Lines Matching refs:ptr
122 char *ptr; in kmalloc_oob_right() local
125 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_right()
126 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_right()
133 KUNIT_EXPECT_KASAN_FAIL(test, ptr[size] = 'x'); in kmalloc_oob_right()
139 KUNIT_EXPECT_KASAN_FAIL(test, ptr[size + 5] = 'y'); in kmalloc_oob_right()
142 KUNIT_EXPECT_KASAN_FAIL(test, ptr[0] = in kmalloc_oob_right()
143 ptr[size + KASAN_GRANULE_SIZE + 5]); in kmalloc_oob_right()
145 kfree(ptr); in kmalloc_oob_right()
150 char *ptr; in kmalloc_oob_left() local
153 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_left()
154 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_left()
156 KUNIT_EXPECT_KASAN_FAIL(test, *ptr = *(ptr - 1)); in kmalloc_oob_left()
157 kfree(ptr); in kmalloc_oob_left()
162 char *ptr; in kmalloc_node_oob_right() local
165 ptr = kmalloc_node(size, GFP_KERNEL, 0); in kmalloc_node_oob_right()
166 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_node_oob_right()
168 KUNIT_EXPECT_KASAN_FAIL(test, ptr[0] = ptr[size]); in kmalloc_node_oob_right()
169 kfree(ptr); in kmalloc_node_oob_right()
180 char *ptr; in kmalloc_pagealloc_oob_right() local
185 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_pagealloc_oob_right()
186 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_pagealloc_oob_right()
188 KUNIT_EXPECT_KASAN_FAIL(test, ptr[size + OOB_TAG_OFF] = 0); in kmalloc_pagealloc_oob_right()
190 kfree(ptr); in kmalloc_pagealloc_oob_right()
195 char *ptr; in kmalloc_pagealloc_uaf() local
200 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_pagealloc_uaf()
201 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_pagealloc_uaf()
202 kfree(ptr); in kmalloc_pagealloc_uaf()
204 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[0]); in kmalloc_pagealloc_uaf()
209 char *ptr; in kmalloc_pagealloc_invalid_free() local
214 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_pagealloc_invalid_free()
215 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_pagealloc_invalid_free()
217 KUNIT_EXPECT_KASAN_FAIL(test, kfree(ptr + 1)); in kmalloc_pagealloc_invalid_free()
222 char *ptr; in pagealloc_oob_right() local
235 ptr = page_address(pages); in pagealloc_oob_right()
236 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in pagealloc_oob_right()
238 KUNIT_EXPECT_KASAN_FAIL(test, ptr[0] = ptr[size]); in pagealloc_oob_right()
239 free_pages((unsigned long)ptr, order); in pagealloc_oob_right()
244 char *ptr; in pagealloc_uaf() local
249 ptr = page_address(pages); in pagealloc_uaf()
250 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in pagealloc_uaf()
251 free_pages((unsigned long)ptr, order); in pagealloc_uaf()
253 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[0]); in pagealloc_uaf()
258 char *ptr; in kmalloc_large_oob_right() local
265 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_large_oob_right()
266 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_large_oob_right()
268 KUNIT_EXPECT_KASAN_FAIL(test, ptr[size] = 0); in kmalloc_large_oob_right()
269 kfree(ptr); in kmalloc_large_oob_right()
437 char *ptr; in kmalloc_oob_memset_2() local
440 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_memset_2()
441 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_memset_2()
444 KUNIT_EXPECT_KASAN_FAIL(test, memset(ptr + size - 1, 0, 2)); in kmalloc_oob_memset_2()
445 kfree(ptr); in kmalloc_oob_memset_2()
450 char *ptr; in kmalloc_oob_memset_4() local
453 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_memset_4()
454 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_memset_4()
457 KUNIT_EXPECT_KASAN_FAIL(test, memset(ptr + size - 3, 0, 4)); in kmalloc_oob_memset_4()
458 kfree(ptr); in kmalloc_oob_memset_4()
463 char *ptr; in kmalloc_oob_memset_8() local
466 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_memset_8()
467 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_memset_8()
470 KUNIT_EXPECT_KASAN_FAIL(test, memset(ptr + size - 7, 0, 8)); in kmalloc_oob_memset_8()
471 kfree(ptr); in kmalloc_oob_memset_8()
476 char *ptr; in kmalloc_oob_memset_16() local
479 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_memset_16()
480 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_memset_16()
483 KUNIT_EXPECT_KASAN_FAIL(test, memset(ptr + size - 15, 0, 16)); in kmalloc_oob_memset_16()
484 kfree(ptr); in kmalloc_oob_memset_16()
489 char *ptr; in kmalloc_oob_in_memset() local
492 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_in_memset()
493 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_in_memset()
497 memset(ptr, 0, size + KASAN_GRANULE_SIZE)); in kmalloc_oob_in_memset()
498 kfree(ptr); in kmalloc_oob_in_memset()
503 char *ptr; in kmalloc_memmove_negative_size() local
514 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_memmove_negative_size()
515 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_memmove_negative_size()
517 memset((char *)ptr, 0, 64); in kmalloc_memmove_negative_size()
520 memmove((char *)ptr, (char *)ptr + 4, invalid_size)); in kmalloc_memmove_negative_size()
521 kfree(ptr); in kmalloc_memmove_negative_size()
526 char *ptr; in kmalloc_memmove_invalid_size() local
530 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_memmove_invalid_size()
531 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_memmove_invalid_size()
533 memset((char *)ptr, 0, 64); in kmalloc_memmove_invalid_size()
535 memmove((char *)ptr, (char *)ptr + 4, invalid_size)); in kmalloc_memmove_invalid_size()
536 kfree(ptr); in kmalloc_memmove_invalid_size()
541 char *ptr; in kmalloc_uaf() local
544 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_uaf()
545 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_uaf()
547 kfree(ptr); in kmalloc_uaf()
548 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[8]); in kmalloc_uaf()
553 char *ptr; in kmalloc_uaf_memset() local
562 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_uaf_memset()
563 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_uaf_memset()
565 kfree(ptr); in kmalloc_uaf_memset()
566 KUNIT_EXPECT_KASAN_FAIL(test, memset(ptr, 0, size)); in kmalloc_uaf_memset()
601 char *ptr; in kfree_via_page() local
606 ptr = kmalloc(size, GFP_KERNEL); in kfree_via_page()
607 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kfree_via_page()
609 page = virt_to_page(ptr); in kfree_via_page()
610 offset = offset_in_page(ptr); in kfree_via_page()
616 char *ptr; in kfree_via_phys() local
620 ptr = kmalloc(size, GFP_KERNEL); in kfree_via_phys()
621 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kfree_via_phys()
623 phys = virt_to_phys(ptr); in kfree_via_phys()
729 char *ptr; in ksize_unpoisons_memory() local
732 ptr = kmalloc(size, GFP_KERNEL); in ksize_unpoisons_memory()
733 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in ksize_unpoisons_memory()
734 real_size = ksize(ptr); in ksize_unpoisons_memory()
737 ptr[size] = 'x'; in ksize_unpoisons_memory()
740 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[real_size]); in ksize_unpoisons_memory()
742 kfree(ptr); in ksize_unpoisons_memory()
751 char *ptr; in ksize_uaf() local
754 ptr = kmalloc(size, GFP_KERNEL); in ksize_uaf()
755 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in ksize_uaf()
756 kfree(ptr); in ksize_uaf()
758 KUNIT_EXPECT_KASAN_FAIL(test, ksize(ptr)); in ksize_uaf()
759 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[0]); in ksize_uaf()
760 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[size]); in ksize_uaf()
857 char *ptr; in kasan_memchr() local
869 ptr = kmalloc(size, GFP_KERNEL | __GFP_ZERO); in kasan_memchr()
870 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kasan_memchr()
874 kasan_ptr_result = memchr(ptr, '1', size + 1)); in kasan_memchr()
876 kfree(ptr); in kasan_memchr()
881 char *ptr; in kasan_memcmp() local
894 ptr = kmalloc(size, GFP_KERNEL | __GFP_ZERO); in kasan_memcmp()
895 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kasan_memcmp()
900 kasan_int_result = memcmp(ptr, arr, size+1)); in kasan_memcmp()
901 kfree(ptr); in kasan_memcmp()
906 char *ptr; in kasan_strings() local
915 ptr = kmalloc(size, GFP_KERNEL | __GFP_ZERO); in kasan_strings()
916 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kasan_strings()
918 kfree(ptr); in kasan_strings()
926 ptr += 16; in kasan_strings()
927 KUNIT_EXPECT_KASAN_FAIL(test, kasan_ptr_result = strchr(ptr, '1')); in kasan_strings()
929 KUNIT_EXPECT_KASAN_FAIL(test, kasan_ptr_result = strrchr(ptr, '1')); in kasan_strings()
931 KUNIT_EXPECT_KASAN_FAIL(test, kasan_int_result = strcmp(ptr, "2")); in kasan_strings()
933 KUNIT_EXPECT_KASAN_FAIL(test, kasan_int_result = strncmp(ptr, "2", 1)); in kasan_strings()
935 KUNIT_EXPECT_KASAN_FAIL(test, kasan_int_result = strlen(ptr)); in kasan_strings()
937 KUNIT_EXPECT_KASAN_FAIL(test, kasan_int_result = strnlen(ptr, 1)); in kasan_strings()
1018 char *ptr; in kmalloc_double_kzfree() local
1021 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_double_kzfree()
1022 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_double_kzfree()
1024 kfree_sensitive(ptr); in kmalloc_double_kzfree()
1025 KUNIT_EXPECT_KASAN_FAIL(test, kfree_sensitive(ptr)); in kmalloc_double_kzfree()
1052 char *ptr; in match_all_not_assigned() local
1060 ptr = kmalloc(size, GFP_KERNEL); in match_all_not_assigned()
1061 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in match_all_not_assigned()
1062 KUNIT_EXPECT_GE(test, (u8)get_tag(ptr), (u8)KASAN_TAG_MIN); in match_all_not_assigned()
1063 KUNIT_EXPECT_LT(test, (u8)get_tag(ptr), (u8)KASAN_TAG_KERNEL); in match_all_not_assigned()
1064 kfree(ptr); in match_all_not_assigned()
1070 ptr = page_address(pages); in match_all_not_assigned()
1071 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in match_all_not_assigned()
1072 KUNIT_EXPECT_GE(test, (u8)get_tag(ptr), (u8)KASAN_TAG_MIN); in match_all_not_assigned()
1073 KUNIT_EXPECT_LT(test, (u8)get_tag(ptr), (u8)KASAN_TAG_KERNEL); in match_all_not_assigned()
1074 free_pages((unsigned long)ptr, order); in match_all_not_assigned()
1081 char *ptr; in match_all_ptr_tag() local
1086 ptr = kmalloc(128, GFP_KERNEL); in match_all_ptr_tag()
1087 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in match_all_ptr_tag()
1090 tag = get_tag(ptr); in match_all_ptr_tag()
1094 ptr = set_tag(ptr, KASAN_TAG_KERNEL); in match_all_ptr_tag()
1097 *ptr = 0; in match_all_ptr_tag()
1100 ptr = set_tag(ptr, tag); in match_all_ptr_tag()
1101 kfree(ptr); in match_all_ptr_tag()
1107 char *ptr; in match_all_mem_tag() local
1112 ptr = kmalloc(128, GFP_KERNEL); in match_all_mem_tag()
1113 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in match_all_mem_tag()
1114 KUNIT_EXPECT_NE(test, (u8)get_tag(ptr), (u8)KASAN_TAG_KERNEL); in match_all_mem_tag()
1118 if (tag == get_tag(ptr)) in match_all_mem_tag()
1122 kasan_poison(ptr, KASAN_GRANULE_SIZE, (u8)tag, false); in match_all_mem_tag()
1125 KUNIT_EXPECT_KASAN_FAIL(test, *ptr = 0); in match_all_mem_tag()
1129 kasan_poison(ptr, KASAN_GRANULE_SIZE, get_tag(ptr), false); in match_all_mem_tag()
1130 kfree(ptr); in match_all_mem_tag()