Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
fs/smb/client/smb2pdu.c SMB2_QFS_attr() -> smb2_validate_iov()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | offset | 0-u16max |
| PARAM_VALUE | 2 | iov | 4633507147834281984 |
| PARAM_VALUE | 2 | iov->iov_base | 4096-ptr_max |
| PARAM_VALUE | 3 | min_buf_size | 8,12,18,28 |
| BIT_INFO | 3 | min_buf_size | 0x0,0x1e |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 0 | offset | unit_byte |
| UNITS | 1 | buffer_length | unit_byte |
| UNITS | 3 | min_buf_size | unit_byte |
| LOCK2 | global &cifs_mount_mutex | ||
| HALF_LOCKED2 | &fc->uapi_mutex |
fs/smb/client/smb2pdu.c SMB2_change_notify() -> smb2_validate_iov()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | offset | 0-u16max |
| PARAM_VALUE | 2 | iov | 5710647074800566272 |
| PARAM_VALUE | 3 | min_buf_size | 12 |
| MEM_ZERO | 2 | iov | |
| UNITS | 3 | min_buf_size | unit_byte |
fs/smb/client/smb2pdu.c SMB311_posix_qfs_info() -> smb2_validate_iov()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | offset | 0-u16max |
| PARAM_VALUE | 2 | iov | 5825837414835388416 |
| PARAM_VALUE | 2 | iov->iov_base | 4096-ptr_max |
| PARAM_VALUE | 3 | min_buf_size | 56 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 0 | offset | unit_byte |
| UNITS | 1 | buffer_length | unit_byte |
| UNITS | 3 | min_buf_size | unit_byte |
| HALF_LOCKED2 | &s->s_umount |
fs/smb/client/smb2pdu.c smb2_parse_query_directory() -> smb2_validate_iov()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | offset | 0,72 |
| PARAM_VALUE | 1 | buffer_length | 0 |
| PARAM_VALUE | 2 | iov | 3999246411943268360,4326150550004674560 |
| PARAM_VALUE | 3 | min_buf_size | 64,68,80,88 |
| DATA_SOURCE | 2 | iov | $1 |
| BIT_INFO | 3 | min_buf_size | 0x40,0x5c |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 3 | min_buf_size | unit_byte |
| HALF_LOCKED2 | &dir_fp->readdir_lock | ||
| HALF_LOCKED2 | &inode->i_rwsem | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct inode)->i_rwsem |
fs/smb/client/smb2pdu.c smb2_validate_and_copy_iov() -> smb2_validate_iov()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 2 | iov | 1899819493794873344 |
| PARAM_VALUE | 3 | min_buf_size | 8,101 |
| DATA_SOURCE | 0 | offset | $0 |
| DATA_SOURCE | 1 | buffer_length | $1 |
| DATA_SOURCE | 2 | iov | $2 |
| DATA_SOURCE | 3 | min_buf_size | $3 |
| MEM_ZERO | 2 | iov | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 0 | offset | unit_byte |
| UNITS | 1 | buffer_length | unit_byte |
| UNITS | 3 | min_buf_size | unit_byte |
fs/smb/client/smb2ops.c smb2_query_eas() -> smb2_validate_iov()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | offset | 0-u16max |
| PARAM_VALUE | 2 | iov | 5408518035862216704 |
| PARAM_VALUE | 2 | iov->iov_base | 4096-ptr_max |
| PARAM_VALUE | 3 | min_buf_size | 8 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 0 | offset | unit_byte |
| UNITS | 1 | buffer_length | unit_byte |
| UNITS | 3 | min_buf_size | unit_byte |
fs/smb/client/smb2ops.c smb2_queryfs() -> smb2_validate_iov()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | offset | 0-u16max |
| PARAM_VALUE | 2 | iov | 2789570976597790720 |
| PARAM_VALUE | 2 | iov->iov_base | 4096-ptr_max |
| PARAM_VALUE | 3 | min_buf_size | 32 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 0 | offset | unit_byte |
| UNITS | 1 | buffer_length | unit_byte |
| UNITS | 3 | min_buf_size | unit_byte |
| HALF_LOCKED2 | &s->s_umount |