Example: provenance_equality_uintptr_t_global_xy.c

up: index
prev: pointer_copy_user_ctrlflow_bitwise.c
next: provenance_equality_uintptr_t_global_yx.c

1
2
3
4
5
6
7
8
9
10
11
12
13

    #include <stdio.h>
    #include <inttypes.h> 
    int x=1, y=2;
    int main() {
      uintptr_t p = (uintptr_t)(&x + 1);
      uintptr_t q = (uintptr_t)&y;
      printf("Addresses: p=%" PRIxPTR " q=%" PRIxPTR "\n",
             (unsigned long)p,(unsigned long)q);
      _Bool b = (p==q);
      // can this be false even with identical addresses?
      printf("(p==q) = %s\n", b?"true":"false");
      return 0;
    }
[link to run test in Cerberus]

Experimental data (what does this mean?) 



cerberus-concrete-PVI-plain Addresses: p=ffffee10 q=ffffee08
(p==q) = false


cerberus-concrete-PVI-ae Addresses: p=ffffee10 q=ffffee08
(p==q) = false


cerberus-concrete-PVI-ae-udi Addresses: p=ffffee10 q=ffffee08
(p==q) = false


gcc-8.3-O0 Addresses: p=10000101c q=10000101c
(p==q) = true


gcc-8.3-O2 Addresses: p=100001020 q=100001018
(p==q) = false


gcc-8.3-O3 Addresses: p=100001020 q=100001018
(p==q) = false


gcc-8.3-O2-no-strict-aliasing Addresses: p=100001020 q=100001018
(p==q) = false


gcc-8.3-O3-no-strict-aliasing Addresses: p=100001020 q=100001018
(p==q) = false


clang-7.0.1-O0 Addresses: p=10000101c q=10000101c
(p==q) = true


clang-7.0.1-O2 Addresses: p=10000101c q=10000101c
(p==q) = true


clang-7.0.1-O3 Addresses: p=10000101c q=10000101c
(p==q) = true


clang-7.0.1-O2-no-strict-aliasing Addresses: p=10000101c q=10000101c
(p==q) = true


clang-7.0.1-O3-no-strict-aliasing Addresses: p=10000101c q=10000101c
(p==q) = true


icc-19-O0 Addresses: p=600ae4 q=600ae4
(p==q) = true


icc-19-O2 Addresses: p=6046c4 q=6046c4
(p==q) = true


icc-19-O3 Addresses: p=6046c4 q=6046c4
(p==q) = true


icc-19-O2-no-strict-aliasing Addresses: p=6046c4 q=6046c4
(p==q) = true


icc-19-O3-no-strict-aliasing Addresses: p=6046c4 q=6046c4
(p==q) = true