31 	char *ptr;  in kmalloc_oob_right()  local
35 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_right()
36 	if (!ptr) {  in kmalloc_oob_right()
41 	ptr[size] = 'x';  in kmalloc_oob_right()
42 	kfree(ptr);  in kmalloc_oob_right()
47 	char *ptr;  in kmalloc_oob_left()  local
51 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_left()
52 	if (!ptr) {  in kmalloc_oob_left()
57 	*ptr = *(ptr - 1);  in kmalloc_oob_left()
58 	kfree(ptr);  in kmalloc_oob_left()
63 	char *ptr;  in kmalloc_node_oob_right()  local
67 	ptr = kmalloc_node(size, GFP_KERNEL, 0);  in kmalloc_node_oob_right()
68 	if (!ptr) {  in kmalloc_node_oob_right()
73 	ptr[size] = 0;  in kmalloc_node_oob_right()
74 	kfree(ptr);  in kmalloc_node_oob_right()
80 	char *ptr;  in kmalloc_pagealloc_oob_right()  local
87 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_pagealloc_oob_right()
88 	if (!ptr) {  in kmalloc_pagealloc_oob_right()
93 	ptr[size] = 0;  in kmalloc_pagealloc_oob_right()
94 	kfree(ptr);  in kmalloc_pagealloc_oob_right()
100 	char *ptr;  in kmalloc_large_oob_right()  local
106 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_large_oob_right()
107 	if (!ptr) {  in kmalloc_large_oob_right()
112 	ptr[size] = 0;  in kmalloc_large_oob_right()
113 	kfree(ptr);  in kmalloc_large_oob_right()
175 	char *ptr;  in kmalloc_oob_memset_2()  local
179 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_2()
180 	if (!ptr) {  in kmalloc_oob_memset_2()
185 	memset(ptr+7, 0, 2);  in kmalloc_oob_memset_2()
186 	kfree(ptr);  in kmalloc_oob_memset_2()
191 	char *ptr;  in kmalloc_oob_memset_4()  local
195 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_4()
196 	if (!ptr) {  in kmalloc_oob_memset_4()
201 	memset(ptr+5, 0, 4);  in kmalloc_oob_memset_4()
202 	kfree(ptr);  in kmalloc_oob_memset_4()
208 	char *ptr;  in kmalloc_oob_memset_8()  local
212 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_8()
213 	if (!ptr) {  in kmalloc_oob_memset_8()
218 	memset(ptr+1, 0, 8);  in kmalloc_oob_memset_8()
219 	kfree(ptr);  in kmalloc_oob_memset_8()
224 	char *ptr;  in kmalloc_oob_memset_16()  local
228 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_memset_16()
229 	if (!ptr) {  in kmalloc_oob_memset_16()
234 	memset(ptr+1, 0, 16);  in kmalloc_oob_memset_16()
235 	kfree(ptr);  in kmalloc_oob_memset_16()
240 	char *ptr;  in kmalloc_oob_in_memset()  local
244 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_oob_in_memset()
245 	if (!ptr) {  in kmalloc_oob_in_memset()
250 	memset(ptr, 0, size+5);  in kmalloc_oob_in_memset()
251 	kfree(ptr);  in kmalloc_oob_in_memset()
256 	char *ptr;  in kmalloc_uaf()  local
260 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_uaf()
261 	if (!ptr) {  in kmalloc_uaf()
266 	kfree(ptr);  in kmalloc_uaf()
267 	*(ptr + 8) = 'x';  in kmalloc_uaf()
272 	char *ptr;  in kmalloc_uaf_memset()  local
276 	ptr = kmalloc(size, GFP_KERNEL);  in kmalloc_uaf_memset()
277 	if (!ptr) {  in kmalloc_uaf_memset()
282 	kfree(ptr);  in kmalloc_uaf_memset()
283 	memset(ptr, 0, size);  in kmalloc_uaf_memset()
358 	char *ptr;  in ksize_unpoisons_memory()  local
362 	ptr = kmalloc(size, GFP_KERNEL);  in ksize_unpoisons_memory()
363 	if (!ptr) {  in ksize_unpoisons_memory()
367 	real_size = ksize(ptr);  in ksize_unpoisons_memory()
369 	ptr[size] = 'x';  in ksize_unpoisons_memory()
371 	ptr[real_size] = 'y';  in ksize_unpoisons_memory()
372 	kfree(ptr);  in ksize_unpoisons_memory()