Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/xfrm/xfrm_user.c copy_from_user_tmpl() -> copy_templates()

Type Parameter Key Value
PARAM_VALUE 0 xp 4096-ptr_max
PARAM_VALUE 0 xp->action 0-1
PARAM_VALUE 0 xp->bydst.next 0
PARAM_VALUE 0 xp->bydst.pprev 0
PARAM_VALUE 0 xp->byidx.next 0
PARAM_VALUE 0 xp->byidx.pprev 0
PARAM_VALUE 0 xp->family 2,10
PARAM_VALUE 0 xp->lock.magic 3736018669
PARAM_VALUE 0 xp->lock.owner (-1)
PARAM_VALUE 0 xp->lock.owner_cpu u32max
PARAM_VALUE 0 xp->polq.hold_queue.next 4096-ptr_max
PARAM_VALUE 0 xp->polq.hold_queue.prev 4096-ptr_max
PARAM_VALUE 0 xp->polq.hold_queue.qlen 0
PARAM_VALUE 0 xp->polq.hold_timer.entry.pprev 0
PARAM_VALUE 0 xp->polq.hold_timer.flags 0-4194302
PARAM_VALUE 0 xp->polq.hold_timer.lockdep_map->name 0-255
PARAM_VALUE 0 xp->refcnt.refs.counter 1
PARAM_VALUE 0 xp->selector.family 2,10
PARAM_VALUE 0 xp->selector.prefixlen_d 0-128
PARAM_VALUE 0 xp->selector.prefixlen_s 0-128
PARAM_VALUE 0 xp->timer.entry.pprev 0
PARAM_VALUE 0 xp->timer.flags 0-4194302
PARAM_VALUE 0 xp->timer.lockdep_map->name 0-255
PARAM_VALUE 0 xp->type 0-1
PARAM_VALUE 0 xp->walk.all.next 4096-ptr_max
PARAM_VALUE 0 xp->walk.all.next->next 4096-ptr_max
PARAM_VALUE 0 xp->walk.all.prev 4096-ptr_max
PARAM_VALUE 0 xp->walk.all.prev->next 4096-ptr_max
PARAM_VALUE 0 xp->walk.all.prev->prev 4096-ptr_max
PARAM_VALUE 1 ut 4096-ptr_max
PARAM_VALUE 2 nr 0-6
BUF_SIZE 0 xp 1064
CAPPED_DATA 2 nr 1
DATA_SOURCE 0 xp $0
DATA_SOURCE 1 ut r nla_data
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 xp->action 0-1
USER_DATA 0 xp->family 2,10
USER_DATA 0 xp->flags 0-255
USER_DATA 0 xp->index 0-u32max
USER_DATA 0 xp->lft.hard_add_expires_seconds 0-u64max
USER_DATA 0 xp->lft.hard_byte_limit 0-u64max
USER_DATA 0 xp->lft.hard_packet_limit 0-u64max
USER_DATA 0 xp->lft.hard_use_expires_seconds 0-u64max
USER_DATA 0 xp->lft.soft_add_expires_seconds 0-u64max
USER_DATA 0 xp->lft.soft_byte_limit 0-u64max
USER_DATA 0 xp->lft.soft_packet_limit 0-u64max
USER_DATA 0 xp->lft.soft_use_expires_seconds 0-u64max
USER_DATA 0 xp->priority 0-u32max
USER_DATA 0 xp->selector.dport 0-u16max
USER_DATA 0 xp->selector.dport_mask 0-u16max
USER_DATA 0 xp->selector.family 2,10
USER_DATA 0 xp->selector.ifindex s32min-s32max
USER_DATA 0 xp->selector.prefixlen_d 0-128
USER_DATA 0 xp->selector.prefixlen_s 0-128
USER_DATA 0 xp->selector.proto 0-255
USER_DATA 0 xp->selector.sport 0-u16max
USER_DATA 0 xp->selector.sport_mask 0-u16max
USER_DATA 0 xp->selector.user 0-u32max
USER_DATA 0 xp->type 0-1
USER_DATA 1 ut->aalgos 0-u32max
USER_DATA 1 ut->calgos 0-u32max
USER_DATA 1 ut->ealgos 0-u32max
USER_DATA 1 ut->family 0-u16max
USER_DATA 1 ut->mode 0-255
USER_DATA 1 ut->optional 0-255
USER_DATA 1 ut->reqid 0-u32max
USER_DATA 1 ut->share 0-255
USER_PTR 1 ut
HALF_LOCKED2 &net->xfrm.xfrm_cfg_mutex
HALF_LOCKED2 &pool->lock
HALF_LOCKED2 global &audit_cmd_mutex.lock
HALF_LOCKED2 global &cb_lock
HALF_LOCKED2 global &crypto_cfg_mutex
HALF_LOCKED2 global &hwsim_phys_lock
HALF_LOCKED2 global &rtnl_mutex
HALF_LOCKED2 global &rx_queue_mutex
HALF_LOCKED2 rcu_read

net/xfrm/xfrm_user.c xfrm_compile_policy() -> copy_templates()

Type Parameter Key Value
PARAM_VALUE 0 xp 4096-ptr_max
PARAM_VALUE 0 xp->action 0-1
PARAM_VALUE 0 xp->bydst.next 0
PARAM_VALUE 0 xp->bydst.pprev 0
PARAM_VALUE 0 xp->byidx.next 0
PARAM_VALUE 0 xp->byidx.pprev 0
PARAM_VALUE 0 xp->family 2,10
PARAM_VALUE 0 xp->lock.magic 3736018669
PARAM_VALUE 0 xp->lock.owner (-1)
PARAM_VALUE 0 xp->lock.owner_cpu u32max
PARAM_VALUE 0 xp->polq.hold_queue.next 4096-ptr_max
PARAM_VALUE 0 xp->polq.hold_queue.prev 4096-ptr_max
PARAM_VALUE 0 xp->polq.hold_queue.qlen 0
PARAM_VALUE 0 xp->polq.hold_timer.entry.pprev 0
PARAM_VALUE 0 xp->polq.hold_timer.flags 0-4194302
PARAM_VALUE 0 xp->polq.hold_timer.lockdep_map->name 0-255
PARAM_VALUE 0 xp->refcnt.refs.counter 1
PARAM_VALUE 0 xp->selector.family 2,10
PARAM_VALUE 0 xp->selector.prefixlen_d 0-128
PARAM_VALUE 0 xp->selector.prefixlen_s 0-128
PARAM_VALUE 0 xp->timer.entry.pprev 0
PARAM_VALUE 0 xp->timer.flags 0-4194302
PARAM_VALUE 0 xp->timer.lockdep_map->name 0-255
PARAM_VALUE 0 xp->type 0
PARAM_VALUE 0 xp->walk.all.next 4096-ptr_max
PARAM_VALUE 0 xp->walk.all.next->next 4096-ptr_max
PARAM_VALUE 0 xp->walk.all.prev 4096-ptr_max
PARAM_VALUE 0 xp->walk.all.prev->next 4096-ptr_max
PARAM_VALUE 0 xp->walk.all.prev->prev 4096-ptr_max
PARAM_VALUE 1 ut 4096-ptr_max
PARAM_VALUE 2 nr 0-6
BUF_SIZE 0 xp 1064
CAPPED_DATA 2 nr 1
DATA_SOURCE 0 xp r xfrm_policy_alloc
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 xp->action 0-1[u]
USER_DATA 0 xp->family 2,10[u]
USER_DATA 0 xp->flags 0-255[u]
USER_DATA 0 xp->index 0-u32max[u]
USER_DATA 0 xp->lft.hard_add_expires_seconds 0-u64max[u]
USER_DATA 0 xp->lft.hard_byte_limit 0-u64max[u]
USER_DATA 0 xp->lft.hard_packet_limit 0-u64max[u]
USER_DATA 0 xp->lft.hard_use_expires_seconds 0-u64max[u]
USER_DATA 0 xp->lft.soft_add_expires_seconds 0-u64max[u]
USER_DATA 0 xp->lft.soft_byte_limit 0-u64max[u]
USER_DATA 0 xp->lft.soft_packet_limit 0-u64max[u]
USER_DATA 0 xp->lft.soft_use_expires_seconds 0-u64max[u]
USER_DATA 0 xp->priority 0-u32max[u]
USER_DATA 0 xp->selector.daddr.a4 0-u32max[u]
USER_DATA 0 xp->selector.dport 0-u16max[u]
USER_DATA 0 xp->selector.dport_mask 0-u16max[u]
USER_DATA 0 xp->selector.family 2,10[u]
USER_DATA 0 xp->selector.ifindex s32min-s32max[u]
USER_DATA 0 xp->selector.prefixlen_d 0-128[u]
USER_DATA 0 xp->selector.prefixlen_s 0-128[u]
USER_DATA 0 xp->selector.proto 0-255[u]
USER_DATA 0 xp->selector.saddr.a4 0-u32max[u]
USER_DATA 0 xp->selector.sport 0-u16max[u]
USER_DATA 0 xp->selector.sport_mask 0-u16max[u]
USER_DATA 0 xp->selector.user 0-u32max[u]
USER_DATA 1 ut->aalgos 0-u32max[u]
USER_DATA 1 ut->calgos 0-u32max[u]
USER_DATA 1 ut->ealgos 0-u32max[u]
USER_DATA 1 ut->family 0-u16max[u]
USER_DATA 1 ut->mode 0-255[u]
USER_DATA 1 ut->optional 0-255[u]
USER_DATA 1 ut->reqid 0-u32max[u]
USER_DATA 1 ut->share 0-255[u]
USER_DATA 2 nr 1-6[c]
USER_PTR 1 ut
LOCK2 rcu_read
HALF_LOCKED2 sk