Documented in 1 files:

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 15 files:

Smatch caller information:

drivers/gpu/drm/tegra/gem.c __tegra_gem_mmap() -> drm_gem_vm_close()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->flags.__vma_flags 4096-ptr_max
PARAM_VALUE 0 vma->pfnmap_track_ctx 4096-ptr_max
PARAM_VALUE 0 vma->pfnmap_track_ctx->kref.refcount.refs.counter 1
PARAM_VALUE 0 vma->pfnmap_track_ctx->size 0,4096-u64max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->list.next 2624917664208203776
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->list.prev 2624917664208203776
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_mm 4096-ptr_max
PARAM_VALUE 0 vma->vm_mm->hiwater_rss 1-u64max
PARAM_VALUE 0 vma->vm_pgoff 0
PARAM_VALUE 0 vma->vm_private_data->refs.refcount.refs.counter s32min-s32max
PARAM_VALUE 0 vma->vm_private_data->rw_sema->wait_lock.owner (-4611686018427387904)-4611686018427387903
PARAM_VALUE 0 vma->vm_private_data->rw_sema.first_waiter->handoff_set 1
PARAM_VALUE 0 vma->vm_private_data->rw_sema.first_waiter->list.next 2624917664208203776
PARAM_VALUE 0 vma->vm_private_data->rw_sema.first_waiter->list.prev 2624917664208203776
PARAM_VALUE 0 vma->vm_private_data->rw_sema.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_private_data->rw_sema.osq.tail.counter 0-s32max
PARAM_VALUE 0 vma->vm_private_data->vma 0
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma->vm_file (-1)-s32max
DATA_SOURCE 0 vma $1
NOSPEC 0 vma->vm_start
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->pfnmap_track_ctx->pfn 0-13510803177078779[c]
USER_DATA 0 vma->pfnmap_track_ctx->size 0,4096-u64max[c]
USER_DATA 0 vma->vm_end 4096-u64max[c]
USER_DATA 0 vma->vm_start 0-18446744073709547520
NO_OVERFLOW_SIMPLE 0 vma->vm_pgoff
HALF_LOCKED2 &info->mm_lock

drivers/gpu/drm/drm_gem_dma_helper.c drm_gem_dma_mmap() -> drm_gem_vm_close()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->encode_fh 0,2,1398972869330624512,1616549510479982592,2037984473558433792,2776440803454029824,3228746867770966016,3502492669594062848,3526768263295340544,3559173554394271744,5000850239487131648,5583386343686406144,5817357685191483392-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_dentry 0,8684,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_parent 0,5297,148606482432692224,436469935444291584,467281172929331200,529780027764285440,1092893949038768128,1556959531105513472,1608953577475584000,1649536479961075712,2404761408063094784,2970908329832960000,3511613614414655488-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->get_parent 0,8931,264940071972966400,291591359766798336,565128213429456896,893189740598853632,1241177127089143808,1474696885321834496,1812477326828269568,1893665921928286208,2210088671756947456,2437012291923775488,2483979068402987008-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_mm 4096-ptr_max
PARAM_VALUE 0 vma->vm_ops 0,4096-ptr_max
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma->vm_file (-1)-s32max
BUF_SIZE 0 vma->vm_private_data (-1),1-s32max
DATA_SOURCE 0 vma $1
NOSPEC 0 vma->vm_pgoff
NOSPEC 0 vma->vm_start
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->pfnmap_track_ctx->pfn 0-13510803177078779[c]
USER_DATA 0 vma->pfnmap_track_ctx->size 0,4096-u64max[c]
USER_DATA 0 vma->vm_end 4096-u64max[c]
USER_DATA 0 vma->vm_pgoff 0-4503599627370495[c]
USER_DATA 0 vma->vm_start 0-18446744073709547520
NO_OVERFLOW_SIMPLE 0 vma->vm_pgoff
HALF_LOCKED2 &info->mm_lock

drivers/gpu/drm/exynos/exynos_drm_gem.c exynos_drm_gem_mmap() -> drm_gem_vm_close()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->flags.__vma_flags 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_mm 4096-ptr_max
PARAM_VALUE 0 vma->vm_ops 0,4096-ptr_max
PARAM_VALUE 0 vma->vm_pgoff 0
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma->vm_file (-1)-s32max
BUF_SIZE 0 vma->vm_private_data (-1),1-s32max
DATA_SOURCE 0 vma $1
NOSPEC 0 vma->vm_start
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->pfnmap_track_ctx->pfn 0-13510803177078779[c]
USER_DATA 0 vma->pfnmap_track_ctx->size 0,4096-u64max[c]
USER_DATA 0 vma->vm_end 4096-u64max[c]
USER_DATA 0 vma->vm_start 0-18446744073709547520
NO_OVERFLOW_SIMPLE 0 vma->vm_pgoff
HALF_LOCKED2 &info->mm_lock

drivers/gpu/drm/drm_gem_shmem_helper.c drm_gem_shmem_vm_close() -> drm_gem_vm_close()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->invalidate_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->invalidate_lock.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_sb->s_cop->inode_info_offs 1632,1720,1808,2632,2648
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_dentry 0,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->invalidate_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->invalidate_lock.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_mm->mmap_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_mm->mmap_lock.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->type 0-1
BUF_SIZE 0 vma (-1)-s32max
BUF_SIZE 0 vma (-1)-s32max
BUF_SIZE 0 vma->vm_file (-1)-s32max
BUF_SIZE 0 vma->vm_ops (-1),144
BUF_SIZE 0 vma->vm_private_data (-1),1-s32max
CAPPED_DATA 0 vma 1
DATA_SOURCE 0 vma $0
NOSPEC 0 vma->vm_end
NOSPEC 0 vma->vm_pgoff
NOSPEC 0 vma->vm_start
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->vm_end 0-u64max
USER_DATA 0 vma->vm_pgoff 0-4503599627370495[c]
USER_DATA 0 vma->vm_start 0-18446744073709547520
NO_OVERFLOW_SIMPLE 0 vma->pfnmap_track_ctx->pfn
NO_OVERFLOW_SIMPLE 0 vma->pfnmap_track_ctx->size
NO_OVERFLOW_SIMPLE 0 vma->vm_file->f_mapping->host->i_size
NO_OVERFLOW_SIMPLE 0 vma->vm_policy->mode

drivers/accel/amdxdna/amdxdna_gem.c amdxdna_gem_dmabuf_mmap() -> (struct vm_operations_struct)->close()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_mm 4096-ptr_max
PARAM_VALUE 0 vma->vm_ops 6092607822832676864
PARAM_VALUE 0 vma->vm_private_data 0,4096-ptr_max
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma (-1),1-s32max
BUF_SIZE 0 vma->vm_file (-1)-s32max
BUF_SIZE 0 vma->vm_ops (-1),144
BUF_SIZE 0 vma->vm_private_data (-1),16,24,40,48,56,72,80,112,120,136,168,184,224
CAPPED_DATA 0 vma->vm_start 1
DATA_SOURCE 0 vma $1
CONTAINER 0 -8-72+0 $(-1)
NOSPEC 0 vma->vm_pgoff
NOSPEC 0 vma->vm_start
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->vm_end 4096-u64max[c]
USER_DATA 0 vma->vm_pgoff 0-4503599627370495[c]
USER_DATA 0 vma->vm_start 0-18446744073709547520[c]
NO_OVERFLOW_SIMPLE 0 vma->vm_pgoff

mm/vma.c vma_close() -> (struct vm_operations_struct)->close()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_ops 4096-ptr_max
PARAM_VALUE 0 vma->vm_ops->close 1-u64max
PARAM_VALUE 0 vma->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->type 0-1
CAPPED_DATA 0 vma 1
DATA_SOURCE 0 vma $0
CONTAINER 0 -8-72+0 $(-1)
NOSPEC 0 vma->vm_pgoff
NOSPEC 0 vma->vm_start
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->vm_end 0-u64max
USER_DATA 0 vma->vm_pgoff 0-4503599627370495[c]
USER_DATA 0 vma->vm_start 0-18446744073709547520
NO_OVERFLOW_SIMPLE 0 vma->vm_start
HALF_LOCKED2 &mm->mmap_lock

fs/coda/file.c coda_vm_close() -> (struct vm_operations_struct)->close()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->invalidate_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->invalidate_lock.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_sb->s_cop->inode_info_offs 1632,1720,1808,2632,2648
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_dentry 0,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->invalidate_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->invalidate_lock.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_mm->mmap_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_mm->mmap_lock.first_waiter->type 0-1
BUF_SIZE 0 vma (-1)-s32max
BUF_SIZE 0 vma (-1)-s32max
BUF_SIZE 0 vma->vm_file (-1)-s32max
BUF_SIZE 0 vma->vm_ops (-1),144
BUF_SIZE 0 vma->vm_private_data (-1),1-s32max
CAPPED_DATA 0 vma 1
DATA_SOURCE 0 vma $0
NOSPEC 0 vma->vm_end
NOSPEC 0 vma->vm_pgoff
NOSPEC 0 vma->vm_start
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->vm_end 0-u64max
USER_DATA 0 vma->vm_pgoff 0-4503599627370495[c]
USER_DATA 0 vma->vm_start 0-18446744073709547520
NO_OVERFLOW_SIMPLE 0 vma->pfnmap_track_ctx->pfn
NO_OVERFLOW_SIMPLE 0 vma->pfnmap_track_ctx->size
NO_OVERFLOW_SIMPLE 0 vma->vm_file->f_mapping->host->i_size
NO_OVERFLOW_SIMPLE 0 vma->vm_policy->mode

ipc/shm.c shm_close() -> (struct vm_operations_struct)->close()

Type Parameter Key Value
PARAM_VALUE 0 vma 4096-ptr_max
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->invalidate_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_mapping->invalidate_lock.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_file->f_inode->i_sb->s_cop->inode_info_offs 1632,1720,1808,2632,2648
PARAM_VALUE 0 vma->vm_file->f_mapping->host->i_sb->s_export_op->fh_to_dentry 0,447817974243774464,687732489194512384,742201802719268864,868497899885588480,1471448175530500096,2021658383390310400,2445877819203563520,2512819722689847296,2649270699546726400,2761259683714371584,2893332316235677696-s64max
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->invalidate_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_file->f_mapping->invalidate_lock.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_mm->mmap_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_mm->mmap_lock.first_waiter->type 0-1
PARAM_VALUE 0 vma->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 vma->vm_userfaultfd_ctx.ctx->map_changing_lock.first_waiter->type 0-1
BUF_SIZE 0 vma (-1)-s32max
BUF_SIZE 0 vma (-1)-s32max
BUF_SIZE 0 vma->vm_file (-1)-s32max
BUF_SIZE 0 vma->vm_ops (-1),144
BUF_SIZE 0 vma->vm_private_data (-1),1-s32max
CAPPED_DATA 0 vma 1
DATA_SOURCE 0 vma $0
NOSPEC 0 vma->vm_end
NOSPEC 0 vma->vm_pgoff
NOSPEC 0 vma->vm_start
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 vma->vm_end 0-u64max
USER_DATA 0 vma->vm_pgoff 0-4503599627370495[c]
USER_DATA 0 vma->vm_start 0-18446744073709547520
NO_OVERFLOW_SIMPLE 0 vma->pfnmap_track_ctx->pfn
NO_OVERFLOW_SIMPLE 0 vma->pfnmap_track_ctx->size
NO_OVERFLOW_SIMPLE 0 vma->vm_file->f_mapping->host->i_size
NO_OVERFLOW_SIMPLE 0 vma->vm_policy->mode