Documented in 1 files:

Defined in 1 files as a prototype:

Defined in 4 files as a function:

Referenced in 7 files:

Smatch caller information:

mm/mmap.c __do_sys_remap_file_pages() -> do_mmap()

Type Parameter Key Value
PARAM_VALUE 0 file 4096-ptr_max
PARAM_VALUE 1 addr 0
PARAM_VALUE 2 len 0,4096-u64max
PARAM_VALUE 3 prot 0-7
PARAM_VALUE 4 flags 32785,40977,98321,106513
PARAM_VALUE 7 populate 2941038010203279360
PARAM_VALUE 7 *populate 0
PARAM_VALUE 8 uf 0
CAPPED_DATA 0 file 1
CAPPED_DATA 6 pgoff 1
CAPPED_DATA 6 pgoff 1
DATA_SOURCE 3 prot $2 [m]
DATA_SOURCE 4 flags $4 [m]
DATA_SOURCE 6 pgoff $3
BIT_INFO 2 len 0x0,0xfffffffffffff000
BIT_INFO 2 len 0x0,0xfffffffffffff000
BIT_INFO 4 flags 0x8011,0x1a011
BIT_INFO 4 flags 0x8011,0x1a011
NOSPEC 1 addr
NOSPEC 1 addr
NOSPEC 6 pgoff
NOSPEC 6 pgoff
USER_DATA 1 addr 0[c]
USER_DATA 2 len 0,4096-u64max[c]
USER_DATA 3 prot 0-7[c]
USER_DATA 4 flags 32785,40977,98321,106513[c]
USER_DATA 6 pgoff 0-s32max[c]
NO_OVERFLOW_SIMPLE 1 addr
NO_OVERFLOW_SIMPLE 2 len
NO_OVERFLOW_SIMPLE 6 pgoff
UNITS 1 addr unit_byte
UNITS 2 len unit_byte
UNITS 6 pgoff unit_page
LOCK2 &mm->mmap_lock
TYPE_LOCK (struct mm_struct)->mmap_lock

mm/mmap.c __do_sys_remap_file_pages() -> do_mmap()

Type Parameter Key Value
PARAM_VALUE 0 file 4096-ptr_max
PARAM_VALUE 1 addr 0
PARAM_VALUE 2 len 0,4096-u64max
PARAM_VALUE 3 prot 0-7
PARAM_VALUE 4 flags 32785,40977,98321,106513
PARAM_VALUE 7 populate 2941038010203279360
PARAM_VALUE 7 *populate 0
PARAM_VALUE 8 uf 0
CAPPED_DATA 0 file 1
CAPPED_DATA 6 pgoff 1
CAPPED_DATA 6 pgoff 1
DATA_SOURCE 3 prot $2 [m]
DATA_SOURCE 4 flags $4 [m]
DATA_SOURCE 6 pgoff $3
BIT_INFO 2 len 0x0,0xfffffffffffff000
BIT_INFO 2 len 0x0,0xfffffffffffff000
BIT_INFO 4 flags 0x8011,0x1a011
BIT_INFO 4 flags 0x8011,0x1a011
NOSPEC 1 addr
NOSPEC 1 addr
NOSPEC 6 pgoff
NOSPEC 6 pgoff
USER_DATA 1 addr 0[c]
USER_DATA 2 len 0,4096-u64max[c]
USER_DATA 3 prot 0-7[c]
USER_DATA 4 flags 32785,40977,98321,106513[c]
USER_DATA 6 pgoff 0-s32max[c]
NO_OVERFLOW_SIMPLE 1 addr
NO_OVERFLOW_SIMPLE 2 len
NO_OVERFLOW_SIMPLE 6 pgoff
UNITS 1 addr unit_byte
UNITS 2 len unit_byte
UNITS 6 pgoff unit_page
LOCK2 &mm->mmap_lock
TYPE_LOCK (struct mm_struct)->mmap_lock

fs/aio.c aio_setup_ring() -> do_mmap()

Type Parameter Key Value
PARAM_VALUE 0 file 4096-ptr_max
PARAM_VALUE 0 file->__f_path.dentry 4096-ptr_max
PARAM_VALUE 0 file->__f_path.mnt 0
PARAM_VALUE 0 file->f_cred 0,4096-ptr_max
PARAM_VALUE 0 file->f_ep 0
PARAM_VALUE 0 file->f_flags 0-18433,32770
PARAM_VALUE 0 file->f_inode 4096-ptr_max
PARAM_VALUE 0 file->f_iocb_flags 0,2,16,18,131072,131074,131088,131090
PARAM_VALUE 0 file->f_mapping 4096-ptr_max
PARAM_VALUE 0 file->f_mode 33554432,34078720-571342855
PARAM_VALUE 0 file->f_op 4096-ptr_max
PARAM_VALUE 0 file->f_owner 0
PARAM_VALUE 0 file->f_pos 0
PARAM_VALUE 0 file->f_pos_lock.magic 4096-ptr_max
PARAM_VALUE 0 file->f_ra.async_size 0
PARAM_VALUE 0 file->f_ra.mmap_miss 0
PARAM_VALUE 0 file->f_ra.order 0
PARAM_VALUE 0 file->f_ra.prev_pos 0
PARAM_VALUE 0 file->f_ra.ra_pages 0
PARAM_VALUE 0 file->f_ra.size 0
PARAM_VALUE 0 file->f_ra.start 0
PARAM_VALUE 0 file->f_sb_err 0
PARAM_VALUE 0 file->f_wb_err 0
PARAM_VALUE 0 file->private_data 0
PARAM_VALUE 1 addr 0
PARAM_VALUE 2 len 4096-268439552
PARAM_VALUE 3 prot 3
PARAM_VALUE 4 flags 1
PARAM_VALUE 6 pgoff 0
PARAM_VALUE 7 populate 9169022351323340800
PARAM_VALUE 8 uf 0
CAPPED_DATA 2 len 1
CAPPED_DATA 2 len 1
USER_DATA 0 file->f_flags 0-18433,32770
USER_DATA 0 file->f_mode 33554432,34078720-571342855[c]
UNITS 2 len unit_byte
LOCK2 &ctx->ring_lock
LOCK2 &mm->mmap_lock
TYPE_LOCK (struct kioctx)->ring_lock
TYPE_LOCK (struct mm_struct)->mmap_lock

mm/util.c vm_mmap_pgoff() -> do_mmap()

Type Parameter Key Value
PARAM_VALUE 0 file 0,4096-ptr_max
PARAM_VALUE 7 populate 4624168983799451648
PARAM_VALUE 8 uf 8752995455334682624
PARAM_VALUE 8 uf->next 8752995455334682624
PARAM_VALUE 8 uf->prev 8752995455334682624
DATA_SOURCE 0 file $0
DATA_SOURCE 1 addr $1
DATA_SOURCE 2 len $2
DATA_SOURCE 3 prot $3
DATA_SOURCE 4 flags $4
DATA_SOURCE 6 pgoff $5
RX_PATH
USER_DATA 0 file->f_flags 0-18433,32770
USER_DATA 0 file->f_mode 33554432,34078720-571342855[c]
USER_DATA 1 addr 0-u64max
USER_DATA 2 len 0-u64max
USER_DATA 3 prot 0-u64max
USER_DATA 4 flags 0-u64max
USER_DATA 6 pgoff 0-u64max
NO_OVERFLOW_SIMPLE 0 file->f_inode->i_blkbits
NO_OVERFLOW_SIMPLE 0 file->f_inode->i_size
UNITS 1 addr unit_byte
UNITS 2 len unit_byte
UNITS 6 pgoff unit_page
LOCK2 &mm->mmap_lock
TYPE_LOCK (struct mm_struct)->mmap_lock

mm/util.c vm_mmap_shadow_stack() -> do_mmap()

Type Parameter Key Value
PARAM_VALUE 0 file 0
PARAM_VALUE 1 addr 0,4294967296-u64max
PARAM_VALUE 2 len 0,4096-u64max
PARAM_VALUE 3 prot 3
PARAM_VALUE 4 flags 162,1048738
PARAM_VALUE 5 vma_flags s64min-(-4096),4096-s64max
PARAM_VALUE 6 pgoff 0
PARAM_VALUE 7 populate 3244803976599863296
PARAM_VALUE 8 uf 0
DATA_SOURCE 1 addr $0
DATA_SOURCE 2 len $1
DATA_SOURCE 4 flags $2 [m]
DATA_SOURCE 5 vma_flags r __mk_vma_flags
BIT_INFO 4 flags 0xa2,0x1000a2
BIT_INFO 4 flags 0xa2,0x1000a2
RX_PATH
TASK_NOT_RUNNING
USER_DATA 1 addr 0,4294967296-u64max
USER_DATA 2 len 0,4096-u64max[c]
LOCK2 &mm->mmap_lock
TYPE_LOCK (struct mm_struct)->mmap_lock

ipc/shm.c do_shmat() -> do_mmap()

Type Parameter Key Value
PARAM_VALUE 0 file 4096-ptr_max
PARAM_VALUE 0 file->__f_path.dentry 4096-ptr_max
PARAM_VALUE 0 file->__f_path.mnt 0
PARAM_VALUE 0 file->f_cred 0,4096-ptr_max
PARAM_VALUE 0 file->f_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 file->f_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 file->f_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 0 file->f_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 0 file->f_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 file->f_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 file->f_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 file->f_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 file->f_ep 0
PARAM_VALUE 0 file->f_flags 0,2,2048
PARAM_VALUE 0 file->f_inode 4096-ptr_max
PARAM_VALUE 0 file->f_iocb_flags 0,2,16,18,131072,131074,131088,131090
PARAM_VALUE 0 file->f_mode 67633152-604897287
PARAM_VALUE 0 file->f_op 953987234994278400,5415274556022427648
PARAM_VALUE 0 file->f_owner 0
PARAM_VALUE 0 file->f_path.dentry 0,4096-ptr_max
PARAM_VALUE 0 file->f_pos 0
PARAM_VALUE 0 file->f_pos_lock.dep_map->name 0-255
PARAM_VALUE 0 file->f_pos_lock.first_waiter 0
PARAM_VALUE 0 file->f_pos_lock.magic 4096-ptr_max
PARAM_VALUE 0 file->f_pos_lock.osq.tail.counter 0
PARAM_VALUE 0 file->f_pos_lock.owner.counter 0
PARAM_VALUE 0 file->f_ra.async_size 0
PARAM_VALUE 0 file->f_ra.mmap_miss 0
PARAM_VALUE 0 file->f_ra.order 0
PARAM_VALUE 0 file->f_ra.prev_pos 0
PARAM_VALUE 0 file->f_ra.ra_pages 0
PARAM_VALUE 0 file->f_ra.size 0
PARAM_VALUE 0 file->f_ra.start 0
PARAM_VALUE 0 file->f_ref.refcnt.counter 0
PARAM_VALUE 0 file->f_sb_err 0
PARAM_VALUE 0 file->f_wb_err 0
PARAM_VALUE 0 file->private_data 4096-ptr_max
PARAM_VALUE 3 prot 1,3,5,7
PARAM_VALUE 4 flags 1,17
PARAM_VALUE 6 pgoff 0
PARAM_VALUE 7 populate 5410196193761157120
PARAM_VALUE 7 *populate 0
PARAM_VALUE 8 uf 0
BUF_SIZE 0 file->f_op 272
BUF_SIZE 0 file->private_data 32
CAPPED_DATA 0 file->f_cred 1
DATA_SOURCE 0 file r alloc_file_clone
DATA_SOURCE 2 len r i_size_read
FUZZY_MAX 3 prot 3
FUZZY_MAX 4 flags 1
BIT_INFO 0 file->f_op 0x42a0430000000,0xffffffffffffffff
BIT_INFO 2 len 0x0,0x7fffffffffffffff
BIT_INFO 2 len 0x0,0x7fffffffffffffff
BIT_INFO 3 prot 0x1,0x7
BIT_INFO 3 prot 0x1,0x7
BIT_INFO 4 flags 0x1,0x11
BIT_INFO 4 flags 0x1,0x11
USER_DATA 1 addr 0-u64max
NO_OVERFLOW_SIMPLE 0 file->f_inode->i_blkbits
NO_OVERFLOW_SIMPLE 0 file->f_inode->i_size
NO_OVERFLOW_SIMPLE 2 len