Bluetooth: Close L2CAP channel on invalid ReqSeq
[platform/kernel/linux-rpi.git] / lib / debugobjects.c
1 /*
2  * Generic infrastructure for lifetime debugging of objects.
3  *
4  * Started by Thomas Gleixner
5  *
6  * Copyright (C) 2008, Thomas Gleixner <tglx@linutronix.de>
7  *
8  * For licencing details see kernel-base/COPYING
9  */
10 #include <linux/debugobjects.h>
11 #include <linux/interrupt.h>
12 #include <linux/sched.h>
13 #include <linux/seq_file.h>
14 #include <linux/debugfs.h>
15 #include <linux/slab.h>
16 #include <linux/hash.h>
17
18 #define ODEBUG_HASH_BITS        14
19 #define ODEBUG_HASH_SIZE        (1 << ODEBUG_HASH_BITS)
20
21 #define ODEBUG_POOL_SIZE        512
22 #define ODEBUG_POOL_MIN_LEVEL   256
23
24 #define ODEBUG_CHUNK_SHIFT      PAGE_SHIFT
25 #define ODEBUG_CHUNK_SIZE       (1 << ODEBUG_CHUNK_SHIFT)
26 #define ODEBUG_CHUNK_MASK       (~(ODEBUG_CHUNK_SIZE - 1))
27
28 struct debug_bucket {
29         struct hlist_head       list;
30         raw_spinlock_t          lock;
31 };
32
33 static struct debug_bucket      obj_hash[ODEBUG_HASH_SIZE];
34
35 static struct debug_obj         obj_static_pool[ODEBUG_POOL_SIZE] __initdata;
36
37 static DEFINE_RAW_SPINLOCK(pool_lock);
38
39 static HLIST_HEAD(obj_pool);
40
41 static int                      obj_pool_min_free = ODEBUG_POOL_SIZE;
42 static int                      obj_pool_free = ODEBUG_POOL_SIZE;
43 static int                      obj_pool_used;
44 static int                      obj_pool_max_used;
45 static struct kmem_cache        *obj_cache;
46
47 static int                      debug_objects_maxchain __read_mostly;
48 static int                      debug_objects_fixups __read_mostly;
49 static int                      debug_objects_warnings __read_mostly;
50 static int                      debug_objects_enabled __read_mostly
51                                 = CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT;
52
53 static struct debug_obj_descr   *descr_test  __read_mostly;
54
55 static void free_obj_work(struct work_struct *work);
56 static DECLARE_WORK(debug_obj_work, free_obj_work);
57
58 static int __init enable_object_debug(char *str)
59 {
60         debug_objects_enabled = 1;
61         return 0;
62 }
63
64 static int __init disable_object_debug(char *str)
65 {
66         debug_objects_enabled = 0;
67         return 0;
68 }
69
70 early_param("debug_objects", enable_object_debug);
71 early_param("no_debug_objects", disable_object_debug);
72
73 static const char *obj_states[ODEBUG_STATE_MAX] = {
74         [ODEBUG_STATE_NONE]             = "none",
75         [ODEBUG_STATE_INIT]             = "initialized",
76         [ODEBUG_STATE_INACTIVE]         = "inactive",
77         [ODEBUG_STATE_ACTIVE]           = "active",
78         [ODEBUG_STATE_DESTROYED]        = "destroyed",
79         [ODEBUG_STATE_NOTAVAILABLE]     = "not available",
80 };
81
82 static int fill_pool(void)
83 {
84         gfp_t gfp = GFP_ATOMIC | __GFP_NORETRY | __GFP_NOWARN;
85         struct debug_obj *new;
86         unsigned long flags;
87
88         if (likely(obj_pool_free >= ODEBUG_POOL_MIN_LEVEL))
89                 return obj_pool_free;
90
91         if (unlikely(!obj_cache))
92                 return obj_pool_free;
93
94         while (obj_pool_free < ODEBUG_POOL_MIN_LEVEL) {
95
96                 new = kmem_cache_zalloc(obj_cache, gfp);
97                 if (!new)
98                         return obj_pool_free;
99
100                 raw_spin_lock_irqsave(&pool_lock, flags);
101                 hlist_add_head(&new->node, &obj_pool);
102                 obj_pool_free++;
103                 raw_spin_unlock_irqrestore(&pool_lock, flags);
104         }
105         return obj_pool_free;
106 }
107
108 /*
109  * Lookup an object in the hash bucket.
110  */
111 static struct debug_obj *lookup_object(void *addr, struct debug_bucket *b)
112 {
113         struct hlist_node *node;
114         struct debug_obj *obj;
115         int cnt = 0;
116
117         hlist_for_each_entry(obj, node, &b->list, node) {
118                 cnt++;
119                 if (obj->object == addr)
120                         return obj;
121         }
122         if (cnt > debug_objects_maxchain)
123                 debug_objects_maxchain = cnt;
124
125         return NULL;
126 }
127
128 /*
129  * Allocate a new object. If the pool is empty, switch off the debugger.
130  * Must be called with interrupts disabled.
131  */
132 static struct debug_obj *
133 alloc_object(void *addr, struct debug_bucket *b, struct debug_obj_descr *descr)
134 {
135         struct debug_obj *obj = NULL;
136
137         raw_spin_lock(&pool_lock);
138         if (obj_pool.first) {
139                 obj         = hlist_entry(obj_pool.first, typeof(*obj), node);
140
141                 obj->object = addr;
142                 obj->descr  = descr;
143                 obj->state  = ODEBUG_STATE_NONE;
144                 hlist_del(&obj->node);
145
146                 hlist_add_head(&obj->node, &b->list);
147
148                 obj_pool_used++;
149                 if (obj_pool_used > obj_pool_max_used)
150                         obj_pool_max_used = obj_pool_used;
151
152                 obj_pool_free--;
153                 if (obj_pool_free < obj_pool_min_free)
154                         obj_pool_min_free = obj_pool_free;
155         }
156         raw_spin_unlock(&pool_lock);
157
158         return obj;
159 }
160
161 /*
162  * workqueue function to free objects.
163  */
164 static void free_obj_work(struct work_struct *work)
165 {
166         struct debug_obj *obj;
167         unsigned long flags;
168
169         raw_spin_lock_irqsave(&pool_lock, flags);
170         while (obj_pool_free > ODEBUG_POOL_SIZE) {
171                 obj = hlist_entry(obj_pool.first, typeof(*obj), node);
172                 hlist_del(&obj->node);
173                 obj_pool_free--;
174                 /*
175                  * We release pool_lock across kmem_cache_free() to
176                  * avoid contention on pool_lock.
177                  */
178                 raw_spin_unlock_irqrestore(&pool_lock, flags);
179                 kmem_cache_free(obj_cache, obj);
180                 raw_spin_lock_irqsave(&pool_lock, flags);
181         }
182         raw_spin_unlock_irqrestore(&pool_lock, flags);
183 }
184
185 /*
186  * Put the object back into the pool and schedule work to free objects
187  * if necessary.
188  */
189 static void free_object(struct debug_obj *obj)
190 {
191         unsigned long flags;
192         int sched = 0;
193
194         raw_spin_lock_irqsave(&pool_lock, flags);
195         /*
196          * schedule work when the pool is filled and the cache is
197          * initialized:
198          */
199         if (obj_pool_free > ODEBUG_POOL_SIZE && obj_cache)
200                 sched = !work_pending(&debug_obj_work);
201         hlist_add_head(&obj->node, &obj_pool);
202         obj_pool_free++;
203         obj_pool_used--;
204         raw_spin_unlock_irqrestore(&pool_lock, flags);
205         if (sched)
206                 schedule_work(&debug_obj_work);
207 }
208
209 /*
210  * We run out of memory. That means we probably have tons of objects
211  * allocated.
212  */
213 static void debug_objects_oom(void)
214 {
215         struct debug_bucket *db = obj_hash;
216         struct hlist_node *node, *tmp;
217         HLIST_HEAD(freelist);
218         struct debug_obj *obj;
219         unsigned long flags;
220         int i;
221
222         printk(KERN_WARNING "ODEBUG: Out of memory. ODEBUG disabled\n");
223
224         for (i = 0; i < ODEBUG_HASH_SIZE; i++, db++) {
225                 raw_spin_lock_irqsave(&db->lock, flags);
226                 hlist_move_list(&db->list, &freelist);
227                 raw_spin_unlock_irqrestore(&db->lock, flags);
228
229                 /* Now free them */
230                 hlist_for_each_entry_safe(obj, node, tmp, &freelist, node) {
231                         hlist_del(&obj->node);
232                         free_object(obj);
233                 }
234         }
235 }
236
237 /*
238  * We use the pfn of the address for the hash. That way we can check
239  * for freed objects simply by checking the affected bucket.
240  */
241 static struct debug_bucket *get_bucket(unsigned long addr)
242 {
243         unsigned long hash;
244
245         hash = hash_long((addr >> ODEBUG_CHUNK_SHIFT), ODEBUG_HASH_BITS);
246         return &obj_hash[hash];
247 }
248
249 static void debug_print_object(struct debug_obj *obj, char *msg)
250 {
251         static int limit;
252
253         if (limit < 5 && obj->descr != descr_test) {
254                 limit++;
255                 WARN(1, KERN_ERR "ODEBUG: %s %s object type: %s\n", msg,
256                        obj_states[obj->state], obj->descr->name);
257         }
258         debug_objects_warnings++;
259 }
260
261 /*
262  * Try to repair the damage, so we have a better chance to get useful
263  * debug output.
264  */
265 static void
266 debug_object_fixup(int (*fixup)(void *addr, enum debug_obj_state state),
267                    void * addr, enum debug_obj_state state)
268 {
269         if (fixup)
270                 debug_objects_fixups += fixup(addr, state);
271 }
272
273 static void debug_object_is_on_stack(void *addr, int onstack)
274 {
275         int is_on_stack;
276         static int limit;
277
278         if (limit > 4)
279                 return;
280
281         is_on_stack = object_is_on_stack(addr);
282         if (is_on_stack == onstack)
283                 return;
284
285         limit++;
286         if (is_on_stack)
287                 printk(KERN_WARNING
288                        "ODEBUG: object is on stack, but not annotated\n");
289         else
290                 printk(KERN_WARNING
291                        "ODEBUG: object is not on stack, but annotated\n");
292         WARN_ON(1);
293 }
294
295 static void
296 __debug_object_init(void *addr, struct debug_obj_descr *descr, int onstack)
297 {
298         enum debug_obj_state state;
299         struct debug_bucket *db;
300         struct debug_obj *obj;
301         unsigned long flags;
302
303         fill_pool();
304
305         db = get_bucket((unsigned long) addr);
306
307         raw_spin_lock_irqsave(&db->lock, flags);
308
309         obj = lookup_object(addr, db);
310         if (!obj) {
311                 obj = alloc_object(addr, db, descr);
312                 if (!obj) {
313                         debug_objects_enabled = 0;
314                         raw_spin_unlock_irqrestore(&db->lock, flags);
315                         debug_objects_oom();
316                         return;
317                 }
318                 debug_object_is_on_stack(addr, onstack);
319         }
320
321         switch (obj->state) {
322         case ODEBUG_STATE_NONE:
323         case ODEBUG_STATE_INIT:
324         case ODEBUG_STATE_INACTIVE:
325                 obj->state = ODEBUG_STATE_INIT;
326                 break;
327
328         case ODEBUG_STATE_ACTIVE:
329                 debug_print_object(obj, "init");
330                 state = obj->state;
331                 raw_spin_unlock_irqrestore(&db->lock, flags);
332                 debug_object_fixup(descr->fixup_init, addr, state);
333                 return;
334
335         case ODEBUG_STATE_DESTROYED:
336                 debug_print_object(obj, "init");
337                 break;
338         default:
339                 break;
340         }
341
342         raw_spin_unlock_irqrestore(&db->lock, flags);
343 }
344
345 /**
346  * debug_object_init - debug checks when an object is initialized
347  * @addr:       address of the object
348  * @descr:      pointer to an object specific debug description structure
349  */
350 void debug_object_init(void *addr, struct debug_obj_descr *descr)
351 {
352         if (!debug_objects_enabled)
353                 return;
354
355         __debug_object_init(addr, descr, 0);
356 }
357
358 /**
359  * debug_object_init_on_stack - debug checks when an object on stack is
360  *                              initialized
361  * @addr:       address of the object
362  * @descr:      pointer to an object specific debug description structure
363  */
364 void debug_object_init_on_stack(void *addr, struct debug_obj_descr *descr)
365 {
366         if (!debug_objects_enabled)
367                 return;
368
369         __debug_object_init(addr, descr, 1);
370 }
371
372 /**
373  * debug_object_activate - debug checks when an object is activated
374  * @addr:       address of the object
375  * @descr:      pointer to an object specific debug description structure
376  */
377 void debug_object_activate(void *addr, struct debug_obj_descr *descr)
378 {
379         enum debug_obj_state state;
380         struct debug_bucket *db;
381         struct debug_obj *obj;
382         unsigned long flags;
383
384         if (!debug_objects_enabled)
385                 return;
386
387         db = get_bucket((unsigned long) addr);
388
389         raw_spin_lock_irqsave(&db->lock, flags);
390
391         obj = lookup_object(addr, db);
392         if (obj) {
393                 switch (obj->state) {
394                 case ODEBUG_STATE_INIT:
395                 case ODEBUG_STATE_INACTIVE:
396                         obj->state = ODEBUG_STATE_ACTIVE;
397                         break;
398
399                 case ODEBUG_STATE_ACTIVE:
400                         debug_print_object(obj, "activate");
401                         state = obj->state;
402                         raw_spin_unlock_irqrestore(&db->lock, flags);
403                         debug_object_fixup(descr->fixup_activate, addr, state);
404                         return;
405
406                 case ODEBUG_STATE_DESTROYED:
407                         debug_print_object(obj, "activate");
408                         break;
409                 default:
410                         break;
411                 }
412                 raw_spin_unlock_irqrestore(&db->lock, flags);
413                 return;
414         }
415
416         raw_spin_unlock_irqrestore(&db->lock, flags);
417         /*
418          * This happens when a static object is activated. We
419          * let the type specific code decide whether this is
420          * true or not.
421          */
422         debug_object_fixup(descr->fixup_activate, addr,
423                            ODEBUG_STATE_NOTAVAILABLE);
424 }
425
426 /**
427  * debug_object_deactivate - debug checks when an object is deactivated
428  * @addr:       address of the object
429  * @descr:      pointer to an object specific debug description structure
430  */
431 void debug_object_deactivate(void *addr, struct debug_obj_descr *descr)
432 {
433         struct debug_bucket *db;
434         struct debug_obj *obj;
435         unsigned long flags;
436
437         if (!debug_objects_enabled)
438                 return;
439
440         db = get_bucket((unsigned long) addr);
441
442         raw_spin_lock_irqsave(&db->lock, flags);
443
444         obj = lookup_object(addr, db);
445         if (obj) {
446                 switch (obj->state) {
447                 case ODEBUG_STATE_INIT:
448                 case ODEBUG_STATE_INACTIVE:
449                 case ODEBUG_STATE_ACTIVE:
450                         obj->state = ODEBUG_STATE_INACTIVE;
451                         break;
452
453                 case ODEBUG_STATE_DESTROYED:
454                         debug_print_object(obj, "deactivate");
455                         break;
456                 default:
457                         break;
458                 }
459         } else {
460                 struct debug_obj o = { .object = addr,
461                                        .state = ODEBUG_STATE_NOTAVAILABLE,
462                                        .descr = descr };
463
464                 debug_print_object(&o, "deactivate");
465         }
466
467         raw_spin_unlock_irqrestore(&db->lock, flags);
468 }
469
470 /**
471  * debug_object_destroy - debug checks when an object is destroyed
472  * @addr:       address of the object
473  * @descr:      pointer to an object specific debug description structure
474  */
475 void debug_object_destroy(void *addr, struct debug_obj_descr *descr)
476 {
477         enum debug_obj_state state;
478         struct debug_bucket *db;
479         struct debug_obj *obj;
480         unsigned long flags;
481
482         if (!debug_objects_enabled)
483                 return;
484
485         db = get_bucket((unsigned long) addr);
486
487         raw_spin_lock_irqsave(&db->lock, flags);
488
489         obj = lookup_object(addr, db);
490         if (!obj)
491                 goto out_unlock;
492
493         switch (obj->state) {
494         case ODEBUG_STATE_NONE:
495         case ODEBUG_STATE_INIT:
496         case ODEBUG_STATE_INACTIVE:
497                 obj->state = ODEBUG_STATE_DESTROYED;
498                 break;
499         case ODEBUG_STATE_ACTIVE:
500                 debug_print_object(obj, "destroy");
501                 state = obj->state;
502                 raw_spin_unlock_irqrestore(&db->lock, flags);
503                 debug_object_fixup(descr->fixup_destroy, addr, state);
504                 return;
505
506         case ODEBUG_STATE_DESTROYED:
507                 debug_print_object(obj, "destroy");
508                 break;
509         default:
510                 break;
511         }
512 out_unlock:
513         raw_spin_unlock_irqrestore(&db->lock, flags);
514 }
515
516 /**
517  * debug_object_free - debug checks when an object is freed
518  * @addr:       address of the object
519  * @descr:      pointer to an object specific debug description structure
520  */
521 void debug_object_free(void *addr, struct debug_obj_descr *descr)
522 {
523         enum debug_obj_state state;
524         struct debug_bucket *db;
525         struct debug_obj *obj;
526         unsigned long flags;
527
528         if (!debug_objects_enabled)
529                 return;
530
531         db = get_bucket((unsigned long) addr);
532
533         raw_spin_lock_irqsave(&db->lock, flags);
534
535         obj = lookup_object(addr, db);
536         if (!obj)
537                 goto out_unlock;
538
539         switch (obj->state) {
540         case ODEBUG_STATE_ACTIVE:
541                 debug_print_object(obj, "free");
542                 state = obj->state;
543                 raw_spin_unlock_irqrestore(&db->lock, flags);
544                 debug_object_fixup(descr->fixup_free, addr, state);
545                 return;
546         default:
547                 hlist_del(&obj->node);
548                 raw_spin_unlock_irqrestore(&db->lock, flags);
549                 free_object(obj);
550                 return;
551         }
552 out_unlock:
553         raw_spin_unlock_irqrestore(&db->lock, flags);
554 }
555
556 #ifdef CONFIG_DEBUG_OBJECTS_FREE
557 static void __debug_check_no_obj_freed(const void *address, unsigned long size)
558 {
559         unsigned long flags, oaddr, saddr, eaddr, paddr, chunks;
560         struct hlist_node *node, *tmp;
561         HLIST_HEAD(freelist);
562         struct debug_obj_descr *descr;
563         enum debug_obj_state state;
564         struct debug_bucket *db;
565         struct debug_obj *obj;
566         int cnt;
567
568         saddr = (unsigned long) address;
569         eaddr = saddr + size;
570         paddr = saddr & ODEBUG_CHUNK_MASK;
571         chunks = ((eaddr - paddr) + (ODEBUG_CHUNK_SIZE - 1));
572         chunks >>= ODEBUG_CHUNK_SHIFT;
573
574         for (;chunks > 0; chunks--, paddr += ODEBUG_CHUNK_SIZE) {
575                 db = get_bucket(paddr);
576
577 repeat:
578                 cnt = 0;
579                 raw_spin_lock_irqsave(&db->lock, flags);
580                 hlist_for_each_entry_safe(obj, node, tmp, &db->list, node) {
581                         cnt++;
582                         oaddr = (unsigned long) obj->object;
583                         if (oaddr < saddr || oaddr >= eaddr)
584                                 continue;
585
586                         switch (obj->state) {
587                         case ODEBUG_STATE_ACTIVE:
588                                 debug_print_object(obj, "free");
589                                 descr = obj->descr;
590                                 state = obj->state;
591                                 raw_spin_unlock_irqrestore(&db->lock, flags);
592                                 debug_object_fixup(descr->fixup_free,
593                                                    (void *) oaddr, state);
594                                 goto repeat;
595                         default:
596                                 hlist_del(&obj->node);
597                                 hlist_add_head(&obj->node, &freelist);
598                                 break;
599                         }
600                 }
601                 raw_spin_unlock_irqrestore(&db->lock, flags);
602
603                 /* Now free them */
604                 hlist_for_each_entry_safe(obj, node, tmp, &freelist, node) {
605                         hlist_del(&obj->node);
606                         free_object(obj);
607                 }
608
609                 if (cnt > debug_objects_maxchain)
610                         debug_objects_maxchain = cnt;
611         }
612 }
613
614 void debug_check_no_obj_freed(const void *address, unsigned long size)
615 {
616         if (debug_objects_enabled)
617                 __debug_check_no_obj_freed(address, size);
618 }
619 #endif
620
621 #ifdef CONFIG_DEBUG_FS
622
623 static int debug_stats_show(struct seq_file *m, void *v)
624 {
625         seq_printf(m, "max_chain     :%d\n", debug_objects_maxchain);
626         seq_printf(m, "warnings      :%d\n", debug_objects_warnings);
627         seq_printf(m, "fixups        :%d\n", debug_objects_fixups);
628         seq_printf(m, "pool_free     :%d\n", obj_pool_free);
629         seq_printf(m, "pool_min_free :%d\n", obj_pool_min_free);
630         seq_printf(m, "pool_used     :%d\n", obj_pool_used);
631         seq_printf(m, "pool_max_used :%d\n", obj_pool_max_used);
632         return 0;
633 }
634
635 static int debug_stats_open(struct inode *inode, struct file *filp)
636 {
637         return single_open(filp, debug_stats_show, NULL);
638 }
639
640 static const struct file_operations debug_stats_fops = {
641         .open           = debug_stats_open,
642         .read           = seq_read,
643         .llseek         = seq_lseek,
644         .release        = single_release,
645 };
646
647 static int __init debug_objects_init_debugfs(void)
648 {
649         struct dentry *dbgdir, *dbgstats;
650
651         if (!debug_objects_enabled)
652                 return 0;
653
654         dbgdir = debugfs_create_dir("debug_objects", NULL);
655         if (!dbgdir)
656                 return -ENOMEM;
657
658         dbgstats = debugfs_create_file("stats", 0444, dbgdir, NULL,
659                                        &debug_stats_fops);
660         if (!dbgstats)
661                 goto err;
662
663         return 0;
664
665 err:
666         debugfs_remove(dbgdir);
667
668         return -ENOMEM;
669 }
670 __initcall(debug_objects_init_debugfs);
671
672 #else
673 static inline void debug_objects_init_debugfs(void) { }
674 #endif
675
676 #ifdef CONFIG_DEBUG_OBJECTS_SELFTEST
677
678 /* Random data structure for the self test */
679 struct self_test {
680         unsigned long   dummy1[6];
681         int             static_init;
682         unsigned long   dummy2[3];
683 };
684
685 static __initdata struct debug_obj_descr descr_type_test;
686
687 /*
688  * fixup_init is called when:
689  * - an active object is initialized
690  */
691 static int __init fixup_init(void *addr, enum debug_obj_state state)
692 {
693         struct self_test *obj = addr;
694
695         switch (state) {
696         case ODEBUG_STATE_ACTIVE:
697                 debug_object_deactivate(obj, &descr_type_test);
698                 debug_object_init(obj, &descr_type_test);
699                 return 1;
700         default:
701                 return 0;
702         }
703 }
704
705 /*
706  * fixup_activate is called when:
707  * - an active object is activated
708  * - an unknown object is activated (might be a statically initialized object)
709  */
710 static int __init fixup_activate(void *addr, enum debug_obj_state state)
711 {
712         struct self_test *obj = addr;
713
714         switch (state) {
715         case ODEBUG_STATE_NOTAVAILABLE:
716                 if (obj->static_init == 1) {
717                         debug_object_init(obj, &descr_type_test);
718                         debug_object_activate(obj, &descr_type_test);
719                         /*
720                          * Real code should return 0 here ! This is
721                          * not a fixup of some bad behaviour. We
722                          * merily call the debug_init function to keep
723                          * track of the object.
724                          */
725                         return 1;
726                 } else {
727                         /* Real code needs to emit a warning here */
728                 }
729                 return 0;
730
731         case ODEBUG_STATE_ACTIVE:
732                 debug_object_deactivate(obj, &descr_type_test);
733                 debug_object_activate(obj, &descr_type_test);
734                 return 1;
735
736         default:
737                 return 0;
738         }
739 }
740
741 /*
742  * fixup_destroy is called when:
743  * - an active object is destroyed
744  */
745 static int __init fixup_destroy(void *addr, enum debug_obj_state state)
746 {
747         struct self_test *obj = addr;
748
749         switch (state) {
750         case ODEBUG_STATE_ACTIVE:
751                 debug_object_deactivate(obj, &descr_type_test);
752                 debug_object_destroy(obj, &descr_type_test);
753                 return 1;
754         default:
755                 return 0;
756         }
757 }
758
759 /*
760  * fixup_free is called when:
761  * - an active object is freed
762  */
763 static int __init fixup_free(void *addr, enum debug_obj_state state)
764 {
765         struct self_test *obj = addr;
766
767         switch (state) {
768         case ODEBUG_STATE_ACTIVE:
769                 debug_object_deactivate(obj, &descr_type_test);
770                 debug_object_free(obj, &descr_type_test);
771                 return 1;
772         default:
773                 return 0;
774         }
775 }
776
777 static int
778 check_results(void *addr, enum debug_obj_state state, int fixups, int warnings)
779 {
780         struct debug_bucket *db;
781         struct debug_obj *obj;
782         unsigned long flags;
783         int res = -EINVAL;
784
785         db = get_bucket((unsigned long) addr);
786
787         raw_spin_lock_irqsave(&db->lock, flags);
788
789         obj = lookup_object(addr, db);
790         if (!obj && state != ODEBUG_STATE_NONE) {
791                 WARN(1, KERN_ERR "ODEBUG: selftest object not found\n");
792                 goto out;
793         }
794         if (obj && obj->state != state) {
795                 WARN(1, KERN_ERR "ODEBUG: selftest wrong state: %d != %d\n",
796                        obj->state, state);
797                 goto out;
798         }
799         if (fixups != debug_objects_fixups) {
800                 WARN(1, KERN_ERR "ODEBUG: selftest fixups failed %d != %d\n",
801                        fixups, debug_objects_fixups);
802                 goto out;
803         }
804         if (warnings != debug_objects_warnings) {
805                 WARN(1, KERN_ERR "ODEBUG: selftest warnings failed %d != %d\n",
806                        warnings, debug_objects_warnings);
807                 goto out;
808         }
809         res = 0;
810 out:
811         raw_spin_unlock_irqrestore(&db->lock, flags);
812         if (res)
813                 debug_objects_enabled = 0;
814         return res;
815 }
816
817 static __initdata struct debug_obj_descr descr_type_test = {
818         .name                   = "selftest",
819         .fixup_init             = fixup_init,
820         .fixup_activate         = fixup_activate,
821         .fixup_destroy          = fixup_destroy,
822         .fixup_free             = fixup_free,
823 };
824
825 static __initdata struct self_test obj = { .static_init = 0 };
826
827 static void __init debug_objects_selftest(void)
828 {
829         int fixups, oldfixups, warnings, oldwarnings;
830         unsigned long flags;
831
832         local_irq_save(flags);
833
834         fixups = oldfixups = debug_objects_fixups;
835         warnings = oldwarnings = debug_objects_warnings;
836         descr_test = &descr_type_test;
837
838         debug_object_init(&obj, &descr_type_test);
839         if (check_results(&obj, ODEBUG_STATE_INIT, fixups, warnings))
840                 goto out;
841         debug_object_activate(&obj, &descr_type_test);
842         if (check_results(&obj, ODEBUG_STATE_ACTIVE, fixups, warnings))
843                 goto out;
844         debug_object_activate(&obj, &descr_type_test);
845         if (check_results(&obj, ODEBUG_STATE_ACTIVE, ++fixups, ++warnings))
846                 goto out;
847         debug_object_deactivate(&obj, &descr_type_test);
848         if (check_results(&obj, ODEBUG_STATE_INACTIVE, fixups, warnings))
849                 goto out;
850         debug_object_destroy(&obj, &descr_type_test);
851         if (check_results(&obj, ODEBUG_STATE_DESTROYED, fixups, warnings))
852                 goto out;
853         debug_object_init(&obj, &descr_type_test);
854         if (check_results(&obj, ODEBUG_STATE_DESTROYED, fixups, ++warnings))
855                 goto out;
856         debug_object_activate(&obj, &descr_type_test);
857         if (check_results(&obj, ODEBUG_STATE_DESTROYED, fixups, ++warnings))
858                 goto out;
859         debug_object_deactivate(&obj, &descr_type_test);
860         if (check_results(&obj, ODEBUG_STATE_DESTROYED, fixups, ++warnings))
861                 goto out;
862         debug_object_free(&obj, &descr_type_test);
863         if (check_results(&obj, ODEBUG_STATE_NONE, fixups, warnings))
864                 goto out;
865
866         obj.static_init = 1;
867         debug_object_activate(&obj, &descr_type_test);
868         if (check_results(&obj, ODEBUG_STATE_ACTIVE, ++fixups, warnings))
869                 goto out;
870         debug_object_init(&obj, &descr_type_test);
871         if (check_results(&obj, ODEBUG_STATE_INIT, ++fixups, ++warnings))
872                 goto out;
873         debug_object_free(&obj, &descr_type_test);
874         if (check_results(&obj, ODEBUG_STATE_NONE, fixups, warnings))
875                 goto out;
876
877 #ifdef CONFIG_DEBUG_OBJECTS_FREE
878         debug_object_init(&obj, &descr_type_test);
879         if (check_results(&obj, ODEBUG_STATE_INIT, fixups, warnings))
880                 goto out;
881         debug_object_activate(&obj, &descr_type_test);
882         if (check_results(&obj, ODEBUG_STATE_ACTIVE, fixups, warnings))
883                 goto out;
884         __debug_check_no_obj_freed(&obj, sizeof(obj));
885         if (check_results(&obj, ODEBUG_STATE_NONE, ++fixups, ++warnings))
886                 goto out;
887 #endif
888         printk(KERN_INFO "ODEBUG: selftest passed\n");
889
890 out:
891         debug_objects_fixups = oldfixups;
892         debug_objects_warnings = oldwarnings;
893         descr_test = NULL;
894
895         local_irq_restore(flags);
896 }
897 #else
898 static inline void debug_objects_selftest(void) { }
899 #endif
900
901 /*
902  * Called during early boot to initialize the hash buckets and link
903  * the static object pool objects into the poll list. After this call
904  * the object tracker is fully operational.
905  */
906 void __init debug_objects_early_init(void)
907 {
908         int i;
909
910         for (i = 0; i < ODEBUG_HASH_SIZE; i++)
911                 raw_spin_lock_init(&obj_hash[i].lock);
912
913         for (i = 0; i < ODEBUG_POOL_SIZE; i++)
914                 hlist_add_head(&obj_static_pool[i].node, &obj_pool);
915 }
916
917 /*
918  * Convert the statically allocated objects to dynamic ones:
919  */
920 static int debug_objects_replace_static_objects(void)
921 {
922         struct debug_bucket *db = obj_hash;
923         struct hlist_node *node, *tmp;
924         struct debug_obj *obj, *new;
925         HLIST_HEAD(objects);
926         int i, cnt = 0;
927
928         for (i = 0; i < ODEBUG_POOL_SIZE; i++) {
929                 obj = kmem_cache_zalloc(obj_cache, GFP_KERNEL);
930                 if (!obj)
931                         goto free;
932                 hlist_add_head(&obj->node, &objects);
933         }
934
935         /*
936          * When debug_objects_mem_init() is called we know that only
937          * one CPU is up, so disabling interrupts is enough
938          * protection. This avoids the lockdep hell of lock ordering.
939          */
940         local_irq_disable();
941
942         /* Remove the statically allocated objects from the pool */
943         hlist_for_each_entry_safe(obj, node, tmp, &obj_pool, node)
944                 hlist_del(&obj->node);
945         /* Move the allocated objects to the pool */
946         hlist_move_list(&objects, &obj_pool);
947
948         /* Replace the active object references */
949         for (i = 0; i < ODEBUG_HASH_SIZE; i++, db++) {
950                 hlist_move_list(&db->list, &objects);
951
952                 hlist_for_each_entry(obj, node, &objects, node) {
953                         new = hlist_entry(obj_pool.first, typeof(*obj), node);
954                         hlist_del(&new->node);
955                         /* copy object data */
956                         *new = *obj;
957                         hlist_add_head(&new->node, &db->list);
958                         cnt++;
959                 }
960         }
961
962         printk(KERN_DEBUG "ODEBUG: %d of %d active objects replaced\n", cnt,
963                obj_pool_used);
964         local_irq_enable();
965         return 0;
966 free:
967         hlist_for_each_entry_safe(obj, node, tmp, &objects, node) {
968                 hlist_del(&obj->node);
969                 kmem_cache_free(obj_cache, obj);
970         }
971         return -ENOMEM;
972 }
973
974 /*
975  * Called after the kmem_caches are functional to setup a dedicated
976  * cache pool, which has the SLAB_DEBUG_OBJECTS flag set. This flag
977  * prevents that the debug code is called on kmem_cache_free() for the
978  * debug tracker objects to avoid recursive calls.
979  */
980 void __init debug_objects_mem_init(void)
981 {
982         if (!debug_objects_enabled)
983                 return;
984
985         obj_cache = kmem_cache_create("debug_objects_cache",
986                                       sizeof (struct debug_obj), 0,
987                                       SLAB_DEBUG_OBJECTS, NULL);
988
989         if (!obj_cache || debug_objects_replace_static_objects()) {
990                 debug_objects_enabled = 0;
991                 if (obj_cache)
992                         kmem_cache_destroy(obj_cache);
993                 printk(KERN_WARNING "ODEBUG: out of memory.\n");
994         } else
995                 debug_objects_selftest();
996 }