Documented in 1 files:
Defined in 4 files as a function:
- drivers/android/binder_alloc.c, line 1303 (as a function)
- fs/ext4/extents-test.c, line 353 (as a function)
- kernel/trace/ring_buffer.c, line 4657 (as a function)
- kernel/trace/ring_buffer.c, line 4712 (as a function)
Referenced in 3 files:
Smatch caller information:
drivers/android/binder_alloc.c binder_alloc_copy_user_to_buffer() -> check_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| BUF_SIZE | 1 | c->transaction | (-1),232 |
| CAPPED_DATA | 3 | bytes | 1 |
| CAPPED_DATA | 3 | bytes | 1 |
| DATA_SOURCE | 0 | buf | $0 |
| DATA_SOURCE | 1 | c | $1 |
| DATA_SOURCE | 2 | size | $2 |
| DATA_SOURCE | 3 | bytes | $4 |
| NOSPEC | 1 | c->data_size | |
| USER_DATA | 0 | buf->free_async_space | 1-9223372036854775798[c][u] |
| USER_DATA | 1 | c->async_transaction | 0-1 |
| USER_DATA | 1 | c->clear_on_free | 0-1 |
| USER_DATA | 1 | c->data_size | 0-u64max[c] |
| USER_DATA | 1 | c->extra_buffers_size | 0-u64max[c] |
| USER_DATA | 1 | c->offsets_size | 0-u64max[c] |
| USER_DATA | 2 | size | 0,8-u64max[c] |
| USER_DATA | 3 | bytes | 0-u64max[c] |
| UNITS | 2 | size | unit_byte |
| UNITS | 3 | bytes | unit_byte |
drivers/android/binder_alloc.c binder_alloc_do_buffer_copy() -> check_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 3 | bytes | 0,4-40 |
| BUF_SIZE | 1 | c->transaction | (-1),232 |
| CAPPED_DATA | 3 | bytes | 1 |
| CAPPED_DATA | 3 | bytes | 1 |
| DATA_SOURCE | 0 | buf | $0 |
| DATA_SOURCE | 1 | c | $2 |
| DATA_SOURCE | 2 | size | $3 |
| DATA_SOURCE | 3 | bytes | $5 |
| NOSPEC | 1 | c->data_size | |
| NOSPEC | 2 | size | |
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | buf->free_async_space | 1-9223372036854775798[c][u] |
| USER_DATA | 1 | c->async_transaction | 0-1 |
| USER_DATA | 1 | c->clear_on_free | 0-1 |
| USER_DATA | 1 | c->data_size | 0-u64max[c] |
| USER_DATA | 1 | c->extra_buffers_size | 0-u64max[c] |
| USER_DATA | 1 | c->offsets_size | 0-u64max[c] |
| USER_DATA | 1 | c->user_data | 0-u64max[c] |
| USER_DATA | 2 | size | 0,8-u64max[c] |
| UNITS | 2 | size | unit_byte |
| UNITS | 3 | bytes | unit_byte |
fs/ext4/extents-test.c test_split_convert() -> check_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | c | 88 |
| BUF_SIZE | 0 | buf | 12288 |
fs/ext4/extents-test.c test_split_convert() -> check_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | buf | 0-ptr_max |
kernel/trace/ring_buffer.c __rb_reserve_next() -> check_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | buf | 4096-ptr_max |
| PARAM_VALUE | 0 | buf->buffer | 4096-ptr_max |
| PARAM_VALUE | 0 | buf->buffer->subbuf_size | 0-1048574 |
| PARAM_VALUE | 0 | buf->tail_page | 4096-ptr_max |
| PARAM_VALUE | 1 | c | 4653157460438704128 |
| PARAM_VALUE | 1 | c->add_timestamp | 0,2,4,6,10,14 |
| PARAM_VALUE | 1 | c->tail_page | 4096-ptr_max |
| PARAM_VALUE | 2 | size | 1 |
| CAPPED_DATA | 0 | buf->buffer->subbuf_size | 1 |
| DATA_SOURCE | 0 | buf | $0 |
| DATA_SOURCE | 1 | c | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | c->length | 0-4228,18446744073709,18446744073717,18446744073709551592,18446 |
kernel/trace/ring_buffer.c __rb_reserve_next() -> check_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | buf | 4096-ptr_max |
| PARAM_VALUE | 0 | buf->buffer | 4096-ptr_max |
| PARAM_VALUE | 0 | buf->tail_page | 4096-ptr_max |
| PARAM_VALUE | 1 | c | 4653157460438704128 |
| PARAM_VALUE | 1 | c->add_timestamp | 0,2,4,6,10,14 |
| PARAM_VALUE | 1 | c->tail_page | 4096-ptr_max |
| PARAM_VALUE | 2 | size | 0-1048575 |
| CAPPED_DATA | 2 | size | 1 |
| CAPPED_DATA | 2 | size | 1 |
| DATA_SOURCE | 0 | buf | $0 |
| DATA_SOURCE | 1 | c | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | c->length | 0-4228,18446744073709,18446744073717,18446744073709551592,18446 |