Defined in 3 files as a function:
- include/linux/userfaultfd_k.h, line 212 (as a function)
- include/linux/userfaultfd_k.h, line 361 (as a function)
- tools/testing/vma/include/stubs.h, line 206 (as a function)
Referenced in 7 files:
- fs/proc/task_mmu.c
- include/linux/mm_inline.h, line 563
- include/linux/userfaultfd_k.h
- mm/hugetlb.c, line 6160
- mm/memory.c
- mm/userfaultfd.c
- mm/vma.c, line 2232
Smatch caller information:
mm/huge_memory.c userfaultfd_huge_pmd_wp() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| DATA_SOURCE | 0 | vma | $0 |
| BIT_INFO | 0 | vma->vm_flags | 0x2,0xffffffffffffffff |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_end | 1-u64max[c] |
| USER_DATA | 0 | vma->vm_start | 1-u64max[c] |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | ptl |
mm/huge_memory.c userfaultfd_protected() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma->vm_mm | (-1),1-s32max |
| CAPPED_DATA | 0 | vma->vm_mm->mm_id | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xfffffffffdffffff |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/userfaultfd.c mwriteprotect_range() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 1-u64max |
| DATA_SOURCE | 0 | vma | r vma_find |
| LOCK2 | &ctx->map_changing_lock | ||
| LOCK2 | &dst_mm->mmap_lock | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock | ||
| TYPE_LOCK | (struct userfaultfd_ctx)->map_changing_lock |
mm/userfaultfd.c userfaultfd_clear_vma() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_userfaultfd_ctx.ctx | 1 |
| DATA_SOURCE | 0 | vma | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | &mm->mmap_lock | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/userfaultfd.c userfaultfd_protected() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_userfaultfd_ctx.ctx | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | &mm->mmap_lock | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
fs/proc/task_mmu.c pagemap_hugetlb_category() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| HALF_LOCKED2 | &m->lock | ||
| HALF_LOCKED2 | &mapping->i_mmap_rwsem | ||
| HALF_LOCKED2 | 0 | &vma->vm_file->f_mapping->i_mmap_rwsem |
fs/proc/task_mmu.c pagemap_hugetlb_category() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| HALF_LOCKED2 | &m->lock | ||
| HALF_LOCKED2 | &mapping->i_mmap_rwsem | ||
| HALF_LOCKED2 | 0 | &vma->vm_file->f_mapping->i_mmap_rwsem |
fs/proc/task_mmu.c pagemap_page_category() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock |
fs/proc/task_mmu.c pagemap_page_category() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock |
fs/proc/task_mmu.c pagemap_page_category() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock |
fs/proc/task_mmu.c pagemap_scan_pmd_entry() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock |
fs/proc/task_mmu.c pagemap_scan_pte_hole() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start |
fs/proc/task_mmu.c pagemap_thp_category() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 0,4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| HALF_LOCKED2 | &mm->mmap_lock |
fs/proc/task_mmu.c pagemap_thp_category() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 0,4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| HALF_LOCKED2 | &mm->mmap_lock |
fs/proc/task_mmu.c userfaultfd_wp_use_markers() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &mapping->i_mmap_rwsem |
mm/mprotect.c userfaultfd_pte_wp() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),4,24,64,168-s32max |
| BUF_SIZE | 0 | vma | (-1),4,24,64,168-s32max |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_start | |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_end | 1-u64max[c] |
| USER_DATA | 0 | vma->vm_start | 1-u64max[c] |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | ptl |
mm/mprotect.c userfaultfd_wp_use_markers() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_end | 1-u64max[c] |
| USER_DATA | 0 | vma->vm_start | 1-u64max[c] |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | ptl |
mm/hugetlb.c copy_pte_marker() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| CAPPED_DATA | 0 | vma | 1 |
| CAPPED_DATA | 0 | vma->vm_mm->mm_id | 1 |
| DATA_SOURCE | 0 | vma | $1 |
| TERMINATED | 0 | vma->vm_mm->mm_lock_seq.dep_map.name | 1 |
| TERMINATED | 0 | vma->vm_mm->write_protect_seq.dep_map.name | 1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/hugetlb.c hugetlb_fault() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_flags | 1-u64max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma->vm_file | (-1),4,24,64,168-s32max |
| BUF_SIZE | 0 | vma->vm_private_data | (-1)-s32max |
| CAPPED_DATA | 0 | vma | 1 |
| DATA_SOURCE | 0 | vma | $1 |
| NOSPEC | 0 | vma->vm_pgoff | |
| NOSPEC | 0 | vma->vm_start | |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_end | 1073741824-u64max[c] |
| USER_DATA | 0 | vma->vm_pgoff | 0-4503599627370495[c] |
| USER_DATA | 0 | vma->vm_start | 0-18446744073709547520 |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_policy->mode | |
| HALF_LOCKED2 | &mm->mmap_lock |
mm/hugetlb.c userfaultfd_protected() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma->vm_mm | (-1)-s32max |
| CAPPED_DATA | 0 | vma | 1 |
| CAPPED_DATA | 0 | vma->vm_policy | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/vma.c vma_wants_writenotify() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma->vm_mm | (-1),1-s32max |
| CAPPED_DATA | 0 | vma | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_pgoff | |
| NOSPEC | 0 | vma->vm_start | |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->shared.rb_subtree_last | 0-9007199254740989,u64max[u] |
| USER_DATA | 0 | vma->vm_pgoff | 0-4503599627370495[c] |
| USER_DATA | 0 | vma->vm_start | 0-u64max[c] |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| UNITS | 0 | vma | unit_byte |
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | rcu_read |
mm/memory.c cond_install_uffd_wp_ptes() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma->vm_mm | (-1),4,24,64,168-s32max |
| BUF_SIZE | 0 | vma->vm_ops | (-1),144 |
| BUF_SIZE | 0 | vma->vm_private_data | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_end | |
| NOSPEC | 0 | vma->vm_pgoff | |
| NOSPEC | 0 | vma->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->pfnmap_track_ctx->pfn | 0-9007201402224637[c] |
| USER_DATA | 0 | vma->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | vma->shared.rb_subtree_last | 0-u64max[u] |
| USER_DATA | 0 | vma->vm_end | 0-u64max |
| USER_DATA | 0 | vma->vm_pgoff | 0-9007201402224637[c] |
| USER_DATA | 0 | vma->vm_start | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_policy->mode | |
| UNITS | 0 | vma | unit_byte |
| HALF_LOCKED2 | ptl |
mm/memory.c copy_pte_marker() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_mm->mm_id | 1 |
| DATA_SOURCE | 0 | vma | $1 |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xfffffffffdffffff |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | dst_ptl | ||
| LOCK2 | rcu_read | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/memory.c do_wp_page() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| CAPPED_DATA | 0 | vma | 1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | vmf->ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | rcu_read |
mm/memory.c pte_marker_handle_uffd_wp() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),4,24,64,168-s32max |
| BUF_SIZE | 0 | vma | (-1),4,24,64,168-s32max |
| CAPPED_DATA | 0 | vma | 1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| HALF_LOCKED2 | &mm->mmap_lock |
mm/memory.c userfaultfd_huge_pmd_wp() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &pool->lock |
mm/memory.c userfaultfd_protected() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_mm->mm_id | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xfffffffffdffffff |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | dst_ptl | ||
| LOCK2 | rcu_read | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/memory.c userfaultfd_pte_wp() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma->vm_mm | (-1),1-s32max |
| BUF_SIZE | 0 | vma->vm_ops | (-1),144 |
| BUF_SIZE | 0 | vma->vm_private_data | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_end | |
| NOSPEC | 0 | vma->vm_pgoff | |
| NOSPEC | 0 | vma->vm_start | |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->pfnmap_track_ctx->pfn | 0-9007201402224637[c] |
| USER_DATA | 0 | vma->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | vma->shared.rb_subtree_last | 0-u64max[u] |
| USER_DATA | 0 | vma->swap_readahead_info.counter | 0-s64max[c] |
| USER_DATA | 0 | vma->vm_end | 0-u64max |
| USER_DATA | 0 | vma->vm_pgoff | 0-9007201402224637[c] |
| USER_DATA | 0 | vma->vm_policy->flags | 0,24,8192-57368[c] |
| USER_DATA | 0 | vma->vm_policy->home_node | 0-1023 |
| USER_DATA | 0 | vma->vm_policy->mode | 2-3,5-u16max |
| USER_DATA | 0 | vma->vm_start | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| UNITS | 0 | vma | unit_byte |
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | ptl | ||
| HALF_LOCKED2 | vmf->ptl |
mm/memory.c vmf_orig_pte_uffd_wp() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),4,24,64,168-s32max |
| BUF_SIZE | 0 | vma | (-1),4,24,64,168-s32max |
| CAPPED_DATA | 0 | vma | 1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_policy->flags | 0,24,8192-57368[c] |
| USER_DATA | 0 | vma->vm_policy->home_node | 0-1023 |
| USER_DATA | 0 | vma->vm_policy->mode | 2-3,5-u16max |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | vmf->ptl |
mm/gup.c userfaultfd_huge_pmd_wp() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock |
mm/gup.c userfaultfd_pte_wp() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock |
kernel/events/uprobes.c userfaultfd_pte_wp() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_end | 1 |
| CAPPED_DATA | 0 | vma->vm_start | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_pgoff | |
| NOSPEC | 0 | vma->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->shared.rb_subtree_last | 0-u64max[u] |
| USER_DATA | 0 | vma->vm_pgoff | 0-4503599627370495[c] |
| USER_DATA | 0 | vma->vm_start | 0-s32max,9223372036854775807[c] |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &uprobe->register_rwsem |
mm/khugepaged.c userfaultfd_protected() -> userfaultfd_wp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &mapping->i_mmap_rwsem | ||
| HALF_LOCKED2 | &mm->mmap_lock |