Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

kernel/bpf/verifier.c check_alu_op() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
DATA_SOURCE 0 env $0

kernel/bpf/verifier.c check_alu_op() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
DATA_SOURCE 0 env $0

kernel/bpf/verifier.c check_alu_op() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
DATA_SOURCE 0 env $0

kernel/bpf/verifier.c check_atomic_rmw() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 1 regno 0
DATA_SOURCE 0 env $0

kernel/bpf/verifier.c check_atomic_rmw() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
DATA_SOURCE 0 env $0

kernel/bpf/verifier.c check_func_arg() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 1 regno 1-5
DATA_SOURCE 0 env $0

kernel/bpf/verifier.c check_global_subprog_return_code() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->cur_state->frame 4096-ptr_max
PARAM_VALUE 1 regno 0
CAPPED_DATA 0 env->prog->aux->btf->start_id 1
CAPPED_DATA 0 env->prog->len 1
DATA_SOURCE 0 env $0

kernel/bpf/verifier.c check_mem_access() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->cur_state->frame 4096-ptr_max
PARAM_VALUE 1 regno 0-s32max
DATA_SOURCE 0 env $0
DATA_SOURCE 1 regno $7
STR_LEN 0 env (-1)
STR_LEN 0 env (-1)
NO_OVERFLOW_SIMPLE 0 env->cur_state->jmp_history_cnt

kernel/bpf/verifier.c check_mem_access() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 1 regno 0-s32max
DATA_SOURCE 0 env $0
DATA_SOURCE 1 regno $7
FUZZY_MAX 1 regno 0
STR_LEN 0 env (-1),3,11
STR_LEN 0 env (-1),3,11
NO_OVERFLOW_SIMPLE 0 env->cur_state->jmp_history_cnt

kernel/bpf/verifier.c check_mem_access() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->cur_state->frame 4096-ptr_max
PARAM_VALUE 1 regno 0-s32max
DATA_SOURCE 0 env $0
DATA_SOURCE 1 regno $7
STR_LEN 0 env (-1)
STR_LEN 0 env (-1)
NO_OVERFLOW_SIMPLE 0 env->cur_state->jmp_history_cnt

kernel/bpf/verifier.c check_mem_access() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 1 regno 0-s32max
DATA_SOURCE 0 env $0
DATA_SOURCE 1 regno $7
FUZZY_MAX 1 regno 0
STR_LEN 0 env (-1),3,11
STR_LEN 0 env (-1),3,11
NO_OVERFLOW_SIMPLE 0 env->cur_state->jmp_history_cnt

kernel/bpf/verifier.c check_mem_access() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->cur_state->frame 4096-ptr_max
PARAM_VALUE 1 regno 0-s32max
DATA_SOURCE 0 env $0
DATA_SOURCE 1 regno $7
STR_LEN 0 env (-1)
STR_LEN 0 env (-1)
NO_OVERFLOW_SIMPLE 0 env->cur_state->jmp_history_cnt

kernel/bpf/verifier.c check_return_code() -> is_pointer_value()

Type Parameter Key Value
PARAM_VALUE 0 env 4096-ptr_max
PARAM_VALUE 0 env->cur_state 4096-ptr_max
PARAM_VALUE 0 env->cur_state->frame 4096-ptr_max
PARAM_VALUE 1 regno 0-1
DATA_SOURCE 0 env $0
DATA_SOURCE 1 regno $1
STR_LEN 0 env 2
STR_LEN 0 env 2
HARD_MAX 1 regno 1