Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 3 files:
Smatch caller information:
fs/smb/server/smb2pdu.c smb2_query_dir() -> ksmbd_revert_fsids()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->aux_read_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | work->aux_read_list.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | work->aux_read_list.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4,6,8,12,14,16-416 |
| PARAM_VALUE | 0 | work->iov | 4096-ptr_max |
| PARAM_VALUE | 0 | work->iov_alloc_cnt | (-2147483647)-s32max |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess | 4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->file_table.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->user | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon->share_conf | 4096-ptr_max |
| CAPPED_DATA | 0 | work->sess->user->ngroups | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| NOCHECK_CALL | |||
| USER_PTR | 0 | work->request_buf | |
| HALF_LOCKED2 | &pool->lock |
fs/smb/server/smb2pdu.c smb2_query_dir() -> ksmbd_revert_fsids()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4,6,8,12,14,16-416 |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->send_no_response | 1 |
| PARAM_VALUE | 0 | work->sess | 4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->user | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon->share_conf | 4096-ptr_max |
| CAPPED_DATA | 0 | work->sess->user->ngroups | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| NOCHECK_CALL | |||
| USER_PTR | 0 | work->request_buf | |
| HALF_LOCKED2 | &pool->lock |
fs/smb/server/smb2pdu.c smb2_query_info() -> ksmbd_revert_fsids()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4,6,8,12,14,16-416 |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess | 4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->user | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon->share_conf | 4096-ptr_max |
| CAPPED_DATA | 0 | work->sess->user->ngroups | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | work->iov_alloc_cnt | |
| USER_PTR | 0 | work->request_buf | |
| HALF_LOCKED2 | &pool->lock |
fs/smb/server/vfs.c ksmbd_vfs_link() -> ksmbd_revert_fsids()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4-u32max |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess | 4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->file_table.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->user | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon->share_conf | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon->share_conf->vfs_path->dentry->d_fsdata->d_fsdata | (-4611686018427387904)-4611686018427387903 |
| CAPPED_DATA | 0 | work->sess->user->ngroups | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | work->response_sz | |
| USER_PTR | 0 | work->request_buf | |
| LOCK2 | &pool->lock |
fs/smb/server/vfs.c ksmbd_vfs_remove_file() -> ksmbd_revert_fsids()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4-u32max |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess | 4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->file_table.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->user | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon->share_conf | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon->share_conf->vfs_path->dentry->d_fsdata->d_fsdata | (-4611686018427387904)-4611686018427387903 |
| PARAM_VALUE | 0 | work->tcon->share_conf->vfs_path->dentry->d_inode->i_hash.next->pprev | 1-u64max |
| CAPPED_DATA | 0 | work->sess->user->ngroups | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | work->response_sz | |
| USER_PTR | 0 | work->request_buf | |
| LOCK2 | &pool->lock |
fs/smb/server/vfs.c ksmbd_vfs_rename() -> ksmbd_revert_fsids()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,2-u32max |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess | 4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->file_table.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->user | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon->share_conf | 4096-ptr_max |
| CAPPED_DATA | 0 | work->sess->user->ngroups | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | work->response_sz | |
| USER_PTR | 0 | work->request_buf | |
| LOCK2 | &pool->lock |
fs/smb/server/mgmt/share_config.c share_config_request() -> ksmbd_revert_fsids()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4-u32max |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess | 4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->user | 4096-ptr_max |
| CAPPED_DATA | 0 | work->sess->user->ngroups | 1 |
| DATA_SOURCE | 0 | work | $0 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | work->response_sz | |
| USER_PTR | 0 | work->request_buf | |
| LOCK2 | &pool->lock |