Documented in 1 files:

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 28 files:

Smatch caller information:

mm/madvise.c set_anon_vma_name() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 80
DATA_SOURCE 0 s $2

kernel/trace/trace_events_user.c user_events_ioctl_del() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 512
DATA_SOURCE 0 s $1
LOCK2 &group->reg_mutex
TYPE_LOCK (struct user_event_group)->reg_mutex

kernel/trace/trace_events_user.c user_events_ioctl_reg() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 512
LOCK2 &group->reg_mutex
TYPE_LOCK (struct user_event_group)->reg_mutex

kernel/trace/trace_event_perf.c perf_kprobe_init() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 512
LOCK2 _T->lock
HALF_LOCKED2 &p_event->group_leader->ctx->mutex

kernel/trace/trace_event_perf.c perf_uprobe_init() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 4096
CAPABLE 0 21
LOCK2 _T->lock
HALF_LOCKED2 &p_event->group_leader->ctx->mutex

security/keys/dh.c __keyctl_dh_compute() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 128

security/keys/keyctl_pkey.c keyctl_pkey_params_get() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $1
UNITS 1 n unit_byte

net/core/pktgen.c pktgen_if_write() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 4096-ptr_max
PARAM_VALUE 1 n 2-1024
CAPPED_DATA 1 n 1
DATA_SOURCE 0 s $1
USER_DATA 0 s 4096-ptr_max[c]
USER_DATA 1 n 3-1023[c]

drivers/tty/vt/keyboard.c vt_do_kdgkb_ioctl() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 512
BUF_SIZE 0 s 512
CAPABLE 0 26
UNITS 1 n unit_byte

fs/filesystems.c fs_index() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $0

drivers/gpu/drm/panfrost/panfrost_drv.c panfrost_ioctl_set_label_bo() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 4096

drivers/dma-buf/dma-buf.c dma_buf_set_name() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 32
DATA_SOURCE 0 s $1

drivers/gpu/drm/panthor/panthor_drv.c panthor_ioctl_bo_set_label() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 4096

drivers/input/misc/uinput.c uinput_ioctl_handler() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 1024
DATA_SOURCE 0 s $3
LOCK2 &udev->mutex
TYPE_LOCK (struct uinput_device)->mutex

security/keys/keyctl.c __do_sys_add_key() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $1
USER_DATA 0 s 1-u64max

security/keys/keyctl.c __do_sys_add_key() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $1
USER_DATA 0 s 1-u64max

security/keys/keyctl.c __do_sys_request_key() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $1
USER_DATA 0 s 0-u64max

security/keys/keyctl.c __do_sys_request_key() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $2
USER_DATA 0 s 1-u64max
UNITS 1 n unit_byte

security/keys/keyctl.c __do_sys_request_key() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $1
USER_DATA 0 s 0-u64max

security/keys/keyctl.c __do_sys_request_key() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $2
USER_DATA 0 s 1-u64max
UNITS 1 n unit_byte

security/keys/keyctl.c keyctl_join_session_keyring() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $0

security/keys/keyctl.c keyctl_keyring_search() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $2

security/keys/keyctl.c keyctl_restrict_keyring() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $2
UNITS 1 n unit_byte

fs/namespace.c copy_mount_string() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $0

drivers/gpu/drm/vc4/vc4_bo.c vc4_label_bo_ioctl() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 0-4294967295

kernel/events/core.c perf_event_set_filter() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $1
UNITS 1 n unit_byte

drivers/gpu/drm/i915/i915_debugfs_params.c i915_param_charp_write() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
CAPPED_DATA 0 s 1
DATA_SOURCE 0 s $1
USER_DATA 0 s 0-u64max[c]
UNITS 1 n unit_byte

fs/f2fs/file.c f2fs_ioc_setfslabel() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 256
DATA_SOURCE 0 s $1
CAPABLE 0 21

fs/ntfs/file.c ntfs_ioctl_set_volume_label() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 256
DATA_SOURCE 0 s $1
CAPABLE 0 21

drivers/vfio/group.c vfio_group_ioctl_get_device_fd() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $1
UNITS 1 n unit_byte

fs/fsopen.c __do_sys_fsconfig() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 256
DATA_SOURCE 0 s $2
USER_DATA 0 s 1-u64max

fs/fsopen.c __do_sys_fsconfig() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 256
DATA_SOURCE 0 s $3

fs/fsopen.c __do_sys_fsconfig() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 256
DATA_SOURCE 0 s $2
USER_DATA 0 s 1-u64max

fs/fsopen.c __do_sys_fsconfig() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 0 s 1-u64max
PARAM_VALUE 1 n 256
DATA_SOURCE 0 s $3

fs/fsopen.c __do_sys_fsopen() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $0
USER_DATA 0 s 0-u64max
UNITS 1 n unit_byte

fs/fsopen.c __do_sys_fsopen() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
DATA_SOURCE 0 s $0
USER_DATA 0 s 0-u64max
UNITS 1 n unit_byte

fs/nfs/fs_context.c nfs4_parse_monolithic() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 255
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 s 0-u32max[u]
HALF_LOCKED2 &sb->s_umount

fs/nfs/fs_context.c nfs4_parse_monolithic() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 4096
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 s 0-u32max[u]
HALF_LOCKED2 &sb->s_umount

fs/nfs/fs_context.c nfs4_parse_monolithic() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 16
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 s 0-u32max[u]
HALF_LOCKED2 &sb->s_umount

fs/xfs/xfs_handle.c xfs_ioc_attrmulti_one() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n 256
DATA_SOURCE 0 s $3
CAPABLE 0 21

kernel/module/main.c load_module() -> strndup_user()

Type Parameter Key Value
PARAM_VALUE 1 n s64max
DATA_SOURCE 0 s $1
USER_DATA 0 s 0-u64max