Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
security/selinux/ss/policydb.c genfs_read() -> context_read_and_validate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | p->genfs | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->neveraudit_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->permissive_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policycaps.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policyvers | 0 |
| PARAM_VALUE | 1 | p->process_class | 1-u16max |
| PARAM_VALUE | 1 | p->role_tr.htable | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->role_tr.size | 1-u32max |
| PARAM_VALUE | 1 | p->te_avtab.htable | 16,4096-ptr_max |
| PARAM_VALUE | 1 | p->te_avtab.mask | 0-u16max |
| PARAM_VALUE | 1 | p->te_avtab.nel | 0 |
| PARAM_VALUE | 1 | p->te_avtab.nslot | 0-65536 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->len | 0-9223372036854775802 |
| BUF_SIZE | 0 | c | 144 |
| BUF_SIZE | 1 | p->genfs | 24,u64max |
| BUF_SIZE | 1 | p->role_allow | (-1),16 |
| BUF_SIZE | 2 | fp | 16 |
| CAPPED_DATA | 1 | p | 1 |
| CAPPED_DATA | 1 | p->process_class | 1 |
| CAPPED_DATA | 1 | p->role_tr.size | 1 |
| CAPPED_DATA | 1 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 1 | p | $0 |
| DATA_SOURCE | 2 | fp | $1 |
| CONSTRAINT | 1 | p | <=3068 |
| MEM_ZERO | 1 | p | |
| MEM_ZERO | 1 | &p->filename_trans_ttypes | |
| MEM_ZERO | 1 | &p->neveraudit_map | |
| MEM_ZERO | 1 | &p->permissive_map | |
| MEM_ZERO | 1 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 1 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 1 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_cond_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c ocontext_read() -> context_read_and_validate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | c | 4096-ptr_max |
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | p->neveraudit_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->ocontexts | 0 |
| PARAM_VALUE | 1 | p->permissive_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policycaps.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policyvers | 0 |
| PARAM_VALUE | 1 | p->process_class | 1-u16max |
| PARAM_VALUE | 1 | p->role_tr.htable | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->role_tr.size | 1-u32max |
| PARAM_VALUE | 1 | p->te_avtab.htable | 16,4096-ptr_max |
| PARAM_VALUE | 1 | p->te_avtab.mask | 0-u16max |
| PARAM_VALUE | 1 | p->te_avtab.nel | 0 |
| PARAM_VALUE | 1 | p->te_avtab.nslot | 0-65536 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551599 |
| BUF_SIZE | 0 | c | 144 |
| BUF_SIZE | 1 | p->role_allow | (-1),16 |
| BUF_SIZE | 2 | fp | 16 |
| CAPPED_DATA | 1 | p | 1 |
| CAPPED_DATA | 1 | p->process_class | 1 |
| CAPPED_DATA | 1 | p->role_tr.size | 1 |
| CAPPED_DATA | 1 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 1 | p | $0 |
| DATA_SOURCE | 2 | fp | $2 |
| CONSTRAINT | 1 | p | <=3068 |
| MEM_ZERO | 1 | p | |
| MEM_ZERO | 1 | &p->filename_trans_ttypes | |
| MEM_ZERO | 1 | &p->neveraudit_map | |
| MEM_ZERO | 1 | &p->permissive_map | |
| MEM_ZERO | 1 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 1 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 1 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_cond_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c ocontext_read() -> context_read_and_validate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | c | 4096-ptr_max |
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | p->neveraudit_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->ocontexts | 0 |
| PARAM_VALUE | 1 | p->permissive_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policycaps.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policyvers | 0 |
| PARAM_VALUE | 1 | p->process_class | 1-u16max |
| PARAM_VALUE | 1 | p->role_tr.htable | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->role_tr.size | 1-u32max |
| PARAM_VALUE | 1 | p->te_avtab.htable | 16,4096-ptr_max |
| PARAM_VALUE | 1 | p->te_avtab.mask | 0-u16max |
| PARAM_VALUE | 1 | p->te_avtab.nel | 0 |
| PARAM_VALUE | 1 | p->te_avtab.nslot | 0-65536 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 1-9223372036854775806 |
| BUF_SIZE | 0 | c | 144 |
| BUF_SIZE | 1 | p->role_allow | (-1),16 |
| BUF_SIZE | 2 | fp | 16 |
| CAPPED_DATA | 1 | p | 1 |
| CAPPED_DATA | 1 | p->process_class | 1 |
| CAPPED_DATA | 1 | p->role_tr.size | 1 |
| CAPPED_DATA | 1 | p->te_avtab.nslot | 1 |
| CAPPED_DATA | 2 | fp->len | 1 |
| DATA_SOURCE | 1 | p | $0 |
| DATA_SOURCE | 2 | fp | $2 |
| CONSTRAINT | 1 | p | <=3068 |
| MEM_ZERO | 1 | p | |
| MEM_ZERO | 1 | &p->filename_trans_ttypes | |
| MEM_ZERO | 1 | &p->neveraudit_map | |
| MEM_ZERO | 1 | &p->permissive_map | |
| MEM_ZERO | 1 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 1 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 1 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_cond_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c ocontext_read() -> context_read_and_validate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | c | 4096-ptr_max |
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | p->neveraudit_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->ocontexts | 0 |
| PARAM_VALUE | 1 | p->permissive_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policycaps.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policyvers | 0 |
| PARAM_VALUE | 1 | p->process_class | 1-u16max |
| PARAM_VALUE | 1 | p->role_tr.htable | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->role_tr.size | 1-u32max |
| PARAM_VALUE | 1 | p->te_avtab.htable | 16,4096-ptr_max |
| PARAM_VALUE | 1 | p->te_avtab.mask | 0-u16max |
| PARAM_VALUE | 1 | p->te_avtab.nel | 0 |
| PARAM_VALUE | 1 | p->te_avtab.nslot | 0-65536 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551603 |
| BUF_SIZE | 1 | p->role_allow | (-1),16 |
| BUF_SIZE | 2 | fp | 16 |
| CAPPED_DATA | 1 | p | 1 |
| CAPPED_DATA | 1 | p->process_class | 1 |
| CAPPED_DATA | 1 | p->role_tr.size | 1 |
| CAPPED_DATA | 1 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 1 | p | $0 |
| DATA_SOURCE | 2 | fp | $2 |
| CONSTRAINT | 1 | p | <=3068 |
| MEM_ZERO | 1 | p | |
| MEM_ZERO | 1 | &p->filename_trans_ttypes | |
| MEM_ZERO | 1 | &p->neveraudit_map | |
| MEM_ZERO | 1 | &p->permissive_map | |
| MEM_ZERO | 1 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 1 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 1 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_cond_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c ocontext_read() -> context_read_and_validate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | c | 4096-ptr_max |
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | p->neveraudit_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->ocontexts | 0 |
| PARAM_VALUE | 1 | p->permissive_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policycaps.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policyvers | 0 |
| PARAM_VALUE | 1 | p->process_class | 1-u16max |
| PARAM_VALUE | 1 | p->role_tr.htable | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->role_tr.size | 1-u32max |
| PARAM_VALUE | 1 | p->te_avtab.htable | 16,4096-ptr_max |
| PARAM_VALUE | 1 | p->te_avtab.mask | 0-u16max |
| PARAM_VALUE | 1 | p->te_avtab.nel | 0 |
| PARAM_VALUE | 1 | p->te_avtab.nslot | 0-65536 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551591 |
| BUF_SIZE | 0 | c | 144 |
| BUF_SIZE | 1 | p->role_allow | (-1),16 |
| BUF_SIZE | 2 | fp | 16 |
| CAPPED_DATA | 1 | p | 1 |
| CAPPED_DATA | 1 | p->process_class | 1 |
| CAPPED_DATA | 1 | p->role_tr.size | 1 |
| CAPPED_DATA | 1 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 1 | p | $0 |
| DATA_SOURCE | 2 | fp | $2 |
| CONSTRAINT | 1 | p | <=3068 |
| MEM_ZERO | 1 | p | |
| MEM_ZERO | 1 | &p->filename_trans_ttypes | |
| MEM_ZERO | 1 | &p->neveraudit_map | |
| MEM_ZERO | 1 | &p->permissive_map | |
| MEM_ZERO | 1 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 1 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 1 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_cond_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c ocontext_read() -> context_read_and_validate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | c | 4096-ptr_max |
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | p->neveraudit_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->ocontexts | 0 |
| PARAM_VALUE | 1 | p->permissive_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policycaps.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policyvers | 0 |
| PARAM_VALUE | 1 | p->process_class | 1-u16max |
| PARAM_VALUE | 1 | p->role_tr.htable | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->role_tr.size | 1-u32max |
| PARAM_VALUE | 1 | p->te_avtab.htable | 16,4096-ptr_max |
| PARAM_VALUE | 1 | p->te_avtab.mask | 0-u16max |
| PARAM_VALUE | 1 | p->te_avtab.nel | 0 |
| PARAM_VALUE | 1 | p->te_avtab.nslot | 0-65536 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551595 |
| BUF_SIZE | 0 | c | 144 |
| BUF_SIZE | 1 | p->role_allow | (-1),16 |
| BUF_SIZE | 2 | fp | 16 |
| CAPPED_DATA | 1 | p | 1 |
| CAPPED_DATA | 1 | p->process_class | 1 |
| CAPPED_DATA | 1 | p->role_tr.size | 1 |
| CAPPED_DATA | 1 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 1 | p | $0 |
| DATA_SOURCE | 2 | fp | $2 |
| CONSTRAINT | 1 | p | <=3068 |
| MEM_ZERO | 1 | p | |
| MEM_ZERO | 1 | &p->filename_trans_ttypes | |
| MEM_ZERO | 1 | &p->neveraudit_map | |
| MEM_ZERO | 1 | &p->permissive_map | |
| MEM_ZERO | 1 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 1 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 1 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_cond_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c ocontext_read() -> context_read_and_validate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | c | 4096-ptr_max |
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | p->neveraudit_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->ocontexts | 0 |
| PARAM_VALUE | 1 | p->permissive_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policycaps.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policyvers | 0 |
| PARAM_VALUE | 1 | p->process_class | 1-u16max |
| PARAM_VALUE | 1 | p->role_tr.htable | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->role_tr.size | 1-u32max |
| PARAM_VALUE | 1 | p->te_avtab.htable | 16,4096-ptr_max |
| PARAM_VALUE | 1 | p->te_avtab.mask | 0-u16max |
| PARAM_VALUE | 1 | p->te_avtab.nel | 0 |
| PARAM_VALUE | 1 | p->te_avtab.nslot | 0-65536 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 1-9223372036854775806 |
| BUF_SIZE | 0 | c | 144 |
| BUF_SIZE | 1 | p->role_allow | (-1),16 |
| BUF_SIZE | 2 | fp | 16 |
| CAPPED_DATA | 1 | p | 1 |
| CAPPED_DATA | 1 | p->process_class | 1 |
| CAPPED_DATA | 1 | p->role_tr.size | 1 |
| CAPPED_DATA | 1 | p->te_avtab.nslot | 1 |
| CAPPED_DATA | 2 | fp->len | 1 |
| DATA_SOURCE | 1 | p | $0 |
| DATA_SOURCE | 2 | fp | $2 |
| CONSTRAINT | 1 | p | <=3068 |
| MEM_ZERO | 1 | p | |
| MEM_ZERO | 1 | &p->filename_trans_ttypes | |
| MEM_ZERO | 1 | &p->neveraudit_map | |
| MEM_ZERO | 1 | &p->permissive_map | |
| MEM_ZERO | 1 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 1 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 1 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_cond_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c ocontext_read() -> context_read_and_validate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | c | 4096-ptr_max |
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | p->neveraudit_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->ocontexts | 0 |
| PARAM_VALUE | 1 | p->permissive_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policycaps.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policyvers | 0 |
| PARAM_VALUE | 1 | p->process_class | 1-u16max |
| PARAM_VALUE | 1 | p->role_tr.htable | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->role_tr.size | 1-u32max |
| PARAM_VALUE | 1 | p->te_avtab.htable | 16,4096-ptr_max |
| PARAM_VALUE | 1 | p->te_avtab.mask | 0-u16max |
| PARAM_VALUE | 1 | p->te_avtab.nel | 0 |
| PARAM_VALUE | 1 | p->te_avtab.nslot | 0-65536 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551571 |
| BUF_SIZE | 0 | c | 144 |
| BUF_SIZE | 1 | p->role_allow | (-1),16 |
| BUF_SIZE | 2 | fp | 16 |
| CAPPED_DATA | 1 | p | 1 |
| CAPPED_DATA | 1 | p->process_class | 1 |
| CAPPED_DATA | 1 | p->role_tr.size | 1 |
| CAPPED_DATA | 1 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 1 | p | $0 |
| DATA_SOURCE | 2 | fp | $2 |
| CONSTRAINT | 1 | p | <=3068 |
| MEM_ZERO | 1 | p | |
| MEM_ZERO | 1 | &p->filename_trans_ttypes | |
| MEM_ZERO | 1 | &p->neveraudit_map | |
| MEM_ZERO | 1 | &p->permissive_map | |
| MEM_ZERO | 1 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 1 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 1 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_cond_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c ocontext_read() -> context_read_and_validate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | c | 4096-ptr_max |
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | p->neveraudit_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->ocontexts | 0 |
| PARAM_VALUE | 1 | p->permissive_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policycaps.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policyvers | 0 |
| PARAM_VALUE | 1 | p->process_class | 1-u16max |
| PARAM_VALUE | 1 | p->role_tr.htable | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->role_tr.size | 1-u32max |
| PARAM_VALUE | 1 | p->te_avtab.htable | 16,4096-ptr_max |
| PARAM_VALUE | 1 | p->te_avtab.mask | 0-u16max |
| PARAM_VALUE | 1 | p->te_avtab.nel | 0 |
| PARAM_VALUE | 1 | p->te_avtab.nslot | 0-65536 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551587 |
| BUF_SIZE | 0 | c | 144 |
| BUF_SIZE | 1 | p->role_allow | (-1),16 |
| BUF_SIZE | 2 | fp | 16 |
| CAPPED_DATA | 1 | p | 1 |
| CAPPED_DATA | 1 | p->process_class | 1 |
| CAPPED_DATA | 1 | p->role_tr.size | 1 |
| CAPPED_DATA | 1 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 1 | p | $0 |
| DATA_SOURCE | 2 | fp | $2 |
| CONSTRAINT | 1 | p | <=3068 |
| MEM_ZERO | 1 | p | |
| MEM_ZERO | 1 | &p->filename_trans_ttypes | |
| MEM_ZERO | 1 | &p->neveraudit_map | |
| MEM_ZERO | 1 | &p->permissive_map | |
| MEM_ZERO | 1 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 1 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 1 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_cond_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c ocontext_read() -> context_read_and_validate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | c | 4096-ptr_max |
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | p->neveraudit_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->ocontexts | 0 |
| PARAM_VALUE | 1 | p->permissive_map.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policycaps.node->startbit | 1-u32max |
| PARAM_VALUE | 1 | p->policyvers | 0 |
| PARAM_VALUE | 1 | p->process_class | 1-u16max |
| PARAM_VALUE | 1 | p->role_tr.htable | 0,4096-ptr_max |
| PARAM_VALUE | 1 | p->role_tr.size | 1-u32max |
| PARAM_VALUE | 1 | p->te_avtab.htable | 16,4096-ptr_max |
| PARAM_VALUE | 1 | p->te_avtab.mask | 0-u16max |
| PARAM_VALUE | 1 | p->te_avtab.nel | 0 |
| PARAM_VALUE | 1 | p->te_avtab.nslot | 0-65536 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 1-9223372036854775806 |
| BUF_SIZE | 0 | c | 144 |
| BUF_SIZE | 1 | p->role_allow | (-1),16 |
| BUF_SIZE | 2 | fp | 16 |
| CAPPED_DATA | 1 | p | 1 |
| CAPPED_DATA | 1 | p->process_class | 1 |
| CAPPED_DATA | 1 | p->role_tr.size | 1 |
| CAPPED_DATA | 1 | p->te_avtab.nslot | 1 |
| CAPPED_DATA | 2 | fp->len | 1 |
| DATA_SOURCE | 1 | p | $0 |
| DATA_SOURCE | 2 | fp | $2 |
| CONSTRAINT | 1 | p | <=3068 |
| MEM_ZERO | 1 | p | |
| MEM_ZERO | 1 | &p->filename_trans_ttypes | |
| MEM_ZERO | 1 | &p->neveraudit_map | |
| MEM_ZERO | 1 | &p->permissive_map | |
| MEM_ZERO | 1 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 1 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 1 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 1 | p->te_cond_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |