heapalloc_uaf.cpp 453 Bytes
// RUN: %clang_cl_asan -Od %s -Fe%t
// RUN: %env_asan_opts=windows_hook_rtl_allocators=true not %run %t 2>&1 | FileCheck %s
// UNSUPPORTED: asan-64-bits
#include <windows.h>

int main() {
  char *buffer;
  buffer = (char *)HeapAlloc(GetProcessHeap(), 0, 32),
  HeapFree(GetProcessHeap(), 0, buffer);
  buffer[0] = 'a';
  // CHECK: AddressSanitizer: heap-use-after-free on address [[ADDR:0x[0-9a-f]+]]
  // CHECK: WRITE of size 1 at [[ADDR]] thread T0
}