[sr-dev] git:tmp/valgrind:557251cc: malloc_test: new function that over/underflows

Camille Oudot camille.oudot at orange.com
Tue Feb 28 20:29:59 CET 2017


Module: kamailio
Branch: tmp/valgrind
Commit: 557251cc19f600a2d4c48f8537cbf2fedaa5ca8d
URL: https://github.com/kamailio/kamailio/commit/557251cc19f600a2d4c48f8537cbf2fedaa5ca8d

Author: Camille Oudot <camille.oudot at orange.com>
Committer: Camille Oudot <camille.oudot at orange.com>
Date: 2017-02-28T20:30:21+01:00

malloc_test: new function that over/underflows

---

Modified: src/modules/malloc_test/malloc_test.c

---

Diff:  https://github.com/kamailio/kamailio/commit/557251cc19f600a2d4c48f8537cbf2fedaa5ca8d.diff
Patch: https://github.com/kamailio/kamailio/commit/557251cc19f600a2d4c48f8537cbf2fedaa5ca8d.patch

---

diff --git a/src/modules/malloc_test/malloc_test.c b/src/modules/malloc_test/malloc_test.c
index ff5eb87..9b6bd73 100644
--- a/src/modules/malloc_test/malloc_test.c
+++ b/src/modules/malloc_test/malloc_test.c
@@ -39,6 +39,7 @@ MODULE_VERSION
 
 static int mt_mem_alloc_f(struct sip_msg*, char*,char*);
 static int mt_mem_free_f(struct sip_msg*, char*,char*);
+static int mt_pkg_overflow_f(struct sip_msg*, char*,char*);
 static int mod_init(void);
 static void mod_destroy(void);
 
@@ -48,6 +49,8 @@ static cmd_export_t cmds[]={
 		REQUEST_ROUTE|ONREPLY_ROUTE|FAILURE_ROUTE|BRANCH_ROUTE|ONSEND_ROUTE},
 	{"mt_mem_free", mt_mem_free_f, 1, fixup_var_int_1,
 		REQUEST_ROUTE|ONREPLY_ROUTE|FAILURE_ROUTE|BRANCH_ROUTE|ONSEND_ROUTE},
+	{"mt_pkg_overflow", mt_pkg_overflow_f, 0, 0,
+		REQUEST_ROUTE|ONREPLY_ROUTE|FAILURE_ROUTE|BRANCH_ROUTE|ONSEND_ROUTE},
 	{0, 0, 0, 0, 0}
 };
 
@@ -672,6 +675,25 @@ static int mt_mem_free_f(struct sip_msg* msg, char* sz, char* foo)
 	return (freed==0)?1:freed;
 }
 
+static int mt_pkg_overflow_f(struct sip_msg* msg, char *p1,char *p2) {
+	int i;
+	unsigned long *a;
+
+	a = pkg_malloc(1024 * sizeof(unsigned long));
+
+	if (!a) {
+		LM_ERR("no more pkg\n");
+		return -1;
+	}
+
+	*(a - 1) = 0xdeadbeef;
+	*(a + 1024) = 0xdeadc0de;
+	for (i = 0 ; i < 1024; i++) {
+		a[i] = (long)i;
+	}
+
+	return 1;
+}
 
 
 /* RPC exports: */




More information about the sr-dev mailing list