| // Should be caught even without retagging |
| //@compile-flags: -Zmiri-disable-stacked-borrows |
| #![feature(strict_provenance)] |
| use std::ptr::{self, addr_of_mut}; |
| |
| // Deref'ing a dangling raw pointer is fine, but for a dangling box it is not. |
| // We do this behind a pointer indirection to potentially fool validity checking. |
| // (This test relies on the `deref_copy` pass that lowers `**ptr` to materialize the intermediate pointer.) |
| |
| fn main() { |
| let mut inner = ptr::invalid::<i32>(24); |
| let outer = addr_of_mut!(inner).cast::<Box<i32>>(); |
| // Now `outer` is a pointer to a dangling reference. |
| // Deref'ing that should be UB. |
| let _val = unsafe { addr_of_mut!(**outer) }; //~ERROR: dangling box |
| } |
