string.h>
int main() {
char d[5];
char* s = "1234567890";
memcpy(d, s, 10);
}
|
