Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 5 files:
- fs/nfsd/vfs.c
- fs/overlayfs/file.c, line 571
- fs/read_write.c
- fs/smb/server/smb2pdu.c, line 9393
- fs/smb/server/vfs.c
Smatch caller information:
fs/overlayfs/file.c ovl_copyfile() -> vfs_copy_file_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file_in | 1-ptr_max |
| PARAM_VALUE | 1 | pos_in | 0-1000000000 |
| PARAM_VALUE | 2 | file_out | 1-ptr_max |
| PARAM_VALUE | 3 | pos_out | 0-1000000000 |
| PARAM_VALUE | 4 | len | 1-1000000000 |
| PARAM_VALUE | 5 | flags | 0 |
| BUF_SIZE | 0 | file_in | s32min,(-1)-s32max |
| BUF_SIZE | 0 | file_in | s32min,(-1)-s32max |
| BUF_SIZE | 2 | file_out | s32min,(-1)-s32max |
| BUF_SIZE | 2 | file_out | s32min,(-1)-s32max |
| CAPPED_DATA | 0 | file_in | 1 |
| CAPPED_DATA | 1 | pos_in | 1 |
| CAPPED_DATA | 1 | pos_in | 1 |
| CAPPED_DATA | 2 | file_out | 1 |
| CAPPED_DATA | 3 | pos_out | 1 |
| CAPPED_DATA | 3 | pos_out | 1 |
| CAPPED_DATA | 4 | len | 1 |
| DATA_SOURCE | 0 | file_in | r ovl_real_file |
| DATA_SOURCE | 1 | pos_in | $1 |
| DATA_SOURCE | 2 | file_out | r ovl_real_file |
| DATA_SOURCE | 3 | pos_out | $3 |
| DATA_SOURCE | 4 | len | $4 |
| DATA_SOURCE | 5 | flags | $5 |
| NOSPEC | 1 | pos_in | |
| NOSPEC | 1 | pos_in | |
| NOSPEC | 3 | pos_out | |
| NOSPEC | 3 | pos_out | |
| NOSPEC | 4 | len | |
| NOSPEC | 4 | len | |
| RX_PATH | |||
| USER_DATA | 1 | pos_in | 0-1000000000[c] |
| USER_DATA | 3 | pos_out | 0-1000000000[c] |
| USER_DATA | 4 | len | 1-1000000000[c] |
| USER_DATA | 5 | flags | 0 |
| NO_OVERFLOW_SIMPLE | 1 | pos_in | |
| NO_OVERFLOW_SIMPLE | 4 | len | |
| LOCK2 | &inode_out->i_rwsem | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct inode)->i_rwsem |
fs/read_write.c __do_sys_copy_file_range() -> vfs_copy_file_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file_in | 0,4-u64max |
| PARAM_VALUE | 2 | file_out | 0,4-u64max |
| PARAM_VALUE | 5 | flags | 0 |
| DATA_SOURCE | 4 | len | $4 |
| DATA_SOURCE | 5 | flags | $5 |
| USER_DATA | 1 | pos_in | s64min-s64max |
| USER_DATA | 3 | pos_out | s64min-s64max |
| USER_DATA | 4 | len | 0-u64max |
| USER_DATA | 5 | flags | 0 |
| UNITS | 1 | pos_in | unit_byte |
| UNITS | 3 | pos_out | unit_byte |
fs/read_write.c __do_sys_copy_file_range() -> vfs_copy_file_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file_in | 0,4-u64max |
| PARAM_VALUE | 2 | file_out | 0,4-u64max |
| PARAM_VALUE | 5 | flags | 0 |
| DATA_SOURCE | 4 | len | $4 |
| DATA_SOURCE | 5 | flags | $5 |
| USER_DATA | 1 | pos_in | s64min-s64max |
| USER_DATA | 3 | pos_out | s64min-s64max |
| USER_DATA | 4 | len | 0-u64max |
| USER_DATA | 5 | flags | 0 |
| UNITS | 1 | pos_in | unit_byte |
| UNITS | 3 | pos_out | unit_byte |
fs/nfsd/vfs.c nfsd_copy_file_range() -> vfs_copy_file_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file_in->f_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->encode_fh | 0,2,4096-ptr_max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_sb->s_cop->empty_dir | 0,86,661756434209751040,4392966320616476672,5234023279986843648,8614756098313990144 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_sb->s_cop->get_context | 0,706,17350455714160640,4513809449498124288,5149251875611672576,7067778626864828416 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_sb->s_cop->set_context | 0,67,317457138841939968,3250154607523569664,5979066299606671360,6756104566897242112 |
| PARAM_VALUE | 2 | file_out->f_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 4 | len | 1-4194304 |
| PARAM_VALUE | 5 | flags | 0 |
| CAPPED_DATA | 4 | len | 1 |
| CAPPED_DATA | 4 | len | 1 |
| DATA_SOURCE | 0 | file_in | $0 |
| DATA_SOURCE | 1 | pos_in | $1 |
| DATA_SOURCE | 2 | file_out | $2 |
| DATA_SOURCE | 3 | pos_out | $3 |
| DATA_SOURCE | 4 | len | $4 [m] |
| NO_OVERFLOW_SIMPLE | 1 | pos_in | |
| NO_OVERFLOW_SIMPLE | 4 | len |
fs/nfsd/vfs.c nfsd_copy_file_range() -> vfs_copy_file_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file_in | 4096-ptr_max |
| PARAM_VALUE | 0 | file_in->f_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->encode_fh | 0,2,4096-ptr_max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_sb->s_cop->empty_dir | 0,86,661756434209751040,4392966320616476672,5234023279986843648,8614756098313990144 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_sb->s_cop->get_context | 0,706,17350455714160640,4513809449498124288,5149251875611672576,7067778626864828416 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_sb->s_cop->set_context | 0,67,317457138841939968,3250154607523569664,5979066299606671360,6756104566897242112 |
| PARAM_VALUE | 2 | file_out | 4096-ptr_max |
| PARAM_VALUE | 2 | file_out->f_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 2 | file_out->f_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 4 | len | 1-4194304 |
| PARAM_VALUE | 5 | flags | 1 |
| CAPPED_DATA | 0 | file_in->f_inode | 1 |
| CAPPED_DATA | 4 | len | 1 |
| CAPPED_DATA | 4 | len | 1 |
| DATA_SOURCE | 0 | file_in | $0 |
| DATA_SOURCE | 1 | pos_in | $1 |
| DATA_SOURCE | 2 | file_out | $2 |
| DATA_SOURCE | 3 | pos_out | $3 |
| DATA_SOURCE | 4 | len | $4 [m] |
| NO_OVERFLOW_SIMPLE | 1 | pos_in | |
| NO_OVERFLOW_SIMPLE | 4 | len |
fs/smb/server/smb2pdu.c smb2_ioctl() -> vfs_copy_file_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file_in | 4096-ptr_max |
| PARAM_VALUE | 1 | pos_in | 0-s64max |
| PARAM_VALUE | 2 | file_out | 4096-ptr_max |
| PARAM_VALUE | 3 | pos_out | 0-s64max |
| PARAM_VALUE | 5 | flags | 0 |
| HALF_LOCKED2 | &pool->lock |
fs/smb/server/vfs.c ksmbd_vfs_copy_file_ranges() -> vfs_copy_file_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file_in | 4096-ptr_max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->fh_to_parent | 0,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_sb->s_export_op->fh_to_parent | 0,5297,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 2 | file_out | 4096-ptr_max |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792 |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896 |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_sb->s_cop->empty_dir | 0,86,661756434209751040,4392966320616476672,5234023279986843648 |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_sb->s_cop->get_context | 0,706,17350455714160640,4513809449498124288,5149251875611672576 |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_sb->s_cop->set_context | 0,67,317457138841939968,3250154607523569664,5979066299606671360 |
| PARAM_VALUE | 4 | len | 0-u32max |
| PARAM_VALUE | 5 | flags | 0 |
| NO_OVERFLOW_SIMPLE | 1 | pos_in | |
| NO_OVERFLOW_SIMPLE | 4 | len | |
| UNITS | 1 | pos_in | unit_byte |
| UNITS | 3 | pos_out | unit_byte |
| UNITS | 4 | len | unit_byte |
| LOCK2 | &pool->lock |
fs/smb/server/vfs.c ksmbd_vfs_copy_file_ranges() -> vfs_copy_file_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file_in | 4096-ptr_max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->fh_to_parent | 0,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_sb->s_export_op->fh_to_parent | 0,5297,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 0 | file_in->f_path.dentry->d_inode->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 2 | file_out | 4096-ptr_max |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792 |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_mapping->host->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896 |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_sb->s_cop->empty_dir | 0,86,661756434209751040,4392966320616476672,5234023279986843648 |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_sb->s_cop->get_context | 0,706,17350455714160640,4513809449498124288,5149251875611672576 |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 2 | file_out->f_path.dentry->d_inode->i_sb->s_cop->set_context | 0,67,317457138841939968,3250154607523569664,5979066299606671360 |
| PARAM_VALUE | 4 | len | 0-u32max |
| PARAM_VALUE | 5 | flags | 1 |
| NO_OVERFLOW_SIMPLE | 1 | pos_in | |
| NO_OVERFLOW_SIMPLE | 4 | len | |
| UNITS | 1 | pos_in | unit_byte |
| UNITS | 3 | pos_out | unit_byte |
| UNITS | 4 | len | unit_byte |
| LOCK2 | &pool->lock |