Defined in 2 files as a function:
- include/linux/userfaultfd_k.h, line 222 (as a function)
- include/linux/userfaultfd_k.h, line 371 (as a function)
Referenced in 10 files:
- fs/proc/task_mmu.c
- include/linux/userfaultfd_k.h
- mm/huge_memory.c
- mm/hugetlb.c
- mm/memory.c
- mm/migrate.c
- mm/mprotect.c, line 306
- mm/mremap.c, line 306
- mm/swapfile.c, line 2509
- mm/userfaultfd.c
Smatch caller information:
mm/huge_memory.c __split_huge_pmd_locked() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma->vm_mm | (-1),1-s32max |
| BUF_SIZE | 0 | vma->vm_ops | (-1),144 |
| BUF_SIZE | 0 | vma->vm_private_data | s32min-(-1),1-s32max |
| CAPPED_DATA | 0 | vma->vm_start | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_end | |
| NOSPEC | 0 | vma->vm_pgoff | |
| NOSPEC | 0 | vma->vm_start | |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->pfnmap_track_ctx->pfn | 0-9007201402224637[c] |
| USER_DATA | 0 | vma->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | vma->shared.rb_subtree_last | 0-u64max[u] |
| USER_DATA | 0 | vma->vm_end | 0-u64max |
| USER_DATA | 0 | vma->vm_pgoff | 0-9007201402224637[c] |
| USER_DATA | 0 | vma->vm_start | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_policy->mode | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | 0 | &vma->vm_private_data->rw_sema |
mm/huge_memory.c __split_huge_zero_page_pmd() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma->vm_mm | (-1),1-s32max |
| BUF_SIZE | 0 | vma->vm_ops | (-1),144 |
| BUF_SIZE | 0 | vma->vm_private_data | s32min-(-1),1-s32max |
| CAPPED_DATA | 0 | vma->vm_start | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_end | |
| NOSPEC | 0 | vma->vm_pgoff | |
| NOSPEC | 0 | vma->vm_start | |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->pfnmap_track_ctx->pfn | 0-9007201402224637[c] |
| USER_DATA | 0 | vma->pfnmap_track_ctx->size | 0,4096-u64max[c] |
| USER_DATA | 0 | vma->shared.rb_subtree_last | 0-u64max[u] |
| USER_DATA | 0 | vma->vm_end | 0-u64max |
| USER_DATA | 0 | vma->vm_pgoff | 0-9007201402224637[c] |
| USER_DATA | 0 | vma->vm_start | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_policy->mode | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | ptl | ||
| HALF_LOCKED2 | 0 | &vma->vm_private_data->rw_sema |
mm/huge_memory.c change_huge_pmd() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_start | 1-u64max[c] |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| HALF_LOCKED2 | &dst_mm->mmap_lock | ||
| HALF_LOCKED2 | &mm->mmap_lock |
mm/huge_memory.c copy_huge_pmd() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_policy | 1 |
| DATA_SOURCE | 0 | vma | $6 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/huge_memory.c move_huge_pmd() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| DATA_SOURCE | 0 | vma | $0 |
| LOCK2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &tsk->signal->exec_update_lock | ||
| HALF_LOCKED2 | new_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/huge_memory.c move_pages_huge_pmd() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_userfaultfd_ctx.ctx | 1 |
| DATA_SOURCE | 0 | vma | $4 |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xfffffffffffffff7 |
| LOCK2 | &ctx->map_changing_lock | ||
| TYPE_LOCK | (struct userfaultfd_ctx)->map_changing_lock |
mm/huge_memory.c remove_migration_pmd() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 0 | vma | unit_byte |
| HALF_LOCKED2 | &anon_vma->root->rwsem | ||
| HALF_LOCKED2 | &folio->private->lock |
mm/huge_memory.c userfaultfd_protected() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma->vm_mm | (-1),1-s32max |
| CAPPED_DATA | 0 | vma->vm_mm->mm_id | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xfffffffffdffffff |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/userfaultfd.c move_present_ptes() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_userfaultfd_ctx.ctx | 1 |
| DATA_SOURCE | 0 | vma | $1 |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xfffffffffffffff7 |
| LOCK2 | &ctx->map_changing_lock | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct userfaultfd_ctx)->map_changing_lock |
mm/userfaultfd.c move_swap_pte() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_userfaultfd_ctx.ctx | 1 |
| DATA_SOURCE | 0 | vma | $1 |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xfffffffffffffff7 |
| LOCK2 | &ctx->map_changing_lock | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct userfaultfd_ctx)->map_changing_lock |
mm/userfaultfd.c move_zeropage_pte() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_userfaultfd_ctx.ctx | 1 |
| DATA_SOURCE | 0 | vma | $1 |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xfffffffffffffff7 |
| LOCK2 | &ctx->map_changing_lock | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct userfaultfd_ctx)->map_changing_lock |
mm/userfaultfd.c mrwprotect_range() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 1-u64max |
| DATA_SOURCE | 0 | vma | r vma_find |
| LOCK2 | &dst_mm->mmap_lock | ||
| LOCK2 | _T->lock | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/userfaultfd.c userfaultfd_clear_vma() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_userfaultfd_ctx.ctx | 1 |
| DATA_SOURCE | 0 | vma | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | &mm->mmap_lock | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/userfaultfd.c userfaultfd_protected() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_userfaultfd_ctx.ctx | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | &mm->mmap_lock | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/swapfile.c unuse_pte() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| CAPABLE | 0 | 21 | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_policy->mode | |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
fs/proc/task_mmu.c pagemap_hugetlb_category() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| HALF_LOCKED2 | &m->lock | ||
| HALF_LOCKED2 | &mapping->i_mmap_rwsem | ||
| HALF_LOCKED2 | 0 | &vma->vm_file->f_mapping->i_mmap_rwsem |
fs/proc/task_mmu.c pagemap_hugetlb_category() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| HALF_LOCKED2 | &m->lock | ||
| HALF_LOCKED2 | &mapping->i_mmap_rwsem | ||
| HALF_LOCKED2 | 0 | &vma->vm_file->f_mapping->i_mmap_rwsem |
fs/proc/task_mmu.c pagemap_page_category() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock |
fs/proc/task_mmu.c pagemap_page_category() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock |
fs/proc/task_mmu.c pagemap_thp_category() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 0,4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| HALF_LOCKED2 | &mm->mmap_lock |
fs/proc/task_mmu.c pagemap_thp_category() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 0,4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| HALF_LOCKED2 | &mm->mmap_lock |
mm/mprotect.c change_present_ptes() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_end | 1-u64max[c] |
| USER_DATA | 0 | vma->vm_start | 1-u64max[c] |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock |
mm/hugetlb.c copy_hugetlb_page_range() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_policy | 1 |
| DATA_SOURCE | 0 | vma | $3 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/hugetlb.c hugetlb_change_protection() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| CAPPED_DATA | 0 | vma | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_start | |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_start | 1-u64max[c] |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_end | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| LOCK2 | 0 | &vma->vm_file->f_mapping->i_mmap_rwsem | |
| HALF_LOCKED2 | &dst_mm->mmap_lock | ||
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | _T->lock | ||
| TYPE_LOCK | (struct address_space)->i_mmap_rwsem |
mm/hugetlb.c hugetlb_fault() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_flags | 1-u64max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma->vm_file | (-1),4,24,64,168-s32max |
| BUF_SIZE | 0 | vma->vm_private_data | (-1)-s32max |
| CAPPED_DATA | 0 | vma | 1 |
| DATA_SOURCE | 0 | vma | $1 |
| NOSPEC | 0 | vma->vm_pgoff | |
| NOSPEC | 0 | vma->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_end | 1073741824-u64max[c] |
| USER_DATA | 0 | vma->vm_pgoff | 0-4503599627370495[c] |
| USER_DATA | 0 | vma->vm_start | 0-18446744073709547520 |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_policy->mode | |
| HALF_LOCKED2 | &mm->mmap_lock |
mm/hugetlb.c hugetlb_install_folio() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| CAPPED_DATA | 0 | vma | 1 |
| CAPPED_DATA | 0 | vma->vm_mm->mm_id | 1 |
| CAPPED_DATA | 0 | vma->vm_start | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| PARAM_COMPARE | 0 | vma->vm_end | > $0->vm_start |
| TERMINATED | 0 | vma->vm_mm->mm_lock_seq.dep_map.name | 1 |
| TERMINATED | 0 | vma->vm_mm->write_protect_seq.dep_map.name | 1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/hugetlb.c move_huge_pte() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | <- disables preempt | ||
| LOCK2 | &mapping->i_mmap_rwsem | ||
| LOCK2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &tsk->signal->exec_update_lock | ||
| HALF_LOCKED2 | src_ptl | ||
| TYPE_LOCK | (struct address_space)->i_mmap_rwsem | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/hugetlb.c userfaultfd_protected() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma | (-1)-s32max |
| BUF_SIZE | 0 | vma->vm_mm | (-1)-s32max |
| CAPPED_DATA | 0 | vma | 1 |
| CAPPED_DATA | 0 | vma->vm_policy | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_size | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/mremap.c move_ptes() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | old_ptl | ||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &tsk->signal->exec_update_lock | ||
| HALF_LOCKED2 | new_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/memory.c __copy_present_ptes() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | dst_ptl | ||
| LOCK2 | rcu_read | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/memory.c copy_present_page() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_mm->mm_id | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xfffffffffdffffff |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | dst_ptl | ||
| LOCK2 | rcu_read | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/memory.c do_swap_page() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_policy->flags | 0,24,8192-57368[c] |
| USER_DATA | 0 | vma->vm_policy->home_node | 0-1023 |
| USER_DATA | 0 | vma->vm_policy->mode | 2-3,5-u16max |
| LOCK2 | vmf->ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock |
mm/memory.c numa_rebuild_large_mapping() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_flags | 1-u64max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | vmf->ptl | ||
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | rcu_read |
mm/memory.c restore_exclusive_pte() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BUF_SIZE | 0 | vma | (-1),4,24,64,168-s32max |
| BUF_SIZE | 0 | vma | (-1),4,24,64,168-s32max |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &oldmm->mmap_lock | ||
| HALF_LOCKED2 | dst_ptl | ||
| HALF_LOCKED2 | rcu_read | ||
| HALF_LOCKED2 | src_ptl | ||
| HALF_LOCKED2 | vmf->ptl |
mm/memory.c userfaultfd_huge_pmd_rwp() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_flags | 1-u64max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| BUF_SIZE | 0 | vma | (-1),1-s32max |
| DATA_SOURCE | 0 | vma | $0 |
| NOSPEC | 0 | vma->vm_start | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | vma->vm_end | 4096-u64max[c] |
| USER_DATA | 0 | vma->vm_start | 0-18446744073709547520 |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_file->f_mapping->host->i_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_pgoff | |
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_policy->mode | |
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &pool->lock |
mm/memory.c userfaultfd_protected() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->flags.__vma_flags | 4096-ptr_max |
| CAPPED_DATA | 0 | vma->vm_mm->mm_id | 1 |
| DATA_SOURCE | 0 | vma | $0 |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xfffffffffdffffff |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| UNITS | 0 | vma | unit_byte |
| LOCK2 | &mm->mmap_lock | ||
| LOCK2 | &oldmm->mmap_lock | ||
| LOCK2 | dst_ptl | ||
| LOCK2 | rcu_read | ||
| LOCK2 | src_ptl | ||
| TYPE_LOCK | (struct mm_struct)->mmap_lock |
mm/memory.c userfaultfd_pte_rwp() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| PARAM_VALUE | 0 | vma->vm_flags | 1-u64max |
| DATA_SOURCE | 0 | vma | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &mm->mmap_lock | ||
| HALF_LOCKED2 | &pool->lock |
mm/migrate.c remove_migration_pte() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | vma->vm_start | |
| HALF_LOCKED2 | &anon_vma->root->rwsem | ||
| HALF_LOCKED2 | &folio->private->lock |
mm/migrate.c try_to_map_unused_to_zeropage() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| BIT_INFO | 0 | vma->vm_flags | 0x0,0xffffffffffffdfff |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 0 | vma | unit_byte |
| HALF_LOCKED2 | &anon_vma->root->rwsem | ||
| HALF_LOCKED2 | &folio->private->lock |
mm/khugepaged.c userfaultfd_protected() -> userfaultfd_rwp()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | vma | 4096-ptr_max |
| DATA_SOURCE | 0 | vma | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &mapping->i_mmap_rwsem | ||
| HALF_LOCKED2 | &mm->mmap_lock |