Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
kernel/bpf/verifier.c check_func_call() -> push_stack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state->active_locks | 0 |
| PARAM_VALUE | 0 | env->cur_state->frame | 4096-ptr_max |
| PARAM_VALUE | 0 | env->prog | 4096-ptr_max |
| PARAM_VALUE | 0 | env->prog->aux | 4096-ptr_max |
| PARAM_VALUE | 0 | env->prog->aux->func_info | 4096-ptr_max |
| PARAM_VALUE | 0 | env->prog->insnsi | 4096-ptr_max |
| PARAM_VALUE | 0 | env->prog->len | 1-u32max |
| PARAM_VALUE | 0 | env->subprog_cnt | 1-u32max |
| PARAM_VALUE | 0 | env->subprog_info | 4096-ptr_max |
| PARAM_VALUE | 0 | *env->log->kbuf | 0-255 |
| PARAM_VALUE | 0 | *env->tmp_arg_name | 0-255 |
| PARAM_VALUE | 0 | *env->tmp_str_buf | 0-255 |
| PARAM_VALUE | 3 | speculative | 0 |
| CAPPED_DATA | 0 | env->prog->aux->btf->start_id | 1 |
| DATA_SOURCE | 0 | env | $0 |
| NO_OVERFLOW_SIMPLE | 0 | env->log.kbuf |
kernel/bpf/verifier.c check_helper_call() -> push_stack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state->acquired_refs | 1-u32max |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 0,5704186734949433344 |
| PARAM_VALUE | 0 | env->ops->get_func_proto | 1-u64max |
| PARAM_VALUE | 0 | env->prog | 4096-ptr_max |
| PARAM_VALUE | 0 | *env->log.kbuf | 0-255 |
| PARAM_VALUE | 0 | *env->tmp_arg_name | 0-255 |
| PARAM_VALUE | 0 | *env->tmp_str_buf | 0-255 |
| PARAM_VALUE | 3 | speculative | 0 |
| DATA_SOURCE | 0 | env | $0 |
| UNITS | 2 | prev_insn_idx | unit_array_size |
kernel/bpf/verifier.c check_helper_call() -> push_stack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state->curframe | 1-u32max |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 0,5704186734949433344 |
| PARAM_VALUE | 0 | env->ops->get_func_proto | 1-u64max |
| PARAM_VALUE | 0 | env->prog | 4096-ptr_max |
| PARAM_VALUE | 0 | *env->log.kbuf | 0-255 |
| PARAM_VALUE | 0 | *env->tmp_arg_name | 0-255 |
| PARAM_VALUE | 0 | *env->tmp_str_buf | 0-255 |
| PARAM_VALUE | 3 | speculative | 0 |
| DATA_SOURCE | 0 | env | $0 |
| UNITS | 2 | prev_insn_idx | unit_array_size |
kernel/bpf/verifier.c check_indirect_jump() -> push_stack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->gotox_tmp_buf | 4096-ptr_max |
| PARAM_VALUE | 0 | env->gotox_tmp_buf->items | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data | 4096-ptr_max |
| BUF_SIZE | 0 | env->gotox_tmp_buf | s32min-s32max |
| CAPPED_DATA | 0 | env->gotox_tmp_buf | 1 |
| DATA_SOURCE | 0 | env | $0 |
| NO_OVERFLOW_SIMPLE | 0 | env->log.kbuf | |
| UNITS | 2 | prev_insn_idx | unit_array_size |
kernel/bpf/verifier.c check_kfunc_call() -> push_stack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data | 4096-ptr_max |
| PARAM_VALUE | 0 | env->log->tmp_str_buf | 0-255 |
| PARAM_VALUE | 0 | env->prog | 4096-ptr_max |
| PARAM_VALUE | 0 | env->prog->aux | 4096-ptr_max |
| PARAM_VALUE | 0 | env->prog->aux->kfunc_tab | 4096-ptr_max |
| PARAM_VALUE | 3 | speculative | 0 |
| DATA_SOURCE | 0 | env | $0 |
| UNITS | 2 | prev_insn_idx | unit_array_size |
kernel/bpf/verifier.c check_ld_abs() -> push_stack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state->active_irq_id | 0 |
| PARAM_VALUE | 0 | env->cur_state->active_locks | 0 |
| PARAM_VALUE | 0 | env->cur_state->active_preempt_locks | 0 |
| PARAM_VALUE | 0 | env->cur_state->active_rcu_locks | 0 |
| PARAM_VALUE | 0 | env->cur_state->curframe | 1-u32max |
| PARAM_VALUE | 0 | env->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 5704186734949433344 |
| PARAM_VALUE | 0 | env->prog | 4096-ptr_max |
| PARAM_VALUE | 3 | speculative | 0 |
| DATA_SOURCE | 0 | env | $0 |
| UNITS | 2 | prev_insn_idx | unit_array_size |
kernel/bpf/verifier.c maybe_fork_scalars() -> push_stack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data->btf_var.reg_type | 0,16,529,4112 |
| PARAM_VALUE | 3 | speculative | 0 |
| DATA_SOURCE | 0 | env | $0 |
| UNITS | 1 | insn_idx | unit_array_size |
| UNITS | 2 | prev_insn_idx | unit_array_size |
kernel/bpf/verifier.c process_iter_next_call() -> push_stack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state->frame | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state->parent | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data->btf_var.reg_type | 0,16,529,4112 |
| PARAM_VALUE | 0 | env->prog | 4096-ptr_max |
| PARAM_VALUE | 0 | env->prog->aux | 4096-ptr_max |
| PARAM_VALUE | 0 | env->prog->aux->kfunc_tab | 4096-ptr_max |
| PARAM_VALUE | 0 | *env->tmp_str_buf | 0-255 |
| PARAM_VALUE | 3 | speculative | 0 |
| CAPPED_DATA | 1 | insn_idx | 1 |
| CAPPED_DATA | 2 | prev_insn_idx | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 2 | prev_insn_idx | $1 |
| UNITS | 2 | prev_insn_idx | unit_array_size |
kernel/bpf/verifier.c push_callback_call() -> push_stack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state->frame | 4096-ptr_max |
| PARAM_VALUE | 0 | env->insn_aux_data->btf_var.reg_type | 0,16,529,4112 |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 0,4096-ptr_max |
| PARAM_VALUE | 0 | env->prog | 4096-ptr_max |
| PARAM_VALUE | 0 | env->prog->aux | 4096-ptr_max |
| PARAM_VALUE | 0 | env->subprog_info | 4096-ptr_max |
| PARAM_VALUE | 0 | *env->log.kbuf | 0-255 |
| PARAM_VALUE | 0 | *env->tmp_arg_name | 0-255 |
| PARAM_VALUE | 0 | *env->tmp_str_buf | 0-255 |
| PARAM_VALUE | 3 | speculative | 0 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 2 | prev_insn_idx | $2 |
| UNITS | 1 | insn_idx | unit_array_size |
kernel/bpf/verifier.c sanitize_speculative_path() -> push_stack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | env | 4096-ptr_max |
| PARAM_VALUE | 0 | env->bypass_spec_v1 | 0 |
| PARAM_VALUE | 0 | env->cur_state | 4096-ptr_max |
| PARAM_VALUE | 0 | env->cur_state->frame | 4096-ptr_max |
| PARAM_VALUE | 0 | env->ops->gen_ld_abs | 0,5704186734949433344 |
| PARAM_VALUE | 0 | *env->log.kbuf | 0-255 |
| PARAM_VALUE | 0 | *env->tmp_str_buf | 0-255 |
| PARAM_VALUE | 3 | speculative | 1 |
| DATA_SOURCE | 0 | env | $0 |
| DATA_SOURCE | 1 | insn_idx | $2 |
| DATA_SOURCE | 2 | prev_insn_idx | $3 |
| UNITS | 2 | prev_insn_idx | unit_array_size |