Subzero: Added ASan quarantine for recently freed objects

tests_lit/asan_tests/quarantine.ll

+; Test that the quarantine for recently freed objects works
+
+; REQUIRES: no_minimal_build
+
+; Test with an illegal load from a freed block
+; RUN: llvm-as %s -o - | pnacl-freeze > %t.pexe && %S/../../pydir/szbuild.py \
+; RUN:     --fsanitize-address --sz=-allow-externally-defined-symbols \
+; RUN:     %t.pexe -o %t && %t 2>&1 | FileCheck --check-prefix=LOAD %s
+; RUN: llvm-as %s -o - | pnacl-freeze > %t.pexe && %S/../../pydir/szbuild.py \
+; RUN:     --fsanitize-address --sz=-allow-externally-defined-symbols -O2 \
+; RUN:     %t.pexe -o %t && %t 2>&1 | FileCheck --check-prefix=LOAD %s
+
+; Test with an illegal store to a freed block
+; RUN: llvm-as %s -o - | pnacl-freeze > %t.pexe && %S/../../pydir/szbuild.py \
+; RUN:     --fsanitize-address --sz=-allow-externally-defined-symbols \
+; RUN:     %t.pexe -o %t && %t 1 2>&1 | FileCheck --check-prefix=STORE %s
+; RUN: llvm-as %s -o - | pnacl-freeze > %t.pexe && %S/../../pydir/szbuild.py \
+; RUN:     --fsanitize-address --sz=-allow-externally-defined-symbols -O2 \
+; RUN:     %t.pexe -o %t && %t 1 2>&1 | FileCheck --check-prefix=STORE %s
+
+; Test that freed objects eventually get out of quarantine and are unpoisoned
+; RUN: llvm-as %s -o - | pnacl-freeze > %t.pexe && %S/../../pydir/szbuild.py \
+; RUN:     --fsanitize-address --sz=-allow-externally-defined-symbols \
+; RUN:     %t.pexe -o %t && %t 1 2 2>&1 | FileCheck --check-prefix=NONE %s \
+; RUN:     --allow-empty
+; RUN: llvm-as %s -o - | pnacl-freeze > %t.pexe && %S/../../pydir/szbuild.py \
+; RUN:     --fsanitize-address --sz=-allow-externally-defined-symbols -O2 \
+; RUN:     %t.pexe -o %t && %t 1 2 2>&1 | FileCheck --check-prefix=NONE %s \
+; RUN:     --allow-empty
+
+declare external i32 @malloc(i32)
+declare external void @free(i32)
+declare external void @exit(i32)
+
+; make three 100MB allocations
+define void @_start(i32 %arg) {
+  %argcaddr = add i32 %arg, 8
+  %argcptr = inttoptr i32 %argcaddr to i32*
+  %argc = load i32, i32* %argcptr, align 1
+  %alloc1addr = call i32 @malloc(i32 104857600)
+  %alloc2addr = call i32 @malloc(i32 104857600)
+  %alloc3addr = call i32 @malloc(i32 104857600)
+  %alloc1 = inttoptr i32 %alloc1addr to i32*
+  %alloc2 = inttoptr i32 %alloc2addr to i32*
+  %alloc3 = inttoptr i32 %alloc3addr to i32*
+  call void @free(i32 %alloc1addr)
+  call void @free(i32 %alloc2addr)
+  call void @free(i32 %alloc3addr)
+  switch i32 %argc, label %error [i32 1, label %bad_load
+                                  i32 2, label %bad_store
+                                  i32 3, label %no_err]
+bad_load:
+  %result_load = load i32, i32* %alloc2, align 1
+  br label %error
+bad_store:
+  store i32 42, i32* %alloc3, align 1
+  br label %error
+no_err:
+  %result_no_err = load i32, i32* %alloc1, align 1
+  call void @exit(i32 0)
+  unreachable
+error:
+  call void @exit(i32 1)
+  unreachable
+}
+
+; LOAD: Illegal 4 byte load from freed object at
+; STORE: Illegal 4 byte store to freed object at
+; NONE-NOT: Illegal