Defined in 1 files as a function:
Referenced in 3 files:
Smatch caller information:
arch/x86/kvm/regs.c __set_sregs_common() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->sipi_vector | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->arch.pv.pv_unhalted | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->ready | 1 |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | var | 4096-ptr_max |
| PARAM_VALUE | 1 | var->l | 0 |
| PARAM_VALUE | 2 | seg | 1 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.apic_base | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr2 | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr3 | 0-u64max |
| USER_DATA | 0 | *vcpu->arch.pdptrs | 0-u64max |
| USER_DATA | 1 | var->avl | 0-255 |
| USER_DATA | 1 | var->base | 0-u64max |
| USER_DATA | 1 | var->db | 0-255 |
| USER_DATA | 1 | var->dpl | 0-255 |
| USER_DATA | 1 | var->g | 0-255 |
| USER_DATA | 1 | var->l | 0 |
| USER_DATA | 1 | var->limit | 0-u32max |
| USER_DATA | 1 | var->padding | 0-255 |
| USER_DATA | 1 | var->present | 0-255 |
| USER_DATA | 1 | var->s | 0-255 |
| USER_DATA | 1 | var->selector | 0-u16max |
| USER_DATA | 1 | var->type | 0-255 |
| USER_DATA | 1 | var->unusable | 0-255 |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | &vcpu->mutex | ||
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/regs.c __set_sregs_common() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->sipi_vector | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->arch.pv.pv_unhalted | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->ready | 1 |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | var | 4096-ptr_max |
| PARAM_VALUE | 2 | seg | 3 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.apic_base | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr2 | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr3 | 0-u64max |
| USER_DATA | 0 | *vcpu->arch.pdptrs | 0-u64max |
| USER_DATA | 1 | var->avl | 0-255 |
| USER_DATA | 1 | var->base | 0-u64max |
| USER_DATA | 1 | var->db | 0-255 |
| USER_DATA | 1 | var->dpl | 0-255 |
| USER_DATA | 1 | var->g | 0-255 |
| USER_DATA | 1 | var->l | 0-255 |
| USER_DATA | 1 | var->limit | 0-u32max |
| USER_DATA | 1 | var->padding | 0-255 |
| USER_DATA | 1 | var->present | 0-255 |
| USER_DATA | 1 | var->s | 0-255 |
| USER_DATA | 1 | var->selector | 0-u16max |
| USER_DATA | 1 | var->type | 0-255 |
| USER_DATA | 1 | var->unusable | 0-255 |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | &vcpu->mutex | ||
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/regs.c __set_sregs_common() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->sipi_vector | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->arch.pv.pv_unhalted | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->ready | 1 |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | var | 4096-ptr_max |
| PARAM_VALUE | 2 | seg | 0 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.apic_base | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr2 | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr3 | 0-u64max |
| USER_DATA | 0 | *vcpu->arch.pdptrs | 0-u64max |
| USER_DATA | 1 | var->avl | 0-255 |
| USER_DATA | 1 | var->base | 0-u64max |
| USER_DATA | 1 | var->db | 0-255 |
| USER_DATA | 1 | var->dpl | 0-255 |
| USER_DATA | 1 | var->g | 0-255 |
| USER_DATA | 1 | var->l | 0-255 |
| USER_DATA | 1 | var->limit | 0-u32max |
| USER_DATA | 1 | var->padding | 0-255 |
| USER_DATA | 1 | var->present | 0-255 |
| USER_DATA | 1 | var->s | 0-255 |
| USER_DATA | 1 | var->selector | 0-u16max |
| USER_DATA | 1 | var->type | 0-255 |
| USER_DATA | 1 | var->unusable | 0-255 |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | &vcpu->mutex | ||
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/regs.c __set_sregs_common() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->sipi_vector | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->arch.pv.pv_unhalted | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->ready | 1 |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | var | 4096-ptr_max |
| PARAM_VALUE | 2 | seg | 4 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.apic_base | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr2 | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr3 | 0-u64max |
| USER_DATA | 0 | *vcpu->arch.pdptrs | 0-u64max |
| USER_DATA | 1 | var->avl | 0-255 |
| USER_DATA | 1 | var->base | 0-u64max |
| USER_DATA | 1 | var->db | 0-255 |
| USER_DATA | 1 | var->dpl | 0-255 |
| USER_DATA | 1 | var->g | 0-255 |
| USER_DATA | 1 | var->l | 0-255 |
| USER_DATA | 1 | var->limit | 0-u32max |
| USER_DATA | 1 | var->padding | 0-255 |
| USER_DATA | 1 | var->present | 0-255 |
| USER_DATA | 1 | var->s | 0-255 |
| USER_DATA | 1 | var->selector | 0-u16max |
| USER_DATA | 1 | var->type | 0-255 |
| USER_DATA | 1 | var->unusable | 0-255 |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | &vcpu->mutex | ||
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/regs.c __set_sregs_common() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->sipi_vector | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->arch.pv.pv_unhalted | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->ready | 1 |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | var | 4096-ptr_max |
| PARAM_VALUE | 2 | seg | 5 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.apic_base | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr2 | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr3 | 0-u64max |
| USER_DATA | 0 | *vcpu->arch.pdptrs | 0-u64max |
| USER_DATA | 1 | var->avl | 0-255 |
| USER_DATA | 1 | var->base | 0-u64max |
| USER_DATA | 1 | var->db | 0-255 |
| USER_DATA | 1 | var->dpl | 0-255 |
| USER_DATA | 1 | var->g | 0-255 |
| USER_DATA | 1 | var->l | 0-255 |
| USER_DATA | 1 | var->limit | 0-u32max |
| USER_DATA | 1 | var->padding | 0-255 |
| USER_DATA | 1 | var->present | 0-255 |
| USER_DATA | 1 | var->s | 0-255 |
| USER_DATA | 1 | var->selector | 0-u16max |
| USER_DATA | 1 | var->type | 0-255 |
| USER_DATA | 1 | var->unusable | 0-255 |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | &vcpu->mutex | ||
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/regs.c __set_sregs_common() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->sipi_vector | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->arch.pv.pv_unhalted | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->ready | 1 |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | var | 4096-ptr_max |
| PARAM_VALUE | 2 | seg | 2 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.apic_base | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr2 | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr3 | 0-u64max |
| USER_DATA | 0 | *vcpu->arch.pdptrs | 0-u64max |
| USER_DATA | 1 | var->avl | 0-255 |
| USER_DATA | 1 | var->base | 0-u64max |
| USER_DATA | 1 | var->db | 0-255 |
| USER_DATA | 1 | var->dpl | 0-255 |
| USER_DATA | 1 | var->g | 0-255 |
| USER_DATA | 1 | var->l | 0-255 |
| USER_DATA | 1 | var->limit | 0-u32max |
| USER_DATA | 1 | var->padding | 0-255 |
| USER_DATA | 1 | var->present | 0-255 |
| USER_DATA | 1 | var->s | 0-255 |
| USER_DATA | 1 | var->selector | 0-u16max |
| USER_DATA | 1 | var->type | 0-255 |
| USER_DATA | 1 | var->unusable | 0-255 |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | &vcpu->mutex | ||
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/regs.c __set_sregs_common() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->sipi_vector | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->arch.pv.pv_unhalted | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->ready | 1 |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | var | 4096-ptr_max |
| PARAM_VALUE | 2 | seg | 6 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.apic_base | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr2 | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr3 | 0-u64max |
| USER_DATA | 0 | *vcpu->arch.pdptrs | 0-u64max |
| USER_DATA | 1 | var->avl | 0-255 |
| USER_DATA | 1 | var->base | 0-u64max |
| USER_DATA | 1 | var->db | 0-255 |
| USER_DATA | 1 | var->dpl | 0-255 |
| USER_DATA | 1 | var->g | 0-255 |
| USER_DATA | 1 | var->l | 0-255 |
| USER_DATA | 1 | var->limit | 0-u32max |
| USER_DATA | 1 | var->padding | 0-255 |
| USER_DATA | 1 | var->present | 0-255 |
| USER_DATA | 1 | var->s | 0-255 |
| USER_DATA | 1 | var->selector | 0-u16max |
| USER_DATA | 1 | var->type | 0-255 |
| USER_DATA | 1 | var->unusable | 0-255 |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | &vcpu->mutex | ||
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/regs.c __set_sregs_common() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->sipi_vector | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->arch.pv.pv_unhalted | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->ready | 1 |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | var | 4096-ptr_max |
| PARAM_VALUE | 2 | seg | 7 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.apic_base | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr2 | 0-u64max |
| USER_DATA | 0 | vcpu->arch.cr3 | 0-u64max |
| USER_DATA | 0 | *vcpu->arch.pdptrs | 0-u64max |
| USER_DATA | 1 | var->avl | 0-255 |
| USER_DATA | 1 | var->base | 0-u64max |
| USER_DATA | 1 | var->db | 0-255 |
| USER_DATA | 1 | var->dpl | 0-255 |
| USER_DATA | 1 | var->g | 0-255 |
| USER_DATA | 1 | var->l | 0-255 |
| USER_DATA | 1 | var->limit | 0-u32max |
| USER_DATA | 1 | var->padding | 0-255 |
| USER_DATA | 1 | var->present | 0-255 |
| USER_DATA | 1 | var->s | 0-255 |
| USER_DATA | 1 | var->selector | 0-u16max |
| USER_DATA | 1 | var->type | 0-255 |
| USER_DATA | 1 | var->unusable | 0-255 |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | &vcpu->mutex | ||
| HALF_LOCKED2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/x86.c emulator_set_segment() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | var | 6005522603940724736 |
| PARAM_VALUE | 1 | var->avl | 0-1 |
| PARAM_VALUE | 1 | var->db | 0-1 |
| PARAM_VALUE | 1 | var->dpl | 0-3 |
| PARAM_VALUE | 1 | var->g | 0-1 |
| PARAM_VALUE | 1 | var->l | 0-1 |
| PARAM_VALUE | 1 | var->padding | 0 |
| PARAM_VALUE | 1 | var->present | 0-1 |
| PARAM_VALUE | 1 | var->s | 0-1 |
| PARAM_VALUE | 1 | var->type | 0-15 |
| PARAM_VALUE | 1 | var->unusable | 0-1 |
| DATA_SOURCE | 2 | seg | $4 |
| NOCHECK_CALL | |||
| USER_DATA | 1 | var->base | 0-u64max[c] |
| USER_DATA | 1 | var->limit | 0,4095,65536-983040,268439551-4026535935[c] |
arch/x86/kvm/x86.c kvm_vcpu_deliver_sipi_vector() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 1 | var | 8230488350728429568 |
| PARAM_VALUE | 1 | var->base | 0,4096-1044480 |
| PARAM_VALUE | 1 | var->selector | 0,256-65280 |
| PARAM_VALUE | 2 | seg | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/smm.c emulator_leave_smm() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.cr0_guest_owned_bits | 65536-u64max |
| PARAM_VALUE | 0 | vcpu->arch.cr4_guest_owned_bits | 2-u64max |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.pdptrs_from_userspace | 0 |
| PARAM_VALUE | 1 | var | 4832869851551522816 |
| PARAM_VALUE | 1 | var->g | 1 |
| PARAM_VALUE | 1 | var->present | 1 |
| PARAM_VALUE | 1 | var->s | 1 |
| PARAM_VALUE | 1 | var->type | 11 |
| PARAM_VALUE | 2 | seg | 1 |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| MEM_ZERO | 1 | var | |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.pdptrs | 0-u64max |
| USER_PTR | 0 | vcpu->arch.pdptrs |
arch/x86/kvm/smm.c enter_smm() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->____srcu_idx | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apf.halted | 0 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.at_instruction_boundary | 0 |
| PARAM_VALUE | 0 | vcpu->arch.complete_userspace_io | 0 |
| PARAM_VALUE | 0 | vcpu->arch.cr0_guest_owned_bits | 65536-u64max |
| PARAM_VALUE | 0 | vcpu->arch.cr4_guest_owned_bits | 2-u64max |
| PARAM_VALUE | 0 | vcpu->arch.exception.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_from_userspace | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_vmexit.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.guest_fpu.fpstate | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.guest_mmu->pae_root | 0 |
| PARAM_VALUE | 0 | vcpu->arch.gva_walk.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.hflags | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->arch.interrupt.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmio_gva | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mp_state | 0 |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0,2-255 |
| PARAM_VALUE | 0 | vcpu->arch.nmi_injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.rip | 32768 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.page_fault | 4654005377237938176,6604280681433620480,6624689191963803648,6795630133462265856 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.sync_spte | 0,799230455575592960,7721480187534942208 |
| PARAM_VALUE | 0 | vcpu->arch.smi_pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->guest_debug | 2-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.irqchip_mode | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.raw_lock.wlocked | 0 |
| PARAM_VALUE | 0 | vcpu->kvm->online_vcpus.counter | (-2147483647)-s32max |
| PARAM_VALUE | 0 | vcpu->kvm->srcu.srcu_ctrp | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->requests | 0-1 |
| PARAM_VALUE | 0 | vcpu->run | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->exit_reason | 0,10,39 |
| PARAM_VALUE | 0 | vcpu->run->flags | 0 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->request_interrupt_window | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 0 | vcpu->wants_to_run | 1 |
| PARAM_VALUE | 0 | *vcpu->arch.apic->vcpu->kvm->arch.vioapic->irq_eoi | 0-4294967295 |
| PARAM_VALUE | 1 | var | 3693847638117830656 |
| PARAM_VALUE | 1 | var->avl | 0 |
| PARAM_VALUE | 1 | var->db | 0 |
| PARAM_VALUE | 1 | var->dpl | 0 |
| PARAM_VALUE | 1 | var->g | 1 |
| PARAM_VALUE | 1 | var->l | 0 |
| PARAM_VALUE | 1 | var->limit | u32max |
| PARAM_VALUE | 1 | var->padding | 0 |
| PARAM_VALUE | 1 | var->present | 1 |
| PARAM_VALUE | 1 | var->s | 1 |
| PARAM_VALUE | 1 | var->type | 3 |
| PARAM_VALUE | 1 | var->unusable | 0 |
| PARAM_VALUE | 2 | seg | 1 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->kvm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->mm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->srcu.srcu_ctrp | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| FUZZY_MAX | 0 | vcpu->run->exit_reason | 0 |
| BIT_INFO | 0 | vcpu->guest_debug | 0x0,0xffffffffffefffff |
| NOSPEC | 0 | vcpu->arch.mmio_gfn | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14 |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.l1_tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmio_gfn | 0-4503599627370495[c] |
| USER_DATA | 0 | vcpu->arch.nmi_queued.counter | 0 |
| USER_DATA | 0 | vcpu->arch.tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->srcu | |
| LOCK2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->srcu | ||
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/smm.c enter_smm() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->____srcu_idx | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apf.halted | 0 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.at_instruction_boundary | 0 |
| PARAM_VALUE | 0 | vcpu->arch.complete_userspace_io | 0 |
| PARAM_VALUE | 0 | vcpu->arch.cr0_guest_owned_bits | 65536-u64max |
| PARAM_VALUE | 0 | vcpu->arch.cr4_guest_owned_bits | 2-u64max |
| PARAM_VALUE | 0 | vcpu->arch.exception.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_from_userspace | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_vmexit.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.guest_fpu.fpstate | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.guest_mmu->pae_root | 0 |
| PARAM_VALUE | 0 | vcpu->arch.gva_walk.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.hflags | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->arch.interrupt.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmio_gva | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mp_state | 0 |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0,2-255 |
| PARAM_VALUE | 0 | vcpu->arch.nmi_injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.rip | 32768 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.page_fault | 4654005377237938176,6604280681433620480,6624689191963803648,6795630133462265856 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.sync_spte | 0,799230455575592960,7721480187534942208 |
| PARAM_VALUE | 0 | vcpu->arch.smi_pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->guest_debug | 2-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.irqchip_mode | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.raw_lock.wlocked | 0 |
| PARAM_VALUE | 0 | vcpu->kvm->online_vcpus.counter | (-2147483647)-s32max |
| PARAM_VALUE | 0 | vcpu->kvm->srcu.srcu_ctrp | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->requests | 0-1 |
| PARAM_VALUE | 0 | vcpu->run | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->exit_reason | 0,10,39 |
| PARAM_VALUE | 0 | vcpu->run->flags | 0 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->request_interrupt_window | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 0 | vcpu->wants_to_run | 1 |
| PARAM_VALUE | 0 | *vcpu->arch.apic->vcpu->kvm->arch.vioapic->irq_eoi | 0-4294967295 |
| PARAM_VALUE | 1 | var | 5696878488029777920 |
| PARAM_VALUE | 1 | var->avl | 0 |
| PARAM_VALUE | 1 | var->base | 0 |
| PARAM_VALUE | 1 | var->db | 0 |
| PARAM_VALUE | 1 | var->dpl | 0 |
| PARAM_VALUE | 1 | var->g | 1 |
| PARAM_VALUE | 1 | var->l | 0 |
| PARAM_VALUE | 1 | var->limit | u32max |
| PARAM_VALUE | 1 | var->padding | 0 |
| PARAM_VALUE | 1 | var->present | 1 |
| PARAM_VALUE | 1 | var->s | 1 |
| PARAM_VALUE | 1 | var->selector | 0 |
| PARAM_VALUE | 1 | var->type | 3 |
| PARAM_VALUE | 1 | var->unusable | 0 |
| PARAM_VALUE | 2 | seg | 3 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->kvm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->mm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->srcu.srcu_ctrp | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| FUZZY_MAX | 0 | vcpu->run->exit_reason | 0 |
| BIT_INFO | 0 | vcpu->guest_debug | 0x0,0xffffffffffefffff |
| NOSPEC | 0 | vcpu->arch.mmio_gfn | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14 |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.l1_tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmio_gfn | 0-4503599627370495[c] |
| USER_DATA | 0 | vcpu->arch.nmi_queued.counter | 0 |
| USER_DATA | 0 | vcpu->arch.tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->srcu | |
| LOCK2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->srcu | ||
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/smm.c enter_smm() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->____srcu_idx | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apf.halted | 0 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.at_instruction_boundary | 0 |
| PARAM_VALUE | 0 | vcpu->arch.complete_userspace_io | 0 |
| PARAM_VALUE | 0 | vcpu->arch.cr0_guest_owned_bits | 65536-u64max |
| PARAM_VALUE | 0 | vcpu->arch.cr4_guest_owned_bits | 2-u64max |
| PARAM_VALUE | 0 | vcpu->arch.exception.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_from_userspace | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_vmexit.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.guest_fpu.fpstate | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.guest_mmu->pae_root | 0 |
| PARAM_VALUE | 0 | vcpu->arch.gva_walk.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.hflags | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->arch.interrupt.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmio_gva | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mp_state | 0 |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0,2-255 |
| PARAM_VALUE | 0 | vcpu->arch.nmi_injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.rip | 32768 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.page_fault | 4654005377237938176,6604280681433620480,6624689191963803648,6795630133462265856 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.sync_spte | 0,799230455575592960,7721480187534942208 |
| PARAM_VALUE | 0 | vcpu->arch.smi_pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->guest_debug | 2-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.irqchip_mode | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.raw_lock.wlocked | 0 |
| PARAM_VALUE | 0 | vcpu->kvm->online_vcpus.counter | (-2147483647)-s32max |
| PARAM_VALUE | 0 | vcpu->kvm->srcu.srcu_ctrp | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->requests | 0-1 |
| PARAM_VALUE | 0 | vcpu->run | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->exit_reason | 0,10,39 |
| PARAM_VALUE | 0 | vcpu->run->flags | 0 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->request_interrupt_window | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 0 | vcpu->wants_to_run | 1 |
| PARAM_VALUE | 0 | *vcpu->arch.apic->vcpu->kvm->arch.vioapic->irq_eoi | 0-4294967295 |
| PARAM_VALUE | 1 | var | 5696878488029777920 |
| PARAM_VALUE | 1 | var->avl | 0 |
| PARAM_VALUE | 1 | var->base | 0 |
| PARAM_VALUE | 1 | var->db | 0 |
| PARAM_VALUE | 1 | var->dpl | 0 |
| PARAM_VALUE | 1 | var->g | 1 |
| PARAM_VALUE | 1 | var->l | 0 |
| PARAM_VALUE | 1 | var->limit | u32max |
| PARAM_VALUE | 1 | var->padding | 0 |
| PARAM_VALUE | 1 | var->present | 1 |
| PARAM_VALUE | 1 | var->s | 1 |
| PARAM_VALUE | 1 | var->selector | 0 |
| PARAM_VALUE | 1 | var->type | 3 |
| PARAM_VALUE | 1 | var->unusable | 0 |
| PARAM_VALUE | 2 | seg | 0 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->kvm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->mm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->srcu.srcu_ctrp | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| FUZZY_MAX | 0 | vcpu->run->exit_reason | 0 |
| BIT_INFO | 0 | vcpu->guest_debug | 0x0,0xffffffffffefffff |
| NOSPEC | 0 | vcpu->arch.mmio_gfn | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14 |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.l1_tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmio_gfn | 0-4503599627370495[c] |
| USER_DATA | 0 | vcpu->arch.nmi_queued.counter | 0 |
| USER_DATA | 0 | vcpu->arch.tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->srcu | |
| LOCK2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->srcu | ||
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/smm.c enter_smm() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->____srcu_idx | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apf.halted | 0 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.at_instruction_boundary | 0 |
| PARAM_VALUE | 0 | vcpu->arch.complete_userspace_io | 0 |
| PARAM_VALUE | 0 | vcpu->arch.cr0_guest_owned_bits | 65536-u64max |
| PARAM_VALUE | 0 | vcpu->arch.cr4_guest_owned_bits | 2-u64max |
| PARAM_VALUE | 0 | vcpu->arch.exception.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_from_userspace | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_vmexit.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.guest_fpu.fpstate | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.guest_mmu->pae_root | 0 |
| PARAM_VALUE | 0 | vcpu->arch.gva_walk.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.hflags | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->arch.interrupt.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmio_gva | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mp_state | 0 |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0,2-255 |
| PARAM_VALUE | 0 | vcpu->arch.nmi_injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.rip | 32768 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.page_fault | 4654005377237938176,6604280681433620480,6624689191963803648,6795630133462265856 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.sync_spte | 0,799230455575592960,7721480187534942208 |
| PARAM_VALUE | 0 | vcpu->arch.smi_pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->guest_debug | 2-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.irqchip_mode | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.raw_lock.wlocked | 0 |
| PARAM_VALUE | 0 | vcpu->kvm->online_vcpus.counter | (-2147483647)-s32max |
| PARAM_VALUE | 0 | vcpu->kvm->srcu.srcu_ctrp | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->requests | 0-1 |
| PARAM_VALUE | 0 | vcpu->run | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->exit_reason | 0,10,39 |
| PARAM_VALUE | 0 | vcpu->run->flags | 0 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->request_interrupt_window | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 0 | vcpu->wants_to_run | 1 |
| PARAM_VALUE | 0 | *vcpu->arch.apic->vcpu->kvm->arch.vioapic->irq_eoi | 0-4294967295 |
| PARAM_VALUE | 1 | var | 5696878488029777920 |
| PARAM_VALUE | 1 | var->avl | 0 |
| PARAM_VALUE | 1 | var->base | 0 |
| PARAM_VALUE | 1 | var->db | 0 |
| PARAM_VALUE | 1 | var->dpl | 0 |
| PARAM_VALUE | 1 | var->g | 1 |
| PARAM_VALUE | 1 | var->l | 0 |
| PARAM_VALUE | 1 | var->limit | u32max |
| PARAM_VALUE | 1 | var->padding | 0 |
| PARAM_VALUE | 1 | var->present | 1 |
| PARAM_VALUE | 1 | var->s | 1 |
| PARAM_VALUE | 1 | var->selector | 0 |
| PARAM_VALUE | 1 | var->type | 3 |
| PARAM_VALUE | 1 | var->unusable | 0 |
| PARAM_VALUE | 2 | seg | 4 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->kvm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->mm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->srcu.srcu_ctrp | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| FUZZY_MAX | 0 | vcpu->run->exit_reason | 0 |
| BIT_INFO | 0 | vcpu->guest_debug | 0x0,0xffffffffffefffff |
| NOSPEC | 0 | vcpu->arch.mmio_gfn | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14 |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.l1_tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmio_gfn | 0-4503599627370495[c] |
| USER_DATA | 0 | vcpu->arch.nmi_queued.counter | 0 |
| USER_DATA | 0 | vcpu->arch.tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->srcu | |
| LOCK2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->srcu | ||
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/smm.c enter_smm() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->____srcu_idx | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apf.halted | 0 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.at_instruction_boundary | 0 |
| PARAM_VALUE | 0 | vcpu->arch.complete_userspace_io | 0 |
| PARAM_VALUE | 0 | vcpu->arch.cr0_guest_owned_bits | 65536-u64max |
| PARAM_VALUE | 0 | vcpu->arch.cr4_guest_owned_bits | 2-u64max |
| PARAM_VALUE | 0 | vcpu->arch.exception.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_from_userspace | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_vmexit.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.guest_fpu.fpstate | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.guest_mmu->pae_root | 0 |
| PARAM_VALUE | 0 | vcpu->arch.gva_walk.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.hflags | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->arch.interrupt.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmio_gva | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mp_state | 0 |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0,2-255 |
| PARAM_VALUE | 0 | vcpu->arch.nmi_injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.rip | 32768 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.page_fault | 4654005377237938176,6604280681433620480,6624689191963803648,6795630133462265856 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.sync_spte | 0,799230455575592960,7721480187534942208 |
| PARAM_VALUE | 0 | vcpu->arch.smi_pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->guest_debug | 2-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.irqchip_mode | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.raw_lock.wlocked | 0 |
| PARAM_VALUE | 0 | vcpu->kvm->online_vcpus.counter | (-2147483647)-s32max |
| PARAM_VALUE | 0 | vcpu->kvm->srcu.srcu_ctrp | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->requests | 0-1 |
| PARAM_VALUE | 0 | vcpu->run | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->exit_reason | 0,10,39 |
| PARAM_VALUE | 0 | vcpu->run->flags | 0 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->request_interrupt_window | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 0 | vcpu->wants_to_run | 1 |
| PARAM_VALUE | 0 | *vcpu->arch.apic->vcpu->kvm->arch.vioapic->irq_eoi | 0-4294967295 |
| PARAM_VALUE | 1 | var | 5696878488029777920 |
| PARAM_VALUE | 1 | var->avl | 0 |
| PARAM_VALUE | 1 | var->base | 0 |
| PARAM_VALUE | 1 | var->db | 0 |
| PARAM_VALUE | 1 | var->dpl | 0 |
| PARAM_VALUE | 1 | var->g | 1 |
| PARAM_VALUE | 1 | var->l | 0 |
| PARAM_VALUE | 1 | var->limit | u32max |
| PARAM_VALUE | 1 | var->padding | 0 |
| PARAM_VALUE | 1 | var->present | 1 |
| PARAM_VALUE | 1 | var->s | 1 |
| PARAM_VALUE | 1 | var->selector | 0 |
| PARAM_VALUE | 1 | var->type | 3 |
| PARAM_VALUE | 1 | var->unusable | 0 |
| PARAM_VALUE | 2 | seg | 5 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->kvm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->mm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->srcu.srcu_ctrp | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| FUZZY_MAX | 0 | vcpu->run->exit_reason | 0 |
| BIT_INFO | 0 | vcpu->guest_debug | 0x0,0xffffffffffefffff |
| NOSPEC | 0 | vcpu->arch.mmio_gfn | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14 |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.l1_tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmio_gfn | 0-4503599627370495[c] |
| USER_DATA | 0 | vcpu->arch.nmi_queued.counter | 0 |
| USER_DATA | 0 | vcpu->arch.tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->srcu | |
| LOCK2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->srcu | ||
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/smm.c enter_smm() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->____srcu_idx | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apf.halted | 0 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.at_instruction_boundary | 0 |
| PARAM_VALUE | 0 | vcpu->arch.complete_userspace_io | 0 |
| PARAM_VALUE | 0 | vcpu->arch.cr0_guest_owned_bits | 65536-u64max |
| PARAM_VALUE | 0 | vcpu->arch.cr4_guest_owned_bits | 2-u64max |
| PARAM_VALUE | 0 | vcpu->arch.exception.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_from_userspace | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_vmexit.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.guest_fpu.fpstate | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.guest_mmu->pae_root | 0 |
| PARAM_VALUE | 0 | vcpu->arch.gva_walk.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.hflags | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->arch.interrupt.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmio_gva | 0 |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.mp_state | 0 |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0,2-255 |
| PARAM_VALUE | 0 | vcpu->arch.nmi_injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_dirty | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.rip | 32768 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.fmt->permissions | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.page_fault | 4654005377237938176,6604280681433620480,6624689191963803648,6795630133462265856 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.sync_spte | 0,799230455575592960,7721480187534942208 |
| PARAM_VALUE | 0 | vcpu->arch.smi_pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->guest_debug | 2-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.irqchip_mode | 0,2-u32max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.raw_lock.wlocked | 0 |
| PARAM_VALUE | 0 | vcpu->kvm->online_vcpus.counter | (-2147483647)-s32max |
| PARAM_VALUE | 0 | vcpu->kvm->srcu.srcu_ctrp | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->requests | 0-1 |
| PARAM_VALUE | 0 | vcpu->run | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->exit_reason | 0,10,39 |
| PARAM_VALUE | 0 | vcpu->run->flags | 0 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 0-3 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | vcpu->run->mmio.is_write | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->mmio.len | 0-8 |
| PARAM_VALUE | 0 | vcpu->run->request_interrupt_window | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 0 | vcpu->wants_to_run | 1 |
| PARAM_VALUE | 0 | *vcpu->arch.apic->vcpu->kvm->arch.vioapic->irq_eoi | 0-4294967295 |
| PARAM_VALUE | 1 | var | 5696878488029777920 |
| PARAM_VALUE | 1 | var->avl | 0 |
| PARAM_VALUE | 1 | var->base | 0 |
| PARAM_VALUE | 1 | var->db | 0 |
| PARAM_VALUE | 1 | var->dpl | 0 |
| PARAM_VALUE | 1 | var->g | 1 |
| PARAM_VALUE | 1 | var->l | 0 |
| PARAM_VALUE | 1 | var->limit | u32max |
| PARAM_VALUE | 1 | var->padding | 0 |
| PARAM_VALUE | 1 | var->present | 1 |
| PARAM_VALUE | 1 | var->s | 1 |
| PARAM_VALUE | 1 | var->selector | 0 |
| PARAM_VALUE | 1 | var->type | 3 |
| PARAM_VALUE | 1 | var->unusable | 0 |
| PARAM_VALUE | 2 | seg | 2 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu->arch.mmu | 1 |
| CAPPED_DATA | 0 | vcpu->kvm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->mm | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->srcu.srcu_ctrp | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| FUZZY_MAX | 0 | vcpu->run->exit_reason | 0 |
| BIT_INFO | 0 | vcpu->guest_debug | 0x0,0xffffffffffefffff |
| NOSPEC | 0 | vcpu->arch.mmio_gfn | |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | vcpu->arch.host_debugctl | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14 |
| USER_DATA | 0 | vcpu->arch.exception.payload | 0-u64max |
| USER_DATA | 0 | vcpu->arch.l1_tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.mmio_gfn | 0-4503599627370495[c] |
| USER_DATA | 0 | vcpu->arch.nmi_queued.counter | 0 |
| USER_DATA | 0 | vcpu->arch.tsc_offset | 0-u64max |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate2_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.gpa | 0-18446744073709551614[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.pfn | 0-4503599627370494[c] |
| USER_DATA | 0 | vcpu->arch.xen.runstate_cache.uhva | 0-u64max[c] |
| USER_DATA | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.pio.size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.count | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->run->io.size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| LOCK2 | 0 | &vcpu->kvm->srcu | |
| LOCK2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm)->srcu | ||
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/smm.c rsm_load_seg_32() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode_mask | 131072,393216 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.dr6 | 4294838256-4295030783 |
| PARAM_VALUE | 0 | vcpu->arch.dr7 | 1024-4294914047 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_advance_ns | 0-5000 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode_mask | 131072,393216 |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 1-3 |
| PARAM_VALUE | 1 | var | 2780175842450800640 |
| PARAM_VALUE | 1 | var->avl | 0-1 |
| PARAM_VALUE | 1 | var->base | 0-u32max |
| PARAM_VALUE | 1 | var->db | 0-1 |
| PARAM_VALUE | 1 | var->dpl | 0-3 |
| PARAM_VALUE | 1 | var->g | 0-1 |
| PARAM_VALUE | 1 | var->l | 0-1 |
| PARAM_VALUE | 1 | var->padding | 0 |
| PARAM_VALUE | 1 | var->present | 0-1 |
| PARAM_VALUE | 1 | var->s | 0-1 |
| PARAM_VALUE | 1 | var->type | 0-15 |
| PARAM_VALUE | 1 | var->unusable | 0-1 |
| PARAM_VALUE | 2 | seg | 0-7 |
| DATA_SOURCE | 0 | vcpu | $0 |
| DATA_SOURCE | 2 | seg | $3 |
| HARD_MAX | 2 | seg | 7 |
| NOCHECK_CALL |
arch/x86/kvm/smm.c rsm_load_seg_64() -> kvm_set_segment()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode_mask | 131072,393216 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.dr6 | 4294838256-4295030783 |
| PARAM_VALUE | 0 | vcpu->arch.dr7 | 1024-4294914047 |
| PARAM_VALUE | 0 | vcpu->arch.smbase | 0-u32max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_advance_ns | 0-5000 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode_mask | 131072,393216 |
| PARAM_VALUE | 0 | vcpu->run->hyperv.type | 1-3 |
| PARAM_VALUE | 1 | var | 4286555461909331968 |
| PARAM_VALUE | 1 | var->avl | 0-1 |
| PARAM_VALUE | 1 | var->db | 0-1 |
| PARAM_VALUE | 1 | var->dpl | 0-3 |
| PARAM_VALUE | 1 | var->g | 0-1 |
| PARAM_VALUE | 1 | var->l | 0-1 |
| PARAM_VALUE | 1 | var->padding | 0 |
| PARAM_VALUE | 1 | var->present | 0-1 |
| PARAM_VALUE | 1 | var->s | 0-1 |
| PARAM_VALUE | 1 | var->type | 0-15 |
| PARAM_VALUE | 1 | var->unusable | 0-1 |
| PARAM_VALUE | 2 | seg | 0-7 |
| DATA_SOURCE | 0 | vcpu | $0 |
| DATA_SOURCE | 2 | seg | $2 |
| HARD_MAX | 2 | seg | 7 |
| NOCHECK_CALL | |||
| USER_PTR | 0 | vcpu->arch.pdptrs |