1 /******************************************************************************/
2 #ifdef JEMALLOC_H_TYPES
4 typedef struct prof_bt_s prof_bt_t
;
5 typedef struct prof_cnt_s prof_cnt_t
;
6 typedef struct prof_thr_cnt_s prof_thr_cnt_t
;
7 typedef struct prof_ctx_s prof_ctx_t
;
8 typedef struct prof_tdata_s prof_tdata_t
;
10 /* Option defaults. */
11 #define PROF_PREFIX_DEFAULT "jeprof"
12 #define LG_PROF_SAMPLE_DEFAULT 19
13 #define LG_PROF_INTERVAL_DEFAULT -1
16 * Hard limit on stack backtrace depth. The version of prof_backtrace() that
17 * is based on __builtin_return_address() necessarily has a hard-coded number
18 * of backtrace frame handlers, and should be kept in sync with this setting.
20 #define PROF_BT_MAX 128
22 /* Maximum number of backtraces to store in each per thread LRU cache. */
23 #define PROF_TCMAX 1024
25 /* Initial hash table size. */
26 #define PROF_CKH_MINITEMS 64
28 /* Size of memory buffer to use when writing dump files. */
29 #define PROF_DUMP_BUFSIZE 65536
31 /* Size of stack-allocated buffer used by prof_printf(). */
32 #define PROF_PRINTF_BUFSIZE 128
35 * Number of mutexes shared among all ctx's. No space is allocated for these
36 * unless profiling is enabled, so it's okay to over-provision.
38 #define PROF_NCTX_LOCKS 1024
41 * prof_tdata pointers close to NULL are used to encode state information that
42 * is used for cleaning up during thread shutdown.
44 #define PROF_TDATA_STATE_REINCARNATED ((prof_tdata_t *)(uintptr_t)1)
45 #define PROF_TDATA_STATE_PURGATORY ((prof_tdata_t *)(uintptr_t)2)
46 #define PROF_TDATA_STATE_MAX PROF_TDATA_STATE_PURGATORY
48 #endif /* JEMALLOC_H_TYPES */
49 /******************************************************************************/
50 #ifdef JEMALLOC_H_STRUCTS
53 /* Backtrace, stored as len program counters. */
58 #ifdef JEMALLOC_PROF_LIBGCC
59 /* Data structure passed to libgcc _Unwind_Backtrace() callback functions. */
69 * Profiling counters. An allocation/deallocation pair can operate on
70 * different prof_thr_cnt_t objects that are linked into the same
71 * prof_ctx_t cnts_ql, so it is possible for the cur* counters to go
72 * negative. In principle it is possible for the *bytes counters to
73 * overflow/underflow, but a general solution would require something
74 * like 128-bit counters; this implementation doesn't bother to solve
83 struct prof_thr_cnt_s
{
84 /* Linkage into prof_ctx_t's cnts_ql. */
85 ql_elm(prof_thr_cnt_t
) cnts_link
;
87 /* Linkage into thread's LRU. */
88 ql_elm(prof_thr_cnt_t
) lru_link
;
91 * Associated context. If a thread frees an object that it did not
92 * allocate, it is possible that the context is not cached in the
93 * thread's hash table, in which case it must be able to look up the
94 * context, insert a new prof_thr_cnt_t into the thread's hash table,
95 * and link it into the prof_ctx_t's cnts_ql.
100 * Threads use memory barriers to update the counters. Since there is
101 * only ever one writer, the only challenge is for the reader to get a
102 * consistent read of the counters.
104 * The writer uses this series of operations:
106 * 1) Increment epoch to an odd number.
107 * 2) Update counters.
108 * 3) Increment epoch to an even number.
110 * The reader must assure 1) that the epoch is even while it reads the
111 * counters, and 2) that the epoch doesn't change between the time it
112 * starts and finishes reading the counters.
116 /* Profiling counters. */
121 /* Associated backtrace. */
124 /* Protects nlimbo, cnt_merged, and cnts_ql. */
125 malloc_mutex_t
*lock
;
128 * Number of threads that currently cause this ctx to be in a state of
129 * limbo due to one of:
130 * - Initializing per thread counters associated with this ctx.
131 * - Preparing to destroy this ctx.
132 * nlimbo must be 1 (single destroyer) in order to safely destroy the
137 /* Temporary storage for summation during dump. */
138 prof_cnt_t cnt_summed
;
140 /* When threads exit, they merge their stats into cnt_merged. */
141 prof_cnt_t cnt_merged
;
144 * List of profile counters, one for each thread that has allocated in
147 ql_head(prof_thr_cnt_t
) cnts_ql
;
150 struct prof_tdata_s
{
152 * Hash of (prof_bt_t *)-->(prof_thr_cnt_t *). Each thread keeps a
153 * cache of backtraces, with associated thread-specific prof_thr_cnt_t
154 * objects. Other threads may read the prof_thr_cnt_t contents, but no
155 * others will ever write them.
157 * Upon thread exit, the thread must merge all the prof_thr_cnt_t
158 * counter data into the associated prof_ctx_t objects, and unlink/free
159 * the prof_thr_cnt_t objects.
163 /* LRU for contents of bt2cnt. */
164 ql_head(prof_thr_cnt_t
) lru_ql
;
166 /* Backtrace vector, used for calls to prof_backtrace(). */
169 /* Sampling state. */
174 /* State used to avoid dumping while operating on prof internals. */
180 #endif /* JEMALLOC_H_STRUCTS */
181 /******************************************************************************/
182 #ifdef JEMALLOC_H_EXTERNS
184 extern bool opt_prof
;
186 * Even if opt_prof is true, sampling can be temporarily disabled by setting
187 * opt_prof_active to false. No locking is used when updating opt_prof_active,
188 * so there are no guarantees regarding how long it will take for all threads
189 * to notice state changes.
191 extern bool opt_prof_active
;
192 extern size_t opt_lg_prof_sample
; /* Mean bytes between samples. */
193 extern ssize_t opt_lg_prof_interval
; /* lg(prof_interval). */
194 extern bool opt_prof_gdump
; /* High-water memory dumping. */
195 extern bool opt_prof_final
; /* Final profile dumping. */
196 extern bool opt_prof_leak
; /* Dump leak summary at exit. */
197 extern bool opt_prof_accum
; /* Report cumulative bytes. */
198 extern char opt_prof_prefix
[PATH_MAX
+ 1];
201 * Profile dump interval, measured in bytes allocated. Each arena triggers a
202 * profile dump when it reaches this threshold. The effect is that the
203 * interval between profile dumps averages prof_interval, though the actual
204 * interval between dumps will tend to be sporadic, and the interval will be a
205 * maximum of approximately (prof_interval * narenas).
207 extern uint64_t prof_interval
;
210 * If true, promote small sampled objects to large objects, since small run
211 * headers do not have embedded profile context pointers.
213 extern bool prof_promote
;
215 void bt_init(prof_bt_t
*bt
, void **vec
);
216 void prof_backtrace(prof_bt_t
*bt
, unsigned nignore
);
217 prof_thr_cnt_t
*prof_lookup(prof_bt_t
*bt
);
218 void prof_idump(void);
219 bool prof_mdump(const char *filename
);
220 void prof_gdump(void);
221 prof_tdata_t
*prof_tdata_init(void);
222 void prof_tdata_cleanup(void *arg
);
223 void prof_boot0(void);
224 void prof_boot1(void);
225 bool prof_boot2(void);
227 #endif /* JEMALLOC_H_EXTERNS */
228 /******************************************************************************/
229 #ifdef JEMALLOC_H_INLINES
231 #define PROF_ALLOC_PREP(nignore, size, ret) do { \
232 prof_tdata_t *prof_tdata; \
235 assert(size == s2u(size)); \
237 prof_tdata = prof_tdata_get(); \
238 if ((uintptr_t)prof_tdata <= (uintptr_t)PROF_TDATA_STATE_MAX) { \
239 if (prof_tdata != NULL) \
240 ret = (prof_thr_cnt_t *)(uintptr_t)1U; \
246 if (opt_prof_active == false) { \
247 /* Sampling is currently inactive, so avoid sampling. */\
248 ret = (prof_thr_cnt_t *)(uintptr_t)1U; \
249 } else if (opt_lg_prof_sample == 0) { \
250 /* Don't bother with sampling logic, since sampling */\
251 /* interval is 1. */\
252 bt_init(&bt, prof_tdata->vec); \
253 prof_backtrace(&bt, nignore); \
254 ret = prof_lookup(&bt); \
256 if (prof_tdata->threshold == 0) { \
257 /* Initialize. Seed the prng differently for */\
259 prof_tdata->prng_state = \
260 (uint64_t)(uintptr_t)&size; \
261 prof_sample_threshold_update(prof_tdata); \
264 /* Determine whether to capture a backtrace based on */\
265 /* whether size is enough for prof_accum to reach */\
266 /* prof_tdata->threshold. However, delay updating */\
267 /* these variables until prof_{m,re}alloc(), because */\
268 /* we don't know for sure that the allocation will */\
271 /* Use subtraction rather than addition to avoid */\
272 /* potential integer overflow. */\
273 if (size >= prof_tdata->threshold - \
274 prof_tdata->accum) { \
275 bt_init(&bt, prof_tdata->vec); \
276 prof_backtrace(&bt, nignore); \
277 ret = prof_lookup(&bt); \
279 ret = (prof_thr_cnt_t *)(uintptr_t)1U; \
283 #ifndef JEMALLOC_ENABLE_INLINE
284 malloc_tsd_protos(JEMALLOC_ATTR(unused
), prof_tdata
, prof_tdata_t
*)
286 prof_tdata_t
*prof_tdata_get(void);
287 void prof_sample_threshold_update(prof_tdata_t
*prof_tdata
);
288 prof_ctx_t
*prof_ctx_get(const void *ptr
);
289 void prof_ctx_set(const void *ptr
, prof_ctx_t
*ctx
);
290 bool prof_sample_accum_update(size_t size
);
291 void prof_malloc(const void *ptr
, size_t size
, prof_thr_cnt_t
*cnt
);
292 void prof_realloc(const void *ptr
, size_t size
, prof_thr_cnt_t
*cnt
,
293 size_t old_size
, prof_ctx_t
*old_ctx
);
294 void prof_free(const void *ptr
, size_t size
);
297 #if (defined(JEMALLOC_ENABLE_INLINE) || defined(JEMALLOC_PROF_C_))
298 /* Thread-specific backtrace cache, used to reduce bt2ctx contention. */
299 malloc_tsd_externs(prof_tdata
, prof_tdata_t
*)
300 malloc_tsd_funcs(JEMALLOC_INLINE
, prof_tdata
, prof_tdata_t
*, NULL
,
303 JEMALLOC_INLINE prof_tdata_t
*
306 prof_tdata_t
*prof_tdata
;
308 cassert(config_prof
);
310 prof_tdata
= *prof_tdata_tsd_get();
311 if ((uintptr_t)prof_tdata
<= (uintptr_t)PROF_TDATA_STATE_MAX
) {
312 if (prof_tdata
== NULL
)
313 prof_tdata
= prof_tdata_init();
320 prof_sample_threshold_update(prof_tdata_t
*prof_tdata
)
325 cassert(config_prof
);
328 * Compute sample threshold as a geometrically distributed random
329 * variable with mean (2^opt_lg_prof_sample).
333 * prof_tdata->threshold = | -------- |, where p = -------------------
334 * | log(1-p) | opt_lg_prof_sample
337 * For more information on the math, see:
339 * Non-Uniform Random Variate Generation
341 * Springer-Verlag, New York, 1986
343 * (http://cg.scs.carleton.ca/~luc/rnbookindex.html)
345 prng64(r
, 53, prof_tdata
->prng_state
,
346 UINT64_C(6364136223846793005), UINT64_C(1442695040888963407));
347 u
= (double)r
* (1.0/9007199254740992.0L);
348 prof_tdata
->threshold
= (uint64_t)(log(u
) /
349 log(1.0 - (1.0 / (double)((uint64_t)1U << opt_lg_prof_sample
))))
353 JEMALLOC_INLINE prof_ctx_t
*
354 prof_ctx_get(const void *ptr
)
357 arena_chunk_t
*chunk
;
359 cassert(config_prof
);
362 chunk
= (arena_chunk_t
*)CHUNK_ADDR2BASE(ptr
);
365 ret
= arena_prof_ctx_get(ptr
);
367 ret
= huge_prof_ctx_get(ptr
);
373 prof_ctx_set(const void *ptr
, prof_ctx_t
*ctx
)
375 arena_chunk_t
*chunk
;
377 cassert(config_prof
);
380 chunk
= (arena_chunk_t
*)CHUNK_ADDR2BASE(ptr
);
383 arena_prof_ctx_set(ptr
, ctx
);
385 huge_prof_ctx_set(ptr
, ctx
);
389 prof_sample_accum_update(size_t size
)
391 prof_tdata_t
*prof_tdata
;
393 cassert(config_prof
);
394 /* Sampling logic is unnecessary if the interval is 1. */
395 assert(opt_lg_prof_sample
!= 0);
397 prof_tdata
= *prof_tdata_tsd_get();
398 if ((uintptr_t)prof_tdata
<= (uintptr_t)PROF_TDATA_STATE_MAX
)
401 /* Take care to avoid integer overflow. */
402 if (size
>= prof_tdata
->threshold
- prof_tdata
->accum
) {
403 prof_tdata
->accum
-= (prof_tdata
->threshold
- size
);
404 /* Compute new sample threshold. */
405 prof_sample_threshold_update(prof_tdata
);
406 while (prof_tdata
->accum
>= prof_tdata
->threshold
) {
407 prof_tdata
->accum
-= prof_tdata
->threshold
;
408 prof_sample_threshold_update(prof_tdata
);
412 prof_tdata
->accum
+= size
;
418 prof_malloc(const void *ptr
, size_t size
, prof_thr_cnt_t
*cnt
)
421 cassert(config_prof
);
423 assert(size
== isalloc(ptr
, true));
425 if (opt_lg_prof_sample
!= 0) {
426 if (prof_sample_accum_update(size
)) {
428 * Don't sample. For malloc()-like allocation, it is
429 * always possible to tell in advance how large an
430 * object's usable size will be, so there should never
431 * be a difference between the size passed to
432 * PROF_ALLOC_PREP() and prof_malloc().
434 assert((uintptr_t)cnt
== (uintptr_t)1U);
438 if ((uintptr_t)cnt
> (uintptr_t)1U) {
439 prof_ctx_set(ptr
, cnt
->ctx
);
446 cnt
->cnts
.curbytes
+= size
;
447 if (opt_prof_accum
) {
448 cnt
->cnts
.accumobjs
++;
449 cnt
->cnts
.accumbytes
+= size
;
459 prof_ctx_set(ptr
, (prof_ctx_t
*)(uintptr_t)1U);
463 prof_realloc(const void *ptr
, size_t size
, prof_thr_cnt_t
*cnt
,
464 size_t old_size
, prof_ctx_t
*old_ctx
)
466 prof_thr_cnt_t
*told_cnt
;
468 cassert(config_prof
);
469 assert(ptr
!= NULL
|| (uintptr_t)cnt
<= (uintptr_t)1U);
472 assert(size
== isalloc(ptr
, true));
473 if (opt_lg_prof_sample
!= 0) {
474 if (prof_sample_accum_update(size
)) {
476 * Don't sample. The size passed to
477 * PROF_ALLOC_PREP() was larger than what
478 * actually got allocated, so a backtrace was
479 * captured for this allocation, even though
480 * its actual size was insufficient to cross
481 * the sample threshold.
483 cnt
= (prof_thr_cnt_t
*)(uintptr_t)1U;
488 if ((uintptr_t)old_ctx
> (uintptr_t)1U) {
489 told_cnt
= prof_lookup(old_ctx
->bt
);
490 if (told_cnt
== NULL
) {
492 * It's too late to propagate OOM for this realloc(),
493 * so operate directly on old_cnt->ctx->cnt_merged.
495 malloc_mutex_lock(old_ctx
->lock
);
496 old_ctx
->cnt_merged
.curobjs
--;
497 old_ctx
->cnt_merged
.curbytes
-= old_size
;
498 malloc_mutex_unlock(old_ctx
->lock
);
499 told_cnt
= (prof_thr_cnt_t
*)(uintptr_t)1U;
502 told_cnt
= (prof_thr_cnt_t
*)(uintptr_t)1U;
504 if ((uintptr_t)told_cnt
> (uintptr_t)1U)
506 if ((uintptr_t)cnt
> (uintptr_t)1U) {
507 prof_ctx_set(ptr
, cnt
->ctx
);
510 prof_ctx_set(ptr
, (prof_ctx_t
*)(uintptr_t)1U);
514 if ((uintptr_t)told_cnt
> (uintptr_t)1U) {
515 told_cnt
->cnts
.curobjs
--;
516 told_cnt
->cnts
.curbytes
-= old_size
;
518 if ((uintptr_t)cnt
> (uintptr_t)1U) {
520 cnt
->cnts
.curbytes
+= size
;
521 if (opt_prof_accum
) {
522 cnt
->cnts
.accumobjs
++;
523 cnt
->cnts
.accumbytes
+= size
;
529 if ((uintptr_t)told_cnt
> (uintptr_t)1U)
531 if ((uintptr_t)cnt
> (uintptr_t)1U)
534 mb_write(); /* Not strictly necessary. */
538 prof_free(const void *ptr
, size_t size
)
540 prof_ctx_t
*ctx
= prof_ctx_get(ptr
);
542 cassert(config_prof
);
544 if ((uintptr_t)ctx
> (uintptr_t)1) {
545 prof_thr_cnt_t
*tcnt
;
546 assert(size
== isalloc(ptr
, true));
547 tcnt
= prof_lookup(ctx
->bt
);
554 tcnt
->cnts
.curobjs
--;
555 tcnt
->cnts
.curbytes
-= size
;
565 * OOM during free() cannot be propagated, so operate
566 * directly on cnt->ctx->cnt_merged.
568 malloc_mutex_lock(ctx
->lock
);
569 ctx
->cnt_merged
.curobjs
--;
570 ctx
->cnt_merged
.curbytes
-= size
;
571 malloc_mutex_unlock(ctx
->lock
);
577 #endif /* JEMALLOC_H_INLINES */
578 /******************************************************************************/