Defined in 2 files as a function:
Referenced in 1 files:
Smatch caller information:
mm/page_alloc.c __free_one_page() -> bad_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | zone | 4096-ptr_max |
| PARAM_VALUE | 0 | zone->initialized | 1 |
| PARAM_VALUE | 1 | page | 4096-ptr_max |
| PARAM_VALUE | 1 | page->flags.f | 0-18446744073709551614 |
| BUF_SIZE | 0 | zone | (-1)-0,81920 |
| BUF_SIZE | 0 | zone | (-1)-0,81920 |
| DATA_SOURCE | 0 | zone | $2 |
| DATA_SOURCE | 1 | page | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 1 | page | 4096-s32max[c] |
| HOST_DATA | 1 | page->private | 0-9[c] |
| USER_DATA | 1 | page | 4096-s32max[c] |
| USER_DATA | 1 | page->private | 0-9[c] |
| UNITS | 1 | page | unit_page |
| HALF_LOCKED2 | &attr->mutex | ||
| HALF_LOCKED2 | &zone->lock | ||
| HALF_LOCKED2 | global &mf_mutex | ||
| HALF_LOCKED2 | irq | ||
| HALF_LOCKED2 | 0 | &zone->lock | |
| TYPE_LOCK | (struct zone)->lock |
mm/page_alloc.c expand() -> bad_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | zone | 4096-ptr_max |
| PARAM_VALUE | 0 | zone->free_area | 4096-ptr_max |
| PARAM_VALUE | 1 | page | 4096-ptr_max |
| CAPPED_DATA | 0 | zone | 1 |
| DATA_SOURCE | 0 | zone | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | flags | ||
| LOCK2 | 0 | &zone->lock | |
| TYPE_LOCK | (struct zone)->lock |
mm/page_alloc.c rmqueue() -> bad_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | zone | 4096-ptr_max |
| PARAM_VALUE | 0 | zone->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | page | 4096-ptr_max |
| CAPPED_DATA | 0 | zone | 1 |
| DATA_SOURCE | 0 | zone | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | global &oom_lock |