malloc-debug.c 16 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541
  1. /* Malloc debug DSO.
  2. Copyright (C) 2021-2026 Free Software Foundation, Inc.
  3. Copyright The GNU Toolchain Authors.
  4. This file is part of the GNU C Library.
  5. The GNU C Library is free software; you can redistribute it and/or
  6. modify it under the terms of the GNU Lesser General Public License as
  7. published by the Free Software Foundation; either version 2.1 of the
  8. License, or (at your option) any later version.
  9. The GNU C Library is distributed in the hope that it will be useful,
  10. but WITHOUT ANY WARRANTY; without even the implied warranty of
  11. MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  12. Lesser General Public License for more details.
  13. You should have received a copy of the GNU Lesser General Public
  14. License along with the GNU C Library; see the file COPYING.LIB. If
  15. not, see <https://www.gnu.org/licenses/>. */
  16. #include <atomic.h>
  17. #include <libc-symbols.h>
  18. #include <shlib-compat.h>
  19. #include <string.h>
  20. #include <unistd.h>
  21. #include <sys/param.h>
  22. /* Support only the glibc allocators. */
  23. extern void *__libc_malloc (size_t);
  24. extern void __libc_free (void *);
  25. extern void *__libc_realloc (void *, size_t);
  26. extern void *__libc_memalign (size_t, size_t);
  27. extern void *__libc_valloc (size_t);
  28. extern void *__libc_pvalloc (size_t);
  29. extern void *__libc_calloc (size_t, size_t);
  30. #define DEBUG_FN(fn) \
  31. static __typeof (__libc_ ## fn) __debug_ ## fn
  32. DEBUG_FN(malloc);
  33. DEBUG_FN(free);
  34. DEBUG_FN(realloc);
  35. DEBUG_FN(memalign);
  36. DEBUG_FN(valloc);
  37. DEBUG_FN(pvalloc);
  38. DEBUG_FN(calloc);
  39. static int debug_initialized = -1;
  40. enum malloc_debug_hooks
  41. {
  42. MALLOC_NONE_HOOK = 0,
  43. MALLOC_MCHECK_HOOK = 1 << 0, /* mcheck() */
  44. MALLOC_MTRACE_HOOK = 1 << 1, /* mtrace() */
  45. MALLOC_CHECK_HOOK = 1 << 2, /* MALLOC_CHECK_ or glibc.malloc.check. */
  46. };
  47. static unsigned __malloc_debugging_hooks;
  48. static __always_inline bool
  49. __is_malloc_debug_enabled (enum malloc_debug_hooks flag)
  50. {
  51. return __malloc_debugging_hooks & flag;
  52. }
  53. static __always_inline void
  54. __malloc_debug_enable (enum malloc_debug_hooks flag)
  55. {
  56. __malloc_debugging_hooks |= flag;
  57. }
  58. static __always_inline void
  59. __malloc_debug_disable (enum malloc_debug_hooks flag)
  60. {
  61. __malloc_debugging_hooks &= ~flag;
  62. }
  63. #include "mcheck.c"
  64. #include "mtrace.c"
  65. #include "malloc-check.c"
  66. #if SHLIB_COMPAT (libc_malloc_debug, GLIBC_2_0, GLIBC_2_24)
  67. extern void (*__malloc_initialize_hook) (void);
  68. compat_symbol_reference (libc, __malloc_initialize_hook,
  69. __malloc_initialize_hook, GLIBC_2_0);
  70. #endif
  71. static void *malloc_hook_ini (size_t, const void *) __THROW;
  72. static void *realloc_hook_ini (void *, size_t, const void *) __THROW;
  73. static void *memalign_hook_ini (size_t, size_t, const void *) __THROW;
  74. void (*__free_hook) (void *, const void *) = NULL;
  75. void *(*__malloc_hook) (size_t, const void *) = malloc_hook_ini;
  76. void *(*__realloc_hook) (void *, size_t, const void *) = realloc_hook_ini;
  77. void *(*__memalign_hook) (size_t, size_t, const void *) = memalign_hook_ini;
  78. /* Hooks for debugging versions. The initial hooks just call the
  79. initialization routine, then do the normal work. */
  80. /* These hooks will get executed only through the interposed allocator
  81. functions in libc_malloc_debug.so. This means that the calls to malloc,
  82. realloc, etc. will lead back into the interposed functions, which is what we
  83. want.
  84. These initial hooks are assumed to be called in a single-threaded context,
  85. so it is safe to reset all hooks at once upon initialization. */
  86. static void
  87. generic_hook_ini (void)
  88. {
  89. debug_initialized = 0;
  90. __malloc_hook = NULL;
  91. __realloc_hook = NULL;
  92. __memalign_hook = NULL;
  93. /* malloc check does not quite co-exist with libc malloc, so initialize
  94. either on or the other. */
  95. if (!initialize_malloc_check ())
  96. /* The compiler does not know that these functions are allocators, so it
  97. will not try to optimize it away. */
  98. __libc_free (__libc_malloc (0));
  99. #if SHLIB_COMPAT (libc_malloc_debug, GLIBC_2_0, GLIBC_2_24)
  100. void (*hook) (void) = __malloc_initialize_hook;
  101. if (hook != NULL)
  102. (*hook)();
  103. #endif
  104. debug_initialized = 1;
  105. }
  106. static void *
  107. malloc_hook_ini (size_t sz, const void *caller)
  108. {
  109. generic_hook_ini ();
  110. return __debug_malloc (sz);
  111. }
  112. static void *
  113. realloc_hook_ini (void *ptr, size_t sz, const void *caller)
  114. {
  115. generic_hook_ini ();
  116. return __debug_realloc (ptr, sz);
  117. }
  118. static void *
  119. memalign_hook_ini (size_t alignment, size_t sz, const void *caller)
  120. {
  121. generic_hook_ini ();
  122. return __debug_memalign (alignment, sz);
  123. }
  124. static size_t pagesize;
  125. /* The allocator functions. */
  126. static void *
  127. __debug_malloc (size_t bytes)
  128. {
  129. void *(*hook) (size_t, const void *) = __malloc_hook;
  130. if (__glibc_unlikely (hook != NULL))
  131. return (*hook)(bytes, RETURN_ADDRESS (0));
  132. void *victim = NULL;
  133. size_t orig_bytes = bytes;
  134. if ((!__is_malloc_debug_enabled (MALLOC_MCHECK_HOOK)
  135. || !malloc_mcheck_before (&bytes, &victim)))
  136. {
  137. victim = (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK)
  138. ? malloc_check (bytes) : __libc_malloc (bytes));
  139. }
  140. if (__is_malloc_debug_enabled (MALLOC_MCHECK_HOOK) && victim != NULL)
  141. victim = malloc_mcheck_after (victim, orig_bytes);
  142. if (__is_malloc_debug_enabled (MALLOC_MTRACE_HOOK))
  143. malloc_mtrace_after (victim, orig_bytes, RETURN_ADDRESS (0));
  144. return victim;
  145. }
  146. strong_alias (__debug_malloc, malloc)
  147. static void
  148. __debug_free (void *mem)
  149. {
  150. void (*hook) (void *, const void *) = __free_hook;
  151. if (__glibc_unlikely (hook != NULL))
  152. {
  153. (*hook)(mem, RETURN_ADDRESS (0));
  154. return;
  155. }
  156. if (__is_malloc_debug_enabled (MALLOC_MCHECK_HOOK))
  157. mem = free_mcheck (mem);
  158. if (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK))
  159. free_check (mem);
  160. else
  161. __libc_free (mem);
  162. if (__is_malloc_debug_enabled (MALLOC_MTRACE_HOOK))
  163. free_mtrace (mem, RETURN_ADDRESS (0));
  164. }
  165. strong_alias (__debug_free, free)
  166. static void
  167. __debug_free_sized (void *mem, __attribute_maybe_unused__ size_t size)
  168. {
  169. free (mem);
  170. }
  171. strong_alias (__debug_free_sized, free_sized)
  172. static void
  173. __debug_free_aligned_sized (void *mem, __attribute_maybe_unused__ size_t alignment,
  174. __attribute_maybe_unused__ size_t size)
  175. {
  176. free (mem);
  177. }
  178. strong_alias (__debug_free_aligned_sized, free_aligned_sized)
  179. static void *
  180. __debug_realloc (void *oldmem, size_t bytes)
  181. {
  182. void *(*hook) (void *, size_t, const void *) = __realloc_hook;
  183. if (__glibc_unlikely (hook != NULL))
  184. return (*hook)(oldmem, bytes, RETURN_ADDRESS (0));
  185. size_t orig_bytes = bytes, oldsize = 0;
  186. void *victim = NULL;
  187. if ((!__is_malloc_debug_enabled (MALLOC_MCHECK_HOOK)
  188. || !realloc_mcheck_before (&oldmem, &bytes, &oldsize, &victim)))
  189. {
  190. if (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK))
  191. victim = realloc_check (oldmem, bytes);
  192. else
  193. victim = __libc_realloc (oldmem, bytes);
  194. }
  195. if (__is_malloc_debug_enabled (MALLOC_MCHECK_HOOK) && victim != NULL)
  196. victim = realloc_mcheck_after (victim, oldmem, orig_bytes,
  197. oldsize);
  198. if (__is_malloc_debug_enabled (MALLOC_MTRACE_HOOK))
  199. realloc_mtrace_after (victim, oldmem, orig_bytes, RETURN_ADDRESS (0));
  200. return victim;
  201. }
  202. strong_alias (__debug_realloc, realloc)
  203. static void *
  204. _debug_mid_memalign (size_t alignment, size_t bytes, const void *address)
  205. {
  206. void *(*hook) (size_t, size_t, const void *) = __memalign_hook;
  207. if (__glibc_unlikely (hook != NULL))
  208. return (*hook)(alignment, bytes, address);
  209. void *victim = NULL;
  210. size_t orig_bytes = bytes;
  211. if ((!__is_malloc_debug_enabled (MALLOC_MCHECK_HOOK)
  212. || !memalign_mcheck_before (alignment, &bytes, &victim)))
  213. {
  214. victim = (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK)
  215. ? memalign_check (alignment, bytes)
  216. : __libc_memalign (alignment, bytes));
  217. }
  218. if (__is_malloc_debug_enabled (MALLOC_MCHECK_HOOK) && victim != NULL)
  219. victim = memalign_mcheck_after (victim, alignment, orig_bytes);
  220. if (__is_malloc_debug_enabled (MALLOC_MTRACE_HOOK))
  221. memalign_mtrace_after (victim, orig_bytes, address);
  222. return victim;
  223. }
  224. static void *
  225. __debug_memalign (size_t alignment, size_t bytes)
  226. {
  227. return _debug_mid_memalign (alignment, bytes, RETURN_ADDRESS (0));
  228. }
  229. strong_alias (__debug_memalign, memalign)
  230. static void *
  231. __debug_aligned_alloc (size_t alignment, size_t bytes)
  232. {
  233. if (!powerof2 (alignment) || alignment == 0)
  234. return NULL;
  235. return _debug_mid_memalign (alignment, bytes, RETURN_ADDRESS (0));
  236. }
  237. strong_alias (__debug_aligned_alloc, aligned_alloc)
  238. static void *
  239. __debug_pvalloc (size_t bytes)
  240. {
  241. size_t rounded_bytes;
  242. if (!pagesize)
  243. pagesize = sysconf (_SC_PAGESIZE);
  244. /* ALIGN_UP with overflow check. */
  245. if (__glibc_unlikely (__builtin_add_overflow (bytes,
  246. pagesize - 1,
  247. &rounded_bytes)))
  248. {
  249. errno = ENOMEM;
  250. return NULL;
  251. }
  252. rounded_bytes = rounded_bytes & -(pagesize - 1);
  253. return _debug_mid_memalign (pagesize, rounded_bytes, RETURN_ADDRESS (0));
  254. }
  255. strong_alias (__debug_pvalloc, pvalloc)
  256. static void *
  257. __debug_valloc (size_t bytes)
  258. {
  259. if (!pagesize)
  260. pagesize = sysconf (_SC_PAGESIZE);
  261. return _debug_mid_memalign (pagesize, bytes, RETURN_ADDRESS (0));
  262. }
  263. strong_alias (__debug_valloc, valloc)
  264. static int
  265. __debug_posix_memalign (void **memptr, size_t alignment, size_t bytes)
  266. {
  267. /* Test whether the SIZE argument is valid. It must be a power of
  268. two multiple of sizeof (void *). */
  269. if (alignment % sizeof (void *) != 0
  270. || !powerof2 (alignment / sizeof (void *))
  271. || alignment == 0)
  272. return EINVAL;
  273. *memptr = _debug_mid_memalign (alignment, bytes, RETURN_ADDRESS (0));
  274. if (*memptr == NULL)
  275. return ENOMEM;
  276. return 0;
  277. }
  278. strong_alias (__debug_posix_memalign, posix_memalign)
  279. static void *
  280. __debug_calloc (size_t nmemb, size_t size)
  281. {
  282. size_t bytes;
  283. if (__glibc_unlikely (__builtin_mul_overflow (nmemb, size, &bytes)))
  284. {
  285. errno = ENOMEM;
  286. return NULL;
  287. }
  288. void *(*hook) (size_t, const void *) = __malloc_hook;
  289. if (__glibc_unlikely (hook != NULL))
  290. {
  291. void *mem = (*hook)(bytes, RETURN_ADDRESS (0));
  292. if (mem != NULL)
  293. memset (mem, 0, bytes);
  294. return mem;
  295. }
  296. size_t orig_bytes = bytes;
  297. void *victim = NULL;
  298. if ((!__is_malloc_debug_enabled (MALLOC_MCHECK_HOOK)
  299. || !malloc_mcheck_before (&bytes, &victim)))
  300. {
  301. victim = (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK)
  302. ? malloc_check (bytes) : __libc_malloc (bytes));
  303. }
  304. if (victim != NULL)
  305. {
  306. if (__is_malloc_debug_enabled (MALLOC_MCHECK_HOOK))
  307. victim = malloc_mcheck_after (victim, orig_bytes);
  308. memset (victim, 0, orig_bytes);
  309. }
  310. if (__is_malloc_debug_enabled (MALLOC_MTRACE_HOOK))
  311. malloc_mtrace_after (victim, orig_bytes, RETURN_ADDRESS (0));
  312. return victim;
  313. }
  314. strong_alias (__debug_calloc, calloc)
  315. size_t
  316. malloc_usable_size (void *mem)
  317. {
  318. if (mem == NULL)
  319. return 0;
  320. if (__is_malloc_debug_enabled (MALLOC_MCHECK_HOOK))
  321. return mcheck_usable_size (mem);
  322. if (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK))
  323. return malloc_check_get_size (mem);
  324. return musable (mem);
  325. }
  326. #define LIBC_SYMBOL(sym) libc_ ## sym
  327. #define SYMHANDLE(sym) sym ## _handle
  328. #define LOAD_SYM(sym) ({ \
  329. static void *SYMHANDLE (sym); \
  330. if (SYMHANDLE (sym) == NULL) \
  331. SYMHANDLE (sym) = dlsym (RTLD_NEXT, #sym); \
  332. SYMHANDLE (sym); \
  333. })
  334. int
  335. malloc_info (int options, FILE *fp)
  336. {
  337. if (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK))
  338. return __malloc_info (options, fp);
  339. int (*LIBC_SYMBOL (malloc_info)) (int, FILE *) = LOAD_SYM (malloc_info);
  340. if (LIBC_SYMBOL (malloc_info) == NULL)
  341. return -1;
  342. return LIBC_SYMBOL (malloc_info) (options, fp);
  343. }
  344. int
  345. mallopt (int param_number, int value)
  346. {
  347. if (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK))
  348. return __libc_mallopt (param_number, value);
  349. int (*LIBC_SYMBOL (mallopt)) (int, int) = LOAD_SYM (mallopt);
  350. if (LIBC_SYMBOL (mallopt) == NULL)
  351. return 0;
  352. return LIBC_SYMBOL (mallopt) (param_number, value);
  353. }
  354. void
  355. malloc_stats (void)
  356. {
  357. if (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK))
  358. return __malloc_stats ();
  359. void (*LIBC_SYMBOL (malloc_stats)) (void) = LOAD_SYM (malloc_stats);
  360. if (LIBC_SYMBOL (malloc_stats) == NULL)
  361. return;
  362. LIBC_SYMBOL (malloc_stats) ();
  363. }
  364. struct mallinfo2
  365. mallinfo2 (void)
  366. {
  367. if (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK))
  368. return __libc_mallinfo2 ();
  369. struct mallinfo2 (*LIBC_SYMBOL (mallinfo2)) (void) = LOAD_SYM (mallinfo2);
  370. if (LIBC_SYMBOL (mallinfo2) == NULL)
  371. {
  372. struct mallinfo2 ret = {0};
  373. return ret;
  374. }
  375. return LIBC_SYMBOL (mallinfo2) ();
  376. }
  377. struct mallinfo
  378. mallinfo (void)
  379. {
  380. if (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK))
  381. return __libc_mallinfo ();
  382. struct mallinfo (*LIBC_SYMBOL (mallinfo)) (void) = LOAD_SYM (mallinfo);
  383. if (LIBC_SYMBOL (mallinfo) == NULL)
  384. {
  385. struct mallinfo ret = {0};
  386. return ret;
  387. }
  388. return LIBC_SYMBOL (mallinfo) ();
  389. }
  390. int
  391. malloc_trim (size_t s)
  392. {
  393. if (__is_malloc_debug_enabled (MALLOC_CHECK_HOOK))
  394. return __malloc_trim (s);
  395. int (*LIBC_SYMBOL (malloc_trim)) (size_t) = LOAD_SYM (malloc_trim);
  396. if (LIBC_SYMBOL (malloc_trim) == NULL)
  397. return 0;
  398. return LIBC_SYMBOL (malloc_trim) (s);
  399. }
  400. #if SHLIB_COMPAT (libc_malloc_debug, GLIBC_2_0, GLIBC_2_25)
  401. /* Support for saving/restoring dumped heaps in old GLIBCs is no
  402. longer implemented - instead we provide dummy implementations
  403. which always fail. We need to provide these symbol so that
  404. existing Emacs binaries continue to work with BIND_NOW. */
  405. void *
  406. malloc_get_state (void)
  407. {
  408. __set_errno (ENOSYS);
  409. return NULL;
  410. }
  411. compat_symbol (libc_malloc_debug, malloc_get_state, malloc_get_state,
  412. GLIBC_2_0);
  413. int
  414. malloc_set_state (void *msptr)
  415. {
  416. return -1;
  417. }
  418. compat_symbol (libc_malloc_debug, malloc_set_state, malloc_set_state,
  419. GLIBC_2_0);
  420. #endif
  421. /* Do not allow linking against the library. */
  422. compat_symbol (libc_malloc_debug, aligned_alloc, aligned_alloc, GLIBC_2_16);
  423. compat_symbol (libc_malloc_debug, calloc, calloc, GLIBC_2_0);
  424. compat_symbol (libc_malloc_debug, free, free, GLIBC_2_0);
  425. compat_symbol (libc_malloc_debug, free_aligned_sized, free_aligned_sized, GLIBC_2_43);
  426. compat_symbol (libc_malloc_debug, free_sized, free_sized, GLIBC_2_43);
  427. compat_symbol (libc_malloc_debug, mallinfo2, mallinfo2, GLIBC_2_33);
  428. compat_symbol (libc_malloc_debug, mallinfo, mallinfo, GLIBC_2_0);
  429. compat_symbol (libc_malloc_debug, malloc_info, malloc_info, GLIBC_2_10);
  430. compat_symbol (libc_malloc_debug, malloc, malloc, GLIBC_2_0);
  431. compat_symbol (libc_malloc_debug, malloc_stats, malloc_stats, GLIBC_2_0);
  432. compat_symbol (libc_malloc_debug, malloc_trim, malloc_trim, GLIBC_2_0);
  433. compat_symbol (libc_malloc_debug, malloc_usable_size, malloc_usable_size,
  434. GLIBC_2_0);
  435. compat_symbol (libc_malloc_debug, mallopt, mallopt, GLIBC_2_0);
  436. compat_symbol (libc_malloc_debug, mcheck_check_all, mcheck_check_all,
  437. GLIBC_2_2);
  438. compat_symbol (libc_malloc_debug, mcheck, mcheck, GLIBC_2_0);
  439. compat_symbol (libc_malloc_debug, mcheck_pedantic, mcheck_pedantic, GLIBC_2_2);
  440. compat_symbol (libc_malloc_debug, memalign, memalign, GLIBC_2_0);
  441. compat_symbol (libc_malloc_debug, mprobe, mprobe, GLIBC_2_0);
  442. compat_symbol (libc_malloc_debug, mtrace, mtrace, GLIBC_2_0);
  443. compat_symbol (libc_malloc_debug, muntrace, muntrace, GLIBC_2_0);
  444. compat_symbol (libc_malloc_debug, posix_memalign, posix_memalign, GLIBC_2_2);
  445. compat_symbol (libc_malloc_debug, pvalloc, pvalloc, GLIBC_2_0);
  446. compat_symbol (libc_malloc_debug, realloc, realloc, GLIBC_2_0);
  447. compat_symbol (libc_malloc_debug, valloc, valloc, GLIBC_2_0);
  448. compat_symbol (libc_malloc_debug, __free_hook, __free_hook, GLIBC_2_0);
  449. compat_symbol (libc_malloc_debug, __malloc_hook, __malloc_hook, GLIBC_2_0);
  450. compat_symbol (libc_malloc_debug, __realloc_hook, __realloc_hook, GLIBC_2_0);
  451. compat_symbol (libc_malloc_debug, __memalign_hook, __memalign_hook, GLIBC_2_0);