Sign in
llvm
/
llvm-archive
/
089ca8750d7cd1f1ec96968922bf4bcfe223bb3a
/
.
/
safecode
/
test
/
mem_safety
/
use_after_free
/
use_after_free-001.c
blob: 33db945c0b73c3fc80d03e5e91da6edce1149468 [
file
] [
log
] [
blame
]
/* Use after free of an allocated integer
in an array of pointers to integers. */
#include
<stdlib.h>
#define
ARRSZ
100
int
main
()
{
int
*
arr
[
ARRSZ
],
i
;
arr
[
6
]
=
malloc
(
sizeof
(
int
));
*
arr
[
6
]
=
20
;
free
(
arr
[*
arr
[
6
]
-
14
]);
*
arr
[
6
]
=
100
;
return
0
;
}