Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
fs/exec.c do_execveat_common() -> copy_strings()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | argc | 0-s32max |
| PARAM_VALUE | 2 | bprm | 4096-ptr_max |
| PARAM_VALUE | 2 | bprm->argc | 0-s32max |
| PARAM_VALUE | 2 | bprm->argmin | 1-9223372036854775806 |
| PARAM_VALUE | 2 | bprm->envc | 0-s32max |
| PARAM_VALUE | 2 | bprm->fdpath | 1-u64max |
| PARAM_VALUE | 2 | bprm->file | 4096-ptr_max |
| PARAM_VALUE | 2 | bprm->filename | 1-u64max |
| PARAM_VALUE | 2 | bprm->interp | 1-u64max |
| PARAM_VALUE | 2 | bprm->mm | 4096-ptr_max |
| PARAM_VALUE | 2 | bprm->mm->map_count | (-1)-s32max |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 2 | bprm->mm->stack_vm | 1 |
| PARAM_VALUE | 2 | bprm->mm->total_vm | 1 |
| PARAM_VALUE | 2 | bprm->vma | 4096-ptr_max |
| PARAM_VALUE | 2 | bprm->vma->anon_name | 0 |
| PARAM_VALUE | 2 | bprm->vma->anon_vma | 0 |
| PARAM_VALUE | 2 | bprm->vma->numab_state | 0 |
| PARAM_VALUE | 2 | bprm->vma->pfnmap_track_ctx | 0 |
| PARAM_VALUE | 2 | bprm->vma->shared.rb.__rb_parent_color | 0 |
| PARAM_VALUE | 2 | bprm->vma->shared.rb.rb_left | 0 |
| PARAM_VALUE | 2 | bprm->vma->shared.rb.rb_right | 0 |
| PARAM_VALUE | 2 | bprm->vma->shared.rb_subtree_last | 0 |
| PARAM_VALUE | 2 | bprm->vma->swap_readahead_info.counter | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_file | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_flags | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_freeptr.v | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_ops | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_pgoff | 0-4503599627370495 |
| PARAM_VALUE | 2 | bprm->vma->vm_policy | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_private_data | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_refcnt.refs.counter | 1 |
| PARAM_VALUE | 2 | bprm->vma->vm_userfaultfd_ctx.ctx | 0 |
| PARAM_VALUE | 2 | bprm->vma->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 2 | bprm->vma->vmlock_dep_map.ip | 0 |
| PARAM_VALUE | 2 | bprm->vma->vmlock_dep_map.lock_type | 0 |
| BUF_SIZE | 2 | bprm | 472 |
| CAPPED_DATA | 2 | bprm->argmin | 1 |
| CAPPED_DATA | 2 | bprm->fdpath | 1 |
| DATA_SOURCE | 1 | argv | $3 |
| DATA_SOURCE | 2 | bprm | r class_bprm_constructor |
| BIT_INFO | 1 | argv | 0x0,0x0 |
| USER_DATA | 2 | bprm->is_check | 0-1 |
| NO_OVERFLOW_SIMPLE | 0 | argc | |
| NO_OVERFLOW_SIMPLE | 2 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 2 | bprm->exec | |
| NO_OVERFLOW_SIMPLE | 2 | bprm->p |
fs/exec.c do_execveat_common() -> copy_strings()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | argc | 0-s32max |
| PARAM_VALUE | 2 | bprm | 4096-ptr_max |
| PARAM_VALUE | 2 | bprm->argc | 0-s32max |
| PARAM_VALUE | 2 | bprm->argmin | 1-9223372036854775806 |
| PARAM_VALUE | 2 | bprm->envc | 0-s32max |
| PARAM_VALUE | 2 | bprm->fdpath | 1-u64max |
| PARAM_VALUE | 2 | bprm->file | 4096-ptr_max |
| PARAM_VALUE | 2 | bprm->filename | 1-u64max |
| PARAM_VALUE | 2 | bprm->interp | 1-u64max |
| PARAM_VALUE | 2 | bprm->mm | 4096-ptr_max |
| PARAM_VALUE | 2 | bprm->mm->map_count | (-1)-s32max |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.first_waiter->handoff_set | 1 |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 2 | bprm->mm->mmap_lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 2 | bprm->mm->stack_vm | 1 |
| PARAM_VALUE | 2 | bprm->mm->total_vm | 1 |
| PARAM_VALUE | 2 | bprm->vma | 4096-ptr_max |
| PARAM_VALUE | 2 | bprm->vma->anon_name | 0 |
| PARAM_VALUE | 2 | bprm->vma->anon_vma | 0 |
| PARAM_VALUE | 2 | bprm->vma->numab_state | 0 |
| PARAM_VALUE | 2 | bprm->vma->pfnmap_track_ctx | 0 |
| PARAM_VALUE | 2 | bprm->vma->shared.rb.__rb_parent_color | 0 |
| PARAM_VALUE | 2 | bprm->vma->shared.rb.rb_left | 0 |
| PARAM_VALUE | 2 | bprm->vma->shared.rb.rb_right | 0 |
| PARAM_VALUE | 2 | bprm->vma->shared.rb_subtree_last | 0 |
| PARAM_VALUE | 2 | bprm->vma->swap_readahead_info.counter | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_file | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_flags | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_freeptr.v | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_ops | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_pgoff | 0-4503599627370495 |
| PARAM_VALUE | 2 | bprm->vma->vm_policy | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_private_data | 0 |
| PARAM_VALUE | 2 | bprm->vma->vm_refcnt.refs.counter | 1 |
| PARAM_VALUE | 2 | bprm->vma->vm_userfaultfd_ctx.ctx | 0 |
| PARAM_VALUE | 2 | bprm->vma->vmlock_dep_map.cpu | 0 |
| PARAM_VALUE | 2 | bprm->vma->vmlock_dep_map.ip | 0 |
| PARAM_VALUE | 2 | bprm->vma->vmlock_dep_map.lock_type | 0 |
| BUF_SIZE | 2 | bprm | 472 |
| CAPPED_DATA | 2 | bprm->argmin | 1 |
| CAPPED_DATA | 2 | bprm->fdpath | 1 |
| DATA_SOURCE | 1 | argv | $2 |
| DATA_SOURCE | 2 | bprm | r class_bprm_constructor |
| BIT_INFO | 1 | argv | 0x0,0x0 |
| USER_DATA | 2 | bprm->is_check | 0-1 |
| NO_OVERFLOW_SIMPLE | 2 | bprm->envc | |
| NO_OVERFLOW_SIMPLE | 2 | bprm->exec | |
| NO_OVERFLOW_SIMPLE | 2 | bprm->p |