Open Menu /

Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

kernel/bpf/verifier.c check_atomic_rmw() -> check_mem_access()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->prog->insnsi 4096-ptr_max
PARAM_VALUE 2 reg 4096-ptr_max
PARAM_VALUE 5 bpf_size 0,8-24
PARAM_VALUE 6 t 1
PARAM_VALUE 7 value_regno (-1)
PARAM_VALUE 8 strict_alignment_once 1
PARAM_VALUE 9 is_ldsx 0
DATA_SOURCE 0 env $0
BIT_INFO 5 bpf_size 0x0,0x18
UNITS 1 insn_idx unit_array_size

kernel/bpf/verifier.c check_atomic_rmw() -> check_mem_access()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_hist_ent 0,4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->idmap_scratch.cnt 0-5
PARAM_VALUE 0 env->ops->gen_ld_abs 0,5704186734949433344
PARAM_VALUE 0 env->prog->aux->max_ctx_offset 1-u32max
PARAM_VALUE 0 env->prog->insnsi 4096-ptr_max
PARAM_VALUE 0 *env->log.kbuf 0-255
PARAM_VALUE 0 *env->tmp_arg_name 0-255
PARAM_VALUE 0 *env->tmp_str_buf 0-255
PARAM_VALUE 2 reg 4096-ptr_max
PARAM_VALUE 5 bpf_size 0,8,16,24
PARAM_VALUE 6 t 1
PARAM_VALUE 7 value_regno 0-9,11-15
PARAM_VALUE 8 strict_alignment_once 1
PARAM_VALUE 9 is_ldsx 0
DATA_SOURCE 0 env $0
BIT_INFO 5 bpf_size 0x0,0x18
UNITS 1 insn_idx unit_array_size

kernel/bpf/verifier.c check_atomic_rmw() -> check_mem_access()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_hist_ent 0,4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->idmap_scratch.cnt 0-5
PARAM_VALUE 0 env->ops->gen_ld_abs 0,5704186734949433344
PARAM_VALUE 0 env->prog->aux->max_ctx_offset 1-u32max
PARAM_VALUE 0 env->prog->insnsi 4096-ptr_max
PARAM_VALUE 0 *env->log.kbuf 0-255
PARAM_VALUE 0 *env->tmp_arg_name 0-255
PARAM_VALUE 0 *env->tmp_str_buf 0-255
PARAM_VALUE 2 reg 4096-ptr_max
PARAM_VALUE 5 bpf_size 0,8,16,24
PARAM_VALUE 6 t 2
PARAM_VALUE 7 value_regno (-1)
PARAM_VALUE 8 strict_alignment_once 1
PARAM_VALUE 9 is_ldsx 0
DATA_SOURCE 0 env $0
BIT_INFO 5 bpf_size 0x0,0x18
UNITS 1 insn_idx unit_array_size

kernel/bpf/verifier.c check_helper_call() -> check_mem_access()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->ops->gen_ld_abs 0,5704186734949433344
PARAM_VALUE 0 env->ops->get_func_proto 1-u64max
PARAM_VALUE 0 env->prog 4096-ptr_max
PARAM_VALUE 0 *env->log.kbuf 0-255
PARAM_VALUE 0 *env->tmp_arg_name 0-255
PARAM_VALUE 0 *env->tmp_str_buf 0-255
PARAM_VALUE 2 reg 4096-ptr_max
PARAM_VALUE 4 off 0-s32max
PARAM_VALUE 5 bpf_size 16
PARAM_VALUE 6 t 2
PARAM_VALUE 7 value_regno (-1)
PARAM_VALUE 8 strict_alignment_once 0
PARAM_VALUE 9 is_ldsx 0
CAPPED_DATA 4 off 1
DATA_SOURCE 0 env $0
UNITS 4 off unit_byte

kernel/bpf/verifier.c check_load_mem() -> check_mem_access()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->cur_state->frame 4096-ptr_max
PARAM_VALUE 0 env->prog->insnsi 4096-ptr_max
PARAM_VALUE 5 bpf_size 0,8-24
PARAM_VALUE 6 t 1
DATA_SOURCE 0 env $0
DATA_SOURCE 8 strict_alignment_once $2
DATA_SOURCE 9 is_ldsx $3
STR_LEN 0 env 3,11
STR_LEN 0 env 3,11
BIT_INFO 5 bpf_size 0x0,0x18
UNITS 1 insn_idx unit_array_size

kernel/bpf/verifier.c check_store_reg() -> check_mem_access()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->cur_state->frame 4096-ptr_max
PARAM_VALUE 0 env->prog->insnsi 4096-ptr_max
PARAM_VALUE 5 bpf_size 0,8-24
PARAM_VALUE 6 t 2
PARAM_VALUE 9 is_ldsx 0
DATA_SOURCE 0 env $0
DATA_SOURCE 8 strict_alignment_once $2
BIT_INFO 5 bpf_size 0x0,0x18
UNITS 1 insn_idx unit_array_size

kernel/bpf/verifier.c do_check_insn() -> check_mem_access()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->prog->insnsi 4096-ptr_max
PARAM_VALUE 2 reg 4096-ptr_max
PARAM_VALUE 5 bpf_size 0,8-24
PARAM_VALUE 6 t 2
PARAM_VALUE 7 value_regno (-1)
PARAM_VALUE 8 strict_alignment_once 0
PARAM_VALUE 9 is_ldsx 0
DATA_SOURCE 0 env $0
BIT_INFO 3 argno 0x0,0x7fffffff
BIT_INFO 5 bpf_size 0x0,0x18
UNITS 1 insn_idx unit_array_size

kernel/bpf/verifier.c process_dynptr_func() -> check_mem_access()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->ops->gen_ld_abs 0,4096-ptr_max
PARAM_VALUE 0 env->prog 4096-ptr_max
PARAM_VALUE 0 *env->log.kbuf 0-255
PARAM_VALUE 0 *env->tmp_arg_name 0-255
PARAM_VALUE 2 reg 4096-ptr_max
PARAM_VALUE 2 reg->type 6
PARAM_VALUE 4 off 0,8-15
PARAM_VALUE 5 bpf_size 24
PARAM_VALUE 6 t 2
PARAM_VALUE 7 value_regno (-1)
PARAM_VALUE 8 strict_alignment_once 0
PARAM_VALUE 9 is_ldsx 0
DATA_SOURCE 0 env $0
DATA_SOURCE 1 insn_idx $3
DATA_SOURCE 2 reg $1
DATA_SOURCE 3 argno $2
FUZZY_MAX 4 off 0
NO_OVERFLOW_SIMPLE 0 env->cur_state->jmp_history_cnt
UNITS 4 off unit_byte

kernel/bpf/verifier.c process_irq_flag() -> check_mem_access()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->log.ubuf 0
PARAM_VALUE 0 *env->log.kbuf 0-255
PARAM_VALUE 2 reg 4096-ptr_max
PARAM_VALUE 4 off 0
PARAM_VALUE 5 bpf_size 24
PARAM_VALUE 6 t 2
PARAM_VALUE 7 value_regno (-1)
PARAM_VALUE 8 strict_alignment_once 0
PARAM_VALUE 9 is_ldsx 0
DATA_SOURCE 0 env $0
DATA_SOURCE 2 reg $1
DATA_SOURCE 3 argno $2
UNITS 1 insn_idx unit_array_size

kernel/bpf/verifier.c process_iter_arg() -> check_mem_access()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->insn_aux_data 4096-ptr_max
PARAM_VALUE 0 env->ops->gen_ld_abs 0,5704186734949433344
PARAM_VALUE 0 env->prog 4096-ptr_max
PARAM_VALUE 0 env->prog->aux 4096-ptr_max
PARAM_VALUE 0 env->prog->aux->kfunc_tab 4096-ptr_max
PARAM_VALUE 0 env->prog->insnsi 4096-ptr_max
PARAM_VALUE 0 env->subprog_info 4096-ptr_max
PARAM_VALUE 0 *env->log.kbuf 0-255
PARAM_VALUE 0 *env->tmp_str_buf 0-255
PARAM_VALUE 2 reg 4096-ptr_max
PARAM_VALUE 4 off 0,8-2147483646
PARAM_VALUE 5 bpf_size 24
PARAM_VALUE 6 t 2
PARAM_VALUE 7 value_regno (-1)
PARAM_VALUE 8 strict_alignment_once 0
PARAM_VALUE 9 is_ldsx 0
CAPPED_DATA 4 off 1
DATA_SOURCE 0 env $0
DATA_SOURCE 1 insn_idx $3
DATA_SOURCE 2 reg $1
DATA_SOURCE 3 argno $2