fix for use after free in case of double unmap
This commit is contained in:
@@ -8,6 +8,7 @@ TESTS += ro_mem_test nr_mem_test
|
||||
TESTS += timeout_segfault
|
||||
TESTS += rep_movsb
|
||||
TESTS += mem_unmap
|
||||
TESTS += mem_double_unmap
|
||||
TESTS += mem_protect
|
||||
TESTS += mem_exec
|
||||
|
||||
|
||||
51
tests/regress/mem_double_unmap.c
Normal file
51
tests/regress/mem_double_unmap.c
Normal file
@@ -0,0 +1,51 @@
|
||||
#define __STDC_FORMAT_MACROS
|
||||
#include <inttypes.h>
|
||||
#include <string.h>
|
||||
#include <unistd.h>
|
||||
#include <stdlib.h>
|
||||
#include <string.h>
|
||||
#include <time.h>
|
||||
|
||||
#include <unicorn/unicorn.h>
|
||||
|
||||
int main(int argc, char **argv, char **envp)
|
||||
{
|
||||
uc_engine *uc;
|
||||
uc_hook trace1, trace2;
|
||||
uc_err err;
|
||||
|
||||
// Initialize emulator in X86-32bit mode
|
||||
err = uc_open(UC_ARCH_X86, UC_MODE_32, &uc);
|
||||
if (err) {
|
||||
printf("not ok - Failed on uc_open() with error returned: %u\n", err);
|
||||
return;
|
||||
}
|
||||
|
||||
uc_mem_map(uc, 0x1000, 0x1000, UC_PROT_ALL);
|
||||
if (err) {
|
||||
printf("not ok - Failed on uc_mem_map() with error returned: %u\n", err);
|
||||
return;
|
||||
}
|
||||
|
||||
uc_mem_map(uc, 0x4000, 0x1000, UC_PROT_ALL);
|
||||
if (err) {
|
||||
printf("not ok - Failed on uc_mem_map() with error returned: %u\n", err);
|
||||
return;
|
||||
}
|
||||
|
||||
err = uc_mem_unmap(uc, 0x4000, 0x1000);
|
||||
if (err) {
|
||||
printf("not ok - Failed on uc_mem_unmap() with error returned: %u\n", err);
|
||||
return;
|
||||
}
|
||||
|
||||
err = uc_mem_unmap(uc, 0x4000, 0x1000);
|
||||
if (!err) {
|
||||
printf("not ok - second unmap succeeded\n");
|
||||
return 1;
|
||||
}
|
||||
|
||||
printf("Tests OK\n");
|
||||
uc_close(uc);
|
||||
return 0;
|
||||
}
|
||||
Reference in New Issue
Block a user