Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 2 files:

Smatch caller information:

security/selinux/ss/avtab.c avtab_read_item() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 0 p 4096-ptr_max
BUF_SIZE 0 p->cond_list (-1)-s32max
CAPPED_DATA 0 p 1
CAPPED_DATA 0 p->policyvers 1
CAPPED_DATA 1 type 1
DATA_SOURCE 0 p $2
NO_OVERFLOW_SIMPLE 0 p->cond_list_len
NO_OVERFLOW_SIMPLE 0 p->te_avtab.nslot
NO_OVERFLOW_SIMPLE 0 p->te_cond_avtab.nslot
LOCK2 global &selinux_state.policy_mutex
TYPE_LOCK (struct selinux_state)->policy_mutex

security/selinux/ss/avtab.c avtab_read_item() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 0 p 4096-ptr_max
BUF_SIZE 0 p->cond_list (-1)-s32max
CAPPED_DATA 0 p 1
CAPPED_DATA 0 p->policyvers 1
CAPPED_DATA 1 type 1
DATA_SOURCE 0 p $2
NO_OVERFLOW_SIMPLE 0 p->cond_list_len
NO_OVERFLOW_SIMPLE 0 p->te_avtab.nslot
NO_OVERFLOW_SIMPLE 0 p->te_cond_avtab.nslot
UNITS 1 type unit_byte
LOCK2 global &selinux_state.policy_mutex
TYPE_LOCK (struct selinux_state)->policy_mutex

security/selinux/ss/avtab.c avtab_read_item() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 0 p 4096-ptr_max
BUF_SIZE 0 p->cond_list 0-s32max
CAPPED_DATA 0 p 1
CAPPED_DATA 0 p->policyvers 1
CAPPED_DATA 0 p->te_avtab.nslot 1
DATA_SOURCE 0 p $2
BIT_INFO 0 p->policyvers 0xf97cff8c,0xffffffffffffffff
NO_OVERFLOW_SIMPLE 0 p->cond_list_len
NO_OVERFLOW_SIMPLE 0 p->te_avtab.nslot
NO_OVERFLOW_SIMPLE 0 p->te_cond_avtab.nslot
LOCK2 global &selinux_state.policy_mutex
TYPE_LOCK (struct selinux_state)->policy_mutex

security/selinux/ss/avtab.c avtab_read_item() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 0 p 4096-ptr_max
BUF_SIZE 0 p->cond_list 0-s32max
CAPPED_DATA 0 p 1
CAPPED_DATA 0 p->policyvers 1
CAPPED_DATA 0 p->te_avtab.nslot 1
DATA_SOURCE 0 p $2
BIT_INFO 0 p->policyvers 0xf97cff8c,0xffffffffffffffff
NO_OVERFLOW_SIMPLE 0 p->cond_list_len
NO_OVERFLOW_SIMPLE 0 p->te_avtab.nslot
NO_OVERFLOW_SIMPLE 0 p->te_cond_avtab.nslot
UNITS 1 type unit_byte
LOCK2 global &selinux_state.policy_mutex
TYPE_LOCK (struct selinux_state)->policy_mutex

security/selinux/ss/policydb.c filename_trans_read_helper() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 0 p 4096-ptr_max
BUF_SIZE 0 p->role_allow (-1),16
CAPPED_DATA 0 p 1
CAPPED_DATA 0 p->policyvers 1
CAPPED_DATA 0 p->role_tr.size 1
CAPPED_DATA 0 p->te_avtab.nslot 1
DATA_SOURCE 0 p $0
MEM_ZERO 0 p
MEM_ZERO 0 &p->filename_trans_ttypes
MEM_ZERO 0 &p->neveraudit_map
MEM_ZERO 0 &p->permissive_map
MEM_ZERO 0 &p->policycaps
NO_OVERFLOW_SIMPLE 0 p->cond_list_len
NO_OVERFLOW_SIMPLE 0 p->filename_trans.size
NO_OVERFLOW_SIMPLE 0 p->role_tr.size
NO_OVERFLOW_SIMPLE 0 p->te_avtab.nslot
NO_OVERFLOW_SIMPLE 0 p->te_cond_avtab.nslot
LOCK2 global &selinux_state.policy_mutex
TYPE_LOCK (struct selinux_state)->policy_mutex

security/selinux/ss/policydb.c filename_trans_read_helper_compat() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 0 p 4096-ptr_max
BUF_SIZE 0 p->role_allow (-1),16
CAPPED_DATA 0 p 1
CAPPED_DATA 0 p->policyvers 1
CAPPED_DATA 0 p->role_tr.size 1
CAPPED_DATA 0 p->te_avtab.nslot 1
DATA_SOURCE 0 p $0
MEM_ZERO 0 p
MEM_ZERO 0 &p->filename_trans_ttypes
MEM_ZERO 0 &p->neveraudit_map
MEM_ZERO 0 &p->permissive_map
MEM_ZERO 0 &p->policycaps
NO_OVERFLOW_SIMPLE 0 p->cond_list_len
NO_OVERFLOW_SIMPLE 0 p->filename_trans.size
NO_OVERFLOW_SIMPLE 0 p->role_tr.size
NO_OVERFLOW_SIMPLE 0 p->te_avtab.nslot
NO_OVERFLOW_SIMPLE 0 p->te_cond_avtab.nslot
LOCK2 global &selinux_state.policy_mutex
TYPE_LOCK (struct selinux_state)->policy_mutex

security/selinux/ss/policydb.c filename_trans_read_helper_compat() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 0 p 4096-ptr_max
BUF_SIZE 0 p->role_allow (-1),16
CAPPED_DATA 0 p 1
CAPPED_DATA 0 p->policyvers 1
CAPPED_DATA 0 p->role_tr.size 1
CAPPED_DATA 0 p->te_avtab.nslot 1
DATA_SOURCE 0 p $0
MEM_ZERO 0 p
MEM_ZERO 0 &p->filename_trans_ttypes
MEM_ZERO 0 &p->neveraudit_map
MEM_ZERO 0 &p->permissive_map
MEM_ZERO 0 &p->policycaps
NO_OVERFLOW_SIMPLE 0 p->cond_list_len
NO_OVERFLOW_SIMPLE 0 p->filename_trans.size
NO_OVERFLOW_SIMPLE 0 p->role_tr.size
NO_OVERFLOW_SIMPLE 0 p->te_avtab.nslot
NO_OVERFLOW_SIMPLE 0 p->te_cond_avtab.nslot
LOCK2 global &selinux_state.policy_mutex
TYPE_LOCK (struct selinux_state)->policy_mutex

security/selinux/ss/policydb.c policydb_read() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 0 p 4096-ptr_max
CAPPED_DATA 0 p 1
CAPPED_DATA 0 p->te_avtab.nslot 1
DATA_SOURCE 0 p $0
MEM_ZERO 0 p
MEM_ZERO 0 &p->filename_trans_ttypes
MEM_ZERO 0 &p->neveraudit_map
MEM_ZERO 0 &p->permissive_map
MEM_ZERO 0 &p->policycaps
NO_OVERFLOW_SIMPLE 0 p->cond_list_len
NO_OVERFLOW_SIMPLE 0 p->role_tr.size
NO_OVERFLOW_SIMPLE 0 p->te_avtab.nslot
NO_OVERFLOW_SIMPLE 0 p->te_cond_avtab.nslot
LOCK2 global &selinux_state.policy_mutex
TYPE_LOCK (struct selinux_state)->policy_mutex

security/selinux/ss/policydb.c range_read() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 0 p 4096-ptr_max
BUF_SIZE 0 p->role_allow (-1),16
CAPPED_DATA 0 p 1
CAPPED_DATA 0 p->process_class 1
CAPPED_DATA 0 p->role_tr.size 1
CAPPED_DATA 0 p->te_avtab.nslot 1
DATA_SOURCE 0 p $0
CONSTRAINT 0 p <=3068
MEM_ZERO 0 p
MEM_ZERO 0 &p->filename_trans_ttypes
MEM_ZERO 0 &p->neveraudit_map
MEM_ZERO 0 &p->permissive_map
MEM_ZERO 0 &p->policycaps
NO_OVERFLOW_SIMPLE 0 p->cond_list_len
NO_OVERFLOW_SIMPLE 0 p->range_tr.size
NO_OVERFLOW_SIMPLE 0 p->role_tr.size
NO_OVERFLOW_SIMPLE 0 p->te_avtab.nslot
NO_OVERFLOW_SIMPLE 0 p->te_cond_avtab.nslot
LOCK2 global &selinux_state.policy_mutex
TYPE_LOCK (struct selinux_state)->policy_mutex

security/selinux/ss/policydb.c range_read() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 0 p 4096-ptr_max
BUF_SIZE 0 p->role_allow (-1),16
CAPPED_DATA 0 p 1
CAPPED_DATA 0 p->process_class 1
CAPPED_DATA 0 p->role_tr.size 1
CAPPED_DATA 0 p->te_avtab.nslot 1
DATA_SOURCE 0 p $0
CONSTRAINT 0 p <=3068
MEM_ZERO 0 p
MEM_ZERO 0 &p->filename_trans_ttypes
MEM_ZERO 0 &p->neveraudit_map
MEM_ZERO 0 &p->permissive_map
MEM_ZERO 0 &p->policycaps
NO_OVERFLOW_SIMPLE 0 p->cond_list_len
NO_OVERFLOW_SIMPLE 0 p->range_tr.size
NO_OVERFLOW_SIMPLE 0 p->role_tr.size
NO_OVERFLOW_SIMPLE 0 p->te_avtab.nslot
NO_OVERFLOW_SIMPLE 0 p->te_cond_avtab.nslot
LOCK2 global &selinux_state.policy_mutex
TYPE_LOCK (struct selinux_state)->policy_mutex

security/selinux/ss/policydb.c type_bounds_sanity_check() -> policydb_type_isvalid()

Type Parameter Key Value
PARAM_VALUE 1 type 1-u32max
BUF_SIZE 0 p (-1),8,16,256
BUF_SIZE 0 p (-1),8,16,256
DATA_SOURCE 0 p $2
RX_PATH
TASK_NOT_RUNNING
UNITS 1 type unit_array_size
HALF_LOCKED2 global &selinux_state.policy_mutex