)]}' { "log": [ { "commit": "55a89a48f41da349735627c2ae8985895955b1ca", "tree": "c946bd9b7e1353787f278e5face49cae5d8f238d", "parents": [ "03a16d3db7c5fff733d28250212821ec2ff5eccd" ], "author": { "name": "Christopher Ferris", "email": "cferris@google.com", "time": "Thu Apr 07 17:14:53 2016 -0700" }, "committer": { "name": "Christopher Ferris", "email": "cferris@google.com", "time": "Tue Apr 12 15:36:53 2016 -0700" }, "message": "Small refactor.\n\n- Move all ScopedDisableDebugCalls into the debug_XXX calls. This avoids\nany issues that might arise where every part of the code needs to properly\nguard anything that might allocate. Instead everything is already guarded.\n- Add a pointer to debug_data in all of the XXData classes. This avoids\ncalling individual functions passing in the debug_data pointer.\n- Flip the NO_HEADER_OPTIONS to an explicit HEADER_OPTIONS list since fewer\noptions actually require a header.\n- Move the extern of g_debug to the DebugData.h header.\n\nChange-Id: Ia213a391b4a44d9ce122a709d09fe4f1b5426f36\n" }, { "commit": "7993b80f894db20af4d1d154221c42fea6171a3d", "tree": "fc99d36000a8f0853224d75296d96509a730ee05", "parents": [ "50647711ebaf2360aca05cc94a2fdf431c1a153e" ], "author": { "name": "Christopher Ferris", "email": "cferris@google.com", "time": "Thu Jan 28 18:35:05 2016 -0800" }, "committer": { "name": "Christopher Ferris", "email": "cferris@google.com", "time": "Fri Jan 29 15:19:22 2016 -0800" }, "message": "Add better free tracking.\n\nIncluded in this change:\n\n- Change the tag when a pointer is freed so it\u0027s easy to detect if\n an already freed pointer is being used.\n- Move the free backtrace out of the header. This backtrace is only\n used under only some circumstances, so no need to allocate space\n in all headers for it.\n- Add new option free_track_backtrace_num_frames to specify how many\n frames to record when the free occurs. This removes the dependency\n on the backtrace option to get backtraces.\n\nBug: 26739265\nChange-Id: I76f5209507dcf46af67ada162a7cb2bf282116f2\n" }, { "commit": "63860cb8fd1adf3f679b9b4ad876323a8d65cd9d", "tree": "25aeae686d92efcb5e08a54e8cba1e8c31efe33b", "parents": [ "ad9c3f34f762ed45cce5dbb93218124ed31f6873" ], "author": { "name": "Christopher Ferris", "email": "cferris@google.com", "time": "Mon Nov 16 17:30:32 2015 -0800" }, "committer": { "name": "Christopher Ferris", "email": "cferris@google.com", "time": "Mon Jan 25 10:54:21 2016 -0800" }, "message": "Malloc debug rewrite.\n\nThe major components of the rewrite:\n\n- Completely remove the qemu shared library code. Nobody was using it\n and it appears to have broken at some point.\n- Adds the ability to enable/disable different options independently.\n- Adds a new option that can enable the backtrace on alloc/free when\n a process gets a specific signal.\n- Adds a new way to enable malloc debug. If a special property is\n set, and the process has an environment variable set, then debug\n malloc will be enabled. This allows something that might be\n a derivative of app_process to be started with an environment variable\n being enabled.\n- get_malloc_leak_info() used to return one element for each pointer that\n had the exact same backtrace. The new version returns information for\n every one of the pointers with same backtrace. It turns out ddms already\n automatically coalesces these, so the old method simply hid the fact\n that there where multiple pointers with the same amount of backtrace.\n- Moved all of the malloc debug specific code into the library.\n Nothing related to the malloc debug data structures remains in libc.\n- Removed the calls to the debug malloc cleanup routine. Instead, I\n added an atexit call with the debug malloc cleanup routine. This gets\n around most problems related to the timing of doing the cleanup.\n\nThe new properties and environment variables:\n\nlibc.debug.malloc.options\n Set by option name (such as \"backtrace\"). Setting this to a bad value\n will cause a usage statement to be printed to the log.\n\nlibc.debug.malloc.program\n Same as before. If this is set, then only the program named will\n be launched with malloc debug enabled. This is not a complete match,\n but if any part of the property is in the program name, malloc debug is\n enabled.\n\nlibc.debug.malloc.env_enabled\n If set, then malloc debug is only enabled if the running process has the\n environment variable LIBC_DEBUG_MALLOC_ENABLE set.\n\nBug: 19145921\n\nChange-Id: I7b0e58cc85cc6d4118173fe1f8627a391b64c0d7\n" }, { "commit": "32bf43f44a4c0ccf04c6a60094aff574d50ecfe7", "tree": "9f4ee4ace8e764e5ee7dc5ee285d58d26d0d0be1", "parents": [ "a992004c9edf4db0c11aae8610cce6ebf13d53b4" ], "author": { "name": "Elliott Hughes", "email": "enh@google.com", "time": "Tue Sep 01 16:01:50 2015 -0700" }, "committer": { "name": "Elliott Hughes", "email": "enh@google.com", "time": "Tue Sep 01 16:01:50 2015 -0700" }, "message": "Rename debug_stacktrace to debug_backtrace.\n\nAll the functions say \"backtrace\", so it\u0027s weird that the filename\nsays \"stacktrace\".\n\nChange-Id: I1c88a56c1f9adb1bae4615edc8af3e73db270a8c\n" }, { "commit": "35b621c5f4c79959cd36fec0153c2c9c43ebe5f0", "tree": "016d232e99a12943587357bf8b10a3d25cb98b0e", "parents": [ "a0151cbfbaa37965dbcd188a55a78d3ad4802b9b" ], "author": { "name": "Elliott Hughes", "email": "enh@google.com", "time": "Mon Jan 28 16:27:36 2013 -0800" }, "committer": { "name": "Elliott Hughes", "email": "enh@google.com", "time": "Tue Jan 29 09:56:31 2013 -0800" }, "message": "Don\u0027t collect useless stack frames; do demangle C++ symbols.\n\nPreviously, we\u0027d collect every stack frame and then throw some away\nwhen we came to log them. This meant that stack traces were effectively\nshorter than the buffers that had been allocated for them. This patch\nonly stores frames we\u0027ll actually output.\n\nAlso dynamically call the C++ demangler so we don\u0027t have to try to\nread mangled names. Because no one knows the mangling of operator new[]\nfor int arrays off the top of their head.\n\nBug: 7291287\nChange-Id: I42b022fd7cd61675d05171de4c3b2704d058ef2a\n" }, { "commit": "239e7a0756fddf3698bf72cab10d7f382421090b", "tree": "6ec3636787883bf1b20bd490cc011110b625d3fe", "parents": [ "6a94cb748bf63278c3271b0ab610061b0dc6f04a" ], "author": { "name": "Elliott Hughes", "email": "enh@google.com", "time": "Fri Jan 25 17:13:45 2013 -0800" }, "committer": { "name": "Elliott Hughes", "email": "enh@google.com", "time": "Fri Jan 25 17:13:45 2013 -0800" }, "message": "More debug malloc fixes.\n\nInclude the leaky executable\u0027s name in the log output. Fix the \"sh\" test.\nUse uintptr_t instead of intptr_t.\n\nAlso fix debug formatting of NULL with %s.\n\nBug: 7291287\nChange-Id: I015bf341cd48d43a247173612e6ccb1bf1243d53\n" }, { "commit": "1e980b6bc8315d00a07312b25486531247abd98c", "tree": "539f2c0c63fca27d5eb6ba184d658bb0e11a32d9", "parents": [ "e4ca88d9fa8757e4fb4056fcafa5bc15b406a2fd" ], "author": { "name": "Elliott Hughes", "email": "enh@google.com", "time": "Thu Jan 17 18:36:06 2013 -0800" }, "committer": { "name": "Elliott Hughes", "email": "enh@google.com", "time": "Fri Jan 18 22:20:06 2013 -0800" }, "message": "Fix the duplication in the debugging code.\n\nWe had two copies of the backtrace code, and two copies of the\nlibcorkscrew /proc/pid/maps code. This patch gets us down to one.\n\nWe also had hacks so we could log in the malloc debugging code.\nThis patch pulls the non-allocating \"printf\" code out of the\ndynamic linker so everyone can share.\n\nThis patch also makes the leak diagnostics easier to read, and\nmakes it possible to paste them directly into the \u0027stack\u0027 tool (by\nusing relative PCs).\n\nThis patch also fixes the stdio standard stream leak that was\ncausing a leak warning every time tf_daemon ran.\n\nBug: 7291287\nChange-Id: I66e4083ac2c5606c8d2737cb45c8ac8a32c7cfe8\n" }, { "commit": "c4d1fecc105063e68a5090a6900b63d1b9a24287", "tree": "93dad687b245a981d3c47ede05b43345b86202fe", "parents": [ "9dfaa63a1c0d1b8e75dd9d7077a8103a19821fa9" ], "author": { "name": "Elliott Hughes", "email": "enh@google.com", "time": "Tue Aug 28 14:15:04 2012 -0700" }, "committer": { "name": "Elliott Hughes", "email": "enh@google.com", "time": "Wed Aug 29 12:08:13 2012 -0700" }, "message": "Clean up warnings in the malloc_debug_* files.\n\nAlso clean up cpplint.py-detected lint.\n\nChange-Id: Ia18e89c4c6878764f8d7ed34b8247e7a8d8fe88b\n" }, { "commit": "e1dd3c287ba836281de0197670018bd9bbfbd62b", "tree": "a5138cb21c8de6be4ea4be61e44f95fb8bcb776e", "parents": [ "7d2e24eb167b6257f7935c7bd2023a708704ca1a" ], "author": { "name": "Iliyan Malchev", "email": "malchev@google.com", "time": "Tue May 29 14:22:42 2012 -0700" }, "committer": { "name": "Iliyan Malchev", "email": "malchev@google.com", "time": "Fri Jun 01 15:54:34 2012 -0700" }, "message": "bionic: import heaptracker as chk_malloc\n\nThis patch is a rewrite of libc.debug.malloc \u003d 10 (chk_malloc). It provides\nthe same features as the original (poison freed memory, detect heap overruns\nand underruns), except that it provides more debugging information whenever it\ndetects a problem.\n\nIn addition to the original features, the new chk_malloc() implementation\ndetects multiple frees within a given range of the last N allocations, N being\nconfigurable via the system property libc.debug.malloc.backlog.\n\nFinally, this patch keeps track of all outstanding memory allocations. On\nprogram exit, we walk that list and report each outstanding allocation.\n\n(There is support (not enabled) for a scanner thread periodically walks over\nthe list of outstanding allocations as well as the backlog of recently-freed\nallocations, checking for heap-usage errors.)\n\nFeature overview:\n\n 1) memory leaks\n 2) multiple frees\n 3) use after free\n 4) overrun\n\nImplementation:\n\n-- for each allocation, there is a:\n 1) stack trace at the time the allocation is made\n 2) if the memory is freed, there is also a stack trace at the point\n 3) a front and rear guard (fence)\n 4) the stack traces are kept together with the allocation\n\n-- the following lists and maintained\n\n 1) all outstanding memory allocations\n 3) a backlog of allocations what are freed; when you call free(), instead of\n actually freed, the allocation is moved to this backlog;\n 4) when the backlog of allocations gets full, the oldest entry gets evicted\n from it; at that point, the allocation is checked for overruns or\n use-after-free errors, and then actually freed.\n 5) when the program exits, the list of outstanding allocations and the\n backlog are inspected for errors, then freed;\n\nTo use this, set the following system properties before running the process or\nprocesses you want to inspect:\n\nlibc.malloc.debug.backlog # defaults to 100\nlibc.malloc.debug 10\n\nWhen a problem is detected, you will see the following on logcat for a multiple\nfree:\n\nE/libc ( 7233): +++ ALLOCATION 0x404b9278 SIZE 10 BYTES MULTIPLY FREED!\nE/libc ( 7233): +++ ALLOCATION 0x404b9278 SIZE 10 ALLOCATED HERE:\nE/libc ( 7233): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***\nE/libc ( 7233): #00 pc 0000c35a /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #01 pc 0000c658 /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #02 pc 00016d80 /system/lib/libc.so\nE/libc ( 7233): #03 pc 4009647c /system/bin/malloctest\nE/libc ( 7233): #04 pc 00016f24 /system/lib/libc.so\nE/libc ( 7233): +++ ALLOCATION 0x404b9278 SIZE 10 FIRST FREED HERE:\nE/libc ( 7233): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***\nE/libc ( 7233): #00 pc 0000c35a /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #01 pc 0000c7d2 /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #02 pc 00016d94 /system/lib/libc.so\nE/libc ( 7233): #03 pc 40096490 /system/bin/malloctest\nE/libc ( 7233): #04 pc 00016f24 /system/lib/libc.so\nE/libc ( 7233): +++ ALLOCATION 0x404b9278 SIZE 10 NOW BEING FREED HERE:\nE/libc ( 7233): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***\nE/libc ( 7233): #00 pc 0000c35a /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #01 pc 0000c6ac /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #02 pc 00016d94 /system/lib/libc.so\nE/libc ( 7233): #03 pc 400964a0 /system/bin/malloctest\nE/libc ( 7233): #04 pc 00016f24 /system/lib/libc.so\n\nThe following for a heap overrun and underrun:\n\nE/libc ( 7233): +++ REAR GUARD MISMATCH [10, 11)\nE/libc ( 7233): +++ ALLOCATION 0x404b9198 SIZE 10 HAS A CORRUPTED REAR GUARD\nE/libc ( 7233): +++ ALLOCATION 0x404b9198 SIZE 10 ALLOCATED HERE:\nE/libc ( 7233): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***\nE/libc ( 7233): #00 pc 0000c35a /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #01 pc 0000c658 /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #02 pc 00016d80 /system/lib/libc.so\nE/libc ( 7233): #03 pc 40096438 /system/bin/malloctest\nE/libc ( 7233): #04 pc 00016f24 /system/lib/libc.so\nE/libc ( 7233): +++ ALLOCATION 0x404b9198 SIZE 10 FREED HERE:\nE/libc ( 7233): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***\nE/libc ( 7233): #00 pc 0000c35a /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #01 pc 0000c7d2 /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #02 pc 00016d94 /system/lib/libc.so\nE/libc ( 7233): #03 pc 40096462 /system/bin/malloctest\nE/libc ( 7233): #04 pc 00016f24 /system/lib/libc.so\nE/libc ( 7233): +++ ALLOCATION 0x404b9358 SIZE 10 HAS A CORRUPTED FRONT GUARD\nE/libc ( 7233): +++ ALLOCATION 0x404b9358 SIZE 10 ALLOCATED HERE:\nE/libc ( 7233): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***\nE/libc ( 7233): #00 pc 0000c35a /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #01 pc 0000c658 /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #02 pc 00016d80 /system/lib/libc.so\nE/libc ( 7233): #03 pc 400964ba /system/bin/malloctest\nE/libc ( 7233): #04 pc 00016f24 /system/lib/libc.so\nE/libc ( 7233): +++ ALLOCATION 0x404b9358 SIZE 10 FREED HERE:\nE/libc ( 7233): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***\nE/libc ( 7233): #00 pc 0000c35a /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #01 pc 0000c7d2 /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #02 pc 00016d94 /system/lib/libc.so\nE/libc ( 7233): #03 pc 400964e4 /system/bin/malloctest\nE/libc ( 7233): #04 pc 00016f24 /system/lib/libc.so\n\nThe following for a memory leak:\n\nE/libc ( 7233): +++ THERE ARE 1 LEAKED ALLOCATIONS\nE/libc ( 7233): +++ DELETING 4096 BYTES OF LEAKED MEMORY AT 0x404b95e8 (1 REMAINING)\nE/libc ( 7233): +++ ALLOCATION 0x404b95e8 SIZE 4096 ALLOCATED HERE:\nE/libc ( 7233): *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***\nE/libc ( 7233): #00 pc 0000c35a /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #01 pc 0000c658 /system/lib/libc_malloc_debug_leak.so\nE/libc ( 7233): #02 pc 00016d80 /system/lib/libc.so\nE/libc ( 7233): #03 pc 0001bc94 /system/lib/libc.so\nE/libc ( 7233): #04 pc 0001edf6 /system/lib/libc.so\nE/libc ( 7233): #05 pc 0001b80a /system/lib/libc.so\nE/libc ( 7233): #06 pc 0001c086 /system/lib/libc.so\nE/libc ( 7233): #07 pc 40096402 /system/bin/malloctest\nE/libc ( 7233): #08 pc 00016f24 /system/lib/libc.so\n\nChange-Id: Ic440e9d05a01e2ea86b25e8998714e88bc2d16e0\nSigned-off-by: Iliyan Malchev \u003cmalchev@google.com\u003e\n" } ] }