Defined in 1 files as a function:
Referenced in 32 files:
- arch/x86/kernel/cpu/microcode/intel.c
- block/bio-integrity.c, line 276
- drivers/acpi/pfr_update.c, line 497
- drivers/bluetooth/hci_vhci.c, line 510
- drivers/gpu/drm/display/drm_dp_aux_dev.c, line 209
- drivers/misc/vmw_vmci/vmci_queue_pair.c, line 359
- drivers/net/tun.c, line 1808
- drivers/net/tun_vnet.h, line 131
- drivers/rpmsg/rpmsg_char.c, line 273
- drivers/usb/gadget/function/f_fs.c, line 1090
- drivers/usb/gadget/legacy/inode.c, line 684
- drivers/vhost/scsi.c
- drivers/vhost/vhost.c, line 2779
- fs/orangefs/devorangefs-req.c
- fs/proc/proc_sysctl.c, line 589
- fs/smb/client/compress.c, line 331
- fs/smb/smbdirect/connection.c, line 1327
- include/linux/skbuff.h, line 4299
- include/net/bluetooth/bluetooth.h, line 569
- include/net/sock.h, line 2327
- kernel/printk/printk.c, line 767
- net/9p/protocol.c, line 234
- net/atm/common.c, line 622
- net/bluetooth/l2cap_core.c
- net/ipv4/ip_output.c, line 937
- net/mptcp/protocol.c, line 1874
- net/packet/af_packet.c, line 2573
- net/qrtr/tun.c, line 103
- net/rxrpc/sendmsg.c, line 423
- net/sctp/sm_make_chunk.c, line 1557
- net/tipc/msg.c
- security/keys/keyctl.c, line 1218
Smatch caller information:
net/can/raw.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 13-2060 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 13-2060 |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex |
fs/smb/client/compress.c smb_compress() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 1-18446744073709551614 |
| PARAM_VALUE | 1 | bytes | 0-1000000000 |
| PARAM_VALUE | 2 | i | 2266232491311607808 |
| BUF_SIZE | 0 | addr | 0-1000000000 |
| BUF_SIZE | 0 | addr | 0-1000000000 |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | r __kvmalloc_node_noprof |
| DATA_SOURCE | 1 | bytes | r iov_iter_count |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-1000000000[c] |
| UNITS | 1 | bytes | unit_byte |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
| LOCK2 | &server->_srv_mutex | ||
| TYPE_LOCK | (struct TCP_Server_Info)->_srv_mutex |
net/phonet/datagram.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/key/af_key.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex |
net/kcm/kcmsock.c skb_do_copy_data_nocache() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 18379471554275704832,18446612682070032384 |
| PARAM_VALUE | 1 | bytes | 0-32768 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $3 |
| DATA_SOURCE | 1 | bytes | $4 |
| DATA_SOURCE | 2 | i | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-s16max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |
| LOCK2 | &kcm->tx_mutex | ||
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk | ||
| TYPE_LOCK | (struct kcm_sock)->tx_mutex |
net/ipv4/ping.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 1575305641890148352,3001101085870116864 |
| PARAM_VALUE | 1 | bytes | 8 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 8 |
| BUF_SIZE | 0 | addr | 8 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex |
net/qrtr/af_qrtr.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-u16max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-u16max |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex |
net/nfc/rawsock.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex |
drivers/vhost/vhost.c get_indirect() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 7582879247619891200 |
| PARAM_VALUE | 1 | bytes | 16 |
| PARAM_VALUE | 2 | i | 4326463889905065984 |
| BUF_SIZE | 0 | addr | 16 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | &vq->mutex | ||
| TYPE_LOCK | (struct vhost_virtqueue)->mutex |
drivers/usb/gadget/legacy/inode.c ep_write_iter() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 16,4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-4000000 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 0-1000000000 |
| DATA_SOURCE | 0 | addr | r _kmalloc_noprof |
| DATA_SOURCE | 1 | bytes | r iov_iter_count |
| DATA_SOURCE | 2 | i | $1 |
| PARAM_COMPARE | 1 | bytes | == $2->count |
| PARAM_COMPARE | 2 | i->count | == $1 |
| BIT_INFO | 1 | bytes | 0x0,0x3fffffff |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-4000000 |
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
| LOCK2 | &epdata->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct ep_data)->lock |
net/packet/af_packet.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
net/packet/af_packet.c packet_snd_vnet_parse() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 3874929393638883328 |
| PARAM_VALUE | 1 | bytes | 10 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/phonet/pep.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-u16max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-u16max |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/ipv4/raw.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 2,20-u16max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | (-1),1 |
| BUF_SIZE | 0 | addr | (-1),1 |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 21-u16max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex |
net/sctp/sm_make_chunk.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 1-4000000 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| PARAM_COMPARE | 0 | addr | == $1 |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 2-4000000[c] |
| USER_DATA | 2 | i->count | 0-u64max |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/sctp/sm_make_chunk.c sctp_user_addto_chunk() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-1000000000 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | r skb_put |
| DATA_SOURCE | 1 | bytes | $1 |
| DATA_SOURCE | 2 | i | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-1000000000[c] |
| USER_DATA | 2 | i->count | 0-u64max |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/ipv4/tcp.c skb_do_copy_data_nocache() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| DATA_SOURCE | 0 | addr | $3 |
| DATA_SOURCE | 1 | bytes | $4 |
| DATA_SOURCE | 2 | i | $2 |
drivers/bluetooth/hci_vhci.c vhci_get_user() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 2-1028 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 1 | bytes | r iov_iter_count |
| DATA_SOURCE | 2 | i | $1 |
| FUZZY_MAX | 1 | bytes | 1028 |
| PARAM_COMPARE | 1 | bytes | == $2->count |
| PARAM_COMPARE | 2 | i->count | == $1 |
| BIT_INFO | 1 | bytes | 0x0,0x3fffffff |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| HARD_MAX | 1 | bytes | 1028 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 2-1028 |
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| HALF_LOCKED2 | &pool->lock |
drivers/acpi/pfr_update.c pfru_write() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 1-u64max |
| PARAM_VALUE | 1 | bytes | 0-1000000000,2147479552 |
| PARAM_VALUE | 2 | i | 9171719215284158464 |
| CAPPED_DATA | 1 | bytes | 1 |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | r memremap |
| DATA_SOURCE | 1 | bytes | $2 |
| FUZZY_MAX | 1 | bytes | 2147479552 |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| USER_DATA | 1 | bytes | 0-1000000000[c] |
net/llc/af_llc.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex |
net/bluetooth/sco.c bt_skb_sendmsg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| CAPPED_DATA | 1 | bytes | 1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-u64max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| HALF_LOCKED2 | &vq->mutex |
net/smc/smc_tx.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 0 | *addr | 0-255 |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-s32max,18446744071562067969-u64max |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
kernel/printk/printk.c devkmsg_write() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-1024 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 1-1025 |
| DATA_SOURCE | 0 | addr | r _kmalloc_noprof |
| DATA_SOURCE | 1 | bytes | r iov_iter_count |
| DATA_SOURCE | 2 | i | $1 |
| PARAM_COMPARE | 1 | bytes | == $2->count |
| PARAM_COMPARE | 2 | i->count | == $1 |
| BIT_INFO | 1 | bytes | 0x0,0x3fffffff |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| TERMINATED | 0 | addr | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-1024 |
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| ELEM_LAST | 0 | ==addr1 | 8052 |
| HALF_LOCKED2 | &pool->lock |
net/l2tp/l2tp_ip.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/rxrpc/sendmsg.c rxrpc_send_data() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-u16max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| CAPPED_DATA | 1 | bytes | 1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-u16max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &call->user_mutex |
net/qrtr/tun.c qrtr_tun_write_iter() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 1-4000000 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 1-4194304 |
| BUF_SIZE | 0 | addr | 1-4194304 |
| DATA_SOURCE | 0 | addr | r _kzalloc_noprof |
| DATA_SOURCE | 1 | bytes | r iov_iter_count |
| DATA_SOURCE | 2 | i | $1 |
| PARAM_COMPARE | 1 | bytes | == $2->count |
| PARAM_COMPARE | 2 | i->count | == $1 |
| BIT_INFO | 1 | bytes | 0x0,0x3fffffff |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| HARD_MAX | 1 | bytes | 4000000 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-4000000 |
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
| HALF_LOCKED2 | &pool->lock |
block/bio-integrity.c bio_integrity_copy_user() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 16,4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-4000000 |
| PARAM_VALUE | 2 | i | 4032029552465510400 |
| BUF_SIZE | 0 | addr | 0-u32max |
| BUF_SIZE | 0 | addr | 0-u32max |
| DATA_SOURCE | 0 | addr | r _kmalloc_noprof |
| DATA_SOURCE | 1 | bytes | $3 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | bytes | unit_byte |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
net/vmw_vsock/hyperv_transport.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 1-4088 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 4088 |
| BUF_SIZE | 0 | addr | 4088 |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-4087[c] |
| USER_DATA | 2 | i->count | 0-u64max |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/can/bcm.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 16,4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | (-1)-s32max |
| BUF_SIZE | 0 | addr | (-1)-s32max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| NO_OVERFLOW_SIMPLE | 1 | bytes | |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex |
net/bluetooth/hci_sock.c bt_skb_sendmsg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 4-u16max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| CAPPED_DATA | 1 | bytes | 1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 4-u16max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| HALF_LOCKED2 | &vq->mutex |
net/can/isotp.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | (-1),1-s32max |
| BUF_SIZE | 0 | addr | (-1),1-s32max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 2-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex |
drivers/net/tap.c __tun_vnet_hdr_get() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 1091621260333957120 |
| PARAM_VALUE | 1 | bytes | 10 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $4 |
| DATA_SOURCE | 1 | bytes | r tun_vnet_parse_size |
| DATA_SOURCE | 2 | i | $3 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
security/keys/keyctl.c keyctl_instantiate_key_common() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 1-18446744073709551614 |
| PARAM_VALUE | 1 | bytes | 1-1048575 |
| PARAM_VALUE | 2 | i | 798134744675323904,4492510634971021312 |
| BUF_SIZE | 0 | addr | 1-1048575 |
| BUF_SIZE | 0 | addr | 1-1048575 |
| CAPPED_DATA | 1 | bytes | 1 |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | r __kvmalloc_node_noprof |
| DATA_SOURCE | 2 | i | $1 |
| PARAM_COMPARE | 1 | bytes | == $2->count |
| PARAM_COMPARE | 2 | i->count | == $1 |
| BIT_INFO | 1 | bytes | 0x0,0x3fffffff |
| USER_DATA | 1 | bytes | 1-1048575[c] |
| UNITS | 1 | bytes | unit_byte |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
net/mptcp/protocol.c do_copy_data_nocache() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-1000000000 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $3 |
| DATA_SOURCE | 1 | bytes | $1 |
| DATA_SOURCE | 2 | i | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-1000000000[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
drivers/misc/vmw_vmci/vmci_queue_pair.c qp_memcpy_to_queue_iter() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 0 | *addr | 0-255 |
| PARAM_VALUE | 1 | bytes | 1-4096 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 2 | i | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | i->count | 0-u64max |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
crypto/af_alg.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 2-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
fs/smb/smbdirect/connection.c smbdirect_connection_send_iter() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 5861789835040518144 |
| PARAM_VALUE | 1 | bytes | 4 |
| PARAM_VALUE | 2 | i | 8301036586694799360 |
| PARAM_VALUE | 2 | i->data_source | 1 |
| BUF_SIZE | 0 | addr | 4 |
| DATA_SOURCE | 2 | i | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | bytes | unit_byte |
| LOCK2 | &conn->srv_mutex | ||
| TYPE_LOCK | (struct ksmbd_conn)->srv_mutex |
drivers/net/ppp/pppoe.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex |
net/tipc/msg.c tipc_msg_build() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 1 | bytes | $3 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-66000 |
| USER_DATA | 2 | i->count | 0-u64max |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |
| USER_PTR | 0 | addr | |
| HALF_LOCKED2 | sk |
net/tipc/msg.c tipc_msg_build() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-66000[c] |
| USER_DATA | 2 | i->count | 0-u64max |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | sk |
net/bluetooth/iso.c bt_skb_sendmsg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-u16max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| CAPPED_DATA | 1 | bytes | 1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-65534[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| HALF_LOCKED2 | &vq->mutex |
net/nfc/llcp_commands.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 16,4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-4000000 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| PARAM_COMPARE | 0 | addr | == $1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-4000000 |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/l2tp/l2tp_ppp.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex |
net/ieee802154/socket.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-127 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-127[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/mctp/af_mctp.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| CAPABLE | 0 | 13 | |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
drivers/net/tun.c __tun_vnet_hdr_get() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 6669664763164352512 |
| PARAM_VALUE | 1 | bytes | 10,24 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 24 |
| DATA_SOURCE | 0 | addr | $4 |
| DATA_SOURCE | 1 | bytes | r tun_vnet_parse_size |
| DATA_SOURCE | 2 | i | $3 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
drivers/net/tun.c tun_get_user() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 3202414540918218752 |
| PARAM_VALUE | 1 | bytes | 4 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 4 |
| DATA_SOURCE | 2 | i | $3 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
net/ipv6/raw.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 2,4,40-s32max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | (-1),4 |
| BUF_SIZE | 0 | addr | (-1),4 |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 40-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex |
fs/orangefs/devorangefs-req.c orangefs_devreq_write_iter() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 6686771483973357568 |
| PARAM_VALUE | 1 | bytes | 16 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 16 |
| DATA_SOURCE | 2 | i | $1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &pool->lock |
fs/orangefs/devorangefs-req.c orangefs_devreq_write_iter() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 8224 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| PARAM_VALUE | 2 | i->__iov | 4096-u64max |
| PARAM_VALUE | 2 | i->bvec | 4096-u64max |
| PARAM_VALUE | 2 | i->folioq | 1-u64max |
| PARAM_VALUE | 2 | i->kvec | 4096-u64max |
| BUF_SIZE | 0 | addr | 8224 |
| DATA_SOURCE | 2 | i | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &pool->lock |
fs/orangefs/devorangefs-req.c orangefs_devreq_write_iter() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 1-u64max |
| PARAM_VALUE | 1 | bytes | 1-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| PARAM_VALUE | 2 | i->__iov | 4096-u64max |
| PARAM_VALUE | 2 | i->bvec | 4096-u64max |
| PARAM_VALUE | 2 | i->folioq | 1-u64max |
| PARAM_VALUE | 2 | i->kvec | 4096-u64max |
| BUF_SIZE | 0 | addr | 1-u64max |
| DATA_SOURCE | 0 | addr | r vzalloc_noprof |
| DATA_SOURCE | 2 | i | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | bytes | unit_byte |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
| HALF_LOCKED2 | &pool->lock |
net/9p/protocol.c pdu_write_u() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | *addr | 0-255 |
| CAPPED_DATA | 1 | bytes | 1 |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 2 | i | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | bytes | unit_byte |
net/bluetooth/rfcomm/sock.c bt_skb_sendmsg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| CAPPED_DATA | 1 | bytes | 1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
drivers/gpu/drm/display/drm_dp_aux_dev.c auxdev_write_iter() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4135073310540029952 |
| PARAM_VALUE | 1 | bytes | 0-16 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 16 |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 2 | i | $1 |
| PARAM_COMPARE | 1 | bytes | <= $2->count |
| PARAM_COMPARE | 2 | i->count | >= $1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-15[c] |
| USER_DATA | 2 | i->count | 0-18446744073709551614[c] |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &pool->lock |
net/vmw_vsock/vmci_transport.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | *addr | 0-255 |
| PARAM_VALUE | 1 | bytes | 0-69608 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| PARAM_COMPARE | 0 | addr | == $1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-69608 |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
drivers/vhost/scsi.c vhost_scsi_ctl_handle_vq() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 4 |
| PARAM_VALUE | 2 | i | 5828244295369908296 |
| BUF_SIZE | 0 | addr | 4 |
| BUF_SIZE | 0 | addr | 4 |
| MEM_ZERO | 2 | i | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | bytes | unit_byte |
| LOCK2 | &vq->mutex | ||
| TYPE_LOCK | (struct vhost_virtqueue)->mutex |
drivers/vhost/scsi.c vhost_scsi_get_req() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-u64max |
| PARAM_VALUE | 2 | i | 559487409486639176,5828244295369908296 |
| BUF_SIZE | 0 | addr | 4,16,24,51,59 |
| MEM_ZERO | 2 | i | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | bytes | unit_byte |
| LOCK2 | &vq->mutex | ||
| TYPE_LOCK | (struct vhost_virtqueue)->mutex |
drivers/usb/gadget/function/f_fs.c ffs_epfile_io() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 1-u64max |
| PARAM_VALUE | 1 | bytes | 0-1000000000 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | r ffs_alloc_buffer |
| DATA_SOURCE | 1 | bytes | r iov_iter_count |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-1000000000 |
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &epfile->mutex | ||
| HALF_LOCKED2 | &pool->lock |
crypto/algif_rng.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 16,4096-ptr_max |
| PARAM_VALUE | 0 | *addr | 0-255 |
| PARAM_VALUE | 1 | bytes | 0-128 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 0-128 |
| BUF_SIZE | 0 | addr | 0-128 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| PARAM_COMPARE | 0 | addr | == $1 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-128 |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
| LOCK2 | sock->sk | ||
| HALF_LOCKED2 | &vq->mutex |
arch/x86/kernel/cpu/microcode/intel.c parse_microcode_blobs() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 2325744811739717632 |
| PARAM_VALUE | 1 | bytes | 48 |
| PARAM_VALUE | 2 | i | 7941561539563069440 |
| BUF_SIZE | 0 | addr | 48 |
| DATA_SOURCE | 2 | i | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | bytes | unit_byte |
| LOCK2 | &of->mutex | ||
| HALF_LOCKED2 | &of->prealloc_mutex | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct kernfs_open_file)->mutex |
arch/x86/kernel/cpu/microcode/intel.c parse_microcode_blobs() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-1000000000 |
| PARAM_VALUE | 2 | i | 7941561539563069440 |
| PARAM_VALUE | 2 | i->__iov | 4096-u64max |
| PARAM_VALUE | 2 | i->bvec | 4096-u64max |
| PARAM_VALUE | 2 | i->folioq | 1-u64max |
| PARAM_VALUE | 2 | i->kvec | 4096-u64max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 2 | i | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |
| LOCK2 | &of->mutex | ||
| HALF_LOCKED2 | &of->prealloc_mutex | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct kernfs_open_file)->mutex |
drivers/rpmsg/rpmsg_char.c rpmsg_eptdev_write_iter() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 16,4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-4000000 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 0-1000000000 |
| BUF_SIZE | 0 | addr | 0-1000000000 |
| DATA_SOURCE | 0 | addr | r _kzalloc_noprof |
| DATA_SOURCE | 1 | bytes | r iov_iter_count |
| DATA_SOURCE | 2 | i | $1 |
| PARAM_COMPARE | 1 | bytes | == $2->count |
| PARAM_COMPARE | 2 | i->count | == $1 |
| BIT_INFO | 1 | bytes | 0x0,0x3fffffff |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-4000000 |
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| BYTE_COUNT | 0 | ==addr1 | 8050 |
| HALF_LOCKED2 | &pool->lock |
net/can/j1939/socket.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-1785 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-1785[c] |
| USER_DATA | 2 | i->count | 0-u64max |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| LOCK2 | sock->sk | ||
| HALF_LOCKED2 | &vq->mutex |
net/atm/common.c vcc_sendmsg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 1-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| RX_PATH | |||
| USER_DATA | 1 | bytes | 1-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/bluetooth/l2cap_core.c l2cap_skbuff_fromiovec() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 1 | bytes | $3 |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 1 | bytes | 2-s32max[c] |
| HOST_DATA | 2 | i->iov_offset | 1-s32max[c] |
| USER_DATA | 1 | bytes | 1-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &chan->lock |
net/bluetooth/l2cap_core.c l2cap_skbuff_fromiovec() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| PARAM_VALUE | 2 | i->__iov | 4096-u64max |
| PARAM_VALUE | 2 | i->bvec | 4096-u64max |
| PARAM_VALUE | 2 | i->folioq | 1-u64max |
| PARAM_VALUE | 2 | i->kvec | 4096-u64max |
| CAPPED_DATA | 1 | bytes | 1 |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 1 | bytes | 2-2147483645[c] |
| HOST_DATA | 2 | i->iov_offset | 1-u32max[c] |
| USER_DATA | 1 | bytes | 2-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &chan->lock |
net/x25/af_x25.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 0 | *addr | 0-255 |
| PARAM_VALUE | 1 | bytes | 0-u16max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-u16max |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex |
fs/proc/proc_sysctl.c proc_sys_call_handler() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 1-18446744073709551614 |
| PARAM_VALUE | 1 | bytes | 0-4194303 |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| BUF_SIZE | 0 | addr | 1-4194304 |
| DATA_SOURCE | 0 | addr | r __kvmalloc_node_noprof |
| DATA_SOURCE | 1 | bytes | r iov_iter_count |
| DATA_SOURCE | 2 | i | $1 |
| PARAM_COMPARE | 1 | bytes | == $2->count |
| PARAM_COMPARE | 1 | bytes | == $2->count |
| BIT_INFO | 1 | bytes | 0x0,0x3fffffff |
| NOSPEC | 1 | bytes | |
| NOSPEC | 1 | bytes | |
| NOSPEC | 2 | i->count | |
| HARD_MAX | 1 | bytes | 4194303 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 0-4194303 |
| USER_DATA | 2 | i->count | 0-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| ELEM_LAST | 0 | ==addr1 | 8052 |
| HALF_LOCKED2 | &pool->lock |
net/netlink/af_netlink.c memcpy_from_msg() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | addr | 4096-ptr_max |
| PARAM_VALUE | 1 | bytes | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| CAPPED_DATA | 1 | bytes | 1 |
| DATA_SOURCE | 0 | addr | $0 |
| DATA_SOURCE | 1 | bytes | $2 |
| NOSPEC | 2 | i->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 2-s32max[c] |
| USER_DATA | 2 | i->count | 1-18446744073709551614 |
| USER_DATA | 2 | i->iov_offset | 0-u64max[c] |
| UNITS | 1 | bytes | unit_byte |
| HALF_LOCKED2 | &vq->mutex |
net/ipv4/ip_output.c ip_generic_getfrag() -> copy_from_iter_full()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bytes | 1-s32max |
| PARAM_VALUE | 2 | i | 4096-ptr_max |
| DATA_SOURCE | 0 | addr | $1 |
| DATA_SOURCE | 1 | bytes | $3 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | bytes | 1-2147483646[c][u] |
| UNITS | 0 | addr | unit_byte |
| UNITS | 1 | bytes | unit_byte |