Mercurial > dropbear
annotate dbmalloc.c @ 1369:ddfcadca3c4c fuzz
fuzzer-pubkey
| author | Matt Johnston <matt@ucc.asn.au> |
|---|---|
| date | Tue, 23 May 2017 22:43:34 +0800 |
| parents | 9aa6cd66b51d |
| children | 7209a6e30932 |
| rev | line source |
|---|---|
| 1361 | 1 #include "dbmalloc.h" |
| 2 #include "dbutil.h" | |
| 3 | |
| 4 #define LIST_SIZE 1000 | |
| 5 | |
| 6 struct dbmalloc_header { | |
| 7 unsigned int index; | |
| 8 unsigned int epoch; | |
| 9 }; | |
| 10 | |
| 11 static struct dbmalloc_header* dbmalloc_list[LIST_SIZE]; | |
| 12 | |
| 13 unsigned int current_epoch = 0; | |
| 14 | |
| 15 void m_malloc_set_epoch(unsigned int epoch) { | |
| 16 current_epoch = epoch; | |
| 17 } | |
| 18 | |
| 19 void m_malloc_free_epoch(unsigned int epoch) { | |
| 20 unsigned int i; | |
| 21 unsigned int freed = 0; | |
| 22 for (i = 0; i < LIST_SIZE; i++) { | |
| 23 if (dbmalloc_list[i] != NULL) { | |
| 24 assert(dbmalloc_list[i]->index == i); | |
| 25 if (dbmalloc_list[i]->epoch == epoch) { | |
| 26 free(dbmalloc_list[i]); | |
| 27 dbmalloc_list[i] = NULL; | |
| 28 freed++; | |
| 29 } | |
| 30 } | |
| 31 } | |
| 32 TRACE(("free_epoch freed %d", freed)) | |
| 33 } | |
| 34 | |
| 35 static void put_alloc(struct dbmalloc_header *header) { | |
| 36 unsigned int i; | |
| 37 for (i = 0; i < LIST_SIZE; i++) { | |
| 38 if (dbmalloc_list[i] == NULL) { | |
| 39 dbmalloc_list[i] = header; | |
| 40 header->index = i; | |
| 41 return; | |
| 42 } | |
| 43 } | |
| 44 dropbear_exit("ran out of dbmalloc entries"); | |
| 45 } | |
| 46 | |
| 47 static void remove_alloc(struct dbmalloc_header *header) { | |
| 48 assert(header->index < LIST_SIZE); | |
| 49 assert(dbmalloc_list[header->index] == header); | |
| 50 assert(header->epoch == current_epoch); | |
| 51 dbmalloc_list[header->index] = NULL; | |
| 52 } | |
| 53 | |
| 54 static struct dbmalloc_header* get_header(void* ptr) { | |
| 55 char* bptr = ptr; | |
| 56 return (struct dbmalloc_header*)&bptr[-sizeof(struct dbmalloc_header)]; | |
| 57 } | |
| 58 | |
| 59 void * m_malloc(size_t size) { | |
| 60 char* mem = NULL; | |
| 61 struct dbmalloc_header* header = NULL; | |
| 62 | |
| 63 if (size == 0 || size > 1e9) { | |
| 64 dropbear_exit("m_malloc failed"); | |
| 65 } | |
| 66 | |
| 67 size = size + sizeof(struct dbmalloc_header); | |
| 68 | |
| 69 mem = calloc(1, size); | |
| 70 if (mem == NULL) { | |
| 71 dropbear_exit("m_malloc failed"); | |
| 72 } | |
| 73 header = (struct dbmalloc_header*)mem; | |
| 74 put_alloc(header); | |
| 75 header->epoch = current_epoch; | |
| 76 return &mem[sizeof(struct dbmalloc_header)]; | |
| 77 } | |
| 78 | |
| 79 void * m_calloc(size_t nmemb, size_t size) { | |
|
1365
9aa6cd66b51d
zlib can use m_malloc/m_free too
Matt Johnston <matt@ucc.asn.au>
parents:
1361
diff
changeset
|
80 if (SIZE_T_MAX / nmemb < size) { |
|
9aa6cd66b51d
zlib can use m_malloc/m_free too
Matt Johnston <matt@ucc.asn.au>
parents:
1361
diff
changeset
|
81 dropbear_exit("m_calloc failed"); |
|
9aa6cd66b51d
zlib can use m_malloc/m_free too
Matt Johnston <matt@ucc.asn.au>
parents:
1361
diff
changeset
|
82 } |
| 1361 | 83 return m_malloc(nmemb*size); |
| 84 } | |
| 85 | |
| 86 void * m_realloc(void* ptr, size_t size) { | |
| 87 char* mem = NULL; | |
| 88 struct dbmalloc_header* header = NULL; | |
| 89 if (size == 0 || size > 1e9) { | |
| 90 dropbear_exit("m_realloc failed"); | |
| 91 } | |
| 92 | |
| 93 header = get_header(ptr); | |
| 94 remove_alloc(header); | |
| 95 | |
| 96 size = size + sizeof(struct dbmalloc_header); | |
| 97 mem = realloc(header, size); | |
| 98 if (mem == NULL) { | |
| 99 dropbear_exit("m_realloc failed"); | |
| 100 } | |
| 101 | |
| 102 header = (struct dbmalloc_header*)mem; | |
| 103 put_alloc(header); | |
| 104 return &mem[sizeof(struct dbmalloc_header)]; | |
| 105 } | |
| 106 | |
| 107 void m_free_direct(void* ptr) { | |
| 108 struct dbmalloc_header* header = NULL; | |
| 109 if (!ptr) { | |
| 110 return; | |
| 111 } | |
| 112 header = get_header(ptr); | |
| 113 remove_alloc(header); | |
| 114 free(header); | |
| 115 } | |
| 116 | |
| 117 void * m_strdup(const char * str) { | |
| 118 char* ret; | |
| 119 unsigned int len; | |
| 120 len = strlen(str); | |
| 121 | |
| 122 ret = m_malloc(len+1); | |
| 123 if (ret == NULL) { | |
| 124 dropbear_exit("m_strdup failed"); | |
| 125 } | |
| 126 memcpy(ret, str, len+1); | |
| 127 return ret; | |
| 128 } | |
| 129 | |
| 130 |