bad_area_access_error identifier - Linux source code next-20260811

Projects

linux

Versions

FIXME
- FIXME
  - next-20260811

Defined in 2 files as a function:

Referenced in 2 files:

Smatch caller information:

arch/x86/mm/fault.c do_user_addr_fault() -> bad_area_access_error()

Type	Parameter	Key	Value
PARAM_VALUE	0	regs	4096-ptr_max
PARAM_VALUE	3	mm	0
PARAM_VALUE	4	vma	4096-ptr_max
PARAM_VALUE	4	vma->vm_end	1-u64max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->delays->blkio_count	0-4294967295
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->delays->blkio_delay_max	0-s64max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->delays->blkio_delay_min	0-s64max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->ptracer_cred->process_keyring->user->qnbytes	s32min-s32max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->ptracer_cred->process_keyring->user->qnkeys	s32min-s32max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->ptracer_cred->request_key_auth->user->qnbytes	s32min-s32max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->ptracer_cred->request_key_auth->user->qnkeys	s32min-s32max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->ptracer_cred->session_keyring->user->qnbytes	s32min-s32max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->ptracer_cred->session_keyring->user->qnkeys	s32min-s32max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->ptracer_cred->thread_keyring->user->qnbytes	s32min-s32max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->ptracer_cred->thread_keyring->user->qnkeys	s32min-s32max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->sched_class->uclamp_enabled	0-1
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->sched_task_group->idle	s32min-s32max
PARAM_VALUE	4	vma->vm_refcnt.refs.counter	(-1073741824),0-s32max
CAPPED_DATA	0	regs	1
CAPPED_DATA	2	address	1
CAPPED_DATA	2	address	1
CAPPED_DATA	4	vma->vm_mm	1
CAPPED_DATA	4	vma->vm_start	1
DATA_SOURCE	0	regs	$0
DATA_SOURCE	1	error_code	$1
DATA_SOURCE	2	address	$2
DATA_SOURCE	4	vma	r lock_vma_under_rcu
BIT_INFO	0	regs->flags	0x200,0xffffffffffffffff
NOCHECK_CALL

arch/x86/mm/fault.c do_user_addr_fault() -> bad_area_access_error()

Type	Parameter	Key	Value
PARAM_VALUE	0	regs	4096-ptr_max
PARAM_VALUE	3	mm	4096-ptr_max
PARAM_VALUE	3	mm->mm_mt.ma_root	1-u64max
PARAM_VALUE	3	mm->mmap_lock.first_waiter->handoff_set	0-1
PARAM_VALUE	3	mm->mmap_lock.first_waiter->type	0-1
PARAM_VALUE	4	vma	4096-ptr_max
PARAM_VALUE	4	vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set	0-1
PARAM_VALUE	4	vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type	0-1
PARAM_VALUE	4	vma->vm_mm->mmap_lock.first_waiter->handoff_set	0-1
PARAM_VALUE	4	vma->vm_mm->mmap_lock.first_waiter->type	0-1
PARAM_VALUE	4	vma->vm_mm->page_table_lock.rlock.dep_map->name	0-255
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->blocked_on	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_bw	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_deadline	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_defer	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_defer_armed	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_defer_running	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_density	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_non_contending	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_overrun	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_period	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_runtime	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_server	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_throttled	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->dl_yielded	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.pi_se->flags	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->dl.rq->nr_running	0-4294967295
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->is_blocked	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->pushable_dl_tasks.__rb_parent_color	1
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->pushable_tasks.node_list.prev->next	4096-ptr_max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->pushable_tasks.prio_list.next->prev	4096-ptr_max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->pushable_tasks.prio_list.prev->next	4096-ptr_max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->rseq.event.ids_changed	1
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->sched_class->uclamp_enabled	0-1
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->curr	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->propagate	1
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->removed.load_avg	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->removed.lock.owner	(-1)
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->removed.lock.owner_cpu	4294967295
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->removed.nr	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->removed.runnable_avg	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->removed.util_avg	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->curr->mm->sc_stat.cpu	(-1)
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->donor->is_blocked	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->donor->on_rq	0-1,3-255
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->donor->rseq.event.ids_changed	1
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->donor->saved_state	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->donor->sched_migrated	1
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->donor->se.my_q->propagate	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->donor->wake_cpu	0-s32max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->dl_bw	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->dl_deadline	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->dl_defer	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->dl_density	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->dl_overrun	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->dl_period	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->dl_runtime	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->dl_server	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->dl_throttled	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->dl_yielded	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->rq->fair_server.pi_se->flags	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->tasks_timeline.rb_leftmost->rb_left	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.cfs_rq->tasks_timeline.rb_leftmost->rb_right	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.my_q->prop_runnable_sum	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->se.my_q->propagate	0
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->throttle_node.next->prev	4096-ptr_max
PARAM_VALUE	4	vma->vm_mm->vma_writer_wait.task->wake_cpu	0-s32max
PARAM_VALUE	4	vma->vm_private_data->rw_sema.dep_map->name	0-255
PARAM_VALUE	4	vma->vm_private_data->rw_sema.first_waiter->handoff_set	1
PARAM_VALUE	4	vma->vm_private_data->rw_sema.first_waiter->list.next	2212933610777083904
PARAM_VALUE	4	vma->vm_private_data->rw_sema.first_waiter->list.prev	2212933610777083904
PARAM_VALUE	4	vma->vm_private_data->rw_sema.first_waiter->type	0-1
PARAM_VALUE	4	vma->vmlock_dep_map->name	0-255
CAPPED_DATA	0	regs	1
CAPPED_DATA	3	mm	1
CAPPED_DATA	3	mm->mm_mt.ma_root	1
DATA_SOURCE	0	regs	$0
DATA_SOURCE	1	error_code	$1
DATA_SOURCE	2	address	$2
DATA_SOURCE	4	vma	r lock_mm_and_find_vma
BIT_INFO	0	regs->flags	0x200,0xffffffffffffffff
NOCHECK_CALL
UNITS	3	mm	unit_byte