Defined in 1 files as a prototype:
Defined in 2 files as a function:
- drivers/infiniband/core/ib_core_uverbs.c, line 469 (as a function)
- include/rdma/uverbs_ioctl.h, line 1005 (as a function)
Referenced in 2 files:
Smatch caller information:
drivers/infiniband/hw/bnxt_re/ib_verbs.c bnxt_re_alloc_ucontext() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 1-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 2 | valid_cm | 3 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $1 |
| NOSPEC | 0 | udata->inlen | |
| USER_DATA | 0 | udata->inlen | 1-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 0-u64max |
| LOCK2 | &file->hw_destroy_rwsem | ||
| LOCK2 | &file->ucontext_lock | ||
| TYPE_LOCK | (struct ib_uverbs_file)->hw_destroy_rwsem | ||
| TYPE_LOCK | (struct ib_uverbs_file)->ucontext_lock |
drivers/infiniband/hw/bnxt_re/ib_verbs.c bnxt_re_create_qp() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 2 | valid_cm | 1 |
| BUF_SIZE | 0 | udata | 0,32 |
| BUF_SIZE | 0 | udata | 0,32 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $2 |
| NOSPEC | 0 | udata->inlen | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 0-u64max |
drivers/infiniband/hw/bnxt_re/ib_verbs.c bnxt_re_create_user_cq() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 2 | valid_cm | 1 |
| BUF_SIZE | 0 | udata | 32 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| NOSPEC | 0 | udata->inlen | |
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 0-u64max |
drivers/infiniband/hw/mlx5/qp.c mlx5_ib_modify_qp() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 1-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | req_cm | 2-u32max |
| PARAM_VALUE | 2 | valid_cm | 1 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $3 |
| NOSPEC | 0 | udata->inlen | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | udata->inlen | 1-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 2-u32max |
| HALF_LOCKED2 | &ibqp->qp_sec->mutex |
drivers/infiniband/hw/mlx5/qp.c mlx5_ib_modify_wq() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | req_cm | 1-u32max |
| PARAM_VALUE | 2 | valid_cm | 0 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $3 |
| NOSPEC | 0 | udata->inlen | |
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 1-u32max |
| HALF_LOCKED2 | &file->device->disassociate_srcu |
drivers/infiniband/hw/mlx5/qp.c prepare_user_rq() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 0 | udata->outlen | 0,8-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | req_cm | 2-u32max |
| PARAM_VALUE | 2 | valid_cm | 1 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $2 |
| CAPABLE | 0 | 17 | |
| NOSPEC | 0 | udata->inlen | |
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0,8-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 2-u32max |
drivers/infiniband/hw/mlx4/qp.c _mlx4_ib_create_qp_rss() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 0 | udata->outlen | 0 |
| PARAM_VALUE | 1 | req_cm | 1-u32max |
| PARAM_VALUE | 2 | valid_cm | 0 |
| BUF_SIZE | 0 | udata | 0,32 |
| BUF_SIZE | 0 | udata | 0,32 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $3 |
| NOSPEC | 0 | udata->inlen | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0 |
| USER_DATA | 1 | req_cm | 1-u32max |
drivers/infiniband/hw/mlx4/qp.c create_rq() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 0 | udata->outlen | 0 |
| PARAM_VALUE | 1 | req_cm | 1-u32max |
| PARAM_VALUE | 2 | valid_cm | 0 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $2 |
| NOSPEC | 0 | udata->inlen | |
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0 |
| USER_DATA | 1 | req_cm | 1-u32max |
drivers/infiniband/hw/mlx4/qp.c mlx4_ib_modify_wq() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | req_cm | 1-u32max |
| PARAM_VALUE | 2 | valid_cm | 0 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $3 |
| NOSPEC | 0 | udata->inlen | |
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 1-u32max |
| HALF_LOCKED2 | &file->device->disassociate_srcu |
drivers/infiniband/hw/mana/main.c mana_ib_alloc_pd() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 1-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | req_cm | 2-u32max |
| PARAM_VALUE | 2 | valid_cm | 1 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $1 |
| NOSPEC | 0 | udata->inlen | |
| RX_PATH | |||
| USER_DATA | 0 | udata->inlen | 1-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 2-u32max |
| HALF_LOCKED2 | &file->device->disassociate_srcu |
drivers/infiniband/hw/mana/qp.c mana_ib_create_uc_qp() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | req_cm | 1-u32max |
| PARAM_VALUE | 2 | valid_cm | 0 |
| BUF_SIZE | 0 | udata | 0,32 |
| BUF_SIZE | 0 | udata | 0,32 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $3 |
| NOSPEC | 0 | udata->inlen | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 1-u32max |
drivers/infiniband/hw/efa/efa_verbs.c efa_create_qp() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 1 | req_cm | 1-u32max |
| PARAM_VALUE | 2 | valid_cm | 0 |
| BUF_SIZE | 0 | udata | 0,32 |
| BUF_SIZE | 0 | udata | 0,32 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $2 |
| NOSPEC | 0 | udata->inlen | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 1-u32max |
drivers/infiniband/hw/efa/efa_verbs.c efa_create_user_cq() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | req_cm | 1-u32max |
| PARAM_VALUE | 2 | valid_cm | 0 |
| BUF_SIZE | 0 | udata | 32 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| NOSPEC | 0 | udata->inlen | |
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 1-u32max |
drivers/infiniband/hw/mlx4/main.c mlx4_ib_query_device() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 1-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | req_cm | 1-u32max |
| PARAM_VALUE | 2 | valid_cm | 0 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $2 |
| NOSPEC | 0 | udata->inlen | |
| RX_PATH | |||
| USER_DATA | 0 | udata->inlen | 1-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 1-u32max |
| HALF_LOCKED2 | &file->device->disassociate_srcu |
drivers/infiniband/hw/mana/cq.c mana_ib_create_cq() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | req_cm | 2-u16max |
| PARAM_VALUE | 2 | valid_cm | 1 |
| BUF_SIZE | 0 | udata | 32 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| NOSPEC | 0 | udata->inlen | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 2-u16max |
drivers/infiniband/hw/irdma/verbs.c irdma_alloc_ucontext() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 0 | udata->outlen | 16-524280,18446744073709551361-u64max |
| PARAM_VALUE | 2 | valid_cm | 9 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $1 |
| FUZZY_MAX | 0 | udata->outlen | 16 |
| NOSPEC | 0 | udata->inlen | |
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 16-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 0-u64max |
| LOCK2 | &file->hw_destroy_rwsem | ||
| LOCK2 | &file->ucontext_lock | ||
| TYPE_LOCK | (struct ib_uverbs_file)->hw_destroy_rwsem | ||
| TYPE_LOCK | (struct ib_uverbs_file)->ucontext_lock |
drivers/infiniband/hw/mlx5/mr.c mlx5_ib_alloc_mw() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 1-64 |
| PARAM_VALUE | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | req_cm | 1-u32max |
| PARAM_VALUE | 2 | valid_cm | 0 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $1 |
| NOSPEC | 0 | udata->inlen | |
| USER_DATA | 0 | udata->inlen | 1-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | req_cm | 1-u32max |
| HALF_LOCKED2 | &file->device->disassociate_srcu |
drivers/infiniband/hw/hns/hns_roce_qp.c set_qp_param() -> _ib_copy_validate_udata_cm_fail()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | udata | 4096-ptr_max |
| PARAM_VALUE | 0 | udata->inlen | 0-64 |
| PARAM_VALUE | 2 | valid_cm | 1 |
| BUF_SIZE | 0 | udata | (-1)-0,32 |
| BUF_SIZE | 0 | udata | (-1)-0,32 |
| CAPPED_DATA | 0 | udata->inlen | 1 |
| DATA_SOURCE | 0 | udata | $3 |
| NOSPEC | 0 | udata->inlen | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | udata->inlen | 0-64[c] |
| USER_DATA | 0 | udata->outlen | 0-524280,18446744073709551361-u64max |