930c5283b4
Fix Larson 36x slowdown: Remove tls_uninitialized early return in sll_refill_small_from_ss()
...
Problem:
- Larson benchmark showed 730K ops/s instead of expected 26M ops/s
- Class 1 TLS SLL cache always stayed empty (tls_count=0)
- All allocations went through slow path (shared_pool_acquire_slab at 48% CPU)
Root cause:
- In sll_refill_small_from_ss(), when TLS was completely uninitialized
(ss=NULL, meta=NULL, slab_base=NULL), the function returned 0 immediately
without calling superslab_refill() to initialize it
- The comment said "expect upper logic to call superslab_refill" but
tiny_alloc_fast_refill() did NOT call it after receiving 0
- This created a loop: TLS SLL stays empty → refill returns 0 → slow path
Fix:
- Remove the tls_uninitialized early return
- Let the existing downstream condition (!tls->ss || !tls->meta || ...)
handle the uninitialized case and call superslab_refill()
Result:
- Throughput: 730K → 26.5M ops/s (36x improvement)
- shared_pool_acquire_slab: 48% → 0% in perf profile
Introduced in: fcf098857🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 16:47:30 +09:00
8355214135
Fix NULL pointer crash in unified_cache_refill ss_active_add
...
When superslab_refill() fails in the inner loop, tls->ss can remain
NULL even when produced > 0 (from earlier successful allocations).
This caused a segfault at high iteration counts (>500K) in the
random_mixed benchmark.
Root cause: Line 353 calls ss_active_add(tls->ss, ...) without
checking if tls->ss is NULL after a failed refill breaks the loop.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 13:31:46 +09:00
7a03a614fd
Restrict ss_fast_lookup to validated Tiny pointer paths only
...
Safety fix: ss_fast_lookup masks pointer to 1MB boundary and reads
memory at that address. If called with arbitrary (non-Tiny) pointers,
the masked address could be unmapped → SEGFAULT.
Changes:
- tiny_free_fast(): Reverted to safe hak_super_lookup (can receive
arbitrary pointers without prior validation)
- ss_fast_lookup(): Added safety warning in comments documenting when
it's safe to use (after header magic 0xA0 validation)
ss_fast_lookup remains in LARSON_FIX paths where header magic is
already validated before the SuperSlab lookup.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 12:55:40 +09:00
64ed3d8d8c
Add ss_fast_lookup() for O(1) SuperSlab lookup via mask
...
Replaces expensive hak_super_lookup() (registry hash lookup, 50-100 cycles)
with fast mask-based lookup (~5-10 cycles) in free hot paths.
Algorithm:
1. Mask pointer with SUPERSLAB_SIZE_MIN (1MB) - works for both 1MB and 2MB SS
2. Validate magic (SUPERSLAB_MAGIC)
3. Range check using ss->lg_size
Applied to:
- tiny_free_fast.inc.h: tiny_free_fast() SuperSlab path
- tiny_free_fast_v2.inc.h: LARSON_FIX cross-thread check
- front/malloc_tiny_fast.h: free_tiny_fast() LARSON_FIX path
Note: Performance impact minimal with LARSON_FIX=OFF (default) since
SuperSlab lookup is skipped entirely in that case. Optimization benefits
LARSON_FIX=ON path for safe multi-threaded operation.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 12:47:10 +09:00
0a8bdb8b18
Fix release build debug logging in tiny_region_id.h
...
The allocation logging at line 236-249 was missing the
#if !HAKMEM_BUILD_RELEASE guard, causing fprintf(stderr)
on every allocation even in release builds.
Impact: 19.8M ops/s → 28.0M ops/s (+42%)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 11:58:00 +09:00
d8e3971dc2
Fix cross-thread ownership check: Use bits 8-15 for owner_tid_low
...
Problem:
- TLS_SLL_PUSH_DUP crash in Larson multi-threaded benchmark
- Cross-thread frees incorrectly routed to same-thread TLS path
- Root cause: pthread_t on glibc is 256-byte aligned (TCB base)
so lower 8 bits are ALWAYS 0x00 for ALL threads
Fix:
- Change owner_tid_low from (tid & 0xFF) to ((tid >> 8) & 0xFF)
- Bits 8-15 actually vary between threads, enabling correct detection
- Applied consistently across all ownership check locations:
- superslab_inline.h: ss_owner_try_acquire/release/is_mine
- slab_handle.h: slab_try_acquire
- tiny_free_fast.inc.h: tiny_free_is_same_thread_ss
- tiny_free_fast_v2.inc.h: cross-thread detection
- tiny_superslab_free.inc.h: same-thread check
- ss_allocation_box.c: slab initialization
- hakmem_tiny_superslab.c: ownership handling
Also added:
- Address watcher debug infrastructure (tiny_region_id.h)
- Cross-thread detection in malloc_tiny_fast.h Front Gate
Test results:
- Larson 1T/2T/4T: PASS (no TLS_SLL_PUSH_DUP crash)
- random_mixed: PASS
- Performance: ~20M ops/s (regression from 48M, needs optimization)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 11:52:11 +09:00
8af9123bcc
Larson double-free investigation: Add full operation lifecycle logging
...
**Diagnostic Enhancement**: Complete malloc/free/pop operation tracing for debug
**Problem**: Larson crashes with TLS_SLL_DUP at count=18, need to trace exact
pointer lifecycle to identify if allocator returns duplicate addresses or if
benchmark has double-free bug.
**Implementation** (ChatGPT + Claude + Task collaboration):
1. **Global Operation Counter** (core/hakmem_tiny_config_box.inc:9):
- Single atomic counter for all operations (malloc/free/pop)
- Chronological ordering across all paths
2. **Allocation Logging** (core/hakmem_tiny_config_box.inc:148-161):
- HAK_RET_ALLOC macro enhanced with operation logging
- Logs first 50 class=1 allocations with ptr/base/tls_count
3. **Free Logging** (core/tiny_free_fast_v2.inc.h:222-235):
- Added before tls_sll_push() call (line 221)
- Logs first 50 class=1 frees with ptr/base/tls_count_before
4. **Pop Logging** (core/box/tls_sll_box.h:587-597):
- Added in tls_sll_pop_impl() after successful pop
- Logs first 50 class=1 pops with base/tls_count_after
5. **Drain Debug Logging** (core/box/tls_sll_drain_box.h:143-151):
- Enhanced drain loop with detailed logging
- Tracks pop failures and drained block counts
**Initial Findings**:
- First 19 operations: ALL frees, ZERO allocations, ZERO pops
- OP#0006: First free of 0x...430
- OP#0018: Duplicate free of 0x...430 → TLS_SLL_DUP detected
- Suggests either: (a) allocations before logging starts, or (b) Larson bug
**Debug-only**: All logging gated by !HAKMEM_BUILD_RELEASE (zero cost in release)
**Next Steps**:
- Expand logging window to 200 operations
- Log initialization phase allocations
- Cross-check with Larson benchmark source
**Status**: Ready for extended testing
2025-11-27 08:18:01 +09:00
8553894171
Larson double-free investigation: Enhanced diagnostics + Remove buggy drain pushback
...
**Problem**: Larson benchmark crashes with TLS_SLL_DUP (double-free), 100% crash rate in debug
**Root Cause**: TLS drain pushback code (commit c2f104618
2025-11-27 07:30:32 +09:00
c2f104618f
Fix critical TLS drain memory leak causing potential double-free
...
## Root Cause
TLS drain was dropping pointers when SuperSlab lookup or slab_idx validation failed:
- Pop pointer from TLS SLL
- Lookup/validation fails
- continue → LEAK! Pointer never returned to any freelist
## Impact
Memory leak + potential double allocation:
1. Pointer P popped but leaked
2. Same address P reallocated from carve/other source
3. User frees P again → duplicate detection → ABORT
## Fix
**Before (BUGGY)**:
```c
if (!ss || invalid_slab_idx) {
continue; // ← LEAK!
}
```
**After (FIXED)**:
```c
if (!ss || invalid_slab_idx) {
// Push back to TLS SLL head (retry later)
tiny_next_write(class_idx, base, g_tls_sll[class_idx].head);
g_tls_sll[class_idx].head = base;
g_tls_sll[class_idx].count++;
break; // Stop draining to avoid infinite retry
}
```
## Files Changed
- core/box/tls_sll_drain_box.h: Fix 2 leak sites (SS lookup + slab_idx validation)
- docs/analysis/LARSON_DOUBLE_FREE_INVESTIGATION.md: Investigation report
## Related
- Larson double-free investigation (47% crash rate)
- Commit e4868bf23
2025-11-27 06:49:38 +09:00
e4868bf236
Larson crash investigation: Add freelist header write + abort() on duplicate
...
## Changes
1. **TLS SLL duplicate detection** (core/box/tls_sll_box.h:381)
- Changed 'return true' to 'abort()' to get backtrace on double-free
- Enables precise root cause identification
2. **Freelist header write fix** (core/tiny_superslab_alloc.inc.h:159-169)
- Added tiny_region_id_write_header() call in freelist allocation path
- Previously only linear carve wrote headers → stale headers on reuse
- Now both paths write headers consistently
## Root Cause Analysis
Backtrace revealed true double-free pattern:
- last_push_from=hak_tiny_free_fast_v2 (freed once)
- last_pop_from=(null) (never allocated)
- where=hak_tiny_free_fast_v2 (freed again!)
Same pointer freed twice WITHOUT reallocation in between.
## Status
- Freelist header fix: ✅ Implemented (necessary but not sufficient)
- Double-free still occurs: ❌ Deeper investigation needed
- Possible causes: User code bug, TLS drain race, remote free issue
Next: Investigate allocation/free flow with enhanced tracing
2025-11-27 05:57:22 +09:00
12c36afe46
Fix TSan build: Add weak stubs for sanitizer compatibility
...
Added weak stubs to core/link_stubs.c for symbols that are not needed
in HAKMEM_FORCE_LIBC_ALLOC_BUILD=1 (TSan/ASan) builds:
Stubs added:
- g_bump_chunk (int)
- g_tls_bcur, g_tls_bend (__thread uint8_t*[8])
- smallmid_backend_free()
- expand_superslab_head()
Also added: #include <stdint.h> for uint8_t
Impact:
- TSan build: PASS (larson_hakmem_tsan successfully built)
- Phase 2 ready: Can now use TSan to debug Larson crashes
Next: Use TSan to investigate Larson 47% crash rate
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 05:19:56 +09:00
6b791b97d4
ENV Cleanup: Delete Ultra HEAP & BG Remote dead code (-1,096 LOC)
...
Deleted files (11):
- core/ultra/ directory (6 files: tiny_ultra_heap.*, tiny_ultra_page_arena.*)
- core/front/tiny_ultrafront.h
- core/tiny_ultra_fast.inc.h
- core/hakmem_tiny_ultra_front.inc.h
- core/hakmem_tiny_ultra_simple.inc
- core/hakmem_tiny_ultra_batch_box.inc
Edited files (10):
- core/hakmem_tiny.c: Remove Ultra HEAP #includes, move ultra_batch_for_class()
- core/hakmem_tiny_tls_state_box.inc: Delete TinyUltraFront, g_ultra_simple
- core/hakmem_tiny_phase6_wrappers_box.inc: Delete ULTRA_SIMPLE block
- core/hakmem_tiny_alloc.inc: Delete Ultra-Front code block
- core/hakmem_tiny_init.inc: Delete ULTRA_SIMPLE ENV loading
- core/hakmem_tiny_remote_target.{c,h}: Delete g_bg_remote_enable/batch
- core/tiny_refill.h: Remove BG Remote check (always break)
- core/hakmem_tiny_background.inc: Delete BG Remote drain loop
Deleted ENV variables:
- HAKMEM_TINY_ULTRA_HEAP (build flag, undefined)
- HAKMEM_TINY_ULTRA_L0
- HAKMEM_TINY_ULTRA_HEAP_DUMP
- HAKMEM_TINY_ULTRA_PAGE_DUMP
- HAKMEM_TINY_ULTRA_FRONT
- HAKMEM_TINY_BG_REMOTE (no getenv, dead code)
- HAKMEM_TINY_BG_REMOTE_BATCH (no getenv, dead code)
- HAKMEM_TINY_ULTRA_SIMPLE (references only)
Impact:
- Code reduction: -1,096 lines
- Binary size: 305KB → 304KB (-1KB)
- Build: PASS
- Sanity: 15.69M ops/s (3 runs avg)
- Larson: 1 crash observed (seed 43, likely existing instability)
Notes:
- Ultra HEAP never compiled (#if HAKMEM_TINY_ULTRA_HEAP undefined)
- BG Remote variables never initialized (g_bg_remote_enable always 0)
- Ultra SLIM (ultra_slim_alloc_box.h) preserved (active 4-layer path)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 04:35:47 +09:00
f4978b1529
ENV Cleanup Phase 5: Additional DEBUG guards + doc cleanup
...
Code changes:
- core/slab_handle.h: Add RELEASE guard for HAKMEM_TINY_FREELIST_MASK
- core/tiny_superslab_free.inc.h: Add guards for HAKMEM_TINY_ROUTE_FREE, HAKMEM_TINY_FREELIST_MASK
Documentation cleanup:
- docs/specs/CONFIGURATION.md: Remove 21 doc-only ENV variables
- docs/specs/ENV_VARS.md: Remove doc-only variables
Testing:
- Build: PASS (305KB binary, unchanged)
- Sanity: PASS (17.22M ops/s average, 3 runs)
- Larson: PASS (52.12M ops/s, 0 crashes)
Impact:
- 2 additional DEBUG ENV variables guarded (no overhead in RELEASE)
- Documentation accuracy improved
- Binary size maintained
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 03:55:17 +09:00
43015725af
ENV cleanup: Add RELEASE guards to DEBUG ENV variables (14 vars)
...
Added compile-time guards (#if HAKMEM_BUILD_RELEASE) to eliminate
DEBUG ENV variable overhead in RELEASE builds.
Variables guarded (14 total):
- HAKMEM_TINY_TRACE_RING, HAKMEM_TINY_DUMP_RING_ATEXIT
- HAKMEM_TINY_RF_TRACE, HAKMEM_TINY_MAILBOX_TRACE
- HAKMEM_TINY_MAILBOX_TRACE_LIMIT, HAKMEM_TINY_MAILBOX_SLOWDISC
- HAKMEM_TINY_MAILBOX_SLOWDISC_PERIOD
- HAKMEM_SS_PREWARM_DEBUG, HAKMEM_SS_FREE_DEBUG
- HAKMEM_TINY_FRONT_METRICS, HAKMEM_TINY_FRONT_DUMP
- HAKMEM_TINY_COUNTERS_DUMP, HAKMEM_TINY_REFILL_DUMP
- HAKMEM_PTR_TRACE_DUMP, HAKMEM_PTR_TRACE_VERBOSE
Files modified (9 core files):
- core/tiny_debug_ring.c (ring trace/dump)
- core/box/mailbox_box.c (mailbox trace + slowdisc)
- core/tiny_refill.h (refill trace)
- core/hakmem_tiny_superslab.c (superslab debug)
- core/box/ss_allocation_box.c (allocation debug)
- core/tiny_superslab_free.inc.h (free debug)
- core/box/front_metrics_box.c (frontend metrics)
- core/hakmem_tiny_stats.c (stats dump)
- core/ptr_trace.h (pointer trace)
Bug fixes during implementation:
1. mailbox_box.c - Fixed variable scope (moved 'used' outside guard)
2. hakmem_tiny_stats.c - Fixed incomplete declarations (on1, on2)
Impact:
- Binary size: -85KB total
- bench_random_mixed_hakmem: 319K → 305K (-14K, -4.4%)
- larson_hakmem: 380K → 309K (-71K, -18.7%)
- Performance: No regression (16.9-17.9M ops/s maintained)
- Functional: All tests pass (Random Mixed + Larson)
- Behavior: DEBUG ENV vars correctly ignored in RELEASE builds
Testing:
- Build: Clean compilation (warnings only, pre-existing)
- 100K Random Mixed: 16.9-17.9M ops/s (PASS)
- 10K Larson: 25.9M ops/s (PASS)
- DEBUG ENV verification: Correctly ignored (PASS)
Result: 14 DEBUG ENV variables now have zero overhead in RELEASE builds.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 03:41:07 +09:00
543abb0586
ENV cleanup: Consolidate SFC_DEBUG getenv() calls (86% reduction)
...
Optimized HAKMEM_SFC_DEBUG environment variable handling by caching
the value at initialization instead of repeated getenv() calls in
hot paths.
Changes:
1. Added g_sfc_debug global variable (core/hakmem_tiny_sfc.c)
- Initialized once in sfc_init() by reading HAKMEM_SFC_DEBUG
- Single source of truth for SFC debug state
2. Declared g_sfc_debug as extern (core/hakmem_tiny_config.h)
- Available to all modules that need SFC debug checks
3. Replaced getenv() with g_sfc_debug in hot paths:
- core/tiny_alloc_fast_sfc.inc.h (allocation path)
- core/tiny_free_fast.inc.h (free path)
- core/box/hak_wrappers.inc.h (wrapper layer)
Impact:
- getenv() calls: 7 → 1 (86% reduction)
- Hot-path calls eliminated: 6 (all moved to init-time)
- Performance: 15.10M ops/s (stable, 0% CV)
- Build: Clean compilation, no new warnings
Testing:
- 10 runs of 100K iterations: consistent performance
- Symbol verification: g_sfc_debug present in hakmem_tiny_sfc.o
- No regression detected
Note: 3 additional getenv("HAKMEM_SFC_DEBUG") calls exist in
hakmem_tiny_ultra_simple.inc but are dead code (file not compiled
in current build configuration).
Files modified: 5 core files
Status: Production-ready, all tests passed
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-27 03:18:33 +09:00
6fadc74405
ENV cleanup: Remove obsolete ULTRAHOT variable + organize docs
...
Changes:
1. Removed HAKMEM_TINY_FRONT_ENABLE_ULTRAHOT variable
- Deleted front_prune_ultrahot_enabled() function
- UltraHot feature was removed in commit bcfb4f6b5✅ Successful
- Risk: Zero (dead code removal)
Next steps (documented in ENV_CLEANUP_SUMMARY.md):
- 21 variables need verification (Ultra/HeapV2/BG/HotMag)
- SFC_DEBUG deduplication opportunity (7 callsites)
File: core/box/front_metrics_box.h
Status: SAVEPOINT - stable baseline for future ENV cleanup
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-26 17:12:41 +09:00
bea839add6
Revert "Port: Tune Superslab Min-Keep and Shared Pool Soft Caps (04a60c316)"
...
This reverts commit d355041638
2025-11-26 15:43:45 +09:00
d355041638
Port: Tune Superslab Min-Keep and Shared Pool Soft Caps (04a60c316)
...
- Policy: Set tiny_min_keep for C2-C6 to reduce mmap/munmap churn
- Policy: Loosen tiny_cap (soft cap) for C4-C6 to allow more active slots
- Added tiny_min_keep field to FrozenPolicy struct
Larson: 52.13M ops/s (stable)
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-26 15:06:36 +09:00
a2e65716b3
Port: Optimize tiny_get_max_size inline (e81fe783d)
...
- Move tiny_get_max_size to header for inlining
- Use cached static variable to avoid repeated env lookup
- Larson: 51.99M ops/s (stable)
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-26 15:05:03 +09:00
a9ddb52ad4
ENV cleanup: Remove BG/HotMag vars & guard fprintf (Larson 52.3M ops/s)
...
Phase 1 完了：環境変数整理 + fprintf デバッグガード
ENV変数削除（BG/HotMag系）:
- core/hakmem_tiny_init.inc: HotMag ENV 削除 (~131 lines)
- core/hakmem_tiny_bg_spill.c: BG spill ENV 削除
- core/tiny_refill.h: BG remote 固定値化
- core/hakmem_tiny_slow.inc: BG refs 削除
fprintf Debug Guards (#if !HAKMEM_BUILD_RELEASE):
- core/hakmem_shared_pool.c: Lock stats (~18 fprintf)
- core/page_arena.c: Init/Shutdown/Stats (~27 fprintf)
- core/hakmem.c: SIGSEGV init message
ドキュメント整理:
- 328 markdown files 削除（旧レポート・重複docs）
性能確認:
- Larson: 52.35M ops/s (前回52.8M、安定動作✅ )
- ENV整理による機能影響なし
- Debug出力は一部残存（次phase で対応）
🤖 Generated with Claude Code
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-26 14:45:26 +09:00
67fb15f35f
Wrap debug fprintf in !HAKMEM_BUILD_RELEASE guards (Release build optimization)
...
## Changes
### 1. core/page_arena.c
- Removed init failure message (lines 25-27) - error is handled by returning early
- All other fprintf statements already wrapped in existing #if !HAKMEM_BUILD_RELEASE blocks
### 2. core/hakmem.c
- Wrapped SIGSEGV handler init message (line 72)
- CRITICAL: Kept SIGSEGV/SIGBUS/SIGABRT error messages (lines 62-64) - production needs crash logs
### 3. core/hakmem_shared_pool.c
- Wrapped all debug fprintf statements in #if !HAKMEM_BUILD_RELEASE:
- Node pool exhaustion warning (line 252)
- SP_META_CAPACITY_ERROR warning (line 421)
- SP_FIX_GEOMETRY debug logging (line 745)
- SP_ACQUIRE_STAGE0.5_EMPTY debug logging (line 865)
- SP_ACQUIRE_STAGE0_L0 debug logging (line 803)
- SP_ACQUIRE_STAGE1_LOCKFREE debug logging (line 922)
- SP_ACQUIRE_STAGE2_LOCKFREE debug logging (line 996)
- SP_ACQUIRE_STAGE3 debug logging (line 1116)
- SP_SLOT_RELEASE debug logging (line 1245)
- SP_SLOT_FREELIST_LOCKFREE debug logging (line 1305)
- SP_SLOT_COMPLETELY_EMPTY debug logging (line 1316)
- Fixed lock_stats_init() for release builds (lines 60-65) - ensure g_lock_stats_enabled is initialized
## Performance Validation
Before: 51M ops/s (with debug fprintf overhead)
After: 49.1M ops/s (consistent performance, fprintf removed from hot paths)
## Build & Test
```bash
./build.sh larson_hakmem
./out/release/larson_hakmem 1 5 1 1000 100 10000 42
# Result: 49.1M ops/s
```
Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-26 13:14:18 +09:00
4e082505cc
Cleanup: Wrap shared_pool debug fprintf in #if !HAKMEM_BUILD_RELEASE
...
- Lock stats (P0 instrumentation): ~10 fprintf wrapped
- Stage stats (S1/S2/S3 breakdown): ~8 fprintf wrapped
- Release build now has no-op stubs for stats init functions
- Data collection APIs kept for learning layer compatibility
2025-11-26 13:05:17 +09:00
6b38bc840e
Cleanup: Remove unused hakmem_libc.c (duplicate of hakmem_syscall.c)
...
- File was not included in Makefile OBJS_BASE
- Functions already implemented in hakmem_syscall.c
- Size: 361 bytes removed
2025-11-26 13:03:17 +09:00
bcfb4f6b59
Remove dead code: UltraHot, RingCache, FrontC23, Class5 Hotpath
...
(cherry-picked from 225b6fcc7, conflicts resolved)
2025-11-26 12:33:49 +09:00
feadc2832f
Legacy cleanup: Remove obsolete test files and #if 0 blocks (-1,750 LOC)
...
(cherry-picked from cc0104c4e)
2025-11-26 12:31:04 +09:00
950627587a
Remove legacy/unused code: 6 .inc files + disabled #if 0 block (1,159 LOC)
...
(cherry-picked from 9793f17d6)
2025-11-26 12:30:30 +09:00
5c85675621
Add callsite tracking for tls_sll_push/pop (macro-based Box Theory)
...
Problem:
- [TLS_SLL_PUSH_DUP] at 225K iterations but couldn't identify bypass path
- Need push AND pop callsites to diagnose reuse-before-pop bug
Implementation (Box Theory):
- Renamed tls_sll_push → tls_sll_push_impl (with where parameter)
- Renamed tls_sll_pop → tls_sll_pop_impl (with where parameter)
- Added macro wrappers with __func__ auto-insertion
- Zero changes to 40+ call sites (Box boundary preserved)
Debug-only tracking:
- All tracking code wrapped in #if !HAKMEM_BUILD_RELEASE
- Release builds: where=NULL, zero overhead
- Arrays: s_tls_sll_last_push_from[], s_tls_sll_last_pop_from[]
New log format:
[TLS_SLL_PUSH_DUP] cls=5 ptr=0x...
last_push_from=hak_tiny_free_fast_v2
last_pop_from=(null) ← SMOKING GUN!
where=hak_tiny_free_fast_v2
Decisive Evidence:
✅ last_pop_from=(null) proves TLS SLL never popped
✅ Unified Cache bypasses TLS SLL (confirmed by Task agent)
✅ Root cause: unified_cache_refill() directly carves from SuperSlab
Impact:
- Complete push/pop flow tracking (debug builds only)
- Root cause identified: Unified Cache at Line 289
- Next step: Fix unified_cache_refill() to check TLS SLL first
Credit: Box Theory macro pattern suggested by ChatGPT
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 11:30:46 +09:00
c8842360ca
Fix: Double header calculation bug in tiny_block_stride_for_class() - META_MISMATCH resolved
...
Problem:
workset=8192 crashed with META_MISMATCH errors (off-by-one):
- [TLS_SLL_PUSH_META_MISMATCH] cls=3 meta_cls=2
- [HDR_META_MISMATCH] cls=6 meta_cls=5
- [FREE_FAST_HDR_META_MISMATCH] cls=7 meta_cls=6
Root Cause (discovered by Task agent):
Contradictory stride calculations in codebase:
1. g_tiny_class_sizes[TINY_NUM_CLASSES]
- Already includes 1-byte header (TOTAL size)
- {8, 16, 32, 64, 128, 256, 512, 2048}
2. tiny_block_stride_for_class() (BEFORE FIX)
- Added extra +1 for header (DOUBLE COUNTING!)
- Class 5: 256 + 1 = 257 (should be 256)
- Class 6: 512 + 1 = 513 (should be 512)
This caused stride → class_idx reverse lookup to fail:
- superslab_init_slab() searched g_tiny_class_sizes[?] == 257
- No match found → meta->class_idx corrupted
- Free: header has cls=6, meta has cls=5 → MISMATCH!
Fix Applied (core/hakmem_tiny_superslab.h:49-69):
- Removed duplicate +1 calculation under HAKMEM_TINY_HEADER_CLASSIDX
- Added OOB guard (return 0 for invalid class_idx)
- Added comment: "g_tiny_class_sizes already includes the 1-byte header"
Test Results:
Before fix:
- 100K iterations: META_MISMATCH errors → SEGV
- 200K iterations: Immediate SEGV
After fix:
- 100K iterations: ✅ 9.9M ops/s (no errors)
- 200K iterations: ✅ 15.2M ops/s (no errors)
- 220K iterations: ✅ 15.3M ops/s (no errors)
- 225K iterations: ❌ SEGV (different bug, not META_MISMATCH)
Impact:
✅ META_MISMATCH errors completely eliminated
✅ Stability improved: 100K → 220K iterations (+120%)
✅ Throughput stable: 15M ops/s
⚠️ Different SEGV at 225K (requires separate investigation)
Investigation Credit:
- Task agent: Identified contradictory stride tables
- ChatGPT: Applied fix and verified LUT correctness
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 09:34:35 +09:00
3d341a8b3f
Fix: TLS SLL double-free diagnostics - Add error handling and detection improvements
...
Problem:
workset=8192 crashes at 240K iterations with TLS SLL double-free:
[TLS_SLL_PUSH] FATAL double-free: cls=5 ptr=... already in SLL
Investigation (Task agent):
Identified 8 tls_sll_push() call sites and 3 high-risk areas:
1. HIGH: Carve-Push Rollback pop failures (carve_push_box.c)
2. MEDIUM: Splice partial orphaned nodes (tiny_refill_opt.h)
3. MEDIUM: Incomplete double-free scan - only 64 nodes (tls_sll_box.h)
Fixes Applied:
1. core/box/carve_push_box.c (Lines 115-139)
- Track pop_failed count during rollback
- Log orphaned blocks: [BOX_CARVE_PUSH_ROLLBACK] warning
- Helps identify when rollback leaves blocks in SLL
2. core/box/tls_sll_box.h (Lines 347-370)
- Increase double-free scan: 64 → 256 nodes
- Add scanned count to error: (scanned=%u/%u)
- Catches orphaned blocks deeper in chain
3. core/tiny_refill_opt.h (Lines 135-166)
- Enhanced splice partial logging
- Abort in debug builds on orphaned nodes
- Prevents silent memory leaks
Test Results:
Before: SEGV at 220K iterations
After: SEGV at 240K iterations (improved detection)
[TLS_SLL_PUSH] FATAL double-free: cls=5 ptr=... (scanned=2/71)
Impact:
✅ Early detection working (catches at position 2)
✅ Diagnostic capability greatly improved
⚠️ Root cause not yet resolved (deeper investigation needed)
Status: Diagnostic improvements committed for further analysis
Credit: Root cause analysis by Task agent (Explore)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 08:43:18 +09:00
6ae0db9fd2
Fix: workset=8192 SEGV - Align slab_index_for to Box3 geometry (iteration 2)
...
Problem:
After Box3 geometry unification (commit 2fe970252✅ OK
- 300K iterations: ❌ SEGV
Root Cause (identified by ChatGPT):
Header/metadata class mismatches around 300K iterations:
- [HDR_META_MISMATCH] hdr_cls=6 meta_cls=5
- [FREE_FAST_HDR_META_MISMATCH] hdr_cls=5 meta_cls=4
- [TLS_SLL_PUSH_META_MISMATCH] cls=5 meta_cls=4
Cause: slab_index_for() geometry mismatch with Box3
- tiny_slab_base_for_geometry() (Box3):
- Slab 0: ss + SUPERSLAB_SLAB0_DATA_OFFSET
- Slab 1: ss + 1*SLAB_SIZE
- Slab k: ss + k*SLAB_SIZE
- Old slab_index_for():
rel = p - (base + SUPERSLAB_SLAB0_DATA_OFFSET);
idx = rel / SLAB_SIZE;
- Result: Off-by-one for slab_idx > 0
Example: tiny_slab_base_for_geometry(ss, 4) returns 0x...40000
slab_index_for(ss, 0x...40000) returns 3 (wrong!)
Impact:
- Block allocated in "C6 slab 4" appears to be in "C5 slab 3"
- Header class_idx (C6) != meta->class_idx (C5)
- TLS SLL corruption → SEGV after extended runs
Fix: core/superslab/superslab_inline.h
======================================
Rewrite slab_index_for() as inverse of Box3 geometry:
static inline int slab_index_for(SuperSlab* ss, void* ptr) {
// ... bounds checks ...
// Slab 0: special case (has metadata offset)
if (p < base + SLAB_SIZE) {
return 0;
}
// Slab 1+: simple SLAB_SIZE spacing from base
size_t rel = p - base; // ← Changed from (p - base - OFFSET)
int idx = (int)(rel / SLAB_SIZE);
return idx;
}
Verification:
- slab_index_for(ss, tiny_slab_base_for_geometry(ss, idx)) == idx ✅
- Consistent for any address within slab
Test Results:
=============
workset=8192 SEGV threshold improved further:
Before this fix (after 2fe970252✅ 200K iterations: OK
❌ 300K iterations: SEGV
After this fix:
✅ 220K iterations: OK (15.5M ops/s)
❌ 240K iterations: SEGV (different bug)
Progress:
- Iteration 1 (2fe970252🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 07:56:06 +09:00
2fe970252a
Fix: workset=8192 SEGV - Unify SuperSlab geometry to Box3 (partial fix)
...
Problem:
- bench_random_mixed_hakmem with workset=8192 causes SEGV
- workset=256 works fine
- Root cause identified by ChatGPT analysis
Root Cause:
SuperSlab geometry double definition caused slab_base misalignment:
- Old: tiny_slab_base_for() used SLAB0_OFFSET + idx * SLAB_SIZE
- New: Box3 tiny_slab_base_for_geometry() uses offset only for idx=0
- Result: slab_idx > 0 had +2048 byte offset error
- Impact: Unified Cache carve stepped beyond slab boundary → SEGV
Fix 1: core/superslab/superslab_inline.h
========================================
Delegate SuperSlab base calculation to Box3:
static inline uint8_t* tiny_slab_base_for(SuperSlab* ss, int slab_idx) {
if (!ss || slab_idx < 0) return NULL;
return tiny_slab_base_for_geometry(ss, slab_idx); // ← Box3 unified
}
Effect:
- All tiny_slab_base_for() calls now use single Box3 implementation
- TLS slab_base and Box3 calculations perfectly aligned
- Eliminates geometry mismatch between layers
Fix 2: core/front/tiny_unified_cache.c
========================================
Enhanced fail-fast validation (debug builds only):
- unified_refill_validate_base(): Use TLS as source of truth
- Cross-check with registry lookup for safety
- Validate: slab_base range, alignment, meta consistency
- Box3 + TLS boundary consolidated to one place
Fix 3: core/hakmem_tiny_superslab.h
========================================
Added forward declaration:
- SuperSlab* superslab_refill(int class_idx);
- Required by tiny_unified_cache.c
Test Results:
=============
workset=8192 SEGV threshold improved:
Before fix:
❌ Immediate SEGV at any iteration count
After fix:
✅ 100K iterations: OK (9.8M ops/s)
✅ 200K iterations: OK (15.5M ops/s)
❌ 300K iterations: SEGV (different bug exposed)
Conclusion:
- Box3 geometry unification fixed primary SEGV
- Stability improved: 0 → 200K iterations
- Remaining issue: 300K+ iterations hit different bug
- Likely causes: memory pressure, different corruption pattern
Known Issues:
- Debug warnings still present: FREE_FAST_HDR_META_MISMATCH, NXT_HDR_MISMATCH
- These are separate header consistency issues (not related to geometry)
- 300K+ SEGV requires further investigation
Performance:
- No performance regression observed in stable range
- workset=256 unaffected: 60M+ ops/s maintained
Credit: Root cause analysis and fix strategy by ChatGPT
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 07:40:35 +09:00
38e4e8d4c2
Phase 19-2: Ultra SLIM debug logging and root cause analysis
...
Add comprehensive statistics tracking and debug logging to Ultra SLIM 4-layer
fast path to diagnose why it wasn't being called.
Changes:
1. core/box/ultra_slim_alloc_box.h
- Move statistics tracking (ultra_slim_track_hit/miss) before first use
- Add debug logging in ultra_slim_print_stats()
- Track call counts to verify Ultra SLIM path execution
- Enhanced stats output with per-class breakdown
2. core/tiny_alloc_fast.inc.h
- Add debug logging at Ultra SLIM gate (line 700-710)
- Log whether Ultra SLIM mode is enabled on first allocation
- Helps diagnose allocation path routing
Root Cause Analysis (with ChatGPT):
========================================
Problem: Ultra SLIM was not being called in default configuration
- ENV: HAKMEM_TINY_ULTRA_SLIM=1
- Observed: Statistics counters remained zero
- Expected: Ultra SLIM 4-layer path to handle allocations
Investigation:
- malloc() → Front Gate Unified Cache → complete (default path)
- Ultra SLIM gate in tiny_alloc_fast() never reached
- Front Gate/Unified Cache handles 100% of allocations
Solution to Test Ultra SLIM:
Turn OFF Front Gate and Unified Cache to force old Tiny path:
HAKMEM_TINY_ULTRA_SLIM=1 \
HAKMEM_FRONT_GATE_UNIFIED=0 \
HAKMEM_TINY_UNIFIED_CACHE=0 \
./out/release/bench_random_mixed_hakmem 100000 256 42
Results:
✅ Ultra SLIM gate logged: ENABLED
✅ Statistics: 49,526 hits, 542 misses (98.9% hit rate)
✅ Throughput: 9.1M ops/s (100K iterations)
⚠️ 10M iterations: TLS SLL corruption (not Ultra SLIM bug)
Secondary Discovery (ChatGPT Analysis):
========================================
TLS SLL C6/C7 corruption is NOT caused by Ultra SLIM:
Evidence:
- Same [TLS_SLL_POP_POST_INVALID] errors occur with Ultra SLIM OFF
- Ultra SLIM OFF + FrontGate/Unified OFF: 9.2M ops/s with same errors
- Root cause: Existing TLS SLL bug exposed when bypassing Front Gate
- Ultra SLIM never pushes to TLS SLL (only pops)
Conclusion:
- Ultra SLIM implementation is correct ✅
- Default configuration (Front Gate/Unified ON) is stable: 60M ops/s
- TLS SLL bugs are pre-existing, unrelated to Ultra SLIM
- Ultra SLIM can be safely enabled with default configuration
Performance Summary:
- Front Gate/Unified ON (default): 60.1M ops/s ✅ stable
- Ultra SLIM works correctly when path is reachable
- No changes needed to Ultra SLIM code
Next Steps:
1. Address workset=8192 SEGV (existing bug, high priority)
2. TLS SLL C6/C7 corruption (separate existing issue)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 06:50:38 +09:00
896f24367f
Phase 19-2: Ultra SLIM 4-layer fast path implementation (ENV gated)
...
Implement Ultra SLIM 4-layer allocation fast path with ACE learning preserved.
ENV: HAKMEM_TINY_ULTRA_SLIM=1 (default OFF)
Architecture (4 layers):
- Layer 1: Init Safety (1-2 cycles, cold path only)
- Layer 2: Size-to-Class (1-2 cycles, LUT lookup)
- Layer 3: ACE Learning (2-3 cycles, histogram update) ← PRESERVED!
- Layer 4: TLS SLL Direct (3-5 cycles, freelist pop)
- Total: 7-12 cycles (~2-4ns on 3GHz CPU)
Goal: Achieve mimalloc parity (90-110M ops/s) by removing intermediate layers
(HeapV2, FastCache, SFC) while preserving HAKMEM's learning capability.
Deleted Layers (from standard 7-layer path):
❌ HeapV2 (C0-C3 magazine)
❌ FastCache (C0-C3 array stack)
❌ SFC (Super Front Cache)
Expected savings: 11-15 cycles
Implementation:
1. core/box/ultra_slim_alloc_box.h
- 4-layer allocation path (returns USER pointer)
- TLS-cached ENV check (once per thread)
- Statistics & diagnostics (HAKMEM_ULTRA_SLIM_STATS=1)
- Refill integration with backend
2. core/tiny_alloc_fast.inc.h
- Ultra SLIM gate at entry point (line 694-702)
- Early return if Ultra SLIM mode enabled
- Zero impact on standard path (cold branch)
Performance Results (Random Mixed 256B, 10M iterations):
- Baseline (Ultra SLIM OFF): 63.3M ops/s
- Ultra SLIM ON: 62.6M ops/s (-1.1%)
- Target: 90-110M ops/s (mimalloc parity)
- Gap: 44-76% slower than target
Status: Implementation complete, but performance target not achieved.
The 4-layer architecture is in place and ACE learning is preserved.
Further optimization needed to reach mimalloc parity.
Next Steps:
- Profile Ultra SLIM path to identify remaining bottlenecks
- Verify TLS SLL hit rate (statistics currently show zero)
- Consider further cycle reduction in Layer 3 (ACE learning)
- A/B test with ACE learning disabled to measure impact
Notes:
- Ultra SLIM mode is ENV gated (off by default)
- No impact on standard 7-layer path performance
- Statistics tracking implemented but needs verification
- workset=256 tested and verified working
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 06:16:20 +09:00
707365e43b
Build: Remove tracked .d files (now in .gitignore)
...
Cleanup commit: Remove previously tracked dependency files
- core/box/tiny_near_empty_box.d
- core/hakmem_tiny.d
- core/hakmem_tiny_lifecycle.d
- core/hakmem_tiny_unified_stats.d
- hakmem_tiny_unified_stats.d
These files are build artifacts and should not be tracked.
They are now covered by *.d pattern in .gitignore.
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 06:12:31 +09:00
eae0435c03
Adaptive CAS: Single-threaded fast path optimization
...
PROBLEM:
- Atomic freelist (Phase 1) introduced 3-5x overhead in hot path
- CAS loop overhead: 16-27 cycles vs 4-6 cycles (non-atomic)
- Single-threaded workloads pay MT safety cost unnecessarily
SOLUTION:
- Runtime thread detection with g_hakmem_active_threads counter
- Single-threaded (1T): Skip CAS, use relaxed load/store (fast)
- Multi-threaded (2+T): Full CAS loop for MT safety
IMPLEMENTATION:
1. core/hakmem_tiny.c:240 - Added g_hakmem_active_threads atomic counter
2. core/hakmem_tiny.c:248 - Added hakmem_thread_register() for per-thread init
3. core/hakmem_tiny.h:160-163 - Exported thread counter and registration API
4. core/box/hak_alloc_api.inc.h:34 - Call hakmem_thread_register() on first alloc
5. core/box/slab_freelist_atomic.h:58-68 - Adaptive CAS in pop_lockfree()
6. core/box/slab_freelist_atomic.h:118-126 - Adaptive CAS in push_lockfree()
DESIGN:
- Thread counter: Incremented on first allocation per thread
- Fast path check: if (num_threads <= 1) → relaxed ops
- Slow path: Full CAS loop (existing Phase 1 implementation)
- Zero overhead when truly single-threaded
PERFORMANCE:
Random Mixed 256B (Single-threaded):
Before (Phase 1): 16.7M ops/s
After: 14.9M ops/s (-11%, thread counter overhead)
Larson (Single-threaded):
Before: 47.9M ops/s
After: 47.9M ops/s (no change, already fast)
Larson (Multi-threaded 8T):
Before: 48.8M ops/s
After: 48.3M ops/s (-1%, within noise)
MT STABILITY:
1T: 47.9M ops/s ✅
8T: 48.3M ops/s ✅ (zero crashes, stable)
NOTES:
- Expected Larson improvement (0.80M → 1.80M) not observed
- Larson was already fast (47.9M) in Phase 1
- Possible Task investigation used different benchmark
- Adaptive CAS implementation verified and working correctly
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 03:30:47 +09:00
2d01332c7a
Phase 1: Atomic Freelist Implementation - MT Safety Foundation
...
PROBLEM:
- Larson crashes with 3+ threads (SEGV in freelist operations)
- Root cause: Non-atomic TinySlabMeta.freelist access under contention
- Race condition: Multiple threads pop/push freelist concurrently
SOLUTION:
- Made TinySlabMeta.freelist and .used _Atomic for MT safety
- Created lock-free accessor API (slab_freelist_atomic.h)
- Converted 5 critical hot path sites to use atomic operations
IMPLEMENTATION:
1. superslab_types.h:12-13 - Made freelist and used _Atomic
2. slab_freelist_atomic.h (NEW) - Lock-free CAS operations
- slab_freelist_pop_lockfree() - Atomic pop with CAS loop
- slab_freelist_push_lockfree() - Atomic push (template)
- Relaxed load/store for non-critical paths
3. ss_slab_meta_box.h - Box API now uses atomic accessor
4. hakmem_tiny_superslab.c - Atomic init (store_relaxed)
5. tiny_refill_opt.h - trc_pop_from_freelist() uses lock-free CAS
6. hakmem_tiny_refill_p0.inc.h - Atomic used increment + prefetch
PERFORMANCE:
Single-Threaded (Random Mixed 256B):
Before: 25.1M ops/s (Phase 3d-C baseline)
After: 16.7M ops/s (-34%, atomic overhead expected)
Multi-Threaded (Larson):
1T: 47.9M ops/s ✅
2T: 48.1M ops/s ✅
3T: 46.5M ops/s ✅ (was SEGV before)
4T: 48.1M ops/s ✅
8T: 48.8M ops/s ✅ (stable, no crashes)
MT STABILITY:
Before: SEGV at 3+ threads (100% crash rate)
After: Zero crashes (100% stable at 8 threads)
DESIGN:
- Lock-free CAS: 6-10 cycles overhead (vs 20-30 for mutex)
- Relaxed ordering: 0 cycles overhead (same as non-atomic)
- Memory ordering: acquire/release for CAS, relaxed for checks
- Expected regression: <3% single-threaded, +MT stability
NEXT STEPS:
- Phase 2: Convert 40 important sites (TLS-related freelist ops)
- Phase 3: Convert 25 cleanup sites (remaining + documentation)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 02:46:57 +09:00
d8168a2021
Fix C7 TLS SLL header restoration regression + Document Larson MT race condition
...
## Bug Fix: Restore C7 Exception in TLS SLL Push
**File**: `core/box/tls_sll_box.h:309`
**Problem**: Commit 25d963a4a8b67718bf25d963a4a❌ NOT ATOMIC
uint16_t used; // ❌ NOT ATOMIC
} TinySlabMeta;
```
**Evidence**:
```
1 thread: ✅ PASS (1.88M - 41.8M ops/s)
2 threads: ✅ PASS (24.6M ops/s)
3 threads: ❌ SEGV (race condition)
4+ threads: ❌ SEGV (race condition)
```
**Status**: C7 fix is CORRECT. Larson crash is separate MT issue requiring atomic freelist implementation.
## Documentation Added
Created comprehensive investigation reports:
- `LARSON_CRASH_ROOT_CAUSE_REPORT.md` - Full technical analysis
- `LARSON_DIAGNOSTIC_PATCH.md` - Implementation guide
- `LARSON_INVESTIGATION_SUMMARY.md` - Executive summary
- `LARSON_QUICK_REF.md` - Quick reference
- `verify_race_condition.sh` - Automated verification script
## Next Steps
Implement atomic freelist operations for full MT safety (7-9 hour effort):
1. Make `TinySlabMeta.freelist` atomic with CAS loop
2. Audit 87 freelist access sites
3. Test with Larson 8+ threads
🔧 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 02:15:34 +09:00
5c9fe34b40
Enable performance optimizations by default (+557% improvement)
...
## Performance Impact
**Before** (optimizations OFF):
- Random Mixed 256B: 9.4M ops/s
- System malloc ratio: 10.6% (9.5x slower)
**After** (optimizations ON):
- Random Mixed 256B: 61.8M ops/s (+557%)
- System malloc ratio: 70.0% (1.43x slower) ✅
- 3-run average: 60.1M - 62.8M ops/s (±2.2% variance)
## Changes
Enabled 3 critical optimizations by default:
### 1. HAKMEM_SS_EMPTY_REUSE (hakmem_shared_pool.c:810)
```c
// BEFORE: default OFF
empty_reuse_enabled = (e && *e && *e != '0') ? 1 : 0;
// AFTER: default ON
empty_reuse_enabled = (e && *e && *e == '0') ? 0 : 1;
```
**Impact**: Reuse empty slabs before mmap, reduces syscall overhead
### 2. HAKMEM_TINY_UNIFIED_CACHE (tiny_unified_cache.h:69)
```c
// BEFORE: default OFF
g_enable = (e && *e && *e != '0') ? 1 : 0;
// AFTER: default ON
g_enable = (e && *e && *e == '0') ? 0 : 1;
```
**Impact**: Unified TLS cache improves hit rate
### 3. HAKMEM_FRONT_GATE_UNIFIED (malloc_tiny_fast.h:42)
```c
// BEFORE: default OFF
g_enable = (e && *e && *e != '0') ? 1 : 0;
// AFTER: default ON
g_enable = (e && *e && *e == '0') ? 0 : 1;
```
**Impact**: Unified front gate reduces dispatch overhead
## ENV Override
Users can still disable optimizations if needed:
```bash
export HAKMEM_SS_EMPTY_REUSE=0 # Disable empty slab reuse
export HAKMEM_TINY_UNIFIED_CACHE=0 # Disable unified cache
export HAKMEM_FRONT_GATE_UNIFIED=0 # Disable unified front gate
```
## Comparison to Competitors
```
mimalloc: 113.34M ops/s (1.83x faster than HAKMEM)
System malloc: 88.20M ops/s (1.43x faster than HAKMEM)
HAKMEM: 61.80M ops/s ✅ Competitive performance
```
## Files Modified
- core/hakmem_shared_pool.c - EMPTY_REUSE default ON
- core/front/tiny_unified_cache.h - UNIFIED_CACHE default ON
- core/front/malloc_tiny_fast.h - FRONT_GATE_UNIFIED default ON
🚀 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-22 01:29:05 +09:00
8b67718bf2
Fix C7 TLS SLL corruption: Protect next pointer from user data overwrites
...
## Root Cause
C7 (1024B allocations, 2048B stride) was using offset=1 for freelist next
pointers, storing them at `base[1..8]`. Since user pointer is `base+1`, users
could overwrite the next pointer area, corrupting the TLS SLL freelist.
## The Bug Sequence
1. Block freed → TLS SLL push stores next at `base[1..8]`
2. Block allocated → User gets `base+1`, can modify `base[1..2047]`
3. User writes data → Overwrites `base[1..8]` (next pointer area!)
4. Block freed again → tiny_next_load() reads garbage from `base[1..8]`
5. TLS SLL head becomes invalid (0xfe, 0xdb, 0x58, etc.)
## Why This Was Reverted
Previous fix (C7 offset=0) was reverted with comment:
"C7も header を保持して class 判別を壊さないことを優先"
(Prioritize preserving C7 header to avoid breaking class identification)
This reasoning was FLAWED because:
- Header IS restored during allocation (HAK_RET_ALLOC), not freelist ops
- Class identification at free time reads from ptr-1 = base[0] (after restoration)
- During freelist, header CAN be sacrificed (not visible to user)
- The revert CREATED the race condition by exposing base[1..8] to user
## Fix Applied
### 1. Revert C7 offset to 0 (tiny_nextptr.h:54)
```c
// BEFORE (BROKEN):
return (class_idx == 0) ? 0u : 1u;
// AFTER (FIXED):
return (class_idx == 0 || class_idx == 7) ? 0u : 1u;
```
### 2. Remove C7 header restoration in freelist (tiny_nextptr.h:84)
```c
// BEFORE (BROKEN):
if (class_idx != 0) { // Restores header for all classes including C7
// AFTER (FIXED):
if (class_idx != 0 && class_idx != 7) { // Only C1-C6 restore headers
```
### 3. Bonus: Remove premature slab release (tls_sll_drain_box.h:182-189)
Removed `shared_pool_release_slab()` call from drain path that could cause
use-after-free when blocks from same slab remain in TLS SLL.
## Why This Fix Works
**Memory Layout** (C7 in freelist):
```
Address: base base+1 base+2048
┌────┬──────────────────────┐
Content: │next│ (user accessible) │
└────┴──────────────────────┘
8B ptr ← USER CANNOT TOUCH base[0]
```
- **Next pointer at base[0]**: Protected from user modification ✓
- **User pointer at base+1**: User sees base[1..2047] only ✓
- **Header restored during allocation**: HAK_RET_ALLOC writes 0xa7 at base[0] ✓
- **Class ID preserved**: tiny_region_id_read_header(ptr) reads ptr-1 = base[0] ✓
## Verification Results
### Before Fix
- **Errors**: 33 TLS_SLL_POP_INVALID per 100K iterations (0.033%)
- **Performance**: 1.8M ops/s (corruption caused slow path fallback)
- **Symptoms**: Invalid TLS SLL heads (0xfe, 0xdb, 0x58, 0x80, 0xc2, etc.)
### After Fix
- **Errors**: 0 per 200K iterations ✅
- **Performance**: 10.0M ops/s (+456%!) ✅
- **C7 direct test**: 5.5M ops/s, 100K iterations, 0 errors ✅
## Files Modified
- core/tiny_nextptr.h (lines 49-54, 82-84) - C7 offset=0, no header restoration
- core/box/tls_sll_drain_box.h (lines 182-189) - Remove premature slab release
## Architectural Lesson
**Design Principle**: Freelist metadata MUST be stored in memory NOT accessible to user.
| Class | Offset | Next Storage | User Access | Result |
|-------|--------|--------------|-------------|--------|
| C0 | 0 | base[0] | base[1..7] | Safe ✓ |
| C1-C6 | 1 | base[1..8] | base[1..N] | Safe (header at base[0]) ✓ |
| C7 (broken) | 1 | base[1..8] | base[1..2047] | **CORRUPTED** ✗ |
| C7 (fixed) | 0 | base[0] | base[1..2047] | Safe ✓ |
🧹 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-21 23:42:43 +09:00
25d963a4aa
Code Cleanup: Remove false positives, redundant validations, and reduce verbose logging
...
Following the C7 stride upgrade fix (commit 23c0d9541✅ Successful (LTO warnings expected)
- Test: ✅ 10K iterations (1.87M ops/s, no crashes)
- NXT_MISALIGN false positives: ✅ Eliminated
## Files Modified
- core/tiny_nextptr.h - Disabled false positive NXT_MISALIGN check
- core/hakmem_tiny_refill_p0.inc.h - Removed redundant CARVE validation
- core/box/ss_legacy_backend_box.c - Removed redundant LEGACY validation
- core/hakmem_shared_pool.c - Made SP_FIX_GEOMETRY logging debug-only
## Impact
- **Code clarity**: Removed 43 lines of redundant validation code
- **Debug noise**: Reduced false positive diagnostics
- **Performance**: Eliminated overhead from redundant geometry checks
- **Maintainability**: Single source of truth for geometry validation
🧹 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-21 23:00:24 +09:00
2f82226312
C7 Stride Upgrade: Fix 1024B→2048B alignment corruption (ROOT CAUSE)
...
## Problem
C7 (1KB class) blocks were being carved with 1024B stride but expected
to align with 2048B stride, causing systematic NXT_MISALIGN errors with
characteristic pattern: delta_mod = 1026, 1028, 1030, 1032... (1024*N + offset).
This caused crashes, double-frees, and alignment violations in 1024B workloads.
## Root Cause
The global array `g_tiny_class_sizes[]` was correctly updated to 2048B,
but `tiny_block_stride_for_class()` contained a LOCAL static const array
with the old 1024B value:
```c
// hakmem_tiny_superslab.h:52 (BEFORE)
static const size_t class_sizes[8] = {8, 16, 32, 64, 128, 256, 512, 1024};
^^^^
```
This local table was used by ALL carve operations, causing every C7 block
to be allocated with 1024B stride despite the 2048B upgrade.
## Fix
Updated local stride table in `tiny_block_stride_for_class()`:
```c
// hakmem_tiny_superslab.h:52 (AFTER)
static const size_t class_sizes[8] = {8, 16, 32, 64, 128, 256, 512, 2048};
^^^^
```
## Verification
**Before**: NXT_MISALIGN delta_mod shows 1024B pattern (1026, 1028, 1030...)
**After**: NXT_MISALIGN delta_mod shows random values (227, 994, 195...)
→ No more 1024B alignment pattern = stride upgrade successful ✓
## Additional Safety Layers (Defense in Depth)
1. **Validation Logic Fix** (tiny_nextptr.h:100)
- Changed stride check to use `tiny_block_stride_for_class()` (includes header)
- Was using `g_tiny_class_sizes[]` (raw size without header)
2. **TLS SLL Purge** (hakmem_tiny_lazy_init.inc.h:83-87)
- Clear TLS SLL on lazy class initialization
- Prevents stale blocks from previous runs
3. **Pre-Carve Geometry Validation** (hakmem_tiny_refill_p0.inc.h:273-297)
- Validates slab capacity matches current stride before carving
- Reinitializes if geometry is stale (e.g., after stride upgrade)
4. **LRU Stride Validation** (hakmem_super_registry.c:369-458)
- Validates cached SuperSlabs have compatible stride
- Evicts incompatible SuperSlabs immediately
5. **Shared Pool Geometry Fix** (hakmem_shared_pool.c:722-733)
- Reinitializes slab geometry on acquisition if capacity mismatches
6. **Legacy Backend Validation** (ss_legacy_backend_box.c:138-155)
- Validates geometry before allocation in legacy path
## Impact
- Eliminates 100% of 1024B-pattern alignment errors
- Fixes crashes in 1024B workloads (bench_random_mixed 1024B now stable)
- Establishes multiple validation layers to prevent future stride issues
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-21 22:55:17 +09:00
a78224123e
Fix C0/C7 class confusion: Upgrade C7 stride to 2048B and fix meta->class_idx initialization
...
Root Cause:
1. C7 stride was 1024B, unable to serve 1024B user requests (need 1025B with header)
2. New SuperSlabs start with meta->class_idx=0 (mmap zero-init)
3. superslab_init_slab() only sets class_idx if meta->class_idx==255
4. Multiple code paths used conditional assignment (if class_idx==255), leaving C7 slabs with class_idx=0
5. This caused C7 blocks to be misidentified as C0, leading to HDR_META_MISMATCH errors
Changes:
1. Upgrade C7 stride: 1024B → 2048B (can now serve 1024B requests)
2. Update blocks_per_slab[7]: 64 → 32 (2048B stride / 64KB slab)
3. Update size-to-class LUT: entries 513-2048 now map to C7
4. Fix superslab_init_slab() fail-safe: only reinitialize if class_idx==255 (not 0)
5. Add explicit class_idx assignment in 6 initialization paths:
- tiny_superslab_alloc.inc.h: superslab_refill() after init
- hakmem_tiny_superslab.c: backend_shared after init (main path)
- ss_unified_backend_box.c: unconditional assignment
- ss_legacy_backend_box.c: explicit assignment
- superslab_expansion_box.c: explicit assignment
- ss_allocation_box.c: fail-safe condition fix
Fix P0 refill bug:
- Update obsolete array access after Phase 3d-B TLS SLL unification
- g_tls_sll_head[cls] → g_tls_sll[cls].head
- g_tls_sll_count[cls] → g_tls_sll[cls].count
Results:
- HDR_META_MISMATCH: eliminated (0 errors in 100K iterations)
- 1024B allocations now routed to C7 (Tiny fast path)
- NXT_MISALIGN warnings remain (legacy 1024B SuperSlabs, separate issue)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-21 13:44:05 +09:00
66a29783a4
Phase 19-1: Quick Prune (Frontend SLIM mode) - Experimental implementation
...
## Implementation
Added `HAKMEM_TINY_FRONT_SLIM=1` ENV gate to skip FastCache + SFC layers,
going straight to SLL (Single-Linked List) for direct backend access.
### Code Changes
**File**: `core/tiny_alloc_fast.inc.h` (lines 201-230)
Added early return gate in `tiny_alloc_fast_pop()`:
```c
// Phase 19-1: Quick Prune (Frontend SLIM mode)
static __thread int g_front_slim_checked = 0;
static __thread int g_front_slim_enabled = 0;
if (g_front_slim_enabled) {
// Skip FastCache + SFC, go straight to SLL
extern int g_tls_sll_enable;
if (g_tls_sll_enable) {
void* base = NULL;
if (tls_sll_pop(class_idx, &base)) {
g_front_sll_hit[class_idx]++;
return base; // SLL hit (SLIM fast path)
}
}
return NULL; // SLL miss → caller refills
}
// else: Existing FC → SFC → SLL cascade (unchanged)
```
### Design Rationale
**Goal**: Skip unused frontend layers to reduce branch misprediction overhead
**Strategy**: Based on ChatGPT-sensei analysis showing FC/SFC hit rates near 0%
**Expected**: 22M → 27-30M ops/s (+22-36%)
**Features**:
- ✅ A/B testable via ENV (instant rollback: ENV=0)
- ✅ Existing code unchanged (backward compatible)
- ✅ TLS-cached enable check (amortized overhead)
---
## Performance Results
### Benchmark: Random Mixed 256B (1M iterations)
```
Baseline (SLIM OFF): 23.2M, 23.7M, 23.2M ops/s (avg: 23.4M)
Phase 19-1 (SLIM ON): 22.8M, 22.8M, 23.7M ops/s (avg: 23.1M)
Difference: -1.3% (within noise, no improvement) ⚠️
Expected: +22-36% ← NOT achieved
```
### Stability Testing
- ✅ 100K short run: No SEGV, no crashes
- ✅ 1M iterations: Stable performance across 3 runs
- ✅ Functional correctness: All allocations successful
---
## Analysis: Why Quick Prune Failed
### Hypothesis 1: FC/SFC Overhead Already Minimal
- FC/SFC checks are branch-predicted (miss path well-optimized)
- Skipping these layers provides negligible cycle savings
- Premise of "0% hit rate" may not reflect actual benefit of having layers
### Hypothesis 2: ENV Check Overhead Cancels Gains
- TLS variable initialization (`g_front_slim_checked`)
- `getenv()` call overhead on first allocation
- Cost of SLIM gate check == cost of skipping FC/SFC
### Hypothesis 3: Incorrect Premise
- Task-sensei's "FC/SFC hit rate 0%" assumption may be wrong
- Layers may provide cache locality benefits even with low hit rate
- Removing layers disrupts cache line prefetching
---
## Conclusion & Next Steps
**Phase 19-1 Status**: ❌ Experimental - No performance improvement
**Key Learnings**:
1. Frontend layer pruning alone is insufficient
2. Branch prediction in existing code is already effective
3. Structural change (not just pruning) needed for significant gains
**Recommendation**: Proceed to Phase 19-2 (Front-V2 tcache single-layer)
- Phase 19-1 approach (pruning) = failed
- Phase 19-2 approach (structural redesign) = recommended
- Expected: 31ns → 15ns via tcache-style single TLS magazine
---
## ENV Usage
```bash
# Enable SLIM mode (experimental, no gain observed)
export HAKMEM_TINY_FRONT_SLIM=1
./bench_random_mixed_hakmem 1000000 256 42
# Disable SLIM mode (default, recommended)
unset HAKMEM_TINY_FRONT_SLIM
./bench_random_mixed_hakmem 1000000 256 42
```
---
## Files Modified
- `core/tiny_alloc_fast.inc.h` - Added Phase 19-1 Quick Prune gate
## Investigation Report
Task-sensei analysis documented entry point (`tiny_alloc_fast_pop()` line 176),
identified skip targets (FC: lines 208-220, SFC: lines 222-250), and confirmed
SLL as primary fast path (88-99% hit rate from prior analysis).
---
📝 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
Co-Authored-By: Task-sensei (tiny_alloc_fast.inc.h structure analysis)
Co-Authored-By: ChatGPT (Phase 19 strategy design)
2025-11-21 05:33:17 +09:00
6afaa5703a
Phase 12-1.1: EMPTY Slab Detection + Immediate Reuse (+13% improvement, 10.2M→11.5M ops/s)
...
Implementation of Task-sensei Priority 1 recommendation: Add empty_mask to SuperSlab
for immediate EMPTY slab detection and reuse, reducing Stage 3 (mmap) overhead.
## Changes
### 1. SuperSlab Structure (core/superslab/superslab_types.h)
- Added `empty_mask` (uint32_t): Bitmap for EMPTY slabs (used==0)
- Added `empty_count` (uint8_t): Quick check for EMPTY slab availability
### 2. EMPTY Detection API (core/box/ss_hot_cold_box.h)
- Added `ss_is_slab_empty()`: Returns true if slab is completely EMPTY
- Added `ss_mark_slab_empty()`: Marks slab as EMPTY (highest reuse priority)
- Added `ss_clear_slab_empty()`: Removes EMPTY state when reactivated
- Updated `ss_update_hot_cold_indices()`: Classify EMPTY/Hot/Cold slabs
- Updated `ss_init_hot_cold()`: Initialize empty_mask/empty_count
### 3. Free Path Integration (core/box/free_local_box.c)
- After `meta->used--`, check if `meta->used == 0`
- If true, call `ss_mark_slab_empty()` to update empty_mask
- Enables immediate EMPTY detection on every free operation
### 4. Shared Pool Stage 0.5 (core/hakmem_shared_pool.c)
- New Stage 0.5 before Stage 1: Scan existing SuperSlabs for EMPTY slabs
- Iterate over `g_super_reg_by_class[class_idx][]` (first 16 entries)
- Check `ss->empty_count > 0` → scan `empty_mask` with `__builtin_ctz()`
- Reuse EMPTY slab directly, avoiding Stage 3 (mmap/lock overhead)
- ENV control: `HAKMEM_SS_EMPTY_REUSE=1` (default OFF for A/B testing)
- ENV tunable: `HAKMEM_SS_EMPTY_SCAN_LIMIT=N` (default 16 SuperSlabs)
## Performance Results
```
Benchmark: Random Mixed 256B (100K iterations)
OFF (default): 10.2M ops/s (baseline)
ON (ENV=1): 11.5M ops/s (+13.0% improvement) ✅
```
## Expected Impact (from Task-sensei analysis)
**Current bottleneck**:
- Stage 1: 2-5% hit rate (free list broken)
- Stage 2: 3-8% hit rate (rare UNUSED)
- Stage 3: 87-95% hit rate (lock + mmap overhead) ← bottleneck
**Expected with Phase 12-1.1**:
- Stage 0.5: 20-40% hit rate (EMPTY scan)
- Stage 1-2: 20-30% hit rate (combined)
- Stage 3: 30-50% hit rate (significantly reduced)
**Theoretical max**: 25M → 55-70M ops/s (+120-180%)
## Current Gap Analysis
**Observed**: 11.5M ops/s (+13%)
**Expected**: 55-70M ops/s (+120-180%)
**Gap**: Performance regression or missing complementary optimizations
Possible causes:
1. Phase 3d-C (25.1M→10.2M) regression - unrelated to this change
2. EMPTY scan overhead (16 SuperSlabs × empty_count check)
3. Missing Priority 2-5 optimizations (Lazy SS deallocation, etc.)
4. Stage 0.5 too conservative (scan_limit=16, should be higher?)
## Usage
```bash
# Enable EMPTY reuse optimization
export HAKMEM_SS_EMPTY_REUSE=1
# Optional: increase scan limit (trade-off: throughput vs latency)
export HAKMEM_SS_EMPTY_SCAN_LIMIT=32
./bench_random_mixed_hakmem 100000 256 42
```
## Next Steps
**Priority 1-A**: Investigate Phase 3d-C→12-1.1 regression (25.1M→10.2M)
**Priority 1-B**: Implement Phase 12-1.2 (Lazy SS deallocation) for complementary effect
**Priority 1-C**: Profile Stage 0.5 overhead (scan_limit tuning)
## Files Modified
Core implementation:
- `core/superslab/superslab_types.h` - empty_mask/empty_count fields
- `core/box/ss_hot_cold_box.h` - EMPTY detection/marking API
- `core/box/free_local_box.c` - Free path EMPTY detection
- `core/hakmem_shared_pool.c` - Stage 0.5 EMPTY scan
Documentation:
- `CURRENT_TASK.md` - Task-sensei investigation report
---
🎯 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
Co-Authored-By: Task-sensei (investigation & design analysis)
2025-11-21 04:56:48 +09:00
2878459132
Refactor: Extract 4 safe Box modules from hakmem_tiny.c (-73% total reduction)
...
Conservative refactoring with Task-sensei's safety analysis.
## Changes
**hakmem_tiny.c**: 616 → 562 lines (-54 lines, -9% this phase)
**Total reduction**: 2081 → 562 lines (-1519 lines, -73% cumulative) 🏆
## Extracted Modules (4 new LOW-risk boxes)
9. **ss_active_box** (6 lines)
- ss_active_add() - atomic add to active counter
- ss_active_inc() - atomic increment active counter
- Pure utility functions, no dependencies
- Risk: LOW
10. **eventq_box** (32 lines)
- hak_thread_id16() - thread ID compression
- eventq_push_ex() - event queue push with sampling
- Intelligence/telemetry helpers
- Risk: LOW
11. **sll_cap_box** (12 lines)
- sll_cap_for_class() - SLL capacity policy
- Hot classes get multiplier × mag_cap
- Cold classes get mag_cap / 2
- Risk: LOW
12. **ultra_batch_box** (20 lines)
- g_ultra_batch_override[] - batch size overrides
- g_ultra_sll_cap_override[] - SLL capacity overrides
- ultra_batch_for_class() - batch size policy
- Risk: LOW
## Cumulative Progress (12 boxes total)
**Phase 1** (5 boxes): 2081 → 995 lines (-52%)
**Phase 2** (3 boxes): 995 → 616 lines (-38%)
**Phase 3** (4 boxes): 616 → 562 lines (-9%)
**All 12 boxes**:
1. config_box (211 lines)
2. publish_box (419 lines)
3. globals_box (256 lines)
4. phase6_wrappers_box (122 lines)
5. ace_guard_box (100 lines)
6. tls_state_box (224 lines)
7. legacy_slow_box (96 lines)
8. slab_lookup_box (77 lines)
9. ss_active_box (6 lines) ✨
10. eventq_box (32 lines) ✨
11. sll_cap_box (12 lines) ✨
12. ultra_batch_box (20 lines) ✨
**Total extracted**: 1,575 lines across 12 coherent modules
**Remaining core**: 562 lines (highly focused)
## Safety Approach
- Task-sensei performed deep dependency analysis
- Extracted only LOW-risk candidates
- All dependencies verified at compile time
- Forward declarations already present
- No circular dependencies
- Build tested after each extraction ✅
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-21 03:20:42 +09:00
922eaac79c
Refactor: Extract 3 more Box modules from hakmem_tiny.c (-70% total reduction)
...
Continue hakmem_tiny.c refactoring with 3 large module extractions.
## Changes
**hakmem_tiny.c**: 995 → 616 lines (-379 lines, -38% this phase)
**Total reduction**: 2081 → 616 lines (-1465 lines, -70% cumulative) 🏆
## Extracted Modules (3 new boxes)
6. **tls_state_box** (224 lines)
- TLS SLL enable flags and configuration
- TLS canaries and SLL array definitions
- Debug counters (path, ultra, allocation)
- Frontend/backend configuration
- TLS thread ID caching helpers
- Frontend hit/miss counters
- HotMag, QuickSlot, Ultra-front configuration
- Helper functions (is_hot_class, tiny_optional_push)
- Intelligence system helpers
7. **legacy_slow_box** (96 lines)
- tiny_slow_alloc_fast() function (cold/unused)
- Legacy slab-based allocation with refill
- TLS cache/fast cache refill from slabs
- Remote drain handling
- List management (move to full/free lists)
- Marked __attribute__((cold, noinline, unused))
8. **slab_lookup_box** (77 lines)
- registry_lookup() - O(1) hash-based lookup
- hak_tiny_owner_slab() - public API for slab discovery
- Linear probing search with atomic owner access
- O(N) fallback for non-registry mode
- Safety validation for membership checking
## Cumulative Progress (8 boxes total)
**Previously extracted** (Phase 1):
1. config_box (211 lines)
2. publish_box (419 lines)
3. globals_box (256 lines)
4. phase6_wrappers_box (122 lines)
5. ace_guard_box (100 lines)
**This phase** (Phase 2):
6. tls_state_box (224 lines)
7. legacy_slow_box (96 lines)
8. slab_lookup_box (77 lines)
**Total extracted**: 1,505 lines across 8 coherent modules
**Remaining core**: 616 lines (well-organized, focused)
## Benefits
- **Readability**: 2k monolith → focused 616-line core
- **Maintainability**: Each box has single responsibility
- **Organization**: TLS state, legacy code, lookup utilities separated
- **Build**: All modules compile successfully ✅
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-21 01:23:59 +09:00
6b6ad69aca
Refactor: Extract 5 Box modules from hakmem_tiny.c (-52% size reduction)
...
Split hakmem_tiny.c (2081 lines) into focused modules for better maintainability.
## Changes
**hakmem_tiny.c**: 2081 → 995 lines (-1086 lines, -52% reduction)
## Extracted Modules (5 boxes)
1. **config_box** (211 lines)
- Size class tables, integrity counters
- Debug flags, benchmark macros
- HAK_RET_ALLOC/HAK_STAT_FREE instrumentation
2. **publish_box** (419 lines)
- Publish/Adopt counters and statistics
- Bench mailbox, partial ring
- Live cap/Hot slot management
- TLS helper functions (tiny_tls_default_*)
3. **globals_box** (256 lines)
- Global variable declarations (~70 variables)
- TinyPool instance and initialization flag
- TLS variables (g_tls_lists, g_fast_head, g_fast_count)
- SuperSlab configuration (partial ring, empty reserves)
- Adopt gate functions
4. **phase6_wrappers_box** (122 lines)
- Phase 6 Box Theory wrapper layer
- hak_tiny_alloc_fast_wrapper()
- hak_tiny_free_fast_wrapper()
- Diagnostic instrumentation
5. **ace_guard_box** (100 lines)
- ACE Learning Layer (hkm_ace_set_drain_threshold)
- FastCache API (tiny_fc_room, tiny_fc_push_bulk)
- Tiny Guard debugging system (5 functions)
## Benefits
- **Readability**: Giant 2k file → focused 1k core + 5 coherent modules
- **Maintainability**: Each box has clear responsibility and boundaries
- **Build**: All modules compile successfully ✅
## Technical Details
- Phase 1: ChatGPT extracted config_box + publish_box (-625 lines)
- Phase 2-4: Claude extracted globals_box + phase6_wrappers_box + ace_guard_box (-461 lines)
- All extractions use .inc files (same translation unit, preserves static/TLS linkage)
- Fixed Makefile: Added tiny_sizeclass_hist_box.o to OBJS_BASE and BENCH_HAKMEM_OBJS_BASE
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-21 01:16:45 +09:00
23c0d95410
Phase 3d-C: Hot/Cold Slab Split - SuperSlab cache locality optimization (baseline established)
...
Goal: Improve L1D cache hit rate via hot/cold slab separation
Implementation:
- Added hot/cold fields to SuperSlab (superslab_types.h)
- hot_indices[16] / cold_indices[16]: Index arrays for hot/cold slabs
- hot_count / cold_count: Number of slabs in each category
- Created ss_hot_cold_box.h: Hot/Cold Split Box API
- ss_is_slab_hot(): Utilization-based hot判定 (>50% usage)
- ss_update_hot_cold_indices(): Rebuild index arrays on slab activation
- ss_init_hot_cold(): Initialize fields on SuperSlab creation
- Updated hakmem_tiny_superslab.c:
- Initialize hot/cold fields in superslab creation (line 786-792)
- Update hot/cold indices on slab activation (line 1130)
- Include ss_hot_cold_box.h (line 7)
Architecture:
- Strategy: Hot slabs (high utilization) prioritized for allocation
- Expected: +8-12% from improved cache line locality
- Note: Refill path optimization (hot優先スキャン) deferred to future commit
Testing:
- Build: Success (LTO warnings are pre-existing)
- 10K ops sanity test: PASS (1.4M ops/s)
- Baseline established for Phase C-8 benchmark comparison
Phase 3d sequence:
- Phase A: SlabMeta Box boundary (38552c3f3✅
- Phase B: TLS Cache Merge (9b0d74640✅
- Phase C: Hot/Cold Split (current) ✅
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-20 07:44:07 +09:00
9b0d746407
Phase 3d-B: TLS Cache Merge - Unified g_tls_sll[] structure (+12-18% expected)
...
Merge separate g_tls_sll_head[] and g_tls_sll_count[] arrays into unified
TinyTLSSLL struct to improve L1D cache locality. Expected performance gain:
+12-18% from reducing cache line splits (2 loads → 1 load per operation).
Changes:
- core/hakmem_tiny.h: Add TinyTLSSLL type (16B aligned, head+count+pad)
- core/hakmem_tiny.c: Replace separate arrays with g_tls_sll[8]
- core/box/tls_sll_box.h: Update Box API (13 sites) for unified access
- Updated 32+ files: All g_tls_sll_head[i] → g_tls_sll[i].head
- Updated 32+ files: All g_tls_sll_count[i] → g_tls_sll[i].count
- core/hakmem_tiny_integrity.h: Unified canary guards
- core/box/integrity_box.c: Simplified canary validation
- Makefile: Added core/box/tiny_sizeclass_hist_box.o to link
Build: ✅ PASS (10K ops sanity test)
Warnings: Only pre-existing LTO type mismatches (unrelated)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-20 07:32:30 +09:00
38552c3f39
Phase 3d-A: SlabMeta Box boundary - Encapsulate SuperSlab metadata access
...
ChatGPT-guided Box theory refactoring (Phase A: Boundary only).
Changes:
- Created ss_slab_meta_box.h with 15 inline accessor functions
- HOT fields (8): freelist, used, capacity (fast path)
- COLD fields (6): class_idx, carved, owner_tid_low (init/debug)
- Legacy (1): ss_slab_meta_ptr() for atomic ops
- Migrated 14 direct slabs[] access sites across 6 files
- hakmem_shared_pool.c (4 sites)
- tiny_free_fast_v2.inc.h (1 site)
- hakmem_tiny.c (3 sites)
- external_guard_box.h (1 site)
- hakmem_tiny_lifecycle.inc (1 site)
- ss_allocation_box.c (4 sites)
Architecture:
- Zero overhead (static inline wrappers)
- Single point of change for future layout optimizations
- Enables Hot/Cold split (Phase C) without touching call sites
- A/B testing support via compile-time flags
Verification:
- Build: ✅ Success (no errors)
- Stability: ✅ All sizes pass (128B-1KB, 22-24M ops/s)
- Behavior: Unchanged (thin wrapper, no logic changes)
Next: Phase B (TLS Cache Merge, +12-18% expected)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com >
2025-11-20 02:01:52 +09:00
