Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 3 files:
Smatch caller information:
mm/slub.c __check_heap_object() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 8337944235832188928 |
| PARAM_VALUE | 1 | detail | 0 |
| PARAM_VALUE | 3 | offset | 0 |
| PARAM_VALUE | 4 | len | 1-u64max |
| BUF_SIZE | 0 | name | 31 |
| DATA_SOURCE | 2 | to_user | $3 |
| DATA_SOURCE | 4 | len | $1 |
| STR_LEN | 0 | name | 30 |
| TERMINATED | 0 | name | 1 |
| NOCHECK_CALL |
mm/slub.c __check_heap_object() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 3735034820895633408 |
| PARAM_VALUE | 3 | offset | 0-4294967294 |
| PARAM_VALUE | 4 | len | 1-u64max |
| BUF_SIZE | 0 | name | 29 |
| BUF_SIZE | 1 | detail | 11,16 |
| CAPPED_DATA | 3 | offset | 1 |
| DATA_SOURCE | 2 | to_user | $3 |
| DATA_SOURCE | 4 | len | $1 |
| STR_LEN | 0 | name | 28 |
| TERMINATED | 0 | name | 1 |
| NOCHECK_CALL | |||
| UNITS | 3 | offset | unit_byte |
mm/slub.c __check_heap_object() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 7772558151631474688 |
| PARAM_VALUE | 4 | len | 1-u64max |
| BUF_SIZE | 0 | name | 12 |
| BUF_SIZE | 1 | detail | 11,16 |
| DATA_SOURCE | 2 | to_user | $3 |
| DATA_SOURCE | 4 | len | $1 |
| STR_LEN | 0 | name | 11 |
| TERMINATED | 0 | name | 1 |
| NOCHECK_CALL | |||
| UNITS | 3 | offset | unit_byte |
| UNITS | 4 | len | unit_byte |
mm/usercopy.c __check_object_size() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 2491757555853750272 |
| PARAM_VALUE | 1 | detail | 0 |
| PARAM_VALUE | 4 | len | 1-u64max |
| BUF_SIZE | 0 | name | 14 |
| DATA_SOURCE | 2 | to_user | $2 |
| DATA_SOURCE | 4 | len | $1 |
| STR_LEN | 0 | name | 13 |
| TERMINATED | 0 | name | 1 |
| NOCHECK_CALL |
mm/usercopy.c check_bogus_address() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 848371786634641408 |
| PARAM_VALUE | 1 | detail | 0 |
| PARAM_VALUE | 3 | offset | 0 |
| BUF_SIZE | 0 | name | 16 |
| DATA_SOURCE | 2 | to_user | $2 |
| STR_LEN | 0 | name | 15 |
| TERMINATED | 0 | name | 1 |
| NOCHECK_CALL |
mm/usercopy.c check_bogus_address() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 2825967861673668608 |
| PARAM_VALUE | 1 | detail | 0 |
| PARAM_VALUE | 3 | offset | 0-16 |
| PARAM_VALUE | 4 | len | 1-u64max |
| BUF_SIZE | 0 | name | 13 |
| CAPPED_DATA | 3 | offset | 1 |
| CAPPED_DATA | 3 | offset | 1 |
| DATA_SOURCE | 2 | to_user | $2 |
| DATA_SOURCE | 3 | offset | $0 |
| DATA_SOURCE | 4 | len | $1 |
| FUZZY_MAX | 3 | offset | 16 |
| STR_LEN | 0 | name | 12 |
| TERMINATED | 0 | name | 1 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 3 | offset |
mm/usercopy.c check_heap_object() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 1516204781712408576 |
| PARAM_VALUE | 1 | detail | 7897146487304134656 |
| PARAM_VALUE | 3 | offset | 0 |
| PARAM_VALUE | 4 | len | 1-u64max |
| BUF_SIZE | 0 | name | 8 |
| BUF_SIZE | 1 | detail | 8 |
| DATA_SOURCE | 2 | to_user | $2 |
| DATA_SOURCE | 4 | len | $1 |
| STR_LEN | 0 | name | 7 |
| STR_LEN | 1 | detail | 7 |
| TERMINATED | 0 | name | 1 |
| TERMINATED | 1 | detail | 1 |
| NOCHECK_CALL |
mm/usercopy.c check_heap_object() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 1516204781712408576 |
| PARAM_VALUE | 1 | detail | 0 |
| PARAM_VALUE | 4 | len | 1-u64max |
| BUF_SIZE | 0 | name | 8 |
| CAPPED_DATA | 3 | offset | 1 |
| CAPPED_DATA | 3 | offset | 1 |
| DATA_SOURCE | 2 | to_user | $2 |
| DATA_SOURCE | 4 | len | $1 |
| STR_LEN | 0 | name | 7 |
| TERMINATED | 0 | name | 1 |
| NOCHECK_CALL | |||
| UNITS | 3 | offset | unit_byte |
| UNITS | 4 | len | unit_byte |
mm/usercopy.c check_heap_object() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 2995142848142307328 |
| PARAM_VALUE | 1 | detail | 0 |
| PARAM_VALUE | 3 | offset | 0-67272519433846783,9223503428494295040-u64max |
| PARAM_VALUE | 4 | len | 1-u64max |
| BUF_SIZE | 0 | name | 11 |
| DATA_SOURCE | 2 | to_user | $2 |
| DATA_SOURCE | 4 | len | $1 |
| STR_LEN | 0 | name | 10 |
| BIT_INFO | 3 | offset | 0x0,0xffffffffffffff |
| BIT_INFO | 3 | offset | 0x0,0xffffffffffffff |
| TERMINATED | 0 | name | 1 |
| NOCHECK_CALL |
mm/usercopy.c check_kernel_text_object() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 7975459684149268480 |
| PARAM_VALUE | 1 | detail | 0 |
| PARAM_VALUE | 3 | offset | 0-4951316787851374591,18422585989725605905-u64max |
| PARAM_VALUE | 4 | len | 1-u64max |
| BUF_SIZE | 0 | name | 12 |
| CAPPED_DATA | 4 | len | 1 |
| CAPPED_DATA | 4 | len | 1 |
| DATA_SOURCE | 2 | to_user | $2 |
| DATA_SOURCE | 4 | len | $1 |
| STR_LEN | 0 | name | 11 |
| TERMINATED | 0 | name | 1 |
| NOCHECK_CALL | |||
| UNITS | 4 | len | unit_byte |
mm/usercopy.c check_kernel_text_object() -> usercopy_abort()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | name | 4267363884111749120 |
| PARAM_VALUE | 1 | detail | 0 |
| PARAM_VALUE | 4 | len | 1-u64max |
| BUF_SIZE | 0 | name | 19 |
| CAPPED_DATA | 3 | offset | 1 |
| CAPPED_DATA | 4 | len | 1 |
| CAPPED_DATA | 4 | len | 1 |
| DATA_SOURCE | 2 | to_user | $2 |
| DATA_SOURCE | 4 | len | $1 |
| STR_LEN | 0 | name | 18 |
| TERMINATED | 0 | name | 1 |
| NOCHECK_CALL | |||
| UNITS | 4 | len | unit_byte |