Documented in 1 files:
Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 5 files:
- arch/x86/kernel/cpu/sgx/encl.c, line 1223
- drivers/comedi/comedi_fops.c, line 2593
- drivers/gpu/drm/i915/i915_mm.c
- drivers/infiniband/core/uverbs_main.c
- mm/memory.c, line 2400
Smatch caller information:
drivers/infiniband/core/uverbs_main.c rdma_umap_open() -> zap_special_vma_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_file | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->host->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_parent | 0,5297,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->host->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vma->vm_file->private_data | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_private_data | 0 |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma->vm_file | (-1)-s32max |
| BUF_SIZE | 0 | vma->vm_mm | (-1)-s32max |
| BUF_SIZE | 0 | vma->vm_ops | (-1),144 |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_end | |
| NOSPEC | 0 | vma->vm_pgoff | |
| NOSPEC | 0 | vma->vm_start | |
| NOSPEC | 1 | address | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | vma->pfnmap_track_ctx->pfn | 0-13510803177078779[c] |
| USER_DATA | 0 | vma->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | vma->vm_end | 0-u64max |
| USER_DATA | 0 | vma->vm_pgoff | 0-13510803177078779[c] |
| USER_DATA | 0 | vma->vm_start | 0-u64max |
| USER_DATA | 1 | address | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_policy->mode | |
| UNITS | 1 | address | unit_byte |
| UNITS | 2 | size | unit_byte |
| HALF_LOCKED2 | &dev->attach_lock | ||
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &oldmm->mmap_lock |
drivers/infiniband/core/uverbs_main.c uverbs_user_mmap_disassociate() -> zap_special_vma_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_mm | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_mm | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | address | unit_byte |
| UNITS | 2 | size | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &ufile->disassociation_lock | ||
| LOCK2 | &ufile->umap_lock | ||
| HALF_LOCKED2 | &ufile->hw_destroy_rwsem | ||
| HALF_LOCKED2 | &uverbs_dev->lists_mutex | ||
| TYPE_LOCK | (struct ib_uverbs_file)->disassociation_lock | ||
| TYPE_LOCK | (struct ib_uverbs_file)->umap_lock | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
arch/x86/kernel/cpu/sgx/encl.c sgx_zap_enclave_ptes() -> zap_special_vma_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vma->vm_ops | 3498322916171345920 |
| PARAM_VALUE | 0 | vma->vm_private_data | 4096-ptr_max |
| PARAM_VALUE | 1 | address | 0 |
| PARAM_VALUE | 2 | size | 4096 |
| CAPPED_DATA | 0 | vma->vm_private_data | 1 |
| DATA_SOURCE | 1 | address | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | address | 0[c] |
| UNITS | 1 | address | unit_byte |
| UNITS | 2 | size | unit_byte |
| LOCK2 | &encl->srcu | ||
| LOCK2 | &encl_mm->mm->mmap_lock | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock | ||
| TYPE_LOCK | (struct sgx_encl)->srcu |
drivers/gpu/drm/i915/i915_mm.c remap_io_mapping() -> zap_special_vma_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vma->vm_private_data | 4096-ptr_max |
| PARAM_VALUE | 1 | address | 0,4096-18446744073709547520 |
| PARAM_VALUE | 2 | size | 0 |
| CAPPED_DATA | 1 | address | 1 |
| CAPPED_DATA | 1 | address | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| DATA_SOURCE | 1 | address | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 2 | size | unit_byte |
| LOCK2 | &ggtt->vm.gt->reset.backoff_srcu | ||
| LOCK2 | obj->base.resv | ||
| TYPE_LOCK | (struct intel_reset)->backoff_srcu |
drivers/gpu/drm/i915/i915_mm.c remap_io_sg() -> zap_special_vma_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_private_data | 4096-ptr_max |
| PARAM_VALUE | 2 | size | 0 |
| DATA_SOURCE | 0 | vma | $0 |
| DATA_SOURCE | 1 | address | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| NO_OVERFLOW_SIMPLE | 1 | address | |
| UNITS | 1 | address | unit_byte |
| UNITS | 2 | size | unit_byte |
| LOCK2 | obj->base.resv |
drivers/comedi/comedi_fops.c comedi_mmap() -> zap_special_vma_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 2 | size | 0-u32max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma->vm_file | (-1)-s32max |
| BUF_SIZE | 0 | vma->vm_private_data | (-1),1-s32max |
| CAPPED_DATA | 2 | size | 1 |
| CAPPED_DATA | 2 | size | 1 |
| DATA_SOURCE | 0 | vma | $1 |
| BIT_INFO | 2 | size | 0x0,0xfffff000 |
| BIT_INFO | 2 | size | 0x0,0xfffff000 |
| NOSPEC | 0 | vma->vm_pgoff | |
| NOSPEC | 0 | vma->vm_start | |
| NOSPEC | 1 | address | |
| NOSPEC | 1 | address | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | vma->pfnmap_track_ctx->pfn | 0-13510803177078779[c] |
| USER_DATA | 0 | vma->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | vma->vm_end | 4096-u64max[c] |
| USER_DATA | 0 | vma->vm_pgoff | 0-13510803177078779[c] |
| USER_DATA | 0 | vma->vm_start | 0-18446744073709547520 |
| USER_DATA | 1 | address | 0-18446744073709547520 |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| UNITS | 1 | address | unit_byte |
| UNITS | 2 | size | unit_byte |
| LOCK2 | &dev->attach_lock | ||
| HALF_LOCKED2 | &ipcp->lock | ||
| TYPE_LOCK | (struct comedi_device)->attach_lock |