blob: 7c13c9138193fbd3ac8170fc347ecc0773d8cb90 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
/* PR tree-optimization/20601 */
extern void abort (void);
extern void exit (int);
struct T
{
char *t1;
char t2[4096];
char **t3;
};
int a[5];
int b;
char **c;
int d;
char **e;
struct T t;
char *f[16];
char *g[] = { "a", "-u", "b", "c" };
__attribute__ ((__noreturn__)) void
foo (void)
{
while (1);
}
__attribute__ ((noinline)) char *
bar (char *x, unsigned int y)
{
return 0;
}
static inline char *
baz (char *x, unsigned int y)
{
if (sizeof (t.t2) != (unsigned int) -1 && y > sizeof (t.t2))
foo ();
return bar (x, y);
}
static inline int
setup1 (int x)
{
char *p;
int rval;
if (!baz (t.t2, sizeof (t.t2)))
baz (t.t2, sizeof (t.t2));
if (x & 0x200)
{
char **h, **i = e;
++d;
e = f;
if (t.t1 && *t.t1)
e[0] = t.t1;
else
abort ();
for (h = e + 1; (*h = *i); ++i, ++h)
;
}
return 1;
}
static inline int
setup2 (void)
{
int j = 1;
e = c + 1;
d = b - 1;
while (d > 0 && e[0][0] == '-')
{
if (e[0][1] != '\0' && e[0][2] != '\0')
abort ();
switch (e[0][1])
{
case 'u':
if (!e[1])
abort ();
t.t3 = &e[1];
d--;
e++;
break;
case 'P':
j |= 0x1000;
break;
case '-':
d--;
e++;
if (j == 1)
j |= 0x600;
return j;
}
d--;
e++;
}
if (d > 0 && !(j & 1))
abort ();
return j;
}
int
main (void)
{
int x;
c = g;
b = 4;
x = setup2 ();
t.t1 = "/bin/sh";
setup1 (x);
/* PRE shouldn't transform x into the constant 0x601 here, it's not legal. */
if ((x & 0x400) && !a[4])
abort ();
exit (0);
}
|
