Lines Matching refs:ptr
122 char *ptr; in kmalloc_oob_right() local
125 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_right()
126 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_right()
133 KUNIT_EXPECT_KASAN_FAIL(test, ptr[size] = 'x'); in kmalloc_oob_right()
139 KUNIT_EXPECT_KASAN_FAIL(test, ptr[size + 5] = 'y'); in kmalloc_oob_right()
142 KUNIT_EXPECT_KASAN_FAIL(test, ptr[0] = in kmalloc_oob_right()
143 ptr[size + KASAN_GRANULE_SIZE + 5]); in kmalloc_oob_right()
145 kfree(ptr); in kmalloc_oob_right()
150 char *ptr; in kmalloc_oob_left() local
153 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_left()
154 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_left()
156 KUNIT_EXPECT_KASAN_FAIL(test, *ptr = *(ptr - 1)); in kmalloc_oob_left()
157 kfree(ptr); in kmalloc_oob_left()
162 char *ptr; in kmalloc_node_oob_right() local
165 ptr = kmalloc_node(size, GFP_KERNEL, 0); in kmalloc_node_oob_right()
166 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_node_oob_right()
168 KUNIT_EXPECT_KASAN_FAIL(test, ptr[0] = ptr[size]); in kmalloc_node_oob_right()
169 kfree(ptr); in kmalloc_node_oob_right()
180 char *ptr; in kmalloc_pagealloc_oob_right() local
185 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_pagealloc_oob_right()
186 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_pagealloc_oob_right()
188 KUNIT_EXPECT_KASAN_FAIL(test, ptr[size + OOB_TAG_OFF] = 0); in kmalloc_pagealloc_oob_right()
190 kfree(ptr); in kmalloc_pagealloc_oob_right()
195 char *ptr; in kmalloc_pagealloc_uaf() local
200 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_pagealloc_uaf()
201 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_pagealloc_uaf()
202 kfree(ptr); in kmalloc_pagealloc_uaf()
204 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[0]); in kmalloc_pagealloc_uaf()
209 char *ptr; in kmalloc_pagealloc_invalid_free() local
214 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_pagealloc_invalid_free()
215 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_pagealloc_invalid_free()
217 KUNIT_EXPECT_KASAN_FAIL(test, kfree(ptr + 1)); in kmalloc_pagealloc_invalid_free()
222 char *ptr; in pagealloc_oob_right() local
235 ptr = page_address(pages); in pagealloc_oob_right()
236 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in pagealloc_oob_right()
238 KUNIT_EXPECT_KASAN_FAIL(test, ptr[0] = ptr[size]); in pagealloc_oob_right()
239 free_pages((unsigned long)ptr, order); in pagealloc_oob_right()
244 char *ptr; in pagealloc_uaf() local
249 ptr = page_address(pages); in pagealloc_uaf()
250 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in pagealloc_uaf()
251 free_pages((unsigned long)ptr, order); in pagealloc_uaf()
253 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[0]); in pagealloc_uaf()
258 char *ptr; in kmalloc_large_oob_right() local
265 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_large_oob_right()
266 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_large_oob_right()
268 KUNIT_EXPECT_KASAN_FAIL(test, ptr[size] = 0); in kmalloc_large_oob_right()
269 kfree(ptr); in kmalloc_large_oob_right()
437 char *ptr; in kmalloc_oob_memset_2() local
440 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_memset_2()
441 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_memset_2()
443 KUNIT_EXPECT_KASAN_FAIL(test, memset(ptr + size - 1, 0, 2)); in kmalloc_oob_memset_2()
444 kfree(ptr); in kmalloc_oob_memset_2()
449 char *ptr; in kmalloc_oob_memset_4() local
452 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_memset_4()
453 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_memset_4()
455 KUNIT_EXPECT_KASAN_FAIL(test, memset(ptr + size - 3, 0, 4)); in kmalloc_oob_memset_4()
456 kfree(ptr); in kmalloc_oob_memset_4()
461 char *ptr; in kmalloc_oob_memset_8() local
464 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_memset_8()
465 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_memset_8()
467 KUNIT_EXPECT_KASAN_FAIL(test, memset(ptr + size - 7, 0, 8)); in kmalloc_oob_memset_8()
468 kfree(ptr); in kmalloc_oob_memset_8()
473 char *ptr; in kmalloc_oob_memset_16() local
476 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_memset_16()
477 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_memset_16()
479 KUNIT_EXPECT_KASAN_FAIL(test, memset(ptr + size - 15, 0, 16)); in kmalloc_oob_memset_16()
480 kfree(ptr); in kmalloc_oob_memset_16()
485 char *ptr; in kmalloc_oob_in_memset() local
488 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_oob_in_memset()
489 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_oob_in_memset()
492 memset(ptr, 0, size + KASAN_GRANULE_SIZE)); in kmalloc_oob_in_memset()
493 kfree(ptr); in kmalloc_oob_in_memset()
498 char *ptr; in kmalloc_memmove_invalid_size() local
509 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_memmove_invalid_size()
510 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_memmove_invalid_size()
512 memset((char *)ptr, 0, 64); in kmalloc_memmove_invalid_size()
514 memmove((char *)ptr, (char *)ptr + 4, invalid_size)); in kmalloc_memmove_invalid_size()
515 kfree(ptr); in kmalloc_memmove_invalid_size()
520 char *ptr; in kmalloc_uaf() local
523 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_uaf()
524 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_uaf()
526 kfree(ptr); in kmalloc_uaf()
527 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[8]); in kmalloc_uaf()
532 char *ptr; in kmalloc_uaf_memset() local
541 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_uaf_memset()
542 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_uaf_memset()
544 kfree(ptr); in kmalloc_uaf_memset()
545 KUNIT_EXPECT_KASAN_FAIL(test, memset(ptr, 0, size)); in kmalloc_uaf_memset()
580 char *ptr; in kfree_via_page() local
585 ptr = kmalloc(size, GFP_KERNEL); in kfree_via_page()
586 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kfree_via_page()
588 page = virt_to_page(ptr); in kfree_via_page()
589 offset = offset_in_page(ptr); in kfree_via_page()
595 char *ptr; in kfree_via_phys() local
599 ptr = kmalloc(size, GFP_KERNEL); in kfree_via_phys()
600 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kfree_via_phys()
602 phys = virt_to_phys(ptr); in kfree_via_phys()
708 char *ptr; in ksize_unpoisons_memory() local
711 ptr = kmalloc(size, GFP_KERNEL); in ksize_unpoisons_memory()
712 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in ksize_unpoisons_memory()
713 real_size = ksize(ptr); in ksize_unpoisons_memory()
716 ptr[size] = 'x'; in ksize_unpoisons_memory()
719 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[real_size]); in ksize_unpoisons_memory()
721 kfree(ptr); in ksize_unpoisons_memory()
730 char *ptr; in ksize_uaf() local
733 ptr = kmalloc(size, GFP_KERNEL); in ksize_uaf()
734 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in ksize_uaf()
735 kfree(ptr); in ksize_uaf()
737 KUNIT_EXPECT_KASAN_FAIL(test, ksize(ptr)); in ksize_uaf()
738 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[0]); in ksize_uaf()
739 KUNIT_EXPECT_KASAN_FAIL(test, ((volatile char *)ptr)[size]); in ksize_uaf()
836 char *ptr; in kasan_memchr() local
848 ptr = kmalloc(size, GFP_KERNEL | __GFP_ZERO); in kasan_memchr()
849 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kasan_memchr()
852 kasan_ptr_result = memchr(ptr, '1', size + 1)); in kasan_memchr()
854 kfree(ptr); in kasan_memchr()
859 char *ptr; in kasan_memcmp() local
872 ptr = kmalloc(size, GFP_KERNEL | __GFP_ZERO); in kasan_memcmp()
873 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kasan_memcmp()
877 kasan_int_result = memcmp(ptr, arr, size+1)); in kasan_memcmp()
878 kfree(ptr); in kasan_memcmp()
883 char *ptr; in kasan_strings() local
892 ptr = kmalloc(size, GFP_KERNEL | __GFP_ZERO); in kasan_strings()
893 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kasan_strings()
895 kfree(ptr); in kasan_strings()
903 ptr += 16; in kasan_strings()
904 KUNIT_EXPECT_KASAN_FAIL(test, kasan_ptr_result = strchr(ptr, '1')); in kasan_strings()
906 KUNIT_EXPECT_KASAN_FAIL(test, kasan_ptr_result = strrchr(ptr, '1')); in kasan_strings()
908 KUNIT_EXPECT_KASAN_FAIL(test, kasan_int_result = strcmp(ptr, "2")); in kasan_strings()
910 KUNIT_EXPECT_KASAN_FAIL(test, kasan_int_result = strncmp(ptr, "2", 1)); in kasan_strings()
912 KUNIT_EXPECT_KASAN_FAIL(test, kasan_int_result = strlen(ptr)); in kasan_strings()
914 KUNIT_EXPECT_KASAN_FAIL(test, kasan_int_result = strnlen(ptr, 1)); in kasan_strings()
995 char *ptr; in kmalloc_double_kzfree() local
998 ptr = kmalloc(size, GFP_KERNEL); in kmalloc_double_kzfree()
999 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in kmalloc_double_kzfree()
1001 kfree_sensitive(ptr); in kmalloc_double_kzfree()
1002 KUNIT_EXPECT_KASAN_FAIL(test, kfree_sensitive(ptr)); in kmalloc_double_kzfree()
1029 char *ptr; in match_all_not_assigned() local
1037 ptr = kmalloc(size, GFP_KERNEL); in match_all_not_assigned()
1038 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in match_all_not_assigned()
1039 KUNIT_EXPECT_GE(test, (u8)get_tag(ptr), (u8)KASAN_TAG_MIN); in match_all_not_assigned()
1040 KUNIT_EXPECT_LT(test, (u8)get_tag(ptr), (u8)KASAN_TAG_KERNEL); in match_all_not_assigned()
1041 kfree(ptr); in match_all_not_assigned()
1047 ptr = page_address(pages); in match_all_not_assigned()
1048 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in match_all_not_assigned()
1049 KUNIT_EXPECT_GE(test, (u8)get_tag(ptr), (u8)KASAN_TAG_MIN); in match_all_not_assigned()
1050 KUNIT_EXPECT_LT(test, (u8)get_tag(ptr), (u8)KASAN_TAG_KERNEL); in match_all_not_assigned()
1051 free_pages((unsigned long)ptr, order); in match_all_not_assigned()
1058 char *ptr; in match_all_ptr_tag() local
1063 ptr = kmalloc(128, GFP_KERNEL); in match_all_ptr_tag()
1064 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in match_all_ptr_tag()
1067 tag = get_tag(ptr); in match_all_ptr_tag()
1071 ptr = set_tag(ptr, KASAN_TAG_KERNEL); in match_all_ptr_tag()
1074 *ptr = 0; in match_all_ptr_tag()
1077 ptr = set_tag(ptr, tag); in match_all_ptr_tag()
1078 kfree(ptr); in match_all_ptr_tag()
1084 char *ptr; in match_all_mem_tag() local
1089 ptr = kmalloc(128, GFP_KERNEL); in match_all_mem_tag()
1090 KUNIT_ASSERT_NOT_ERR_OR_NULL(test, ptr); in match_all_mem_tag()
1091 KUNIT_EXPECT_NE(test, (u8)get_tag(ptr), (u8)KASAN_TAG_KERNEL); in match_all_mem_tag()
1095 if (tag == get_tag(ptr)) in match_all_mem_tag()
1099 kasan_poison(ptr, KASAN_GRANULE_SIZE, (u8)tag, false); in match_all_mem_tag()
1102 KUNIT_EXPECT_KASAN_FAIL(test, *ptr = 0); in match_all_mem_tag()
1106 kasan_poison(ptr, KASAN_GRANULE_SIZE, get_tag(ptr), false); in match_all_mem_tag()
1107 kfree(ptr); in match_all_mem_tag()