Defined in 1 files as a function:
Referenced in 4 files:
Smatch caller information:
fs/afs/yfsclient.c afs_extract_to_buf() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 3795422845935554560,4743287626251497472,7341752082181083136,9212722471479562240 |
| PARAM_VALUE | 0 | call->iov_len | 0,4-256 |
| PARAM_VALUE | 2 | size | 0,4-256 |
| BUF_SIZE | 0 | call->iter | (-1),40 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 1-24576 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 2 | size | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count | 0-255 |
| USER_DATA | 0 | call->count2 | 0-u32max |
| USER_DATA | 0 | call->iov_len | 0,4-256[c] |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| USER_DATA | 2 | size | 0,4-256[c] |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->request | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len | |
| UNITS | 2 | size | unit_byte |
fs/afs/yfsclient.c afs_extract_to_tmp() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 3795422845935554560,4743287626251497472,7341752082181083136 |
| PARAM_VALUE | 0 | call->iov_len | 4 |
| PARAM_VALUE | 2 | size | 4 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 4 |
| DATA_SOURCE | 0 | call | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count | 0-255 |
| USER_DATA | 0 | call->count2 | 0-u32max |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| NO_OVERFLOW_SIMPLE | 0 | call->buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->request | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len | |
| UNITS | 2 | size | unit_byte |
fs/afs/yfsclient.c afs_extract_to_tmp64() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 9212722471479562240 |
| PARAM_VALUE | 0 | call->iov_len | 8 |
| PARAM_VALUE | 1 | buf | 9212722471479562912 |
| PARAM_VALUE | 2 | size | 8 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 8 |
| DATA_SOURCE | 0 | call | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| NO_OVERFLOW_SIMPLE | 0 | call->buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->request | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len | |
| UNITS | 2 | size | unit_byte |
fs/afs/yfsclient.c yfs_deliver_fs_fetch_opaque_acl() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 6585782510085709824 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 0-u32max |
| DATA_SOURCE | 0 | call | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count2 | 0-u32max |
| USER_DATA | 0 | call->iov_len | 0-17179869179,18446744073709486082-u64max |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| USER_DATA | 0 | call->rxcall->rx_pkt_len | 1-65534[c][u] |
| USER_DATA | 0 | call->rxcall->rx_pkt_offset | 0-u16max[c][u] |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len |
fs/afs/yfsclient.c yfs_deliver_fs_fetch_opaque_acl() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 6585782510085709824 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 0-u32max |
| DATA_SOURCE | 0 | call | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count2 | 0-u32max |
| USER_DATA | 0 | call->iov_len | 0-17179869179,18446744073709486082-u64max |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| USER_DATA | 0 | call->rxcall->rx_pkt_len | 1-65534[c][u] |
| USER_DATA | 0 | call->rxcall->rx_pkt_offset | 0-u16max[c][u] |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len |
fs/afs/vlclient.c afs_deliver_yfsvl_get_cell_name() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 5585205693241782272 |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| PARAM_VALUE | 2 | size | 0-256 |
| BUF_SIZE | 0 | call->ret_str | 1-257 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 1-257 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | buf | r _kmalloc_noprof |
| TERMINATED | 0 | call->ret_str | 1 |
| TERMINATED | 1 | buf | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count | 0-256 |
| USER_DATA | 0 | call->count2 | 0-256,4294967040-u32max |
| USER_DATA | 0 | call->iov_len | 0-17179869179,18446744073709486082-u64max |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| USER_DATA | 0 | call->rxcall->rx_pkt_len | 1-65534[c][u] |
| USER_DATA | 0 | call->rxcall->rx_pkt_offset | 0-u16max[c][u] |
| USER_DATA | 2 | size | 0-256 |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len | |
| ELEM_LAST | 1 | ==buf2 | 8052 |
fs/afs/vlclient.c afs_extract_to_buf() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 638665121030660096,2128391457273053184 |
| PARAM_VALUE | 0 | call->iov_len | 0-16,24,28-u32max |
| PARAM_VALUE | 2 | size | 0-16,24,28-u32max |
| BUF_SIZE | 0 | call->ret_alist | (-1),56-1080 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 1-24576 |
| CAPPED_DATA | 0 | call->iov_len | 1 |
| CAPPED_DATA | 2 | size | 1 |
| CAPPED_DATA | 2 | size | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 2 | size | $1 |
| FUZZY_MAX | 2 | size | 24 |
| NOSPEC | 0 | call->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count | 0-u32max |
| USER_DATA | 0 | call->count2 | 0-u32max[c] |
| USER_DATA | 0 | call->iov_len | 0-12[c] |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| USER_DATA | 0 | call->ret_alist->max_addrs | 0-64[c] |
| USER_DATA | 0 | call->ret_alist->version | 0-u32max |
| USER_DATA | 2 | size | 0-12[c] |
| NO_OVERFLOW_SIMPLE | 0 | call->buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->request | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len | |
| NO_OVERFLOW_SIMPLE | 1 | buf | |
| UNITS | 2 | size | unit_byte |
fs/afs/vlclient.c afs_extract_to_tmp() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 2914624399687364608,5087260450195410944 |
| PARAM_VALUE | 0 | call->iov_len | 4 |
| PARAM_VALUE | 2 | size | 4 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 4 |
| DATA_SOURCE | 0 | call | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| NO_OVERFLOW_SIMPLE | 0 | call->buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->request | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len | |
| UNITS | 2 | size | unit_byte |
fs/afs/rxrpc.c afs_extract_to_buf() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->iov_len | 0-u32max |
| PARAM_VALUE | 2 | size | 0-u32max |
| BUF_SIZE | 0 | call | 696 |
| BUF_SIZE | 0 | call->buffer | (-1),24,28,56,64,84,104,108,120,144,152,160,192,204,216,248,272,288,376,504,1025,1048 |
| BUF_SIZE | 1 | buf | (-1),24,28,56,64,84,104,108,120,144,152,160,192,204,216,248,272,288,376,504,1025,1048 |
| BUF_SIZE | 1 | buf | (-1),24,28,56,64,84,104,108,120,144,152,160,192,204,216,248,272,288,376,504,1025,1048 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 2 | size | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 2 | size | unit_byte |
| HALF_LOCKED2 | &net->cells_alias_lock | ||
| HALF_LOCKED2 | &pool->lock |
fs/afs/rxrpc.c afs_extract_to_tmp() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->iov_len | 4 |
| PARAM_VALUE | 2 | size | 4 |
| BUF_SIZE | 0 | call | 696 |
| BUF_SIZE | 0 | call->type | 64 |
| BUF_SIZE | 1 | buf | 4 |
| DATA_SOURCE | 0 | call | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 2 | size | unit_byte |
| HALF_LOCKED2 | global &pernet_ops_rwsem |
fs/afs/fsclient.c afs_deliver_fs_fetch_acl() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4081043541591080960 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 0-u32max |
| DATA_SOURCE | 0 | call | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count2 | 0-u32max |
| USER_DATA | 0 | call->iov_len | 0-17179869179,18446744073709486082-u64max |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| USER_DATA | 0 | call->rxcall->rx_pkt_len | 1-65534[c][u] |
| USER_DATA | 0 | call->rxcall->rx_pkt_offset | 0-u16max[c][u] |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len |
fs/afs/fsclient.c afs_extract_to_buf() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->iov_len | 0,4-256 |
| PARAM_VALUE | 2 | size | 0,4-256 |
| BUF_SIZE | 0 | call->iter | (-1),40 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 1-24576 |
| CAPPED_DATA | 0 | call | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 2 | size | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count | 0-255 |
| USER_DATA | 0 | call->count2 | 0-u32max |
| USER_DATA | 0 | call->iov_len | 0,4-256[c] |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| USER_DATA | 2 | size | 0,4-256[c] |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->request | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len |
fs/afs/fsclient.c afs_extract_to_tmp() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->iov_len | 4 |
| PARAM_VALUE | 2 | size | 4 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 4 |
| DATA_SOURCE | 0 | call | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count | 0-u32max |
| USER_DATA | 0 | call->count2 | 1-u32max |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| NO_OVERFLOW_SIMPLE | 0 | call->buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->request | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len | |
| UNITS | 2 | size | unit_byte |
fs/afs/fsclient.c afs_extract_to_tmp64() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->iov_len | 8 |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| PARAM_VALUE | 2 | size | 8 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 8 |
| DATA_SOURCE | 0 | call | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | call->buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->request | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len | |
| UNITS | 2 | size | unit_byte |
fs/afs/cmservice.c afs_extract_to_buf() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 583521209745301504 |
| PARAM_VALUE | 0 | call->iov_len | 0-24576 |
| PARAM_VALUE | 1 | buf | 16,4096-ptr_max |
| PARAM_VALUE | 2 | size | 0-24576 |
| BUF_SIZE | 0 | call->buffer | 0-24576 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 0-24576 |
| BUF_SIZE | 1 | buf | 0-24576 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 2 | size | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count | 0-1024 |
| USER_DATA | 0 | call->iov_len | 0-24576[c] |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| USER_DATA | 2 | size | 0-24576[c] |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->request | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len |
fs/afs/cmservice.c afs_extract_to_tmp() -> afs_extract_begin()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 583521209745301504 |
| PARAM_VALUE | 0 | call->iov_len | 4 |
| PARAM_VALUE | 2 | size | 4 |
| BUF_SIZE | 0 | call->buffer | (-1)-24576 |
| BUF_SIZE | 0 | call->request | (-1)-24576 |
| BUF_SIZE | 0 | call->ret_vldb | (-1),392 |
| BUF_SIZE | 0 | call->type | (-1),64 |
| BUF_SIZE | 1 | buf | 4 |
| DATA_SOURCE | 0 | call | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | call->count | 0-1024 |
| USER_DATA | 0 | call->operation_ID | 204-206,213-214,64204,65538 |
| NO_OVERFLOW_SIMPLE | 0 | call->buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->key->quotalen | |
| NO_OVERFLOW_SIMPLE | 0 | call->request | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | call->rxcall->rx_dec_len | |
| UNITS | 2 | size | unit_byte |