search

gopalshankar / address-sanitizer

Automatically exported from code.google.com/p/address-sanitizer
0 stars 0 forks source link

UAF reported incorrectly #156

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
int main(void) {
  volatile char *buffer = new char;
  delete buffer;
  *buffer = 42;
}

->
Should be "Address XXX is 0 bytes inside ...",
actual "Address (XXX+1) is 1 bytes to the right ..."
(since r174376)

See
http://code.google.com/p/address-sanitizer/source/browse/trunk/win/tests/operato
r_new_uaf_crash.cpp

Original issue reported on code.google.com by timurrrr@google.com on 8 Feb 2013 at 9:39

GoogleCodeExporter commented 9 years ago 
r174710

Original comment by euge...@google.com on 8 Feb 2013 at 1:00