Defined in 1 files as a prototype:
Defined in 2 files as a function:
- arch/loongarch/include/asm/kvm_vcpu.h, line 123 (as a function)
- arch/x86/kvm/x86.c, line 520 (as a function)
Referenced in 8 files:
- arch/loongarch/kvm/exit.c
- arch/x86/kvm/hyperv.c
- arch/x86/kvm/svm/nested.c
- arch/x86/kvm/svm/svm.c
- arch/x86/kvm/vmx/nested.c
- arch/x86/kvm/vmx/sgx.c, line 388
- arch/x86/kvm/vmx/vmx.c
- arch/x86/kvm/x86.c
Smatch caller information:
arch/x86/kvm/vmx/sgx.c handle_encls() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/nested.c get_vmx_mem_address() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/nested.c handle_invept() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/nested.c handle_invvpid() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/nested.c handle_vmfunc() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/nested.c handle_vmfunc() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/nested.c handle_vmxon() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/nested.c nested_vmx_check_permission() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/nested.c nested_vmx_run() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->arch.hyperv | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.hyperv_enabled | 1 |
| PARAM_VALUE | 0 | vcpu->arch.pv_eoi.msr_val | 1-u64max |
| PARAM_VALUE | 0 | vcpu->last_used_slot->base_gfn | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->run->system_event.ndata | 1,16 |
| PARAM_VALUE | 0 | vcpu->run->system_event.type | 6-7 |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.intercept_message | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.reserved2 | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.reserved3 | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.reserved4 | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | 0-255 |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions |
arch/x86/kvm/hyperv.c kvm_hv_hypercall() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.hyperv_enabled | 1 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/hyperv.c kvm_hv_hypercall() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.cr0 | 1-u64max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.hyperv->enforce_cpuid | 1 |
| PARAM_VALUE | 0 | vcpu->arch.hyperv_enabled | 1 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/x86.c handle_emulation_failure() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.exit_on_emulation_error | 0 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 1 | nr | 6 |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14[c] |
| USER_DATA | 0 | vcpu->arch.mmio_gva | 0,4096-u64max[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.kmem_cache->object_size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | 0 | &vcpu->kvm->srcu | |
| HALF_LOCKED2 | 0 | &vcpu->mutex |
arch/x86/kvm/x86.c inject_emulated_exception() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->exception.vector | 0,2-13,15-255 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 1 | nr | 0,2-13,15-255 |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14[c] |
| USER_DATA | 0 | vcpu->arch.mmio_gva | 0,4096-u64max[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.kmem_cache->object_size | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | 0 | &vcpu->kvm->srcu | |
| HALF_LOCKED2 | 0 | &vcpu->mutex |
arch/x86/kvm/x86.c kvm_arch_vcpu_ioctl_set_guest_debug() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.node.expires | 0-s64max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.node.node.node.__rb_parent_color | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.exception.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_vmexit.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.kvmclock_update_rs.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.noncoherent_dma_count.counter | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->online_vcpus.counter | (-2147483647)-s32max |
| PARAM_VALUE | 0 | vcpu->kvm->vm_dead | 0 |
| PARAM_VALUE | 0 | vcpu->mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->vcpu_idx | s32min-2147483646 |
| PARAM_VALUE | 1 | nr | 1 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->mm | 1 |
| CAPPED_DATA | 0 | vcpu->vcpu_idx | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| LOCK2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/x86.c kvm_arch_vcpu_ioctl_set_guest_debug() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.node.expires | 0-s64max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.node.node.node.__rb_parent_color | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.exception.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_vmexit.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.guest_state_protected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.kvmclock_update_rs.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.noncoherent_dma_count.counter | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->online_vcpus.counter | (-2147483647)-s32max |
| PARAM_VALUE | 0 | vcpu->kvm->vm_dead | 0 |
| PARAM_VALUE | 0 | vcpu->mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | vcpu->mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->mutex.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->vcpu_idx | s32min-2147483646 |
| PARAM_VALUE | 1 | nr | 3 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| CAPPED_DATA | 0 | vcpu->kvm->mm | 1 |
| CAPPED_DATA | 0 | vcpu->vcpu_idx | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| LOCK2 | 0 | &vcpu->mutex | |
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/x86.c kvm_handle_invalid_op() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 1 | nr | 6 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| DATA_SOURCE | 0 | vcpu | $0 |
| STR_LEN | 0 | vcpu | (-1),5,7 |
| STR_LEN | 0 | vcpu | (-1),5,7 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/x86.c kvm_require_dr() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/x86.c kvm_vcpu_ioctl_x86_set_mce() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.base->index | 0-7 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.is_queued | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer.node.expires | 0-s64max |
| PARAM_VALUE | 0 | vcpu->arch.apic->lapic_timer.timer_mode | 0,131072-393216 |
| PARAM_VALUE | 0 | vcpu->arch.apic->pending_events | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->sipi_vector | 0-u16max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->arch.pv.pv_unhalted | 1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->ready | 1 |
| PARAM_VALUE | 0 | vcpu->arch.tsc_catchup | 1 |
| PARAM_VALUE | 0 | vcpu->arch.tsc_offset_adjustment | 0 |
| PARAM_VALUE | 0 | vcpu->cpu | 0 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.kvmclock_update_rs.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.noncoherent_dma_count.counter | 0-1 |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->preempt_notifier.link.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 18 |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | vcpu | 1 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.mcg_status | 0-u64max |
| LOCK2 | &vcpu->mutex | ||
| TYPE_LOCK | (struct kvm_vcpu)->mutex |
arch/x86/kvm/x86.c x86_emulate_instruction() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->run->system_event.ndata | 0-1,16 |
| PARAM_VALUE | 0 | vcpu->arch.apic->vcpu->run->system_event.type | 2-3,6-7 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ad_bytes | 2,4,8 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->fetch.end | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->gpa_available | 0 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->io_read.end | 0 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->io_read.pos | 0 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->lock_prefix | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->mem_read.end | 0 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.addr.mem.seg | 0-255 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.addr.mm | 0-7 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.addr.xmm | 0-15 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.data | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.mm_val | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.type | 0-1,4-7 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.val | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.val64 | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.valptr | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memopp | 0,4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memopp->addr.mem.seg | 0-255 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memopp->addr.mm | 0-7 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memopp->addr.xmm | 0-255 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memopp->bytes | 1-2,4,6,8,10,16,18,32,34 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memopp->type | 0-1,4-7 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->mode | 0-4 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->modrm_mod | 0-3 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->modrm_reg | 0-15 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->modrm_rm | 0-15 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->modrm_seg | 2-3 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->op_bytes | 2,4,8,16,32 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->opcode_len | 1-3 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->perm_ok | 0 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->seg_override | 0-5 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src->valptr | 0-255 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src.addr.mem.seg | 0-255 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src.bytes | 1-2,4,6,8,10,16,18,32,34 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src.data | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src.mm_val | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src.type | 0-1,3-7 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src.val | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src.val64 | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src.valptr | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src2->valptr | 0-255 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src2.addr.mem.seg | 0-255 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src2.bytes | 1-2,4,6,8,10,16,18,32,34 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src2.data | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src2.mm_val | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src2.type | 0-1,3-7 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src2.val | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src2.val64 | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->src2.valptr | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->arch.gva_walk.cpu_role.base.cr0_wp | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->arch.mmu->cpu_role.base.cr0_wp | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->arch.mmu->pkru_mask | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->arch.ngpa_walk.cpu_role.base.cr0_wp | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->arch.ngpa_walk.pkru_mask | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->last_used_slot->as_id | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->last_used_slot->base_gfn | 0-s64max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->last_used_slot->gmem.pgoff | 0-2251799813685247 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->last_used_slot->id | 0-32766 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->last_used_slot->npages | 0-4503599627370495 |
| PARAM_VALUE | 0 | vcpu->arch.exception.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_vmexit.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_advance_ns | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apic_map->xapic_flat_map->lapic_timer.timer_mode_mask | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | vcpu->kvm->arch.apicv_update_lock.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.flags | 0,8 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.gpa | 0,4096-18446744073709547520 |
| PARAM_VALUE | 0 | vcpu->run->memory_fault.size | 4096 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->vcpu->arch.ngpa_walk->permissions | 0-u16max |
| PARAM_VALUE | 1 | nr | 6 |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | vcpu | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.cr8 | 0-14 |
| USER_DATA | 0 | vcpu->arch.mmio_gfn | 0-4503599627370495[c] |
| USER_DATA | 0 | vcpu->arch.mmio_gva | 0,4096-u64max[c] |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_external_spt_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_page_header_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_pte_list_desc_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.kmem_cache->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadow_page_cache.nobjs | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.capacity | |
| NO_OVERFLOW_SIMPLE | 0 | vcpu->arch.mmu_shadowed_info_cache.nobjs | |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | |
| USER_PTR | 0 | vcpu->arch.pdptrs | |
| HALF_LOCKED2 | 0 | &vcpu->kvm->srcu | |
| HALF_LOCKED2 | 0 | &vcpu->mutex |
arch/x86/kvm/svm/svm.c cr_interception() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/svm/svm.c cr_interception() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/svm/svm.c cr_trap() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/svm/svm.c icebp_interception() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.bytes | 0-255 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.data | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.mm_val | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.val | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.val64 | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->memop.valptr | 0-u32max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->arch.ngpa_walk.cpu_role.base.cr0_wp | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->vcpu->arch.ngpa_walk.pkru_mask | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.mmu->cpu_role.base.cr0_wp | 0-1 |
| PARAM_VALUE | 0 | vcpu->arch.mmu->pkru_mask | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->arch.ngpa_walk.pkru_mask | 0-4294967295 |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.owner | (-1) |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | vcpu->kvm->mmu_lock.raw_lock.wlocked | 0 |
| PARAM_VALUE | 0 | vcpu->kvm->srcu.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->as_id | 0-1 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->base_gfn | 0-18446744073709551614 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->gmem.pgoff | 0-2251799813685247 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->id | 0-32766 |
| PARAM_VALUE | 0 | vcpu->last_used_slot->npages | 0-4503599627370495 |
| PARAM_VALUE | 0 | vcpu->mmio_needed | 0 |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.dr6 | 0,16-u64max |
| PARAM_VALUE | 0 | vcpu->run->debug.arch.exception | 1,3 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.flags | 0-1 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.insn_size | 1-255 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.ndata | 6,8,10,12 |
| PARAM_VALUE | 0 | vcpu->run->emulation_failure.suberror | 1 |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->run->internal.ndata | 0,2,4-5 |
| PARAM_VALUE | 0 | vcpu->run->internal.suberror | 1-4 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->vcpu->arch.ngpa_walk->permissions | 0-u16max |
| PARAM_VALUE | 0 | *vcpu->arch.mmu->permissions | 0-u16max |
| PARAM_VALUE | 0 | *vcpu->arch.ngpa_walk->permissions | 0-u16max |
| PARAM_VALUE | 1 | nr | 1 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | vcpu->arch.exception.payload | 0[c] |
| USER_DATA | 0 | vcpu->run->debug.arch.pc | 0-u64max |
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.intercept_message | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.reserved2 | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.reserved3 | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.reserved4 | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | 0-255 |
| USER_DATA | 0 | *vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.intercept_message | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved2 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved3 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.reserved4 | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.virtualization_fault_information | |
| USER_PTR | 0 | vcpu->arch.hyperv->vp_assist_page.vtl_ret_actions |
arch/x86/kvm/svm/svm.c invpcid_interception() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/svm/svm.c skinit_interception() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/svm/svm.c svm_check_emulate_instruction() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/svm/svm.c vmmcall_interception() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.hyperv | 0,4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| BUF_SIZE | 0 | vcpu | (-1),7720 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/vmx/vmx.c handle_invpcid() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/vmx.c handle_rmode_exception() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.regs_avail | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 0-1,3-6,8,12-13,16 |
| DATA_SOURCE | 0 | vcpu | $0 |
| DATA_SOURCE | 1 | nr | $1 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/vmx.c handle_tdx_instruction() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/vmx.c handle_vmx_instruction() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.nested_run_pending | 0 |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/vmx/vmx.c vmx_check_emulate_instruction() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL |
arch/x86/kvm/svm/nested.c nested_svm_check_permissions() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.emulate_ctxt->ops->get_cr | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->run->hypercall.ret | 0-s32max,18446744071562067968-u64max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |
arch/x86/kvm/svm/nested.c nested_svm_vmexit() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.cpuid_dynamic_bits_dirty | 1 |
| PARAM_VALUE | 0 | vcpu->arch.cr0_guest_owned_bits | 65536-u64max |
| PARAM_VALUE | 0 | vcpu->arch.dr7 | 1024 |
| PARAM_VALUE | 0 | vcpu->arch.efer | 0,256-u64max |
| PARAM_VALUE | 0 | vcpu->arch.exception.injected | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.exception_vmexit.pending | 0 |
| PARAM_VALUE | 0 | vcpu->arch.gva_walk.get_guest_pgd | 7025673116383887360 |
| PARAM_VALUE | 0 | vcpu->arch.gva_walk.get_pdptr | 1352091245017460736 |
| PARAM_VALUE | 0 | vcpu->arch.gva_walk.gva_to_gpa | 3025047059327504384,4917861297175281664,8823471726512275456 |
| PARAM_VALUE | 0 | vcpu->arch.gva_walk.inject_page_fault | 1875070358975434752 |
| PARAM_VALUE | 0 | vcpu->arch.mmu | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.fmt.bad_mt_xwr | 0,18398423101764228180 |
| PARAM_VALUE | 0 | vcpu->arch.root_mmu.root.hpa | u64max |
| PARAM_VALUE | 0 | vcpu->guest_debug | 2-u64max |
| PARAM_VALUE | 0 | vcpu->kvm | 4096-ptr_max |
| PARAM_VALUE | 0 | vcpu->last_used_slot_gen | 0-2,9223372034707292161-9223372036854775809,18446744071562067968-u64max |
| PARAM_VALUE | 0 | vcpu->stat.guest_mode | 0-1 |
| PARAM_VALUE | 1 | nr | 1 |
| NOCHECK_CALL |
arch/x86/kvm/svm/nested.c nested_svm_vmrun() -> kvm_queue_exception()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vcpu | 4096-ptr_max |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->dst.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->fetch.data | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src.valptr | 0-255 |
| PARAM_VALUE | 0 | *vcpu->arch.emulate_ctxt->src2.valptr | 0-255 |
| PARAM_VALUE | 1 | nr | 6 |
| DATA_SOURCE | 0 | vcpu | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *vcpu->arch.emulate_ctxt->fetch.end | 0-255 |
| USER_PTR | 0 | vcpu->arch.emulate_ctxt->fetch.end |