Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/xfrm/xfrm_user.c build_acquire() -> copy_to_user_policy()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xdo.dev_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | xp->xdo.dev_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | xp->xdo.dev_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | xp->xfrm_nr | 1-255 |
| PARAM_VALUE | 0 | xp->xfrm_vec | 4096-ptr_max |
| PARAM_VALUE | 1 | p | 4096-ptr_max |
| PARAM_VALUE | 2 | dir | 1 |
| DATA_SOURCE | 0 | xp | $3 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | xp->action | 0-1 |
| USER_DATA | 0 | xp->family | 2,10 |
| USER_DATA | 0 | xp->flags | 0-255 |
| USER_DATA | 0 | xp->index | 0-u32max |
| USER_DATA | 0 | xp->lft.hard_add_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_byte_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_packet_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_use_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_add_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_byte_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_packet_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_use_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->priority | 0-u32max |
| USER_DATA | 0 | xp->selector.dport | 0-u16max |
| USER_DATA | 0 | xp->selector.dport_mask | 0-u16max |
| USER_DATA | 0 | xp->selector.family | 2,10 |
| USER_DATA | 0 | xp->selector.ifindex | s32min-s32max |
| USER_DATA | 0 | xp->selector.prefixlen_d | 0-128 |
| USER_DATA | 0 | xp->selector.prefixlen_s | 0-128 |
| USER_DATA | 0 | xp->selector.proto | 0-255 |
| USER_DATA | 0 | xp->selector.sport | 0-u16max |
| USER_DATA | 0 | xp->selector.sport_mask | 0-u16max |
| USER_DATA | 0 | xp->selector.user | 0-u32max |
| USER_DATA | 0 | xp->type | 0-1 |
| USER_DATA | 0 | xp->xfrm_nr | 1-6[c] |
| LOCK2 | rcu_read |
net/xfrm/xfrm_user.c build_polexpire() -> copy_to_user_policy()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->security | 0,4096-ptr_max |
| PARAM_VALUE | 0 | xp->xdo.dev_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | xp->xdo.dev_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | xp->xdo.dev_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | *xp->xp_net.net->xfrm.policy_count | 0-4294967295 |
| PARAM_VALUE | 2 | dir | 0-7 |
| CAPPED_DATA | 0 | xp->xp_net.net | 1 |
| CAPPED_DATA | 2 | dir | 1 |
| DATA_SOURCE | 0 | xp | $1 |
| DATA_SOURCE | 2 | dir | $2 |
| NOSPEC | 0 | xp->type | |
| NOSPEC | 0 | xp->xfrm_nr | |
| NOSPEC | 2 | dir | |
| NOSPEC | 2 | dir | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | xp->action | 0-1 |
| USER_DATA | 0 | xp->family | 2,10 |
| USER_DATA | 0 | xp->flags | 0-255 |
| USER_DATA | 0 | xp->index | 1-u32max[c] |
| USER_DATA | 0 | xp->lft.hard_add_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_byte_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_packet_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_use_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_add_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_byte_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_packet_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_use_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->priority | 0-u32max |
| USER_DATA | 0 | xp->selector.dport | 0-u16max |
| USER_DATA | 0 | xp->selector.dport_mask | 0-u16max |
| USER_DATA | 0 | xp->selector.family | 2,10 |
| USER_DATA | 0 | xp->selector.ifindex | s32min-s32max |
| USER_DATA | 0 | xp->selector.prefixlen_d | 0-128 |
| USER_DATA | 0 | xp->selector.prefixlen_s | 0-128 |
| USER_DATA | 0 | xp->selector.proto | 0-255 |
| USER_DATA | 0 | xp->selector.sport | 0-u16max |
| USER_DATA | 0 | xp->selector.sport_mask | 0-u16max |
| USER_DATA | 0 | xp->selector.user | 0-u32max |
| USER_DATA | 0 | xp->type | 0-1[c] |
| USER_DATA | 0 | xp->xfrm_nr | 1-6[c] |
| USER_DATA | 2 | dir | 0-2[c] |
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | 0 | &xp->lock |
net/xfrm/xfrm_user.c dump_one_policy() -> copy_to_user_policy()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 4096-ptr_max |
| PARAM_VALUE | 2 | dir | 0-7 |
| CAPPED_DATA | 2 | dir | 1 |
| DATA_SOURCE | 0 | xp | $0 |
| DATA_SOURCE | 1 | p | r nlmsg_data |
| DATA_SOURCE | 2 | dir | $1 |
| NOSPEC | 2 | dir | |
| NOSPEC | 2 | dir | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | p->action | 0-255 |
| USER_DATA | 1 | p->dir | 0-255 |
| USER_DATA | 1 | p->flags | 0-255 |
| USER_DATA | 1 | p->index | 0-u32max |
| USER_DATA | 1 | p->priority | 0-u32max |
| USER_DATA | 1 | p->share | 0-255 |
| USER_DATA | 2 | dir | 0-2[c] |
| USER_PTR | 1 | p | |
| HALF_LOCKED2 | &net->xfrm.xfrm_policy_lock | ||
| HALF_LOCKED2 | bh |
net/xfrm/xfrm_user.c xfrm_notify_policy() -> copy_to_user_policy()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xdo.dev_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | xp->xdo.dev_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | xp->xdo.dev_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | *xp->xp_net.net->xfrm.policy_count | 0-4294967295 |
| PARAM_VALUE | 2 | dir | 0-7 |
| CAPPED_DATA | 0 | xp->xp_net.net | 1 |
| CAPPED_DATA | 2 | dir | 1 |
| DATA_SOURCE | 0 | xp | $0 |
| DATA_SOURCE | 2 | dir | $1 |
| NOSPEC | 0 | xp->type | |
| NOSPEC | 0 | xp->xfrm_nr | |
| NOSPEC | 2 | dir | |
| NOSPEC | 2 | dir | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | xp->action | 0-1 |
| USER_DATA | 0 | xp->family | 2,10 |
| USER_DATA | 0 | xp->flags | 0-255 |
| USER_DATA | 0 | xp->index | 1-u32max[c] |
| USER_DATA | 0 | xp->lft.hard_add_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_byte_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_packet_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_use_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_add_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_byte_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_packet_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_use_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->priority | 0-u32max |
| USER_DATA | 0 | xp->selector.dport | 0-u16max |
| USER_DATA | 0 | xp->selector.dport_mask | 0-u16max |
| USER_DATA | 0 | xp->selector.family | 2,10 |
| USER_DATA | 0 | xp->selector.ifindex | s32min-s32max |
| USER_DATA | 0 | xp->selector.prefixlen_d | 0-128 |
| USER_DATA | 0 | xp->selector.prefixlen_s | 0-128 |
| USER_DATA | 0 | xp->selector.proto | 0-255 |
| USER_DATA | 0 | xp->selector.sport | 0-u16max |
| USER_DATA | 0 | xp->selector.sport_mask | 0-u16max |
| USER_DATA | 0 | xp->selector.user | 0-u32max |
| USER_DATA | 0 | xp->type | 0-1[c] |
| USER_DATA | 0 | xp->xfrm_nr | 1-6[c] |
| USER_DATA | 1 | p->action | 0-255 |
| USER_DATA | 1 | p->curlft.add_time | 0-u64max |
| USER_DATA | 1 | p->curlft.bytes | 0-u64max |
| USER_DATA | 1 | p->curlft.packets | 0-u64max |
| USER_DATA | 1 | p->curlft.use_time | 0-u64max |
| USER_DATA | 1 | p->dir | 0-255 |
| USER_DATA | 1 | p->flags | 0-255 |
| USER_DATA | 1 | p->index | 0-u32max |
| USER_DATA | 1 | p->lft.hard_add_expires_seconds | 0-u64max |
| USER_DATA | 1 | p->lft.hard_byte_limit | 0-u64max |
| USER_DATA | 1 | p->lft.hard_packet_limit | 0-u64max |
| USER_DATA | 1 | p->lft.hard_use_expires_seconds | 0-u64max |
| USER_DATA | 1 | p->lft.soft_add_expires_seconds | 0-u64max |
| USER_DATA | 1 | p->lft.soft_byte_limit | 0-u64max |
| USER_DATA | 1 | p->lft.soft_packet_limit | 0-u64max |
| USER_DATA | 1 | p->lft.soft_use_expires_seconds | 0-u64max |
| USER_DATA | 1 | p->priority | 0-u32max |
| USER_DATA | 1 | p->sel.dport | 0-u16max |
| USER_DATA | 1 | p->sel.dport_mask | 0-u16max |
| USER_DATA | 1 | p->sel.family | 0-u16max |
| USER_DATA | 1 | p->sel.ifindex | s32min-s32max |
| USER_DATA | 1 | p->sel.prefixlen_d | 0-255 |
| USER_DATA | 1 | p->sel.prefixlen_s | 0-255 |
| USER_DATA | 1 | p->sel.proto | 0-255 |
| USER_DATA | 1 | p->sel.sport | 0-u16max |
| USER_DATA | 1 | p->sel.sport_mask | 0-u16max |
| USER_DATA | 1 | p->sel.user | 0-u32max |
| USER_DATA | 1 | p->share | 0-255 |
| USER_DATA | 2 | dir | 0-2[c] |
| USER_PTR | 1 | p | |
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | 0 | &xp->lock |