57 lines
1.3 KiB
C
57 lines
1.3 KiB
C
|
#include "test/jemalloc_test.h"
|
||
|
|
|
||
|
|
#include "jemalloc/internal/safety_check.h"
|
||
|
|
|
||
|
|
bool fake_abort_called;
|
||
|
|
void fake_abort(const char *message) {
|
||
|
|
(void)message;
|
||
|
|
fake_abort_called = true;
|
||
|
|
}
|
||
|
|
|
||
|
|
void
|
||
|
|
test_large_double_free_pre(void) {
|
||
|
|
safety_check_set_abort(&fake_abort);
|
||
|
|
fake_abort_called = false;
|
||
|
|
}
|
||
|
|
|
||
|
|
void
|
||
|
|
test_large_double_free_post() {
|
||
|
|
expect_b_eq(fake_abort_called, true, "Double-free check didn't fire.");
|
||
|
|
safety_check_set_abort(NULL);
|
||
|
|
}
|
||
|
|
|
||
|
|
TEST_BEGIN(test_large_double_free_tcache) {
|
||
|
|
test_skip_if(!config_opt_safety_checks);
|
||
|
|
/*
|
||
|
|
* Skip debug builds, since too many assertions will be triggered with
|
||
|
|
* double-free before hitting the one we are interested in.
|
||
|
|
*/
|
||
|
|
test_skip_if(config_debug);
|
||
|
|
|
||
|
|
test_large_double_free_pre();
|
||
|
|
char *ptr = malloc(SC_LARGE_MINCLASS);
|
||
|
|
free(ptr);
|
||
|
|
free(ptr);
|
||
|
|
mallctl("thread.tcache.flush", NULL, NULL, NULL, 0);
|
||
|
|
test_large_double_free_post();
|
||
|
|
}
|
||
|
|
TEST_END
|
||
|
|
|
||
|
|
TEST_BEGIN(test_large_double_free_no_tcache) {
|
||
|
|
test_skip_if(!config_opt_safety_checks);
|
||
|
|
test_skip_if(config_debug);
|
||
|
|
|
||
|
|
test_large_double_free_pre();
|
||
|
|
char *ptr = mallocx(SC_LARGE_MINCLASS, MALLOCX_TCACHE_NONE);
|
||
|
|
dallocx(ptr, MALLOCX_TCACHE_NONE);
|
||
|
|
dallocx(ptr, MALLOCX_TCACHE_NONE);
|
||
|
|
test_large_double_free_post();
|
||
|
|
}
|
||
|
|
TEST_END
|
||
|
|
|
||
|
|
int
|
||
|
|
main(void) {
|
||
|
|
return test(test_large_double_free_no_tcache,
|
||
|
|
test_large_double_free_tcache);
|
||
|
|
}
|