SLAB_POISON

最新推荐文章于 2023-03-12 21:38:53 发布

xiaocaichonga

最新推荐文章于 2023-03-12 21:38:53 发布

阅读量679

点赞数

分类专栏：遇到的问题及其答案文章标签： debugging linux buffer bugs byte each

本文链接：https://blog.csdn.net/xiaocaichonga/article/details/7880307

版权

遇到的问题及其答案专栏收录该内容

94 篇文章 1 订阅

订阅专栏

来源：http://whatilearned2day.wordpress.com/2006/12/13/slab-poisoning/

Slab Poisoning

leave a comment »

Slab Poisoning is a term popular among linux kernel hackers and refers to the condition caused by using an uninitialized dynamically allocated memory location, mostly a panic (or oops).

How to find if you have a slab poisoning ?

If you have an offending address 0xa5a5a5a5 somewhere in the kernel oops message, you can be almost be sure that you have used an uninitialized dynamically allocated memory somewhere. Similarl, if you see some where the address 0x6b6b6b6b, you can very much be sure of using a freed variable.

Note: This help from the kernel comes only when it is compiled with CONFIG_DEBUG_SLAB configuration. In this case, each byte of allocated memory is set to 0xa5 before being handed over to the caller and also set to 0x6b when it is freed. Why not 0×00 ? because that hides more bugs than it can help find (See Writing Solid Code and my review on that book).

Using memory tags before and after the allocated memor, it is possible to tell about any memory overrun or buffer overflow. When kernel debugging is enabled, linux kernel does exactly that.

——————————————————————————————————————————————————————————————————————————————

作用就是将未初始化的一些内存进行填充某些特定的值，以用来标示这块未初始化的内存，有利于一些debug工作。