Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

drivers/vhost/vringh.c __vringh_complete() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 5542846204076068864
PARAM_VALUE 3 $ 4096-ptr_max
BUF_SIZE 0 fmt 41
CAPPED_DATA 2 $ 1
DATA_SOURCE 1 $ $2
STR_LEN 0 fmt 40
TERMINATED 0 fmt 1
NOCHECK_CALL
UNITS 2 $ unit_array_size

drivers/vhost/vringh.c __vringh_complete() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 7988561589293301760
PARAM_VALUE 1 $ 4096-ptr_max
BUF_SIZE 0 fmt 34
BUF_SIZE 1 $ 2
STR_LEN 0 fmt 33
TERMINATED 0 fmt 1
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_get_head() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 3505349230799433728
PARAM_VALUE 1 $ 4096-ptr_max
BUF_SIZE 0 fmt 33
BUF_SIZE 1 $ 2
STR_LEN 0 fmt 32
TERMINATED 0 fmt 1
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_get_head() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 5879651896501575680
PARAM_VALUE 2 $ 4096-ptr_max
BUF_SIZE 0 fmt 39
STR_LEN 0 fmt 38
TERMINATED 0 fmt 1
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_get_head() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 745932754520506368
PARAM_VALUE 2 $ 0-u16max
BUF_SIZE 0 fmt 38
CAPPED_DATA 2 $ 1
STR_LEN 0 fmt 37
PARAM_COMPARE 1 $ >= $2
PARAM_COMPARE 2 $ <= $1
TERMINATED 0 fmt 1
NOCHECK_CALL
HOST_DATA 1 $ 0-u16max
USER_DATA 1 $ 0-u16max
UNITS 1 $ unit_array_size
UNITS 2 $ unit_array_size

drivers/vhost/vringh.c __vringh_iov() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 5575332982490755072
PARAM_VALUE 1 $ 4096-ptr_max
BUF_SIZE 0 fmt 22
STR_LEN 0 fmt 21
TERMINATED 0 fmt 1
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_iov() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 3730716979780980736
PARAM_VALUE 1 $ 4096-ptr_max
BUF_SIZE 0 fmt 32
STR_LEN 0 fmt 31
TERMINATED 0 fmt 1
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_iov() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 5939731334947639296
PARAM_VALUE 1 $ 85542879176912896,1303134089641611264
BUF_SIZE 0 fmt 19
BUF_SIZE 1 $ 9
STR_LEN 0 fmt 18
STR_LEN 1 $ 8
BIT_INFO 1 $ 0x5a8889a425000,0x133fe9cfdfef7000
TERMINATED 0 fmt 1
TERMINATED 1 $ 1
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_iov() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 3315135920403673088
PARAM_VALUE 2 $ s32min-u16max
BUF_SIZE 0 fmt 22
CAPPED_DATA 2 $ 1
DATA_SOURCE 1 $ $1 [m]
STR_LEN 0 fmt 21
PARAM_COMPARE 1 $ >= $2
PARAM_COMPARE 2 $ <= $1
TERMINATED 0 fmt 1
NOCHECK_CALL
HOST_DATA 1 $ 1-u16max[c]
HOST_DATA 2 $ 0-u16max
USER_DATA 1 $ 0-u16max
USER_DATA 2 $ 0-u16max
UNITS 1 $ unit_array_size
UNITS 2 $ unit_array_size

drivers/vhost/vringh.c __vringh_need_notify() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 6091099394600845312
BUF_SIZE 0 fmt 26
BUF_SIZE 1 $ 2
STR_LEN 0 fmt 25
TERMINATED 0 fmt 1
PREEMPT_ADD
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_need_notify() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 8241815456435093504
BUF_SIZE 0 fmt 35
STR_LEN 0 fmt 34
TERMINATED 0 fmt 1
PREEMPT_ADD
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_notify_disable() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 719291680167841792
BUF_SIZE 0 fmt 22
BUF_SIZE 1 $ 2
STR_LEN 0 fmt 21
TERMINATED 0 fmt 1
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_notify_enable() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 6036407137291444224
BUF_SIZE 0 fmt 23
BUF_SIZE 1 $ 2
STR_LEN 0 fmt 22
TERMINATED 0 fmt 1
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_notify_enable() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 722562192921387008
BUF_SIZE 0 fmt 30
STR_LEN 0 fmt 29
TERMINATED 0 fmt 1
NOCHECK_CALL

drivers/vhost/vringh.c __vringh_notify_enable() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 6944360809413132288
PARAM_VALUE 1 $ 4096-ptr_max
BUF_SIZE 0 fmt 32
BUF_SIZE 1 $ 2
STR_LEN 0 fmt 31
TERMINATED 0 fmt 1
NOCHECK_CALL

drivers/vhost/vringh.c move_to_indirect() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 1928813349801857024
PARAM_VALUE 1 $ (-2),0-u16max
BUF_SIZE 0 fmt 27
STR_LEN 0 fmt 26
TERMINATED 0 fmt 1
NOCHECK_CALL
HOST_DATA 1 $ 0-u16max
HOST_DATA 2 $ 0-u16max[c]
USER_DATA 1 $ 0-u16max
USER_DATA 2 $ 0-u16max[c]

drivers/vhost/vringh.c move_to_indirect() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 3963613064345706496
BUF_SIZE 0 fmt 24
STR_LEN 0 fmt 23
TERMINATED 0 fmt 1
NOCHECK_CALL
USER_DATA 1 $ 0-u32max

drivers/vhost/vringh.c range_check() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 5298576789625323520
PARAM_VALUE 1 $ 0-u32max
BUF_SIZE 0 fmt 31
DATA_SOURCE 2 $ $1
STR_LEN 0 fmt 30
TERMINATED 0 fmt 1
NOCHECK_CALL
HOST_DATA 1 $ 0-u32max
USER_DATA 1 $ 0-u32max

drivers/vhost/vringh.c vringh_init_kern() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 4850991166697512960
BUF_SIZE 0 fmt 17
DATA_SOURCE 1 $ $2
STR_LEN 0 fmt 16
TERMINATED 0 fmt 1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 1 $ unit_array_size
HALF_LOCKED2 &vdpasim->mutex

drivers/vhost/vringh.c vringh_init_user() -> vringh_bad()

Type Parameter Key Value
PARAM_VALUE 0 fmt 4850991166697512960
BUF_SIZE 0 fmt 17
DATA_SOURCE 1 $ $2
STR_LEN 0 fmt 16
TERMINATED 0 fmt 1
NOCHECK_CALL