Coverage Report

Created: 2025-08-26 06:44

/src/dropbear/src/dbmalloc.c
Line
Count
Source (jump to first uncovered line)
1
#include "dbmalloc.h"
2
#include "dbutil.h"
3
4
5
30.5M
void * m_calloc(size_t nmemb, size_t size) {
6
30.5M
    if (SIZE_T_MAX / nmemb < size) {
7
0
        dropbear_exit("m_calloc failed");
8
0
    }
9
30.5M
    return m_malloc(nmemb*size);
10
30.5M
}
11
12
62.1k
void * m_strdup(const char * str) {
13
62.1k
    char* ret;
14
62.1k
    unsigned int len;
15
62.1k
    len = strlen(str);
16
17
62.1k
    ret = m_malloc(len+1);
18
62.1k
    if (ret == NULL) {
19
0
        dropbear_exit("m_strdup failed");
20
0
    }
21
62.1k
    memcpy(ret, str, len+1);
22
62.1k
    return ret;
23
62.1k
}
24
25
#if !DROPBEAR_TRACKING_MALLOC
26
27
/* Simple wrappers around malloc etc */
28
void * m_malloc(size_t size) {
29
30
  void* ret;
31
32
  if (size == 0) {
33
    dropbear_exit("m_malloc failed");
34
  }
35
  ret = calloc(1, size);
36
  if (ret == NULL) {
37
    dropbear_exit("m_malloc failed");
38
  }
39
  return ret;
40
41
}
42
43
void * m_realloc(void* ptr, size_t size) {
44
45
  void *ret;
46
47
  if (size == 0) {
48
    dropbear_exit("m_realloc failed");
49
  }
50
  ret = realloc(ptr, size);
51
  if (ret == NULL) {
52
    dropbear_exit("m_realloc failed");
53
  }
54
  return ret;
55
}
56
57
58
#else
59
60
/* For fuzzing */
61
62
struct dbmalloc_header {
63
    unsigned int epoch;
64
    struct dbmalloc_header *prev;
65
    struct dbmalloc_header *next;
66
};
67
68
static void put_alloc(struct dbmalloc_header *header);
69
static void remove_alloc(struct dbmalloc_header *header);
70
71
/* end of the linked list */
72
static struct dbmalloc_header* staple;
73
74
unsigned int current_epoch = 0;
75
76
22.8k
void m_malloc_set_epoch(unsigned int epoch) {
77
22.8k
    current_epoch = epoch;
78
22.8k
}
79
80
22.8k
void m_malloc_free_epoch(unsigned int epoch, int dofree) {
81
22.8k
    struct dbmalloc_header* header;
82
22.8k
    struct dbmalloc_header* nextheader = NULL;
83
22.8k
    struct dbmalloc_header* oldstaple = staple;
84
22.8k
    staple = NULL;
85
    /* free allocations from this epoch, create a new staple-anchored list from
86
    the remainder */
87
16.1M
    for (header = oldstaple; header; header = nextheader)
88
16.0M
    {
89
16.0M
        nextheader = header->next;
90
16.0M
        if (header->epoch == epoch) {
91
43.4k
            if (dofree) {
92
43.4k
                free(header);
93
43.4k
            }
94
16.0M
        } else {
95
16.0M
            header->prev = NULL;
96
16.0M
            header->next = NULL;
97
16.0M
            put_alloc(header);
98
16.0M
        }
99
16.0M
    }
100
22.8k
}
101
102
51.8M
static void put_alloc(struct dbmalloc_header *header) {
103
51.8M
    assert(header->next == NULL);
104
51.8M
    assert(header->prev == NULL);
105
51.8M
    if (staple) {
106
51.8M
        staple->prev = header;
107
51.8M
    }
108
51.8M
    header->next = staple;
109
51.8M
    staple = header;
110
51.8M
}
111
112
35.7M
static void remove_alloc(struct dbmalloc_header *header) {
113
35.7M
    if (header->prev) {
114
25.8M
        header->prev->next = header->next;
115
25.8M
    }
116
35.7M
    if (header->next) {
117
35.7M
        header->next->prev = header->prev;
118
35.7M
    }
119
35.7M
    if (staple == header) {
120
9.97M
        staple = header->next;
121
9.97M
    }
122
35.7M
    header->prev = NULL;
123
35.7M
    header->next = NULL;
124
35.7M
}
125
126
35.7M
static struct dbmalloc_header* get_header(void* ptr) {
127
35.7M
    char* bptr = ptr;
128
35.7M
    return (struct dbmalloc_header*)&bptr[-sizeof(struct dbmalloc_header)];
129
35.7M
}
130
131
32.8M
void * m_malloc(size_t size) {
132
32.8M
    char* mem = NULL;
133
32.8M
    struct dbmalloc_header* header = NULL;
134
135
32.8M
    if (size == 0 || size > 1e9) {
136
0
        dropbear_exit("m_malloc failed");
137
0
    }
138
139
32.8M
    size = size + sizeof(struct dbmalloc_header);
140
141
32.8M
    mem = calloc(1, size);
142
32.8M
    if (mem == NULL) {
143
0
        dropbear_exit("m_malloc failed");
144
0
    }
145
32.8M
    header = (struct dbmalloc_header*)mem;
146
32.8M
    put_alloc(header);
147
32.8M
    header->epoch = current_epoch;
148
32.8M
    return &mem[sizeof(struct dbmalloc_header)];
149
32.8M
}
150
151
2.95M
void * m_realloc(void* ptr, size_t size) {
152
2.95M
    char* mem = NULL;
153
2.95M
    struct dbmalloc_header* header = NULL;
154
2.95M
    if (size == 0 || size > 1e9) {
155
0
        dropbear_exit("m_realloc failed");
156
0
    }
157
158
2.95M
    header = get_header(ptr);
159
2.95M
    remove_alloc(header);
160
161
2.95M
    size = size + sizeof(struct dbmalloc_header);
162
2.95M
    mem = realloc(header, size);
163
2.95M
    if (mem == NULL) {
164
0
        dropbear_exit("m_realloc failed");
165
0
    }
166
167
2.95M
    header = (struct dbmalloc_header*)mem;
168
2.95M
    put_alloc(header);
169
2.95M
    return &mem[sizeof(struct dbmalloc_header)];
170
2.95M
}
171
172
32.9M
void m_free_direct(void* ptr) {
173
32.9M
    struct dbmalloc_header* header = NULL;
174
32.9M
    if (!ptr) {
175
116k
        return;
176
116k
    }
177
32.8M
    header = get_header(ptr);
178
32.8M
    remove_alloc(header);
179
32.8M
    free(header);
180
32.8M
}
181
182
#endif /* DROPBEAR_TRACKING_MALLOC */
183
184
2.90M
void * m_realloc_ltm(void* ptr, size_t oldsize, size_t newsize) {
185
2.90M
   (void)oldsize;
186
2.90M
   return m_realloc(ptr, newsize);
187
2.90M
}
188
189
17.1M
void m_free_ltm(void *mem, size_t size) {
190
17.1M
   (void)size;
191
17.1M
   m_free_direct(mem);
192
17.1M
}