Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 11 files:
- arch/x86/kvm/x86.c, line 9960
- drivers/gpu/drm/armada/armada_gem.c, line 325
- drivers/gpu/drm/i915/gem/i915_gem_mman.c, line 98
- drivers/gpu/drm/i915/selftests/igt_mmap.c, line 39
- drivers/misc/lkdtm/perms.c
- drivers/misc/lkdtm/usercopy.c
- fs/binfmt_elf.c
- fs/binfmt_elf_fdpic.c
- fs/binfmt_flat.c
- lib/kunit/user_alloc.c, line 64
- mm/util.c, line 619
Smatch caller information:
lib/kunit/user_alloc.c kunit_vm_mmap_init() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| RX_PATH | |||
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | global &kunit_run_lock |
fs/binfmt_elf.c elf_map() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 4096-ptr_max |
| PARAM_VALUE | 0 | file->f_inode->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 0 | file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | file->f_op | 4096-ptr_max |
| PARAM_VALUE | 1 | addr | 0,4096-u64max |
| PARAM_VALUE | 2 | len | 0,4096-u64max |
| PARAM_VALUE | 3 | prot | 0-7 |
| PARAM_VALUE | 4 | flag | 2,18 |
| DATA_SOURCE | 0 | file | $0 |
| DATA_SOURCE | 3 | prot | $3 |
| DATA_SOURCE | 4 | flag | $4 |
| BIT_INFO | 1 | addr | 0x0,0xfffffffffffff000 |
| BIT_INFO | 1 | addr | 0x0,0xfffffffffffff000 |
| BIT_INFO | 2 | len | 0x0,0xfffffffffffff000 |
| BIT_INFO | 2 | len | 0x0,0xfffffffffffff000 |
| BIT_INFO | 4 | flag | 0x2,0x12 |
| NO_OVERFLOW_SIMPLE | 0 | file->f_path.dentry->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | file->f_path.moved->d_inode->i_size | |
| UNITS | 1 | addr | unit_byte |
| UNITS | 5 | offset | unit_byte |
| HALF_LOCKED2 | &tsk->signal->exec_update_lock |
fs/binfmt_elf.c elf_map() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 4096-ptr_max |
| PARAM_VALUE | 0 | file->f_inode->i_sb->s_cop->inode_info_offs | 1632,1720,1808,2632,2648 |
| PARAM_VALUE | 0 | file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | file->f_op | 4096-ptr_max |
| PARAM_VALUE | 1 | addr | 0,4096-u64max |
| PARAM_VALUE | 2 | len | 4096-u64max |
| PARAM_VALUE | 3 | prot | 0-7 |
| PARAM_VALUE | 4 | flag | 2,18 |
| DATA_SOURCE | 0 | file | $0 |
| DATA_SOURCE | 3 | prot | $3 |
| DATA_SOURCE | 4 | flag | $4 |
| BIT_INFO | 1 | addr | 0x0,0xfffffffffffff000 |
| BIT_INFO | 1 | addr | 0x0,0xfffffffffffff000 |
| BIT_INFO | 2 | len | 0x0,0xfffffffffffff000 |
| BIT_INFO | 2 | len | 0x0,0xfffffffffffff000 |
| BIT_INFO | 4 | flag | 0x2,0x12 |
| NO_OVERFLOW_SIMPLE | 0 | file->f_path.dentry->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | file->f_path.moved->d_inode->i_size | |
| UNITS | 1 | addr | unit_byte |
| UNITS | 2 | len | unit_byte |
| UNITS | 5 | offset | unit_byte |
| HALF_LOCKED2 | &tsk->signal->exec_update_lock |
drivers/misc/lkdtm/usercopy.c do_usercopy_page_span() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 0 |
| PARAM_VALUE | 1 | addr | 0 |
| PARAM_VALUE | 2 | len | 4096 |
| PARAM_VALUE | 3 | prot | 3 |
| PARAM_VALUE | 4 | flag | 34 |
| PARAM_VALUE | 5 | offset | 0 |
| UNITS | 2 | len | unit_byte |
drivers/misc/lkdtm/usercopy.c do_usercopy_slab_size() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 0 |
| PARAM_VALUE | 1 | addr | 0 |
| PARAM_VALUE | 2 | len | 4096 |
| PARAM_VALUE | 3 | prot | 7 |
| PARAM_VALUE | 4 | flag | 34 |
| PARAM_VALUE | 5 | offset | 0 |
| UNITS | 2 | len | unit_byte |
drivers/misc/lkdtm/usercopy.c do_usercopy_slab_whitelist() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 0 |
| PARAM_VALUE | 1 | addr | 0 |
| PARAM_VALUE | 2 | len | 4096 |
| PARAM_VALUE | 3 | prot | 7 |
| PARAM_VALUE | 4 | flag | 34 |
| PARAM_VALUE | 5 | offset | 0 |
| UNITS | 2 | len | unit_byte |
drivers/misc/lkdtm/usercopy.c do_usercopy_stack() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 0 |
| PARAM_VALUE | 1 | addr | 0 |
| PARAM_VALUE | 2 | len | 4096 |
| PARAM_VALUE | 3 | prot | 7 |
| PARAM_VALUE | 4 | flag | 34 |
| PARAM_VALUE | 5 | offset | 0 |
| UNITS | 2 | len | unit_byte |
drivers/misc/lkdtm/usercopy.c lkdtm_USERCOPY_KERNEL() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 0 |
| PARAM_VALUE | 1 | addr | 0 |
| PARAM_VALUE | 2 | len | 4096 |
| PARAM_VALUE | 3 | prot | 7 |
| PARAM_VALUE | 4 | flag | 34 |
| PARAM_VALUE | 5 | offset | 0 |
| UNITS | 2 | len | unit_byte |
arch/x86/kvm/x86.c __x86_set_memory_region() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 0 |
| PARAM_VALUE | 1 | addr | 0 |
| PARAM_VALUE | 2 | len | 4096,12288 |
| PARAM_VALUE | 3 | prot | 3 |
| PARAM_VALUE | 4 | flag | 33 |
| PARAM_VALUE | 5 | offset | 0 |
| DATA_SOURCE | 2 | len | $3 |
| HARD_MAX | 2 | len | 12288 |
| RX_PATH | |||
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | &kvm->slots_lock | ||
| HALF_LOCKED2 | _T->lock |
drivers/misc/lkdtm/perms.c lkdtm_ACCESS_USERSPACE() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 0 |
| PARAM_VALUE | 1 | addr | 0 |
| PARAM_VALUE | 2 | len | 4096 |
| PARAM_VALUE | 3 | prot | 7 |
| PARAM_VALUE | 4 | flag | 34 |
| PARAM_VALUE | 5 | offset | 0 |
| UNITS | 2 | len | unit_byte |
drivers/misc/lkdtm/perms.c lkdtm_EXEC_USERSPACE() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 0 |
| PARAM_VALUE | 1 | addr | 0 |
| PARAM_VALUE | 2 | len | 4096 |
| PARAM_VALUE | 3 | prot | 7 |
| PARAM_VALUE | 4 | flag | 34 |
| PARAM_VALUE | 5 | offset | 0 |
| UNITS | 2 | len | unit_byte |
fs/compat_binfmt_elf.c elf_map() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 4096-ptr_max |
| PARAM_VALUE | 0 | file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | file->f_op | 4096-ptr_max |
| PARAM_VALUE | 1 | addr | 0,4096-u64max |
| PARAM_VALUE | 2 | len | 0,4096-4294967296 |
| PARAM_VALUE | 3 | prot | 0-7 |
| PARAM_VALUE | 4 | flag | 2,18 |
| CAPPED_DATA | 2 | len | 1 |
| CAPPED_DATA | 2 | len | 1 |
| DATA_SOURCE | 0 | file | $0 |
| DATA_SOURCE | 3 | prot | $3 |
| DATA_SOURCE | 4 | flag | $4 |
| BIT_INFO | 1 | addr | 0x0,0xfffffffffffff000 |
| BIT_INFO | 1 | addr | 0x0,0xfffffffffffff000 |
| BIT_INFO | 2 | len | 0x0,0x1fffff000 |
| BIT_INFO | 2 | len | 0x0,0x1fffff000 |
| BIT_INFO | 4 | flag | 0x2,0x12 |
| NO_OVERFLOW_SIMPLE | 0 | file->f_path.dentry->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | file->f_path.moved->d_inode->i_size | |
| UNITS | 1 | addr | unit_byte |
| UNITS | 5 | offset | unit_byte |
fs/compat_binfmt_elf.c elf_map() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 4096-ptr_max |
| PARAM_VALUE | 0 | file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | file->f_op | 4096-ptr_max |
| PARAM_VALUE | 1 | addr | 0,4096-u64max |
| PARAM_VALUE | 2 | len | 4096-4294971392 |
| PARAM_VALUE | 3 | prot | 0-7 |
| PARAM_VALUE | 4 | flag | 2,18 |
| DATA_SOURCE | 0 | file | $0 |
| DATA_SOURCE | 3 | prot | $3 |
| DATA_SOURCE | 4 | flag | $4 |
| BIT_INFO | 1 | addr | 0x0,0xfffffffffffff000 |
| BIT_INFO | 1 | addr | 0x0,0xfffffffffffff000 |
| BIT_INFO | 2 | len | 0x0,0x1fffff000 |
| BIT_INFO | 2 | len | 0x0,0x1fffff000 |
| BIT_INFO | 4 | flag | 0x2,0x12 |
| NO_OVERFLOW_SIMPLE | 0 | file->f_path.dentry->d_inode->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | file->f_path.moved->d_inode->i_size | |
| UNITS | 1 | addr | unit_byte |
| UNITS | 2 | len | unit_byte |
| UNITS | 5 | offset | unit_byte |
drivers/gpu/drm/i915/selftests/igt_mmap.c igt_mmap_offset_with_file() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 4096-ptr_max |
| PARAM_VALUE | 1 | addr | 0 |
| PARAM_VALUE | 2 | len | 0,4096-18446744073709547520 |
| PARAM_VALUE | 3 | prot | 2 |
| PARAM_VALUE | 4 | flag | 1 |
| PARAM_VALUE | 5 | offset | 0,4096-18446744073709547520 |
| BUF_SIZE | 0 | file | (-1),1-s32max |
| BUF_SIZE | 0 | file | (-1),1-s32max |
| CAPPED_DATA | 5 | offset | 1 |
| DATA_SOURCE | 0 | file | $5 |
| DATA_SOURCE | 3 | prot | $3 |
| DATA_SOURCE | 4 | flag | $4 |
| BIT_INFO | 2 | len | 0x0,0xfffffffffffff000 |
| UNITS | 2 | len | unit_byte |
drivers/gpu/drm/i915/gem/i915_gem_mman.c i915_gem_mmap_ioctl() -> vm_mmap()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | file | 1-u64max |
| PARAM_VALUE | 1 | addr | 0 |
| PARAM_VALUE | 3 | prot | 3 |
| PARAM_VALUE | 4 | flag | 1 |
| PARAM_VALUE | 5 | offset | 0-18446744073709551614 |
| USER_DATA | 2 | len | 0-u64max[u] |
| USER_DATA | 5 | offset | 0-18446744073709551614[u] |