audit_log_n_untrustedstring identifier - Linux source code next-20260811

Projects

linux

Versions

FIXME
- FIXME
  - next-20260811

Documented in 1 files:

kernel/audit.c, line 2170

Defined in 1 files as a prototype:

include/linux/audit.h, line 182 (as a prototype)

Defined in 2 files as a function:

Referenced in 6 files:

Smatch caller information:

kernel/auditsc.c audit_log_name() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	4096-ptr_max
PARAM_VALUE	0	ab->ctx	4096-ptr_max
PARAM_VALUE	0	ab->ctx->current_state	2
PARAM_VALUE	0	ab->gfp_mask	3264
PARAM_VALUE	0	ab->skb->cloned	0-1
PARAM_VALUE	0	ab->skb->csum_start	0-u16max
PARAM_VALUE	0	ab->skb->data_len	0
PARAM_VALUE	0	ab->skb->end	0-4294967295
PARAM_VALUE	0	ab->skb->hdr_len	0
PARAM_VALUE	0	ab->skb->head_frag	0
PARAM_VALUE	0	ab->skb->inner_mac_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_network_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_transport_header	0-u16max
PARAM_VALUE	0	ab->skb->len	0-4294967295
PARAM_VALUE	0	ab->skb->mac_header	0-u16max
PARAM_VALUE	0	ab->skb->network_header	0-u16max
PARAM_VALUE	0	ab->skb->nohdr	0
PARAM_VALUE	0	ab->skb->pfmemalloc	0-1
PARAM_VALUE	0	ab->skb->pp_recycle	0
PARAM_VALUE	0	ab->skb->tail	0-4294967295
PARAM_VALUE	0	ab->skb->transport_header	0-u16max
PARAM_VALUE	0	ab->skb->truesize	0-4294967295
PARAM_VALUE	0	ab->skb->unreadable	0-1
PARAM_VALUE	0	ab->skb_list.lock.rlock.dep_map->name	0-255
PARAM_VALUE	0	*ab->skb->head	0-255
PARAM_VALUE	2	len	1-s32max,18446744071562067968-18446744073709551614
BUF_SIZE	1	string	168-4096
DATA_SOURCE	0	ab	r audit_log_start
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL

kernel/auditsc.c audit_log_proctitle() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	4096-ptr_max
PARAM_VALUE	0	ab->ctx	4096-ptr_max
PARAM_VALUE	0	ab->ctx->current_state	2
PARAM_VALUE	0	ab->gfp_mask	3264
PARAM_VALUE	0	ab->skb->cloned	0-1
PARAM_VALUE	0	ab->skb->csum_start	0-u16max
PARAM_VALUE	0	ab->skb->data_len	0
PARAM_VALUE	0	ab->skb->end	0-4294967295
PARAM_VALUE	0	ab->skb->hdr_len	0
PARAM_VALUE	0	ab->skb->head_frag	0
PARAM_VALUE	0	ab->skb->inner_mac_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_network_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_transport_header	0-u16max
PARAM_VALUE	0	ab->skb->len	0-4294967295
PARAM_VALUE	0	ab->skb->mac_header	0-u16max
PARAM_VALUE	0	ab->skb->network_header	0-u16max
PARAM_VALUE	0	ab->skb->nohdr	0
PARAM_VALUE	0	ab->skb->pfmemalloc	0-1
PARAM_VALUE	0	ab->skb->pp_recycle	0
PARAM_VALUE	0	ab->skb->tail	0-4294967295
PARAM_VALUE	0	ab->skb->transport_header	0-u16max
PARAM_VALUE	0	ab->skb->truesize	0-4294967295
PARAM_VALUE	0	ab->skb->unreadable	0-1
PARAM_VALUE	0	ab->skb_list.lock.rlock.dep_map->name	0-255
PARAM_VALUE	0	*ab->skb->head	0-255
PARAM_VALUE	1	string	1-u64max
PARAM_VALUE	2	len	0-s32max,18446744071562067968-u64max
BUF_SIZE	1	string	7,128,u64max
BUF_SIZE	1	string	7,128,u64max
DATA_SOURCE	0	ab	r audit_log_start
STR_LEN	0	ab	(-1),6
STR_LEN	1	string	(-1),6
TERMINATED	1	string	1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL

kernel/audit.c audit_log_untrustedstring() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	0,4096-ptr_max
PARAM_VALUE	0	ab->skb->data_len	0-1
PARAM_VALUE	2	len	0-1010101
BUF_SIZE	0	ab	(-1)-s32max
BUF_SIZE	0	ab	(-1)-s32max
BUF_SIZE	1	string	s32min-(-1),1-s32max
BUF_SIZE	1	string	s32min-(-1),1-s32max
DATA_SOURCE	0	ab	$0
DATA_SOURCE	1	string	$1
STR_LEN	0	ab	(-1)-2147479552
STR_LEN	0	ab	(-1)-2147479552
STR_LEN	1	string	(-1),6,11
STR_LEN	1	string	(-1),6,11
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA	1	*string	0-255
UNITS	1	string	unit_byte
USER_PTR	1	string
HALF_LOCKED2		&a->u.dentry->d_lockref.lock
HALF_LOCKED2		&dentry->d_lockref.lock
HALF_LOCKED2		&iint->mutex
HALF_LOCKED2		global &audit_cmd_mutex.lock
HALF_LOCKED2		global &audit_filter_mutex
HALF_LOCKED2		rcu_read

kernel/audit.c audit_receive_msg() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	0,4096-ptr_max
PARAM_VALUE	0	ab->ctx->current_state	2
PARAM_VALUE	0	ab->gfp_mask	3264
PARAM_VALUE	0	ab->skb	4096-ptr_max
PARAM_VALUE	0	ab->skb->data	4096-ptr_max
PARAM_VALUE	0	ab->skb->data_len	0
PARAM_VALUE	0	ab->skb->hdr_len	0
PARAM_VALUE	0	ab->skb->head_frag	0
PARAM_VALUE	0	ab->skb->nohdr	0
PARAM_VALUE	0	ab->skb->pp_recycle	0
PARAM_VALUE	0	ab->skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead	1
PARAM_VALUE	0	ab->skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead	1
PARAM_VALUE	0	ab->skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	ab->skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	ab->skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	ab->skb->sk->sk_bpf_storage->owner_refcnt.refs.counter	s32min-s32max
PARAM_VALUE	0	ab->skb->sk->sk_callback_lock.owner	(-1)
PARAM_VALUE	0	ab->skb->sk->sk_callback_lock.owner_cpu	4294967295
PARAM_VALUE	0	ab->skb->sk->sk_callback_lock.raw_lock.cnts.counter	0-s32max
PARAM_VALUE	0	*ab->skb->head	0-255
PARAM_VALUE	0	*ab->skb->sk->sk_callback_lock.owner	(-4611686018427387904)-4611686018427387903
PARAM_VALUE	1	string	4096-ptr_max
PARAM_VALUE	2	len	1-2147483631
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA	0	*ab->skb->data	0-255
USER_DATA	1	*string	0-255
USER_DATA	2	len	2-2147483631[c]
USER_PTR	1	string
LOCK2		global &audit_cmd_mutex.lock
HALF_LOCKED2		&dev->ethtool->rss_lock
HALF_LOCKED2		global &hwsim_phys_lock
HALF_LOCKED2		global &rtnl_mutex
HALF_LOCKED2		global &rx_queue_mutex
HALF_LOCKED2		rcu_read

security/selinux/ss/services.c compute_sid_handle_invalid_context() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	4096-ptr_max
PARAM_VALUE	0	ab->ctx->current_state	2
PARAM_VALUE	0	ab->gfp_mask	2080
PARAM_VALUE	0	ab->skb->cloned	0-1
PARAM_VALUE	0	ab->skb->csum_start	0-u16max
PARAM_VALUE	0	ab->skb->data_len	0
PARAM_VALUE	0	ab->skb->end	0-4294967295
PARAM_VALUE	0	ab->skb->hdr_len	0
PARAM_VALUE	0	ab->skb->head_frag	0
PARAM_VALUE	0	ab->skb->inner_mac_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_network_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_transport_header	0-u16max
PARAM_VALUE	0	ab->skb->len	0-4294967295
PARAM_VALUE	0	ab->skb->mac_header	0-u16max
PARAM_VALUE	0	ab->skb->network_header	0-u16max
PARAM_VALUE	0	ab->skb->nohdr	0
PARAM_VALUE	0	ab->skb->pfmemalloc	0-1
PARAM_VALUE	0	ab->skb->pp_recycle	0
PARAM_VALUE	0	ab->skb->tail	0-4294967295
PARAM_VALUE	0	ab->skb->transport_header	0-u16max
PARAM_VALUE	0	ab->skb->truesize	0-4294967295
PARAM_VALUE	0	ab->skb->unreadable	0-1
PARAM_VALUE	0	ab->skb_list.lock.rlock.dep_map->name	0-255
PARAM_VALUE	0	*ab->skb->head	0-255
PARAM_VALUE	1	string	16,4096-ptr_max
PARAM_VALUE	1	*string	0-255
PARAM_VALUE	2	len	0-3999999,u32max
DATA_SOURCE	0	ab	r audit_log_start
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
LOCK2		rcu_read

security/selinux/ss/services.c security_sid_mls_copy() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	0,4096-ptr_max
PARAM_VALUE	0	ab->ctx->current_state	2
PARAM_VALUE	0	ab->gfp_mask	2080
PARAM_VALUE	0	ab->skb->cloned	0-1
PARAM_VALUE	0	ab->skb->csum_start	0-u16max
PARAM_VALUE	0	ab->skb->data_len	0
PARAM_VALUE	0	ab->skb->end	0-4294967295
PARAM_VALUE	0	ab->skb->hdr_len	0
PARAM_VALUE	0	ab->skb->head_frag	0
PARAM_VALUE	0	ab->skb->inner_mac_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_network_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_transport_header	0-u16max
PARAM_VALUE	0	ab->skb->len	0-4294967295
PARAM_VALUE	0	ab->skb->mac_header	0-u16max
PARAM_VALUE	0	ab->skb->network_header	0-u16max
PARAM_VALUE	0	ab->skb->nohdr	0
PARAM_VALUE	0	ab->skb->pfmemalloc	0-1
PARAM_VALUE	0	ab->skb->pp_recycle	0
PARAM_VALUE	0	ab->skb->tail	0-4294967295
PARAM_VALUE	0	ab->skb->transport_header	0-u16max
PARAM_VALUE	0	ab->skb->truesize	0-4294967295
PARAM_VALUE	0	ab->skb->unreadable	0-1
PARAM_VALUE	0	ab->skb_list.lock.rlock.dep_map->name	0-255
PARAM_VALUE	1	string	16,4096-ptr_max
PARAM_VALUE	1	*string	0-255
PARAM_VALUE	2	len	0-3999999,u32max
DATA_SOURCE	0	ab	r audit_log_start
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
LOCK2		rcu_read

security/apparmor/label.c aa_label_xaudit() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	4096-ptr_max
PARAM_VALUE	0	ab->ctx->current_state	2
PARAM_VALUE	0	ab->ctx->ipc.has_perm	0-1
PARAM_VALUE	0	ab->ctx->socketcall.nargs	0,2-6
PARAM_VALUE	0	ab->gfp_mask	10272
PARAM_VALUE	0	ab->skb->cloned	0-1
PARAM_VALUE	0	ab->skb->csum_start	0-u16max
PARAM_VALUE	0	ab->skb->data_len	0
PARAM_VALUE	0	ab->skb->end	0-4294967295
PARAM_VALUE	0	ab->skb->hdr_len	0
PARAM_VALUE	0	ab->skb->head_frag	0
PARAM_VALUE	0	ab->skb->inner_mac_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_network_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_transport_header	0-u16max
PARAM_VALUE	0	ab->skb->len	0-4294967295
PARAM_VALUE	0	ab->skb->mac_header	0-u16max
PARAM_VALUE	0	ab->skb->network_header	0-u16max
PARAM_VALUE	0	ab->skb->nohdr	0
PARAM_VALUE	0	ab->skb->pfmemalloc	0-1
PARAM_VALUE	0	ab->skb->pp_recycle	0
PARAM_VALUE	0	ab->skb->tail	0-4294967295
PARAM_VALUE	0	ab->skb->transport_header	0-u16max
PARAM_VALUE	0	ab->skb->truesize	0-4294967295
PARAM_VALUE	0	ab->skb->unreadable	0-1
PARAM_VALUE	0	ab->skb_list.lock.rlock.dep_map->name	0-255
PARAM_VALUE	0	*ab->skb->head	0-255
PARAM_VALUE	1	string	1-u64max
PARAM_VALUE	2	len	0-s32max
CAPPED_DATA	2	len	1
DATA_SOURCE	0	ab	$0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL

security/selinux/avc.c avc_audit_post_callback() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	4096-ptr_max
PARAM_VALUE	0	ab->ctx->current_state	2
PARAM_VALUE	0	ab->gfp_mask	10272
PARAM_VALUE	0	ab->skb->cloned	0-1
PARAM_VALUE	0	ab->skb->csum_start	0-u16max
PARAM_VALUE	0	ab->skb->data_len	0
PARAM_VALUE	0	ab->skb->end	0-4294967295
PARAM_VALUE	0	ab->skb->hdr_len	0
PARAM_VALUE	0	ab->skb->head_frag	0
PARAM_VALUE	0	ab->skb->inner_mac_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_network_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_transport_header	0-u16max
PARAM_VALUE	0	ab->skb->len	0-4294967295
PARAM_VALUE	0	ab->skb->mac_header	0-u16max
PARAM_VALUE	0	ab->skb->network_header	0-u16max
PARAM_VALUE	0	ab->skb->nohdr	0
PARAM_VALUE	0	ab->skb->pfmemalloc	0-1
PARAM_VALUE	0	ab->skb->pp_recycle	0
PARAM_VALUE	0	ab->skb->tail	0-4294967295
PARAM_VALUE	0	ab->skb->transport_header	0-u16max
PARAM_VALUE	0	ab->skb->truesize	0-4294967295
PARAM_VALUE	0	ab->skb->unreadable	0-1
PARAM_VALUE	0	ab->skb_list.lock.rlock.dep_map->name	0-255
PARAM_VALUE	0	*ab->skb->head	0-255
PARAM_VALUE	1	string	1-u64max
PARAM_VALUE	1	*string	0-255
DATA_SOURCE	0	ab	$0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL

security/selinux/avc.c avc_audit_post_callback() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	4096-ptr_max
PARAM_VALUE	0	ab->ctx->current_state	2
PARAM_VALUE	0	ab->gfp_mask	10272
PARAM_VALUE	0	ab->skb->cloned	0-1
PARAM_VALUE	0	ab->skb->csum_start	0-u16max
PARAM_VALUE	0	ab->skb->data_len	0
PARAM_VALUE	0	ab->skb->end	0-4294967295
PARAM_VALUE	0	ab->skb->hdr_len	0
PARAM_VALUE	0	ab->skb->head_frag	0
PARAM_VALUE	0	ab->skb->inner_mac_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_network_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_transport_header	0-u16max
PARAM_VALUE	0	ab->skb->len	0-4294967295
PARAM_VALUE	0	ab->skb->mac_header	0-u16max
PARAM_VALUE	0	ab->skb->network_header	0-u16max
PARAM_VALUE	0	ab->skb->nohdr	0
PARAM_VALUE	0	ab->skb->pfmemalloc	0-1
PARAM_VALUE	0	ab->skb->pp_recycle	0
PARAM_VALUE	0	ab->skb->tail	0-4294967295
PARAM_VALUE	0	ab->skb->transport_header	0-u16max
PARAM_VALUE	0	ab->skb->truesize	0-4294967295
PARAM_VALUE	0	ab->skb->unreadable	0-1
PARAM_VALUE	0	ab->skb_list.lock.rlock.dep_map->name	0-255
PARAM_VALUE	0	*ab->skb->head	0-255
PARAM_VALUE	1	string	1-u64max
PARAM_VALUE	1	*string	0-255
DATA_SOURCE	0	ab	$0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL

security/selinux/hooks.c selinux_inode_setxattr() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	4096-ptr_max
PARAM_VALUE	0	ab->ctx->current_state	2
PARAM_VALUE	0	ab->gfp_mask	2080
PARAM_VALUE	0	ab->skb->cloned	0-1
PARAM_VALUE	0	ab->skb->csum_start	0-u16max
PARAM_VALUE	0	ab->skb->data_len	0
PARAM_VALUE	0	ab->skb->end	0-4294967295
PARAM_VALUE	0	ab->skb->hdr_len	0
PARAM_VALUE	0	ab->skb->head_frag	0
PARAM_VALUE	0	ab->skb->inner_mac_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_network_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_transport_header	0-u16max
PARAM_VALUE	0	ab->skb->len	0-4294967295
PARAM_VALUE	0	ab->skb->mac_header	0-u16max
PARAM_VALUE	0	ab->skb->network_header	0-u16max
PARAM_VALUE	0	ab->skb->nohdr	0
PARAM_VALUE	0	ab->skb->pfmemalloc	0-1
PARAM_VALUE	0	ab->skb->pp_recycle	0
PARAM_VALUE	0	ab->skb->tail	0-4294967295
PARAM_VALUE	0	ab->skb->transport_header	0-u16max
PARAM_VALUE	0	ab->skb->truesize	0-4294967295
PARAM_VALUE	0	ab->skb->unreadable	0-1
PARAM_VALUE	0	ab->skb_list.lock.rlock.dep_map->name	0-255
PARAM_VALUE	0	*ab->skb->head	0-255
PARAM_VALUE	1	string	0,4096-ptr_max
DATA_SOURCE	0	ab	r audit_log_start
DATA_SOURCE	1	string	$3
NOCHECK_CALL

security/selinux/hooks.c selinux_lsm_setattr() -> audit_log_n_untrustedstring()

Type	Parameter	Key	Value
PARAM_VALUE	0	ab	4096-ptr_max
PARAM_VALUE	0	ab->ctx->current_state	2
PARAM_VALUE	0	ab->gfp_mask	2080
PARAM_VALUE	0	ab->skb->cloned	0-1
PARAM_VALUE	0	ab->skb->csum_start	0-u16max
PARAM_VALUE	0	ab->skb->data_len	0
PARAM_VALUE	0	ab->skb->end	0-4294967295
PARAM_VALUE	0	ab->skb->hdr_len	0
PARAM_VALUE	0	ab->skb->head_frag	0
PARAM_VALUE	0	ab->skb->inner_mac_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_network_header	0-u16max
PARAM_VALUE	0	ab->skb->inner_transport_header	0-u16max
PARAM_VALUE	0	ab->skb->len	0-4294967295
PARAM_VALUE	0	ab->skb->mac_header	0-u16max
PARAM_VALUE	0	ab->skb->network_header	0-u16max
PARAM_VALUE	0	ab->skb->nohdr	0
PARAM_VALUE	0	ab->skb->pfmemalloc	0-1
PARAM_VALUE	0	ab->skb->pp_recycle	0
PARAM_VALUE	0	ab->skb->tail	0-4294967295
PARAM_VALUE	0	ab->skb->transport_header	0-u16max
PARAM_VALUE	0	ab->skb->truesize	0-4294967295
PARAM_VALUE	0	ab->skb->unreadable	0-1
PARAM_VALUE	0	ab->skb_list.lock.rlock.dep_map->name	0-255
PARAM_VALUE	0	*ab->skb->head	0-255
PARAM_VALUE	1	string	4096-ptr_max
BUF_SIZE	1	string	0-4096
DATA_SOURCE	0	ab	r audit_log_start
DATA_SOURCE	1	string	$1
NOCHECK_CALL
USER_DATA	1	*string	0-255
USER_DATA	2	len	1-u64max
USER_PTR	1	string