Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/android/binder_alloc.c binder_alloc_copy_from_buffer() -> binder_alloc_do_buffer_copy()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | alloc | 4096-ptr_max |
| PARAM_VALUE | 1 | to_buffer | 0 |
| PARAM_VALUE | 5 | bytes | 4-40 |
| BUF_SIZE | 2 | buffer->transaction | (-1),232 |
| BUF_SIZE | 4 | ptr | (-1),4,8 |
| BUF_SIZE | 4 | ptr | (-1),4,8 |
| CAPPED_DATA | 5 | bytes | 1 |
| CAPPED_DATA | 5 | bytes | 1 |
| DATA_SOURCE | 0 | alloc | $0 |
| DATA_SOURCE | 2 | buffer | $2 |
| DATA_SOURCE | 3 | buffer_offset | $3 |
| DATA_SOURCE | 4 | ptr | $1 |
| DATA_SOURCE | 5 | bytes | $4 |
| NOSPEC | 2 | buffer->data_size | |
| NOSPEC | 3 | buffer_offset | |
| NOSPEC | 3 | buffer_offset | |
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | alloc->free_async_space | 1-9223372036854775798[c][u] |
| USER_DATA | 2 | buffer->async_transaction | 0-1 |
| USER_DATA | 2 | buffer->clear_on_free | 0-1 |
| USER_DATA | 2 | buffer->data_size | 0-u64max[c] |
| USER_DATA | 2 | buffer->extra_buffers_size | 0-u64max[c] |
| USER_DATA | 2 | buffer->offsets_size | 0-u64max[c] |
| USER_DATA | 2 | buffer->user_data | 0-u64max[c] |
| USER_DATA | 3 | buffer_offset | 0,8-18446744073709551614[c] |
| UNITS | 3 | buffer_offset | unit_byte |
| UNITS | 5 | bytes | unit_byte |
drivers/android/binder_alloc.c binder_alloc_copy_to_buffer() -> binder_alloc_do_buffer_copy()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | to_buffer | 1 |
| PARAM_VALUE | 5 | bytes | 0,4,8,24 |
| BUF_SIZE | 2 | buffer->transaction | (-1),232 |
| BUF_SIZE | 4 | ptr | (-1),4,8 |
| BUF_SIZE | 4 | ptr | (-1),4,8 |
| DATA_SOURCE | 0 | alloc | $0 |
| DATA_SOURCE | 2 | buffer | $1 |
| DATA_SOURCE | 3 | buffer_offset | $2 |
| DATA_SOURCE | 4 | ptr | $3 |
| DATA_SOURCE | 5 | bytes | $4 |
| NOSPEC | 2 | buffer->data_size | |
| HARD_MAX | 5 | bytes | 24 |
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | alloc->free_async_space | 1-9223372036854775798[c][u] |
| USER_DATA | 2 | buffer->async_transaction | 0-1 |
| USER_DATA | 2 | buffer->clear_on_free | 0-1 |
| USER_DATA | 2 | buffer->data_size | 0-u64max[c] |
| USER_DATA | 2 | buffer->extra_buffers_size | 0-u64max[c] |
| USER_DATA | 2 | buffer->offsets_size | 0-u64max[c] |
| USER_DATA | 3 | buffer_offset | 0,8-u64max[c] |
| UNITS | 3 | buffer_offset | unit_byte |
| UNITS | 4 | ptr | unit_byte |
| UNITS | 5 | bytes | unit_byte |