Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
kernel/bpf/verifier.c check_arg_const_str() -> check_map_access()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->ops->get_func_proto | 1-u64max |
| PARAM_VALUE | 0 | env->prog | 4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| PARAM_VALUE | 1 | reg->map_ptr | 4096-ptr_max |
| PARAM_VALUE | 1 | reg->map_ptr->frozen | 1 |
| PARAM_VALUE | 1 | reg->map_ptr->map_flags | 128-u32max |
| PARAM_VALUE | 1 | reg->map_ptr->map_type | 0-33,35-u32max |
| PARAM_VALUE | 1 | reg->map_ptr->ops | 4096-ptr_max |
| PARAM_VALUE | 1 | reg->map_ptr->ops->map_direct_value_addr | 8450031166678994944,8623194018121613312,8907966814383271936 |
| PARAM_VALUE | 1 | reg->map_ptr->writecnt.counter | 0 |
| PARAM_VALUE | 1 | reg->type | 4 |
| PARAM_VALUE | 3 | off | 0 |
| PARAM_VALUE | 5 | zero_size_allowed | 0 |
| PARAM_VALUE | 6 | src | 2 |
| CAPPED_DATA | 0 | env->cur_state->acquired_refs | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| DATA_SOURCE | 2 | argno | $2 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt | |
| UNITS | 4 | size | unit_byte |
kernel/bpf/verifier.c check_helper_mem_access() -> check_map_access()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data->btf_var.reg_type | 0,16,529,4112 |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 0,4096-ptr_max |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| PARAM_VALUE | 1 | reg->map_ptr | 4096-ptr_max |
| PARAM_VALUE | 3 | off | 0 |
| PARAM_VALUE | 6 | src | 2 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $1 |
| DATA_SOURCE | 2 | argno | $2 |
| DATA_SOURCE | 4 | size | $3 |
| DATA_SOURCE | 5 | zero_size_allowed | $5 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt | |
| UNITS | 4 | size | unit_byte |
kernel/bpf/verifier.c check_mem_access() -> check_map_access()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data->btf_var.reg_type | 0,16,529,4112 |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 0,4096-ptr_max |
| PARAM_VALUE | 0 | *env->tmp_arg_name | 0-255 |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| PARAM_VALUE | 1 | reg->map_ptr | 4096-ptr_max |
| PARAM_VALUE | 1 | reg->type | 4 |
| PARAM_VALUE | 4 | size | 1-2,4,8 |
| PARAM_VALUE | 5 | zero_size_allowed | 0 |
| PARAM_VALUE | 6 | src | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $2 |
| DATA_SOURCE | 2 | argno | $3 |
| DATA_SOURCE | 3 | off | $4 |
| STR_LEN | 0 | env | (-1),3,11 |
| STR_LEN | 0 | env | (-1),3,11 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt | |
| UNITS | 3 | off | unit_byte |
| UNITS | 4 | size | unit_byte |
kernel/bpf/verifier.c sanitize_check_bounds() -> check_map_access()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->bypass_spec_v1 | 0 |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state->frame | 4096-ptr_max |
| PARAM_VALUE | 0 | *env->tmp_str_buf | 0-255 |
| PARAM_VALUE | 1 | reg | 4096-ptr_max |
| PARAM_VALUE | 1 | reg->type | 4 |
| PARAM_VALUE | 3 | off | 0 |
| PARAM_VALUE | 4 | size | 1 |
| PARAM_VALUE | 5 | zero_size_allowed | 0 |
| PARAM_VALUE | 6 | src | 2 |
| CAPPED_DATA | 1 | reg | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | reg | $2 |