Christian Brabandt | e1dc9a6 | 2023-09-02 14:40:13 +0200 | [diff] [blame] | 1 | " Some tests, that used to crash Vim |
| 2 | source check.vim |
| 3 | source screendump.vim |
| 4 | |
| 5 | CheckScreendump |
| 6 | |
| 7 | func Test_crash1() |
Christian Brabandt | d2a08ba | 2023-09-05 07:45:04 +0200 | [diff] [blame] | 8 | CheckNotBSD |
Philip H | 1690ec6 | 2023-09-06 20:20:07 +0200 | [diff] [blame] | 9 | CheckExecutable dash |
Christian Brabandt | da200c2 | 2023-09-06 21:12:24 +0200 | [diff] [blame] | 10 | " Test 7 fails on Mac ... |
Christian Brabandt | 5856b07 | 2023-09-06 20:53:46 +0200 | [diff] [blame] | 11 | CheckNotMac |
Christian Brabandt | d2a08ba | 2023-09-05 07:45:04 +0200 | [diff] [blame] | 12 | |
Christian Brabandt | e1dc9a6 | 2023-09-02 14:40:13 +0200 | [diff] [blame] | 13 | " The following used to crash Vim |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 14 | let opts = #{cmd: 'sh'} |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 15 | let vim = GetVimProg() |
| 16 | |
Christian Brabandt | fc68299 | 2023-09-03 20:20:52 +0200 | [diff] [blame] | 17 | let buf = RunVimInTerminal('sh', opts) |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 18 | |
| 19 | let file = 'crash/poc_huaf1' |
| 20 | let cmn_args = "%s -u NONE -i NONE -n -e -s -S %s -c ':qa!'" |
| 21 | let args = printf(cmn_args, vim, file) |
| 22 | call term_sendkeys(buf, args .. |
Christian Brabandt | fc68299 | 2023-09-03 20:20:52 +0200 | [diff] [blame] | 23 | \ ' && echo "crash 1: [OK]" > X_crash1_result.txt' .. "\<cr>") |
| 24 | call TermWait(buf, 50) |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 25 | |
| 26 | let file = 'crash/poc_huaf2' |
| 27 | let args = printf(cmn_args, vim, file) |
| 28 | call term_sendkeys(buf, args .. |
| 29 | \ ' && echo "crash 2: [OK]" >> X_crash1_result.txt' .. "\<cr>") |
Christian Brabandt | fc68299 | 2023-09-03 20:20:52 +0200 | [diff] [blame] | 30 | call TermWait(buf, 50) |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 31 | |
| 32 | let file = 'crash/poc_huaf3' |
| 33 | let args = printf(cmn_args, vim, file) |
| 34 | call term_sendkeys(buf, args .. |
| 35 | \ ' && echo "crash 3: [OK]" >> X_crash1_result.txt' .. "\<cr>") |
Christian Brabandt | fc68299 | 2023-09-03 20:20:52 +0200 | [diff] [blame] | 36 | call TermWait(buf, 100) |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 37 | |
Christian Brabandt | fc68299 | 2023-09-03 20:20:52 +0200 | [diff] [blame] | 38 | let file = 'crash/bt_quickfix_poc' |
| 39 | let args = printf(cmn_args, vim, file) |
| 40 | call term_sendkeys(buf, args .. |
| 41 | \ ' && echo "crash 4: [OK]" >> X_crash1_result.txt' .. "\<cr>") |
| 42 | " clean up |
| 43 | call delete('Xerr') |
Christian Brabandt | fc68299 | 2023-09-03 20:20:52 +0200 | [diff] [blame] | 44 | " This test takes a bit longer |
Christian Brabandt | 623ba31 | 2023-09-04 22:09:12 +0200 | [diff] [blame] | 45 | call TermWait(buf, 1000) |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 46 | |
Christian Brabandt | ee9166e | 2023-09-03 21:24:33 +0200 | [diff] [blame] | 47 | let file = 'crash/poc_tagfunc.vim' |
| 48 | let args = printf(cmn_args, vim, file) |
Christian Brabandt | f6d28fe | 2023-09-05 20:18:06 +0200 | [diff] [blame] | 49 | " using || because this poc causes vim to exit with exitstatus != 0 |
Christian Brabandt | ee9166e | 2023-09-03 21:24:33 +0200 | [diff] [blame] | 50 | call term_sendkeys(buf, args .. |
| 51 | \ ' || echo "crash 5: [OK]" >> X_crash1_result.txt' .. "\<cr>") |
| 52 | |
| 53 | call TermWait(buf, 100) |
| 54 | |
Christian Brabandt | 6e60cf4 | 2023-09-03 21:43:46 +0200 | [diff] [blame] | 55 | let file = 'crash/bt_quickfix1_poc' |
| 56 | let args = printf(cmn_args, vim, file) |
| 57 | call term_sendkeys(buf, args .. |
| 58 | \ ' && echo "crash 6: [OK]" >> X_crash1_result.txt' .. "\<cr>") |
| 59 | " clean up |
| 60 | call delete('X') |
Christian Brabandt | 59adcb4 | 2023-09-04 22:42:55 +0200 | [diff] [blame] | 61 | call TermWait(buf, 3000) |
Christian Brabandt | 6e60cf4 | 2023-09-03 21:43:46 +0200 | [diff] [blame] | 62 | |
Christian Brabandt | f6d28fe | 2023-09-05 20:18:06 +0200 | [diff] [blame] | 63 | let file = 'crash/vim_regsub_both_poc' |
| 64 | let args = printf(cmn_args, vim, file) |
Christian Brabandt | f6d28fe | 2023-09-05 20:18:06 +0200 | [diff] [blame] | 65 | call term_sendkeys(buf, args .. |
| 66 | \ ' && echo "crash 7: [OK]" >> X_crash1_result.txt' .. "\<cr>") |
Philip H | 1690ec6 | 2023-09-06 20:20:07 +0200 | [diff] [blame] | 67 | call TermWait(buf, 3000) |
Christian Brabandt | f6d28fe | 2023-09-05 20:18:06 +0200 | [diff] [blame] | 68 | |
Christian Brabandt | 3bd7fa1 | 2023-10-02 20:59:08 +0200 | [diff] [blame] | 69 | let file = 'crash/vim_msg_trunc_poc' |
| 70 | let args = printf(cmn_args, vim, file) |
| 71 | call term_sendkeys(buf, args .. |
| 72 | \ ' || echo "crash 8: [OK]" >> X_crash1_result.txt' .. "\<cr>") |
| 73 | call TermWait(buf, 3000) |
| 74 | |
Christian Brabandt | 20d161a | 2023-10-05 22:08:30 +0200 | [diff] [blame] | 75 | let file = 'crash/crash_scrollbar' |
| 76 | let args = printf(cmn_args, vim, file) |
| 77 | call term_sendkeys(buf, args .. |
| 78 | \ ' && echo "crash 9: [OK]" >> X_crash1_result.txt' .. "\<cr>") |
| 79 | call TermWait(buf, 1000) |
| 80 | |
Christian Brabandt | 41e6f7d | 2023-10-11 21:08:13 +0200 | [diff] [blame] | 81 | let file = 'crash/editing_arg_idx_POC_1' |
| 82 | let args = printf(cmn_args, vim, file) |
| 83 | call term_sendkeys(buf, args .. |
| 84 | \ ' || echo "crash 10: [OK]" >> X_crash1_result.txt' .. "\<cr>") |
| 85 | call TermWait(buf, 1000) |
| 86 | call delete('Xerr') |
| 87 | call delete('@') |
| 88 | |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 89 | " clean up |
Christian Brabandt | e1dc9a6 | 2023-09-02 14:40:13 +0200 | [diff] [blame] | 90 | exe buf .. "bw!" |
| 91 | |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 92 | sp X_crash1_result.txt |
Christian Brabandt | fc68299 | 2023-09-03 20:20:52 +0200 | [diff] [blame] | 93 | |
| 94 | let expected = [ |
| 95 | \ 'crash 1: [OK]', |
| 96 | \ 'crash 2: [OK]', |
| 97 | \ 'crash 3: [OK]', |
| 98 | \ 'crash 4: [OK]', |
Christian Brabandt | ee9166e | 2023-09-03 21:24:33 +0200 | [diff] [blame] | 99 | \ 'crash 5: [OK]', |
Christian Brabandt | 6e60cf4 | 2023-09-03 21:43:46 +0200 | [diff] [blame] | 100 | \ 'crash 6: [OK]', |
Christian Brabandt | f6d28fe | 2023-09-05 20:18:06 +0200 | [diff] [blame] | 101 | \ 'crash 7: [OK]', |
Christian Brabandt | 3bd7fa1 | 2023-10-02 20:59:08 +0200 | [diff] [blame] | 102 | \ 'crash 8: [OK]', |
Christian Brabandt | 20d161a | 2023-10-05 22:08:30 +0200 | [diff] [blame] | 103 | \ 'crash 9: [OK]', |
Christian Brabandt | 41e6f7d | 2023-10-11 21:08:13 +0200 | [diff] [blame] | 104 | \ 'crash 10: [OK]', |
Christian Brabandt | fc68299 | 2023-09-03 20:20:52 +0200 | [diff] [blame] | 105 | \ ] |
| 106 | |
| 107 | call assert_equal(expected, getline(1, '$')) |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 108 | bw! |
Christian Brabandt | e1dc9a6 | 2023-09-02 14:40:13 +0200 | [diff] [blame] | 109 | |
Christian Brabandt | db510ca | 2023-09-03 09:23:12 +0200 | [diff] [blame] | 110 | call delete('X_crash1_result.txt') |
Christian Brabandt | e1dc9a6 | 2023-09-02 14:40:13 +0200 | [diff] [blame] | 111 | endfunc |
| 112 | |
Christian Brabandt | 25aabc2 | 2023-11-14 19:31:34 +0100 | [diff] [blame] | 113 | func Test_crash1_2() |
| 114 | CheckNotBSD |
| 115 | CheckExecutable dash |
Christian Brabandt | 5dd41d4 | 2023-12-04 22:52:23 +0100 | [diff] [blame] | 116 | let g:test_is_flaky = 1 |
Christian Brabandt | 25aabc2 | 2023-11-14 19:31:34 +0100 | [diff] [blame] | 117 | |
| 118 | " The following used to crash Vim |
| 119 | let opts = #{cmd: 'sh'} |
| 120 | let vim = GetVimProg() |
Christian Brabandt | abfa13e | 2023-11-30 11:32:18 +0100 | [diff] [blame] | 121 | let result = 'X_crash1_2_result.txt' |
Christian Brabandt | 25aabc2 | 2023-11-14 19:31:34 +0100 | [diff] [blame] | 122 | |
| 123 | let buf = RunVimInTerminal('sh', opts) |
| 124 | |
| 125 | let file = 'crash/poc1' |
| 126 | let cmn_args = "%s -u NONE -i NONE -n -e -s -S %s -c ':qa!'" |
| 127 | let args = printf(cmn_args, vim, file) |
| 128 | call term_sendkeys(buf, args .. |
| 129 | \ ' && echo "crash 1: [OK]" > '.. result .. "\<cr>") |
| 130 | call TermWait(buf, 150) |
| 131 | |
Christian Brabandt | eec0c2b | 2023-11-28 22:03:48 +0100 | [diff] [blame] | 132 | let file = 'crash/poc_win_enter_ext' |
| 133 | let cmn_args = "%s -u NONE -i NONE -n -e -s -S %s -c ':qa!'" |
| 134 | let args = printf(cmn_args, vim, file) |
| 135 | call term_sendkeys(buf, args .. |
| 136 | \ ' && echo "crash 2: [OK]" >> '.. result .. "\<cr>") |
| 137 | call TermWait(buf, 350) |
| 138 | |
Christian Brabandt | 0fb375a | 2023-11-29 10:23:39 +0100 | [diff] [blame] | 139 | let file = 'crash/poc_suggest_trie_walk' |
| 140 | let cmn_args = "%s -u NONE -i NONE -n -e -s -S %s -c ':qa!'" |
| 141 | let args = printf(cmn_args, vim, file) |
| 142 | call term_sendkeys(buf, args .. |
| 143 | \ ' && echo "crash 3: [OK]" >> '.. result .. "\<cr>") |
| 144 | call TermWait(buf, 150) |
| 145 | |
Christian Brabandt | b39b240 | 2023-11-29 11:34:05 +0100 | [diff] [blame] | 146 | let file = 'crash/poc_did_set_langmap' |
| 147 | let cmn_args = "%s -u NONE -i NONE -n -X -m -n -e -s -S %s -c ':qa!'" |
| 148 | let args = printf(cmn_args, vim, file) |
| 149 | call term_sendkeys(buf, args .. |
| 150 | \ ' ; echo "crash 4: [OK]" >> '.. result .. "\<cr>") |
| 151 | call TermWait(buf, 150) |
| 152 | |
Christian Brabandt | 25aabc2 | 2023-11-14 19:31:34 +0100 | [diff] [blame] | 153 | " clean up |
| 154 | exe buf .. "bw!" |
Christian Brabandt | 25aabc2 | 2023-11-14 19:31:34 +0100 | [diff] [blame] | 155 | exe "sp " .. result |
Christian Brabandt | 25aabc2 | 2023-11-14 19:31:34 +0100 | [diff] [blame] | 156 | let expected = [ |
| 157 | \ 'crash 1: [OK]', |
Christian Brabandt | eec0c2b | 2023-11-28 22:03:48 +0100 | [diff] [blame] | 158 | \ 'crash 2: [OK]', |
Christian Brabandt | 0fb375a | 2023-11-29 10:23:39 +0100 | [diff] [blame] | 159 | \ 'crash 3: [OK]', |
Christian Brabandt | b39b240 | 2023-11-29 11:34:05 +0100 | [diff] [blame] | 160 | \ 'crash 4: [OK]', |
Christian Brabandt | 25aabc2 | 2023-11-14 19:31:34 +0100 | [diff] [blame] | 161 | \ ] |
| 162 | |
| 163 | call assert_equal(expected, getline(1, '$')) |
| 164 | bw! |
Christian Brabandt | 25aabc2 | 2023-11-14 19:31:34 +0100 | [diff] [blame] | 165 | call delete(result) |
| 166 | endfunc |
| 167 | |
Christian Brabandt | 5dd41d4 | 2023-12-04 22:52:23 +0100 | [diff] [blame] | 168 | " This test just runs various scripts, that caused issues before. |
| 169 | " We are not really asserting anything here, it's just important |
| 170 | " that ASAN does not detect any issues. |
| 171 | func Test_crash1_3() |
| 172 | let vim = GetVimProg() |
| 173 | let buf = RunVimInTerminal('sh', #{cmd: 'sh'}) |
| 174 | |
| 175 | let file = 'crash/poc_ex_substitute' |
| 176 | let cmn_args = "%s -u NONE -i NONE -n -e -s -S %s -c ':qa!'\<cr>" |
| 177 | let args = printf(cmn_args, vim, file) |
| 178 | call term_sendkeys(buf, args) |
| 179 | call TermWait(buf, 150) |
| 180 | |
| 181 | let file = 'crash/poc_uaf_exec_instructions' |
| 182 | let cmn_args = "%s -u NONE -i NONE -n -e -s -S %s -c ':qa!'\<cr>" |
| 183 | let args = printf(cmn_args, vim, file) |
| 184 | call term_sendkeys(buf, args) |
| 185 | call TermWait(buf, 150) |
| 186 | |
Christian Brabandt | 0f28791 | 2023-12-11 17:53:25 +0100 | [diff] [blame] | 187 | let file = 'crash/poc_uaf_check_argument_types' |
| 188 | let cmn_args = "%s -u NONE -i NONE -n -e -s -S %s -c ':qa!'\<cr>" |
| 189 | let args = printf(cmn_args, vim, file) |
| 190 | call term_sendkeys(buf, args) |
| 191 | call TermWait(buf, 150) |
| 192 | |
Christian Brabandt | 8a0bbe7 | 2024-08-01 20:16:51 +0200 | [diff] [blame] | 193 | let file = 'crash/double_free' |
| 194 | let cmn_args = "%s -u NONE -i NONE -n -e -s -S %s -c ':qa!'\<cr>" |
| 195 | let args = printf(cmn_args, vim, file) |
| 196 | call term_sendkeys(buf, args) |
| 197 | call TermWait(buf, 50) |
| 198 | |
Christian Brabandt | b29f4ab | 2024-08-01 22:10:28 +0200 | [diff] [blame] | 199 | let file = 'crash/dialog_changed_uaf' |
| 200 | let cmn_args = "%s -u NONE -i NONE -n -e -s -S %s -c ':qa!'\<cr>" |
| 201 | let args = printf(cmn_args, vim, file) |
| 202 | call term_sendkeys(buf, args) |
| 203 | call TermWait(buf, 150) |
| 204 | |
Christian Brabandt | fb3f969 | 2024-08-11 20:09:17 +0200 | [diff] [blame] | 205 | let file = 'crash/nullpointer' |
| 206 | let cmn_args = "%s -u NONE -i NONE -n -e -s -S %s -c ':qa!'\<cr>" |
| 207 | let args = printf(cmn_args, vim, file) |
| 208 | call term_sendkeys(buf, args) |
| 209 | call TermWait(buf, 50) |
| 210 | |
Christian Brabandt | 5dd41d4 | 2023-12-04 22:52:23 +0100 | [diff] [blame] | 211 | " clean up |
| 212 | exe buf .. "bw!" |
| 213 | bw! |
| 214 | endfunc |
| 215 | |
Christian Brabandt | ced2c73 | 2023-09-02 21:15:52 +0200 | [diff] [blame] | 216 | func Test_crash2() |
| 217 | " The following used to crash Vim |
| 218 | let opts = #{wait_for_ruler: 0, rows: 20} |
| 219 | let args = ' -u NONE -i NONE -n -e -s -S ' |
| 220 | let buf = RunVimInTerminal(args .. ' crash/vim_regsub_both', opts) |
| 221 | call VerifyScreenDump(buf, 'Test_crash_01', {}) |
| 222 | exe buf .. "bw!" |
| 223 | endfunc |
| 224 | |
Christian Brabandt | e1dc9a6 | 2023-09-02 14:40:13 +0200 | [diff] [blame] | 225 | " vim: shiftwidth=2 sts=2 expandtab |