1 /**
2 * Copyright (c) 2023 Huawei Device Co., Ltd.
3 * Licensed under the Apache License, Version 2.0 (the "License");
4 * you may not use this file except in compliance with the License.
5 * You may obtain a copy of the License at
6 *
7 * http://www.apache.org/licenses/LICENSE-2.0
8 *
9 * Unless required by applicable law or agreed to in writing, software
10 * distributed under the License is distributed on an "AS IS" BASIS,
11 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 * See the License for the specific language governing permissions and
13 * limitations under the License.
14 */
15
16 #include <signal.h>
17 #include <stdio.h>
18 #include <sys/wait.h>
19 #include "gwp_asan_test.h"
20 #include "test.h"
21
double_free_handler()22 void double_free_handler()
23 {
24 find_and_check_file(GWP_ASAN_LOG_DIR, GWP_ASAN_LOG_TAG, "Double Free at");
25 clear_log(GWP_ASAN_LOG_DIR, GWP_ASAN_LOG_TAG);
26 cancel_gwp_asan_environment(true);
27 _exit(0);
28 }
29
install_sigv_handler()30 void install_sigv_handler()
31 {
32 struct sigaction sigv = {
33 .sa_handler = double_free_handler,
34 .sa_flags = 0,
35 };
36 sigaction(SIGSEGV, &sigv, NULL);
37 }
38
double_free_test()39 void double_free_test()
40 {
41 config_gwp_asan_environment(true);
42 clear_log(GWP_ASAN_LOG_DIR, GWP_ASAN_LOG_TAG);
43 install_sigv_handler();
44
45 void *ptr = malloc(20);
46 if (!ptr) {
47 t_error("malloc failed.");
48 return;
49 }
50 if (!libc_gwp_asan_ptr_is_mine(ptr)) {
51 t_error("Memory is not allocated by gwp_asan.");
52 return;
53 }
54 free(ptr);
55 free(ptr);
56 }
57
main()58 int main()
59 {
60 pid_t pid = fork();
61 if (pid < 0) {
62 t_error("FAIL fork failed.");
63 } else if (pid == 0) { // child process
64 double_free_test();
65 } else { // parent process
66 int status;
67 if (waitpid(pid, &status, 0) != pid) {
68 t_error("gwp_asan_double_free_test waitpid failed.");
69 }
70
71 if (WIFEXITED(status) && WEXITSTATUS(status) != 0) {
72 t_error("gwp_asan_double_free_test failed.");
73 }
74
75 cancel_gwp_asan_environment(true);
76 }
77
78 return t_status;
79 }
80