Implement positive test for Address Sanitizer in Chrome

chrome/browser/automation/testing_automation_provider.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/automation/testing_automation_provider.h"
 
 #include <map>
 #include <set>
 #include <string>
 #include <vector>
@@ skipping 2240 matching lines @@
   handler_map["UpdateExtensionsNow"] =
       &TestingAutomationProvider::UpdateExtensionsNow;
 #if !defined(NO_TCMALLOC) && (defined(OS_LINUX) || defined(OS_CHROMEOS))
   handler_map["HeapProfilerDump"] =
       &TestingAutomationProvider::HeapProfilerDump;
 #endif  // !defined(NO_TCMALLOC) && (defined(OS_LINUX) || defined(OS_CHROMEOS))
   handler_map["OverrideGeoposition"] =
       &TestingAutomationProvider::OverrideGeoposition;
   handler_map["AppendSwitchASCIIToCommandLine"] =
       &TestingAutomationProvider::AppendSwitchASCIIToCommandLine;
+  handler_map["SimulateAsanMemoryBug"] =
+      &TestingAutomationProvider::SimulateAsanMemoryBug;
 
 #if defined(OS_CHROMEOS)
   handler_map["GetLoginInfo"] = &TestingAutomationProvider::GetLoginInfo;
   handler_map["ShowCreateAccountUI"] =
       &TestingAutomationProvider::ShowCreateAccountUI;
   handler_map["ExecuteJavascriptInOOBEWebUI"] =
       &TestingAutomationProvider::ExecuteJavascriptInOOBEWebUI;
   handler_map["LoginAsGuest"] = &TestingAutomationProvider::LoginAsGuest;
   handler_map["AddLoginEventObserver"] =
       &TestingAutomationProvider::AddLoginEventObserver;
@@ skipping 4105 matching lines @@
   base::Closure reply =
       base::Bind(SendSuccessReply, AsWeakPtr(), reply_message);
   g_browser_process->policy_service()->RefreshPolicies(
       base::Bind(PostTask, BrowserThread::IO,
           base::Bind(PostTask, BrowserThread::FILE,
               base::Bind(PostTask, BrowserThread::IO,
                   base::Bind(PostTask, BrowserThread::UI, reply)))));
 #endif
 }
 
+static int AccessArray(const int arr[], int index) {
+  return arr[index];
+}
+
+void TestingAutomationProvider::SimulateAsanMemoryBug(
+    base::DictionaryValue* args, IPC::Message* reply_message) {
+  int testarray[41];
+  AccessArray(testarray, 42);
+  AutomationJSONReply(this, reply_message).SendSuccess(NULL);
+}
+
 void TestingAutomationProvider::GetIndicesFromTab(
     DictionaryValue* args,
     IPC::Message* reply_message) {
   AutomationJSONReply reply(this, reply_message);
   int id_or_handle = 0;
   bool has_id = args->HasKey("tab_id");
   bool has_handle = args->HasKey("tab_handle");
   if (has_id && has_handle) {
     reply.SendError(
         "Both 'tab_id' and 'tab_handle' were specified. Only one is allowed");
@@ skipping 716 matching lines @@
       *browser_handle = browser_tracker_->Add(browser);
       *success = true;
     }
   }
 }
 
 void TestingAutomationProvider::OnRemoveProvider() {
   if (g_browser_process)
     g_browser_process->GetAutomationProviderList()->RemoveProvider(this);
 }