Defined in 1 files as a function:
Referenced in 5 files:
- drivers/infiniband/hw/efa/efa_verbs.c, line 1945
- drivers/infiniband/hw/mlx5/fs.c
- drivers/infiniband/hw/mlx5/main.c, line 2227
- drivers/infiniband/hw/mlx5/qp.c, line 3346
- drivers/infiniband/sw/rdmavt/srq.c, line 155
Smatch caller information:
drivers/infiniband/hw/mlx5/qp.c mlx5_ib_create_qp() -> ib_copy_from_udata()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | dest | 4096-ptr_max |
| PARAM_VALUE | 1 | udata | 4096-ptr_max |
| PARAM_VALUE | 1 | udata->inlen | 48-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 2 | len | 48-56,152 |
| BUF_SIZE | 0 | dest | 56,152 |
| BUF_SIZE | 0 | dest | 56,152 |
| BUF_SIZE | 1 | udata | 0,32 |
| BUF_SIZE | 1 | udata | 0,32 |
| DATA_SOURCE | 0 | dest | r _kzalloc_noprof |
| DATA_SOURCE | 1 | udata | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | udata->inlen | 48-524280,18446744073709551361-u64max |
| USER_DATA | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| UNITS | 2 | len | unit_byte |
drivers/infiniband/hw/efa/efa_verbs.c efa_alloc_ucontext() -> ib_copy_from_udata()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | dest | 8355632961389441024 |
| PARAM_VALUE | 1 | udata | 4096-ptr_max |
| PARAM_VALUE | 1 | udata->inlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 2 | len | 0-8 |
| BUF_SIZE | 0 | dest | 8 |
| CAPPED_DATA | 2 | len | 1 |
| DATA_SOURCE | 1 | udata | $1 |
| USER_DATA | 1 | udata->inlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 2 | len | 0-8[c] |
| UNITS | 2 | len | unit_byte |
| LOCK2 | &file->hw_destroy_rwsem | ||
| LOCK2 | &file->ucontext_lock | ||
| TYPE_LOCK | (struct ib_uverbs_file)->hw_destroy_rwsem | ||
| TYPE_LOCK | (struct ib_uverbs_file)->ucontext_lock |
drivers/infiniband/hw/mlx5/main.c mlx5_ib_alloc_ucontext() -> ib_copy_from_udata()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | dest | 8920535545888612352 |
| PARAM_VALUE | 1 | udata | 4096-ptr_max |
| PARAM_VALUE | 1 | udata->inlen | 8,16-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 2 | len | 8,16-32 |
| BUF_SIZE | 0 | dest | 32 |
| CAPPED_DATA | 2 | len | 1 |
| DATA_SOURCE | 1 | udata | $1 |
| USER_DATA | 1 | udata->inlen | 16-524280,18446744073709551361-u64max |
| USER_DATA | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 2 | len | 16-31[c] |
| UNITS | 2 | len | unit_byte |
| LOCK2 | &file->hw_destroy_rwsem | ||
| LOCK2 | &file->ucontext_lock | ||
| TYPE_LOCK | (struct ib_uverbs_file)->hw_destroy_rwsem | ||
| TYPE_LOCK | (struct ib_uverbs_file)->ucontext_lock |
drivers/infiniband/sw/rdmavt/srq.c rvt_modify_srq() -> ib_copy_from_udata()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | dest | 5673960672405745664 |
| PARAM_VALUE | 1 | udata | 4096-ptr_max |
| PARAM_VALUE | 1 | udata->inlen | 8-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 2 | len | 8 |
| BUF_SIZE | 0 | dest | 8 |
| DATA_SOURCE | 1 | udata | $3 |
| USER_DATA | 1 | udata->inlen | 8-524280,18446744073709551361-u64max |
| USER_DATA | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | &file->device->disassociate_srcu |
drivers/infiniband/hw/mlx5/fs.c mlx5_ib_create_flow() -> ib_copy_from_udata()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | dest | 7987228634444070912 |
| PARAM_VALUE | 1 | udata | 4096-ptr_max |
| PARAM_VALUE | 1 | udata->inlen | 8-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 2 | len | 8 |
| BUF_SIZE | 0 | dest | 8 |
| DATA_SOURCE | 1 | udata | $2 |
| FUZZY_MAX | 1 | udata->inlen | 8 |
| PARAM_COMPARE | 2 | len | <= $1->inlen |
| PARAM_COMPARE | 2 | len | <= $1->inlen |
| USER_DATA | 1 | udata->inlen | 8-524280,18446744073709551361-u64max |
| USER_DATA | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | &file->device->disassociate_srcu |
drivers/infiniband/hw/mlx5/fs.c mlx5_ib_create_flow() -> ib_copy_from_udata()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | dest | 4096-ptr_max |
| PARAM_VALUE | 1 | udata | 4096-ptr_max |
| PARAM_VALUE | 1 | udata->inlen | 8-524280,18446744073709551361-u64max |
| PARAM_VALUE | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| PARAM_VALUE | 2 | len | 8-24 |
| BUF_SIZE | 0 | dest | 8-24 |
| CAPPED_DATA | 1 | udata->inlen | 1 |
| CAPPED_DATA | 2 | len | 1 |
| CAPPED_DATA | 2 | len | 1 |
| DATA_SOURCE | 0 | dest | r _kzalloc_noprof |
| DATA_SOURCE | 1 | udata | $2 |
| FUZZY_MAX | 1 | udata->inlen | 24 |
| FUZZY_MAX | 2 | len | 24 |
| NOSPEC | 1 | udata->inlen | |
| NOSPEC | 2 | len | |
| NOSPEC | 2 | len | |
| HARD_MAX | 2 | len | 24 |
| USER_DATA | 1 | udata->inlen | 8-524280,18446744073709551361-u64max[c] |
| USER_DATA | 1 | udata->outlen | 0-524280,18446744073709551361-u64max |
| USER_DATA | 2 | len | 8-24[c] |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | &file->device->disassociate_srcu |