Defined in 1 files as a prototype:

Defined in 2 files as a function:

Referenced in 2 files:

Smatch caller information:

drivers/infiniband/hw/bnxt_re/ib_verbs.c bnxt_re_alloc_ucontext() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 1-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 2 valid_cm 3
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $1
NOSPEC 0 udata->inlen
USER_DATA 0 udata->inlen 1-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 0-u64max
LOCK2 &file->hw_destroy_rwsem
LOCK2 &file->ucontext_lock
TYPE_LOCK (struct ib_uverbs_file)->hw_destroy_rwsem
TYPE_LOCK (struct ib_uverbs_file)->ucontext_lock

drivers/infiniband/hw/bnxt_re/ib_verbs.c bnxt_re_create_qp() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 2 valid_cm 1
BUF_SIZE 0 udata 0,32
BUF_SIZE 0 udata 0,32
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $2
NOSPEC 0 udata->inlen
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 0-u64max

drivers/infiniband/hw/bnxt_re/ib_verbs.c bnxt_re_create_user_cq() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 2 valid_cm 1
BUF_SIZE 0 udata 32
CAPPED_DATA 0 udata->inlen 1
NOSPEC 0 udata->inlen
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 0-u64max

drivers/infiniband/hw/mlx5/qp.c mlx5_ib_modify_qp() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 1-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 1 req_cm 2-u32max
PARAM_VALUE 2 valid_cm 1
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $3
NOSPEC 0 udata->inlen
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 udata->inlen 1-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 2-u32max
HALF_LOCKED2 &ibqp->qp_sec->mutex

drivers/infiniband/hw/mlx5/qp.c mlx5_ib_modify_wq() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 1 req_cm 1-u32max
PARAM_VALUE 2 valid_cm 0
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $3
NOSPEC 0 udata->inlen
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 1-u32max
HALF_LOCKED2 &file->device->disassociate_srcu

drivers/infiniband/hw/mlx5/qp.c prepare_user_rq() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 0 udata->outlen 0,8-524280,18446744073709551361-u64max
PARAM_VALUE 1 req_cm 2-u32max
PARAM_VALUE 2 valid_cm 1
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $2
CAPABLE 0 17
NOSPEC 0 udata->inlen
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0,8-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 2-u32max

drivers/infiniband/hw/mlx4/qp.c _mlx4_ib_create_qp_rss() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 0 udata->outlen 0
PARAM_VALUE 1 req_cm 1-u32max
PARAM_VALUE 2 valid_cm 0
BUF_SIZE 0 udata 0,32
BUF_SIZE 0 udata 0,32
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $3
NOSPEC 0 udata->inlen
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0
USER_DATA 1 req_cm 1-u32max

drivers/infiniband/hw/mlx4/qp.c create_rq() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 0 udata->outlen 0
PARAM_VALUE 1 req_cm 1-u32max
PARAM_VALUE 2 valid_cm 0
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $2
NOSPEC 0 udata->inlen
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0
USER_DATA 1 req_cm 1-u32max

drivers/infiniband/hw/mlx4/qp.c mlx4_ib_modify_wq() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 1 req_cm 1-u32max
PARAM_VALUE 2 valid_cm 0
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $3
NOSPEC 0 udata->inlen
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 1-u32max
HALF_LOCKED2 &file->device->disassociate_srcu

drivers/infiniband/hw/mana/main.c mana_ib_alloc_pd() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 1-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 1 req_cm 2-u32max
PARAM_VALUE 2 valid_cm 1
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $1
NOSPEC 0 udata->inlen
RX_PATH
USER_DATA 0 udata->inlen 1-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 2-u32max
HALF_LOCKED2 &file->device->disassociate_srcu

drivers/infiniband/hw/mana/qp.c mana_ib_create_uc_qp() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 1 req_cm 1-u32max
PARAM_VALUE 2 valid_cm 0
BUF_SIZE 0 udata 0,32
BUF_SIZE 0 udata 0,32
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $3
NOSPEC 0 udata->inlen
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 1-u32max

drivers/infiniband/hw/efa/efa_verbs.c efa_create_qp() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 1 req_cm 1-u32max
PARAM_VALUE 2 valid_cm 0
BUF_SIZE 0 udata 0,32
BUF_SIZE 0 udata 0,32
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $2
NOSPEC 0 udata->inlen
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 1-u32max

drivers/infiniband/hw/efa/efa_verbs.c efa_create_user_cq() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 1 req_cm 1-u32max
PARAM_VALUE 2 valid_cm 0
BUF_SIZE 0 udata 32
CAPPED_DATA 0 udata->inlen 1
NOSPEC 0 udata->inlen
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 1-u32max

drivers/infiniband/hw/mlx4/main.c mlx4_ib_query_device() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 1-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 1 req_cm 1-u32max
PARAM_VALUE 2 valid_cm 0
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $2
NOSPEC 0 udata->inlen
RX_PATH
USER_DATA 0 udata->inlen 1-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 1-u32max
HALF_LOCKED2 &file->device->disassociate_srcu

drivers/infiniband/hw/mana/cq.c mana_ib_create_cq() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 1 req_cm 2-u16max
PARAM_VALUE 2 valid_cm 1
BUF_SIZE 0 udata 32
CAPPED_DATA 0 udata->inlen 1
NOSPEC 0 udata->inlen
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 2-u16max

drivers/infiniband/hw/irdma/verbs.c irdma_alloc_ucontext() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 0 udata->outlen 16-524280,18446744073709551361-u64max
PARAM_VALUE 2 valid_cm 9
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $1
FUZZY_MAX 0 udata->outlen 16
NOSPEC 0 udata->inlen
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 16-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 0-u64max
LOCK2 &file->hw_destroy_rwsem
LOCK2 &file->ucontext_lock
TYPE_LOCK (struct ib_uverbs_file)->hw_destroy_rwsem
TYPE_LOCK (struct ib_uverbs_file)->ucontext_lock

drivers/infiniband/hw/mlx5/mr.c mlx5_ib_alloc_mw() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 1-64
PARAM_VALUE 0 udata->outlen 0-524280,18446744073709551361-u64max
PARAM_VALUE 1 req_cm 1-u32max
PARAM_VALUE 2 valid_cm 0
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $1
NOSPEC 0 udata->inlen
USER_DATA 0 udata->inlen 1-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max
USER_DATA 1 req_cm 1-u32max
HALF_LOCKED2 &file->device->disassociate_srcu

drivers/infiniband/hw/hns/hns_roce_qp.c set_qp_param() -> _ib_copy_validate_udata_cm_fail()

Type Parameter Key Value
PARAM_VALUE 0 udata 4096-ptr_max
PARAM_VALUE 0 udata->inlen 0-64
PARAM_VALUE 2 valid_cm 1
BUF_SIZE 0 udata (-1)-0,32
BUF_SIZE 0 udata (-1)-0,32
CAPPED_DATA 0 udata->inlen 1
DATA_SOURCE 0 udata $3
NOSPEC 0 udata->inlen
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 udata->inlen 0-64[c]
USER_DATA 0 udata->outlen 0-524280,18446744073709551361-u64max