Defined in 1 files as a function:
Referenced in 5 files:
- kernel/bpf/backtrack.c, line 535
- kernel/bpf/cfg.c, line 856
- kernel/bpf/liveness.c
- kernel/bpf/states.c, line 1362
- kernel/bpf/verifier.c, line 9790
Smatch caller information:
kernel/bpf/cfg.c bpf_compute_scc() -> bpf_calls_callback()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
kernel/bpf/backtrack.c backtrack_insn() -> bpf_calls_callback()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 1 | insn_idx | 0-s32max |
| BUF_SIZE | 0 | env->cur_state | (-1),232 |
| CAPPED_DATA | 1 | insn_idx | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | insn_idx | $2 |
| STR_LEN | 0 | env | (-1),2,11 |
| STR_LEN | 0 | env | (-1),2,11 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt | |
| UNITS | 1 | insn_idx | unit_array_size |
kernel/bpf/liveness.c analyze_subprog() -> bpf_calls_callback()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| NO_OVERFLOW_SIMPLE | 0 | env->log.kbuf | |
| NO_OVERFLOW_SIMPLE | 0 | env->subprog_cnt | |
| NO_OVERFLOW_SIMPLE | 0 | env->tmp_str_buf | |
| UNITS | 1 | insn_idx | unit_array_size |
kernel/bpf/liveness.c bpf_stack_slot_alive() -> bpf_calls_callback()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data | 4096-ptr_max |
| BUF_SIZE | 0 | env->cur_state | 232 |
| CAPPED_DATA | 0 | env->insn_idx | 1 |
| CAPPED_DATA | 0 | env->liveness->live_stack_query.curframe | 1 |
| CAPPED_DATA | 0 | env->prev_insn_idx | 1 |
| DATA_SOURCE | 0 | env | $0 |
| BIT_INFO | 0 | env->prev_insn_idx | 0x0,0x7fffffff |
kernel/bpf/liveness.c compute_subprog_args() -> bpf_calls_callback()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| NO_OVERFLOW_SIMPLE | 0 | env->log.kbuf | |
| NO_OVERFLOW_SIMPLE | 0 | env->subprog_cnt | |
| NO_OVERFLOW_SIMPLE | 0 | env->tmp_str_buf | |
| UNITS | 1 | insn_idx | unit_array_size |
kernel/bpf/states.c bpf_is_state_visited() -> bpf_calls_callback()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data | 4096-ptr_max |
| PARAM_VALUE | 1 | insn_idx | s32min-(-2),0-s32max |
| CAPPED_DATA | 0 | env->insn_idx | 1 |
| CAPPED_DATA | 0 | env->prev_insn_idx | 1 |
| CAPPED_DATA | 1 | insn_idx | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | insn_idx | $1 |
| BIT_INFO | 0 | env->prev_insn_idx | 0x0,0x7fffffff |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt | |
| UNITS | 1 | insn_idx | unit_array_size |
kernel/bpf/verifier.c prepare_func_exit() -> bpf_calls_callback()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |