git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH 21/26] git-compat-util: drop `UNLEAK()` annotation

From
Rubén Justo <rjusto@gmail.com>
Date
Nov 10, 2024, 21:47 UTC
Message-ID
<f3c10656-94a1-42b2-94bf-253978c278ab@gmail.com>
In-Reply-To
<2d64a941d511a88a25c1f8258b5c5682089fdae9.1730901926.git.ps@pks.im>
On Wed, Nov 06, 2024 at 04:11:21PM +0100, Patrick Steinhardt wrote:
Show 19 quoted lines
> There are two users of `UNLEAK()` left in our codebase:
> 
>   - In "builtin/clone.c", annotating the `repo` variable. That leak has
>     already been fixed though as you can see in the context, where we do
>     know to free `repo_to_free`.
> 
>   - In "builtin/diff.c", to unleak entries of the `blob[]` array. That
>     leak has also been fixed, because the entries we assign to that
>     array come from `rev.pending.objects`, and we do eventually release
>     `rev`.
> 
> This neatly demonstrates one of the issues with `UNLEAK()`: it is quite
> easy for the annotation to become stale. A second issue is that its
> whole intent is to paper over leaks. And while that has been a necessary
> evil in the past, because Git was leaking left and right, it isn't
> really much of an issue nowadays where our test suite has no known leaks
> anymore.
> 
> Remove the last two users
OK.
> and drop the now-unused `UNLEAK()` annotation.
Perhaps it would be convenient to do this as a separate commit.

Just for reference we have this annotation since 0e5bba53af (add UNLEAK annotation for reducing leak false positives, 2017-09-08).

Show 89 quoted lines
> 
> Signed-off-by: Patrick Steinhardt <ps@pks.im>
> ---
>  builtin/clone.c   |  1 -
>  builtin/diff.c    |  1 -
>  git-compat-util.h | 20 --------------------
>  usage.c           | 15 ---------------
>  4 files changed, 37 deletions(-)
> 
> diff --git a/builtin/clone.c b/builtin/clone.c
> index 59fcb317a68..e851b1475d7 100644
> --- a/builtin/clone.c
> +++ b/builtin/clone.c
> @@ -1586,7 +1586,6 @@ int cmd_clone(int argc,
>  	free(dir);
>  	free(path);
>  	free(repo_to_free);
> -	UNLEAK(repo);
>  	junk_mode = JUNK_LEAVE_ALL;
>  
>  	transport_ls_refs_options_release(&transport_ls_refs_options);
> diff --git a/builtin/diff.c b/builtin/diff.c
> index dca52d4221e..2fe92f373e9 100644
> --- a/builtin/diff.c
> +++ b/builtin/diff.c
> @@ -628,6 +628,5 @@ int cmd_diff(int argc,
>  	release_revisions(&rev);
>  	object_array_clear(&ent);
>  	symdiff_release(&sdiff);
> -	UNLEAK(blob);
>  	return result;
>  }
> diff --git a/git-compat-util.h b/git-compat-util.h
> index e4a306dd563..a06d4f3809e 100644
> --- a/git-compat-util.h
> +++ b/git-compat-util.h
> @@ -1527,26 +1527,6 @@ int cmd_main(int, const char **);
>  int common_exit(const char *file, int line, int code);
>  #define exit(code) exit(common_exit(__FILE__, __LINE__, (code)))
>  
> -/*
> - * You can mark a stack variable with UNLEAK(var) to avoid it being
> - * reported as a leak by tools like LSAN or valgrind. The argument
> - * should generally be the variable itself (not its address and not what
> - * it points to). It's safe to use this on pointers which may already
> - * have been freed, or on pointers which may still be in use.
> - *
> - * Use this _only_ for a variable that leaks by going out of scope at
> - * program exit (so only from cmd_* functions or their direct helpers).
> - * Normal functions, especially those which may be called multiple
> - * times, should actually free their memory. This is only meant as
> - * an annotation, and does nothing in non-leak-checking builds.
> - */
> -#ifdef SUPPRESS_ANNOTATED_LEAKS
> -void unleak_memory(const void *ptr, size_t len);
> -#define UNLEAK(var) unleak_memory(&(var), sizeof(var))
> -#else
> -#define UNLEAK(var) do {} while (0)
> -#endif
> -
>  #define z_const
>  #include <zlib.h>
>  
> diff --git a/usage.c b/usage.c
> index 7a2f7805f57..29a9725784a 100644
> --- a/usage.c
> +++ b/usage.c
> @@ -350,18 +350,3 @@ void bug_fl(const char *file, int line, const char *fmt, ...)
>  	trace2_cmd_error_va(fmt, ap);
>  	va_end(ap);
>  }
> -
> -#ifdef SUPPRESS_ANNOTATED_LEAKS
> -void unleak_memory(const void *ptr, size_t len)
> -{
> -	static struct suppressed_leak_root {
> -		struct suppressed_leak_root *next;
> -		char data[FLEX_ARRAY];
> -	} *suppressed_leaks;
> -	struct suppressed_leak_root *root;
> -
> -	FLEX_ALLOC_MEM(root, data, ptr, len);
> -	root->next = suppressed_leaks;
> -	suppressed_leaks = root;
> -}
> -#endif
> -- 
> 2.47.0.229.g8f8d6eee53.dirty
> 
Previous: Patrick SteinhardtNext: Patrick Steinhardt
Message 31 of 39 in “Memory leak fixes (pt.10, final)”
  1. 00/26 Memory leak fixes (pt.10, final)Patrick Steinhardt, Nov 6, 2024
  2. 01/26 builtin/blame: fix leaking blame entries with `--incremental`Patrick Steinhardt, Nov 6, 2024
  3. 02/26 bisect: fix leaking good/bad terms when reading multipe timesPatrick Steinhardt, Nov 6, 2024
  4. 03/26 bisect: fix leaking string in `handle_bad_merge_base()`Patrick Steinhardt, Nov 6, 2024
  5. 04/26 bisect: fix leaking `current_bad_oid`Patrick Steinhardt, Nov 6, 2024
  6. 05/26 bisect: fix multiple leaks in `bisect_next_all()`Patrick Steinhardt, Nov 6, 2024
  7. 06/26 bisect: fix leaking commit list items in `check_merge_base()`Patrick Steinhardt, Nov 6, 2024
  8. 07/26 bisect: fix various cases where we leak commit list itemsPatrick Steinhardt, Nov 6, 2024
  9. 08/26 line-log: fix leak when rewriting commit parentsPatrick Steinhardt, Nov 6, 2024
  10. 09/26 strvec: introduce new `strvec_splice()` functionPatrick Steinhardt, Nov 6, 2024
  11. Rubén JustoNov 10, 2024
  12. Patrick SteinhardtNov 11, 2024
  13. 10/26 git: refactor alias handling to use a `struct strvec`Patrick Steinhardt, Nov 6, 2024
  14. Rubén JustoNov 10, 2024
  15. 11/26 git: refactor builtin handling to use a `struct strvec`Patrick Steinhardt, Nov 6, 2024
  16. 12/26 split-index: fix memory leak in `move_cache_to_base_index()`Patrick Steinhardt, Nov 6, 2024
  17. Rubén JustoNov 10, 2024
  18. 13/26 builtin/sparse-checkout: fix leaking sanitized patternsPatrick Steinhardt, Nov 6, 2024
  19. 14/26 help: refactor to not use globals for reading configPatrick Steinhardt, Nov 6, 2024
  20. 15/26 help: fix leaking `struct cmdnames`Patrick Steinhardt, Nov 6, 2024
  21. Rubén JustoNov 10, 2024
  22. Patrick SteinhardtNov 11, 2024
  23. 16/26 help: fix leaking return value from `help_unknown_cmd()`Patrick Steinhardt, Nov 6, 2024
  24. 17/26 builtin/help: fix leaks in `check_git_cmd()`Patrick Steinhardt, Nov 6, 2024
  25. 18/26 builtin/init-db: fix leaking directory pathsPatrick Steinhardt, Nov 6, 2024
  26. Rubén JustoNov 10, 2024
  27. 19/26 builtin/branch: fix leaking sorting optionsPatrick Steinhardt, Nov 6, 2024
  28. Rubén JustoNov 10, 2024
  29. 20/26 t/helper: fix leaking commit graph in "read-graph" subcommandPatrick Steinhardt, Nov 6, 2024
  30. 21/26 git-compat-util: drop `UNLEAK()` annotationPatrick Steinhardt, Nov 6, 2024
  31. Rubén JustoNov 10, 2024
  32. Patrick SteinhardtNov 11, 2024
  33. 22/26 t5601: work around leak sanitizer issuePatrick Steinhardt, Nov 6, 2024
  34. 23/26 t: mark some tests as leak freePatrick Steinhardt, Nov 6, 2024
  35. 24/26 t: remove unneeded !SANITIZE_LEAK prerequisitesPatrick Steinhardt, Nov 6, 2024
  36. 25/26 test-lib: unconditionally enable leak checkingPatrick Steinhardt, Nov 6, 2024
  37. 26/26 t: remove TEST_PASSES_SANITIZE_LEAK annotationsPatrick Steinhardt, Nov 6, 2024
  38. Rubén JustoNov 10, 2024
  39. Patrick SteinhardtNov 11, 2024

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.