Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 16 files:
- arch/s390/kvm/pci.c
- block/ioprio.c
- drivers/iommu/iommufd/ioas.c, line 546
- drivers/iommu/iommufd/pages.c, line 1674
- fs/eventpoll.c, line 1058
- fs/pipe.c
- io_uring/io_uring.c, line 2186
- io_uring/zcrx.c, line 604
- kernel/bpf/syscall.c
- kernel/cred.c, line 58
- kernel/events/internal.h, line 70
- kernel/sys.c
- kernel/user.c, line 197
- net/core/scm.c, line 144
- net/core/skbuff.c, line 1720
- net/xdp/xdp_umem.c
Smatch caller information:
net/core/skbuff.c mm_unaccount_pinned_pages() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &rm->m_rs_lock | ||
| HALF_LOCKED2 | flags |
kernel/bpf/syscall.c __bpf_prog_put_rcu() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu |
kernel/bpf/syscall.c bpf_prog_load() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| NOCHECK_CALL |
drivers/iommu/iommufd/pages.c iopt_release_pages() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
fs/pipe.c alloc_pipe_info() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
fs/pipe.c free_pipe_info() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
io_uring/zcrx.c io_zcrx_ifq_free() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &ctx->uring_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | _T->lock |
io_uring/io_uring.c io_ring_ctx_free() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &pool->lock |
block/ioprio.c __do_sys_ioprio_get() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
block/ioprio.c __do_sys_ioprio_get() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
block/ioprio.c __do_sys_ioprio_set() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| DATA_SOURCE | 0 | up | r find_user |
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
block/ioprio.c __do_sys_ioprio_set() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| DATA_SOURCE | 0 | up | r find_user |
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
net/core/scm.c __scm_destroy() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
fs/eventpoll.c ep_free() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up->epoll_watches.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | up->epoll_watches.lock.owner | (-1) |
| PARAM_VALUE | 0 | up->epoll_watches.lock.owner_cpu | u32max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
kernel/sys.c __do_sys_getpriority() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
kernel/sys.c __do_sys_getpriority() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
kernel/sys.c __do_sys_setpriority() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
kernel/sys.c __do_sys_setpriority() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
kernel/sys.c set_user() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| NOCHECK_CALL |
drivers/iommu/iommufd/ioas.c change_mm() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| NOCHECK_CALL | |||
| LOCK2 | &ictx->ioas_creation_lock | ||
| TYPE_LOCK | (struct iommufd_ctx)->ioas_creation_lock |
kernel/cred.c put_cred_rcu() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu |
net/xdp/xdp_umem.c xdp_umem_account_pages() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| CAPABLE | 0 | 14 | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &xs->mutex | ||
| TYPE_LOCK | (struct xdp_sock)->mutex |
net/xdp/xdp_umem.c xdp_umem_unaccount_pages() -> free_uid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | up | 4096-ptr_max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &xs->mutex |