Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
security/selinux/ss/avtab.c avtab_read_item() -> policydb_class_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->cond_list | (-1)-s32max |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 1 | class | 1 |
| DATA_SOURCE | 0 | p | $2 |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| UNITS | 1 | class | unit_byte |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/avtab.c avtab_read_item() -> policydb_class_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->cond_list | 0-s32max |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $2 |
| BIT_INFO | 0 | p->policyvers | 0xf97cff8c,0xffffffffffffffff |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c filename_trans_read_helper() -> policydb_class_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->role_allow | (-1),16 |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 0 | p->role_tr.size | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $0 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->filename_trans.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c filename_trans_read_helper_compat() -> policydb_class_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->role_allow | (-1),16 |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 0 | p->role_tr.size | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $0 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->filename_trans.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c genfs_read() -> policydb_class_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | class | 1-u16max |
| BUF_SIZE | 0 | p->genfs | 24,u64max |
| BUF_SIZE | 0 | p->role_allow | (-1),16 |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->process_class | 1 |
| CAPPED_DATA | 0 | p->role_tr.size | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $0 |
| CONSTRAINT | 0 | p | <=3068 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c policydb_read() -> policydb_class_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| PARAM_VALUE | 1 | class | 1-u16max |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $0 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| UNITS | 1 | class | unit_array_size |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c range_read() -> policydb_class_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->role_allow | (-1),16 |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->process_class | 1 |
| CAPPED_DATA | 0 | p->role_tr.size | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| CAPPED_DATA | 1 | class | 1 |
| DATA_SOURCE | 0 | p | $0 |
| CONSTRAINT | 0 | p | <=3068 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->range_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| UNITS | 1 | class | unit_array_size |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |