Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/gpu/drm/vc4/vc4_validate.c validate_flush() -> validate_bin_pos()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | exec | 4096-ptr_max |
| PARAM_VALUE | 0 | exec->bin_u | 16,4096-ptr_max |
| PARAM_VALUE | 2 | pos | 0-2147483646 |
| BUF_SIZE | 0 | exec->args | 128-16383 |
| BUF_SIZE | 0 | exec->exec_bo | 736 |
| CAPPED_DATA | 0 | exec->shader_rec_size | 1 |
| CAPPED_DATA | 0 | exec->uniforms_size | 1 |
| DATA_SOURCE | 0 | exec | $0 |
| DATA_SOURCE | 1 | untrusted | $2 |
| NOSPEC | 0 | exec->shader_rec_size | |
| NOSPEC | 0 | exec->uniforms_size | |
| USER_DATA | 0 | exec->args->bin_cl | 0-u64max[u] |
| USER_DATA | 0 | exec->args->bin_cl_size | 1-s32max[u] |
| USER_DATA | 0 | exec->args->bo_handle_count | 1-u32max[u] |
| USER_DATA | 0 | exec->args->bo_handles | 0-u64max[u] |
| USER_DATA | 0 | exec->args->clear_s | 0-255[u] |
| USER_DATA | 0 | exec->args->clear_z | 0-u32max[u] |
| USER_DATA | 0 | exec->args->color_read.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->color_read.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->color_read.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->color_read.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->args->color_write.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->color_write.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->color_write.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->color_write.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->args->flags | 0-14[u] |
| USER_DATA | 0 | exec->args->height | 0-u16max[u] |
| USER_DATA | 0 | exec->args->in_sync | 0-u32max[u] |
| USER_DATA | 0 | exec->args->max_x_tile | 0-255[u] |
| USER_DATA | 0 | exec->args->max_y_tile | 0-255[u] |
| USER_DATA | 0 | exec->args->min_x_tile | 0-255[u] |
| USER_DATA | 0 | exec->args->min_y_tile | 0-255[u] |
| USER_DATA | 0 | exec->args->msaa_color_write.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->msaa_color_write.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->msaa_color_write.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->msaa_color_write.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->args->msaa_zs_write.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->msaa_zs_write.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->msaa_zs_write.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->msaa_zs_write.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->args->out_sync | 0-u32max[u] |
| USER_DATA | 0 | exec->args->pad | 0-16777215[u] |
| USER_DATA | 0 | exec->args->pad2 | 0[u] |
| USER_DATA | 0 | exec->args->perfmonid | 0-u32max[u] |
| USER_DATA | 0 | exec->args->seqno | 0-u64max[u] |
| USER_DATA | 0 | exec->args->shader_rec | 0-u64max[u] |
| USER_DATA | 0 | exec->args->shader_rec_count | 0-536870910[u] |
| USER_DATA | 0 | exec->args->shader_rec_size | 0-s32max[u] |
| USER_DATA | 0 | exec->args->uniforms | 0-u64max[u] |
| USER_DATA | 0 | exec->args->uniforms_size | 0-s32max[u] |
| USER_DATA | 0 | exec->args->width | 0-u16max[u] |
| USER_DATA | 0 | exec->args->zs_read.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->zs_read.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->zs_read.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->zs_read.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->args->zs_write.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->zs_write.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->zs_write.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->zs_write.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->shader_rec_size | 0-s32max[c] |
| USER_DATA | 0 | exec->shader_state_size | 0-536870910[u] |
| USER_DATA | 0 | exec->uniforms_size | 0-s32max[c] |
| USER_DATA | 0 | *exec->shader_rec_u | s64min-s64max |
| USER_DATA | 0 | *exec->uniforms_u | s64min-s64max |
| USER_DATA | 2 | pos | 0-2147483646 |
| NO_OVERFLOW_SIMPLE | 0 | exec->shader_state_size | |
| USER_PTR | 0 | exec->args | |
| USER_PTR | 0 | exec->args->clear_color | |
| USER_PTR | 0 | exec->bin_u | |
| USER_PTR | 0 | exec->shader_rec_u | |
| USER_PTR | 0 | exec->uniforms_u | |
| USER_PTR | 1 | untrusted |
drivers/gpu/drm/vc4/vc4_validate.c validate_increment_semaphore() -> validate_bin_pos()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | exec | 4096-ptr_max |
| PARAM_VALUE | 0 | exec->bin_u | 16,4096-ptr_max |
| BUF_SIZE | 0 | exec->args | 128-16383 |
| BUF_SIZE | 0 | exec->exec_bo | 736 |
| CAPPED_DATA | 0 | exec->shader_rec_size | 1 |
| CAPPED_DATA | 0 | exec->uniforms_size | 1 |
| DATA_SOURCE | 0 | exec | $0 |
| DATA_SOURCE | 1 | untrusted | $2 |
| NOSPEC | 0 | exec->shader_rec_size | |
| NOSPEC | 0 | exec->uniforms_size | |
| USER_DATA | 0 | exec->args->bin_cl | 0-u64max[u] |
| USER_DATA | 0 | exec->args->bin_cl_size | 1-s32max[u] |
| USER_DATA | 0 | exec->args->bo_handle_count | 1-u32max[u] |
| USER_DATA | 0 | exec->args->bo_handles | 0-u64max[u] |
| USER_DATA | 0 | exec->args->clear_s | 0-255[u] |
| USER_DATA | 0 | exec->args->clear_z | 0-u32max[u] |
| USER_DATA | 0 | exec->args->color_read.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->color_read.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->color_read.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->color_read.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->args->color_write.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->color_write.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->color_write.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->color_write.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->args->flags | 0-14[u] |
| USER_DATA | 0 | exec->args->height | 0-u16max[u] |
| USER_DATA | 0 | exec->args->in_sync | 0-u32max[u] |
| USER_DATA | 0 | exec->args->max_x_tile | 0-255[u] |
| USER_DATA | 0 | exec->args->max_y_tile | 0-255[u] |
| USER_DATA | 0 | exec->args->min_x_tile | 0-255[u] |
| USER_DATA | 0 | exec->args->min_y_tile | 0-255[u] |
| USER_DATA | 0 | exec->args->msaa_color_write.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->msaa_color_write.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->msaa_color_write.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->msaa_color_write.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->args->msaa_zs_write.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->msaa_zs_write.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->msaa_zs_write.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->msaa_zs_write.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->args->out_sync | 0-u32max[u] |
| USER_DATA | 0 | exec->args->pad | 0-16777215[u] |
| USER_DATA | 0 | exec->args->pad2 | 0[u] |
| USER_DATA | 0 | exec->args->perfmonid | 0-u32max[u] |
| USER_DATA | 0 | exec->args->seqno | 0-u64max[u] |
| USER_DATA | 0 | exec->args->shader_rec | 0-u64max[u] |
| USER_DATA | 0 | exec->args->shader_rec_count | 0-536870910[u] |
| USER_DATA | 0 | exec->args->shader_rec_size | 0-s32max[u] |
| USER_DATA | 0 | exec->args->uniforms | 0-u64max[u] |
| USER_DATA | 0 | exec->args->uniforms_size | 0-s32max[u] |
| USER_DATA | 0 | exec->args->width | 0-u16max[u] |
| USER_DATA | 0 | exec->args->zs_read.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->zs_read.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->zs_read.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->zs_read.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->args->zs_write.bits | 0-u16max[u] |
| USER_DATA | 0 | exec->args->zs_write.flags | 0-u16max[u] |
| USER_DATA | 0 | exec->args->zs_write.hindex | 0-u32max[u] |
| USER_DATA | 0 | exec->args->zs_write.offset | 0-u32max[u] |
| USER_DATA | 0 | exec->shader_rec_size | 0-s32max[c] |
| USER_DATA | 0 | exec->shader_state_size | 0-536870910[u] |
| USER_DATA | 0 | exec->uniforms_size | 0-s32max[c] |
| USER_DATA | 0 | *exec->shader_rec_u | s64min-s64max |
| USER_DATA | 0 | *exec->uniforms_u | s64min-s64max |
| NO_OVERFLOW_SIMPLE | 0 | exec->shader_state_size | |
| USER_PTR | 0 | exec->args | |
| USER_PTR | 0 | exec->args->clear_color | |
| USER_PTR | 0 | exec->bin_u | |
| USER_PTR | 0 | exec->shader_rec_u | |
| USER_PTR | 0 | exec->uniforms_u | |
| USER_PTR | 1 | untrusted |