Tim Peters | 8b078f9 | 2002-04-28 04:11:46 +0000 | [diff] [blame] | 1 | /* The PyMem_ family: low-level memory allocation interfaces. |
| 2 | See objimpl.h for the PyObject_ memory family. |
| 3 | */ |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 4 | |
| 5 | #ifndef Py_PYMEM_H |
| 6 | #define Py_PYMEM_H |
| 7 | |
| 8 | #include "pyport.h" |
| 9 | |
| 10 | #ifdef __cplusplus |
| 11 | extern "C" { |
| 12 | #endif |
| 13 | |
Martin v. Löwis | 1c0689c | 2014-01-03 21:36:49 +0100 | [diff] [blame] | 14 | #ifndef Py_LIMITED_API |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 15 | PyAPI_FUNC(void *) PyMem_RawMalloc(size_t size); |
Victor Stinner | db067af | 2014-05-02 22:31:14 +0200 | [diff] [blame] | 16 | PyAPI_FUNC(void *) PyMem_RawCalloc(size_t nelem, size_t elsize); |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 17 | PyAPI_FUNC(void *) PyMem_RawRealloc(void *ptr, size_t new_size); |
| 18 | PyAPI_FUNC(void) PyMem_RawFree(void *ptr); |
Victor Stinner | 34be807c | 2016-03-14 12:04:26 +0100 | [diff] [blame] | 19 | |
| 20 | /* Configure the Python memory allocators. Pass NULL to use default |
| 21 | allocators. */ |
| 22 | PyAPI_FUNC(int) _PyMem_SetupAllocators(const char *opt); |
| 23 | |
Victor Stinner | 5d39e04 | 2017-11-29 17:20:38 +0100 | [diff] [blame] | 24 | /* Try to get the allocators name set by _PyMem_SetupAllocators(). */ |
| 25 | PyAPI_FUNC(const char*) _PyMem_GetAllocatorsName(void); |
| 26 | |
Victor Stinner | 82af0b6 | 2018-10-23 17:39:40 +0200 | [diff] [blame] | 27 | PyAPI_FUNC(int) _PyMem_IsFreed(void *ptr, size_t size); |
| 28 | #endif /* !defined(Py_LIMITED_API) */ |
Victor Stinner | 34be807c | 2016-03-14 12:04:26 +0100 | [diff] [blame] | 29 | |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 30 | |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 31 | /* BEWARE: |
| 32 | |
Tim Peters | 8b078f9 | 2002-04-28 04:11:46 +0000 | [diff] [blame] | 33 | Each interface exports both functions and macros. Extension modules should |
| 34 | use the functions, to ensure binary compatibility across Python versions. |
| 35 | Because the Python implementation is free to change internal details, and |
| 36 | the macros may (or may not) expose details for speed, if you do use the |
| 37 | macros you must recompile your extensions with each Python release. |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 38 | |
Tim Peters | 8b078f9 | 2002-04-28 04:11:46 +0000 | [diff] [blame] | 39 | Never mix calls to PyMem_ with calls to the platform malloc/realloc/ |
| 40 | calloc/free. For example, on Windows different DLLs may end up using |
| 41 | different heaps, and if you use PyMem_Malloc you'll get the memory from the |
| 42 | heap used by the Python DLL; it could be a disaster if you free()'ed that |
| 43 | directly in your own extension. Using PyMem_Free instead ensures Python |
| 44 | can return the memory to the proper heap. As another example, in |
| 45 | PYMALLOC_DEBUG mode, Python wraps all calls to all PyMem_ and PyObject_ |
| 46 | memory functions in special debugging wrappers that add additional |
| 47 | debugging info to dynamic memory blocks. The system routines have no idea |
| 48 | what to do with that stuff, and the Python wrappers have no idea what to do |
| 49 | with raw blocks obtained directly by the system routines then. |
Guido van Rossum | 360e4b8 | 2007-05-14 22:51:27 +0000 | [diff] [blame] | 50 | |
| 51 | The GIL must be held when using these APIs. |
Tim Peters | 8b078f9 | 2002-04-28 04:11:46 +0000 | [diff] [blame] | 52 | */ |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 53 | |
| 54 | /* |
| 55 | * Raw memory interface |
| 56 | * ==================== |
| 57 | */ |
| 58 | |
Tim Peters | 8b078f9 | 2002-04-28 04:11:46 +0000 | [diff] [blame] | 59 | /* Functions |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 60 | |
Tim Peters | 8b078f9 | 2002-04-28 04:11:46 +0000 | [diff] [blame] | 61 | Functions supplying platform-independent semantics for malloc/realloc/ |
| 62 | free. These functions make sure that allocating 0 bytes returns a distinct |
Tim Peters | af3e8de | 2002-04-12 07:22:56 +0000 | [diff] [blame] | 63 | non-NULL pointer (whenever possible -- if we're flat out of memory, NULL |
| 64 | may be returned), even if the platform malloc and realloc don't. |
| 65 | Returned pointers must be checked for NULL explicitly. No action is |
Tim Peters | 8b078f9 | 2002-04-28 04:11:46 +0000 | [diff] [blame] | 66 | performed on failure (no exception is set, no warning is printed, etc). |
| 67 | */ |
Tim Peters | af3e8de | 2002-04-12 07:22:56 +0000 | [diff] [blame] | 68 | |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 69 | PyAPI_FUNC(void *) PyMem_Malloc(size_t size); |
Serhiy Storchaka | 34d0ac8 | 2016-12-27 14:57:39 +0200 | [diff] [blame] | 70 | #if !defined(Py_LIMITED_API) || Py_LIMITED_API+0 >= 0x03050000 |
Victor Stinner | db067af | 2014-05-02 22:31:14 +0200 | [diff] [blame] | 71 | PyAPI_FUNC(void *) PyMem_Calloc(size_t nelem, size_t elsize); |
Serhiy Storchaka | 34d0ac8 | 2016-12-27 14:57:39 +0200 | [diff] [blame] | 72 | #endif |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 73 | PyAPI_FUNC(void *) PyMem_Realloc(void *ptr, size_t new_size); |
| 74 | PyAPI_FUNC(void) PyMem_Free(void *ptr); |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 75 | |
Martin v. Löwis | 1c0689c | 2014-01-03 21:36:49 +0100 | [diff] [blame] | 76 | #ifndef Py_LIMITED_API |
Victor Stinner | 46972b7 | 2017-11-24 22:55:40 +0100 | [diff] [blame] | 77 | /* strdup() using PyMem_RawMalloc() */ |
Victor Stinner | 49fc8ec | 2013-07-07 23:30:24 +0200 | [diff] [blame] | 78 | PyAPI_FUNC(char *) _PyMem_RawStrdup(const char *str); |
Victor Stinner | 46972b7 | 2017-11-24 22:55:40 +0100 | [diff] [blame] | 79 | |
| 80 | /* strdup() using PyMem_Malloc() */ |
Victor Stinner | 49fc8ec | 2013-07-07 23:30:24 +0200 | [diff] [blame] | 81 | PyAPI_FUNC(char *) _PyMem_Strdup(const char *str); |
Victor Stinner | 46972b7 | 2017-11-24 22:55:40 +0100 | [diff] [blame] | 82 | |
| 83 | /* wcsdup() using PyMem_RawMalloc() */ |
| 84 | PyAPI_FUNC(wchar_t*) _PyMem_RawWcsdup(const wchar_t *str); |
Martin v. Löwis | 1c0689c | 2014-01-03 21:36:49 +0100 | [diff] [blame] | 85 | #endif |
Victor Stinner | 49fc8ec | 2013-07-07 23:30:24 +0200 | [diff] [blame] | 86 | |
Tim Peters | af3e8de | 2002-04-12 07:22:56 +0000 | [diff] [blame] | 87 | /* Macros. */ |
Tim Peters | 51e7f5c | 2002-04-22 02:33:27 +0000 | [diff] [blame] | 88 | |
Martin v. Löwis | 39f59b0 | 2002-11-23 09:13:40 +0000 | [diff] [blame] | 89 | /* PyMem_MALLOC(0) means malloc(1). Some systems would return NULL |
| 90 | for malloc(0), which would be treated as an error. Some platforms |
| 91 | would return a pointer with no memory behind it, which would break |
| 92 | pymalloc. To solve these problems, allocate an extra byte. */ |
Georg Brandl | d492ad8 | 2008-07-23 16:13:07 +0000 | [diff] [blame] | 93 | /* Returns NULL to indicate error if a negative size or size larger than |
| 94 | Py_ssize_t can represent is supplied. Helps prevents security holes. */ |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 95 | #define PyMem_MALLOC(n) PyMem_Malloc(n) |
| 96 | #define PyMem_REALLOC(p, n) PyMem_Realloc(p, n) |
| 97 | #define PyMem_FREE(p) PyMem_Free(p) |
Tim Peters | af3e8de | 2002-04-12 07:22:56 +0000 | [diff] [blame] | 98 | |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 99 | /* |
| 100 | * Type-oriented memory interface |
| 101 | * ============================== |
Tim Peters | af3e8de | 2002-04-12 07:22:56 +0000 | [diff] [blame] | 102 | * |
Georg Brandl | d492ad8 | 2008-07-23 16:13:07 +0000 | [diff] [blame] | 103 | * Allocate memory for n objects of the given type. Returns a new pointer |
| 104 | * or NULL if the request was too large or memory allocation failed. Use |
| 105 | * these macros rather than doing the multiplication yourself so that proper |
| 106 | * overflow checking is always done. |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 107 | */ |
| 108 | |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 109 | #define PyMem_New(type, n) \ |
luzpaz | a5293b4 | 2017-11-05 07:37:50 -0600 | [diff] [blame] | 110 | ( ((size_t)(n) > PY_SSIZE_T_MAX / sizeof(type)) ? NULL : \ |
| 111 | ( (type *) PyMem_Malloc((n) * sizeof(type)) ) ) |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 112 | #define PyMem_NEW(type, n) \ |
luzpaz | a5293b4 | 2017-11-05 07:37:50 -0600 | [diff] [blame] | 113 | ( ((size_t)(n) > PY_SSIZE_T_MAX / sizeof(type)) ? NULL : \ |
| 114 | ( (type *) PyMem_MALLOC((n) * sizeof(type)) ) ) |
Tim Peters | 8b078f9 | 2002-04-28 04:11:46 +0000 | [diff] [blame] | 115 | |
Georg Brandl | d492ad8 | 2008-07-23 16:13:07 +0000 | [diff] [blame] | 116 | /* |
| 117 | * The value of (p) is always clobbered by this macro regardless of success. |
| 118 | * The caller MUST check if (p) is NULL afterwards and deal with the memory |
| 119 | * error if so. This means the original value of (p) MUST be saved for the |
| 120 | * caller's memory error handler to not lose track of it. |
| 121 | */ |
Tim Peters | 8b078f9 | 2002-04-28 04:11:46 +0000 | [diff] [blame] | 122 | #define PyMem_Resize(p, type, n) \ |
luzpaz | a5293b4 | 2017-11-05 07:37:50 -0600 | [diff] [blame] | 123 | ( (p) = ((size_t)(n) > PY_SSIZE_T_MAX / sizeof(type)) ? NULL : \ |
| 124 | (type *) PyMem_Realloc((p), (n) * sizeof(type)) ) |
Tim Peters | af3e8de | 2002-04-12 07:22:56 +0000 | [diff] [blame] | 125 | #define PyMem_RESIZE(p, type, n) \ |
luzpaz | a5293b4 | 2017-11-05 07:37:50 -0600 | [diff] [blame] | 126 | ( (p) = ((size_t)(n) > PY_SSIZE_T_MAX / sizeof(type)) ? NULL : \ |
| 127 | (type *) PyMem_REALLOC((p), (n) * sizeof(type)) ) |
Tim Peters | a5d78cc | 2002-03-02 08:43:19 +0000 | [diff] [blame] | 128 | |
Thomas Wouters | 49fd7fa | 2006-04-21 10:40:58 +0000 | [diff] [blame] | 129 | /* PyMem{Del,DEL} are left over from ancient days, and shouldn't be used |
| 130 | * anymore. They're just confusing aliases for PyMem_{Free,FREE} now. |
| 131 | */ |
luzpaz | a5293b4 | 2017-11-05 07:37:50 -0600 | [diff] [blame] | 132 | #define PyMem_Del PyMem_Free |
| 133 | #define PyMem_DEL PyMem_FREE |
Tim Peters | ddea208 | 2002-03-23 10:03:50 +0000 | [diff] [blame] | 134 | |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 135 | #ifndef Py_LIMITED_API |
| 136 | typedef enum { |
| 137 | /* PyMem_RawMalloc(), PyMem_RawRealloc() and PyMem_RawFree() */ |
| 138 | PYMEM_DOMAIN_RAW, |
| 139 | |
| 140 | /* PyMem_Malloc(), PyMem_Realloc() and PyMem_Free() */ |
| 141 | PYMEM_DOMAIN_MEM, |
| 142 | |
| 143 | /* PyObject_Malloc(), PyObject_Realloc() and PyObject_Free() */ |
| 144 | PYMEM_DOMAIN_OBJ |
| 145 | } PyMemAllocatorDomain; |
| 146 | |
| 147 | typedef struct { |
Victor Stinner | d8f0d92 | 2014-06-02 21:57:10 +0200 | [diff] [blame] | 148 | /* user context passed as the first argument to the 4 functions */ |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 149 | void *ctx; |
| 150 | |
| 151 | /* allocate a memory block */ |
| 152 | void* (*malloc) (void *ctx, size_t size); |
| 153 | |
Victor Stinner | db067af | 2014-05-02 22:31:14 +0200 | [diff] [blame] | 154 | /* allocate a memory block initialized by zeros */ |
| 155 | void* (*calloc) (void *ctx, size_t nelem, size_t elsize); |
| 156 | |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 157 | /* allocate or resize a memory block */ |
| 158 | void* (*realloc) (void *ctx, void *ptr, size_t new_size); |
| 159 | |
| 160 | /* release a memory block */ |
| 161 | void (*free) (void *ctx, void *ptr); |
Victor Stinner | d8f0d92 | 2014-06-02 21:57:10 +0200 | [diff] [blame] | 162 | } PyMemAllocatorEx; |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 163 | |
| 164 | /* Get the memory block allocator of the specified domain. */ |
| 165 | PyAPI_FUNC(void) PyMem_GetAllocator(PyMemAllocatorDomain domain, |
Victor Stinner | d8f0d92 | 2014-06-02 21:57:10 +0200 | [diff] [blame] | 166 | PyMemAllocatorEx *allocator); |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 167 | |
| 168 | /* Set the memory block allocator of the specified domain. |
| 169 | |
| 170 | The new allocator must return a distinct non-NULL pointer when requesting |
| 171 | zero bytes. |
| 172 | |
| 173 | For the PYMEM_DOMAIN_RAW domain, the allocator must be thread-safe: the GIL |
| 174 | is not held when the allocator is called. |
| 175 | |
| 176 | If the new allocator is not a hook (don't call the previous allocator), the |
| 177 | PyMem_SetupDebugHooks() function must be called to reinstall the debug hooks |
| 178 | on top on the new allocator. */ |
| 179 | PyAPI_FUNC(void) PyMem_SetAllocator(PyMemAllocatorDomain domain, |
Victor Stinner | d8f0d92 | 2014-06-02 21:57:10 +0200 | [diff] [blame] | 180 | PyMemAllocatorEx *allocator); |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 181 | |
| 182 | /* Setup hooks to detect bugs in the following Python memory allocator |
| 183 | functions: |
| 184 | |
| 185 | - PyMem_RawMalloc(), PyMem_RawRealloc(), PyMem_RawFree() |
| 186 | - PyMem_Malloc(), PyMem_Realloc(), PyMem_Free() |
| 187 | - PyObject_Malloc(), PyObject_Realloc() and PyObject_Free() |
| 188 | |
| 189 | Newly allocated memory is filled with the byte 0xCB, freed memory is filled |
luzpaz | a5293b4 | 2017-11-05 07:37:50 -0600 | [diff] [blame] | 190 | with the byte 0xDB. Additional checks: |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 191 | |
| 192 | - detect API violations, ex: PyObject_Free() called on a buffer allocated |
| 193 | by PyMem_Malloc() |
| 194 | - detect write before the start of the buffer (buffer underflow) |
| 195 | - detect write after the end of the buffer (buffer overflow) |
| 196 | |
| 197 | The function does nothing if Python is not compiled is debug mode. */ |
| 198 | PyAPI_FUNC(void) PyMem_SetupDebugHooks(void); |
Victor Stinner | 626bff8 | 2018-10-25 17:31:10 +0200 | [diff] [blame^] | 199 | #endif /* Py_LIMITED_API */ |
Victor Stinner | 0507bf5 | 2013-07-07 02:05:46 +0200 | [diff] [blame] | 200 | |
Victor Stinner | f7e5b56 | 2017-11-15 15:48:08 -0800 | [diff] [blame] | 201 | #ifdef Py_BUILD_CORE |
Victor Stinner | 5d39e04 | 2017-11-29 17:20:38 +0100 | [diff] [blame] | 202 | /* Set the memory allocator of the specified domain to the default. |
| 203 | Save the old allocator into *old_alloc if it's non-NULL. |
| 204 | Return on success, or return -1 if the domain is unknown. */ |
| 205 | PyAPI_FUNC(int) _PyMem_SetDefaultAllocator( |
| 206 | PyMemAllocatorDomain domain, |
| 207 | PyMemAllocatorEx *old_alloc); |
Victor Stinner | f7e5b56 | 2017-11-15 15:48:08 -0800 | [diff] [blame] | 208 | #endif |
| 209 | |
Victor Stinner | 9e00e80 | 2018-10-25 13:31:16 +0200 | [diff] [blame] | 210 | |
| 211 | /* bpo-35053: expose _Py_tracemalloc_config for performance: |
| 212 | _Py_NewReference() needs an efficient check to test if tracemalloc is |
Victor Stinner | 6279c1c | 2018-10-25 15:54:13 +0200 | [diff] [blame] | 213 | tracing. |
| 214 | |
| 215 | It has to be defined in pymem.h, before object.h is included. */ |
Victor Stinner | 9e00e80 | 2018-10-25 13:31:16 +0200 | [diff] [blame] | 216 | struct _PyTraceMalloc_Config { |
| 217 | /* Module initialized? |
| 218 | Variable protected by the GIL */ |
| 219 | enum { |
| 220 | TRACEMALLOC_NOT_INITIALIZED, |
| 221 | TRACEMALLOC_INITIALIZED, |
| 222 | TRACEMALLOC_FINALIZED |
| 223 | } initialized; |
| 224 | |
| 225 | /* Is tracemalloc tracing memory allocations? |
| 226 | Variable protected by the GIL */ |
| 227 | int tracing; |
| 228 | |
| 229 | /* limit of the number of frames in a traceback, 1 by default. |
| 230 | Variable protected by the GIL. */ |
| 231 | int max_nframe; |
| 232 | |
| 233 | /* use domain in trace key? |
| 234 | Variable protected by the GIL. */ |
| 235 | int use_domain; |
| 236 | }; |
| 237 | |
| 238 | PyAPI_DATA(struct _PyTraceMalloc_Config) _Py_tracemalloc_config; |
| 239 | |
| 240 | #define _PyTraceMalloc_Config_INIT \ |
| 241 | {.initialized = TRACEMALLOC_NOT_INITIALIZED, \ |
| 242 | .tracing = 0, \ |
| 243 | .max_nframe = 1, \ |
| 244 | .use_domain = 0} |
| 245 | |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 246 | #ifdef __cplusplus |
| 247 | } |
| 248 | #endif |
| 249 | |
Peter Schneider-Kamp | 25f6894 | 2000-07-31 22:19:30 +0000 | [diff] [blame] | 250 | #endif /* !Py_PYMEM_H */ |