misc/lkdtm/heap.c

1 // SPDX-License-Identifier: GPL-2.0
15  * This tries to stay within the next largest power-of-2 kmalloc cache
35 	 * The slub allocator uses the first word to store the free  in lkdtm_WRITE_AFTER_FREE()
37 	 * allocation to avoid running into the freelist  in lkdtm_WRITE_AFTER_FREE()
44 	pr_info("Allocated memory %p-%p\n", base, &base[offset * 2]);  in lkdtm_WRITE_AFTER_FREE()
62 	 * the middle of the allocation to store the free pointer,  in lkdtm_READ_AFTER_FREE()
64 	 * avoid running into the freelist.  in lkdtm_READ_AFTER_FREE()
83 	pr_info("Value in memory before free: %x\n", base[offset]);  in lkdtm_READ_AFTER_FREE()
103 		pr_info("Unable to allocate free page\n");  in lkdtm_WRITE_BUDDY_AFTER_FREE()
107 	pr_info("Writing to the buddy page before free\n");  in lkdtm_WRITE_BUDDY_AFTER_FREE()
111 	pr_info("Attempting bad write to the buddy page after free\n");  in lkdtm_WRITE_BUDDY_AFTER_FREE()
126 		pr_info("Unable to allocate free page\n");  in lkdtm_READ_BUDDY_AFTER_FREE()
141 	pr_info("Value in memory before free: %x\n", base[0]);  in lkdtm_READ_BUDDY_AFTER_FREE()
167 	pr_info("Attempting double slab free ...\n");  in lkdtm_SLAB_FREE_DOUBLE()
184 	pr_info("Attempting cross-cache slab free ...\n");  in lkdtm_SLAB_FREE_CROSS()
192 	pr_info("Attempting non-Slab slab free ...\n");  in lkdtm_SLAB_FREE_PAGE()
210 	double_free_cache = kmem_cache_create("lkdtm-heap-double_free",  in lkdtm_heap_init()
212 	a_cache = kmem_cache_create("lkdtm-heap-a", 64, 0, 0, ctor_a);  in lkdtm_heap_init()
213 	b_cache = kmem_cache_create("lkdtm-heap-b", 64, 0, 0, ctor_b);  in lkdtm_heap_init()