1d49ca25dSKonstantin Belousov /*-
2d49ca25dSKonstantin Belousov  * SPDX-License-Identifier: BSD-3-Clause
3d49ca25dSKonstantin Belousov  *
4d49ca25dSKonstantin Belousov  * Copyright (c) 1983 Regents of the University of California.
5d49ca25dSKonstantin Belousov  * All rights reserved.
6d49ca25dSKonstantin Belousov  *
7d49ca25dSKonstantin Belousov  * Redistribution and use in source and binary forms, with or without
8d49ca25dSKonstantin Belousov  * modification, are permitted provided that the following conditions
9d49ca25dSKonstantin Belousov  * are met:
10d49ca25dSKonstantin Belousov  * 1. Redistributions of source code must retain the above copyright
11d49ca25dSKonstantin Belousov  *    notice, this list of conditions and the following disclaimer.
12d49ca25dSKonstantin Belousov  * 2. Redistributions in binary form must reproduce the above copyright
13d49ca25dSKonstantin Belousov  *    notice, this list of conditions and the following disclaimer in the
14d49ca25dSKonstantin Belousov  *    documentation and/or other materials provided with the distribution.
15d49ca25dSKonstantin Belousov  * 3. Neither the name of the University nor the names of its contributors
16d49ca25dSKonstantin Belousov  *    may be used to endorse or promote products derived from this software
17d49ca25dSKonstantin Belousov  *    without specific prior written permission.
18d49ca25dSKonstantin Belousov  *
19d49ca25dSKonstantin Belousov  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
20d49ca25dSKonstantin Belousov  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21d49ca25dSKonstantin Belousov  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22d49ca25dSKonstantin Belousov  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
23d49ca25dSKonstantin Belousov  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24d49ca25dSKonstantin Belousov  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25d49ca25dSKonstantin Belousov  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26d49ca25dSKonstantin Belousov  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27d49ca25dSKonstantin Belousov  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28d49ca25dSKonstantin Belousov  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29d49ca25dSKonstantin Belousov  * SUCH DAMAGE.
30d49ca25dSKonstantin Belousov  */
31d49ca25dSKonstantin Belousov 
32d49ca25dSKonstantin Belousov #if defined(LIBC_SCCS) && !defined(lint)
33d49ca25dSKonstantin Belousov /*static char *sccsid = "from: @(#)malloc.c	5.11 (Berkeley) 2/23/91";*/
34d49ca25dSKonstantin Belousov #endif /* LIBC_SCCS and not lint */
35d49ca25dSKonstantin Belousov 
36d49ca25dSKonstantin Belousov /*
37d49ca25dSKonstantin Belousov  * malloc.c (Caltech) 2/21/82
38d49ca25dSKonstantin Belousov  * Chris Kingsley, kingsley@cit-20.
39d49ca25dSKonstantin Belousov  *
40d49ca25dSKonstantin Belousov  * This is a very fast storage allocator.  It allocates blocks of a small
41d49ca25dSKonstantin Belousov  * number of different sizes, and keeps free lists of each size.  Blocks that
42d49ca25dSKonstantin Belousov  * don't exactly fit are passed up to the next larger size.  In this
43d49ca25dSKonstantin Belousov  * implementation, the available sizes are 2^n-4 (or 2^n-10) bytes long.
44d49ca25dSKonstantin Belousov  * This is designed for use in a virtual memory environment.
45d49ca25dSKonstantin Belousov  */
46d49ca25dSKonstantin Belousov 
475cac2021SKonstantin Belousov #include <sys/param.h>
48d49ca25dSKonstantin Belousov #include <sys/sysctl.h>
495cac2021SKonstantin Belousov #include <sys/mman.h>
50d49ca25dSKonstantin Belousov #include <errno.h>
51d49ca25dSKonstantin Belousov #include <stdarg.h>
52d49ca25dSKonstantin Belousov #include <stddef.h>
53d49ca25dSKonstantin Belousov #include <string.h>
54d49ca25dSKonstantin Belousov #include <unistd.h>
55bc7e8610SKonstantin Belousov #ifdef IN_RTLD
56d49ca25dSKonstantin Belousov #include "rtld.h"
57d49ca25dSKonstantin Belousov #include "rtld_printf.h"
5833dba3bbSKonstantin Belousov #include "rtld_paths.h"
59bc7e8610SKonstantin Belousov #endif
60cf6dbdd1SKonstantin Belousov #include "rtld_malloc.h"
61d49ca25dSKonstantin Belousov 
62d49ca25dSKonstantin Belousov /*
63d49ca25dSKonstantin Belousov  * Pre-allocate mmap'ed pages
64d49ca25dSKonstantin Belousov  */
65d49ca25dSKonstantin Belousov #define	NPOOLPAGES	(128*1024/pagesz)
66d49ca25dSKonstantin Belousov static caddr_t		pagepool_start, pagepool_end;
67d49ca25dSKonstantin Belousov 
68d49ca25dSKonstantin Belousov /*
69d49ca25dSKonstantin Belousov  * The overhead on a block is at least 4 bytes.  When free, this space
70d49ca25dSKonstantin Belousov  * contains a pointer to the next free block, and the bottom two bits must
71d49ca25dSKonstantin Belousov  * be zero.  When in use, the first byte is set to MAGIC, and the second
72d49ca25dSKonstantin Belousov  * byte is the size index.  The remaining bytes are for alignment.
73d49ca25dSKonstantin Belousov  */
74d49ca25dSKonstantin Belousov union	overhead {
75d49ca25dSKonstantin Belousov 	union	overhead *ov_next;	/* when free */
76d49ca25dSKonstantin Belousov 	struct {
77d60130bfSKonstantin Belousov 		uint16_t ovu_index;	/* bucket # */
78d60130bfSKonstantin Belousov 		uint8_t ovu_magic;	/* magic number */
79d49ca25dSKonstantin Belousov 	} ovu;
80d49ca25dSKonstantin Belousov #define	ov_magic	ovu.ovu_magic
81d49ca25dSKonstantin Belousov #define	ov_index	ovu.ovu_index
82d49ca25dSKonstantin Belousov };
83d49ca25dSKonstantin Belousov 
84d49ca25dSKonstantin Belousov static void morecore(int bucket);
85d49ca25dSKonstantin Belousov static int morepages(int n);
86d49ca25dSKonstantin Belousov 
87d49ca25dSKonstantin Belousov #define	MAGIC		0xef		/* magic # on accounting info */
88c29ee082SKonstantin Belousov #define	AMAGIC		0xdf		/* magic # for aligned alloc */
89d49ca25dSKonstantin Belousov 
90d49ca25dSKonstantin Belousov /*
9138915409SBrooks Davis  * nextf[i] is the pointer to the next free block of size
9238915409SBrooks Davis  * (FIRST_BUCKET_SIZE << i).  The overhead information precedes the data
9338915409SBrooks Davis  * area returned to the user.
94d49ca25dSKonstantin Belousov  */
95c29ee082SKonstantin Belousov #define	LOW_BITS		3
96c29ee082SKonstantin Belousov #define	FIRST_BUCKET_SIZE	(1U << LOW_BITS)
97d49ca25dSKonstantin Belousov #define	NBUCKETS 30
98d49ca25dSKonstantin Belousov static	union overhead *nextf[NBUCKETS];
99d49ca25dSKonstantin Belousov 
100d49ca25dSKonstantin Belousov static	int pagesz;			/* page size */
101d49ca25dSKonstantin Belousov 
102d49ca25dSKonstantin Belousov /*
103d49ca25dSKonstantin Belousov  * The array of supported page sizes is provided by the user, i.e., the
104d49ca25dSKonstantin Belousov  * program that calls this storage allocator.  That program must initialize
105d49ca25dSKonstantin Belousov  * the array before making its first call to allocate storage.  The array
106d49ca25dSKonstantin Belousov  * must contain at least one page size.  The page sizes must be stored in
107d49ca25dSKonstantin Belousov  * increasing order.
108d49ca25dSKonstantin Belousov  */
109d49ca25dSKonstantin Belousov 
1106bb7f058SKonstantin Belousov static void *
cp2op(void * cp)11186c7368fSKonstantin Belousov cp2op(void *cp)
11286c7368fSKonstantin Belousov {
1136bb7f058SKonstantin Belousov 	return (((caddr_t)cp - sizeof(union overhead)));
11486c7368fSKonstantin Belousov }
11586c7368fSKonstantin Belousov 
116d49ca25dSKonstantin Belousov void *
__crt_malloc(size_t nbytes)117d49ca25dSKonstantin Belousov __crt_malloc(size_t nbytes)
118d49ca25dSKonstantin Belousov {
119d49ca25dSKonstantin Belousov 	union overhead *op;
120d49ca25dSKonstantin Belousov 	int bucket;
121d49ca25dSKonstantin Belousov 	size_t amt;
122d49ca25dSKonstantin Belousov 
123d49ca25dSKonstantin Belousov 	/*
12438915409SBrooks Davis 	 * First time malloc is called, setup page size.
125d49ca25dSKonstantin Belousov 	 */
12638915409SBrooks Davis 	if (pagesz == 0)
12738915409SBrooks Davis 		pagesz = pagesizes[0];
128d49ca25dSKonstantin Belousov 	/*
129d49ca25dSKonstantin Belousov 	 * Convert amount of memory requested into closest block size
130d49ca25dSKonstantin Belousov 	 * stored in hash buckets which satisfies request.
131d49ca25dSKonstantin Belousov 	 * Account for space used per block for accounting.
132d49ca25dSKonstantin Belousov 	 */
13338915409SBrooks Davis 	amt = FIRST_BUCKET_SIZE;
134d49ca25dSKonstantin Belousov 	bucket = 0;
13538915409SBrooks Davis 	while (nbytes > amt - sizeof(*op)) {
136d49ca25dSKonstantin Belousov 		amt <<= 1;
137d49ca25dSKonstantin Belousov 		bucket++;
13838915409SBrooks Davis 		if (amt == 0 || bucket >= NBUCKETS)
13938915409SBrooks Davis 			return (NULL);
140d49ca25dSKonstantin Belousov 	}
141d49ca25dSKonstantin Belousov 	/*
142d49ca25dSKonstantin Belousov 	 * If nothing in hash bucket right now,
143d49ca25dSKonstantin Belousov 	 * request more memory from the system.
144d49ca25dSKonstantin Belousov 	 */
145d49ca25dSKonstantin Belousov   	if ((op = nextf[bucket]) == NULL) {
146d49ca25dSKonstantin Belousov   		morecore(bucket);
147d49ca25dSKonstantin Belousov   		if ((op = nextf[bucket]) == NULL)
148d49ca25dSKonstantin Belousov   			return (NULL);
149d49ca25dSKonstantin Belousov 	}
150d49ca25dSKonstantin Belousov 	/* remove from linked list */
151d49ca25dSKonstantin Belousov   	nextf[bucket] = op->ov_next;
152d49ca25dSKonstantin Belousov 	op->ov_magic = MAGIC;
153d49ca25dSKonstantin Belousov 	op->ov_index = bucket;
154d49ca25dSKonstantin Belousov   	return ((char *)(op + 1));
155d49ca25dSKonstantin Belousov }
156d49ca25dSKonstantin Belousov 
157d49ca25dSKonstantin Belousov void *
__crt_calloc(size_t num,size_t size)158d49ca25dSKonstantin Belousov __crt_calloc(size_t num, size_t size)
159d49ca25dSKonstantin Belousov {
160d49ca25dSKonstantin Belousov 	void *ret;
161d49ca25dSKonstantin Belousov 
162d49ca25dSKonstantin Belousov 	if (size != 0 && (num * size) / size != num) {
163d49ca25dSKonstantin Belousov 		/* size_t overflow. */
164d49ca25dSKonstantin Belousov 		return (NULL);
165d49ca25dSKonstantin Belousov 	}
166d49ca25dSKonstantin Belousov 
167d49ca25dSKonstantin Belousov 	if ((ret = __crt_malloc(num * size)) != NULL)
168d49ca25dSKonstantin Belousov 		memset(ret, 0, num * size);
169d49ca25dSKonstantin Belousov 
170d49ca25dSKonstantin Belousov 	return (ret);
171d49ca25dSKonstantin Belousov }
172d49ca25dSKonstantin Belousov 
173c29ee082SKonstantin Belousov void *
__crt_aligned_alloc_offset(size_t align,size_t size,size_t offset)174c29ee082SKonstantin Belousov __crt_aligned_alloc_offset(size_t align, size_t size, size_t offset)
175c29ee082SKonstantin Belousov {
176c29ee082SKonstantin Belousov 	void *mem, *ov;
177c29ee082SKonstantin Belousov 	union overhead ov1;
178c29ee082SKonstantin Belousov 	uintptr_t x;
179c29ee082SKonstantin Belousov 
180c29ee082SKonstantin Belousov 	if (align < FIRST_BUCKET_SIZE)
181c29ee082SKonstantin Belousov 		align = FIRST_BUCKET_SIZE;
182c29ee082SKonstantin Belousov 	offset &= align - 1;
183c29ee082SKonstantin Belousov 	mem = __crt_malloc(size + align + offset + sizeof(union overhead));
184c29ee082SKonstantin Belousov 	if (mem == NULL)
185c29ee082SKonstantin Belousov 		return (NULL);
186c29ee082SKonstantin Belousov 	x = roundup2((uintptr_t)mem + sizeof(union overhead), align);
187c29ee082SKonstantin Belousov 	x += offset;
188c29ee082SKonstantin Belousov 	ov = cp2op((void *)x);
189c29ee082SKonstantin Belousov 	ov1.ov_magic = AMAGIC;
190*cbf1bbe5SKonstantin Belousov 	ov1.ov_index = x - (uintptr_t)mem + sizeof(union overhead);
191c29ee082SKonstantin Belousov 	memcpy(ov, &ov1, sizeof(ov1));
192c29ee082SKonstantin Belousov 	return ((void *)x);
193c29ee082SKonstantin Belousov }
194c29ee082SKonstantin Belousov 
195d49ca25dSKonstantin Belousov /*
196d49ca25dSKonstantin Belousov  * Allocate more memory to the indicated bucket.
197d49ca25dSKonstantin Belousov  */
198d49ca25dSKonstantin Belousov static void
morecore(int bucket)199d49ca25dSKonstantin Belousov morecore(int bucket)
200d49ca25dSKonstantin Belousov {
201d49ca25dSKonstantin Belousov 	union overhead *op;
202d49ca25dSKonstantin Belousov 	int sz;		/* size of desired block */
203d49ca25dSKonstantin Belousov   	int amt;			/* amount to allocate */
204d49ca25dSKonstantin Belousov   	int nblks;			/* how many blocks we get */
205d49ca25dSKonstantin Belousov 
20638915409SBrooks Davis 	sz = FIRST_BUCKET_SIZE << bucket;
207d49ca25dSKonstantin Belousov 	if (sz < pagesz) {
208d49ca25dSKonstantin Belousov 		amt = pagesz;
209d49ca25dSKonstantin Belousov   		nblks = amt / sz;
210d49ca25dSKonstantin Belousov 	} else {
21138915409SBrooks Davis 		amt = sz;
212d49ca25dSKonstantin Belousov 		nblks = 1;
213d49ca25dSKonstantin Belousov 	}
214d49ca25dSKonstantin Belousov 	if (amt > pagepool_end - pagepool_start)
21519e008e7SKonstantin Belousov 		if (morepages(amt / pagesz + NPOOLPAGES) == 0 &&
21619e008e7SKonstantin Belousov 		    /* Retry with min required size */
21719e008e7SKonstantin Belousov 		    morepages(amt / pagesz) == 0)
218d49ca25dSKonstantin Belousov 			return;
219d49ca25dSKonstantin Belousov 	op = (union overhead *)pagepool_start;
220d49ca25dSKonstantin Belousov 	pagepool_start += amt;
221d49ca25dSKonstantin Belousov 
222d49ca25dSKonstantin Belousov 	/*
223d49ca25dSKonstantin Belousov 	 * Add new memory allocated to that on
224d49ca25dSKonstantin Belousov 	 * free list for this hash bucket.
225d49ca25dSKonstantin Belousov 	 */
226d49ca25dSKonstantin Belousov   	nextf[bucket] = op;
227d49ca25dSKonstantin Belousov   	while (--nblks > 0) {
228d49ca25dSKonstantin Belousov 		op->ov_next = (union overhead *)((caddr_t)op + sz);
229d49ca25dSKonstantin Belousov 		op = (union overhead *)((caddr_t)op + sz);
230d49ca25dSKonstantin Belousov   	}
231d49ca25dSKonstantin Belousov }
232d49ca25dSKonstantin Belousov 
233d49ca25dSKonstantin Belousov void
__crt_free(void * cp)234d49ca25dSKonstantin Belousov __crt_free(void *cp)
235d49ca25dSKonstantin Belousov {
236c29ee082SKonstantin Belousov 	union overhead *op, op1;
237c29ee082SKonstantin Belousov 	void *opx;
238d49ca25dSKonstantin Belousov 	int size;
239d49ca25dSKonstantin Belousov 
240d49ca25dSKonstantin Belousov   	if (cp == NULL)
241d49ca25dSKonstantin Belousov   		return;
242c29ee082SKonstantin Belousov 	opx = cp2op(cp);
243c29ee082SKonstantin Belousov 	memcpy(&op1, opx, sizeof(op1));
244c29ee082SKonstantin Belousov 	op = op1.ov_magic == AMAGIC ? (void *)((caddr_t)cp - op1.ov_index) :
245c29ee082SKonstantin Belousov 	    opx;
246d49ca25dSKonstantin Belousov 	if (op->ov_magic != MAGIC)
247d49ca25dSKonstantin Belousov 		return;				/* sanity */
248d49ca25dSKonstantin Belousov   	size = op->ov_index;
249d49ca25dSKonstantin Belousov 	op->ov_next = nextf[size];	/* also clobbers ov_magic */
250d49ca25dSKonstantin Belousov   	nextf[size] = op;
251d49ca25dSKonstantin Belousov }
252d49ca25dSKonstantin Belousov 
253d49ca25dSKonstantin Belousov void *
__crt_realloc(void * cp,size_t nbytes)254d49ca25dSKonstantin Belousov __crt_realloc(void *cp, size_t nbytes)
255d49ca25dSKonstantin Belousov {
256d49ca25dSKonstantin Belousov 	u_int onb;
257d49ca25dSKonstantin Belousov 	int i;
258d49ca25dSKonstantin Belousov 	union overhead *op;
259d49ca25dSKonstantin Belousov   	char *res;
260d49ca25dSKonstantin Belousov 
261d49ca25dSKonstantin Belousov   	if (cp == NULL)
262d49ca25dSKonstantin Belousov 		return (__crt_malloc(nbytes));
26386c7368fSKonstantin Belousov 	op = cp2op(cp);
26498ab7906SBrooks Davis 	if (op->ov_magic != MAGIC)
26598ab7906SBrooks Davis 		return (NULL);	/* Double-free or bad argument */
266d49ca25dSKonstantin Belousov 	i = op->ov_index;
267d49ca25dSKonstantin Belousov 	onb = 1 << (i + 3);
268d49ca25dSKonstantin Belousov 	if (onb < (u_int)pagesz)
2695cac2021SKonstantin Belousov 		onb -= sizeof(*op);
270d49ca25dSKonstantin Belousov 	else
2715cac2021SKonstantin Belousov 		onb += pagesz - sizeof(*op);
272d49ca25dSKonstantin Belousov 	/* avoid the copy if same size block */
27398ab7906SBrooks Davis 	if (i != 0) {
274d49ca25dSKonstantin Belousov 		i = 1 << (i + 2);
275d49ca25dSKonstantin Belousov 		if (i < pagesz)
2765cac2021SKonstantin Belousov 			i -= sizeof(*op);
277d49ca25dSKonstantin Belousov 		else
2785cac2021SKonstantin Belousov 			i += pagesz - sizeof(*op);
279d49ca25dSKonstantin Belousov 	}
2805cac2021SKonstantin Belousov 	if (nbytes <= onb && nbytes > (size_t)i)
281d49ca25dSKonstantin Belousov 		return (cp);
282d49ca25dSKonstantin Belousov   	if ((res = __crt_malloc(nbytes)) == NULL)
283d49ca25dSKonstantin Belousov 		return (NULL);
284d49ca25dSKonstantin Belousov 	bcopy(cp, res, (nbytes < onb) ? nbytes : onb);
28598ab7906SBrooks Davis 	__crt_free(cp);
286d49ca25dSKonstantin Belousov   	return (res);
287d49ca25dSKonstantin Belousov }
288d49ca25dSKonstantin Belousov 
289d49ca25dSKonstantin Belousov static int
morepages(int n)290d49ca25dSKonstantin Belousov morepages(int n)
291d49ca25dSKonstantin Belousov {
2923cac4083SKonstantin Belousov 	caddr_t	addr;
293d49ca25dSKonstantin Belousov 	int offset;
294d49ca25dSKonstantin Belousov 
295d49ca25dSKonstantin Belousov 	if (pagepool_end - pagepool_start > pagesz) {
2960b72d296SKonstantin Belousov 		addr = roundup2(pagepool_start, pagesz);
297d49ca25dSKonstantin Belousov 		if (munmap(addr, pagepool_end - addr) != 0) {
298d49ca25dSKonstantin Belousov #ifdef IN_RTLD
299d49ca25dSKonstantin Belousov 			rtld_fdprintf(STDERR_FILENO, _BASENAME_RTLD ": "
300d49ca25dSKonstantin Belousov 			    "morepages: cannot munmap %p: %s\n",
301d49ca25dSKonstantin Belousov 			    addr, rtld_strerror(errno));
302d49ca25dSKonstantin Belousov #endif
303d49ca25dSKonstantin Belousov 		}
304d49ca25dSKonstantin Belousov 	}
305d49ca25dSKonstantin Belousov 
3060b72d296SKonstantin Belousov 	offset = (uintptr_t)pagepool_start - rounddown2(
3070b72d296SKonstantin Belousov 	    (uintptr_t)pagepool_start, pagesz);
308d49ca25dSKonstantin Belousov 
30973dddffcSKonstantin Belousov 	addr = mmap(0, n * pagesz, PROT_READ | PROT_WRITE,
3103cac4083SKonstantin Belousov 	    MAP_ANON | MAP_PRIVATE, -1, 0);
31173dddffcSKonstantin Belousov 	if (addr == MAP_FAILED) {
312d49ca25dSKonstantin Belousov #ifdef IN_RTLD
313d49ca25dSKonstantin Belousov 		rtld_fdprintf(STDERR_FILENO, _BASENAME_RTLD ": morepages: "
314d49ca25dSKonstantin Belousov 		    "cannot mmap anonymous memory: %s\n",
315d49ca25dSKonstantin Belousov 		    rtld_strerror(errno));
316d49ca25dSKonstantin Belousov #endif
31773dddffcSKonstantin Belousov 		pagepool_start = pagepool_end = NULL;
3183cac4083SKonstantin Belousov 		return (0);
319d49ca25dSKonstantin Belousov 	}
32073dddffcSKonstantin Belousov 	pagepool_start = addr;
321d49ca25dSKonstantin Belousov 	pagepool_end = pagepool_start + n * pagesz;
322d49ca25dSKonstantin Belousov 	pagepool_start += offset;
323d49ca25dSKonstantin Belousov 
3243cac4083SKonstantin Belousov 	return (n);
325d49ca25dSKonstantin Belousov }
326