Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
security/selinux/ss/avtab.c avtab_read_item() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->cond_list | (-1)-s32max |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 1 | type | 1 |
| DATA_SOURCE | 0 | p | $2 |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/avtab.c avtab_read_item() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->cond_list | (-1)-s32max |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 1 | type | 1 |
| DATA_SOURCE | 0 | p | $2 |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| UNITS | 1 | type | unit_byte |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/avtab.c avtab_read_item() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->cond_list | 0-s32max |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $2 |
| BIT_INFO | 0 | p->policyvers | 0xf97cff8c,0xffffffffffffffff |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/avtab.c avtab_read_item() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->cond_list | 0-s32max |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $2 |
| BIT_INFO | 0 | p->policyvers | 0xf97cff8c,0xffffffffffffffff |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| UNITS | 1 | type | unit_byte |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c filename_trans_read_helper() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->role_allow | (-1),16 |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 0 | p->role_tr.size | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $0 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->filename_trans.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c filename_trans_read_helper_compat() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->role_allow | (-1),16 |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 0 | p->role_tr.size | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $0 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->filename_trans.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c filename_trans_read_helper_compat() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->role_allow | (-1),16 |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->policyvers | 1 |
| CAPPED_DATA | 0 | p->role_tr.size | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $0 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->filename_trans.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c policydb_read() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $0 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c range_read() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->role_allow | (-1),16 |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->process_class | 1 |
| CAPPED_DATA | 0 | p->role_tr.size | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $0 |
| CONSTRAINT | 0 | p | <=3068 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->range_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c range_read() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | p | 4096-ptr_max |
| BUF_SIZE | 0 | p->role_allow | (-1),16 |
| CAPPED_DATA | 0 | p | 1 |
| CAPPED_DATA | 0 | p->process_class | 1 |
| CAPPED_DATA | 0 | p->role_tr.size | 1 |
| CAPPED_DATA | 0 | p->te_avtab.nslot | 1 |
| DATA_SOURCE | 0 | p | $0 |
| CONSTRAINT | 0 | p | <=3068 |
| MEM_ZERO | 0 | p | |
| MEM_ZERO | 0 | &p->filename_trans_ttypes | |
| MEM_ZERO | 0 | &p->neveraudit_map | |
| MEM_ZERO | 0 | &p->permissive_map | |
| MEM_ZERO | 0 | &p->policycaps | |
| NO_OVERFLOW_SIMPLE | 0 | p->cond_list_len | |
| NO_OVERFLOW_SIMPLE | 0 | p->range_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->role_tr.size | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_avtab.nslot | |
| NO_OVERFLOW_SIMPLE | 0 | p->te_cond_avtab.nslot | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c type_bounds_sanity_check() -> policydb_type_isvalid()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | type | 1-u32max |
| BUF_SIZE | 0 | p | (-1),8,16,256 |
| BUF_SIZE | 0 | p | (-1),8,16,256 |
| DATA_SOURCE | 0 | p | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | type | unit_array_size |
| HALF_LOCKED2 | global &selinux_state.policy_mutex |