kern_malloc.c revision 1.71.4.1 1 1.71.4.1 tron /* $NetBSD: kern_malloc.c,v 1.71.4.1 2003/06/02 14:30:26 tron Exp $ */
2 1.9 cgd
3 1.1 cgd /*
4 1.37 christos * Copyright (c) 1996 Christopher G. Demetriou. All rights reserved.
5 1.8 cgd * Copyright (c) 1987, 1991, 1993
6 1.8 cgd * The Regents of the University of California. All rights reserved.
7 1.1 cgd *
8 1.1 cgd * Redistribution and use in source and binary forms, with or without
9 1.1 cgd * modification, are permitted provided that the following conditions
10 1.1 cgd * are met:
11 1.1 cgd * 1. Redistributions of source code must retain the above copyright
12 1.1 cgd * notice, this list of conditions and the following disclaimer.
13 1.1 cgd * 2. Redistributions in binary form must reproduce the above copyright
14 1.1 cgd * notice, this list of conditions and the following disclaimer in the
15 1.1 cgd * documentation and/or other materials provided with the distribution.
16 1.1 cgd * 3. All advertising materials mentioning features or use of this software
17 1.1 cgd * must display the following acknowledgement:
18 1.1 cgd * This product includes software developed by the University of
19 1.1 cgd * California, Berkeley and its contributors.
20 1.1 cgd * 4. Neither the name of the University nor the names of its contributors
21 1.1 cgd * may be used to endorse or promote products derived from this software
22 1.1 cgd * without specific prior written permission.
23 1.1 cgd *
24 1.1 cgd * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
25 1.1 cgd * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
26 1.1 cgd * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
27 1.1 cgd * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
28 1.1 cgd * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
29 1.1 cgd * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
30 1.1 cgd * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
31 1.1 cgd * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
32 1.1 cgd * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
33 1.1 cgd * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 1.1 cgd * SUCH DAMAGE.
35 1.1 cgd *
36 1.32 fvdl * @(#)kern_malloc.c 8.4 (Berkeley) 5/20/95
37 1.1 cgd */
38 1.64 lukem
39 1.64 lukem #include <sys/cdefs.h>
40 1.71.4.1 tron __KERNEL_RCSID(0, "$NetBSD: kern_malloc.c,v 1.71.4.1 2003/06/02 14:30:26 tron Exp $");
41 1.31 mrg
42 1.33 thorpej #include "opt_lockdebug.h"
43 1.1 cgd
44 1.7 mycroft #include <sys/param.h>
45 1.7 mycroft #include <sys/proc.h>
46 1.8 cgd #include <sys/map.h>
47 1.7 mycroft #include <sys/kernel.h>
48 1.7 mycroft #include <sys/malloc.h>
49 1.12 christos #include <sys/systm.h>
50 1.24 thorpej
51 1.28 mrg #include <uvm/uvm_extern.h>
52 1.28 mrg
53 1.61 thorpej static struct vm_map kmem_map_store;
54 1.58 chs struct vm_map *kmem_map = NULL;
55 1.28 mrg
56 1.49 thorpej #include "opt_kmempages.h"
57 1.49 thorpej
58 1.49 thorpej #ifdef NKMEMCLUSTERS
59 1.52 sommerfe #error NKMEMCLUSTERS is obsolete; remove it from your kernel config file and use NKMEMPAGES instead or let the kernel auto-size
60 1.49 thorpej #endif
61 1.49 thorpej
62 1.49 thorpej /*
63 1.49 thorpej * Default number of pages in kmem_map. We attempt to calculate this
64 1.49 thorpej * at run-time, but allow it to be either patched or set in the kernel
65 1.49 thorpej * config file.
66 1.49 thorpej */
67 1.49 thorpej #ifndef NKMEMPAGES
68 1.49 thorpej #define NKMEMPAGES 0
69 1.49 thorpej #endif
70 1.49 thorpej int nkmempages = NKMEMPAGES;
71 1.49 thorpej
72 1.49 thorpej /*
73 1.49 thorpej * Defaults for lower- and upper-bounds for the kmem_map page count.
74 1.49 thorpej * Can be overridden by kernel config options.
75 1.49 thorpej */
76 1.49 thorpej #ifndef NKMEMPAGES_MIN
77 1.49 thorpej #define NKMEMPAGES_MIN NKMEMPAGES_MIN_DEFAULT
78 1.49 thorpej #endif
79 1.49 thorpej
80 1.49 thorpej #ifndef NKMEMPAGES_MAX
81 1.49 thorpej #define NKMEMPAGES_MAX NKMEMPAGES_MAX_DEFAULT
82 1.49 thorpej #endif
83 1.49 thorpej
84 1.24 thorpej #include "opt_kmemstats.h"
85 1.27 thorpej #include "opt_malloclog.h"
86 1.71 fvdl #include "opt_malloc_debug.h"
87 1.12 christos
88 1.1 cgd struct kmembuckets bucket[MINBUCKET + 16];
89 1.8 cgd struct kmemstats kmemstats[M_LAST];
90 1.1 cgd struct kmemusage *kmemusage;
91 1.1 cgd char *kmembase, *kmemlimit;
92 1.57 jdolecek const char * const memname[] = INITKMEMNAMES;
93 1.1 cgd
94 1.27 thorpej #ifdef MALLOCLOG
95 1.27 thorpej #ifndef MALLOCLOGSIZE
96 1.27 thorpej #define MALLOCLOGSIZE 100000
97 1.27 thorpej #endif
98 1.27 thorpej
99 1.27 thorpej struct malloclog {
100 1.27 thorpej void *addr;
101 1.27 thorpej long size;
102 1.27 thorpej int type;
103 1.27 thorpej int action;
104 1.27 thorpej const char *file;
105 1.27 thorpej long line;
106 1.27 thorpej } malloclog[MALLOCLOGSIZE];
107 1.27 thorpej
108 1.27 thorpej long malloclogptr;
109 1.27 thorpej
110 1.69 enami static void domlog(void *, long, int, int, const char *, long);
111 1.69 enami static void hitmlog(void *);
112 1.27 thorpej
113 1.27 thorpej static void
114 1.69 enami domlog(void *a, long size, int type, int action, const char *file, long line)
115 1.27 thorpej {
116 1.27 thorpej
117 1.27 thorpej malloclog[malloclogptr].addr = a;
118 1.27 thorpej malloclog[malloclogptr].size = size;
119 1.27 thorpej malloclog[malloclogptr].type = type;
120 1.27 thorpej malloclog[malloclogptr].action = action;
121 1.27 thorpej malloclog[malloclogptr].file = file;
122 1.27 thorpej malloclog[malloclogptr].line = line;
123 1.27 thorpej malloclogptr++;
124 1.27 thorpej if (malloclogptr >= MALLOCLOGSIZE)
125 1.27 thorpej malloclogptr = 0;
126 1.27 thorpej }
127 1.27 thorpej
128 1.27 thorpej static void
129 1.69 enami hitmlog(void *a)
130 1.27 thorpej {
131 1.27 thorpej struct malloclog *lp;
132 1.27 thorpej long l;
133 1.27 thorpej
134 1.69 enami #define PRT do { \
135 1.27 thorpej if (malloclog[l].addr == a && malloclog[l].action) { \
136 1.27 thorpej lp = &malloclog[l]; \
137 1.27 thorpej printf("malloc log entry %ld:\n", l); \
138 1.27 thorpej printf("\taddr = %p\n", lp->addr); \
139 1.27 thorpej printf("\tsize = %ld\n", lp->size); \
140 1.27 thorpej printf("\ttype = %s\n", memname[lp->type]); \
141 1.27 thorpej printf("\taction = %s\n", lp->action == 1 ? "alloc" : "free"); \
142 1.27 thorpej printf("\tfile = %s\n", lp->file); \
143 1.27 thorpej printf("\tline = %ld\n", lp->line); \
144 1.69 enami } \
145 1.69 enami } while (/* CONSTCOND */0)
146 1.27 thorpej
147 1.27 thorpej for (l = malloclogptr; l < MALLOCLOGSIZE; l++)
148 1.69 enami PRT;
149 1.27 thorpej
150 1.27 thorpej for (l = 0; l < malloclogptr; l++)
151 1.69 enami PRT;
152 1.27 thorpej }
153 1.27 thorpej #endif /* MALLOCLOG */
154 1.27 thorpej
155 1.8 cgd #ifdef DIAGNOSTIC
156 1.8 cgd /*
157 1.8 cgd * This structure provides a set of masks to catch unaligned frees.
158 1.8 cgd */
159 1.57 jdolecek const long addrmask[] = { 0,
160 1.8 cgd 0x00000001, 0x00000003, 0x00000007, 0x0000000f,
161 1.8 cgd 0x0000001f, 0x0000003f, 0x0000007f, 0x000000ff,
162 1.8 cgd 0x000001ff, 0x000003ff, 0x000007ff, 0x00000fff,
163 1.8 cgd 0x00001fff, 0x00003fff, 0x00007fff, 0x0000ffff,
164 1.8 cgd };
165 1.8 cgd
166 1.8 cgd /*
167 1.8 cgd * The WEIRD_ADDR is used as known text to copy into free objects so
168 1.8 cgd * that modifications after frees can be detected.
169 1.8 cgd */
170 1.69 enami #define WEIRD_ADDR ((unsigned) 0xdeadbeef)
171 1.55 chs #ifdef DEBUG
172 1.69 enami #define MAX_COPY PAGE_SIZE
173 1.55 chs #else
174 1.69 enami #define MAX_COPY 32
175 1.55 chs #endif
176 1.8 cgd
177 1.8 cgd /*
178 1.11 cgd * Normally the freelist structure is used only to hold the list pointer
179 1.11 cgd * for free objects. However, when running with diagnostics, the first
180 1.11 cgd * 8 bytes of the structure is unused except for diagnostic information,
181 1.11 cgd * and the free list pointer is at offst 8 in the structure. Since the
182 1.11 cgd * first 8 bytes is the portion of the structure most often modified, this
183 1.11 cgd * helps to detect memory reuse problems and avoid free list corruption.
184 1.8 cgd */
185 1.8 cgd struct freelist {
186 1.11 cgd int32_t spare0;
187 1.11 cgd int16_t type;
188 1.11 cgd int16_t spare1;
189 1.8 cgd caddr_t next;
190 1.8 cgd };
191 1.8 cgd #else /* !DIAGNOSTIC */
192 1.8 cgd struct freelist {
193 1.8 cgd caddr_t next;
194 1.8 cgd };
195 1.8 cgd #endif /* DIAGNOSTIC */
196 1.8 cgd
197 1.1 cgd /*
198 1.1 cgd * Allocate a block of memory
199 1.1 cgd */
200 1.27 thorpej #ifdef MALLOCLOG
201 1.27 thorpej void *
202 1.69 enami _malloc(unsigned long size, int type, int flags, const char *file, long line)
203 1.27 thorpej #else
204 1.1 cgd void *
205 1.69 enami malloc(unsigned long size, int type, int flags)
206 1.27 thorpej #endif /* MALLOCLOG */
207 1.1 cgd {
208 1.50 augustss struct kmembuckets *kbp;
209 1.50 augustss struct kmemusage *kup;
210 1.50 augustss struct freelist *freep;
211 1.5 andrew long indx, npg, allocsize;
212 1.1 cgd int s;
213 1.1 cgd caddr_t va, cp, savedlist;
214 1.8 cgd #ifdef DIAGNOSTIC
215 1.11 cgd int32_t *end, *lp;
216 1.8 cgd int copysize;
217 1.26 mycroft const char *savedtype;
218 1.8 cgd #endif
219 1.1 cgd #ifdef KMEMSTATS
220 1.50 augustss struct kmemstats *ksp = &kmemstats[type];
221 1.1 cgd
222 1.51 thorpej if (__predict_false(((unsigned long)type) > M_LAST))
223 1.1 cgd panic("malloc - bogus type");
224 1.1 cgd #endif
225 1.59 thorpej #ifdef LOCKDEBUG
226 1.59 thorpej if ((flags & M_NOWAIT) == 0)
227 1.59 thorpej simple_lock_only_held(NULL, "malloc");
228 1.59 thorpej #endif
229 1.62 thorpej #ifdef MALLOC_DEBUG
230 1.62 thorpej if (debug_malloc(size, type, flags, (void **) &va))
231 1.62 thorpej return ((void *) va);
232 1.62 thorpej #endif
233 1.1 cgd indx = BUCKETINDX(size);
234 1.1 cgd kbp = &bucket[indx];
235 1.56 thorpej s = splvm();
236 1.1 cgd #ifdef KMEMSTATS
237 1.1 cgd while (ksp->ks_memuse >= ksp->ks_limit) {
238 1.1 cgd if (flags & M_NOWAIT) {
239 1.1 cgd splx(s);
240 1.1 cgd return ((void *) NULL);
241 1.1 cgd }
242 1.1 cgd if (ksp->ks_limblocks < 65535)
243 1.1 cgd ksp->ks_limblocks++;
244 1.1 cgd tsleep((caddr_t)ksp, PSWP+2, memname[type], 0);
245 1.1 cgd }
246 1.8 cgd ksp->ks_size |= 1 << indx;
247 1.8 cgd #endif
248 1.8 cgd #ifdef DIAGNOSTIC
249 1.8 cgd copysize = 1 << indx < MAX_COPY ? 1 << indx : MAX_COPY;
250 1.1 cgd #endif
251 1.1 cgd if (kbp->kb_next == NULL) {
252 1.8 cgd kbp->kb_last = NULL;
253 1.1 cgd if (size > MAXALLOCSAVE)
254 1.66 enami allocsize = round_page(size);
255 1.1 cgd else
256 1.1 cgd allocsize = 1 << indx;
257 1.47 ragge npg = btoc(allocsize);
258 1.63 chs va = (caddr_t) uvm_km_kmemalloc(kmem_map, NULL,
259 1.69 enami (vsize_t)ctob(npg),
260 1.71.4.1 tron ((flags & M_NOWAIT) ? UVM_KMF_NOWAIT : 0) |
261 1.71.4.1 tron ((flags & M_CANFAIL) ? UVM_KMF_CANFAIL : 0));
262 1.51 thorpej if (__predict_false(va == NULL)) {
263 1.17 cgd /*
264 1.17 cgd * Kmem_malloc() can return NULL, even if it can
265 1.17 cgd * wait, if there is no map space avaiable, because
266 1.17 cgd * it can't fix that problem. Neither can we,
267 1.17 cgd * right now. (We should release pages which
268 1.17 cgd * are completely free and which are in buckets
269 1.17 cgd * with too many free elements.)
270 1.17 cgd */
271 1.68 jdolecek if ((flags & (M_NOWAIT|M_CANFAIL)) == 0)
272 1.17 cgd panic("malloc: out of space in kmem_map");
273 1.6 cgd splx(s);
274 1.71.4.1 tron return (NULL);
275 1.1 cgd }
276 1.1 cgd #ifdef KMEMSTATS
277 1.1 cgd kbp->kb_total += kbp->kb_elmpercl;
278 1.1 cgd #endif
279 1.1 cgd kup = btokup(va);
280 1.1 cgd kup->ku_indx = indx;
281 1.1 cgd if (allocsize > MAXALLOCSAVE) {
282 1.1 cgd if (npg > 65535)
283 1.1 cgd panic("malloc: allocation too large");
284 1.1 cgd kup->ku_pagecnt = npg;
285 1.1 cgd #ifdef KMEMSTATS
286 1.1 cgd ksp->ks_memuse += allocsize;
287 1.1 cgd #endif
288 1.1 cgd goto out;
289 1.1 cgd }
290 1.1 cgd #ifdef KMEMSTATS
291 1.1 cgd kup->ku_freecnt = kbp->kb_elmpercl;
292 1.1 cgd kbp->kb_totalfree += kbp->kb_elmpercl;
293 1.1 cgd #endif
294 1.1 cgd /*
295 1.1 cgd * Just in case we blocked while allocating memory,
296 1.1 cgd * and someone else also allocated memory for this
297 1.1 cgd * bucket, don't assume the list is still empty.
298 1.1 cgd */
299 1.1 cgd savedlist = kbp->kb_next;
300 1.49 thorpej kbp->kb_next = cp = va + (npg << PAGE_SHIFT) - allocsize;
301 1.8 cgd for (;;) {
302 1.8 cgd freep = (struct freelist *)cp;
303 1.8 cgd #ifdef DIAGNOSTIC
304 1.8 cgd /*
305 1.8 cgd * Copy in known text to detect modification
306 1.8 cgd * after freeing.
307 1.8 cgd */
308 1.11 cgd end = (int32_t *)&cp[copysize];
309 1.11 cgd for (lp = (int32_t *)cp; lp < end; lp++)
310 1.8 cgd *lp = WEIRD_ADDR;
311 1.8 cgd freep->type = M_FREE;
312 1.8 cgd #endif /* DIAGNOSTIC */
313 1.8 cgd if (cp <= va)
314 1.8 cgd break;
315 1.8 cgd cp -= allocsize;
316 1.8 cgd freep->next = cp;
317 1.8 cgd }
318 1.8 cgd freep->next = savedlist;
319 1.8 cgd if (kbp->kb_last == NULL)
320 1.8 cgd kbp->kb_last = (caddr_t)freep;
321 1.1 cgd }
322 1.1 cgd va = kbp->kb_next;
323 1.8 cgd kbp->kb_next = ((struct freelist *)va)->next;
324 1.8 cgd #ifdef DIAGNOSTIC
325 1.8 cgd freep = (struct freelist *)va;
326 1.8 cgd savedtype = (unsigned)freep->type < M_LAST ?
327 1.8 cgd memname[freep->type] : "???";
328 1.29 chs if (kbp->kb_next) {
329 1.29 chs int rv;
330 1.35 eeh vaddr_t addr = (vaddr_t)kbp->kb_next;
331 1.29 chs
332 1.43 thorpej vm_map_lock(kmem_map);
333 1.29 chs rv = uvm_map_checkprot(kmem_map, addr,
334 1.69 enami addr + sizeof(struct freelist), VM_PROT_WRITE);
335 1.43 thorpej vm_map_unlock(kmem_map);
336 1.29 chs
337 1.51 thorpej if (__predict_false(rv == 0)) {
338 1.69 enami printf("Data modified on freelist: "
339 1.69 enami "word %ld of object %p size %ld previous type %s "
340 1.69 enami "(invalid addr %p)\n",
341 1.41 mrg (long)((int32_t *)&kbp->kb_next - (int32_t *)kbp),
342 1.69 enami va, size, savedtype, kbp->kb_next);
343 1.27 thorpej #ifdef MALLOCLOG
344 1.41 mrg hitmlog(va);
345 1.27 thorpej #endif
346 1.41 mrg kbp->kb_next = NULL;
347 1.29 chs }
348 1.8 cgd }
349 1.11 cgd
350 1.11 cgd /* Fill the fields that we've used with WEIRD_ADDR */
351 1.8 cgd #if BYTE_ORDER == BIG_ENDIAN
352 1.8 cgd freep->type = WEIRD_ADDR >> 16;
353 1.8 cgd #endif
354 1.8 cgd #if BYTE_ORDER == LITTLE_ENDIAN
355 1.8 cgd freep->type = (short)WEIRD_ADDR;
356 1.8 cgd #endif
357 1.11 cgd end = (int32_t *)&freep->next +
358 1.11 cgd (sizeof(freep->next) / sizeof(int32_t));
359 1.11 cgd for (lp = (int32_t *)&freep->next; lp < end; lp++)
360 1.11 cgd *lp = WEIRD_ADDR;
361 1.11 cgd
362 1.11 cgd /* and check that the data hasn't been modified. */
363 1.11 cgd end = (int32_t *)&va[copysize];
364 1.11 cgd for (lp = (int32_t *)va; lp < end; lp++) {
365 1.51 thorpej if (__predict_true(*lp == WEIRD_ADDR))
366 1.8 cgd continue;
367 1.69 enami printf("Data modified on freelist: "
368 1.69 enami "word %ld of object %p size %ld previous type %s "
369 1.69 enami "(0x%x != 0x%x)\n",
370 1.69 enami (long)(lp - (int32_t *)va), va, size,
371 1.21 christos savedtype, *lp, WEIRD_ADDR);
372 1.27 thorpej #ifdef MALLOCLOG
373 1.27 thorpej hitmlog(va);
374 1.27 thorpej #endif
375 1.8 cgd break;
376 1.8 cgd }
377 1.11 cgd
378 1.8 cgd freep->spare0 = 0;
379 1.8 cgd #endif /* DIAGNOSTIC */
380 1.1 cgd #ifdef KMEMSTATS
381 1.1 cgd kup = btokup(va);
382 1.1 cgd if (kup->ku_indx != indx)
383 1.1 cgd panic("malloc: wrong bucket");
384 1.1 cgd if (kup->ku_freecnt == 0)
385 1.1 cgd panic("malloc: lost data");
386 1.1 cgd kup->ku_freecnt--;
387 1.1 cgd kbp->kb_totalfree--;
388 1.1 cgd ksp->ks_memuse += 1 << indx;
389 1.1 cgd out:
390 1.1 cgd kbp->kb_calls++;
391 1.1 cgd ksp->ks_inuse++;
392 1.1 cgd ksp->ks_calls++;
393 1.1 cgd if (ksp->ks_memuse > ksp->ks_maxused)
394 1.1 cgd ksp->ks_maxused = ksp->ks_memuse;
395 1.1 cgd #else
396 1.1 cgd out:
397 1.1 cgd #endif
398 1.27 thorpej #ifdef MALLOCLOG
399 1.27 thorpej domlog(va, size, type, 1, file, line);
400 1.27 thorpej #endif
401 1.1 cgd splx(s);
402 1.67 enami if ((flags & M_ZERO) != 0)
403 1.65 lukem memset(va, 0, size);
404 1.1 cgd return ((void *) va);
405 1.1 cgd }
406 1.1 cgd
407 1.1 cgd /*
408 1.1 cgd * Free a block of memory allocated by malloc.
409 1.1 cgd */
410 1.27 thorpej #ifdef MALLOCLOG
411 1.27 thorpej void
412 1.69 enami _free(void *addr, int type, const char *file, long line)
413 1.27 thorpej #else
414 1.1 cgd void
415 1.69 enami free(void *addr, int type)
416 1.27 thorpej #endif /* MALLOCLOG */
417 1.1 cgd {
418 1.50 augustss struct kmembuckets *kbp;
419 1.50 augustss struct kmemusage *kup;
420 1.50 augustss struct freelist *freep;
421 1.8 cgd long size;
422 1.8 cgd int s;
423 1.5 andrew #ifdef DIAGNOSTIC
424 1.8 cgd caddr_t cp;
425 1.11 cgd int32_t *end, *lp;
426 1.11 cgd long alloc, copysize;
427 1.5 andrew #endif
428 1.1 cgd #ifdef KMEMSTATS
429 1.50 augustss struct kmemstats *ksp = &kmemstats[type];
430 1.48 thorpej #endif
431 1.48 thorpej
432 1.62 thorpej #ifdef MALLOC_DEBUG
433 1.62 thorpej if (debug_free(addr, type))
434 1.62 thorpej return;
435 1.62 thorpej #endif
436 1.62 thorpej
437 1.48 thorpej #ifdef DIAGNOSTIC
438 1.48 thorpej /*
439 1.48 thorpej * Ensure that we're free'ing something that we could
440 1.48 thorpej * have allocated in the first place. That is, check
441 1.48 thorpej * to see that the address is within kmem_map.
442 1.48 thorpej */
443 1.51 thorpej if (__predict_false((vaddr_t)addr < kmem_map->header.start ||
444 1.69 enami (vaddr_t)addr >= kmem_map->header.end))
445 1.48 thorpej panic("free: addr %p not within kmem_map", addr);
446 1.1 cgd #endif
447 1.1 cgd
448 1.1 cgd kup = btokup(addr);
449 1.1 cgd size = 1 << kup->ku_indx;
450 1.8 cgd kbp = &bucket[kup->ku_indx];
451 1.56 thorpej s = splvm();
452 1.27 thorpej #ifdef MALLOCLOG
453 1.27 thorpej domlog(addr, 0, type, 2, file, line);
454 1.27 thorpej #endif
455 1.1 cgd #ifdef DIAGNOSTIC
456 1.8 cgd /*
457 1.8 cgd * Check for returns of data that do not point to the
458 1.8 cgd * beginning of the allocation.
459 1.8 cgd */
460 1.49 thorpej if (size > PAGE_SIZE)
461 1.49 thorpej alloc = addrmask[BUCKETINDX(PAGE_SIZE)];
462 1.1 cgd else
463 1.1 cgd alloc = addrmask[kup->ku_indx];
464 1.8 cgd if (((u_long)addr & alloc) != 0)
465 1.15 christos panic("free: unaligned addr %p, size %ld, type %s, mask %ld\n",
466 1.69 enami addr, size, memname[type], alloc);
467 1.1 cgd #endif /* DIAGNOSTIC */
468 1.1 cgd if (size > MAXALLOCSAVE) {
469 1.35 eeh uvm_km_free(kmem_map, (vaddr_t)addr, ctob(kup->ku_pagecnt));
470 1.1 cgd #ifdef KMEMSTATS
471 1.1 cgd size = kup->ku_pagecnt << PGSHIFT;
472 1.1 cgd ksp->ks_memuse -= size;
473 1.1 cgd kup->ku_indx = 0;
474 1.1 cgd kup->ku_pagecnt = 0;
475 1.1 cgd if (ksp->ks_memuse + size >= ksp->ks_limit &&
476 1.1 cgd ksp->ks_memuse < ksp->ks_limit)
477 1.1 cgd wakeup((caddr_t)ksp);
478 1.1 cgd ksp->ks_inuse--;
479 1.1 cgd kbp->kb_total -= 1;
480 1.1 cgd #endif
481 1.1 cgd splx(s);
482 1.1 cgd return;
483 1.1 cgd }
484 1.8 cgd freep = (struct freelist *)addr;
485 1.8 cgd #ifdef DIAGNOSTIC
486 1.8 cgd /*
487 1.8 cgd * Check for multiple frees. Use a quick check to see if
488 1.8 cgd * it looks free before laboriously searching the freelist.
489 1.8 cgd */
490 1.51 thorpej if (__predict_false(freep->spare0 == WEIRD_ADDR)) {
491 1.16 cgd for (cp = kbp->kb_next; cp;
492 1.16 cgd cp = ((struct freelist *)cp)->next) {
493 1.8 cgd if (addr != cp)
494 1.8 cgd continue;
495 1.22 christos printf("multiply freed item %p\n", addr);
496 1.27 thorpej #ifdef MALLOCLOG
497 1.27 thorpej hitmlog(addr);
498 1.27 thorpej #endif
499 1.8 cgd panic("free: duplicated free");
500 1.8 cgd }
501 1.8 cgd }
502 1.38 chs #ifdef LOCKDEBUG
503 1.38 chs /*
504 1.38 chs * Check if we're freeing a locked simple lock.
505 1.38 chs */
506 1.40 chs simple_lock_freecheck(addr, (char *)addr + size);
507 1.38 chs #endif
508 1.8 cgd /*
509 1.8 cgd * Copy in known text to detect modification after freeing
510 1.8 cgd * and to make it look free. Also, save the type being freed
511 1.8 cgd * so we can list likely culprit if modification is detected
512 1.8 cgd * when the object is reallocated.
513 1.8 cgd */
514 1.8 cgd copysize = size < MAX_COPY ? size : MAX_COPY;
515 1.11 cgd end = (int32_t *)&((caddr_t)addr)[copysize];
516 1.11 cgd for (lp = (int32_t *)addr; lp < end; lp++)
517 1.8 cgd *lp = WEIRD_ADDR;
518 1.8 cgd freep->type = type;
519 1.8 cgd #endif /* DIAGNOSTIC */
520 1.1 cgd #ifdef KMEMSTATS
521 1.1 cgd kup->ku_freecnt++;
522 1.36 thorpej if (kup->ku_freecnt >= kbp->kb_elmpercl) {
523 1.1 cgd if (kup->ku_freecnt > kbp->kb_elmpercl)
524 1.1 cgd panic("free: multiple frees");
525 1.1 cgd else if (kbp->kb_totalfree > kbp->kb_highwat)
526 1.1 cgd kbp->kb_couldfree++;
527 1.36 thorpej }
528 1.1 cgd kbp->kb_totalfree++;
529 1.1 cgd ksp->ks_memuse -= size;
530 1.1 cgd if (ksp->ks_memuse + size >= ksp->ks_limit &&
531 1.1 cgd ksp->ks_memuse < ksp->ks_limit)
532 1.1 cgd wakeup((caddr_t)ksp);
533 1.1 cgd ksp->ks_inuse--;
534 1.1 cgd #endif
535 1.8 cgd if (kbp->kb_next == NULL)
536 1.8 cgd kbp->kb_next = addr;
537 1.8 cgd else
538 1.8 cgd ((struct freelist *)kbp->kb_last)->next = addr;
539 1.8 cgd freep->next = NULL;
540 1.8 cgd kbp->kb_last = addr;
541 1.1 cgd splx(s);
542 1.20 cgd }
543 1.20 cgd
544 1.20 cgd /*
545 1.20 cgd * Change the size of a block of memory.
546 1.20 cgd */
547 1.20 cgd void *
548 1.69 enami realloc(void *curaddr, unsigned long newsize, int type, int flags)
549 1.20 cgd {
550 1.50 augustss struct kmemusage *kup;
551 1.20 cgd long cursize;
552 1.20 cgd void *newaddr;
553 1.20 cgd #ifdef DIAGNOSTIC
554 1.20 cgd long alloc;
555 1.20 cgd #endif
556 1.20 cgd
557 1.20 cgd /*
558 1.69 enami * realloc() with a NULL pointer is the same as malloc().
559 1.20 cgd */
560 1.20 cgd if (curaddr == NULL)
561 1.20 cgd return (malloc(newsize, type, flags));
562 1.20 cgd
563 1.20 cgd /*
564 1.69 enami * realloc() with zero size is the same as free().
565 1.20 cgd */
566 1.20 cgd if (newsize == 0) {
567 1.20 cgd free(curaddr, type);
568 1.20 cgd return (NULL);
569 1.20 cgd }
570 1.59 thorpej
571 1.59 thorpej #ifdef LOCKDEBUG
572 1.59 thorpej if ((flags & M_NOWAIT) == 0)
573 1.59 thorpej simple_lock_only_held(NULL, "realloc");
574 1.59 thorpej #endif
575 1.20 cgd
576 1.20 cgd /*
577 1.20 cgd * Find out how large the old allocation was (and do some
578 1.20 cgd * sanity checking).
579 1.20 cgd */
580 1.20 cgd kup = btokup(curaddr);
581 1.20 cgd cursize = 1 << kup->ku_indx;
582 1.20 cgd
583 1.20 cgd #ifdef DIAGNOSTIC
584 1.20 cgd /*
585 1.20 cgd * Check for returns of data that do not point to the
586 1.20 cgd * beginning of the allocation.
587 1.20 cgd */
588 1.49 thorpej if (cursize > PAGE_SIZE)
589 1.49 thorpej alloc = addrmask[BUCKETINDX(PAGE_SIZE)];
590 1.20 cgd else
591 1.20 cgd alloc = addrmask[kup->ku_indx];
592 1.20 cgd if (((u_long)curaddr & alloc) != 0)
593 1.69 enami panic("realloc: "
594 1.69 enami "unaligned addr %p, size %ld, type %s, mask %ld\n",
595 1.69 enami curaddr, cursize, memname[type], alloc);
596 1.20 cgd #endif /* DIAGNOSTIC */
597 1.20 cgd
598 1.20 cgd if (cursize > MAXALLOCSAVE)
599 1.20 cgd cursize = ctob(kup->ku_pagecnt);
600 1.20 cgd
601 1.20 cgd /*
602 1.20 cgd * If we already actually have as much as they want, we're done.
603 1.20 cgd */
604 1.20 cgd if (newsize <= cursize)
605 1.20 cgd return (curaddr);
606 1.20 cgd
607 1.20 cgd /*
608 1.20 cgd * Can't satisfy the allocation with the existing block.
609 1.20 cgd * Allocate a new one and copy the data.
610 1.20 cgd */
611 1.20 cgd newaddr = malloc(newsize, type, flags);
612 1.51 thorpej if (__predict_false(newaddr == NULL)) {
613 1.20 cgd /*
614 1.69 enami * malloc() failed, because flags included M_NOWAIT.
615 1.20 cgd * Return NULL to indicate that failure. The old
616 1.20 cgd * pointer is still valid.
617 1.20 cgd */
618 1.69 enami return (NULL);
619 1.20 cgd }
620 1.34 perry memcpy(newaddr, curaddr, cursize);
621 1.20 cgd
622 1.20 cgd /*
623 1.20 cgd * We were successful: free the old allocation and return
624 1.20 cgd * the new one.
625 1.20 cgd */
626 1.20 cgd free(curaddr, type);
627 1.20 cgd return (newaddr);
628 1.70 enami }
629 1.70 enami
630 1.70 enami /*
631 1.70 enami * Roundup size to the actual allocation size.
632 1.70 enami */
633 1.70 enami unsigned long
634 1.70 enami malloc_roundup(unsigned long size)
635 1.70 enami {
636 1.70 enami
637 1.70 enami if (size > MAXALLOCSAVE)
638 1.70 enami return (roundup(size, PAGE_SIZE));
639 1.70 enami else
640 1.70 enami return (1 << BUCKETINDX(size));
641 1.1 cgd }
642 1.1 cgd
643 1.1 cgd /*
644 1.49 thorpej * Compute the number of pages that kmem_map will map, that is,
645 1.49 thorpej * the size of the kernel malloc arena.
646 1.49 thorpej */
647 1.49 thorpej void
648 1.69 enami kmeminit_nkmempages(void)
649 1.49 thorpej {
650 1.49 thorpej int npages;
651 1.49 thorpej
652 1.49 thorpej if (nkmempages != 0) {
653 1.49 thorpej /*
654 1.49 thorpej * It's already been set (by us being here before, or
655 1.49 thorpej * by patching or kernel config options), bail out now.
656 1.49 thorpej */
657 1.49 thorpej return;
658 1.49 thorpej }
659 1.49 thorpej
660 1.49 thorpej /*
661 1.49 thorpej * We use the following (simple) formula:
662 1.49 thorpej *
663 1.49 thorpej * - Starting point is physical memory / 4.
664 1.49 thorpej *
665 1.49 thorpej * - Clamp it down to NKMEMPAGES_MAX.
666 1.49 thorpej *
667 1.49 thorpej * - Round it up to NKMEMPAGES_MIN.
668 1.49 thorpej */
669 1.49 thorpej npages = physmem / 4;
670 1.49 thorpej
671 1.49 thorpej if (npages > NKMEMPAGES_MAX)
672 1.49 thorpej npages = NKMEMPAGES_MAX;
673 1.49 thorpej
674 1.49 thorpej if (npages < NKMEMPAGES_MIN)
675 1.49 thorpej npages = NKMEMPAGES_MIN;
676 1.49 thorpej
677 1.49 thorpej nkmempages = npages;
678 1.49 thorpej }
679 1.49 thorpej
680 1.49 thorpej /*
681 1.1 cgd * Initialize the kernel memory allocator
682 1.1 cgd */
683 1.12 christos void
684 1.69 enami kmeminit(void)
685 1.1 cgd {
686 1.23 tls #ifdef KMEMSTATS
687 1.50 augustss long indx;
688 1.23 tls #endif
689 1.1 cgd
690 1.1 cgd #if ((MAXALLOCSAVE & (MAXALLOCSAVE - 1)) != 0)
691 1.1 cgd ERROR!_kmeminit:_MAXALLOCSAVE_not_power_of_2
692 1.1 cgd #endif
693 1.1 cgd #if (MAXALLOCSAVE > MINALLOCSIZE * 32768)
694 1.1 cgd ERROR!_kmeminit:_MAXALLOCSAVE_too_big
695 1.1 cgd #endif
696 1.47 ragge #if (MAXALLOCSAVE < NBPG)
697 1.1 cgd ERROR!_kmeminit:_MAXALLOCSAVE_too_small
698 1.1 cgd #endif
699 1.11 cgd
700 1.11 cgd if (sizeof(struct freelist) > (1 << MINBUCKET))
701 1.11 cgd panic("minbucket too small/struct freelist too big");
702 1.11 cgd
703 1.49 thorpej /*
704 1.49 thorpej * Compute the number of kmem_map pages, if we have not
705 1.49 thorpej * done so already.
706 1.49 thorpej */
707 1.49 thorpej kmeminit_nkmempages();
708 1.49 thorpej
709 1.28 mrg kmemusage = (struct kmemusage *) uvm_km_zalloc(kernel_map,
710 1.69 enami (vsize_t)(nkmempages * sizeof(struct kmemusage)));
711 1.35 eeh kmem_map = uvm_km_suballoc(kernel_map, (vaddr_t *)&kmembase,
712 1.69 enami (vaddr_t *)&kmemlimit, (vsize_t)(nkmempages << PAGE_SHIFT),
713 1.69 enami VM_MAP_INTRSAFE, FALSE, &kmem_map_store);
714 1.1 cgd #ifdef KMEMSTATS
715 1.1 cgd for (indx = 0; indx < MINBUCKET + 16; indx++) {
716 1.49 thorpej if (1 << indx >= PAGE_SIZE)
717 1.1 cgd bucket[indx].kb_elmpercl = 1;
718 1.1 cgd else
719 1.49 thorpej bucket[indx].kb_elmpercl = PAGE_SIZE / (1 << indx);
720 1.1 cgd bucket[indx].kb_highwat = 5 * bucket[indx].kb_elmpercl;
721 1.1 cgd }
722 1.8 cgd for (indx = 0; indx < M_LAST; indx++)
723 1.60 thorpej kmemstats[indx].ks_limit =
724 1.60 thorpej ((u_long)nkmempages << PAGE_SHIFT) * 6U / 10U;
725 1.62 thorpej #endif
726 1.62 thorpej #ifdef MALLOC_DEBUG
727 1.62 thorpej debug_malloc_init();
728 1.1 cgd #endif
729 1.1 cgd }
730 1.39 thorpej
731 1.39 thorpej #ifdef DDB
732 1.39 thorpej #include <ddb/db_output.h>
733 1.39 thorpej
734 1.39 thorpej /*
735 1.39 thorpej * Dump kmem statistics from ddb.
736 1.39 thorpej *
737 1.39 thorpej * usage: call dump_kmemstats
738 1.39 thorpej */
739 1.69 enami void dump_kmemstats(void);
740 1.39 thorpej
741 1.39 thorpej void
742 1.69 enami dump_kmemstats(void)
743 1.39 thorpej {
744 1.39 thorpej #ifdef KMEMSTATS
745 1.39 thorpej const char *name;
746 1.39 thorpej int i;
747 1.39 thorpej
748 1.39 thorpej for (i = 0; i < M_LAST; i++) {
749 1.39 thorpej name = memname[i] ? memname[i] : "";
750 1.39 thorpej
751 1.39 thorpej db_printf("%2d %s%.*s %ld\n", i, name,
752 1.39 thorpej (int)(20 - strlen(name)), " ",
753 1.39 thorpej kmemstats[i].ks_memuse);
754 1.39 thorpej }
755 1.39 thorpej #else
756 1.39 thorpej db_printf("Kmem stats are not being collected.\n");
757 1.39 thorpej #endif /* KMEMSTATS */
758 1.39 thorpej }
759 1.39 thorpej #endif /* DDB */
760