Documented in 1 files:
Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/android/binder_alloc.c binder_alloc_clear_buf() -> binder_alloc_get_page()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | alloc | 4096-ptr_max |
| PARAM_VALUE | 1 | buffer | 4096-ptr_max |
| PARAM_VALUE | 3 | pgoffp | 7147643518200459264 |
| DATA_SOURCE | 0 | alloc | $0 |
| DATA_SOURCE | 1 | buffer | $1 |
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | alloc->free_async_space | 1-9223372036854775798[c][u] |
| USER_DATA | 1 | buffer->async_transaction | 0-1 |
| USER_DATA | 1 | buffer->data_size | 0-u64max[c] |
| USER_DATA | 1 | buffer->extra_buffers_size | 0-u64max[c] |
| USER_DATA | 1 | buffer->offsets_size | 0-u64max[c] |
| USER_DATA | 1 | buffer->user_data | 0-u64max[c] |
| USER_DATA | 2 | buffer_offset | 1-4096[c][u] |
| HALF_LOCKED2 | 0 | &alloc->mutex |
drivers/android/binder_alloc.c binder_alloc_copy_user_to_buffer() -> binder_alloc_get_page()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | buffer | 4096-ptr_max |
| PARAM_VALUE | 3 | pgoffp | 421448160055083008 |
| BUF_SIZE | 1 | buffer->transaction | (-1),232 |
| DATA_SOURCE | 0 | alloc | $0 |
| DATA_SOURCE | 1 | buffer | $1 |
| DATA_SOURCE | 2 | buffer_offset | $2 [m] |
| NOSPEC | 1 | buffer->data_size | |
| USER_DATA | 0 | alloc->free_async_space | 1-9223372036854775798[c][u] |
| USER_DATA | 1 | buffer->async_transaction | 0-1 |
| USER_DATA | 1 | buffer->clear_on_free | 0-1 |
| USER_DATA | 1 | buffer->data_size | 0-u64max[c] |
| USER_DATA | 1 | buffer->extra_buffers_size | 0-u64max[c] |
| USER_DATA | 1 | buffer->offsets_size | 0-u64max[c] |
| USER_DATA | 2 | buffer_offset | 0-u64max[c] |
| UNITS | 2 | buffer_offset | unit_byte |
drivers/android/binder_alloc.c binder_alloc_do_buffer_copy() -> binder_alloc_get_page()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | buffer | 4096-ptr_max |
| PARAM_VALUE | 3 | pgoffp | 5781678127732350976 |
| BUF_SIZE | 1 | buffer->transaction | (-1),232 |
| DATA_SOURCE | 0 | alloc | $0 |
| DATA_SOURCE | 1 | buffer | $2 |
| DATA_SOURCE | 2 | buffer_offset | $3 [m] |
| NOSPEC | 1 | buffer->data_size | |
| NOSPEC | 2 | buffer_offset | |
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | alloc->free_async_space | 1-9223372036854775798[c][u] |
| USER_DATA | 1 | buffer->async_transaction | 0-1 |
| USER_DATA | 1 | buffer->clear_on_free | 0-1 |
| USER_DATA | 1 | buffer->data_size | 0-u64max[c] |
| USER_DATA | 1 | buffer->extra_buffers_size | 0-u64max[c] |
| USER_DATA | 1 | buffer->offsets_size | 0-u64max[c] |
| USER_DATA | 1 | buffer->user_data | 0-u64max[c] |
| USER_DATA | 2 | buffer_offset | 0-u64max[c] |
| UNITS | 2 | buffer_offset | unit_byte |