Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 3 files:
Smatch caller information:
fs/binfmt_script.c load_script() -> copy_string_kernel()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bprm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->argc | 0 |
| PARAM_VALUE | 1 | bprm->cred->group_info | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->non_rcu | 0 |
| PARAM_VALUE | 1 | bprm->cred->process_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->request_key_auth | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->security | 0 |
| PARAM_VALUE | 1 | bprm->cred->session_keyring | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->thread_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->ucounts | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->usage.counter | 1 |
| PARAM_VALUE | 1 | bprm->cred->user | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_alias.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_fsdata->d_fsdata | (-4611686018427387904)-4611686018427387903 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->active.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->__i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_atime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_blkbits | 0-255 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_bytes | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_ctime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_dir_seq | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_fsnotify_mask | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_generation | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_linklen | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mode | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mtime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_opflags | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_rdev | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_avg_time | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_history | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_winner | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_write_hint | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_lockref.count | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->data->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->kref.refcount.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->mm->map_count | (-1)-s32max |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.next | 2212933610777083904,2624917664208203776 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->mm->stack_vm | 1 |
| PARAM_VALUE | 1 | bprm->mm->total_vm | 1 |
| PARAM_VALUE | 1 | bprm->vma->anon_name | 0 |
| PARAM_VALUE | 1 | bprm->vma->anon_vma | 0 |
| PARAM_VALUE | 1 | bprm->vma->numab_state | 0 |
| PARAM_VALUE | 1 | bprm->vma->pfnmap_track_ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->swap_readahead_info.counter | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_file | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_flags | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_freeptr.v | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_mm | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_ops | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_pgoff | 0-4503599627370495 |
| PARAM_VALUE | 1 | bprm->vma->vm_policy | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_private_data | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_refcnt.refs.counter | 1 |
| PARAM_VALUE | 1 | bprm->vma->vm_userfaultfd_ctx.ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.ip | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.key | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.lock_type | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.name | 0 |
| PARAM_VALUE | 1 | *bprm->buf | 0-255 |
| BUF_SIZE | 0 | arg | 1-s32max |
| CAPPED_DATA | 1 | *bprm->buf | 1 |
| DATA_SOURCE | 1 | bprm | $0 |
| BIT_INFO | 1 | bprm->interp_flags | 0x0,0xfffffffb |
| MEM_ZERO | 1 | bprm->buf | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->exec | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->p |
fs/binfmt_script.c load_script() -> copy_string_kernel()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | arg | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->argc | 1 |
| PARAM_VALUE | 1 | bprm->cred->group_info | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->non_rcu | 0 |
| PARAM_VALUE | 1 | bprm->cred->process_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->request_key_auth | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->security | 0 |
| PARAM_VALUE | 1 | bprm->cred->session_keyring | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->thread_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->ucounts | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->usage.counter | 1 |
| PARAM_VALUE | 1 | bprm->cred->user | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_alias.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_fsdata->d_fsdata | (-4611686018427387904)-4611686018427387903 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->active.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->__i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_atime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_blkbits | 0-255 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_bytes | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_ctime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_dir_seq | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_fsnotify_mask | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_generation | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_linklen | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mode | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mtime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_opflags | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_rdev | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_avg_time | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_history | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_winner | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_write_hint | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_lockref.count | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->data->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->kref.refcount.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->mm->map_count | (-1)-s32max |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->mm->stack_vm | 1 |
| PARAM_VALUE | 1 | bprm->mm->total_vm | 1 |
| PARAM_VALUE | 1 | bprm->vma->anon_name | 0 |
| PARAM_VALUE | 1 | bprm->vma->anon_vma | 0 |
| PARAM_VALUE | 1 | bprm->vma->numab_state | 0 |
| PARAM_VALUE | 1 | bprm->vma->pfnmap_track_ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->swap_readahead_info.counter | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_file | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_flags | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_freeptr.v | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_mm | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_ops | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_pgoff | 0-4503599627370495 |
| PARAM_VALUE | 1 | bprm->vma->vm_policy | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_private_data | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_refcnt.refs.counter | 1 |
| PARAM_VALUE | 1 | bprm->vma->vm_userfaultfd_ctx.ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.ip | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.key | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.lock_type | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.name | 0 |
| PARAM_VALUE | 1 | *bprm->buf | 0-255 |
| BUF_SIZE | 0 | arg | 254 |
| BUF_SIZE | 0 | arg | 254 |
| CAPPED_DATA | 0 | arg | 1 |
| CAPPED_DATA | 1 | bprm->argmin | 1 |
| CAPPED_DATA | 1 | *bprm->buf | 1 |
| DATA_SOURCE | 1 | bprm | $0 |
| BIT_INFO | 1 | bprm->interp_flags | 0x0,0xfffffffb |
| MEM_ZERO | 1 | bprm->buf | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->exec | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->p | |
| UNITS | 0 | arg | unit_byte |
fs/binfmt_script.c load_script() -> copy_string_kernel()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | arg | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->argc | 1-2 |
| PARAM_VALUE | 1 | bprm->cred->group_info | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->non_rcu | 0 |
| PARAM_VALUE | 1 | bprm->cred->process_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->request_key_auth | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->security | 0 |
| PARAM_VALUE | 1 | bprm->cred->session_keyring | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->thread_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->ucounts | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->usage.counter | 1 |
| PARAM_VALUE | 1 | bprm->cred->user | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_alias.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_fsdata->d_fsdata | (-4611686018427387904)-4611686018427387903 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->active.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->__i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_atime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_blkbits | 0-255 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_bytes | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_ctime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_dir_seq | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_fsnotify_mask | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_generation | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_linklen | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mode | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mtime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_opflags | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_rdev | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_avg_time | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_history | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_winner | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_write_hint | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_lockref.count | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->data->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->kref.refcount.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->mm->map_count | (-1)-s32max |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->mm->stack_vm | 1 |
| PARAM_VALUE | 1 | bprm->mm->total_vm | 1 |
| PARAM_VALUE | 1 | bprm->vma->anon_name | 0 |
| PARAM_VALUE | 1 | bprm->vma->anon_vma | 0 |
| PARAM_VALUE | 1 | bprm->vma->numab_state | 0 |
| PARAM_VALUE | 1 | bprm->vma->pfnmap_track_ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->swap_readahead_info.counter | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_file | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_flags | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_freeptr.v | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_mm | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_ops | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_pgoff | 0-4503599627370495 |
| PARAM_VALUE | 1 | bprm->vma->vm_policy | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_private_data | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_refcnt.refs.counter | 1 |
| PARAM_VALUE | 1 | bprm->vma->vm_userfaultfd_ctx.ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.ip | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.key | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.lock_type | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.name | 0 |
| PARAM_VALUE | 1 | *bprm->buf | 0-255 |
| BUF_SIZE | 0 | arg | 254 |
| BUF_SIZE | 0 | arg | 254 |
| CAPPED_DATA | 0 | arg | 1 |
| CAPPED_DATA | 1 | bprm->argmin | 1 |
| CAPPED_DATA | 1 | *bprm->buf | 1 |
| DATA_SOURCE | 1 | bprm | $0 |
| FUZZY_MAX | 1 | bprm->argc | 2 |
| BIT_INFO | 1 | bprm->interp_flags | 0x0,0xfffffffb |
| HARD_MAX | 1 | bprm->argc | 2 |
| MEM_ZERO | 1 | bprm->buf | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->exec | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->p | |
| UNITS | 0 | arg | unit_byte |
fs/binfmt_misc.c build_interp_argv() -> copy_string_kernel()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bprm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->bpf_flags | 0 |
| PARAM_VALUE | 1 | bprm->bpf_interp | 0 |
| PARAM_VALUE | 1 | bprm->bpf_interp_arg | 0 |
| PARAM_VALUE | 1 | bprm->bpf_interp_file | 0 |
| PARAM_VALUE | 1 | bprm->cred->group_info | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->non_rcu | 0 |
| PARAM_VALUE | 1 | bprm->cred->process_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->request_key_auth | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->security | 0 |
| PARAM_VALUE | 1 | bprm->cred->session_keyring | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->thread_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->ucounts | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->usage.counter | 1 |
| PARAM_VALUE | 1 | bprm->cred->user | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_alias.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_fsdata->d_fsdata | (-4611686018427387904)-4611686018427387903 |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_inode->i_hash.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->active.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->__i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_atime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_blkbits | 0-255 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_bytes | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_ctime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_data.nr_thps.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_dir_seq | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_fsnotify_mask | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_generation | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_linklen | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mode | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mtime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_opflags | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->id | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_rdev | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.timer.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.timer.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.timer.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_avg_time | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_history | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_winner | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_write_hint | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_lockref.count | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->data->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->kref.refcount.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_hash.next->pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.next | 2212933610777083904,2624917664208203776 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | *bprm->bpf_interp_file->f_cred->user->uidhash_node.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | *bprm->buf | 0-255 |
| BUF_SIZE | 0 | arg | 1-s32max |
| BUF_SIZE | 1 | bprm | (-1),1-s32max |
| BUF_SIZE | 1 | bprm | (-1),1-s32max |
| DATA_SOURCE | 1 | bprm | $0 |
| BIT_INFO | 1 | bprm->interp_flags | 0x0,0xfffffffb |
| NO_OVERFLOW_SIMPLE | 1 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->exec | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->file->f_path.dentry->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->file->f_path.moved->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->p |
fs/binfmt_misc.c build_interp_argv() -> copy_string_kernel()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bprm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->bpf_flags | 0 |
| PARAM_VALUE | 1 | bprm->bpf_interp | 0 |
| PARAM_VALUE | 1 | bprm->bpf_interp_file | 0 |
| PARAM_VALUE | 1 | bprm->cred->group_info | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->non_rcu | 0 |
| PARAM_VALUE | 1 | bprm->cred->process_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->request_key_auth | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->security | 0 |
| PARAM_VALUE | 1 | bprm->cred->session_keyring | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->thread_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->ucounts | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->usage.counter | 1 |
| PARAM_VALUE | 1 | bprm->cred->user | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_alias.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_fsdata->d_fsdata | (-4611686018427387904)-4611686018427387903 |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_inode->i_hash.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->active.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->__i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_atime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_blkbits | 0-255 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_bytes | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_ctime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_data.nr_thps.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_dir_seq | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_fsnotify_mask | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_generation | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_linklen | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mode | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mtime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_opflags | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->id | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_rdev | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.timer.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.timer.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.timer.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_avg_time | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_history | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_winner | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_write_hint | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_lockref.count | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->data->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->kref.refcount.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_hash.next->pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | *bprm->bpf_interp_file->f_cred->user->uidhash_node.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | *bprm->buf | 0-255 |
| BUF_SIZE | 1 | bprm | (-1),1-s32max |
| BUF_SIZE | 1 | bprm | (-1),1-s32max |
| CAPPED_DATA | 1 | bprm->argmin | 1 |
| DATA_SOURCE | 1 | bprm | $0 |
| BIT_INFO | 1 | bprm->interp_flags | 0x0,0xfffffffb |
| NO_OVERFLOW_SIMPLE | 1 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->exec | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->file->f_path.dentry->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->file->f_path.moved->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->p |
fs/binfmt_misc.c build_interp_argv() -> copy_string_kernel()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | arg | 0-ptr_max |
| PARAM_VALUE | 1 | bprm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->bpf_flags | 0 |
| PARAM_VALUE | 1 | bprm->bpf_interp | 0 |
| PARAM_VALUE | 1 | bprm->bpf_interp_arg | 0 |
| PARAM_VALUE | 1 | bprm->bpf_interp_file | 0 |
| PARAM_VALUE | 1 | bprm->cred->group_info | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->non_rcu | 0 |
| PARAM_VALUE | 1 | bprm->cred->process_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->request_key_auth | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->security | 0 |
| PARAM_VALUE | 1 | bprm->cred->session_keyring | 0,4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->thread_keyring | 0 |
| PARAM_VALUE | 1 | bprm->cred->ucounts | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->cred->usage.counter | 1 |
| PARAM_VALUE | 1 | bprm->cred->user | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_alias.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_fsdata->d_fsdata | (-4611686018427387904)-4611686018427387903 |
| PARAM_VALUE | 1 | bprm->file->f_path->dentry->d_parent->d_inode->i_hash.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->active.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->__i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_atime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_blkbits | 0-255 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_bytes | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_ctime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_data.nr_thps.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_dir_seq | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_fsnotify_mask | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_generation | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_linklen | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mode | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_mtime_nsec | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_nlink | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_opflags | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->id | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->rcu.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_private->work.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_rdev | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_security->is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.timer.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.timer.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.timer.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb->dwork.work.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_avg_time | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_history | 0-u16max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_wb_frn_winner | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_inode->i_write_hint | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->d_lockref.count | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->data->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->kref.refcount.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.flags | 0-4294967295 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_hard | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_lazy | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_queued | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->management_timer.is_soft | 0-1 |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_fsdata->ref.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | bprm->file->f_path.dentry->d_parent->d_hash.next->pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | *bprm->bpf_interp_file->f_cred->user->uidhash_node.next->pprev | 1-u64max |
| PARAM_VALUE | 1 | *bprm->buf | 0-255 |
| BUF_SIZE | 1 | bprm | (-1),1-s32max |
| BUF_SIZE | 1 | bprm | (-1),1-s32max |
| CAPPED_DATA | 1 | bprm->argmin | 1 |
| DATA_SOURCE | 0 | arg | $1 |
| DATA_SOURCE | 1 | bprm | $0 |
| BIT_INFO | 1 | bprm->interp_flags | 0x0,0xfffffffb |
| NO_OVERFLOW_SIMPLE | 1 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->exec | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->file->f_path.dentry->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->file->f_path.moved->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->p |
fs/exec.c copy_strings_kernel() -> copy_string_kernel()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | bprm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->argc | 1-s32max |
| PARAM_VALUE | 1 | bprm->argmin | 1-9223372036854775806 |
| PARAM_VALUE | 1 | bprm->envc | 0-s32max |
| PARAM_VALUE | 1 | bprm->fdpath | 1-u64max |
| PARAM_VALUE | 1 | bprm->file | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->filename | 1-u64max |
| PARAM_VALUE | 1 | bprm->interp | 1-u64max |
| PARAM_VALUE | 1 | bprm->mm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->mm->map_count | (-1)-s32max |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->mm->stack_vm | 1 |
| PARAM_VALUE | 1 | bprm->mm->total_vm | 1 |
| PARAM_VALUE | 1 | bprm->vma | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->vma->anon_name | 0 |
| PARAM_VALUE | 1 | bprm->vma->anon_vma | 0 |
| PARAM_VALUE | 1 | bprm->vma->numab_state | 0 |
| PARAM_VALUE | 1 | bprm->vma->pfnmap_track_ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->swap_readahead_info.counter | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_file | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_flags | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_freeptr.v | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_ops | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_pgoff | 0-4503599627370495 |
| PARAM_VALUE | 1 | bprm->vma->vm_policy | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_private_data | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_refcnt.refs.counter | 1 |
| PARAM_VALUE | 1 | bprm->vma->vm_userfaultfd_ctx.ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.ip | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.lock_type | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.name | 4861890868653174784,6557282060885467136 |
| BUF_SIZE | 1 | bprm | 472 |
| CAPPED_DATA | 1 | bprm->argmin | 1 |
| CAPPED_DATA | 1 | bprm->fdpath | 1 |
| DATA_SOURCE | 1 | bprm | $2 |
| TERMINATED | 1 | bprm->vma->vmlock_dep_map.name | 1 |
| NO_OVERFLOW_SIMPLE | 1 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->exec | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->p |
fs/exec.c do_execveat_common() -> copy_string_kernel()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | arg | 1-u64max |
| PARAM_VALUE | 1 | bprm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->argc | 0-s32max |
| PARAM_VALUE | 1 | bprm->argmin | 1-9223372036854775806 |
| PARAM_VALUE | 1 | bprm->envc | 0-s32max |
| PARAM_VALUE | 1 | bprm->fdpath | 1-u64max |
| PARAM_VALUE | 1 | bprm->file | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->filename | 1-u64max |
| PARAM_VALUE | 1 | bprm->interp | 1-u64max |
| PARAM_VALUE | 1 | bprm->mm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->mm->map_count | (-1)-s32max |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.next | 2624917664208203776 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.prev | 2624917664208203776 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->mm->stack_vm | 1 |
| PARAM_VALUE | 1 | bprm->mm->total_vm | 1 |
| PARAM_VALUE | 1 | bprm->p | 1-u64max |
| PARAM_VALUE | 1 | bprm->vma | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->vma->anon_name | 0 |
| PARAM_VALUE | 1 | bprm->vma->anon_vma | 0 |
| PARAM_VALUE | 1 | bprm->vma->numab_state | 0 |
| PARAM_VALUE | 1 | bprm->vma->pfnmap_track_ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb.__rb_parent_color | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb.rb_left | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb.rb_right | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb_subtree_last | 0 |
| PARAM_VALUE | 1 | bprm->vma->swap_readahead_info.counter | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_file | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_flags | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_freeptr.v | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_ops | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_pgoff | 0-4503599627370495 |
| PARAM_VALUE | 1 | bprm->vma->vm_policy | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_private_data | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_refcnt.refs.counter | 1 |
| PARAM_VALUE | 1 | bprm->vma->vm_userfaultfd_ctx.ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.ip | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.lock_type | 0 |
| BUF_SIZE | 0 | arg | 1-s32max |
| BUF_SIZE | 1 | bprm | 472 |
| CAPPED_DATA | 1 | bprm->fdpath | 1 |
| CAPPED_DATA | 1 | bprm->p | 1 |
| DATA_SOURCE | 1 | bprm | r class_bprm_constructor |
| USER_DATA | 1 | bprm->is_check | 0-1 |
| NO_OVERFLOW_SIMPLE | 1 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->p |
fs/exec.c do_execveat_common() -> copy_string_kernel()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | arg | 4602998933304729600 |
| PARAM_VALUE | 1 | bprm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->argc | 0 |
| PARAM_VALUE | 1 | bprm->argmin | 1-9223372036854775806 |
| PARAM_VALUE | 1 | bprm->envc | 0-s32max |
| PARAM_VALUE | 1 | bprm->fdpath | 1-u64max |
| PARAM_VALUE | 1 | bprm->file | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->filename | 1-u64max |
| PARAM_VALUE | 1 | bprm->interp | 1-u64max |
| PARAM_VALUE | 1 | bprm->mm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->mm->map_count | (-1)-s32max |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->mm->stack_vm | 1 |
| PARAM_VALUE | 1 | bprm->mm->total_vm | 1 |
| PARAM_VALUE | 1 | bprm->vma | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->vma->anon_name | 0 |
| PARAM_VALUE | 1 | bprm->vma->anon_vma | 0 |
| PARAM_VALUE | 1 | bprm->vma->numab_state | 0 |
| PARAM_VALUE | 1 | bprm->vma->pfnmap_track_ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb.__rb_parent_color | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb.rb_left | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb.rb_right | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb_subtree_last | 0 |
| PARAM_VALUE | 1 | bprm->vma->swap_readahead_info.counter | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_file | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_flags | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_freeptr.v | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_ops | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_pgoff | 0-4503599627370495 |
| PARAM_VALUE | 1 | bprm->vma->vm_policy | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_private_data | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_refcnt.refs.counter | 1 |
| PARAM_VALUE | 1 | bprm->vma->vm_userfaultfd_ctx.ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.ip | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.lock_type | 0 |
| BUF_SIZE | 1 | bprm | 472 |
| CAPPED_DATA | 1 | bprm->argmin | 1 |
| CAPPED_DATA | 1 | bprm->fdpath | 1 |
| DATA_SOURCE | 1 | bprm | r class_bprm_constructor |
| STR_LEN | 0 | arg | 0 |
| TERMINATED | 0 | arg | 1 |
| USER_DATA | 1 | bprm->is_check | 0-1 |
| NO_OVERFLOW_SIMPLE | 1 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->exec | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->p |
fs/exec.c kernel_execve() -> copy_string_kernel()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | arg | 1-u64max |
| PARAM_VALUE | 1 | bprm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->argc | 1-s32max |
| PARAM_VALUE | 1 | bprm->argmin | 1-9223372036854775806 |
| PARAM_VALUE | 1 | bprm->envc | 0-s32max |
| PARAM_VALUE | 1 | bprm->fdpath | 1-u64max |
| PARAM_VALUE | 1 | bprm->file | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->filename | 1-u64max |
| PARAM_VALUE | 1 | bprm->interp | 1-u64max |
| PARAM_VALUE | 1 | bprm->mm | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->mm->map_count | (-1)-s32max |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.next | 2624917664208203776 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->list.prev | 2624917664208203776 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | bprm->mm->mmap_lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | bprm->mm->stack_vm | 1 |
| PARAM_VALUE | 1 | bprm->mm->total_vm | 1 |
| PARAM_VALUE | 1 | bprm->p | 1-u64max |
| PARAM_VALUE | 1 | bprm->vma | 4096-ptr_max |
| PARAM_VALUE | 1 | bprm->vma->anon_name | 0 |
| PARAM_VALUE | 1 | bprm->vma->anon_vma | 0 |
| PARAM_VALUE | 1 | bprm->vma->numab_state | 0 |
| PARAM_VALUE | 1 | bprm->vma->pfnmap_track_ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb.__rb_parent_color | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb.rb_left | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb.rb_right | 0 |
| PARAM_VALUE | 1 | bprm->vma->shared.rb_subtree_last | 0 |
| PARAM_VALUE | 1 | bprm->vma->swap_readahead_info.counter | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_file | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_flags | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_freeptr.v | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_ops | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_pgoff | 0-4503599627370495 |
| PARAM_VALUE | 1 | bprm->vma->vm_policy | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_private_data | 0 |
| PARAM_VALUE | 1 | bprm->vma->vm_refcnt.refs.counter | 1 |
| PARAM_VALUE | 1 | bprm->vma->vm_userfaultfd_ctx.ctx | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.ip | 0 |
| PARAM_VALUE | 1 | bprm->vma->vmlock_dep_map.lock_type | 0 |
| BUF_SIZE | 0 | arg | 1-s32max |
| BUF_SIZE | 1 | bprm | 472 |
| CAPPED_DATA | 1 | bprm->fdpath | 1 |
| CAPPED_DATA | 1 | bprm->p | 1 |
| DATA_SOURCE | 1 | bprm | r class_bprm_constructor |
| NO_OVERFLOW_SIMPLE | 1 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 1 | bprm->p |