Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
fs/btrfs/extent_io.c __write_extent_buffer() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->fh_to_parent | 0,4672,5297,4573560380487,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000-s64max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 0 | eb->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->lock.first_waiter->type | 0-1 |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb->fs_info | (-1),11312 |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $2 |
| DATA_SOURCE | 2 | len | $3 |
| STR_LEN | 0 | eb | (-1)-1010101 |
| STR_LEN | 0 | eb | (-1)-1010101 |
| NOSPEC | 2 | len | |
| NOSPEC | 2 | len | |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | len | 0-4000000 |
| NO_OVERFLOW_SIMPLE | 0 | eb->len | |
| NO_OVERFLOW_SIMPLE | 0 | eb->start | |
| NO_OVERFLOW_SIMPLE | 1 | start | |
| UNITS | 1 | start | unit_byte |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | 0 | &eb->lock |
fs/btrfs/extent_io.c copy_extent_buffer() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | eb->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->lock.first_waiter->type | 0-1 |
| BUF_SIZE | 0 | eb | (-1),1-s32max |
| BUF_SIZE | 0 | eb | (-1),1-s32max |
| CAPPED_DATA | 0 | eb | 1 |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $2 |
| DATA_SOURCE | 2 | len | $4 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | eb->len | |
| NO_OVERFLOW_SIMPLE | 0 | eb->start | |
| UNITS | 1 | start | unit_byte |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | 0 | &eb->lock |
fs/btrfs/extent_io.c copy_extent_buffer() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | eb->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->lock.first_waiter->type | 0-1 |
| DATA_SOURCE | 0 | eb | $1 |
| DATA_SOURCE | 1 | start | $3 |
| DATA_SOURCE | 2 | len | $4 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | eb->len | |
| NO_OVERFLOW_SIMPLE | 0 | eb->start | |
| NO_OVERFLOW_SIMPLE | 2 | len | |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | 0 | &eb->lock |
fs/btrfs/extent_io.c extent_buffer_get_byte() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 2 | len | 1 |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb->fs_info | (-1),11312 |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | eb->len | |
| NO_OVERFLOW_SIMPLE | 0 | eb->start | |
| UNITS | 1 | start | unit_byte |
fs/btrfs/extent_io.c memcmp_extent_buffer() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 1 | start | 32,101-18446744073709547520 |
| PARAM_VALUE | 2 | len | 0-s32max,18446744071562067968-u64max |
| BUF_SIZE | 0 | eb | (-1),1-s32max |
| BUF_SIZE | 0 | eb | (-1),1-s32max |
| CAPPED_DATA | 2 | len | 1 |
| CAPPED_DATA | 2 | len | 1 |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $2 |
| DATA_SOURCE | 2 | len | $3 |
| FUZZY_MAX | 1 | start | 18446744073709547520 |
| STR_LEN | 0 | eb | (-1),6 |
| STR_LEN | 0 | eb | (-1),6 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 2 | len | |
| UNITS | 1 | start | unit_byte |
| UNITS | 2 | len | unit_byte |
fs/btrfs/extent_io.c memcpy_extent_buffer() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | eb->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | start | 0-18446744073709551614 |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb->fs_info | (-1),11312 |
| CAPPED_DATA | 0 | eb | 1 |
| CAPPED_DATA | 1 | start | 1 |
| CAPPED_DATA | 1 | start | 1 |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $1 |
| DATA_SOURCE | 2 | len | $3 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | eb->len | |
| NO_OVERFLOW_SIMPLE | 0 | eb->start | |
| NO_OVERFLOW_SIMPLE | 1 | start | |
| NO_OVERFLOW_SIMPLE | 2 | len | |
| UNITS | 1 | start | unit_byte |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | 0 | &eb->lock |
fs/btrfs/extent_io.c memcpy_extent_buffer() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | eb->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 1 | start | 1-u64max |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb->fs_info | (-1),11312 |
| CAPPED_DATA | 0 | eb | 1 |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $2 |
| DATA_SOURCE | 2 | len | $3 |
| PARAM_COMPARE | 0 | eb->len | >= $2 |
| PARAM_COMPARE | 2 | len | <= $0->len |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | eb->len | |
| NO_OVERFLOW_SIMPLE | 0 | eb->start | |
| NO_OVERFLOW_SIMPLE | 1 | start | |
| NO_OVERFLOW_SIMPLE | 2 | len | |
| UNITS | 1 | start | unit_byte |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | 0 | &eb->lock |
fs/btrfs/extent_io.c memmove_extent_buffer() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | eb->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->lock.first_waiter->type | 0-1 |
| CAPPED_DATA | 0 | eb | 1 |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $1 |
| DATA_SOURCE | 2 | len | $3 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | eb->len | |
| NO_OVERFLOW_SIMPLE | 0 | eb->start | |
| UNITS | 1 | start | unit_byte |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | &fs_info->tree_mod_log_lock | ||
| HALF_LOCKED2 | 0 | &eb->lock |
fs/btrfs/extent_io.c memmove_extent_buffer() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | eb->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->lock.first_waiter->type | 0-1 |
| CAPPED_DATA | 0 | eb | 1 |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $2 |
| DATA_SOURCE | 2 | len | $3 |
| PARAM_COMPARE | 0 | eb->len | >= $2 |
| PARAM_COMPARE | 2 | len | <= $0->len |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | eb->len | |
| NO_OVERFLOW_SIMPLE | 0 | eb->start | |
| NO_OVERFLOW_SIMPLE | 2 | len | |
| UNITS | 1 | start | unit_byte |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | &fs_info->tree_mod_log_lock | ||
| HALF_LOCKED2 | 0 | &eb->lock |
fs/btrfs/extent_io.c memzero_extent_buffer() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 0 | eb->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->lock.first_waiter->type | 0-1 |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| CAPPED_DATA | 0 | eb | 1 |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $1 |
| DATA_SOURCE | 2 | len | $2 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | start | unit_byte |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | 0 | &eb->lock |
fs/btrfs/extent_io.c read_extent_buffer() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->fh_to_parent | 0,4672,5297,4573560380487,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000-s64max |
| PARAM_VALUE | 0 | eb->fs_info->btree_inode->i_mapping->host->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 0 | eb->fs_info->remap_root->node->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->fs_info->remap_root->node->lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | eb->fs_info->stripe_root->node->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->fs_info->stripe_root->node->lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | eb->lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | eb->lock.first_waiter->type | 0-1 |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb | (-1)-s32max |
| BUF_SIZE | 0 | eb->fs_info | (-1),11312 |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $2 |
| DATA_SOURCE | 2 | len | $3 |
| NOSPEC | 2 | len | |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | len | 0-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | eb->len | |
| NO_OVERFLOW_SIMPLE | 0 | eb->start | |
| NO_OVERFLOW_SIMPLE | 1 | start | |
| UNITS | 1 | start | unit_byte |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | &bg->free_space_lock | ||
| HALF_LOCKED2 | &fs_devices->device_list_mutex | ||
| HALF_LOCKED2 | &fs_info->remap_mutex | ||
| HALF_LOCKED2 | &inode->vfs_inode.i_rwsem | ||
| HALF_LOCKED2 | &sb->s_umount | ||
| HALF_LOCKED2 | global &uuid_mutex | ||
| HALF_LOCKED2 | 0 | &eb->lock |
fs/btrfs/extent_io.c read_extent_buffer_to_user_nofault() -> check_eb_range()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | eb | 4096-ptr_max |
| PARAM_VALUE | 1 | start | 101-4294967396 |
| PARAM_VALUE | 2 | len | 1-u32max |
| DATA_SOURCE | 0 | eb | $0 |
| DATA_SOURCE | 1 | start | $2 |
| DATA_SOURCE | 2 | len | $3 |
| CAPABLE | 0 | 21 | |
| UNITS | 2 | len | unit_byte |