1 files changed, 15 insertions, 0 deletions
diff --git a/tests/conformance/8-runtime/stale_index_after_free_traps.zc b/tests/conformance/8-runtime/stale_index_after_free_traps.zc
new file mode 100644
index 0000000..bd2a185
--- /dev/null
+++ b/tests/conformance/8-runtime/stale_index_after_free_traps.zc
@@ -0,0 +1,15 @@
+// expect error: zy: index 4 out of range (length 0)
+// spec 3.7.4: a freed block has length 0, so an index through a stale copy of its pointer traps
+include rt;
+void pn(int x) { rt.put_n(x); rt.put_c(10); }
+int g;
+// unchecked: the analyzer stays out, so the block is freed (quarantined, with its check word) rather than recycled
+unchecked int make() { let p = rt.new(5); p[4] = 1; g = p; return 0; }
+unchecked int drop() { let p = g; rt.free(p); return 0; }
+fn main() {
+	word* q; int i = 4;
+	make(); q = g as word*; pn(q[i]);
+	drop(); q = g as word*; pn(q[i]);
+	return 0;
+}
+// zc0: skip