2015-06-25 10:07:01 -07:00
|
|
|
// Copyright 2015 The Rust Project Developers. See the COPYRIGHT
|
|
|
|
|
// file at the top-level directory of this distribution and at
|
|
|
|
|
// http://rust-lang.org/COPYRIGHT.
|
|
|
|
|
//
|
|
|
|
|
// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
|
|
|
|
|
// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
|
|
|
|
|
// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
|
|
|
|
|
// option. This file may not be copied, modified, or distributed
|
|
|
|
|
// except according to those terms.
|
|
|
|
|
|
|
|
|
|
#![no_std]
|
2017-09-10 19:59:42 +02:00
|
|
|
#![allow(unused_attributes)]
|
2016-12-29 09:47:34 -08:00
|
|
|
#![deny(warnings)]
|
2015-06-25 10:07:01 -07:00
|
|
|
#![unstable(feature = "alloc_system",
|
|
|
|
|
reason = "this library is unlikely to be stabilized in its current \
|
2015-08-13 13:06:25 -07:00
|
|
|
form or name",
|
2017-10-11 21:25:13 +02:00
|
|
|
issue = "32838")]
|
2017-07-17 09:32:08 -07:00
|
|
|
#![feature(global_allocator)]
|
|
|
|
|
#![feature(allocator_api)]
|
|
|
|
|
#![feature(core_intrinsics)]
|
2015-06-25 10:07:01 -07:00
|
|
|
#![feature(staged_api)]
|
2017-09-10 19:59:42 +02:00
|
|
|
#![feature(rustc_attrs)]
|
2017-12-31 13:21:46 +01:00
|
|
|
#![cfg_attr(any(unix, target_os = "cloudabi", target_os = "redox"), feature(libc))]
|
2017-09-10 19:59:42 +02:00
|
|
|
#![rustc_alloc_kind = "lib"]
|
2015-06-25 10:07:01 -07:00
|
|
|
|
|
|
|
|
// The minimum alignment guaranteed by the architecture. This value is used to
|
2017-11-20 15:55:31 +01:00
|
|
|
// add fast paths for low alignment values.
|
2015-12-02 21:03:21 -05:00
|
|
|
#[cfg(all(any(target_arch = "x86",
|
|
|
|
|
target_arch = "arm",
|
2015-06-25 10:07:01 -07:00
|
|
|
target_arch = "mips",
|
2015-12-28 21:09:06 +00:00
|
|
|
target_arch = "powerpc",
|
2015-11-26 19:05:10 +00:00
|
|
|
target_arch = "powerpc64",
|
2016-09-06 00:41:50 +00:00
|
|
|
target_arch = "asmjs",
|
|
|
|
|
target_arch = "wasm32")))]
|
2017-10-22 20:01:00 -07:00
|
|
|
#[allow(dead_code)]
|
2015-06-25 10:07:01 -07:00
|
|
|
const MIN_ALIGN: usize = 8;
|
2015-12-02 21:03:21 -05:00
|
|
|
#[cfg(all(any(target_arch = "x86_64",
|
2016-08-27 01:39:29 -05:00
|
|
|
target_arch = "aarch64",
|
2016-09-09 23:00:23 +02:00
|
|
|
target_arch = "mips64",
|
2016-12-06 15:55:11 -06:00
|
|
|
target_arch = "s390x",
|
|
|
|
|
target_arch = "sparc64")))]
|
2017-10-22 20:01:00 -07:00
|
|
|
#[allow(dead_code)]
|
2015-06-25 10:07:01 -07:00
|
|
|
const MIN_ALIGN: usize = 16;
|
|
|
|
|
|
2018-04-02 16:05:30 +09:00
|
|
|
use core::heap::{Alloc, AllocErr, Layout, Excess, CannotReallocInPlace};
|
2017-03-09 17:53:01 -08:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[unstable(feature = "allocator_api", issue = "32838")]
|
|
|
|
|
pub struct System;
|
2015-06-25 10:07:01 -07:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[unstable(feature = "allocator_api", issue = "32838")]
|
|
|
|
|
unsafe impl Alloc for System {
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn alloc(&mut self, layout: Layout) -> Result<*mut u8, AllocErr> {
|
|
|
|
|
(&*self).alloc(layout)
|
|
|
|
|
}
|
2017-06-03 14:54:08 -07:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn alloc_zeroed(&mut self, layout: Layout)
|
|
|
|
|
-> Result<*mut u8, AllocErr>
|
|
|
|
|
{
|
|
|
|
|
(&*self).alloc_zeroed(layout)
|
|
|
|
|
}
|
2017-06-03 14:54:08 -07:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn dealloc(&mut self, ptr: *mut u8, layout: Layout) {
|
|
|
|
|
(&*self).dealloc(ptr, layout)
|
|
|
|
|
}
|
2017-06-03 14:54:08 -07:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn realloc(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
old_layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<*mut u8, AllocErr> {
|
|
|
|
|
(&*self).realloc(ptr, old_layout, new_layout)
|
|
|
|
|
}
|
2015-06-25 10:07:01 -07:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
fn oom(&mut self, err: AllocErr) -> ! {
|
|
|
|
|
(&*self).oom(err)
|
|
|
|
|
}
|
2017-06-03 14:54:08 -07:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
fn usable_size(&self, layout: &Layout) -> (usize, usize) {
|
|
|
|
|
(&self).usable_size(layout)
|
|
|
|
|
}
|
2017-06-03 14:54:08 -07:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn alloc_excess(&mut self, layout: Layout) -> Result<Excess, AllocErr> {
|
|
|
|
|
(&*self).alloc_excess(layout)
|
|
|
|
|
}
|
2017-06-03 14:54:08 -07:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn realloc_excess(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<Excess, AllocErr> {
|
|
|
|
|
(&*self).realloc_excess(ptr, layout, new_layout)
|
|
|
|
|
}
|
2017-06-03 14:54:08 -07:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn grow_in_place(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<(), CannotReallocInPlace> {
|
|
|
|
|
(&*self).grow_in_place(ptr, layout, new_layout)
|
|
|
|
|
}
|
2017-06-03 14:54:08 -07:00
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn shrink_in_place(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<(), CannotReallocInPlace> {
|
|
|
|
|
(&*self).shrink_in_place(ptr, layout, new_layout)
|
2017-06-03 14:54:08 -07:00
|
|
|
}
|
2015-06-25 10:07:01 -07:00
|
|
|
}
|
|
|
|
|
|
2017-12-31 13:21:46 +01:00
|
|
|
#[cfg(any(unix, target_os = "cloudabi", target_os = "redox"))]
|
2017-06-03 14:54:08 -07:00
|
|
|
mod platform {
|
rustc: Implement custom panic runtimes
This commit is an implementation of [RFC 1513] which allows applications to
alter the behavior of panics at compile time. A new compiler flag, `-C panic`,
is added and accepts the values `unwind` or `panic`, with the default being
`unwind`. This model affects how code is generated for the local crate, skipping
generation of landing pads with `-C panic=abort`.
[RFC 1513]: https://github.com/rust-lang/rfcs/blob/master/text/1513-less-unwinding.md
Panic implementations are then provided by crates tagged with
`#![panic_runtime]` and lazily required by crates with
`#![needs_panic_runtime]`. The panic strategy (`-C panic` value) of the panic
runtime must match the final product, and if the panic strategy is not `abort`
then the entire DAG must have the same panic strategy.
With the `-C panic=abort` strategy, users can expect a stable method to disable
generation of landing pads, improving optimization in niche scenarios,
decreasing compile time, and decreasing output binary size. With the `-C
panic=unwind` strategy users can expect the existing ability to isolate failure
in Rust code from the outside world.
Organizationally, this commit dismantles the `sys_common::unwind` module in
favor of some bits moving part of it to `libpanic_unwind` and the rest into the
`panicking` module in libstd. The custom panic runtime support is pretty similar
to the custom allocator support with the only major difference being how the
panic runtime is injected (takes the `-C panic` flag into account).
2016-04-08 16:18:40 -07:00
|
|
|
extern crate libc;
|
|
|
|
|
|
2015-06-25 10:07:01 -07:00
|
|
|
use core::cmp;
|
|
|
|
|
use core::ptr;
|
2017-06-03 14:54:08 -07:00
|
|
|
|
2015-06-25 10:07:01 -07:00
|
|
|
use MIN_ALIGN;
|
2017-07-17 09:32:08 -07:00
|
|
|
use System;
|
2018-04-02 16:05:30 +09:00
|
|
|
use core::heap::{Alloc, AllocErr, Layout};
|
2017-06-03 14:54:08 -07:00
|
|
|
|
|
|
|
|
#[unstable(feature = "allocator_api", issue = "32838")]
|
|
|
|
|
unsafe impl<'a> Alloc for &'a System {
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn alloc(&mut self, layout: Layout) -> Result<*mut u8, AllocErr> {
|
alloc_system: don’t assume MIN_ALIGN for small sizes, fix #45955
The GNU C library (glibc) is documented to always allocate with an alignment
of at least 8 or 16 bytes, on 32-bit or 64-bit platforms:
https://www.gnu.org/software/libc/manual/html_node/Aligned-Memory-Blocks.html
This matches our use of `MIN_ALIGN` before this commit.
However, even when libc is glibc, the program might be linked
with another allocator that redefines the `malloc` symbol and friends.
(The `alloc_jemalloc` crate does, in some cases.)
So `alloc_system` doesn’t know which allocator it calls,
and needs to be conservative in assumptions it makes.
The C standard says:
https://port70.net/%7Ensz/c/c11/n1570.html#7.22.3
> The pointer returned if the allocation succeeds is suitably aligned
> so that it may be assigned to a pointer to any type of object
> with a fundamental alignment requirement
https://port70.net/~nsz/c/c11/n1570.html#6.2.8p2
> A fundamental alignment is represented by an alignment less than
> or equal to the greatest alignment supported by the implementation
> in all contexts, which is equal to `_Alignof (max_align_t)`.
`_Alignof (max_align_t)` depends on the ABI and doesn’t seem to have
a clear definition, but it seems to match our `MIN_ALIGN` in practice.
However, the size of objects is rounded up to the next multiple
of their alignment (since that size is also the stride used in arrays).
Conversely, the alignment of a non-zero-size object is at most its size.
So for example it seems ot be legal for `malloc(8)` to return a pointer
that’s only 8-bytes-aligned, even if `_Alignof (max_align_t)` is 16.
2017-11-20 15:30:04 +01:00
|
|
|
let ptr = if layout.align() <= MIN_ALIGN && layout.align() <= layout.size() {
|
2017-06-03 14:54:08 -07:00
|
|
|
libc::malloc(layout.size()) as *mut u8
|
|
|
|
|
} else {
|
|
|
|
|
aligned_malloc(&layout)
|
|
|
|
|
};
|
|
|
|
|
if !ptr.is_null() {
|
|
|
|
|
Ok(ptr)
|
|
|
|
|
} else {
|
|
|
|
|
Err(AllocErr::Exhausted { request: layout })
|
|
|
|
|
}
|
|
|
|
|
}
|
2015-06-25 10:07:01 -07:00
|
|
|
|
2017-06-03 14:54:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn alloc_zeroed(&mut self, layout: Layout)
|
|
|
|
|
-> Result<*mut u8, AllocErr>
|
|
|
|
|
{
|
alloc_system: don’t assume MIN_ALIGN for small sizes, fix #45955
The GNU C library (glibc) is documented to always allocate with an alignment
of at least 8 or 16 bytes, on 32-bit or 64-bit platforms:
https://www.gnu.org/software/libc/manual/html_node/Aligned-Memory-Blocks.html
This matches our use of `MIN_ALIGN` before this commit.
However, even when libc is glibc, the program might be linked
with another allocator that redefines the `malloc` symbol and friends.
(The `alloc_jemalloc` crate does, in some cases.)
So `alloc_system` doesn’t know which allocator it calls,
and needs to be conservative in assumptions it makes.
The C standard says:
https://port70.net/%7Ensz/c/c11/n1570.html#7.22.3
> The pointer returned if the allocation succeeds is suitably aligned
> so that it may be assigned to a pointer to any type of object
> with a fundamental alignment requirement
https://port70.net/~nsz/c/c11/n1570.html#6.2.8p2
> A fundamental alignment is represented by an alignment less than
> or equal to the greatest alignment supported by the implementation
> in all contexts, which is equal to `_Alignof (max_align_t)`.
`_Alignof (max_align_t)` depends on the ABI and doesn’t seem to have
a clear definition, but it seems to match our `MIN_ALIGN` in practice.
However, the size of objects is rounded up to the next multiple
of their alignment (since that size is also the stride used in arrays).
Conversely, the alignment of a non-zero-size object is at most its size.
So for example it seems ot be legal for `malloc(8)` to return a pointer
that’s only 8-bytes-aligned, even if `_Alignof (max_align_t)` is 16.
2017-11-20 15:30:04 +01:00
|
|
|
if layout.align() <= MIN_ALIGN && layout.align() <= layout.size() {
|
2017-06-03 14:54:08 -07:00
|
|
|
let ptr = libc::calloc(layout.size(), 1) as *mut u8;
|
|
|
|
|
if !ptr.is_null() {
|
|
|
|
|
Ok(ptr)
|
|
|
|
|
} else {
|
|
|
|
|
Err(AllocErr::Exhausted { request: layout })
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
let ret = self.alloc(layout.clone());
|
|
|
|
|
if let Ok(ptr) = ret {
|
|
|
|
|
ptr::write_bytes(ptr, 0, layout.size());
|
|
|
|
|
}
|
|
|
|
|
ret
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn dealloc(&mut self, ptr: *mut u8, _layout: Layout) {
|
|
|
|
|
libc::free(ptr as *mut libc::c_void)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn realloc(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
old_layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<*mut u8, AllocErr> {
|
|
|
|
|
if old_layout.align() != new_layout.align() {
|
|
|
|
|
return Err(AllocErr::Unsupported {
|
|
|
|
|
details: "cannot change alignment on `realloc`",
|
|
|
|
|
})
|
|
|
|
|
}
|
|
|
|
|
|
alloc_system: don’t assume MIN_ALIGN for small sizes, fix #45955
The GNU C library (glibc) is documented to always allocate with an alignment
of at least 8 or 16 bytes, on 32-bit or 64-bit platforms:
https://www.gnu.org/software/libc/manual/html_node/Aligned-Memory-Blocks.html
This matches our use of `MIN_ALIGN` before this commit.
However, even when libc is glibc, the program might be linked
with another allocator that redefines the `malloc` symbol and friends.
(The `alloc_jemalloc` crate does, in some cases.)
So `alloc_system` doesn’t know which allocator it calls,
and needs to be conservative in assumptions it makes.
The C standard says:
https://port70.net/%7Ensz/c/c11/n1570.html#7.22.3
> The pointer returned if the allocation succeeds is suitably aligned
> so that it may be assigned to a pointer to any type of object
> with a fundamental alignment requirement
https://port70.net/~nsz/c/c11/n1570.html#6.2.8p2
> A fundamental alignment is represented by an alignment less than
> or equal to the greatest alignment supported by the implementation
> in all contexts, which is equal to `_Alignof (max_align_t)`.
`_Alignof (max_align_t)` depends on the ABI and doesn’t seem to have
a clear definition, but it seems to match our `MIN_ALIGN` in practice.
However, the size of objects is rounded up to the next multiple
of their alignment (since that size is also the stride used in arrays).
Conversely, the alignment of a non-zero-size object is at most its size.
So for example it seems ot be legal for `malloc(8)` to return a pointer
that’s only 8-bytes-aligned, even if `_Alignof (max_align_t)` is 16.
2017-11-20 15:30:04 +01:00
|
|
|
if new_layout.align() <= MIN_ALIGN && new_layout.align() <= new_layout.size(){
|
2017-06-03 14:54:08 -07:00
|
|
|
let ptr = libc::realloc(ptr as *mut libc::c_void, new_layout.size());
|
|
|
|
|
if !ptr.is_null() {
|
|
|
|
|
Ok(ptr as *mut u8)
|
|
|
|
|
} else {
|
|
|
|
|
Err(AllocErr::Exhausted { request: new_layout })
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
let res = self.alloc(new_layout.clone());
|
|
|
|
|
if let Ok(new_ptr) = res {
|
|
|
|
|
let size = cmp::min(old_layout.size(), new_layout.size());
|
|
|
|
|
ptr::copy_nonoverlapping(ptr, new_ptr, size);
|
|
|
|
|
self.dealloc(ptr, old_layout);
|
|
|
|
|
}
|
|
|
|
|
res
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
fn oom(&mut self, err: AllocErr) -> ! {
|
|
|
|
|
use core::fmt::{self, Write};
|
|
|
|
|
|
|
|
|
|
// Print a message to stderr before aborting to assist with
|
|
|
|
|
// debugging. It is critical that this code does not allocate any
|
|
|
|
|
// memory since we are in an OOM situation. Any errors are ignored
|
|
|
|
|
// while printing since there's nothing we can do about them and we
|
|
|
|
|
// are about to exit anyways.
|
|
|
|
|
drop(writeln!(Stderr, "fatal runtime error: {}", err));
|
|
|
|
|
unsafe {
|
|
|
|
|
::core::intrinsics::abort();
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
struct Stderr;
|
|
|
|
|
|
|
|
|
|
impl Write for Stderr {
|
2017-12-27 18:38:57 +01:00
|
|
|
#[cfg(target_os = "cloudabi")]
|
|
|
|
|
fn write_str(&mut self, _: &str) -> fmt::Result {
|
|
|
|
|
// CloudABI does not have any reserved file descriptor
|
|
|
|
|
// numbers. We should not attempt to write to file
|
|
|
|
|
// descriptor #2, as it may be associated with any kind of
|
|
|
|
|
// resource.
|
|
|
|
|
Ok(())
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[cfg(not(target_os = "cloudabi"))]
|
2017-06-03 14:54:08 -07:00
|
|
|
fn write_str(&mut self, s: &str) -> fmt::Result {
|
|
|
|
|
unsafe {
|
|
|
|
|
libc::write(libc::STDERR_FILENO,
|
|
|
|
|
s.as_ptr() as *const libc::c_void,
|
|
|
|
|
s.len());
|
|
|
|
|
}
|
|
|
|
|
Ok(())
|
|
|
|
|
}
|
|
|
|
|
}
|
2016-05-23 22:29:17 -07:00
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2017-09-06 21:31:19 +02:00
|
|
|
#[cfg(any(target_os = "android", target_os = "redox", target_os = "solaris"))]
|
2017-06-03 14:54:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn aligned_malloc(layout: &Layout) -> *mut u8 {
|
2016-05-23 22:29:17 -07:00
|
|
|
// On android we currently target API level 9 which unfortunately
|
|
|
|
|
// doesn't have the `posix_memalign` API used below. Instead we use
|
|
|
|
|
// `memalign`, but this unfortunately has the property on some systems
|
|
|
|
|
// where the memory returned cannot be deallocated by `free`!
|
|
|
|
|
//
|
|
|
|
|
// Upon closer inspection, however, this appears to work just fine with
|
|
|
|
|
// Android, so for this platform we should be fine to call `memalign`
|
|
|
|
|
// (which is present in API level 9). Some helpful references could
|
|
|
|
|
// possibly be chromium using memalign [1], attempts at documenting that
|
|
|
|
|
// memalign + free is ok [2] [3], or the current source of chromium
|
|
|
|
|
// which still uses memalign on android [4].
|
|
|
|
|
//
|
|
|
|
|
// [1]: https://codereview.chromium.org/10796020/
|
|
|
|
|
// [2]: https://code.google.com/p/android/issues/detail?id=35391
|
|
|
|
|
// [3]: https://bugs.chromium.org/p/chromium/issues/detail?id=138579
|
|
|
|
|
// [4]: https://chromium.googlesource.com/chromium/src/base/+/master/
|
|
|
|
|
// /memory/aligned_memory.cc
|
2017-06-03 14:54:08 -07:00
|
|
|
libc::memalign(layout.align(), layout.size()) as *mut u8
|
2016-05-23 22:29:17 -07:00
|
|
|
}
|
|
|
|
|
|
2017-09-06 21:31:19 +02:00
|
|
|
#[cfg(not(any(target_os = "android", target_os = "redox", target_os = "solaris")))]
|
2017-06-03 14:54:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn aligned_malloc(layout: &Layout) -> *mut u8 {
|
2016-05-23 22:29:17 -07:00
|
|
|
let mut out = ptr::null_mut();
|
2017-06-03 14:54:08 -07:00
|
|
|
let ret = libc::posix_memalign(&mut out, layout.align(), layout.size());
|
2016-05-23 22:29:17 -07:00
|
|
|
if ret != 0 {
|
|
|
|
|
ptr::null_mut()
|
|
|
|
|
} else {
|
|
|
|
|
out as *mut u8
|
2015-06-25 10:07:01 -07:00
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2017-07-17 09:32:08 -07:00
|
|
|
#[cfg(windows)]
|
2015-11-02 16:23:22 -08:00
|
|
|
#[allow(bad_style)]
|
2017-06-03 14:54:08 -07:00
|
|
|
mod platform {
|
|
|
|
|
use core::cmp;
|
|
|
|
|
use core::ptr;
|
|
|
|
|
|
2015-06-25 10:07:01 -07:00
|
|
|
use MIN_ALIGN;
|
2017-07-17 09:32:08 -07:00
|
|
|
use System;
|
2018-04-02 16:05:30 +09:00
|
|
|
use core::heap::{Alloc, AllocErr, Layout, CannotReallocInPlace};
|
2015-06-25 10:07:01 -07:00
|
|
|
|
2015-11-02 16:23:22 -08:00
|
|
|
type LPVOID = *mut u8;
|
|
|
|
|
type HANDLE = LPVOID;
|
|
|
|
|
type SIZE_T = usize;
|
|
|
|
|
type DWORD = u32;
|
|
|
|
|
type BOOL = i32;
|
2017-06-03 14:54:08 -07:00
|
|
|
type LPDWORD = *mut DWORD;
|
|
|
|
|
type LPOVERLAPPED = *mut u8;
|
|
|
|
|
|
|
|
|
|
const STD_ERROR_HANDLE: DWORD = -12i32 as DWORD;
|
2015-11-02 16:23:22 -08:00
|
|
|
|
2015-06-25 10:07:01 -07:00
|
|
|
extern "system" {
|
|
|
|
|
fn GetProcessHeap() -> HANDLE;
|
|
|
|
|
fn HeapAlloc(hHeap: HANDLE, dwFlags: DWORD, dwBytes: SIZE_T) -> LPVOID;
|
2015-10-11 23:35:08 -07:00
|
|
|
fn HeapReAlloc(hHeap: HANDLE, dwFlags: DWORD, lpMem: LPVOID, dwBytes: SIZE_T) -> LPVOID;
|
2015-06-25 10:07:01 -07:00
|
|
|
fn HeapFree(hHeap: HANDLE, dwFlags: DWORD, lpMem: LPVOID) -> BOOL;
|
2016-10-25 10:00:16 -04:00
|
|
|
fn GetLastError() -> DWORD;
|
2017-06-03 14:54:08 -07:00
|
|
|
fn WriteFile(hFile: HANDLE,
|
|
|
|
|
lpBuffer: LPVOID,
|
|
|
|
|
nNumberOfBytesToWrite: DWORD,
|
|
|
|
|
lpNumberOfBytesWritten: LPDWORD,
|
|
|
|
|
lpOverlapped: LPOVERLAPPED)
|
|
|
|
|
-> BOOL;
|
|
|
|
|
fn GetStdHandle(which: DWORD) -> HANDLE;
|
2015-06-25 10:07:01 -07:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[repr(C)]
|
|
|
|
|
struct Header(*mut u8);
|
|
|
|
|
|
2017-03-09 17:53:01 -08:00
|
|
|
const HEAP_ZERO_MEMORY: DWORD = 0x00000008;
|
2015-06-25 10:07:01 -07:00
|
|
|
const HEAP_REALLOC_IN_PLACE_ONLY: DWORD = 0x00000010;
|
|
|
|
|
|
|
|
|
|
unsafe fn get_header<'a>(ptr: *mut u8) -> &'a mut Header {
|
|
|
|
|
&mut *(ptr as *mut Header).offset(-1)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
unsafe fn align_ptr(ptr: *mut u8, align: usize) -> *mut u8 {
|
|
|
|
|
let aligned = ptr.offset((align - (ptr as usize & (align - 1))) as isize);
|
|
|
|
|
*get_header(aligned) = Header(ptr);
|
|
|
|
|
aligned
|
|
|
|
|
}
|
|
|
|
|
|
2017-03-09 17:53:01 -08:00
|
|
|
#[inline]
|
2017-06-03 14:54:08 -07:00
|
|
|
unsafe fn allocate_with_flags(layout: Layout, flags: DWORD)
|
|
|
|
|
-> Result<*mut u8, AllocErr>
|
|
|
|
|
{
|
|
|
|
|
let ptr = if layout.align() <= MIN_ALIGN {
|
|
|
|
|
HeapAlloc(GetProcessHeap(), flags, layout.size())
|
2015-06-25 10:07:01 -07:00
|
|
|
} else {
|
2017-06-03 14:54:08 -07:00
|
|
|
let size = layout.size() + layout.align();
|
|
|
|
|
let ptr = HeapAlloc(GetProcessHeap(), flags, size);
|
2015-10-11 23:35:08 -07:00
|
|
|
if ptr.is_null() {
|
2017-06-03 14:54:08 -07:00
|
|
|
ptr
|
|
|
|
|
} else {
|
|
|
|
|
align_ptr(ptr, layout.align())
|
2015-10-11 23:35:08 -07:00
|
|
|
}
|
2017-06-03 14:54:08 -07:00
|
|
|
};
|
|
|
|
|
if ptr.is_null() {
|
|
|
|
|
Err(AllocErr::Exhausted { request: layout })
|
|
|
|
|
} else {
|
|
|
|
|
Ok(ptr as *mut u8)
|
2015-06-25 10:07:01 -07:00
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2017-06-03 14:54:08 -07:00
|
|
|
#[unstable(feature = "allocator_api", issue = "32838")]
|
|
|
|
|
unsafe impl<'a> Alloc for &'a System {
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn alloc(&mut self, layout: Layout) -> Result<*mut u8, AllocErr> {
|
|
|
|
|
allocate_with_flags(layout, 0)
|
|
|
|
|
}
|
2017-03-09 17:53:01 -08:00
|
|
|
|
2017-06-03 14:54:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn alloc_zeroed(&mut self, layout: Layout)
|
|
|
|
|
-> Result<*mut u8, AllocErr>
|
|
|
|
|
{
|
|
|
|
|
allocate_with_flags(layout, HEAP_ZERO_MEMORY)
|
|
|
|
|
}
|
2017-03-09 17:53:01 -08:00
|
|
|
|
2017-06-03 14:54:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn dealloc(&mut self, ptr: *mut u8, layout: Layout) {
|
|
|
|
|
if layout.align() <= MIN_ALIGN {
|
|
|
|
|
let err = HeapFree(GetProcessHeap(), 0, ptr as LPVOID);
|
|
|
|
|
debug_assert!(err != 0, "Failed to free heap memory: {}",
|
|
|
|
|
GetLastError());
|
|
|
|
|
} else {
|
|
|
|
|
let header = get_header(ptr);
|
|
|
|
|
let err = HeapFree(GetProcessHeap(), 0, header.0 as LPVOID);
|
|
|
|
|
debug_assert!(err != 0, "Failed to free heap memory: {}",
|
|
|
|
|
GetLastError());
|
2015-10-11 23:35:08 -07:00
|
|
|
}
|
2015-06-25 10:07:01 -07:00
|
|
|
}
|
|
|
|
|
|
2017-06-03 14:54:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn realloc(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
old_layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<*mut u8, AllocErr> {
|
|
|
|
|
if old_layout.align() != new_layout.align() {
|
|
|
|
|
return Err(AllocErr::Unsupported {
|
|
|
|
|
details: "cannot change alignment on `realloc`",
|
|
|
|
|
})
|
|
|
|
|
}
|
2015-06-25 10:07:01 -07:00
|
|
|
|
2017-06-03 14:54:08 -07:00
|
|
|
if new_layout.align() <= MIN_ALIGN {
|
|
|
|
|
let ptr = HeapReAlloc(GetProcessHeap(),
|
|
|
|
|
0,
|
|
|
|
|
ptr as LPVOID,
|
|
|
|
|
new_layout.size());
|
|
|
|
|
if !ptr.is_null() {
|
|
|
|
|
Ok(ptr as *mut u8)
|
|
|
|
|
} else {
|
|
|
|
|
Err(AllocErr::Exhausted { request: new_layout })
|
|
|
|
|
}
|
|
|
|
|
} else {
|
|
|
|
|
let res = self.alloc(new_layout.clone());
|
|
|
|
|
if let Ok(new_ptr) = res {
|
|
|
|
|
let size = cmp::min(old_layout.size(), new_layout.size());
|
|
|
|
|
ptr::copy_nonoverlapping(ptr, new_ptr, size);
|
|
|
|
|
self.dealloc(ptr, old_layout);
|
|
|
|
|
}
|
|
|
|
|
res
|
|
|
|
|
}
|
2015-06-25 10:07:01 -07:00
|
|
|
}
|
|
|
|
|
|
2017-06-03 14:54:08 -07:00
|
|
|
#[inline]
|
|
|
|
|
unsafe fn grow_in_place(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<(), CannotReallocInPlace> {
|
|
|
|
|
self.shrink_in_place(ptr, layout, new_layout)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn shrink_in_place(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
old_layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<(), CannotReallocInPlace> {
|
|
|
|
|
if old_layout.align() != new_layout.align() {
|
|
|
|
|
return Err(CannotReallocInPlace)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
let new = if new_layout.align() <= MIN_ALIGN {
|
|
|
|
|
HeapReAlloc(GetProcessHeap(),
|
|
|
|
|
HEAP_REALLOC_IN_PLACE_ONLY,
|
|
|
|
|
ptr as LPVOID,
|
|
|
|
|
new_layout.size())
|
|
|
|
|
} else {
|
|
|
|
|
let header = get_header(ptr);
|
|
|
|
|
HeapReAlloc(GetProcessHeap(),
|
|
|
|
|
HEAP_REALLOC_IN_PLACE_ONLY,
|
|
|
|
|
header.0 as LPVOID,
|
|
|
|
|
new_layout.size() + new_layout.align())
|
|
|
|
|
};
|
|
|
|
|
if new.is_null() {
|
|
|
|
|
Err(CannotReallocInPlace)
|
|
|
|
|
} else {
|
|
|
|
|
Ok(())
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
fn oom(&mut self, err: AllocErr) -> ! {
|
|
|
|
|
use core::fmt::{self, Write};
|
|
|
|
|
|
|
|
|
|
// Same as with unix we ignore all errors here
|
|
|
|
|
drop(writeln!(Stderr, "fatal runtime error: {}", err));
|
|
|
|
|
unsafe {
|
|
|
|
|
::core::intrinsics::abort();
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
struct Stderr;
|
|
|
|
|
|
|
|
|
|
impl Write for Stderr {
|
|
|
|
|
fn write_str(&mut self, s: &str) -> fmt::Result {
|
|
|
|
|
unsafe {
|
|
|
|
|
// WriteFile silently fails if it is passed an invalid
|
|
|
|
|
// handle, so there is no need to check the result of
|
|
|
|
|
// GetStdHandle.
|
|
|
|
|
WriteFile(GetStdHandle(STD_ERROR_HANDLE),
|
|
|
|
|
s.as_ptr() as LPVOID,
|
|
|
|
|
s.len() as DWORD,
|
|
|
|
|
ptr::null_mut(),
|
|
|
|
|
ptr::null_mut());
|
|
|
|
|
}
|
|
|
|
|
Ok(())
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
2015-06-25 10:07:01 -07:00
|
|
|
}
|
|
|
|
|
}
|
2017-10-22 20:01:00 -07:00
|
|
|
|
|
|
|
|
// This is an implementation of a global allocator on the wasm32 platform when
|
|
|
|
|
// emscripten is not in use. In that situation there's no actual runtime for us
|
|
|
|
|
// to lean on for allocation, so instead we provide our own!
|
|
|
|
|
//
|
|
|
|
|
// The wasm32 instruction set has two instructions for getting the current
|
|
|
|
|
// amount of memory and growing the amount of memory. These instructions are the
|
|
|
|
|
// foundation on which we're able to build an allocator, so we do so! Note that
|
|
|
|
|
// the instructions are also pretty "global" and this is the "global" allocator
|
|
|
|
|
// after all!
|
|
|
|
|
//
|
|
|
|
|
// The current allocator here is the `dlmalloc` crate which we've got included
|
|
|
|
|
// in the rust-lang/rust repository as a submodule. The crate is a port of
|
|
|
|
|
// dlmalloc.c from C to Rust and is basically just so we can have "pure Rust"
|
|
|
|
|
// for now which is currently technically required (can't link with C yet).
|
|
|
|
|
//
|
|
|
|
|
// The crate itself provides a global allocator which on wasm has no
|
|
|
|
|
// synchronization as there are no threads!
|
|
|
|
|
#[cfg(all(target_arch = "wasm32", not(target_os = "emscripten")))]
|
|
|
|
|
mod platform {
|
|
|
|
|
extern crate dlmalloc;
|
|
|
|
|
|
2018-04-02 16:05:30 +09:00
|
|
|
use core::heap::{Alloc, AllocErr, Layout, Excess, CannotReallocInPlace};
|
2017-10-22 20:01:00 -07:00
|
|
|
use System;
|
|
|
|
|
use self::dlmalloc::GlobalDlmalloc;
|
|
|
|
|
|
|
|
|
|
#[unstable(feature = "allocator_api", issue = "32838")]
|
|
|
|
|
unsafe impl<'a> Alloc for &'a System {
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn alloc(&mut self, layout: Layout) -> Result<*mut u8, AllocErr> {
|
|
|
|
|
GlobalDlmalloc.alloc(layout)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn alloc_zeroed(&mut self, layout: Layout)
|
|
|
|
|
-> Result<*mut u8, AllocErr>
|
|
|
|
|
{
|
|
|
|
|
GlobalDlmalloc.alloc_zeroed(layout)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn dealloc(&mut self, ptr: *mut u8, layout: Layout) {
|
|
|
|
|
GlobalDlmalloc.dealloc(ptr, layout)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn realloc(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
old_layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<*mut u8, AllocErr> {
|
|
|
|
|
GlobalDlmalloc.realloc(ptr, old_layout, new_layout)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
fn usable_size(&self, layout: &Layout) -> (usize, usize) {
|
|
|
|
|
GlobalDlmalloc.usable_size(layout)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn alloc_excess(&mut self, layout: Layout) -> Result<Excess, AllocErr> {
|
|
|
|
|
GlobalDlmalloc.alloc_excess(layout)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn realloc_excess(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<Excess, AllocErr> {
|
|
|
|
|
GlobalDlmalloc.realloc_excess(ptr, layout, new_layout)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn grow_in_place(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<(), CannotReallocInPlace> {
|
|
|
|
|
GlobalDlmalloc.grow_in_place(ptr, layout, new_layout)
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
#[inline]
|
|
|
|
|
unsafe fn shrink_in_place(&mut self,
|
|
|
|
|
ptr: *mut u8,
|
|
|
|
|
layout: Layout,
|
|
|
|
|
new_layout: Layout) -> Result<(), CannotReallocInPlace> {
|
|
|
|
|
GlobalDlmalloc.shrink_in_place(ptr, layout, new_layout)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|