2199 typedef struct malloc_chunk* mchunkptr;  typedef
2226 #define _mem2chunk(mem)     ((mchunkptr)((char*)(mem) - TWO_SIZE_T_SIZES))
2230 #define mem2chunk(mem)      (mchunkptr)hwasan_remove_ptr_tag(_mem2chunk(mem))
2236 #define align_as_chunk(A)   (mchunkptr)((A) + align_offset(chunk2mem(A)))
2284 #define chunk_plus_offset(p, s)  ((mchunkptr)(((char*)(p)) + (s)))
2285 #define chunk_minus_offset(p, s) ((mchunkptr)(((char*)(p)) - (s)))
2288 #define next_chunk(p) ((mchunkptr)( ((char*)(p)) + ((p)->head & ~FLAG_BITS)))
2289 #define prev_chunk(p) ((mchunkptr)( ((char*)(p)) - ((p)->prev_foot) ))
2295 #define get_foot(p, s)  (((mchunkptr)((char*)(p) + (s)))->prev_foot)
2296 #define set_foot(p, s)  (((mchunkptr)((char*)(p) + (s)))->prev_foot = (s))
2600   mchunkptr  dv;
2601   mchunkptr  top;
2605   mchunkptr  smallbins[(NSMALLBINS+1)*2];
2823 static void   do_check_any_chunk(mstate m, mchunkptr p);
2824 static void   do_check_top_chunk(mstate m, mchunkptr p);
2825 static void   do_check_mmapped_chunk(mstate m, mchunkptr p);
2826 static void   do_check_inuse_chunk(mstate m, mchunkptr p);
2827 static void   do_check_free_chunk(mstate m, mchunkptr p);
2833 static int    bin_find(mstate m, mchunkptr x);
3068   ((mchunkptr)(((char*)(p)) + (s)))->head |= PINUSE_BIT)
3073   ((mchunkptr)(((char*)(p)) + (s)))->head |= PINUSE_BIT)
3083   (((mchunkptr)((char*)(p) + (s)))->prev_foot = ((size_t)(M) ^ mparams.magic))
3086   ((mstate)(((mchunkptr)((char*)(p) +\
3091   (((mchunkptr)(((char*)(p)) + (s)))->head |= PINUSE_BIT), \
3096   (((mchunkptr)(((char*)(p)) + (s)))->head |= PINUSE_BIT),\
3231 static void do_check_any_chunk(mstate m, mchunkptr p) {  in do_check_any_chunk()
3237 static void do_check_top_chunk(mstate m, mchunkptr p) {  in do_check_top_chunk()
3251 static void do_check_mmapped_chunk(mstate m, mchunkptr p) {  in do_check_mmapped_chunk()
3265 static void do_check_inuse_chunk(mstate m, mchunkptr p) {  in do_check_inuse_chunk()
3276 static void do_check_free_chunk(mstate m, mchunkptr p) {  in do_check_free_chunk()
3278   mchunkptr next = chunk_plus_offset(p, sz);  in do_check_free_chunk()
3301     mchunkptr p = mem2chunk(mem);  in do_check_malloced_chunk()
3326     do_check_any_chunk(m, ((mchunkptr)u));  in do_check_tree()
3377   mchunkptr p = b->bk;  in do_check_smallbin()
3384       mchunkptr q;  in do_check_smallbin()
3399 static int bin_find(mstate m, mchunkptr x) {  in bin_find()
3405       mchunkptr p = b;  in bin_find()
3441       mchunkptr q = align_as_chunk(s->base);  in traverse_and_check()
3442       mchunkptr lastq = 0;  in traverse_and_check()
3510         mchunkptr q = align_as_chunk(s->base);  in internal_mallinfo()
3554         mchunkptr q = align_as_chunk(s->base);  in internal_malloc_stats()
3584   mchunkptr B = smallbin_at(M, I);\
3585   mchunkptr F = B;\
3602   mchunkptr F = P->fd;\
3603   mchunkptr B = P->bk;\
3628   mchunkptr F = P->fd;\
3650     mchunkptr DV = M->dv;\
3850       mchunkptr p = (mchunkptr)(mm + offset);  in mmap_alloc()
3870 static mchunkptr mmap_resize(mstate m, mchunkptr oldp, size_t nb, int flags) {  in mmap_resize()
3886       mchunkptr newp = (mchunkptr)(cp + offset);  in mmap_resize()
3908 static void init_top(mstate m, mchunkptr p, size_t psize) {  in init_top()
3911   p = (mchunkptr)((char*)p + offset);  in init_top()
3954   mchunkptr p = align_as_chunk(newbase);  in prepend_alloc()
3955   mchunkptr oldfirst = align_as_chunk(oldbase);  in prepend_alloc()
3957   mchunkptr q = chunk_plus_offset(p, nb);  in prepend_alloc()
4004   mchunkptr sp = (mchunkptr)csp;  in add_segment()
4006   mchunkptr tnext = chunk_plus_offset(sp, ssize);  in add_segment()
4007   mchunkptr p = tnext;  in add_segment()
4011   init_top(m, (mchunkptr)tbase, tsize - TOP_FOOT_SIZE);  in add_segment()
4024     mchunkptr nextp = chunk_plus_offset(p, SIZE_T_SIZE);  in add_segment()
4036     mchunkptr q = (mchunkptr)old_top;  in add_segment()
4038     mchunkptr tn = chunk_plus_offset(q, psize);  in add_segment()
4199         init_top(m, (mchunkptr)tbase, tsize - TOP_FOOT_SIZE);  in sys_alloc()
4204         mchunkptr mn = next_chunk(mem2chunk(m));  in sys_alloc()
4243       mchunkptr p = m->top;  in sys_alloc()
4244       mchunkptr r = m->top = chunk_plus_offset(p, nb);  in sys_alloc()
4271       mchunkptr p = align_as_chunk(base);  in release_unused_segments()
4375 static void dispose_chunk(mstate m, mchunkptr p, size_t psize) {  in dispose_chunk()
4376   mchunkptr next = chunk_plus_offset(p, psize);  in dispose_chunk()
4378     mchunkptr prev;  in dispose_chunk()
4497       mchunkptr r = chunk_plus_offset(v, nb);  in tmalloc_large()
4535     mchunkptr r = chunk_plus_offset(v, nb);  in tmalloc_small()
4595         mchunkptr b, p;  in dlmalloc()
4609           mchunkptr b, p, r;  in dlmalloc()
4652       mchunkptr p = gm->dv;  in dlmalloc()
4654         mchunkptr r = gm->dv = chunk_plus_offset(p, nb);  in dlmalloc()
4672       mchunkptr p = gm->top;  in dlmalloc()
4673       mchunkptr r = gm->top = chunk_plus_offset(p, nb);  in dlmalloc()
4706     mchunkptr p  = mem2chunk(mem);  in dlfree()
4724         mchunkptr next = chunk_plus_offset(p, psize);  in dlfree()
4734             mchunkptr prev = chunk_minus_offset(p, prevsize);  in dlfree()
4831 static mchunkptr try_realloc_chunk(mstate m, mchunkptr p, size_t nb,  in try_realloc_chunk()
4833   mchunkptr newp = 0;  in try_realloc_chunk()
4835   mchunkptr next = chunk_plus_offset(p, oldsize);  in try_realloc_chunk()
4844         mchunkptr r = chunk_plus_offset(p, nb);  in try_realloc_chunk()
4855         mchunkptr newtop = chunk_plus_offset(p, nb);  in try_realloc_chunk()
4868           mchunkptr r = chunk_plus_offset(p, nb);  in try_realloc_chunk()
4869           mchunkptr n = chunk_plus_offset(r, dsize);  in try_realloc_chunk()
4895           mchunkptr r = chunk_plus_offset(p, nb);  in try_realloc_chunk()
4929       mchunkptr p = mem2chunk(mem);  in internal_memalign()
4950         mchunkptr newp = (mchunkptr)pos;  in internal_memalign()
4971           mchunkptr remainder = chunk_plus_offset(p, nb);  in internal_memalign()
5008   mchunkptr p;              /* corresponding chunk */  in ialloc()
5011   mchunkptr array_chunk;    /* chunk for malloced ptr array */  in ialloc()
5132         mchunkptr p = mem2chunk(mem);  in internal_bulk_free()
5144           mchunkptr next = next_chunk(p);  in internal_bulk_free()
5175     mchunkptr top = m->top;  in internal_inspect_all()
5178       mchunkptr q = align_as_chunk(s->base);  in internal_inspect_all()
5180         mchunkptr next = next_chunk(q);  in internal_inspect_all()
5227     mchunkptr oldp = mem2chunk(oldmem);  in dlrealloc()
5242       mchunkptr newp = try_realloc_chunk(m, oldp, nb, 1);  in dlrealloc()
5273       mchunkptr oldp = mem2chunk(oldmem);  in dlrealloc_in_place()
5284         mchunkptr newp = try_realloc_chunk(m, oldp, nb, 0);  in dlrealloc_in_place()
5421     mchunkptr p = mem2chunk(mem);  in dlmalloc_usable_size()
5436   mchunkptr mn;  in init_user_mstate()
5437   mchunkptr msp = align_as_chunk(tbase);  in init_user_mstate()
5552         mchunkptr b, p;  in mspace_malloc()
5566           mchunkptr b, p, r;  in mspace_malloc()
5609       mchunkptr p = ms->dv;  in mspace_malloc()
5611         mchunkptr r = ms->dv = chunk_plus_offset(p, nb);  in mspace_malloc()
5629       mchunkptr p = ms->top;  in mspace_malloc()
5630       mchunkptr r = ms->top = chunk_plus_offset(p, nb);  in mspace_malloc()
5651     mchunkptr p  = mem2chunk(mem);  in mspace_free()
5666         mchunkptr next = chunk_plus_offset(p, psize);  in mspace_free()
5676             mchunkptr prev = chunk_minus_offset(p, prevsize);  in mspace_free()
5785     mchunkptr oldp = mem2chunk(oldmem);  in mspace_realloc()
5796       mchunkptr newp = try_realloc_chunk(m, oldp, nb, 1);  in mspace_realloc()
5823       mchunkptr oldp = mem2chunk(oldmem);  in mspace_realloc_in_place()
5835         mchunkptr newp = try_realloc_chunk(m, oldp, nb, 0);  in mspace_realloc_in_place()
5997     mchunkptr p = mem2chunk(mem);  in mspace_usable_size()