Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
kernel/audit_watch.c audit_remove_parent_watches() -> audit_remove_watch()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | watch | 4096-ptr_max |
| CAPPED_DATA | 0 | &watch->rules | 1 |
| CAPPED_DATA | 0 | &watch->wlist | 1 |
| NOCHECK_CALL | |||
| LOCK2 | global &audit_filter_mutex |
kernel/audit_watch.c audit_remove_watch_rule() -> audit_remove_watch()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | watch | 4096-ptr_max |
| PARAM_VALUE | 0 | watch->parent | 0,4096-ptr_max |
| PARAM_VALUE | 0 | watch->rules.next | 4096-ptr_max |
| CAPPED_DATA | 0 | &watch->rules | 1 |
| PARAM_COMPARE | 0 | &watch->rules | == $0->rules.next |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &audit_filter_mutex | ||
| HALF_LOCKED2 | global &audit_cmd_mutex.lock |
kernel/audit_watch.c audit_update_watch() -> audit_remove_watch()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | watch | 4096-ptr_max |
| PARAM_VALUE | 0 | watch->parent | 0,4096-ptr_max |
| PARAM_VALUE | 0 | watch->path | 4096-ptr_max |
| CAPPED_DATA | 0 | &watch->rules | 1 |
| CAPPED_DATA | 0 | &watch->wlist | 1 |
| NOCHECK_CALL | |||
| LOCK2 | global &audit_filter_mutex |