Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
fs/kernfs/file.c kernfs_vma_open() -> (struct vm_operations_struct)->open()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | area | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_file | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_parent | 0,5297,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | area->vm_file->private_data | 4096-ptr_max |
| BUF_SIZE | 0 | area | (-1)-s32max |
| BUF_SIZE | 0 | area | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_file | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_mm | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_ops | (-1),144 |
| BUF_SIZE | 0 | area->vm_private_data | (-1),24 |
| DATA_SOURCE | 0 | area | $0 |
| NOSPEC | 0 | area->vm_end | |
| NOSPEC | 0 | area->vm_pgoff | |
| NOSPEC | 0 | area->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | area->pfnmap_track_ctx->pfn | 0-13510803177078779[c] |
| USER_DATA | 0 | area->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | area->vm_end | 0-u64max |
| USER_DATA | 0 | area->vm_pgoff | 0-13510803177078779[c] |
| USER_DATA | 0 | area->vm_start | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_policy->mode | |
| HALF_LOCKED2 | &dev->attach_lock | ||
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &oldmm->mmap_lock |
mm/mmap.c dup_mmap() -> (struct vm_operations_struct)->open()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | area | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_name | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.next | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | area->flags.__vma_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | area->numab_state | 0 |
| PARAM_VALUE | 0 | area->pfnmap_track_ctx | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | area->vm_mm | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->context.execute_only_pkey | (-1) |
| PARAM_VALUE | 0 | area->vm_mm->context.ldt | 0 |
| PARAM_VALUE | 0 | area->vm_mm->context.ldt_usr_sem.count.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->context.ldt_usr_sem.first_waiter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->context.ldt_usr_sem.magic | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->context.ldt_usr_sem.owner.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->context.lock.first_waiter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->context.lock.magic | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->context.lock.osq.tail.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->context.lock.owner.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->context.pkey_allocation_map | 1 |
| PARAM_VALUE | 0 | area->vm_mm->context.tlb_gen.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->context.untag_mask | u64max |
| PARAM_VALUE | 0 | area->vm_mm->def_flags | 0,1073741824 |
| PARAM_VALUE | 0 | area->vm_mm->exe_file | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->hugetlb_usage.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->ioctx_table | 0 |
| PARAM_VALUE | 0 | area->vm_mm->iommu_mm | 0 |
| PARAM_VALUE | 0 | area->vm_mm->locked_vm | 0 |
| PARAM_VALUE | 0 | area->vm_mm->lru_gen.bitmap | 0 |
| PARAM_VALUE | 0 | area->vm_mm->lru_gen.memcg | 0 |
| PARAM_VALUE | 0 | area->vm_mm->map_count | 0-s32max |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.lock.magic | 3735899821 |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.lock.owner | (-1) |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.max_cids | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.mode | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.mutex.first_waiter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.mutex.magic | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.mutex.osq.tail.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.mutex.owner.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.pcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.pcpu_thrs | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.update_deferred | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mm_cid.users | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mm_count.counter | 1 |
| PARAM_VALUE | 0 | area->vm_mm->mm_id | 0-s32max |
| PARAM_VALUE | 0 | area->vm_mm->mm_mt.ma_flags | 771 |
| PARAM_VALUE | 0 | area->vm_mm->mm_mt.ma_root | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mm_users.counter | 1 |
| PARAM_VALUE | 0 | area->vm_mm->mmap_lock.count.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mmap_lock.first_waiter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->mmap_lock.magic | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->mmap_lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | area->vm_mm->mmap_lock.owner.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->notifier_subscriptions | 0 |
| PARAM_VALUE | 0 | area->vm_mm->owner | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->pgd | 18379471554275704832,18446612682070032384 |
| PARAM_VALUE | 0 | area->vm_mm->pinned_vm.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->sc_stat.cpu | (-1) |
| PARAM_VALUE | 0 | area->vm_mm->sc_stat.footprint | 0 |
| PARAM_VALUE | 0 | area->vm_mm->sc_stat.lock.magic | 3735899821 |
| PARAM_VALUE | 0 | area->vm_mm->sc_stat.lock.owner | (-1) |
| PARAM_VALUE | 0 | area->vm_mm->sc_stat.lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | area->vm_mm->sc_stat.nr_running_avg | 0 |
| PARAM_VALUE | 0 | area->vm_mm->sc_stat.pcpu_sched | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->tlb_flush_pending.counter | 0 |
| PARAM_VALUE | 0 | area->vm_mm->uprobes_state.xol_area | 0 |
| PARAM_VALUE | 0 | area->vm_mm->vma_writer_wait.task | 0 |
| PARAM_VALUE | 0 | area->vm_mm->write_protect_seq.sequence | 0 |
| PARAM_VALUE | 0 | area->vm_ops | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_ops->open | 1-u64max |
| PARAM_VALUE | 0 | area->vm_policy | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_policy->refcnt.counter | 1 |
| PARAM_VALUE | 0 | area->vm_refcnt.refs.counter | 0-1 |
| PARAM_VALUE | 0 | area->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | area->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | area->vmlock_dep_map->name | 0-255 |
| PARAM_VALUE | 0 | area->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 0 | area->vmlock_dep_map.lock_type | 0 |
| PARAM_VALUE | 0 | area->vmlock_dep_map.wait_type_outer | 0 |
| CAPPED_DATA | 0 | area->vm_mm->mm_id | 1 |
| DATA_SOURCE | 0 | area | r vm_area_dup |
| CONTAINER | 0 | -0-72+0 | $(-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | area->vm_start | |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
drivers/media/common/videobuf2/videobuf2-vmalloc.c vb2_vmalloc_mmap() -> (struct vm_operations_struct)->open()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | area | 4096-ptr_max |
| PARAM_VALUE | 0 | area->flags.__vma_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_end | 1-u64max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_mm | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->page_table_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | area->vm_ops | 3182637740313296896 |
| PARAM_VALUE | 0 | area->vm_private_data | 4096-ptr_max |
| BUF_SIZE | 0 | area | (-1),1-s32max |
| BUF_SIZE | 0 | area | (-1),1-s32max |
| BUF_SIZE | 0 | area->vm_file | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_ops | 144 |
| BUF_SIZE | 0 | area->vm_private_data | 24 |
| CAPPED_DATA | 0 | area->vm_start | 1 |
| DATA_SOURCE | 0 | area | $1 |
| CONTAINER | 0 | -0-72+0 | $(-1) |
| PARAM_COMPARE | 0 | area->vm_end | > $0->vm_start |
| NOSPEC | 0 | area->vm_pgoff | |
| NOSPEC | 0 | area->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | area->vm_end | 4096-u64max[c] |
| USER_DATA | 0 | area->vm_pgoff | 0-4503599627370495[c] |
| USER_DATA | 0 | area->vm_start | 0-18446744073709547520[c] |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_pgoff | |
| HALF_LOCKED2 | &q->mmap_lock |
mm/vma.c __split_vma() -> (struct vm_operations_struct)->open()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | area | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_name | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.next | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | area->numab_state | 0 |
| PARAM_VALUE | 0 | area->pfnmap_track_ctx | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_file | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_lock_seq | u32max |
| PARAM_VALUE | 0 | area->vm_mm | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_ops | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_ops->open | 1-u64max |
| PARAM_VALUE | 0 | area->vm_policy | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_policy->refcnt.counter | 1 |
| PARAM_VALUE | 0 | area->vm_refcnt.refs.counter | 0 |
| PARAM_VALUE | 0 | area->vmlock_dep_map->name | 0-255 |
| PARAM_VALUE | 0 | area->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 0 | area->vmlock_dep_map.lock_type | 0 |
| PARAM_VALUE | 0 | area->vmlock_dep_map.wait_type_outer | 0 |
| CAPPED_DATA | 0 | area->anon_vma | 1 |
| DATA_SOURCE | 0 | area | r vm_area_dup |
| CONTAINER | 0 | -0-72+0 | $(-1) |
| NOSPEC | 0 | area->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | area->__vm_anon_pgoff_hi | 0-u32max[c] |
| USER_DATA | 0 | area->__vm_anon_pgoff_lo | 0-u32max[c] |
| USER_DATA | 0 | area->vm_end | 0-u64max[c] |
| USER_DATA | 0 | area->vm_pgoff | 0-u64max[c] |
| USER_DATA | 0 | area->vm_start | 0-u64max[c] |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_start | |
| HALF_LOCKED2 | &mm->mmap_lock |
mm/vma.c copy_vma() -> (struct vm_operations_struct)->open()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | area | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_name | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.next | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | area->anon_vma_chain.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | area->numab_state | 0 |
| PARAM_VALUE | 0 | area->pfnmap_track_ctx | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_file | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_lock_seq | u32max |
| PARAM_VALUE | 0 | area->vm_ops | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_ops->open | 1-u64max |
| PARAM_VALUE | 0 | area->vm_policy | 0,4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_policy->refcnt.counter | 1 |
| PARAM_VALUE | 0 | area->vm_refcnt.refs.counter | 0 |
| PARAM_VALUE | 0 | area->vm_start | 0-18446744073709547520 |
| PARAM_VALUE | 0 | area->vmlock_dep_map->name | 0-255 |
| PARAM_VALUE | 0 | area->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 0 | area->vmlock_dep_map.lock_type | 0 |
| PARAM_VALUE | 0 | area->vmlock_dep_map.wait_type_outer | 0 |
| CAPPED_DATA | 0 | area->anon_vma | 1 |
| DATA_SOURCE | 0 | area | r vm_area_dup |
| CONTAINER | 0 | -0-72+0 | $(-1) |
| NOSPEC | 0 | area->vm_start | |
| NOCHECK_CALL | |||
| USER_DATA | 0 | area->__vm_anon_pgoff_hi | 0-u32max[c] |
| USER_DATA | 0 | area->__vm_anon_pgoff_lo | 0-u32max[c] |
| USER_DATA | 0 | area->vm_pgoff | 0-u64max[c] |
| USER_DATA | 0 | area->vm_start | 1-18446744073709547520 |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_start | |
| LOCK2 | &mm->mmap_lock | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
fs/coda/file.c coda_vm_open() -> (struct vm_operations_struct)->open()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | area | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_parent | 0,5297,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| BUF_SIZE | 0 | area | (-1)-s32max |
| BUF_SIZE | 0 | area | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_file | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_mm | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_ops | (-1),144 |
| BUF_SIZE | 0 | area->vm_private_data | (-1),24 |
| DATA_SOURCE | 0 | area | $0 |
| NOSPEC | 0 | area->vm_end | |
| NOSPEC | 0 | area->vm_pgoff | |
| NOSPEC | 0 | area->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | area->pfnmap_track_ctx->pfn | 0-13510803177078779[c] |
| USER_DATA | 0 | area->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | area->vm_end | 0-u64max |
| USER_DATA | 0 | area->vm_pgoff | 0-13510803177078779[c] |
| USER_DATA | 0 | area->vm_start | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_policy->mode | |
| HALF_LOCKED2 | &dev->attach_lock | ||
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &oldmm->mmap_lock |
drivers/media/common/videobuf2/videobuf2-dma-sg.c vb2_dma_sg_mmap() -> (struct vm_operations_struct)->open()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | area | 4096-ptr_max |
| PARAM_VALUE | 0 | area->flags.__vma_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_mm | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_mm->page_table_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | area->vm_ops | 3182637740313296896 |
| PARAM_VALUE | 0 | area->vm_private_data | 4096-ptr_max |
| BUF_SIZE | 0 | area | (-1),1-s32max |
| BUF_SIZE | 0 | area | (-1),1-s32max |
| BUF_SIZE | 0 | area->vm_file | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_ops | 144 |
| BUF_SIZE | 0 | area->vm_private_data | 24 |
| CAPPED_DATA | 0 | area->vm_start | 1 |
| DATA_SOURCE | 0 | area | $1 |
| CONTAINER | 0 | -0-72+0 | $(-1) |
| NOSPEC | 0 | area->vm_pgoff | |
| NOSPEC | 0 | area->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | area->vm_end | 4096-u64max[c] |
| USER_DATA | 0 | area->vm_pgoff | 0-4503599627370495[c] |
| USER_DATA | 0 | area->vm_start | 0-18446744073709547520[c] |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_pgoff | |
| HALF_LOCKED2 | &q->mmap_lock |
drivers/media/common/videobuf2/videobuf2-dma-contig.c vb2_dc_mmap() -> (struct vm_operations_struct)->open()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | area | 4096-ptr_max |
| PARAM_VALUE | 0 | area->flags.__vma_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | area->vm_mm | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_ops | 3182637740313296896 |
| PARAM_VALUE | 0 | area->vm_private_data | 4096-ptr_max |
| BUF_SIZE | 0 | area | (-1),1-s32max |
| BUF_SIZE | 0 | area | (-1),1-s32max |
| BUF_SIZE | 0 | area->vm_file | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_ops | 144 |
| BUF_SIZE | 0 | area->vm_private_data | 24 |
| DATA_SOURCE | 0 | area | $1 |
| CONTAINER | 0 | -0-72+0 | $(-1) |
| NOSPEC | 0 | area->vm_pgoff | |
| NOSPEC | 0 | area->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | area->pfnmap_track_ctx->pfn | 0-13510803177078779[c] |
| USER_DATA | 0 | area->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | area->vm_end | 4096-u64max[c] |
| USER_DATA | 0 | area->vm_pgoff | 0-13510803177078779[c] |
| USER_DATA | 0 | area->vm_start | 0-18446744073709547520 |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_pgoff | |
| HALF_LOCKED2 | &q->mmap_lock |
ipc/shm.c shm_open() -> (struct vm_operations_struct)->open()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | area | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->encode_fh | 0,2,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_dentry | 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_parent | 0,5297,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->host->i_sb->s_export_op->get_parent | 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | area->vm_file->private_data | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | area->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->type | 0-1 |
| BUF_SIZE | 0 | area | (-1)-s32max |
| BUF_SIZE | 0 | area | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_file | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_mm | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_ops | (-1),144 |
| BUF_SIZE | 0 | area->vm_private_data | (-1),24 |
| DATA_SOURCE | 0 | area | $0 |
| NOSPEC | 0 | area->vm_end | |
| NOSPEC | 0 | area->vm_pgoff | |
| NOSPEC | 0 | area->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | area->pfnmap_track_ctx->pfn | 0-13510803177078779[c] |
| USER_DATA | 0 | area->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | area->vm_end | 0-u64max |
| USER_DATA | 0 | area->vm_pgoff | 0-13510803177078779[c] |
| USER_DATA | 0 | area->vm_start | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_policy->mode | |
| HALF_LOCKED2 | &dev->attach_lock | ||
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &oldmm->mmap_lock |
drivers/comedi/comedi_fops.c comedi_mmap() -> (struct vm_operations_struct)->open()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | area | 4096-ptr_max |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | area->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | area->vm_ops | 6122409054529798144 |
| PARAM_VALUE | 0 | area->vm_private_data | 4096-ptr_max |
| BUF_SIZE | 0 | area | (-1)-s32max |
| BUF_SIZE | 0 | area | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_file | (-1)-s32max |
| BUF_SIZE | 0 | area->vm_ops | 144 |
| DATA_SOURCE | 0 | area | $1 |
| CONTAINER | 0 | -0-72+0 | $(-1) |
| NOSPEC | 0 | area->vm_pgoff | |
| NOSPEC | 0 | area->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | area->pfnmap_track_ctx->pfn | 0-13510803177078779[c] |
| USER_DATA | 0 | area->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | area->vm_end | 4096-u64max[c] |
| USER_DATA | 0 | area->vm_pgoff | 0-13510803177078779[c] |
| USER_DATA | 0 | area->vm_start | 0-18446744073709547520 |
| NO_OVERFLOW_SIMPLE | 0 | area->vm_pgoff | |
| LOCK2 | &dev->attach_lock | ||
| HALF_LOCKED2 | &ipcp->lock | ||
| TYPE_LOCK | (struct comedi_device)->attach_lock |