Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/tee/tee_core.c tee_ioctl_invoke() -> params_from_user()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc->ops->invoke_func | 5442089074620203008 |
| PARAM_VALUE | 1 | params | 4096-ptr_max |
| PARAM_VALUE | 2 | num_params | 1-u32max |
| BUF_SIZE | 0 | ctx | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | ctx | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | params | 32-137438953440 |
| BUF_SIZE | 1 | params | 32-137438953440 |
| DATA_SOURCE | 0 | ctx | $0 |
| DATA_SOURCE | 1 | params | r _kzalloc_noprof |
| USER_DATA | 2 | num_params | 1-u32max |
| NO_OVERFLOW_SIMPLE | 2 | num_params | |
| UNITS | 2 | num_params | unit_array_size |
| ELEM_COUNT | 1 | ==params2 | 8051 |
drivers/tee/tee_core.c tee_ioctl_object_invoke() -> params_from_user()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc->ops->object_invoke_func | 6697308015340474368 |
| PARAM_VALUE | 1 | params | 4096-ptr_max |
| PARAM_VALUE | 2 | num_params | 1-u32max |
| BUF_SIZE | 0 | ctx | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | ctx | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | params | 32-137438953440 |
| BUF_SIZE | 1 | params | 32-137438953440 |
| DATA_SOURCE | 0 | ctx | $0 |
| DATA_SOURCE | 1 | params | r _kzalloc_noprof |
| USER_DATA | 2 | num_params | 1-u32max |
| NO_OVERFLOW_SIMPLE | 2 | num_params | |
| UNITS | 2 | num_params | unit_array_size |
| ELEM_COUNT | 1 | ==params2 | 8051 |
drivers/tee/tee_core.c tee_ioctl_open_session() -> params_from_user()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc->ops->open_session | 6694985125599637504 |
| PARAM_VALUE | 1 | params | 4096-ptr_max |
| PARAM_VALUE | 2 | num_params | 1-u32max |
| BUF_SIZE | 0 | ctx | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | ctx | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | params | 32-137438953440 |
| BUF_SIZE | 1 | params | 32-137438953440 |
| DATA_SOURCE | 0 | ctx | $0 |
| DATA_SOURCE | 1 | params | r _kzalloc_noprof |
| USER_DATA | 2 | num_params | 1-u32max |
| NO_OVERFLOW_SIMPLE | 2 | num_params | |
| UNITS | 2 | num_params | unit_array_size |
| ELEM_COUNT | 1 | ==params2 | 8051 |
drivers/tee/tee_core.c tee_ioctl_supp_recv() -> params_from_user()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ctx | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | ctx->teedev->desc->ops->supp_recv | 8980708159072550912 |
| PARAM_VALUE | 1 | params | 16,4096-ptr_max |
| BUF_SIZE | 0 | ctx | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | ctx | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | params | 0-137438953440 |
| BUF_SIZE | 1 | params | 0-137438953440 |
| DATA_SOURCE | 0 | ctx | $0 |
| DATA_SOURCE | 1 | params | r _kzalloc_noprof |
| USER_DATA | 2 | num_params | 0-u32max |
| NO_OVERFLOW_SIMPLE | 2 | num_params | |
| UNITS | 2 | num_params | unit_array_size |
| ELEM_COUNT | 1 | ==params2 | 8051 |