Defined in 1 files as a function:
Referenced in 5 files:
- drivers/md/dm-raid.c
- fs/jfs/xattr.c
- security/selinux/ss/avtab.c, line 526
- security/selinux/ss/conditional.c
- security/selinux/ss/policydb.c
Smatch caller information:
security/selinux/ss/conditional.c cond_read_av_list() -> size_check()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | bytes | 12 |
| PARAM_VALUE | 1 | num | 1-u32max |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551611 |
| DATA_SOURCE | 2 | fp | $1 |
| NOSPEC | 2 | fp->len | |
| USER_DATA | 2 | fp->len | 0-999999980[c] |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/conditional.c cond_read_list() -> size_check()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | bytes | 16 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551611 |
| BUF_SIZE | 2 | fp | 16 |
| DATA_SOURCE | 2 | fp | $1 |
| NOSPEC | 2 | fp->len | |
| USER_DATA | 2 | fp->len | 0-999999968[c] |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/conditional.c cond_read_node() -> size_check()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | bytes | 8 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551607 |
| DATA_SOURCE | 2 | fp | $2 |
| NOSPEC | 2 | fp->len | |
| USER_DATA | 2 | fp->len | 0-999999976[c] |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/avtab.c avtab_read() -> size_check()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | bytes | 12 |
| PARAM_VALUE | 1 | num | 1-u32max |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551611 |
| BUF_SIZE | 2 | fp | 16 |
| DATA_SOURCE | 2 | fp | $1 |
| NOSPEC | 2 | fp->len | |
| USER_DATA | 2 | fp->len | 0-999999996[c] |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c class_read() -> size_check()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | bytes | 8 |
| PARAM_VALUE | 1 | num | 0-32 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551591 |
| BUF_SIZE | 2 | fp | 16 |
| DATA_SOURCE | 2 | fp | $2 |
| FUZZY_MAX | 1 | num | 32 |
| NOSPEC | 2 | fp->len | |
| HARD_MAX | 1 | num | 32 |
| USER_DATA | 2 | fp->len | 0-999999976[c] |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c common_read() -> size_check()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | bytes | 8 |
| PARAM_VALUE | 1 | num | 0-32 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551599 |
| BUF_SIZE | 2 | fp | 16 |
| DATA_SOURCE | 2 | fp | $2 |
| FUZZY_MAX | 1 | num | 32 |
| NOSPEC | 2 | fp->len | |
| HARD_MAX | 1 | num | 32 |
| USER_DATA | 2 | fp->len | 0-999999984[c] |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c policydb_read() -> size_check()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | bytes | 16 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551607 |
| BUF_SIZE | 2 | fp | 16 |
| DATA_SOURCE | 2 | fp | $1 |
| NOSPEC | 2 | fp->len | |
| USER_DATA | 2 | fp->len | 0-999999992[c] |
| NO_OVERFLOW_SIMPLE | 1 | num | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c policydb_read() -> size_check()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | bytes | 12 |
| PARAM_VALUE | 1 | num | 4185718668 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551611 |
| BUF_SIZE | 2 | fp | 16 |
| DATA_SOURCE | 2 | fp | $1 |
| NOSPEC | 2 | fp->len | |
| USER_DATA | 2 | fp->len | 0-999999980[c] |
| NO_OVERFLOW_SIMPLE | 1 | num | |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c range_read() -> size_check()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | bytes | 12 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->data | 4096-ptr_max |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551607 |
| BUF_SIZE | 2 | fp | 16 |
| DATA_SOURCE | 2 | fp | $1 |
| NO_OVERFLOW_SIMPLE | 2 | fp->len | |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |
security/selinux/ss/policydb.c str_read() -> size_check()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | bytes | 1 |
| PARAM_VALUE | 1 | num | 1-4294967294 |
| PARAM_VALUE | 2 | fp | 6801050872897380352 |
| PARAM_VALUE | 2 | fp->len | 0-18446744073709551607 |
| BUF_SIZE | 2 | fp | (-1),16 |
| BUF_SIZE | 2 | fp | (-1),16 |
| CAPPED_DATA | 2 | fp->len | 1 |
| DATA_SOURCE | 1 | num | $3 |
| DATA_SOURCE | 2 | fp | $2 |
| NOSPEC | 2 | fp->len | |
| USER_DATA | 2 | fp->len | 0-999999992[c] |
| UNITS | 0 | bytes | unit_byte |
| USER_PTR | 2 | fp->data | |
| LOCK2 | global &selinux_state.policy_mutex | ||
| TYPE_LOCK | (struct selinux_state)->policy_mutex |