FileMgr

✏️ /usr/src/linux-headers-6.8.0-136/scripts/coccinelle/api/kfree_mismatch.cocci

✕ Tutup

// SPDX-License-Identifier: GPL-2.0-only
///
/// Check that kvmalloc'ed memory is freed by kfree functions,
/// vmalloc'ed by vfree functions and kvmalloc'ed by kvfree
/// functions.
///
// Confidence: High
// Copyright: (C) 2020 Denis Efremov ISPRAS
// Options: --no-includes --include-headers
//

virtual patch
virtual report
virtual org
virtual context

@alloc@
expression E, E1;
position kok, vok;
@@

(
  if (...) {
    ...
    E = \(kmalloc\|kzalloc\|krealloc\|kcalloc\|
          kmalloc_node\|kzalloc_node\|kmalloc_array\|
          kmalloc_array_node\|kcalloc_node\)(...)@kok
    ...
  } else {
    ...
    E = \(vmalloc\|vzalloc\|vmalloc_user\|vmalloc_node\|
          vzalloc_node\|vmalloc_exec\|vmalloc_32\|
          vmalloc_32_user\|__vmalloc\|__vmalloc_node_range\|
          __vmalloc_node\)(...)@vok
    ...
  }
|
  E = \(kmalloc\|kzalloc\|krealloc\|kcalloc\|kmalloc_node\|kzalloc_node\|
        kmalloc_array\|kmalloc_array_node\|kcalloc_node\)(...)@kok
  ... when != E = E1
      when any
  if (E == NULL) {
    ...
    E = \(vmalloc\|vzalloc\|vmalloc_user\|vmalloc_node\|
          vzalloc_node\|vmalloc_exec\|vmalloc_32\|
          vmalloc_32_user\|__vmalloc\|__vmalloc_node_range\|
          __vmalloc_node\)(...)@vok
    ...
  }
)

@free@
expression E;
position fok;
@@

@vfree depends on !patch@
expression E;
position a != alloc.kok;
position f != free.fok;
@@

* E = \(kmalloc\|kzalloc\|krealloc\|kcalloc\|kmalloc_node\|
*       kzalloc_node\|kmalloc_array\|kmalloc_array_node\|
*       kcalloc_node\)(...)@a
  ... when != if (...) { ... E = \(vmalloc\|vzalloc\|vmalloc_user\|vmalloc_node\|vzalloc_node\|vmalloc_exec\|vmalloc_32\|vmalloc_32_user\|__vmalloc\|__vmalloc_node_range\|__vmalloc_node\)(...); ... }
      when != is_vmalloc_addr(E)
      when any
* \(vfree\|vfree_atomic\|kvfree\)(E)@f

@depends on patch exists@
expression E;
position a != alloc.kok;
position f != free.fok;
@@

E = \(kmalloc\|kzalloc\|krealloc\|kcalloc\|kmalloc_node\|
        kzalloc_node\|kmalloc_array\|kmalloc_array_node\|
        kcalloc_node\)(...)@a
  ... when != if (...) { ... E = \(vmalloc\|vzalloc\|vmalloc_user\|vmalloc_node\|vzalloc_node\|vmalloc_exec\|vmalloc_32\|vmalloc_32_user\|__vmalloc\|__vmalloc_node_range\|__vmalloc_node\)(...); ... }
      when != is_vmalloc_addr(E)
      when any
- \(vfree\|vfree_atomic\|kvfree\)(E)@f
+ kfree(E)

@kfree depends on !patch@
expression E;
position a != alloc.vok;
position f != free.fok;
@@

@depends on patch exists@
expression E;
position a != alloc.vok;
position f != free.fok;
@@

@kvfree depends on !patch@
expression E;
position a, f;
@@

@depends on patch exists@
expression E;
@@

@kvfree_switch depends on !patch@
expression alloc.E;
position f;
@@

... when != is_vmalloc_addr(E)
      when any
* \(kfree\|kfree_sensitive\|vfree\|vfree_atomic\)(E)@f

@depends on patch exists@
expression alloc.E;
position f;
@@

... when != is_vmalloc_addr(E)
      when any
(
- \(kfree\|vfree\)(E)@f
+ kvfree(E)
|
- kfree_sensitive(E)@f
+ kvfree_sensitive(E)
)

@script: python depends on report@
a << vfree.a;
f << vfree.f;
@@

msg = "WARNING kmalloc is used to allocate this memory at line %s" % (a[0].line)
coccilib.report.print_report(f[0], msg)

@script: python depends on org@
a << vfree.a;
f << vfree.f;
@@

msg = "WARNING kmalloc is used to allocate this memory at line %s" % (a[0].line)
coccilib.org.print_todo(f[0], msg)

@script: python depends on report@
a << kfree.a;
f << kfree.f;
@@

msg = "WARNING vmalloc is used to allocate this memory at line %s" % (a[0].line)
coccilib.report.print_report(f[0], msg)

@script: python depends on org@
a << kfree.a;
f << kfree.f;
@@

msg = "WARNING vmalloc is used to allocate this memory at line %s" % (a[0].line)
coccilib.org.print_todo(f[0], msg)

@script: python depends on report@
a << kvfree.a;
f << kvfree.f;
@@

msg = "WARNING kvmalloc is used to allocate this memory at line %s" % (a[0].line)
coccilib.report.print_report(f[0], msg)

@script: python depends on org@
a << kvfree.a;
f << kvfree.f;
@@

msg = "WARNING kvmalloc is used to allocate this memory at line %s" % (a[0].line)
coccilib.org.print_todo(f[0], msg)

@script: python depends on report@
ka << alloc.kok;
va << alloc.vok;
f << kvfree_switch.f;
@@

msg = "WARNING kmalloc (line %s) && vmalloc (line %s) are used to allocate this memory" % (ka[0].line, va[0].line)
coccilib.report.print_report(f[0], msg)

@script: python depends on org@
ka << alloc.kok;
va << alloc.vok;
f << kvfree_switch.f;
@@

msg = "WARNING kmalloc (line %s) && vmalloc (line %s) are used to allocate this memory" % (ka[0].line, va[0].line)
coccilib.org.print_todo(f[0], msg)

Batal

⬅ coccinelle 19 item

Nama	Tipe	Ukuran	Diubah	Perm	Aksi
📁 alloc	dir	—	22/07/26 06:42	0755	📂
📄 atomic_as_refcounter.cocci	cocci	2.3 KB	10/03/24 20:38	0644	✏️ ⬇
📄 check_bq27xxx_data.cocci	cocci	3.5 KB	10/03/24 20:38	0644	✏️ ⬇
📄 d_find_alias.cocci	cocci	1.3 KB	10/03/24 20:38	0644	✏️ ⬇
📄 device_attr_show.cocci	cocci	1.1 KB	01/07/26 19:48	0644	✏️ ⬇
📄 err_cast.cocci	cocci	1.1 KB	10/03/24 20:38	0644	✏️ ⬇
📄 kfree_mismatch.cocci	cocci	5.6 KB	10/03/24 20:38	0644	✏️ ⬇
📄 kfree_sensitive.cocci	cocci	1.9 KB	10/03/24 20:38	0644	✏️ ⬇
📄 kstrdup.cocci	cocci	2.4 KB	10/03/24 20:38	0644	✏️ ⬇
📄 kvmalloc.cocci	cocci	6.1 KB	10/03/24 20:38	0644	✏️ ⬇
📄 memdup.cocci	cocci	1.4 KB	10/03/24 20:38	0644	✏️ ⬇
📄 memdup_user.cocci	cocci	2.6 KB	10/03/24 20:38	0644	✏️ ⬇
📄 platform_get_irq.cocci	cocci	1.2 KB	10/03/24 20:38	0644	✏️ ⬇
📄 platform_no_drv_owner.cocci	cocci	3.8 KB	10/03/24 20:38	0644	✏️ ⬇
📄 pm_runtime.cocci	cocci	2.4 KB	10/03/24 20:38	0644	✏️ ⬇
📄 resource_size.cocci	cocci	2.1 KB	10/03/24 20:38	0644	✏️ ⬇
📄 simple_open.cocci	cocci	1.2 KB	10/03/24 20:38	0644	✏️ ⬇
📄 stream_open.cocci	cocci	7.7 KB	10/03/24 20:38	0644	✏️ ⬇
📄 vma_pages.cocci	cocci	1.5 KB	10/03/24 20:38	0644	✏️ ⬇

✏️ Rename

🔑 Ubah Permission