123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081 |
- // Copyright 2021 The Chromium Authors. All rights reserved.
- // Use of this source code is governed by a BSD-style license that can be
- // found in the LICENSE file.
- #include "base/allocator/partition_allocator/oom.h"
- #include "base/allocator/partition_allocator/oom_callback.h"
- #include "base/allocator/partition_allocator/partition_alloc_base/compiler_specific.h"
- #include "base/allocator/partition_allocator/partition_alloc_base/debug/alias.h"
- #include "base/allocator/partition_allocator/partition_alloc_base/immediate_crash.h"
- #include "build/build_config.h"
- #if BUILDFLAG(IS_WIN)
- #include <windows.h>
- #include <stdlib.h>
- #include <array>
- #endif // BUILDFLAG(IS_WIN)
- namespace partition_alloc {
- size_t g_oom_size = 0U;
- namespace internal {
- // Crash server classifies base::internal::OnNoMemoryInternal as OOM.
- // TODO(crbug.com/1151236): Update to
- // partition_alloc::internal::base::internal::OnNoMemoryInternal
- PA_NOINLINE void OnNoMemoryInternal(size_t size) {
- g_oom_size = size;
- #if BUILDFLAG(IS_WIN)
- // Kill the process. This is important for security since most of code
- // does not check the result of memory allocation.
- // https://msdn.microsoft.com/en-us/library/het71c37.aspx
- // Pass the size of the failed request in an exception argument.
- ULONG_PTR exception_args[] = {size};
- ::RaiseException(win::kOomExceptionCode, EXCEPTION_NONCONTINUABLE,
- std::size(exception_args), exception_args);
- // Safety check, make sure process exits here.
- _exit(win::kOomExceptionCode);
- #else
- size_t tmp_size = size;
- internal::base::debug::Alias(&tmp_size);
- // Note: Don't add anything that may allocate here. Depending on the
- // allocator, this may be called from within the allocator (e.g. with
- // PartitionAlloc), and would deadlock as our locks are not recursive.
- //
- // Additionally, this is unlikely to work, since allocating from an OOM
- // handler is likely to fail.
- //
- // Use PA_IMMEDIATE_CRASH() so that the top frame in the crash is our code,
- // rather than using abort() or similar; this avoids the crash server needing
- // to be able to successfully unwind through libc to get to the correct
- // address, which is particularly an issue on Android.
- PA_IMMEDIATE_CRASH();
- #endif // BUILDFLAG(IS_WIN)
- }
- } // namespace internal
- void TerminateBecauseOutOfMemory(size_t size) {
- internal::OnNoMemoryInternal(size);
- }
- namespace internal {
- // The crash is generated in a PA_NOINLINE function so that we can classify the
- // crash as an OOM solely by analyzing the stack trace. It is tagged as
- // PA_NOT_TAIL_CALLED to ensure that its parent function stays on the stack.
- [[noreturn]] PA_NOINLINE void PA_NOT_TAIL_CALLED OnNoMemory(size_t size) {
- RunPartitionAllocOomCallback();
- TerminateBecauseOutOfMemory(size);
- PA_IMMEDIATE_CRASH();
- }
- } // namespace internal
- } // namespace partition_alloc
|