Defined in 2 files as a member:
Defined in 1 files as a function:
Referenced in 37 files:
- arch/arc/net/bpf_jit_core.c
- arch/arm/net/bpf_jit_32.c
- arch/arm64/net/bpf_jit_comp.c
- arch/loongarch/net/bpf_jit.c
- arch/mips/net/bpf_jit_comp.c, line 1009
- arch/mips/net/bpf_jit_comp32.c, line 1336
- arch/mips/net/bpf_jit_comp64.c, line 517
- arch/parisc/net/bpf_jit_comp32.c
- arch/parisc/net/bpf_jit_comp64.c
- arch/parisc/net/bpf_jit_core.c
- arch/powerpc/net/bpf_jit_comp.c
- arch/powerpc/net/bpf_jit_comp32.c, line 303
- arch/powerpc/net/bpf_jit_comp64.c, line 699
- arch/riscv/net/bpf_jit_comp32.c, line 831
- arch/riscv/net/bpf_jit_comp64.c
- arch/riscv/net/bpf_jit_core.c
- arch/s390/net/bpf_jit_comp.c
- arch/sparc/net/bpf_jit_comp_32.c
- arch/sparc/net/bpf_jit_comp_64.c
- arch/x86/net/bpf_jit_comp.c
- arch/x86/net/bpf_jit_comp32.c
- include/linux/bpf.h
- include/linux/bpf_lsm.h
- include/linux/filter.h
- include/trace/bpf_probe.h, line 86
- kernel/bpf/bpf_lsm.c
- kernel/bpf/core.c
- kernel/bpf/dispatcher.c, line 101
- kernel/bpf/fixups.c
- kernel/bpf/offload.c, line 416
- kernel/bpf/states.c, line 1347
- kernel/bpf/syscall.c
- kernel/bpf/trampoline.c
- kernel/bpf/verifier.c
- kernel/events/core.c
- kernel/trace/bpf_trace.c
- net/core/filter.c, line 1340
Smatch caller information:
kernel/bpf/states.c bpf_is_state_visited() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state->frame | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| BUF_SIZE | 1 | reg | 800 |
| BUF_SIZE | 1 | reg | 800 |
| CAPPED_DATA | 0 | env->insn_idx | 1 |
| CAPPED_DATA | 0 | env->prev_insn_idx | 1 |
| DATA_SOURCE | 0 | env | $0 |
| BIT_INFO | 0 | env->prev_insn_idx | 0x0,0x7fffffff |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c check_stack_access_within_bounds() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| BUF_SIZE | 1 | reg | (-1),880 |
| BUF_SIZE | 1 | reg | (-1),880 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| STR_LEN | 0 | env | (-1),3,11 |
| STR_LEN | 0 | env | (-1),3,11 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c check_stack_range_initialized() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| STR_LEN | 0 | env | (-1),11 |
| STR_LEN | 0 | env | (-1),11 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c check_stack_read() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| STR_LEN | 0 | env | (-1),3,11 |
| STR_LEN | 0 | env | (-1),3,11 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c check_stack_read_var_off() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| STR_LEN | 0 | env | (-1),11 |
| STR_LEN | 0 | env | (-1),11 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c check_stack_write() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| BUF_SIZE | 1 | reg | (-1),880 |
| BUF_SIZE | 1 | reg | (-1),880 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| STR_LEN | 0 | env | (-1) |
| STR_LEN | 0 | env | (-1) |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c get_constant_map_key() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| CAPPED_DATA | 0 | env->cur_state->acquired_refs | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c is_dynptr_reg_valid_init() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| BIT_INFO | 1 | reg->type | 0x6,0x16 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c is_dynptr_type_expected() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| BIT_INFO | 1 | reg->type | 0x6,0x16 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c is_irq_flag_reg_valid_init() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| CAPPED_DATA | 0 | env->cur_state->acquired_refs | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
kernel/bpf/verifier.c is_irq_flag_reg_valid_uninit() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| CAPPED_DATA | 0 | env->cur_state->acquired_refs | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
kernel/bpf/verifier.c is_iter_reg_valid_init() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| CAPPED_DATA | 0 | env->cur_state->acquired_refs | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
kernel/bpf/verifier.c is_iter_reg_valid_uninit() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| CAPPED_DATA | 0 | env->cur_state->acquired_refs | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
kernel/bpf/verifier.c mark_stack_slot_irq_flag() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $2 |
kernel/bpf/verifier.c mark_stack_slots_dynptr() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c mark_stack_slots_iter() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $2 |
kernel/bpf/verifier.c process_dynptr_func() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c process_iter_arg() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| CAPPED_DATA | 0 | env->cur_state->acquired_refs | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
kernel/bpf/verifier.c stack_slot_obj_get_spi() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| BUF_SIZE | 1 | reg | (-1),880 |
| BUF_SIZE | 1 | reg | (-1),880 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| STR_LEN | 0 | env | 4,6,8 |
| STR_LEN | 0 | env | 4,6,8 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c unmark_stack_slot_irq_flag() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| CAPPED_DATA | 0 | env->cur_state->acquired_refs | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
kernel/bpf/verifier.c unmark_stack_slots_dynptr() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c unmark_stack_slots_iter() -> bpf_func()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| CAPPED_DATA | 0 | env->cur_state->acquired_refs | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |