Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Cloudflare Quick Tunnels(cloudflare.com ↗)
    134comments
  2. Photon-Emission-Guided Laser Fault Injection Enables RP2350 Secure Debug(ledger.com ↗)
    7comments
  3. North Korean nuclear test sets off years of earthquakes(science.org ↗)
    80comments
  4. Show HN: Cactus Needle 3: 8-29MB automation models can match DeepSeek V4 Flash(cactuscompute.com ↗)
    26comments
  5. C++26: Trivial infinite loops are no longer undefined behaviour(sandordargo.com ↗)
    109comments
  6. OpenJev(openjev.com ↗)
    212comments
  7. I vibed a proof of Conway's conjecture(overreacted.io ↗)
    118comments
  8. US Military had close call after using AI for hallucinated intelligence report(cnn.com ↗)
    7comments
  9. A heap overflow and SSO misconfiguration to compromise OpenAI internal repos(hacktron.ai ↗)
    182comments
  10. I don't like passkeys(hawksley.dev ↗)
    562comments
  11. Mathematicians Build Long-Awaited Graph Sandwich(quantamagazine.org ↗)
    6comments
  12. Jemalloc 5.4.0(github.com/jemalloc ↗)
    76comments
  13. NATS publishes preliminary report on technical incident of 8 September(nats.aero ↗)
    23comments
  14. GrassLobster: AI Agentic Generation of Parametric Geometry Workflows(miro.vision ↗)
    4comments
  15. The scourge of x86 emulation(fex-emu.com ↗)
    69comments
  16. Bonsai 2 27B: Near-Lossless Compression in a 9x Smaller Footprint(prismml.com ↗)
    176comments
  17. The Shadows Lurking in the Equations – Underwater Islands(gods.art ↗)
    9comments
  18. Cekura (YC F24) Is Hiring(ycombinator.com ↗)
    discuss
  19. Warren Buffett Steps Down as Berkshire Chairman, Names Son to Replace Him(nytimes.com ↗)
    159comments
  20. Show HN: Scry, programmable internet search w/ congestion pricing(scry.io ↗)
    3comments
  21. BeanShell3 in Development(beanshell.github.io ↗)
    14comments
  22. Replacing Pull Requests with Delta(zed.dev ↗)
    71comments
  23. Qwen 3.8 Omni Flash(qwen.ai ↗)
    118comments
  24. An empirical study of harness design for coding agents(arxiv.org ↗)
    41comments
  25. Build Faster Feedback Loops Using Qualitative User Research(nseldeib.com ↗)
    2comments
  26. AI chatbots are becoming experts at changing people's minds(science.org ↗)
    80comments
  27. How to Write with an LLM(sockpuppet.org ↗)
    198comments
  28. Systemd is a suite of basic building blocks(systemd.io ↗)
    2comments
  29. Second Circuit Allows Government to Search Electronic Devices at the Border(knightcolumbia.org ↗)
    51comments
  30. Pre-Greek: The lost language hidden within Ancient Greek(linguisticdiscovery.com ↗)
    62comments

Comparison of Malloc() Algorithms

140 pointsby 3d agoegbert.net
45 comments
1d agoHN ↗

ERR_SSL_VERSION_OR_CIPHER_MISMATCH on my phone it seems?

1d agoHN ↗

TLS_CHACHA20_POLY1305_SHA256 (256 bit keys, TLS 1.3) successfully negotiated here (Firefox esr 140.14.0).

1d agoHN ↗

https://web.archive.org/web/20260915165314/https://egbert.ne...

Funny SSL setup. Explanation from here https://news.ycombinator.com/item?id=49133598

Oh, certain browser will not work with this blog if it cannot negotiate ONLY for Cha-Cha/Poly. It's by design as a showcase of why that particular web browser refuses to do that.

I assume the "particular web browser" is Chromium, which won't load it on any OS I've tried. On Windows, Firefox and the built-in curl.exe also refuse to connect.

1d agoHN ↗

A great idea for another article. A focus, on embedded and malloc()

I do do have a malloc() benchmark but it is in bad shape and directories have not coalesce nicely yet, tor a single run or a menu-driven one.

1d agoHN ↗

It keeps certain web scrapers and inline transparent proxies/IDS/XNS from fetching, 100%

Certain browsers will suffer. Meh.

1d agoHN ↗

Firefox on Windows user here, and it loads the blog fine. I don't have Chrome installed but Edge (which is Chromium engine based) doesn't load it.

10h agoHN ↗

I don't get what this is supposed to prove. That my browser doesn't allow websites to declare what encryption they use? I am pretty sure there's a point to all of this, but please let me (and my browser) choose which encryptions I want to trust.

Is this a spec violation or something?

1d agoHN ↗

Please write a "how to setup SSL" article

1d agoHN ↗

It seems to be intentional & if somebody wants to make a statement about TLS with their personal website that's their choice to make and execute.

1d agoHN ↗

On the bright side, lots of people will be saved from reading bad prose like "Malloc (libc) is the worst memory allocation API to use" and "Programs should avoid, if possible, allocating/deallocating memory too often". (By definition, "too often" means it can possibly be avoided, and usually that it can practically be avoided.)

1d agoHN ↗

Beats the hell out of most of the LLM-generated "honest assesments" of things on this site.

1d agoHN ↗

I might be stupid, but what's wrong with those sentences?

9h agoHN ↗

The first one was offered with no explanation and no claimed better alternative. malloc() is probably the simplest interface for generic runtime allocation, and simplicity has a lot in its favor. malloc() does not provide type safety, is susceptible to external fragmentation, and makes it harder to meet the performance goals outlined in the rest of the blog post. So malloc() reflects trade-offs, but saying that the standard API "is the worst memory allocation API to use" should be supported, even if briefly, instead of simply asserted: meeting the goals I listed inflicts other drawbacks, like needing to create and manage separate heaps.

I thought my explanation for the second one was already clear: "Programs should avoid, if possible, [doing X] too often" is a truism because "too often" implies that some reduction is possible. One should leave out the ", if possible," -- although deciding what is "too often" can be challenging and sometimes a matter of taste. (Is reducing allocation frequency by 5% worth doubling the CPU usage or memory usage or code complexity? Maybe in some cases, but often not.)

1d agoHN ↗

Not a good article, IMO.

FTA: “When multiple threads simultaneously allocate or deallocate memory from the allocator, the allocator will serialize them. Programs making intensive use of the allocator actually slow down as the number of processors increases.”

The article does later retract on that, but that’s no reason to lead with such a blatantly false (with current allocators) statement.

Also FTA “In 2006, a third pool was introduced (after operating system memory pool and library-based memory pool) called the “arena”. Arena is a jemalloc-term”

Jemalloc is from around 2005 (http://jemalloc.net/), the idea of arenas is from the 1960s, and Wikipedia claims the term was coined in 1990 (https://en.wikipedia.org/wiki/Region-based_memory_management...), and the linked paper (https://www.cs.princeton.edu/techreports/1988/191.pdf) is from 1988.

Then, a typo: “as well as memory tied to specific to each of the multiple CPU core or even CPU infinity.”

“Infinity” should be “affinity” there.

1d agoHN ↗

The tables look mostly correct, and that's what I'll be bookmarking this for… I don't think I've seen any elsewhere that are this extensive (in both axis, total allocators covered & details per allocator).

1d agoHN ↗

Thank you.

I got tired of reading AI prose so I compiled and wrote it from my collections of others' whitepapers.

As a "For Reference Only", at the very least, for me.

As usual, anyone is welcome to improve upon it under CC BY-NC-SA.

1d agoHN ↗

yup and the characterization of each allocator is so fuzzy, with zero methodology provided.

allocators are so simple to just swap into your program. if you can put together a few representative workloads, you should just try out a few allocators and profile whatever metrics you care about.

1d agoHN ↗

And finally end up with either jemalloc or possibly mimalloc. ;)

1d agoHN ↗

Invariably so but I'm mulling over malloc()s on embedded topic now.

11h agoHN ↗

Interesting, is there an accompanying article?

We've tried tcmalloc, too. I don't remember the exact details, but we basically ended using jemalloc because it was using way less memory.

Same story with mimalloc - it usually provided a tiny bit more speed, but required more cpu and memory.

1d agoHN ↗

ClickHouse has been tested with jemalloc, mimalloc, tcmalloc (both variants), rpmalloc, lfalloc, hualloc, and ended up using jemalloc after a few patches and bug fixes.

1d agoHN ↗

Lfmalloc? Humalloc?

I am intrigued.

Is there a source for them?

1d agoHN ↗

Thank you for the critique.

Compilations are hard to get 100% right.

1d agoHN ↗

Yes, I do not know what this paragraph wants to say:

"The first memory allocation scheme started with a stack-based memory allocation. Next came the dynamic-based memory allocation scheme where linked-list and bucket-heap mechanism are used to divide the private-heap using size class approach. Soon, garbage collection algorithm introduced the initial backend of the memory allocation scheme."

Since no specific operating system is mentioned, these sentences appear to refer to the general history of dynamic memory allocation, in which case they are wrong.

"malloc" is a late comer in this history. It has appeared as the statement "ALLOCATE", together with the statement "FREE", in the programming language PL/I of IBM, by the end of 1964. The C programming language has inherited these 2 functions from IBM PL/I, together with several other features.

At that time (1964-12), many other techniques of managing memory had already been used for a few years.

Dynamic allocation of memory has started during the fifties, with allocation without ever freeing the allocated memory before the termination of the process.

Then, in 1960, 3 methods of handling dynamic memory allocation and implicit freeing were published, which have remained important until today: the use of garbage collectors in April (John McCarthy), the use of stacks in May (E. W. Dijkstra), and the use of reference counts in December (George E. Collins @ IBM).

So the use of garbage collectors is actually the oldest published method for handling dynamic memory allocation, not a newer method, being used in LISP I about 5 years before the first release of PL/I with explicit allocation and freeing (mid 1965).

1d agoHN ↗

Thank you for the insightful aspect. This too should be in the lore of memory allocations as well

Will research that, citations and all

1d agoHN ↗

To help you with the citations:

Garbage collectors: "Recursive Functions of Symbolic Expressions and Their Computation by Machine, Part I", John McCarthy, Communications of the ACM, 1960-04, pp. 184-195 (open access at ACM).

Stacks and stack pointers: "Recursive Programming", Edsger Wybe Dijkstra, 1960-05-11 (available at the Dijkstra Archive).

Reference counts for memory allocation: "A Method for Overlapping and Erasure of Lists", George E. Collins (IBM), Communications of the ACM, Volume 3, Issue 12, 1960-12, pp. 655–657 (open access at ACM).

The first "malloc", i.e. the statements "ALLOCATE" and "FREE" appeared in "NPL Technical Report" at IBM in 1964-12 (available at bitsavers.org).

"NPL" was a provisional name for the new programming language of IBM, which was rebranded as "PL/I" when it was launched officially, a half of year later.

IBM did not document what kind of algorithm was used by their "malloc" implementation, but it already had to handle multi-threaded programs and it was specified that when a new thread was spawned, it could still access any variable that had been dynamically allocated in the parent thread, before the launching of the new thread, but the variables that were allocated in the new thread were private to that thread.

The C "malloc" became compatible with multi-threading only many decades after its ancestor from PL/I.

20h agoHN ↗

Zeow! Citation galore! Gotta RAG them into my LLM!

And then THeIR citations too!

Thank you very much!

1d agoHN ↗

Couldn't read the article (ERR_SSL_VERSION_OR_CIPHER_MISMATCH, Chrome on Windows). But I'm remembering something a coworker told me some time around... 1991 to 1993, maybe? Forgive me if I repeat some of what the article says - I did try to read it!

While he was at the university, they were experimenting with different kind of mallocs. One was called the "buddy" malloc. It kept a list of free blocks of various sizes, and when you asked for a block and it didn't have one, it asked the OS for twice as much as you asked for. From the rest, it made another block (identical to yours, called the "buddy" block), and put it on the free list of that size.

Well, they experimented with a similar algorithm, but the idea was that most requests were small. So it took the buddy block and broke it into smaller pieces, one half the size of the request, one a quarter the size, and so on, and put those on their respective free lists. They called this the "donner" malloc, because you carved up your buddy.

From the way my coworker smiled, I think he thought it was amusing, but I don't think he was making it up.

1d agoHN ↗

D. S. Hirschberg, A Class of Dynamic Memory Allocation, CACM 16(10) 1973 covered this variants of halving Buddy Allocator.

1d agoHN ↗

What malloc does macOS use in userspace? How about kernel?

20h agoHN ↗

In NextSTEP 3, it was zoned-based allocation.

Rhapsody and early MacOS X, Darwin also used zone-based

Early iPhone also zone-based.

Later MacOS X implemented scalable zone, magazine allocator.

iPhone 12+ then went Nano allocator, ScalableZone + large/VM allocator

Latest iOS/iPadOS use Nano2

18h agoHN ↗

Every time I tried to replace the allocator in an app, the speedup was negligible.