Documented in 1 files:
Defined in 1 files as a prototype:
Defined in 2 files as a function:
Referenced in 1 files:
Smatch caller information:
ipc/msg.c find_msg() -> security_msg_queue_msgrcv()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | msq | 4096-ptr_max |
| PARAM_VALUE | 0 | msq->deleted | 0 |
| PARAM_VALUE | 4 | mode | 1-5 |
| DATA_SOURCE | 4 | mode | $2 |
| PREEMPT_ADD | |||
| USER_DATA | 3 | type | s64min-s64max |
| LOCK2 | &msq->q_perm.lock | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct kern_ipc_perm)->lock |
ipc/msg.c pipelined_send() -> security_msg_queue_msgrcv()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | msq | 4096-ptr_max |
| PARAM_VALUE | 0 | msq->deleted | 0 |
| PARAM_VALUE | 1 | msg | 4096-ptr_max |
| PARAM_VALUE | 1 | msg->m_ts | 0-u32max |
| PARAM_VALUE | 1 | msg->m_type | 1-s64max |
| PARAM_VALUE | 1 | msg->next | 0 |
| PARAM_VALUE | 1 | msg->security | 0,4096-ptr_max |
| PARAM_VALUE | 4 | mode | 1-5 |
| BUF_SIZE | 1 | msg | 48-4096 |
| BUF_SIZE | 1 | msg | 48-4096 |
| CAPPED_DATA | 1 | msg->m_ts | 1 |
| CAPPED_DATA | 1 | msg->m_type | 1 |
| DATA_SOURCE | 1 | msg | $1 |
| NOSPEC | 1 | msg->m_ts | |
| PREEMPT_ADD | |||
| USER_DATA | 1 | msg->m_ts | 0-s32max[c] |
| USER_DATA | 1 | msg->m_type | 1-s64max[c] |
| LOCK2 | &msq->q_perm.lock | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct kern_ipc_perm)->lock |