Home | History | Annotate | Line # | Download | only in kern
kern_malloc.c revision 1.71.4.1
      1  1.71.4.1      tron /*	$NetBSD: kern_malloc.c,v 1.71.4.1 2003/06/02 14:30:26 tron Exp $	*/
      2       1.9       cgd 
      3       1.1       cgd /*
      4      1.37  christos  * Copyright (c) 1996 Christopher G. Demetriou.  All rights reserved.
      5       1.8       cgd  * Copyright (c) 1987, 1991, 1993
      6       1.8       cgd  *	The Regents of the University of California.  All rights reserved.
      7       1.1       cgd  *
      8       1.1       cgd  * Redistribution and use in source and binary forms, with or without
      9       1.1       cgd  * modification, are permitted provided that the following conditions
     10       1.1       cgd  * are met:
     11       1.1       cgd  * 1. Redistributions of source code must retain the above copyright
     12       1.1       cgd  *    notice, this list of conditions and the following disclaimer.
     13       1.1       cgd  * 2. Redistributions in binary form must reproduce the above copyright
     14       1.1       cgd  *    notice, this list of conditions and the following disclaimer in the
     15       1.1       cgd  *    documentation and/or other materials provided with the distribution.
     16       1.1       cgd  * 3. All advertising materials mentioning features or use of this software
     17       1.1       cgd  *    must display the following acknowledgement:
     18       1.1       cgd  *	This product includes software developed by the University of
     19       1.1       cgd  *	California, Berkeley and its contributors.
     20       1.1       cgd  * 4. Neither the name of the University nor the names of its contributors
     21       1.1       cgd  *    may be used to endorse or promote products derived from this software
     22       1.1       cgd  *    without specific prior written permission.
     23       1.1       cgd  *
     24       1.1       cgd  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
     25       1.1       cgd  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     26       1.1       cgd  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     27       1.1       cgd  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
     28       1.1       cgd  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     29       1.1       cgd  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     30       1.1       cgd  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     31       1.1       cgd  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     32       1.1       cgd  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     33       1.1       cgd  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     34       1.1       cgd  * SUCH DAMAGE.
     35       1.1       cgd  *
     36      1.32      fvdl  *	@(#)kern_malloc.c	8.4 (Berkeley) 5/20/95
     37       1.1       cgd  */
     38      1.64     lukem 
     39      1.64     lukem #include <sys/cdefs.h>
     40  1.71.4.1      tron __KERNEL_RCSID(0, "$NetBSD: kern_malloc.c,v 1.71.4.1 2003/06/02 14:30:26 tron Exp $");
     41      1.31       mrg 
     42      1.33   thorpej #include "opt_lockdebug.h"
     43       1.1       cgd 
     44       1.7   mycroft #include <sys/param.h>
     45       1.7   mycroft #include <sys/proc.h>
     46       1.8       cgd #include <sys/map.h>
     47       1.7   mycroft #include <sys/kernel.h>
     48       1.7   mycroft #include <sys/malloc.h>
     49      1.12  christos #include <sys/systm.h>
     50      1.24   thorpej 
     51      1.28       mrg #include <uvm/uvm_extern.h>
     52      1.28       mrg 
     53      1.61   thorpej static struct vm_map kmem_map_store;
     54      1.58       chs struct vm_map *kmem_map = NULL;
     55      1.28       mrg 
     56      1.49   thorpej #include "opt_kmempages.h"
     57      1.49   thorpej 
     58      1.49   thorpej #ifdef NKMEMCLUSTERS
     59      1.52  sommerfe #error NKMEMCLUSTERS is obsolete; remove it from your kernel config file and use NKMEMPAGES instead or let the kernel auto-size
     60      1.49   thorpej #endif
     61      1.49   thorpej 
     62      1.49   thorpej /*
     63      1.49   thorpej  * Default number of pages in kmem_map.  We attempt to calculate this
     64      1.49   thorpej  * at run-time, but allow it to be either patched or set in the kernel
     65      1.49   thorpej  * config file.
     66      1.49   thorpej  */
     67      1.49   thorpej #ifndef NKMEMPAGES
     68      1.49   thorpej #define	NKMEMPAGES	0
     69      1.49   thorpej #endif
     70      1.49   thorpej int	nkmempages = NKMEMPAGES;
     71      1.49   thorpej 
     72      1.49   thorpej /*
     73      1.49   thorpej  * Defaults for lower- and upper-bounds for the kmem_map page count.
     74      1.49   thorpej  * Can be overridden by kernel config options.
     75      1.49   thorpej  */
     76      1.49   thorpej #ifndef	NKMEMPAGES_MIN
     77      1.49   thorpej #define	NKMEMPAGES_MIN	NKMEMPAGES_MIN_DEFAULT
     78      1.49   thorpej #endif
     79      1.49   thorpej 
     80      1.49   thorpej #ifndef NKMEMPAGES_MAX
     81      1.49   thorpej #define	NKMEMPAGES_MAX	NKMEMPAGES_MAX_DEFAULT
     82      1.49   thorpej #endif
     83      1.49   thorpej 
     84      1.24   thorpej #include "opt_kmemstats.h"
     85      1.27   thorpej #include "opt_malloclog.h"
     86      1.71      fvdl #include "opt_malloc_debug.h"
     87      1.12  christos 
     88       1.1       cgd struct kmembuckets bucket[MINBUCKET + 16];
     89       1.8       cgd struct kmemstats kmemstats[M_LAST];
     90       1.1       cgd struct kmemusage *kmemusage;
     91       1.1       cgd char *kmembase, *kmemlimit;
     92      1.57  jdolecek const char * const memname[] = INITKMEMNAMES;
     93       1.1       cgd 
     94      1.27   thorpej #ifdef MALLOCLOG
     95      1.27   thorpej #ifndef MALLOCLOGSIZE
     96      1.27   thorpej #define	MALLOCLOGSIZE	100000
     97      1.27   thorpej #endif
     98      1.27   thorpej 
     99      1.27   thorpej struct malloclog {
    100      1.27   thorpej 	void *addr;
    101      1.27   thorpej 	long size;
    102      1.27   thorpej 	int type;
    103      1.27   thorpej 	int action;
    104      1.27   thorpej 	const char *file;
    105      1.27   thorpej 	long line;
    106      1.27   thorpej } malloclog[MALLOCLOGSIZE];
    107      1.27   thorpej 
    108      1.27   thorpej long	malloclogptr;
    109      1.27   thorpej 
    110      1.69     enami static void domlog(void *, long, int, int, const char *, long);
    111      1.69     enami static void hitmlog(void *);
    112      1.27   thorpej 
    113      1.27   thorpej static void
    114      1.69     enami domlog(void *a, long size, int type, int action, const char *file, long line)
    115      1.27   thorpej {
    116      1.27   thorpej 
    117      1.27   thorpej 	malloclog[malloclogptr].addr = a;
    118      1.27   thorpej 	malloclog[malloclogptr].size = size;
    119      1.27   thorpej 	malloclog[malloclogptr].type = type;
    120      1.27   thorpej 	malloclog[malloclogptr].action = action;
    121      1.27   thorpej 	malloclog[malloclogptr].file = file;
    122      1.27   thorpej 	malloclog[malloclogptr].line = line;
    123      1.27   thorpej 	malloclogptr++;
    124      1.27   thorpej 	if (malloclogptr >= MALLOCLOGSIZE)
    125      1.27   thorpej 		malloclogptr = 0;
    126      1.27   thorpej }
    127      1.27   thorpej 
    128      1.27   thorpej static void
    129      1.69     enami hitmlog(void *a)
    130      1.27   thorpej {
    131      1.27   thorpej 	struct malloclog *lp;
    132      1.27   thorpej 	long l;
    133      1.27   thorpej 
    134      1.69     enami #define	PRT do { \
    135      1.27   thorpej 	if (malloclog[l].addr == a && malloclog[l].action) { \
    136      1.27   thorpej 		lp = &malloclog[l]; \
    137      1.27   thorpej 		printf("malloc log entry %ld:\n", l); \
    138      1.27   thorpej 		printf("\taddr = %p\n", lp->addr); \
    139      1.27   thorpej 		printf("\tsize = %ld\n", lp->size); \
    140      1.27   thorpej 		printf("\ttype = %s\n", memname[lp->type]); \
    141      1.27   thorpej 		printf("\taction = %s\n", lp->action == 1 ? "alloc" : "free"); \
    142      1.27   thorpej 		printf("\tfile = %s\n", lp->file); \
    143      1.27   thorpej 		printf("\tline = %ld\n", lp->line); \
    144      1.69     enami 	} \
    145      1.69     enami } while (/* CONSTCOND */0)
    146      1.27   thorpej 
    147      1.27   thorpej 	for (l = malloclogptr; l < MALLOCLOGSIZE; l++)
    148      1.69     enami 		PRT;
    149      1.27   thorpej 
    150      1.27   thorpej 	for (l = 0; l < malloclogptr; l++)
    151      1.69     enami 		PRT;
    152      1.27   thorpej }
    153      1.27   thorpej #endif /* MALLOCLOG */
    154      1.27   thorpej 
    155       1.8       cgd #ifdef DIAGNOSTIC
    156       1.8       cgd /*
    157       1.8       cgd  * This structure provides a set of masks to catch unaligned frees.
    158       1.8       cgd  */
    159      1.57  jdolecek const long addrmask[] = { 0,
    160       1.8       cgd 	0x00000001, 0x00000003, 0x00000007, 0x0000000f,
    161       1.8       cgd 	0x0000001f, 0x0000003f, 0x0000007f, 0x000000ff,
    162       1.8       cgd 	0x000001ff, 0x000003ff, 0x000007ff, 0x00000fff,
    163       1.8       cgd 	0x00001fff, 0x00003fff, 0x00007fff, 0x0000ffff,
    164       1.8       cgd };
    165       1.8       cgd 
    166       1.8       cgd /*
    167       1.8       cgd  * The WEIRD_ADDR is used as known text to copy into free objects so
    168       1.8       cgd  * that modifications after frees can be detected.
    169       1.8       cgd  */
    170      1.69     enami #define	WEIRD_ADDR	((unsigned) 0xdeadbeef)
    171      1.55       chs #ifdef DEBUG
    172      1.69     enami #define	MAX_COPY	PAGE_SIZE
    173      1.55       chs #else
    174      1.69     enami #define	MAX_COPY	32
    175      1.55       chs #endif
    176       1.8       cgd 
    177       1.8       cgd /*
    178      1.11       cgd  * Normally the freelist structure is used only to hold the list pointer
    179      1.11       cgd  * for free objects.  However, when running with diagnostics, the first
    180      1.11       cgd  * 8 bytes of the structure is unused except for diagnostic information,
    181      1.11       cgd  * and the free list pointer is at offst 8 in the structure.  Since the
    182      1.11       cgd  * first 8 bytes is the portion of the structure most often modified, this
    183      1.11       cgd  * helps to detect memory reuse problems and avoid free list corruption.
    184       1.8       cgd  */
    185       1.8       cgd struct freelist {
    186      1.11       cgd 	int32_t	spare0;
    187      1.11       cgd 	int16_t	type;
    188      1.11       cgd 	int16_t	spare1;
    189       1.8       cgd 	caddr_t	next;
    190       1.8       cgd };
    191       1.8       cgd #else /* !DIAGNOSTIC */
    192       1.8       cgd struct freelist {
    193       1.8       cgd 	caddr_t	next;
    194       1.8       cgd };
    195       1.8       cgd #endif /* DIAGNOSTIC */
    196       1.8       cgd 
    197       1.1       cgd /*
    198       1.1       cgd  * Allocate a block of memory
    199       1.1       cgd  */
    200      1.27   thorpej #ifdef MALLOCLOG
    201      1.27   thorpej void *
    202      1.69     enami _malloc(unsigned long size, int type, int flags, const char *file, long line)
    203      1.27   thorpej #else
    204       1.1       cgd void *
    205      1.69     enami malloc(unsigned long size, int type, int flags)
    206      1.27   thorpej #endif /* MALLOCLOG */
    207       1.1       cgd {
    208      1.50  augustss 	struct kmembuckets *kbp;
    209      1.50  augustss 	struct kmemusage *kup;
    210      1.50  augustss 	struct freelist *freep;
    211       1.5    andrew 	long indx, npg, allocsize;
    212       1.1       cgd 	int s;
    213       1.1       cgd 	caddr_t va, cp, savedlist;
    214       1.8       cgd #ifdef DIAGNOSTIC
    215      1.11       cgd 	int32_t *end, *lp;
    216       1.8       cgd 	int copysize;
    217      1.26   mycroft 	const char *savedtype;
    218       1.8       cgd #endif
    219       1.1       cgd #ifdef KMEMSTATS
    220      1.50  augustss 	struct kmemstats *ksp = &kmemstats[type];
    221       1.1       cgd 
    222      1.51   thorpej 	if (__predict_false(((unsigned long)type) > M_LAST))
    223       1.1       cgd 		panic("malloc - bogus type");
    224       1.1       cgd #endif
    225      1.59   thorpej #ifdef LOCKDEBUG
    226      1.59   thorpej 	if ((flags & M_NOWAIT) == 0)
    227      1.59   thorpej 		simple_lock_only_held(NULL, "malloc");
    228      1.59   thorpej #endif
    229      1.62   thorpej #ifdef MALLOC_DEBUG
    230      1.62   thorpej 	if (debug_malloc(size, type, flags, (void **) &va))
    231      1.62   thorpej 		return ((void *) va);
    232      1.62   thorpej #endif
    233       1.1       cgd 	indx = BUCKETINDX(size);
    234       1.1       cgd 	kbp = &bucket[indx];
    235      1.56   thorpej 	s = splvm();
    236       1.1       cgd #ifdef KMEMSTATS
    237       1.1       cgd 	while (ksp->ks_memuse >= ksp->ks_limit) {
    238       1.1       cgd 		if (flags & M_NOWAIT) {
    239       1.1       cgd 			splx(s);
    240       1.1       cgd 			return ((void *) NULL);
    241       1.1       cgd 		}
    242       1.1       cgd 		if (ksp->ks_limblocks < 65535)
    243       1.1       cgd 			ksp->ks_limblocks++;
    244       1.1       cgd 		tsleep((caddr_t)ksp, PSWP+2, memname[type], 0);
    245       1.1       cgd 	}
    246       1.8       cgd 	ksp->ks_size |= 1 << indx;
    247       1.8       cgd #endif
    248       1.8       cgd #ifdef DIAGNOSTIC
    249       1.8       cgd 	copysize = 1 << indx < MAX_COPY ? 1 << indx : MAX_COPY;
    250       1.1       cgd #endif
    251       1.1       cgd 	if (kbp->kb_next == NULL) {
    252       1.8       cgd 		kbp->kb_last = NULL;
    253       1.1       cgd 		if (size > MAXALLOCSAVE)
    254      1.66     enami 			allocsize = round_page(size);
    255       1.1       cgd 		else
    256       1.1       cgd 			allocsize = 1 << indx;
    257      1.47     ragge 		npg = btoc(allocsize);
    258      1.63       chs 		va = (caddr_t) uvm_km_kmemalloc(kmem_map, NULL,
    259      1.69     enami 		    (vsize_t)ctob(npg),
    260  1.71.4.1      tron 		    ((flags & M_NOWAIT) ? UVM_KMF_NOWAIT : 0) |
    261  1.71.4.1      tron 		    ((flags & M_CANFAIL) ? UVM_KMF_CANFAIL : 0));
    262      1.51   thorpej 		if (__predict_false(va == NULL)) {
    263      1.17       cgd 			/*
    264      1.17       cgd 			 * Kmem_malloc() can return NULL, even if it can
    265      1.17       cgd 			 * wait, if there is no map space avaiable, because
    266      1.17       cgd 			 * it can't fix that problem.  Neither can we,
    267      1.17       cgd 			 * right now.  (We should release pages which
    268      1.17       cgd 			 * are completely free and which are in buckets
    269      1.17       cgd 			 * with too many free elements.)
    270      1.17       cgd 			 */
    271      1.68  jdolecek 			if ((flags & (M_NOWAIT|M_CANFAIL)) == 0)
    272      1.17       cgd 				panic("malloc: out of space in kmem_map");
    273       1.6       cgd 			splx(s);
    274  1.71.4.1      tron 			return (NULL);
    275       1.1       cgd 		}
    276       1.1       cgd #ifdef KMEMSTATS
    277       1.1       cgd 		kbp->kb_total += kbp->kb_elmpercl;
    278       1.1       cgd #endif
    279       1.1       cgd 		kup = btokup(va);
    280       1.1       cgd 		kup->ku_indx = indx;
    281       1.1       cgd 		if (allocsize > MAXALLOCSAVE) {
    282       1.1       cgd 			if (npg > 65535)
    283       1.1       cgd 				panic("malloc: allocation too large");
    284       1.1       cgd 			kup->ku_pagecnt = npg;
    285       1.1       cgd #ifdef KMEMSTATS
    286       1.1       cgd 			ksp->ks_memuse += allocsize;
    287       1.1       cgd #endif
    288       1.1       cgd 			goto out;
    289       1.1       cgd 		}
    290       1.1       cgd #ifdef KMEMSTATS
    291       1.1       cgd 		kup->ku_freecnt = kbp->kb_elmpercl;
    292       1.1       cgd 		kbp->kb_totalfree += kbp->kb_elmpercl;
    293       1.1       cgd #endif
    294       1.1       cgd 		/*
    295       1.1       cgd 		 * Just in case we blocked while allocating memory,
    296       1.1       cgd 		 * and someone else also allocated memory for this
    297       1.1       cgd 		 * bucket, don't assume the list is still empty.
    298       1.1       cgd 		 */
    299       1.1       cgd 		savedlist = kbp->kb_next;
    300      1.49   thorpej 		kbp->kb_next = cp = va + (npg << PAGE_SHIFT) - allocsize;
    301       1.8       cgd 		for (;;) {
    302       1.8       cgd 			freep = (struct freelist *)cp;
    303       1.8       cgd #ifdef DIAGNOSTIC
    304       1.8       cgd 			/*
    305       1.8       cgd 			 * Copy in known text to detect modification
    306       1.8       cgd 			 * after freeing.
    307       1.8       cgd 			 */
    308      1.11       cgd 			end = (int32_t *)&cp[copysize];
    309      1.11       cgd 			for (lp = (int32_t *)cp; lp < end; lp++)
    310       1.8       cgd 				*lp = WEIRD_ADDR;
    311       1.8       cgd 			freep->type = M_FREE;
    312       1.8       cgd #endif /* DIAGNOSTIC */
    313       1.8       cgd 			if (cp <= va)
    314       1.8       cgd 				break;
    315       1.8       cgd 			cp -= allocsize;
    316       1.8       cgd 			freep->next = cp;
    317       1.8       cgd 		}
    318       1.8       cgd 		freep->next = savedlist;
    319       1.8       cgd 		if (kbp->kb_last == NULL)
    320       1.8       cgd 			kbp->kb_last = (caddr_t)freep;
    321       1.1       cgd 	}
    322       1.1       cgd 	va = kbp->kb_next;
    323       1.8       cgd 	kbp->kb_next = ((struct freelist *)va)->next;
    324       1.8       cgd #ifdef DIAGNOSTIC
    325       1.8       cgd 	freep = (struct freelist *)va;
    326       1.8       cgd 	savedtype = (unsigned)freep->type < M_LAST ?
    327       1.8       cgd 		memname[freep->type] : "???";
    328      1.29       chs 	if (kbp->kb_next) {
    329      1.29       chs 		int rv;
    330      1.35       eeh 		vaddr_t addr = (vaddr_t)kbp->kb_next;
    331      1.29       chs 
    332      1.43   thorpej 		vm_map_lock(kmem_map);
    333      1.29       chs 		rv = uvm_map_checkprot(kmem_map, addr,
    334      1.69     enami 		    addr + sizeof(struct freelist), VM_PROT_WRITE);
    335      1.43   thorpej 		vm_map_unlock(kmem_map);
    336      1.29       chs 
    337      1.51   thorpej 		if (__predict_false(rv == 0)) {
    338      1.69     enami 			printf("Data modified on freelist: "
    339      1.69     enami 			    "word %ld of object %p size %ld previous type %s "
    340      1.69     enami 			    "(invalid addr %p)\n",
    341      1.41       mrg 			    (long)((int32_t *)&kbp->kb_next - (int32_t *)kbp),
    342      1.69     enami 			    va, size, savedtype, kbp->kb_next);
    343      1.27   thorpej #ifdef MALLOCLOG
    344      1.41       mrg 			hitmlog(va);
    345      1.27   thorpej #endif
    346      1.41       mrg 			kbp->kb_next = NULL;
    347      1.29       chs 		}
    348       1.8       cgd 	}
    349      1.11       cgd 
    350      1.11       cgd 	/* Fill the fields that we've used with WEIRD_ADDR */
    351       1.8       cgd #if BYTE_ORDER == BIG_ENDIAN
    352       1.8       cgd 	freep->type = WEIRD_ADDR >> 16;
    353       1.8       cgd #endif
    354       1.8       cgd #if BYTE_ORDER == LITTLE_ENDIAN
    355       1.8       cgd 	freep->type = (short)WEIRD_ADDR;
    356       1.8       cgd #endif
    357      1.11       cgd 	end = (int32_t *)&freep->next +
    358      1.11       cgd 	    (sizeof(freep->next) / sizeof(int32_t));
    359      1.11       cgd 	for (lp = (int32_t *)&freep->next; lp < end; lp++)
    360      1.11       cgd 		*lp = WEIRD_ADDR;
    361      1.11       cgd 
    362      1.11       cgd 	/* and check that the data hasn't been modified. */
    363      1.11       cgd 	end = (int32_t *)&va[copysize];
    364      1.11       cgd 	for (lp = (int32_t *)va; lp < end; lp++) {
    365      1.51   thorpej 		if (__predict_true(*lp == WEIRD_ADDR))
    366       1.8       cgd 			continue;
    367      1.69     enami 		printf("Data modified on freelist: "
    368      1.69     enami 		    "word %ld of object %p size %ld previous type %s "
    369      1.69     enami 		    "(0x%x != 0x%x)\n",
    370      1.69     enami 		    (long)(lp - (int32_t *)va), va, size,
    371      1.21  christos 		    savedtype, *lp, WEIRD_ADDR);
    372      1.27   thorpej #ifdef MALLOCLOG
    373      1.27   thorpej 		hitmlog(va);
    374      1.27   thorpej #endif
    375       1.8       cgd 		break;
    376       1.8       cgd 	}
    377      1.11       cgd 
    378       1.8       cgd 	freep->spare0 = 0;
    379       1.8       cgd #endif /* DIAGNOSTIC */
    380       1.1       cgd #ifdef KMEMSTATS
    381       1.1       cgd 	kup = btokup(va);
    382       1.1       cgd 	if (kup->ku_indx != indx)
    383       1.1       cgd 		panic("malloc: wrong bucket");
    384       1.1       cgd 	if (kup->ku_freecnt == 0)
    385       1.1       cgd 		panic("malloc: lost data");
    386       1.1       cgd 	kup->ku_freecnt--;
    387       1.1       cgd 	kbp->kb_totalfree--;
    388       1.1       cgd 	ksp->ks_memuse += 1 << indx;
    389       1.1       cgd out:
    390       1.1       cgd 	kbp->kb_calls++;
    391       1.1       cgd 	ksp->ks_inuse++;
    392       1.1       cgd 	ksp->ks_calls++;
    393       1.1       cgd 	if (ksp->ks_memuse > ksp->ks_maxused)
    394       1.1       cgd 		ksp->ks_maxused = ksp->ks_memuse;
    395       1.1       cgd #else
    396       1.1       cgd out:
    397       1.1       cgd #endif
    398      1.27   thorpej #ifdef MALLOCLOG
    399      1.27   thorpej 	domlog(va, size, type, 1, file, line);
    400      1.27   thorpej #endif
    401       1.1       cgd 	splx(s);
    402      1.67     enami 	if ((flags & M_ZERO) != 0)
    403      1.65     lukem 		memset(va, 0, size);
    404       1.1       cgd 	return ((void *) va);
    405       1.1       cgd }
    406       1.1       cgd 
    407       1.1       cgd /*
    408       1.1       cgd  * Free a block of memory allocated by malloc.
    409       1.1       cgd  */
    410      1.27   thorpej #ifdef MALLOCLOG
    411      1.27   thorpej void
    412      1.69     enami _free(void *addr, int type, const char *file, long line)
    413      1.27   thorpej #else
    414       1.1       cgd void
    415      1.69     enami free(void *addr, int type)
    416      1.27   thorpej #endif /* MALLOCLOG */
    417       1.1       cgd {
    418      1.50  augustss 	struct kmembuckets *kbp;
    419      1.50  augustss 	struct kmemusage *kup;
    420      1.50  augustss 	struct freelist *freep;
    421       1.8       cgd 	long size;
    422       1.8       cgd 	int s;
    423       1.5    andrew #ifdef DIAGNOSTIC
    424       1.8       cgd 	caddr_t cp;
    425      1.11       cgd 	int32_t *end, *lp;
    426      1.11       cgd 	long alloc, copysize;
    427       1.5    andrew #endif
    428       1.1       cgd #ifdef KMEMSTATS
    429      1.50  augustss 	struct kmemstats *ksp = &kmemstats[type];
    430      1.48   thorpej #endif
    431      1.48   thorpej 
    432      1.62   thorpej #ifdef MALLOC_DEBUG
    433      1.62   thorpej 	if (debug_free(addr, type))
    434      1.62   thorpej 		return;
    435      1.62   thorpej #endif
    436      1.62   thorpej 
    437      1.48   thorpej #ifdef DIAGNOSTIC
    438      1.48   thorpej 	/*
    439      1.48   thorpej 	 * Ensure that we're free'ing something that we could
    440      1.48   thorpej 	 * have allocated in the first place.  That is, check
    441      1.48   thorpej 	 * to see that the address is within kmem_map.
    442      1.48   thorpej 	 */
    443      1.51   thorpej 	if (__predict_false((vaddr_t)addr < kmem_map->header.start ||
    444      1.69     enami 	    (vaddr_t)addr >= kmem_map->header.end))
    445      1.48   thorpej 		panic("free: addr %p not within kmem_map", addr);
    446       1.1       cgd #endif
    447       1.1       cgd 
    448       1.1       cgd 	kup = btokup(addr);
    449       1.1       cgd 	size = 1 << kup->ku_indx;
    450       1.8       cgd 	kbp = &bucket[kup->ku_indx];
    451      1.56   thorpej 	s = splvm();
    452      1.27   thorpej #ifdef MALLOCLOG
    453      1.27   thorpej 	domlog(addr, 0, type, 2, file, line);
    454      1.27   thorpej #endif
    455       1.1       cgd #ifdef DIAGNOSTIC
    456       1.8       cgd 	/*
    457       1.8       cgd 	 * Check for returns of data that do not point to the
    458       1.8       cgd 	 * beginning of the allocation.
    459       1.8       cgd 	 */
    460      1.49   thorpej 	if (size > PAGE_SIZE)
    461      1.49   thorpej 		alloc = addrmask[BUCKETINDX(PAGE_SIZE)];
    462       1.1       cgd 	else
    463       1.1       cgd 		alloc = addrmask[kup->ku_indx];
    464       1.8       cgd 	if (((u_long)addr & alloc) != 0)
    465      1.15  christos 		panic("free: unaligned addr %p, size %ld, type %s, mask %ld\n",
    466      1.69     enami 		    addr, size, memname[type], alloc);
    467       1.1       cgd #endif /* DIAGNOSTIC */
    468       1.1       cgd 	if (size > MAXALLOCSAVE) {
    469      1.35       eeh 		uvm_km_free(kmem_map, (vaddr_t)addr, ctob(kup->ku_pagecnt));
    470       1.1       cgd #ifdef KMEMSTATS
    471       1.1       cgd 		size = kup->ku_pagecnt << PGSHIFT;
    472       1.1       cgd 		ksp->ks_memuse -= size;
    473       1.1       cgd 		kup->ku_indx = 0;
    474       1.1       cgd 		kup->ku_pagecnt = 0;
    475       1.1       cgd 		if (ksp->ks_memuse + size >= ksp->ks_limit &&
    476       1.1       cgd 		    ksp->ks_memuse < ksp->ks_limit)
    477       1.1       cgd 			wakeup((caddr_t)ksp);
    478       1.1       cgd 		ksp->ks_inuse--;
    479       1.1       cgd 		kbp->kb_total -= 1;
    480       1.1       cgd #endif
    481       1.1       cgd 		splx(s);
    482       1.1       cgd 		return;
    483       1.1       cgd 	}
    484       1.8       cgd 	freep = (struct freelist *)addr;
    485       1.8       cgd #ifdef DIAGNOSTIC
    486       1.8       cgd 	/*
    487       1.8       cgd 	 * Check for multiple frees. Use a quick check to see if
    488       1.8       cgd 	 * it looks free before laboriously searching the freelist.
    489       1.8       cgd 	 */
    490      1.51   thorpej 	if (__predict_false(freep->spare0 == WEIRD_ADDR)) {
    491      1.16       cgd 		for (cp = kbp->kb_next; cp;
    492      1.16       cgd 		    cp = ((struct freelist *)cp)->next) {
    493       1.8       cgd 			if (addr != cp)
    494       1.8       cgd 				continue;
    495      1.22  christos 			printf("multiply freed item %p\n", addr);
    496      1.27   thorpej #ifdef MALLOCLOG
    497      1.27   thorpej 			hitmlog(addr);
    498      1.27   thorpej #endif
    499       1.8       cgd 			panic("free: duplicated free");
    500       1.8       cgd 		}
    501       1.8       cgd 	}
    502      1.38       chs #ifdef LOCKDEBUG
    503      1.38       chs 	/*
    504      1.38       chs 	 * Check if we're freeing a locked simple lock.
    505      1.38       chs 	 */
    506      1.40       chs 	simple_lock_freecheck(addr, (char *)addr + size);
    507      1.38       chs #endif
    508       1.8       cgd 	/*
    509       1.8       cgd 	 * Copy in known text to detect modification after freeing
    510       1.8       cgd 	 * and to make it look free. Also, save the type being freed
    511       1.8       cgd 	 * so we can list likely culprit if modification is detected
    512       1.8       cgd 	 * when the object is reallocated.
    513       1.8       cgd 	 */
    514       1.8       cgd 	copysize = size < MAX_COPY ? size : MAX_COPY;
    515      1.11       cgd 	end = (int32_t *)&((caddr_t)addr)[copysize];
    516      1.11       cgd 	for (lp = (int32_t *)addr; lp < end; lp++)
    517       1.8       cgd 		*lp = WEIRD_ADDR;
    518       1.8       cgd 	freep->type = type;
    519       1.8       cgd #endif /* DIAGNOSTIC */
    520       1.1       cgd #ifdef KMEMSTATS
    521       1.1       cgd 	kup->ku_freecnt++;
    522      1.36   thorpej 	if (kup->ku_freecnt >= kbp->kb_elmpercl) {
    523       1.1       cgd 		if (kup->ku_freecnt > kbp->kb_elmpercl)
    524       1.1       cgd 			panic("free: multiple frees");
    525       1.1       cgd 		else if (kbp->kb_totalfree > kbp->kb_highwat)
    526       1.1       cgd 			kbp->kb_couldfree++;
    527      1.36   thorpej 	}
    528       1.1       cgd 	kbp->kb_totalfree++;
    529       1.1       cgd 	ksp->ks_memuse -= size;
    530       1.1       cgd 	if (ksp->ks_memuse + size >= ksp->ks_limit &&
    531       1.1       cgd 	    ksp->ks_memuse < ksp->ks_limit)
    532       1.1       cgd 		wakeup((caddr_t)ksp);
    533       1.1       cgd 	ksp->ks_inuse--;
    534       1.1       cgd #endif
    535       1.8       cgd 	if (kbp->kb_next == NULL)
    536       1.8       cgd 		kbp->kb_next = addr;
    537       1.8       cgd 	else
    538       1.8       cgd 		((struct freelist *)kbp->kb_last)->next = addr;
    539       1.8       cgd 	freep->next = NULL;
    540       1.8       cgd 	kbp->kb_last = addr;
    541       1.1       cgd 	splx(s);
    542      1.20       cgd }
    543      1.20       cgd 
    544      1.20       cgd /*
    545      1.20       cgd  * Change the size of a block of memory.
    546      1.20       cgd  */
    547      1.20       cgd void *
    548      1.69     enami realloc(void *curaddr, unsigned long newsize, int type, int flags)
    549      1.20       cgd {
    550      1.50  augustss 	struct kmemusage *kup;
    551      1.20       cgd 	long cursize;
    552      1.20       cgd 	void *newaddr;
    553      1.20       cgd #ifdef DIAGNOSTIC
    554      1.20       cgd 	long alloc;
    555      1.20       cgd #endif
    556      1.20       cgd 
    557      1.20       cgd 	/*
    558      1.69     enami 	 * realloc() with a NULL pointer is the same as malloc().
    559      1.20       cgd 	 */
    560      1.20       cgd 	if (curaddr == NULL)
    561      1.20       cgd 		return (malloc(newsize, type, flags));
    562      1.20       cgd 
    563      1.20       cgd 	/*
    564      1.69     enami 	 * realloc() with zero size is the same as free().
    565      1.20       cgd 	 */
    566      1.20       cgd 	if (newsize == 0) {
    567      1.20       cgd 		free(curaddr, type);
    568      1.20       cgd 		return (NULL);
    569      1.20       cgd 	}
    570      1.59   thorpej 
    571      1.59   thorpej #ifdef LOCKDEBUG
    572      1.59   thorpej 	if ((flags & M_NOWAIT) == 0)
    573      1.59   thorpej 		simple_lock_only_held(NULL, "realloc");
    574      1.59   thorpej #endif
    575      1.20       cgd 
    576      1.20       cgd 	/*
    577      1.20       cgd 	 * Find out how large the old allocation was (and do some
    578      1.20       cgd 	 * sanity checking).
    579      1.20       cgd 	 */
    580      1.20       cgd 	kup = btokup(curaddr);
    581      1.20       cgd 	cursize = 1 << kup->ku_indx;
    582      1.20       cgd 
    583      1.20       cgd #ifdef DIAGNOSTIC
    584      1.20       cgd 	/*
    585      1.20       cgd 	 * Check for returns of data that do not point to the
    586      1.20       cgd 	 * beginning of the allocation.
    587      1.20       cgd 	 */
    588      1.49   thorpej 	if (cursize > PAGE_SIZE)
    589      1.49   thorpej 		alloc = addrmask[BUCKETINDX(PAGE_SIZE)];
    590      1.20       cgd 	else
    591      1.20       cgd 		alloc = addrmask[kup->ku_indx];
    592      1.20       cgd 	if (((u_long)curaddr & alloc) != 0)
    593      1.69     enami 		panic("realloc: "
    594      1.69     enami 		    "unaligned addr %p, size %ld, type %s, mask %ld\n",
    595      1.69     enami 		    curaddr, cursize, memname[type], alloc);
    596      1.20       cgd #endif /* DIAGNOSTIC */
    597      1.20       cgd 
    598      1.20       cgd 	if (cursize > MAXALLOCSAVE)
    599      1.20       cgd 		cursize = ctob(kup->ku_pagecnt);
    600      1.20       cgd 
    601      1.20       cgd 	/*
    602      1.20       cgd 	 * If we already actually have as much as they want, we're done.
    603      1.20       cgd 	 */
    604      1.20       cgd 	if (newsize <= cursize)
    605      1.20       cgd 		return (curaddr);
    606      1.20       cgd 
    607      1.20       cgd 	/*
    608      1.20       cgd 	 * Can't satisfy the allocation with the existing block.
    609      1.20       cgd 	 * Allocate a new one and copy the data.
    610      1.20       cgd 	 */
    611      1.20       cgd 	newaddr = malloc(newsize, type, flags);
    612      1.51   thorpej 	if (__predict_false(newaddr == NULL)) {
    613      1.20       cgd 		/*
    614      1.69     enami 		 * malloc() failed, because flags included M_NOWAIT.
    615      1.20       cgd 		 * Return NULL to indicate that failure.  The old
    616      1.20       cgd 		 * pointer is still valid.
    617      1.20       cgd 		 */
    618      1.69     enami 		return (NULL);
    619      1.20       cgd 	}
    620      1.34     perry 	memcpy(newaddr, curaddr, cursize);
    621      1.20       cgd 
    622      1.20       cgd 	/*
    623      1.20       cgd 	 * We were successful: free the old allocation and return
    624      1.20       cgd 	 * the new one.
    625      1.20       cgd 	 */
    626      1.20       cgd 	free(curaddr, type);
    627      1.20       cgd 	return (newaddr);
    628      1.70     enami }
    629      1.70     enami 
    630      1.70     enami /*
    631      1.70     enami  * Roundup size to the actual allocation size.
    632      1.70     enami  */
    633      1.70     enami unsigned long
    634      1.70     enami malloc_roundup(unsigned long size)
    635      1.70     enami {
    636      1.70     enami 
    637      1.70     enami 	if (size > MAXALLOCSAVE)
    638      1.70     enami 		return (roundup(size, PAGE_SIZE));
    639      1.70     enami 	else
    640      1.70     enami 		return (1 << BUCKETINDX(size));
    641       1.1       cgd }
    642       1.1       cgd 
    643       1.1       cgd /*
    644      1.49   thorpej  * Compute the number of pages that kmem_map will map, that is,
    645      1.49   thorpej  * the size of the kernel malloc arena.
    646      1.49   thorpej  */
    647      1.49   thorpej void
    648      1.69     enami kmeminit_nkmempages(void)
    649      1.49   thorpej {
    650      1.49   thorpej 	int npages;
    651      1.49   thorpej 
    652      1.49   thorpej 	if (nkmempages != 0) {
    653      1.49   thorpej 		/*
    654      1.49   thorpej 		 * It's already been set (by us being here before, or
    655      1.49   thorpej 		 * by patching or kernel config options), bail out now.
    656      1.49   thorpej 		 */
    657      1.49   thorpej 		return;
    658      1.49   thorpej 	}
    659      1.49   thorpej 
    660      1.49   thorpej 	/*
    661      1.49   thorpej 	 * We use the following (simple) formula:
    662      1.49   thorpej 	 *
    663      1.49   thorpej 	 *	- Starting point is physical memory / 4.
    664      1.49   thorpej 	 *
    665      1.49   thorpej 	 *	- Clamp it down to NKMEMPAGES_MAX.
    666      1.49   thorpej 	 *
    667      1.49   thorpej 	 *	- Round it up to NKMEMPAGES_MIN.
    668      1.49   thorpej 	 */
    669      1.49   thorpej 	npages = physmem / 4;
    670      1.49   thorpej 
    671      1.49   thorpej 	if (npages > NKMEMPAGES_MAX)
    672      1.49   thorpej 		npages = NKMEMPAGES_MAX;
    673      1.49   thorpej 
    674      1.49   thorpej 	if (npages < NKMEMPAGES_MIN)
    675      1.49   thorpej 		npages = NKMEMPAGES_MIN;
    676      1.49   thorpej 
    677      1.49   thorpej 	nkmempages = npages;
    678      1.49   thorpej }
    679      1.49   thorpej 
    680      1.49   thorpej /*
    681       1.1       cgd  * Initialize the kernel memory allocator
    682       1.1       cgd  */
    683      1.12  christos void
    684      1.69     enami kmeminit(void)
    685       1.1       cgd {
    686      1.23       tls #ifdef KMEMSTATS
    687      1.50  augustss 	long indx;
    688      1.23       tls #endif
    689       1.1       cgd 
    690       1.1       cgd #if	((MAXALLOCSAVE & (MAXALLOCSAVE - 1)) != 0)
    691       1.1       cgd 		ERROR!_kmeminit:_MAXALLOCSAVE_not_power_of_2
    692       1.1       cgd #endif
    693       1.1       cgd #if	(MAXALLOCSAVE > MINALLOCSIZE * 32768)
    694       1.1       cgd 		ERROR!_kmeminit:_MAXALLOCSAVE_too_big
    695       1.1       cgd #endif
    696      1.47     ragge #if	(MAXALLOCSAVE < NBPG)
    697       1.1       cgd 		ERROR!_kmeminit:_MAXALLOCSAVE_too_small
    698       1.1       cgd #endif
    699      1.11       cgd 
    700      1.11       cgd 	if (sizeof(struct freelist) > (1 << MINBUCKET))
    701      1.11       cgd 		panic("minbucket too small/struct freelist too big");
    702      1.11       cgd 
    703      1.49   thorpej 	/*
    704      1.49   thorpej 	 * Compute the number of kmem_map pages, if we have not
    705      1.49   thorpej 	 * done so already.
    706      1.49   thorpej 	 */
    707      1.49   thorpej 	kmeminit_nkmempages();
    708      1.49   thorpej 
    709      1.28       mrg 	kmemusage = (struct kmemusage *) uvm_km_zalloc(kernel_map,
    710      1.69     enami 	    (vsize_t)(nkmempages * sizeof(struct kmemusage)));
    711      1.35       eeh 	kmem_map = uvm_km_suballoc(kernel_map, (vaddr_t *)&kmembase,
    712      1.69     enami 	    (vaddr_t *)&kmemlimit, (vsize_t)(nkmempages << PAGE_SHIFT),
    713      1.69     enami 	    VM_MAP_INTRSAFE, FALSE, &kmem_map_store);
    714       1.1       cgd #ifdef KMEMSTATS
    715       1.1       cgd 	for (indx = 0; indx < MINBUCKET + 16; indx++) {
    716      1.49   thorpej 		if (1 << indx >= PAGE_SIZE)
    717       1.1       cgd 			bucket[indx].kb_elmpercl = 1;
    718       1.1       cgd 		else
    719      1.49   thorpej 			bucket[indx].kb_elmpercl = PAGE_SIZE / (1 << indx);
    720       1.1       cgd 		bucket[indx].kb_highwat = 5 * bucket[indx].kb_elmpercl;
    721       1.1       cgd 	}
    722       1.8       cgd 	for (indx = 0; indx < M_LAST; indx++)
    723      1.60   thorpej 		kmemstats[indx].ks_limit =
    724      1.60   thorpej 		    ((u_long)nkmempages << PAGE_SHIFT) * 6U / 10U;
    725      1.62   thorpej #endif
    726      1.62   thorpej #ifdef MALLOC_DEBUG
    727      1.62   thorpej 	debug_malloc_init();
    728       1.1       cgd #endif
    729       1.1       cgd }
    730      1.39   thorpej 
    731      1.39   thorpej #ifdef DDB
    732      1.39   thorpej #include <ddb/db_output.h>
    733      1.39   thorpej 
    734      1.39   thorpej /*
    735      1.39   thorpej  * Dump kmem statistics from ddb.
    736      1.39   thorpej  *
    737      1.39   thorpej  * usage: call dump_kmemstats
    738      1.39   thorpej  */
    739      1.69     enami void	dump_kmemstats(void);
    740      1.39   thorpej 
    741      1.39   thorpej void
    742      1.69     enami dump_kmemstats(void)
    743      1.39   thorpej {
    744      1.39   thorpej #ifdef KMEMSTATS
    745      1.39   thorpej 	const char *name;
    746      1.39   thorpej 	int i;
    747      1.39   thorpej 
    748      1.39   thorpej 	for (i = 0; i < M_LAST; i++) {
    749      1.39   thorpej 		name = memname[i] ? memname[i] : "";
    750      1.39   thorpej 
    751      1.39   thorpej 		db_printf("%2d %s%.*s %ld\n", i, name,
    752      1.39   thorpej 		    (int)(20 - strlen(name)), "                    ",
    753      1.39   thorpej 		    kmemstats[i].ks_memuse);
    754      1.39   thorpej 	}
    755      1.39   thorpej #else
    756      1.39   thorpej 	db_printf("Kmem stats are not being collected.\n");
    757      1.39   thorpej #endif /* KMEMSTATS */
    758      1.39   thorpej }
    759      1.39   thorpej #endif /* DDB */
    760