Open Menu /

Defined in 2 files as a function:

Referenced in 6 files:

Smatch caller information:

drivers/md/dm-ioctl.c copy_params() -> free_params()

Type Parameter Key Value
PARAM_VALUE 0 params 1-18446744073709551614
PARAM_VALUE 0 params->data_size 305-1073741824
PARAM_VALUE 1 num_params 305-1073741824
PARAM_VALUE 2 param_flags 1,16-17
BUF_SIZE 0 params 305-1073741824,u64max
BUF_SIZE 0 params 305-1073741824,u64max
CAPPED_DATA 0 params->data_size 1
CAPPED_DATA 1 num_params 1
FUZZY_MAX 1 num_params 1073741824
CAPABLE 0 21
BIT_INFO 2 param_flags 0x0,0x11
NOCHECK_CALL
UNITS 1 num_params unit_byte
USER_PTR 0 params->version
USER_PTR 0 &params->data

drivers/md/dm-ioctl.c ctl_ioctl() -> free_params()

Type Parameter Key Value
PARAM_VALUE 0 params 4096-ptr_max
PARAM_VALUE 0 params->data_size 305-1073741824
PARAM_VALUE 1 num_params 305-1073741824
PARAM_VALUE 2 param_flags 0-1,16-17
FUZZY_MAX 0 params->data_size 305
CAPABLE 0 21
NOCHECK_CALL
UNITS 1 num_params unit_byte

drivers/tee/tee_core.c tee_ioctl_invoke() -> free_params()

Type Parameter Key Value
PARAM_VALUE 0 params 0,4096-ptr_max
BUF_SIZE 0 params 0,32-137438953440
BUF_SIZE 0 params 0,32-137438953440
CAPPED_DATA 1 num_params 1
NOSPEC 1 num_params
NOCHECK_CALL
USER_DATA 1 num_params 0-u32max[c]
NO_OVERFLOW_SIMPLE 1 num_params
UNITS 1 num_params unit_array_size

drivers/tee/tee_core.c tee_ioctl_object_invoke() -> free_params()

Type Parameter Key Value
PARAM_VALUE 0 params 0,4096-ptr_max
BUF_SIZE 0 params 0,32-137438953440
BUF_SIZE 0 params 0,32-137438953440
CAPPED_DATA 1 num_params 1
NOSPEC 1 num_params
NOCHECK_CALL
USER_DATA 1 num_params 0-u32max[c]
NO_OVERFLOW_SIMPLE 1 num_params
UNITS 1 num_params unit_array_size

drivers/tee/tee_core.c tee_ioctl_open_session() -> free_params()

Type Parameter Key Value
PARAM_VALUE 0 params 0,4096-ptr_max
BUF_SIZE 0 params 0,32-137438953440
BUF_SIZE 0 params 0,32-137438953440
CAPPED_DATA 1 num_params 1
NOSPEC 1 num_params
NOCHECK_CALL
USER_DATA 1 num_params 0-u32max[c]
NO_OVERFLOW_SIMPLE 1 num_params
UNITS 1 num_params unit_array_size

drivers/tee/tee_core.c tee_ioctl_supp_recv() -> free_params()

Type Parameter Key Value
PARAM_VALUE 0 params 16,4096-ptr_max
PARAM_VALUE 1 num_params 1-u32max
BUF_SIZE 0 params 0-137438953440
BUF_SIZE 0 params 0-137438953440
CAPPED_DATA 1 num_params 1
DATA_SOURCE 0 params r _kzalloc_noprof
NOCHECK_CALL
USER_DATA 1 num_params 1-u32max[c]
NO_OVERFLOW_SIMPLE 1 num_params
UNITS 1 num_params unit_array_size
ELEM_COUNT 0 ==params1 8051