Skip to content

[sanitizer] Warn if allocator size exceeds max user virtual address #152428

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Aug 7, 2025
Merged
Changes from 4 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions compiler-rt/lib/sanitizer_common/sanitizer_allocator_primary64.h
Original file line number Diff line number Diff line change
Expand Up @@ -113,6 +113,23 @@ class SizeClassAllocator64 {
// ~(uptr)0.
void Init(s32 release_to_os_interval_ms, uptr heap_start = 0) {
uptr TotalSpaceSize = kSpaceSize + AdditionalSize();

uptr MaxAddr = GetMaxUserVirtualAddress();
// VReport does not call the sanitizer allocator.
VReport(3, "Max user virtual address: 0x%zx\n", MaxAddr);
VReport(3, "Total space size for primary allocator: 0x%zx\n",
TotalSpaceSize);
// TODO: hypothetical edge case: on >48-bit VMA systems, Linux by default
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

it's not immediately clear what there is TO DO

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is nothing to do in the immediate or even medium-term future. But suppose it's the year 2800: 256TB heaps are commonplace, this warning message keeps popping up. and you get woken from cryogenic sleep because you are the last-known maintainer of Android sanitizers; you'll be glad the TODO is there to hint that the check needs revising.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i mean: if it says TODO, it should clearly state what there is to do. if it's just an explanation of the state of things, remove the TODO.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've revised it

// maps as if it was a 48-bit VMA, but a sanitizer could
// theoretically map beyond the 48-bit limit (N.B. 2**48 == 256TB).
if (heap_start + TotalSpaceSize >= MaxAddr) {
// We can't easily adjust the requested heap size, because kSpaceSize is
// const (for optimization) and used throughout the code.
VReport(0, "Error: heap size %zx exceeds max user virtual address %zx\n",
TotalSpaceSize, MaxAddr);
VReport(
0, "Try using a kernel that allows a larger virtual address space\n");
}
PremappedHeap = heap_start != 0;
if (PremappedHeap) {
CHECK(!kUsingConstantSpaceBeg);
Expand Down
Loading