Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
fs/smb/server/smb2pdu.c set_file_allocation_info() -> smb_break_all_levII_oplock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4,6,12,16-300 |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->file_table.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 1 | fp | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->daccess | 2-u32max |
| PARAM_VALUE | 1 | fp->f_state | 1 |
| PARAM_VALUE | 1 | fp->filp | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_inode->i_ctime_nsec.counter | 0-s32max |
| PARAM_VALUE | 1 | fp->refcount.counter | 0-s32max |
| PARAM_VALUE | 1 | fp->stream.name | 0 |
| PARAM_VALUE | 2 | is_trunc | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| CAPPED_DATA | 1 | fp->persistent_id | 1 |
| CAPPED_DATA | 1 | fp->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| DATA_SOURCE | 1 | fp | $1 |
| BIT_INFO | 1 | fp->daccess | 0x2,0xffffffffffffffff |
| NOCHECK_CALL | |||
| USER_PTR | 0 | work->request_buf | |
| LOCK2 | &pool->lock |
fs/smb/server/smb2pdu.c smb2_rename() -> smb_break_all_levII_oplock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4-u32max |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->saved_cred | 0 |
| PARAM_VALUE | 0 | work->sess | 4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->file_table.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->user | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon->share_conf | 4096-ptr_max |
| PARAM_VALUE | 1 | fp | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->daccess | 65536-u32max |
| PARAM_VALUE | 1 | fp->f_state | 1 |
| PARAM_VALUE | 1 | fp->filp | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_hash.pprev | 1-u64max |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_parent | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_parent->d_inode | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_parent->d_inode->i_rwsem.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_parent->d_inode->i_rwsem.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_parent->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_parent->d_inode->i_rwsem.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_parent->d_sb->s_vfs_rename_mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_sb->s_vfs_rename_mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_sb->s_vfs_rename_mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_sb->s_vfs_rename_mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 1 | fp->filp->f_path.dentry->d_sb->s_vfs_rename_mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | fp->refcount.counter | 0-s32max |
| PARAM_VALUE | 1 | fp->tcon | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->tcon->share_conf | 4096-ptr_max |
| PARAM_VALUE | 2 | is_trunc | 0 |
| CAPPED_DATA | 0 | work->sess->user->ngroups | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| CAPPED_DATA | 1 | fp->filp->f_path.dentry | 1 |
| CAPPED_DATA | 1 | fp->filp->f_path.dentry->d_parent | 1 |
| CAPPED_DATA | 1 | fp->filp->f_path.mnt | 1 |
| CAPPED_DATA | 1 | fp->persistent_id | 1 |
| CAPPED_DATA | 1 | fp->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| DATA_SOURCE | 1 | fp | $1 |
| BIT_INFO | 1 | fp->daccess | 0x10000,0xffffffff |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | work->response_sz | |
| USER_PTR | 0 | work->request_buf | |
| LOCK2 | &pool->lock |
fs/smb/server/vfs.c ksmbd_vfs_copy_file_ranges() -> smb_break_all_levII_oplock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4,6,12,16-300 |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->file_table.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 1 | fp | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->daccess | 2-u32max |
| PARAM_VALUE | 1 | fp->f_state | 1 |
| PARAM_VALUE | 1 | fp->refcount.counter | 0-s32max |
| PARAM_VALUE | 1 | fp->stream.name | 0 |
| PARAM_VALUE | 2 | is_trunc | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| CAPPED_DATA | 1 | fp->persistent_id | 1 |
| CAPPED_DATA | 1 | fp->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| DATA_SOURCE | 1 | fp | $2 |
| NOCHECK_CALL | |||
| USER_PTR | 0 | work->request_buf | |
| LOCK2 | &pool->lock |
fs/smb/server/vfs.c ksmbd_vfs_truncate() -> smb_break_all_levII_oplock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4-u32max |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->file_table.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 1 | fp | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->daccess | 2-u32max |
| PARAM_VALUE | 1 | fp->f_state | 1 |
| PARAM_VALUE | 1 | fp->filp | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->refcount.counter | 0-s32max |
| PARAM_VALUE | 1 | fp->stream.name | 0 |
| PARAM_VALUE | 2 | is_trunc | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| CAPPED_DATA | 1 | fp->persistent_id | 1 |
| CAPPED_DATA | 1 | fp->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| DATA_SOURCE | 1 | fp | $1 |
| BIT_INFO | 1 | fp->daccess | 0x2,0xffffffffffffffff |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | work->response_sz | |
| USER_PTR | 0 | work->request_buf | |
| LOCK2 | &pool->lock |
fs/smb/server/vfs.c ksmbd_vfs_write() -> smb_break_all_levII_oplock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->vals->max_write_size | 0,65536-8388608 |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4,6,8-416 |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->file_table.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 0 | work->tcon->share_conf | 4096-ptr_max |
| PARAM_VALUE | 1 | fp | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->daccess | 2-u32max |
| PARAM_VALUE | 1 | fp->f_state | 1 |
| PARAM_VALUE | 1 | fp->refcount.counter | 0-s32max |
| PARAM_VALUE | 1 | fp->reserve_lease_break | 1 |
| PARAM_VALUE | 1 | fp->stream.name | 0 |
| PARAM_VALUE | 2 | is_trunc | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| CAPPED_DATA | 1 | fp->persistent_id | 1 |
| CAPPED_DATA | 1 | fp->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| DATA_SOURCE | 1 | fp | $1 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | work->remote_key | 0-u32max[u] |
| USER_PTR | 0 | work->request_buf | |
| LOCK2 | &pool->lock |
fs/smb/server/vfs.c ksmbd_vfs_zero_data() -> smb_break_all_levII_oplock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | work | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->ops->get_cmd_val | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->conn->session_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->conn->status | s32min-1,4-s32max |
| PARAM_VALUE | 0 | work->conn->vals | 4096-ptr_max |
| PARAM_VALUE | 0 | work->conn->vals->req_capabilities | 0,4,6,8-416 |
| PARAM_VALUE | 0 | work->response_buf | 16,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess | 0,4096-ptr_max |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->chann_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->file_table.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->rpc_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | work->sess->tree_conns_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | work->tcon | 4096-ptr_max |
| PARAM_VALUE | 1 | fp | 4096-ptr_max |
| PARAM_VALUE | 1 | fp->daccess | 2-u32max |
| PARAM_VALUE | 1 | fp->f_state | 1 |
| PARAM_VALUE | 1 | fp->refcount.counter | 0-s32max |
| PARAM_VALUE | 2 | is_trunc | 1 |
| CAPPED_DATA | 0 | work->tcon | 1 |
| CAPPED_DATA | 1 | fp->tcon | 1 |
| DATA_SOURCE | 0 | work | $0 |
| DATA_SOURCE | 1 | fp | $1 |
| BIT_INFO | 1 | fp->daccess | 0x2,0xffffffff |
| NOCHECK_CALL | |||
| USER_PTR | 0 | work->request_buf | |
| LOCK2 | &pool->lock |