Runtime check of poisoning derived class members.

[nmusgrave]

Summary

Simple test case to verify that an instance of a derived class with virtual base is properly poisoned

[eugenis]

test/msan/dtor-derived-class.cc

11

missing space

30

Allocate this with new(), otherwise you get undefined behavior at exit.

33

This can be re-phrased as assert(__msan_test_shadow(...) != -1).
No printfs, no checks. Don't even need FIleCheck.

34

An object may contain padding that does not have to be initialized. It's better to check user-visible things, like B::x_ and D::y_;

48

Do you check that the local pointer to b is not poisoned? It's true, of course, why would it be?

[nmusgrave]

• modified test to be more concise, and check the local pointer to the destroyed object

[eugenis]

LGTM

test/msan/dtor-derived-class.cc

35

Please remove this check, and the same check for "b".

[nmusgrave]

• revised test to not examine padding- only explicit object members

test/msan/dtor-derived-class.cc

+// RUN: %clangxx_msan %s -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 %run %t >%t.out 2>&1
+// RUN: FileCheck %s < %t.out
+
+// RUN: %clangxx_msan %s -O1 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1 %run %t >%t.out 2>&1
+// RUN: FileCheck %s < %t.out
+
+// RUN: %clangxx_msan %s -O2 -fsanitize=memory -fsanitize-memory-use-after-dtor -o %t && MSAN_OPTIONS=poison_in_dtor=1  %run %t >%t.out 2>&1
+// RUN: FileCheck %s < %t.out
+
+#include <stdio.h>
+#include<sanitizer/msan_interface.h>
+
+struct Base {
+  int x_;
+  Base() {
+    x_ = 5;
+  }
+  virtual ~Base() { }
+};
+
+struct Derived:public Base {
+  int y_;
+  Derived() {
+    y_ = 10;
+  }
+  ~Derived() { }
+};
+
+int main() {
+  Derived d;
+  d.~Derived();
+
+  if (__msan_test_shadow(&d, sizeof(d)) != -1)
+      printf("d is poisoned\n");
+  else
+    printf("d is not poisoned\n");
+  // CHECK: d is poisoned
+
+  Base *b = new Derived();
+  b->~Base();
+
+  if (__msan_test_shadow(b, sizeof(*b)) != -1)
+    printf("b is poisoned\n");
+  else
+    printf("b is not poisoned\n");
+  // CHECK: b is poisoned
+
+  if (__msan_test_shadow(&b, sizeof(b)) != -1)
+    printf("*b is poisoned\n");
+  else
+    printf("*b is not poisoned\n");
+  // CHECK: *b is not poisoned
+
+  return 0;
+}