33 	size_t size = 123;  in kmalloc_oob_right()  local
36 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_right()
42 	ptr[size] = 'x';  in kmalloc_oob_right()
49 	size_t size = 15;  in kmalloc_oob_left()  local
52 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_left()
65 	size_t size = 4096;  in kmalloc_node_oob_right()  local
68 	ptr = kmalloc_node(size, GFP_KERNEL, 0);  in kmalloc_node_oob_right()
74 	ptr[size] = 0;  in kmalloc_node_oob_right()
82 	size_t size = KMALLOC_MAX_CACHE_SIZE + 10;  in kmalloc_pagealloc_oob_right()  local
88 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_pagealloc_oob_right()
94 	ptr[size] = 0;  in kmalloc_pagealloc_oob_right()
101 	size_t size = KMALLOC_MAX_CACHE_SIZE + 10;  in kmalloc_pagealloc_uaf()  local
104 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_pagealloc_uaf()
117 	size_t size = KMALLOC_MAX_CACHE_SIZE + 10;  in kmalloc_pagealloc_invalid_free()  local
120 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_pagealloc_invalid_free()
133 	size_t size = KMALLOC_MAX_CACHE_SIZE - 256;  in kmalloc_large_oob_right()  local
138 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_large_oob_right()
144 	ptr[size] = 0;  in kmalloc_large_oob_right()
208 	size_t size = 8;  in kmalloc_oob_memset_2()  local
211 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_2()
224 	size_t size = 8;  in kmalloc_oob_memset_4()  local
227 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_4()
241 	size_t size = 8;  in kmalloc_oob_memset_8()  local
244 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_8()
257 	size_t size = 16;  in kmalloc_oob_memset_16()  local
260 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_16()
273 	size_t size = 666;  in kmalloc_oob_in_memset()  local
276 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_in_memset()
282 	memset(ptr, 0, size+5);  in kmalloc_oob_in_memset()
289 	size_t size = 10;  in kmalloc_uaf()  local
292 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_uaf()
305 	size_t size = 33;  in kmalloc_uaf_memset()  local
308 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_uaf_memset()
315 	memset(ptr, 0, size);  in kmalloc_uaf_memset()
321 	size_t size = 43;  in kmalloc_uaf2()  local
324 	ptr1 = kmalloc(size, GFP_KERNEL);  in kmalloc_uaf2()
331 	ptr2 = kmalloc(size, GFP_KERNEL);  in kmalloc_uaf2()
346 	size_t size = 200;  in kmem_cache_oob()  local
348 						size, 0,  in kmem_cache_oob()
362 	*p = p[size];  in kmem_cache_oob()
371 	size_t size = 200;  in memcg_accounted_kmem_cache()  local
374 	cache = kmem_cache_create("test_cache", size, 0, SLAB_ACCOUNT, NULL);  in memcg_accounted_kmem_cache()
422 	size_t size = 123, real_size;  in ksize_unpoisons_memory()  local
425 	ptr = kmalloc(size, GFP_KERNEL);  in ksize_unpoisons_memory()
432 	ptr[size] = 'x';  in ksize_unpoisons_memory()
442 	size_t size = 10;  in copy_user_test()  local
445 	kmem = kmalloc(size, GFP_KERNEL);  in copy_user_test()
459 	unused = copy_from_user(kmem, usermem, size + 1);  in copy_user_test()
462 	unused = copy_to_user(usermem, kmem, size + 1);  in copy_user_test()
465 	unused = __copy_from_user(kmem, usermem, size + 1);  in copy_user_test()
468 	unused = __copy_to_user(usermem, kmem, size + 1);  in copy_user_test()
471 	unused = __copy_from_user_inatomic(kmem, usermem, size + 1);  in copy_user_test()
474 	unused = __copy_to_user_inatomic(usermem, kmem, size + 1);  in copy_user_test()
477 	unused = strncpy_from_user(kmem, usermem, size + 1);  in copy_user_test()
529 	size_t size = 200;  in kmem_cache_double_free()  local
532 	cache = kmem_cache_create("test_cache", size, 0, 0, NULL);  in kmem_cache_double_free()
553 	size_t size = 200;  in kmem_cache_invalid_free()  local
556 	cache = kmem_cache_create("test_cache", size, 0, SLAB_TYPESAFE_BY_RCU,  in kmem_cache_invalid_free()