Lines Matching refs:ptr2

315 	char *ptr1, *ptr2;  in krealloc_more_oob_helper()  local
324 ptr2 = krealloc(ptr1, size2, GFP_KERNEL); in krealloc_more_oob_helper()
325 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr2); in krealloc_more_oob_helper()
328 OPTIMIZER_HIDE_VAR(ptr2); in krealloc_more_oob_helper()
331 ptr2[size1 - 1] = 'x'; in krealloc_more_oob_helper()
332 ptr2[size1] = 'x'; in krealloc_more_oob_helper()
333 ptr2[middle] = 'x'; in krealloc_more_oob_helper()
334 ptr2[size2 - 1] = 'x'; in krealloc_more_oob_helper()
338 KUNIT_EXPECT_KASAN_FAIL(test, ptr2[size2] = 'x'); in krealloc_more_oob_helper()
342 ptr2[round_up(size2, KASAN_GRANULE_SIZE)] = 'x'); in krealloc_more_oob_helper()
344 kfree(ptr2); in krealloc_more_oob_helper()
350 char *ptr1, *ptr2; in krealloc_less_oob_helper() local
359 ptr2 = krealloc(ptr1, size2, GFP_KERNEL); in krealloc_less_oob_helper()
360 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr2); in krealloc_less_oob_helper()
363 OPTIMIZER_HIDE_VAR(ptr2); in krealloc_less_oob_helper()
366 ptr2[size2 - 1] = 'x'; in krealloc_less_oob_helper()
370 KUNIT_EXPECT_KASAN_FAIL(test, ptr2[size2] = 'x'); in krealloc_less_oob_helper()
374 ptr2[round_up(size2, KASAN_GRANULE_SIZE)] = 'x'); in krealloc_less_oob_helper()
384 KUNIT_EXPECT_KASAN_FAIL(test, ptr2[middle] = 'x'); in krealloc_less_oob_helper()
385 KUNIT_EXPECT_KASAN_FAIL(test, ptr2[size1 - 1] = 'x'); in krealloc_less_oob_helper()
386 KUNIT_EXPECT_KASAN_FAIL(test, ptr2[size1] = 'x'); in krealloc_less_oob_helper()
388 kfree(ptr2); in krealloc_less_oob_helper()
419 char *ptr1, *ptr2; in krealloc_uaf() local
427 KUNIT_EXPECT_KASAN_FAIL(test, ptr2 = krealloc(ptr1, size2, GFP_KERNEL)); in krealloc_uaf()
428 KUNIT_ASSERT_NULL(test, ptr2); in krealloc_uaf()
436 } *ptr1, *ptr2; in kmalloc_oob_16() local
447 ptr2 = kmalloc(sizeof(*ptr2), GFP_KERNEL); in kmalloc_oob_16()
448 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr2); in kmalloc_oob_16()
451 OPTIMIZER_HIDE_VAR(ptr2); in kmalloc_oob_16()
452 KUNIT_EXPECT_KASAN_FAIL(test, *ptr1 = *ptr2); in kmalloc_oob_16()
454 kfree(ptr2); in kmalloc_oob_16()
461 } *ptr1, *ptr2; in kmalloc_uaf_16() local
468 ptr2 = kmalloc(sizeof(*ptr2), GFP_KERNEL); in kmalloc_uaf_16()
469 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr2); in kmalloc_uaf_16()
470 kfree(ptr2); in kmalloc_uaf_16()
472 KUNIT_EXPECT_KASAN_FAIL(test, *ptr1 = *ptr2); in kmalloc_uaf_16()
650 char *ptr1, *ptr2; in kmalloc_uaf2() local
660 ptr2 = kmalloc(size, GFP_KERNEL); in kmalloc_uaf2()
661 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr2); in kmalloc_uaf2()
667 if (!IS_ENABLED(CONFIG_KASAN_GENERIC) && ptr1 == ptr2 && counter++ < 16) { in kmalloc_uaf2()
668 kfree(ptr2); in kmalloc_uaf2()
673 KUNIT_EXPECT_PTR_NE(test, ptr1, ptr2); in kmalloc_uaf2()
675 kfree(ptr2); in kmalloc_uaf2()
684 char *ptr1, *ptr2; in kmalloc_uaf3() local
694 ptr2 = kmalloc(size, GFP_KERNEL); in kmalloc_uaf3()
695 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr2); in kmalloc_uaf3()
696 kfree(ptr2); in kmalloc_uaf3()