Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
kernel/bpf/verifier.c check_map_kptr_access() -> mark_btf_ld_reg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data->btf_var.reg_type | 0,16,529,4112 |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 0,5704186734949433344 |
| PARAM_VALUE | 0 | env->prog->insnsi | 4096-ptr_max |
| PARAM_VALUE | 0 | *env->tmp_arg_name | 0-255 |
| PARAM_VALUE | 3 | reg_type | 16 |
| PARAM_VALUE | 4 | btf->kernel_btf | 0-1 |
| PARAM_VALUE | 6 | flag | 16640,2097408,2101504,2621696,6295808,6816000 |
| BUF_SIZE | 1 | regs | 880 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 2 | regno | $1 |
| STR_LEN | 0 | env | (-1),3,11 |
| STR_LEN | 0 | env | (-1),3,11 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt | |
| UNITS | 5 | btf_id | unit_array_size |
kernel/bpf/verifier.c check_ptr_to_btf_access() -> mark_btf_ld_reg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->allow_ptr_leaks | 1 |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data->btf_var.reg_type | 0,16,529,4112 |
| PARAM_VALUE | 0 | env->log->kbuf | 0-255 |
| PARAM_VALUE | 0 | env->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | env->ops->btf_struct_access | 0,109229580818747392,1844169638972944384,1972137615492878336,2503603943122952192,5286233595241070592 |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 0,5704186734949433344 |
| PARAM_VALUE | 0 | env->prog | 4096-ptr_max |
| PARAM_VALUE | 2 | regno | 0-s32max |
| PARAM_VALUE | 3 | reg_type | 1,16-17 |
| PARAM_VALUE | 4 | btf | 4096-ptr_max |
| BUF_SIZE | 1 | regs | 880 |
| BUF_SIZE | 1 | regs | 880 |
| CAPPED_DATA | 4 | btf->start_id | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | regs | $1 |
| DATA_SOURCE | 2 | regno | $7 |
| DATA_SOURCE | 3 | reg_type | r btf_struct_access |
| STR_LEN | 0 | env | (-1),3,11 |
| STR_LEN | 0 | env | (-1),3,11 |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c check_ptr_to_map_access() -> mark_btf_ld_reg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->allow_ptr_leaks | 1 |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data->btf_var.reg_type | 0,16,529,4112 |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 0,5704186734949433344 |
| PARAM_VALUE | 1 | regs | 8007142782365880320 |
| PARAM_VALUE | 2 | regno | 0 |
| PARAM_VALUE | 3 | reg_type | 16 |
| PARAM_VALUE | 4 | btf | 4096-ptr_max |
| PARAM_VALUE | 5 | btf_id | 1-u32max |
| PARAM_VALUE | 6 | flag | 0 |
| CAPPED_DATA | 4 | btf->start_id | 1 |
| CAPPED_DATA | 5 | btf_id | 1 |
| DATA_SOURCE | 0 | env | $0 |
| STR_LEN | 0 | env | (-1),3,11 |
| STR_LEN | 0 | env | (-1),3,11 |
| PARAM_COMPARE | 4 | btf->nr_types | > $4->start_id |
| PARAM_COMPARE | 5 | btf_id | >= $4->start_id |
| MEM_ZERO | 1 | regs | |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |
kernel/bpf/verifier.c check_ptr_to_map_access() -> mark_btf_ld_reg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->allow_ptr_leaks | 1 |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data->btf_var.reg_type | 0,16,529,4112 |
| PARAM_VALUE | 0 | env->log->kbuf | 0-255 |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 0,5704186734949433344 |
| PARAM_VALUE | 2 | regno | 0-s32max |
| PARAM_VALUE | 3 | reg_type | 1,16-17 |
| PARAM_VALUE | 4 | btf | 4096-ptr_max |
| BUF_SIZE | 1 | regs | 880 |
| BUF_SIZE | 1 | regs | 880 |
| CAPPED_DATA | 4 | btf->start_id | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | regs | $1 |
| DATA_SOURCE | 2 | regno | $7 |
| DATA_SOURCE | 3 | reg_type | r btf_struct_access |
| STR_LEN | 0 | env | (-1),3,11 |
| STR_LEN | 0 | env | (-1),3,11 |
| PARAM_COMPARE | 4 | btf->nr_types | > $4->start_id |
| NO_OVERFLOW_SIMPLE | 0 | env->cur_state->jmp_history_cnt |