malloc.h 35 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959
  1. /*
  2. This is a version (aka dlmalloc) of malloc/free/realloc written by
  3. Doug Lea and released to the public domain. Use, modify, and
  4. redistribute this code without permission or acknowledgement in any
  5. way you wish. Send questions, comments, complaints, performance
  6. data, etc to dl@cs.oswego.edu
  7. VERSION 2.7.2 Sat Aug 17 09:07:30 2002 Doug Lea (dl at gee)
  8. Note: There may be an updated version of this malloc obtainable at
  9. ftp://gee.cs.oswego.edu/pub/misc/malloc.c
  10. Check before installing!
  11. Hacked up for uClibc by Erik Andersen <andersen@codepoet.org>
  12. */
  13. #include <features.h>
  14. #include <stddef.h>
  15. #include <unistd.h>
  16. #include <errno.h>
  17. #include <string.h>
  18. #include <malloc.h>
  19. #include <stdlib.h>
  20. #include <sys/mman.h>
  21. #include <bits/uClibc_mutex.h>
  22. __UCLIBC_MUTEX_EXTERN(__malloc_lock);
  23. #define __MALLOC_LOCK __UCLIBC_MUTEX_LOCK(__malloc_lock)
  24. #define __MALLOC_UNLOCK __UCLIBC_MUTEX_UNLOCK(__malloc_lock)
  25. /*
  26. MALLOC_ALIGNMENT is the minimum alignment for malloc'ed chunks.
  27. It must be a power of two at least 2 * (sizeof(size_t)), even on machines
  28. for which smaller alignments would suffice. It may be defined as
  29. larger than this though. Note however that code and data structures
  30. are optimized for the case of 8-byte alignment.
  31. */
  32. #ifndef MALLOC_ALIGNMENT
  33. #define MALLOC_ALIGNMENT (2 * (sizeof(size_t)))
  34. #endif
  35. /* The corresponding bit mask value */
  36. #define MALLOC_ALIGN_MASK (MALLOC_ALIGNMENT - 1)
  37. /*
  38. TRIM_FASTBINS controls whether free() of a very small chunk can
  39. immediately lead to trimming. Setting to true (1) can reduce memory
  40. footprint, but will almost always slow down programs that use a lot
  41. of small chunks.
  42. Define this only if you are willing to give up some speed to more
  43. aggressively reduce system-level memory footprint when releasing
  44. memory in programs that use many small chunks. You can get
  45. essentially the same effect by setting MXFAST to 0, but this can
  46. lead to even greater slowdowns in programs using many small chunks.
  47. TRIM_FASTBINS is an in-between compile-time option, that disables
  48. only those chunks bordering topmost memory from being placed in
  49. fastbins.
  50. */
  51. #ifndef TRIM_FASTBINS
  52. #define TRIM_FASTBINS 0
  53. #endif
  54. /*
  55. MORECORE-related declarations. By default, rely on sbrk
  56. */
  57. /*
  58. MORECORE is the name of the routine to call to obtain more memory
  59. from the system. See below for general guidance on writing
  60. alternative MORECORE functions, as well as a version for WIN32 and a
  61. sample version for pre-OSX macos.
  62. */
  63. #ifndef MORECORE
  64. #define MORECORE sbrk
  65. #endif
  66. /*
  67. MORECORE_FAILURE is the value returned upon failure of MORECORE
  68. as well as mmap. Since it cannot be an otherwise valid memory address,
  69. and must reflect values of standard sys calls, you probably ought not
  70. try to redefine it.
  71. */
  72. #ifndef MORECORE_FAILURE
  73. #define MORECORE_FAILURE (-1)
  74. #endif
  75. /*
  76. If MORECORE_CONTIGUOUS is true, take advantage of fact that
  77. consecutive calls to MORECORE with positive arguments always return
  78. contiguous increasing addresses. This is true of unix sbrk. Even
  79. if not defined, when regions happen to be contiguous, malloc will
  80. permit allocations spanning regions obtained from different
  81. calls. But defining this when applicable enables some stronger
  82. consistency checks and space efficiencies.
  83. */
  84. #ifndef MORECORE_CONTIGUOUS
  85. #define MORECORE_CONTIGUOUS 1
  86. #endif
  87. /*
  88. MMAP_AS_MORECORE_SIZE is the minimum mmap size argument to use if
  89. sbrk fails, and mmap is used as a backup (which is done only if
  90. HAVE_MMAP). The value must be a multiple of page size. This
  91. backup strategy generally applies only when systems have "holes" in
  92. address space, so sbrk cannot perform contiguous expansion, but
  93. there is still space available on system. On systems for which
  94. this is known to be useful (i.e. most linux kernels), this occurs
  95. only when programs allocate huge amounts of memory. Between this,
  96. and the fact that mmap regions tend to be limited, the size should
  97. be large, to avoid too many mmap calls and thus avoid running out
  98. of kernel resources.
  99. */
  100. #ifndef MMAP_AS_MORECORE_SIZE
  101. #define MMAP_AS_MORECORE_SIZE (1024 * 1024)
  102. #endif
  103. /*
  104. The system page size. To the extent possible, this malloc manages
  105. memory from the system in page-size units. Note that this value is
  106. cached during initialization into a field of malloc_state. So even
  107. if malloc_getpagesize is a function, it is only called once.
  108. The following mechanics for getpagesize were adapted from bsd/gnu
  109. getpagesize.h. If none of the system-probes here apply, a value of
  110. 4096 is used, which should be OK: If they don't apply, then using
  111. the actual value probably doesn't impact performance.
  112. */
  113. #ifndef malloc_getpagesize
  114. # include <unistd.h>
  115. # define malloc_getpagesize sysconf(_SC_PAGESIZE)
  116. #else /* just guess */
  117. # define malloc_getpagesize (4096)
  118. #endif
  119. /* mallopt tuning options */
  120. /*
  121. M_MXFAST is the maximum request size used for "fastbins", special bins
  122. that hold returned chunks without consolidating their spaces. This
  123. enables future requests for chunks of the same size to be handled
  124. very quickly, but can increase fragmentation, and thus increase the
  125. overall memory footprint of a program.
  126. This malloc manages fastbins very conservatively yet still
  127. efficiently, so fragmentation is rarely a problem for values less
  128. than or equal to the default. The maximum supported value of MXFAST
  129. is 80. You wouldn't want it any higher than this anyway. Fastbins
  130. are designed especially for use with many small structs, objects or
  131. strings -- the default handles structs/objects/arrays with sizes up
  132. to 16 4byte fields, or small strings representing words, tokens,
  133. etc. Using fastbins for larger objects normally worsens
  134. fragmentation without improving speed.
  135. M_MXFAST is set in REQUEST size units. It is internally used in
  136. chunksize units, which adds padding and alignment. You can reduce
  137. M_MXFAST to 0 to disable all use of fastbins. This causes the malloc
  138. algorithm to be a closer approximation of fifo-best-fit in all cases,
  139. not just for larger requests, but will generally cause it to be
  140. slower.
  141. */
  142. /* M_MXFAST is a standard SVID/XPG tuning option, usually listed in malloc.h */
  143. #ifndef M_MXFAST
  144. #define M_MXFAST 1
  145. #endif
  146. #ifndef DEFAULT_MXFAST
  147. #define DEFAULT_MXFAST 64
  148. #endif
  149. /*
  150. M_TRIM_THRESHOLD is the maximum amount of unused top-most memory
  151. to keep before releasing via malloc_trim in free().
  152. Automatic trimming is mainly useful in long-lived programs.
  153. Because trimming via sbrk can be slow on some systems, and can
  154. sometimes be wasteful (in cases where programs immediately
  155. afterward allocate more large chunks) the value should be high
  156. enough so that your overall system performance would improve by
  157. releasing this much memory.
  158. The trim threshold and the mmap control parameters (see below)
  159. can be traded off with one another. Trimming and mmapping are
  160. two different ways of releasing unused memory back to the
  161. system. Between these two, it is often possible to keep
  162. system-level demands of a long-lived program down to a bare
  163. minimum. For example, in one test suite of sessions measuring
  164. the XF86 X server on Linux, using a trim threshold of 128K and a
  165. mmap threshold of 192K led to near-minimal long term resource
  166. consumption.
  167. If you are using this malloc in a long-lived program, it should
  168. pay to experiment with these values. As a rough guide, you
  169. might set to a value close to the average size of a process
  170. (program) running on your system. Releasing this much memory
  171. would allow such a process to run in memory. Generally, it's
  172. worth it to tune for trimming rather tham memory mapping when a
  173. program undergoes phases where several large chunks are
  174. allocated and released in ways that can reuse each other's
  175. storage, perhaps mixed with phases where there are no such
  176. chunks at all. And in well-behaved long-lived programs,
  177. controlling release of large blocks via trimming versus mapping
  178. is usually faster.
  179. However, in most programs, these parameters serve mainly as
  180. protection against the system-level effects of carrying around
  181. massive amounts of unneeded memory. Since frequent calls to
  182. sbrk, mmap, and munmap otherwise degrade performance, the default
  183. parameters are set to relatively high values that serve only as
  184. safeguards.
  185. The trim value must be greater than page size to have any useful
  186. effect. To disable trimming completely, you can set to
  187. (unsigned long)(-1)
  188. Trim settings interact with fastbin (MXFAST) settings: Unless
  189. TRIM_FASTBINS is defined, automatic trimming never takes place upon
  190. freeing a chunk with size less than or equal to MXFAST. Trimming is
  191. instead delayed until subsequent freeing of larger chunks. However,
  192. you can still force an attempted trim by calling malloc_trim.
  193. Also, trimming is not generally possible in cases where
  194. the main arena is obtained via mmap.
  195. Note that the trick some people use of mallocing a huge space and
  196. then freeing it at program startup, in an attempt to reserve system
  197. memory, doesn't have the intended effect under automatic trimming,
  198. since that memory will immediately be returned to the system.
  199. */
  200. #define M_TRIM_THRESHOLD -1
  201. #ifndef DEFAULT_TRIM_THRESHOLD
  202. #define DEFAULT_TRIM_THRESHOLD (256 * 1024)
  203. #endif
  204. /*
  205. M_TOP_PAD is the amount of extra `padding' space to allocate or
  206. retain whenever sbrk is called. It is used in two ways internally:
  207. * When sbrk is called to extend the top of the arena to satisfy
  208. a new malloc request, this much padding is added to the sbrk
  209. request.
  210. * When malloc_trim is called automatically from free(),
  211. it is used as the `pad' argument.
  212. In both cases, the actual amount of padding is rounded
  213. so that the end of the arena is always a system page boundary.
  214. The main reason for using padding is to avoid calling sbrk so
  215. often. Having even a small pad greatly reduces the likelihood
  216. that nearly every malloc request during program start-up (or
  217. after trimming) will invoke sbrk, which needlessly wastes
  218. time.
  219. Automatic rounding-up to page-size units is normally sufficient
  220. to avoid measurable overhead, so the default is 0. However, in
  221. systems where sbrk is relatively slow, it can pay to increase
  222. this value, at the expense of carrying around more memory than
  223. the program needs.
  224. */
  225. #define M_TOP_PAD -2
  226. #ifndef DEFAULT_TOP_PAD
  227. #define DEFAULT_TOP_PAD (0)
  228. #endif
  229. /*
  230. M_MMAP_THRESHOLD is the request size threshold for using mmap()
  231. to service a request. Requests of at least this size that cannot
  232. be allocated using already-existing space will be serviced via mmap.
  233. (If enough normal freed space already exists it is used instead.)
  234. Using mmap segregates relatively large chunks of memory so that
  235. they can be individually obtained and released from the host
  236. system. A request serviced through mmap is never reused by any
  237. other request (at least not directly; the system may just so
  238. happen to remap successive requests to the same locations).
  239. Segregating space in this way has the benefits that:
  240. 1. Mmapped space can ALWAYS be individually released back
  241. to the system, which helps keep the system level memory
  242. demands of a long-lived program low.
  243. 2. Mapped memory can never become `locked' between
  244. other chunks, as can happen with normally allocated chunks, which
  245. means that even trimming via malloc_trim would not release them.
  246. 3. On some systems with "holes" in address spaces, mmap can obtain
  247. memory that sbrk cannot.
  248. However, it has the disadvantages that:
  249. 1. The space cannot be reclaimed, consolidated, and then
  250. used to service later requests, as happens with normal chunks.
  251. 2. It can lead to more wastage because of mmap page alignment
  252. requirements
  253. 3. It causes malloc performance to be more dependent on host
  254. system memory management support routines which may vary in
  255. implementation quality and may impose arbitrary
  256. limitations. Generally, servicing a request via normal
  257. malloc steps is faster than going through a system's mmap.
  258. The advantages of mmap nearly always outweigh disadvantages for
  259. "large" chunks, but the value of "large" varies across systems. The
  260. default is an empirically derived value that works well in most
  261. systems.
  262. */
  263. #define M_MMAP_THRESHOLD -3
  264. #ifndef DEFAULT_MMAP_THRESHOLD
  265. #define DEFAULT_MMAP_THRESHOLD (256 * 1024)
  266. #endif
  267. /*
  268. M_MMAP_MAX is the maximum number of requests to simultaneously
  269. service using mmap. This parameter exists because
  270. . Some systems have a limited number of internal tables for
  271. use by mmap, and using more than a few of them may degrade
  272. performance.
  273. The default is set to a value that serves only as a safeguard.
  274. Setting to 0 disables use of mmap for servicing large requests. If
  275. HAVE_MMAP is not set, the default value is 0, and attempts to set it
  276. to non-zero values in mallopt will fail.
  277. */
  278. #define M_MMAP_MAX -4
  279. #ifndef DEFAULT_MMAP_MAX
  280. #define DEFAULT_MMAP_MAX (65536)
  281. #endif
  282. /* ------------------ MMAP support ------------------ */
  283. #include <fcntl.h>
  284. #include <sys/mman.h>
  285. #if !defined(MAP_ANONYMOUS) && defined(MAP_ANON)
  286. #define MAP_ANONYMOUS MAP_ANON
  287. #endif
  288. #ifdef __ARCH_USE_MMU__
  289. # define _MAP_UNINITIALIZE 0
  290. #else
  291. # define _MAP_UNINITIALIZE MAP_UNINITIALIZE
  292. #endif
  293. #define MMAP(addr, size, prot) \
  294. (mmap((addr), (size), (prot), MAP_PRIVATE|MAP_ANONYMOUS|_MAP_UNINITIALIZE, 0, 0))
  295. /* ----------------------- Chunk representations ----------------------- */
  296. /*
  297. This struct declaration is misleading (but accurate and necessary).
  298. It declares a "view" into memory allowing access to necessary
  299. fields at known offsets from a given base. See explanation below.
  300. */
  301. struct malloc_chunk {
  302. size_t prev_size; /* Size of previous chunk (if free). */
  303. size_t size; /* Size in bytes, including overhead. */
  304. struct malloc_chunk* fd; /* double links -- used only if free. */
  305. struct malloc_chunk* bk;
  306. };
  307. typedef struct malloc_chunk* mchunkptr;
  308. /*
  309. malloc_chunk details:
  310. (The following includes lightly edited explanations by Colin Plumb.)
  311. Chunks of memory are maintained using a `boundary tag' method as
  312. described in e.g., Knuth or Standish. (See the paper by Paul
  313. Wilson ftp://ftp.cs.utexas.edu/pub/garbage/allocsrv.ps for a
  314. survey of such techniques.) Sizes of free chunks are stored both
  315. in the front of each chunk and at the end. This makes
  316. consolidating fragmented chunks into bigger chunks very fast. The
  317. size fields also hold bits representing whether chunks are free or
  318. in use.
  319. An allocated chunk looks like this:
  320. chunk-> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  321. | Size of previous chunk, if allocated | |
  322. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  323. | Size of chunk, in bytes |P|
  324. mem-> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  325. | User data starts here... .
  326. . .
  327. . (malloc_usable_space() bytes) .
  328. . |
  329. nextchunk-> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  330. | Size of chunk |
  331. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  332. Where "chunk" is the front of the chunk for the purpose of most of
  333. the malloc code, but "mem" is the pointer that is returned to the
  334. user. "Nextchunk" is the beginning of the next contiguous chunk.
  335. Chunks always begin on even word boundries, so the mem portion
  336. (which is returned to the user) is also on an even word boundary, and
  337. thus at least double-word aligned.
  338. Free chunks are stored in circular doubly-linked lists, and look like this:
  339. chunk-> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  340. | Size of previous chunk |
  341. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  342. `head:' | Size of chunk, in bytes |P|
  343. mem-> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  344. | Forward pointer to next chunk in list |
  345. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  346. | Back pointer to previous chunk in list |
  347. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  348. | Unused space (may be 0 bytes long) .
  349. . .
  350. . |
  351. nextchunk-> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  352. `foot:' | Size of chunk, in bytes |
  353. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  354. The P (PREV_INUSE) bit, stored in the unused low-order bit of the
  355. chunk size (which is always a multiple of two words), is an in-use
  356. bit for the *previous* chunk. If that bit is *clear*, then the
  357. word before the current chunk size contains the previous chunk
  358. size, and can be used to find the front of the previous chunk.
  359. The very first chunk allocated always has this bit set,
  360. preventing access to non-existent (or non-owned) memory. If
  361. prev_inuse is set for any given chunk, then you CANNOT determine
  362. the size of the previous chunk, and might even get a memory
  363. addressing fault when trying to do so.
  364. Note that the `foot' of the current chunk is actually represented
  365. as the prev_size of the NEXT chunk. This makes it easier to
  366. deal with alignments etc but can be very confusing when trying
  367. to extend or adapt this code.
  368. The two exceptions to all this are
  369. 1. The special chunk `top' doesn't bother using the
  370. trailing size field since there is no next contiguous chunk
  371. that would have to index off it. After initialization, `top'
  372. is forced to always exist. If it would become less than
  373. MINSIZE bytes long, it is replenished.
  374. 2. Chunks allocated via mmap, which have the second-lowest-order
  375. bit (IS_MMAPPED) set in their size fields. Because they are
  376. allocated one-by-one, each must contain its own trailing size field.
  377. */
  378. /*
  379. ---------- Size and alignment checks and conversions ----------
  380. */
  381. /* conversion from malloc headers to user pointers, and back */
  382. #define chunk2mem(p) ((void*)((char*)(p) + 2*(sizeof(size_t))))
  383. #define mem2chunk(mem) ((mchunkptr)((char*)(mem) - 2*(sizeof(size_t))))
  384. /* The smallest possible chunk */
  385. #define MIN_CHUNK_SIZE (sizeof(struct malloc_chunk))
  386. /* The smallest size we can malloc is an aligned minimal chunk */
  387. #define MINSIZE \
  388. (unsigned long)(((MIN_CHUNK_SIZE+MALLOC_ALIGN_MASK) & ~MALLOC_ALIGN_MASK))
  389. /* Check if m has acceptable alignment */
  390. #define aligned_OK(m) (((unsigned long)((m)) & (MALLOC_ALIGN_MASK)) == 0)
  391. /* Check if a request is so large that it would wrap around zero when
  392. padded and aligned. To simplify some other code, the bound is made
  393. low enough so that adding MINSIZE will also not wrap around sero.
  394. */
  395. #define REQUEST_OUT_OF_RANGE(req) \
  396. ((unsigned long)(req) >= \
  397. (unsigned long)(size_t)(-2 * MINSIZE))
  398. /* pad request bytes into a usable size -- internal version */
  399. #define request2size(req) \
  400. (((req) + (sizeof(size_t)) + MALLOC_ALIGN_MASK < MINSIZE) ? \
  401. MINSIZE : \
  402. ((req) + (sizeof(size_t)) + MALLOC_ALIGN_MASK) & ~MALLOC_ALIGN_MASK)
  403. /* Same, except also perform argument check */
  404. #define checked_request2size(req, sz) \
  405. if (REQUEST_OUT_OF_RANGE(req)) { \
  406. errno = ENOMEM; \
  407. return 0; \
  408. } \
  409. (sz) = request2size(req);
  410. /*
  411. --------------- Physical chunk operations ---------------
  412. */
  413. /* size field is or'ed with PREV_INUSE when previous adjacent chunk in use */
  414. #define PREV_INUSE 0x1
  415. /* extract inuse bit of previous chunk */
  416. #define prev_inuse(p) ((p)->size & PREV_INUSE)
  417. /* size field is or'ed with IS_MMAPPED if the chunk was obtained with mmap() */
  418. #define IS_MMAPPED 0x2
  419. /* check for mmap()'ed chunk */
  420. #define chunk_is_mmapped(p) ((p)->size & IS_MMAPPED)
  421. /* Bits to mask off when extracting size
  422. Note: IS_MMAPPED is intentionally not masked off from size field in
  423. macros for which mmapped chunks should never be seen. This should
  424. cause helpful core dumps to occur if it is tried by accident by
  425. people extending or adapting this malloc.
  426. */
  427. #define SIZE_BITS (PREV_INUSE|IS_MMAPPED)
  428. /* Get size, ignoring use bits */
  429. #define chunksize(p) ((p)->size & ~(SIZE_BITS))
  430. /* Ptr to next physical malloc_chunk. */
  431. #define next_chunk(p) ((mchunkptr)( ((char*)(p)) + ((p)->size & ~PREV_INUSE) ))
  432. /* Ptr to previous physical malloc_chunk */
  433. #define prev_chunk(p) ((mchunkptr)( ((char*)(p)) - ((p)->prev_size) ))
  434. /* Treat space at ptr + offset as a chunk */
  435. #define chunk_at_offset(p, s) ((mchunkptr)(((char*)(p)) + (s)))
  436. /* extract p's inuse bit */
  437. #define inuse(p)\
  438. ((((mchunkptr)(((char*)(p))+((p)->size & ~PREV_INUSE)))->size) & PREV_INUSE)
  439. /* set/clear chunk as being inuse without otherwise disturbing */
  440. #define set_inuse(p)\
  441. ((mchunkptr)(((char*)(p)) + ((p)->size & ~PREV_INUSE)))->size |= PREV_INUSE
  442. #define clear_inuse(p)\
  443. ((mchunkptr)(((char*)(p)) + ((p)->size & ~PREV_INUSE)))->size &= ~(PREV_INUSE)
  444. /* check/set/clear inuse bits in known places */
  445. #define inuse_bit_at_offset(p, s)\
  446. (((mchunkptr)(((char*)(p)) + (s)))->size & PREV_INUSE)
  447. #define set_inuse_bit_at_offset(p, s)\
  448. (((mchunkptr)(((char*)(p)) + (s)))->size |= PREV_INUSE)
  449. #define clear_inuse_bit_at_offset(p, s)\
  450. (((mchunkptr)(((char*)(p)) + (s)))->size &= ~(PREV_INUSE))
  451. /* Set size at head, without disturbing its use bit */
  452. #define set_head_size(p, s) ((p)->size = (((p)->size & PREV_INUSE) | (s)))
  453. /* Set size/use field */
  454. #define set_head(p, s) ((p)->size = (s))
  455. /* Set size at footer (only when chunk is not in use) */
  456. #define set_foot(p, s) (((mchunkptr)((char*)(p) + (s)))->prev_size = (s))
  457. /* -------------------- Internal data structures -------------------- */
  458. /*
  459. Bins
  460. An array of bin headers for free chunks. Each bin is doubly
  461. linked. The bins are approximately proportionally (log) spaced.
  462. There are a lot of these bins (128). This may look excessive, but
  463. works very well in practice. Most bins hold sizes that are
  464. unusual as malloc request sizes, but are more usual for fragments
  465. and consolidated sets of chunks, which is what these bins hold, so
  466. they can be found quickly. All procedures maintain the invariant
  467. that no consolidated chunk physically borders another one, so each
  468. chunk in a list is known to be preceeded and followed by either
  469. inuse chunks or the ends of memory.
  470. Chunks in bins are kept in size order, with ties going to the
  471. approximately least recently used chunk. Ordering isn't needed
  472. for the small bins, which all contain the same-sized chunks, but
  473. facilitates best-fit allocation for larger chunks. These lists
  474. are just sequential. Keeping them in order almost never requires
  475. enough traversal to warrant using fancier ordered data
  476. structures.
  477. Chunks of the same size are linked with the most
  478. recently freed at the front, and allocations are taken from the
  479. back. This results in LRU (FIFO) allocation order, which tends
  480. to give each chunk an equal opportunity to be consolidated with
  481. adjacent freed chunks, resulting in larger free chunks and less
  482. fragmentation.
  483. To simplify use in double-linked lists, each bin header acts
  484. as a malloc_chunk. This avoids special-casing for headers.
  485. But to conserve space and improve locality, we allocate
  486. only the fd/bk pointers of bins, and then use repositioning tricks
  487. to treat these as the fields of a malloc_chunk*.
  488. */
  489. typedef struct malloc_chunk* mbinptr;
  490. /* addressing -- note that bin_at(0) does not exist */
  491. #define bin_at(m, i) ((mbinptr)((char*)&((m)->bins[(i)<<1]) - ((sizeof(size_t))<<1)))
  492. /* analog of ++bin */
  493. #define next_bin(b) ((mbinptr)((char*)(b) + (sizeof(mchunkptr)<<1)))
  494. /* Reminders about list directionality within bins */
  495. #define first(b) ((b)->fd)
  496. #define last(b) ((b)->bk)
  497. /* Take a chunk off a bin list */
  498. #define unlink(P, BK, FD) { \
  499. FD = P->fd; \
  500. BK = P->bk; \
  501. if (FD->bk != P || BK->fd != P) \
  502. abort(); \
  503. FD->bk = BK; \
  504. BK->fd = FD; \
  505. }
  506. /*
  507. Indexing
  508. Bins for sizes < 512 bytes contain chunks of all the same size, spaced
  509. 8 bytes apart. Larger bins are approximately logarithmically spaced:
  510. 64 bins of size 8
  511. 32 bins of size 64
  512. 16 bins of size 512
  513. 8 bins of size 4096
  514. 4 bins of size 32768
  515. 2 bins of size 262144
  516. 1 bin of size what's left
  517. The bins top out around 1MB because we expect to service large
  518. requests via mmap.
  519. */
  520. #define NBINS 96
  521. #define NSMALLBINS 32
  522. #define SMALLBIN_WIDTH 8
  523. #define MIN_LARGE_SIZE 256
  524. #define in_smallbin_range(sz) \
  525. ((unsigned long)(sz) < (unsigned long)MIN_LARGE_SIZE)
  526. #define smallbin_index(sz) (((unsigned)(sz)) >> 3)
  527. #define bin_index(sz) \
  528. ((in_smallbin_range(sz)) ? smallbin_index(sz) : __malloc_largebin_index(sz))
  529. /*
  530. FIRST_SORTED_BIN_SIZE is the chunk size corresponding to the
  531. first bin that is maintained in sorted order. This must
  532. be the smallest size corresponding to a given bin.
  533. Normally, this should be MIN_LARGE_SIZE. But you can weaken
  534. best fit guarantees to sometimes speed up malloc by increasing value.
  535. Doing this means that malloc may choose a chunk that is
  536. non-best-fitting by up to the width of the bin.
  537. Some useful cutoff values:
  538. 512 - all bins sorted
  539. 2560 - leaves bins <= 64 bytes wide unsorted
  540. 12288 - leaves bins <= 512 bytes wide unsorted
  541. 65536 - leaves bins <= 4096 bytes wide unsorted
  542. 262144 - leaves bins <= 32768 bytes wide unsorted
  543. -1 - no bins sorted (not recommended!)
  544. */
  545. #define FIRST_SORTED_BIN_SIZE MIN_LARGE_SIZE
  546. /* #define FIRST_SORTED_BIN_SIZE 65536 */
  547. /*
  548. Unsorted chunks
  549. All remainders from chunk splits, as well as all returned chunks,
  550. are first placed in the "unsorted" bin. They are then placed
  551. in regular bins after malloc gives them ONE chance to be used before
  552. binning. So, basically, the unsorted_chunks list acts as a queue,
  553. with chunks being placed on it in free (and __malloc_consolidate),
  554. and taken off (to be either used or placed in bins) in malloc.
  555. */
  556. /* The otherwise unindexable 1-bin is used to hold unsorted chunks. */
  557. #define unsorted_chunks(M) (bin_at(M, 1))
  558. /*
  559. Top
  560. The top-most available chunk (i.e., the one bordering the end of
  561. available memory) is treated specially. It is never included in
  562. any bin, is used only if no other chunk is available, and is
  563. released back to the system if it is very large (see
  564. M_TRIM_THRESHOLD). Because top initially
  565. points to its own bin with initial zero size, thus forcing
  566. extension on the first malloc request, we avoid having any special
  567. code in malloc to check whether it even exists yet. But we still
  568. need to do so when getting memory from system, so we make
  569. initial_top treat the bin as a legal but unusable chunk during the
  570. interval between initialization and the first call to
  571. __malloc_alloc. (This is somewhat delicate, since it relies on
  572. the 2 preceding words to be zero during this interval as well.)
  573. */
  574. /* Conveniently, the unsorted bin can be used as dummy top on first call */
  575. #define initial_top(M) (unsorted_chunks(M))
  576. /*
  577. Binmap
  578. To help compensate for the large number of bins, a one-level index
  579. structure is used for bin-by-bin searching. `binmap' is a
  580. bitvector recording whether bins are definitely empty so they can
  581. be skipped over during during traversals. The bits are NOT always
  582. cleared as soon as bins are empty, but instead only
  583. when they are noticed to be empty during traversal in malloc.
  584. */
  585. /* Conservatively use 32 bits per map word, even if on 64bit system */
  586. #define BINMAPSHIFT 5
  587. #define BITSPERMAP (1U << BINMAPSHIFT)
  588. #define BINMAPSIZE (NBINS / BITSPERMAP)
  589. #define idx2block(i) ((i) >> BINMAPSHIFT)
  590. #define idx2bit(i) ((1U << ((i) & ((1U << BINMAPSHIFT)-1))))
  591. #define mark_bin(m,i) ((m)->binmap[idx2block(i)] |= idx2bit(i))
  592. #define unmark_bin(m,i) ((m)->binmap[idx2block(i)] &= ~(idx2bit(i)))
  593. #define get_binmap(m,i) ((m)->binmap[idx2block(i)] & idx2bit(i))
  594. /*
  595. Fastbins
  596. An array of lists holding recently freed small chunks. Fastbins
  597. are not doubly linked. It is faster to single-link them, and
  598. since chunks are never removed from the middles of these lists,
  599. double linking is not necessary. Also, unlike regular bins, they
  600. are not even processed in FIFO order (they use faster LIFO) since
  601. ordering doesn't much matter in the transient contexts in which
  602. fastbins are normally used.
  603. Chunks in fastbins keep their inuse bit set, so they cannot
  604. be consolidated with other free chunks. __malloc_consolidate
  605. releases all chunks in fastbins and consolidates them with
  606. other free chunks.
  607. */
  608. typedef struct malloc_chunk* mfastbinptr;
  609. /* offset 2 to use otherwise unindexable first 2 bins */
  610. #define fastbin_index(sz) ((((unsigned int)(sz)) >> 3) - 2)
  611. /* The maximum fastbin request size we support */
  612. #define MAX_FAST_SIZE 80
  613. #define NFASTBINS (fastbin_index(request2size(MAX_FAST_SIZE))+1)
  614. /*
  615. FASTBIN_CONSOLIDATION_THRESHOLD is the size of a chunk in free()
  616. that triggers automatic consolidation of possibly-surrounding
  617. fastbin chunks. This is a heuristic, so the exact value should not
  618. matter too much. It is defined at half the default trim threshold as a
  619. compromise heuristic to only attempt consolidation if it is likely
  620. to lead to trimming. However, it is not dynamically tunable, since
  621. consolidation reduces fragmentation surrounding loarge chunks even
  622. if trimming is not used.
  623. */
  624. #define FASTBIN_CONSOLIDATION_THRESHOLD \
  625. ((unsigned long)(DEFAULT_TRIM_THRESHOLD) >> 1)
  626. /*
  627. Since the lowest 2 bits in max_fast don't matter in size comparisons,
  628. they are used as flags.
  629. */
  630. /*
  631. ANYCHUNKS_BIT held in max_fast indicates that there may be any
  632. freed chunks at all. It is set true when entering a chunk into any
  633. bin.
  634. */
  635. #define ANYCHUNKS_BIT (1U)
  636. #define have_anychunks(M) (((M)->max_fast & ANYCHUNKS_BIT))
  637. #define set_anychunks(M) ((M)->max_fast |= ANYCHUNKS_BIT)
  638. #define clear_anychunks(M) ((M)->max_fast &= ~ANYCHUNKS_BIT)
  639. /*
  640. FASTCHUNKS_BIT held in max_fast indicates that there are probably
  641. some fastbin chunks. It is set true on entering a chunk into any
  642. fastbin, and cleared only in __malloc_consolidate.
  643. */
  644. #define FASTCHUNKS_BIT (2U)
  645. #define have_fastchunks(M) (((M)->max_fast & FASTCHUNKS_BIT))
  646. #define set_fastchunks(M) ((M)->max_fast |= (FASTCHUNKS_BIT|ANYCHUNKS_BIT))
  647. #define clear_fastchunks(M) ((M)->max_fast &= ~(FASTCHUNKS_BIT))
  648. /* Set value of max_fast. Use impossibly small value if 0. */
  649. #define set_max_fast(M, s) \
  650. (M)->max_fast = (((s) == 0)? SMALLBIN_WIDTH: request2size(s)) | \
  651. ((M)->max_fast & (FASTCHUNKS_BIT|ANYCHUNKS_BIT))
  652. #define get_max_fast(M) \
  653. ((M)->max_fast & ~(FASTCHUNKS_BIT | ANYCHUNKS_BIT))
  654. /*
  655. morecore_properties is a status word holding dynamically discovered
  656. or controlled properties of the morecore function
  657. */
  658. #define MORECORE_CONTIGUOUS_BIT (1U)
  659. #define contiguous(M) \
  660. (((M)->morecore_properties & MORECORE_CONTIGUOUS_BIT))
  661. #define noncontiguous(M) \
  662. (((M)->morecore_properties & MORECORE_CONTIGUOUS_BIT) == 0)
  663. #define set_contiguous(M) \
  664. ((M)->morecore_properties |= MORECORE_CONTIGUOUS_BIT)
  665. #define set_noncontiguous(M) \
  666. ((M)->morecore_properties &= ~MORECORE_CONTIGUOUS_BIT)
  667. /*
  668. ----------- Internal state representation and initialization -----------
  669. */
  670. struct malloc_state {
  671. /* The maximum chunk size to be eligible for fastbin */
  672. size_t max_fast; /* low 2 bits used as flags */
  673. /* Fastbins */
  674. mfastbinptr fastbins[NFASTBINS];
  675. /* Base of the topmost chunk -- not otherwise kept in a bin */
  676. mchunkptr top;
  677. /* The remainder from the most recent split of a small request */
  678. mchunkptr last_remainder;
  679. /* Normal bins packed as described above */
  680. mchunkptr bins[NBINS * 2];
  681. /* Bitmap of bins. Trailing zero map handles cases of largest binned size */
  682. unsigned int binmap[BINMAPSIZE+1];
  683. /* Tunable parameters */
  684. unsigned long trim_threshold;
  685. size_t top_pad;
  686. size_t mmap_threshold;
  687. /* Memory map support */
  688. int n_mmaps;
  689. int n_mmaps_max;
  690. int max_n_mmaps;
  691. /* Cache malloc_getpagesize */
  692. unsigned int pagesize;
  693. /* Track properties of MORECORE */
  694. unsigned int morecore_properties;
  695. /* Statistics */
  696. size_t mmapped_mem;
  697. size_t sbrked_mem;
  698. size_t max_sbrked_mem;
  699. size_t max_mmapped_mem;
  700. size_t max_total_mem;
  701. };
  702. typedef struct malloc_state *mstate;
  703. /*
  704. There is exactly one instance of this struct in this malloc.
  705. If you are adapting this malloc in a way that does NOT use a static
  706. malloc_state, you MUST explicitly zero-fill it before using. This
  707. malloc relies on the property that malloc_state is initialized to
  708. all zeroes (as is true of C statics).
  709. */
  710. extern struct malloc_state __malloc_state; /* never directly referenced */
  711. /*
  712. All uses of av_ are via get_malloc_state().
  713. At most one "call" to get_malloc_state is made per invocation of
  714. the public versions of malloc and free, but other routines
  715. that in turn invoke malloc and/or free may call more then once.
  716. Also, it is called in check* routines if __UCLIBC_MALLOC_DEBUGGING__ is set.
  717. */
  718. #define get_malloc_state() (&(__malloc_state))
  719. /* External internal utilities operating on mstates */
  720. void __malloc_consolidate(mstate) attribute_hidden;
  721. /* Debugging support */
  722. #ifndef __UCLIBC_MALLOC_DEBUGGING__
  723. #define check_chunk(P)
  724. #define check_free_chunk(P)
  725. #define check_inuse_chunk(P)
  726. #define check_remalloced_chunk(P,N)
  727. #define check_malloced_chunk(P,N)
  728. #define check_malloc_state()
  729. #define assert(x) ((void)0)
  730. #else
  731. #define check_chunk(P) __do_check_chunk(P)
  732. #define check_free_chunk(P) __do_check_free_chunk(P)
  733. #define check_inuse_chunk(P) __do_check_inuse_chunk(P)
  734. #define check_remalloced_chunk(P,N) __do_check_remalloced_chunk(P,N)
  735. #define check_malloced_chunk(P,N) __do_check_malloced_chunk(P,N)
  736. #define check_malloc_state() __do_check_malloc_state()
  737. extern void __do_check_chunk(mchunkptr p);
  738. extern void __do_check_free_chunk(mchunkptr p);
  739. extern void __do_check_inuse_chunk(mchunkptr p);
  740. extern void __do_check_remalloced_chunk(mchunkptr p, size_t s);
  741. extern void __do_check_malloced_chunk(mchunkptr p, size_t s);
  742. extern void __do_check_malloc_state(void);
  743. #include <assert.h>
  744. #endif