tag | line | file | source code |
verify_area | 94 | arch/i386/ibcs/binfmt_coff.c | status = verify_area (VERIFY_WRITE, |
verify_area | 49 | arch/i386/ibcs/binfmt_elf.c | verify_area(VERIFY_WRITE, (void *) elf_bss, nbyte); |
verify_area | 30 | arch/i386/kernel/ldt.c | error = verify_area(VERIFY_WRITE, ptr, size); |
verify_area | 46 | arch/i386/kernel/ldt.c | error = verify_area(VERIFY_READ, ptr, sizeof(ldt_info)); |
verify_area | 360 | arch/i386/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
verify_area | 375 | arch/i386/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
verify_area | 57 | arch/i386/kernel/signal.c | if (verify_area(VERIFY_READ, (void *) regs->esp, sizeof(context))) |
verify_area | 95 | arch/i386/kernel/signal.c | if (verify_area(VERIFY_WRITE,frame,32*4)) |
verify_area | 103 | arch/i386/kernel/vm86.c | error = verify_area(VERIFY_WRITE,v86,sizeof(*v86)); |
verify_area | 66 | arch/i386/math-emu/fpu_system.h | #define FPU_verify_area(x,y,z) if ( verify_area(x,y,z) ) \ |
verify_area | 341 | arch/mips/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
verify_area | 356 | arch/mips/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
verify_area | 53 | arch/mips/kernel/signal.c | if (verify_area(VERIFY_READ, (void *) regs->reg29, sizeof(context))) |
verify_area | 112 | arch/mips/kernel/signal.c | if (verify_area(VERIFY_WRITE,frame,21*4)) |
verify_area | 514 | drivers/block/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof ti); |
verify_area | 545 | drivers/block/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
verify_area | 575 | drivers/block/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof tocHdr); |
verify_area | 582 | drivers/block/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof entry); |
verify_area | 584 | drivers/block/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof entry); |
verify_area | 611 | drivers/block/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof subchnl); |
verify_area | 613 | drivers/block/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof subchnl); |
verify_area | 643 | drivers/block/aztcd.c | st=verify_area(VERIFY_READ,(void *) arg, sizeof(volctrl)); |
verify_area | 671 | drivers/block/aztcd.c | { st = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
verify_area | 673 | drivers/block/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof buf); |
verify_area | 80 | drivers/block/blk.h | case BLKROGET: { int __err = verify_area(VERIFY_WRITE, (void *) (where), sizeof(long)); \ |
verify_area | 1789 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, (char *) arg, sizeof(schi)); |
verify_area | 1790 | drivers/block/cdu31a.c | verify_area(VERIFY_WRITE, (char *) arg, sizeof(schi)); |
verify_area | 2265 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, (char *) arg, 6); |
verify_area | 2302 | drivers/block/cdu31a.c | verify_area(VERIFY_WRITE, hdr, sizeof(*hdr)); |
verify_area | 2324 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, entry, sizeof(*entry)); |
verify_area | 2325 | drivers/block/cdu31a.c | verify_area(VERIFY_WRITE, entry, sizeof(*entry)); |
verify_area | 2376 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, (char *) arg, sizeof(ti)); |
verify_area | 2442 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, (char *) arg, sizeof(volctrl)); |
verify_area | 2483 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, (char *) arg, sizeof(ra)); |
verify_area | 2486 | drivers/block/cdu31a.c | verify_area(VERIFY_WRITE, ra.buf, CD_FRAMESIZE_RAW * ra.nframes); |
verify_area | 2588 | drivers/block/floppy.c | i = verify_area(VERIFY_WRITE,param,size); |
verify_area | 2655 | drivers/block/floppy.c | i = verify_area(VERIFY_READ, raw_cmd.data, count ); |
verify_area | 2727 | drivers/block/floppy.c | i=verify_area(VERIFY_WRITE,(void *) param,16); |
verify_area | 794 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, loc, sizeof(*loc)); |
verify_area | 813 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
verify_area | 820 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
verify_area | 843 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
verify_area | 851 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
verify_area | 879 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (char *) arg, sizeof(struct hd_driveid)); |
verify_area | 1339 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *)arg, sizeof (msf)); |
verify_area | 1362 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *)arg, sizeof (ti)); |
verify_area | 1387 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (tochdr)); |
verify_area | 1409 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (tocentry)); |
verify_area | 1411 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (tocentry)); |
verify_area | 1444 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (subchnl)); |
verify_area | 1446 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (subchnl)); |
verify_area | 1492 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (volctrl)); |
verify_area | 1519 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (pc.c)); |
verify_area | 1531 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (reqbuf)); |
verify_area | 1390 | drivers/block/ide.c | if ((err = verify_area(VERIFY_WRITE, (long *)useraddr, sizeof(long)))) |
verify_area | 1411 | drivers/block/ide.c | err = verify_area(VERIFY_WRITE, loc, sizeof(*loc)); |
verify_area | 1457 | drivers/block/ide.c | err = verify_area(VERIFY_WRITE, (char *)arg, sizeof(*dev->id)); |
verify_area | 1512 | drivers/block/ide.c | if (!(err = verify_area(VERIFY_WRITE,(long *)arg,sizeof(long)))) |
verify_area | 324 | drivers/block/mcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof ti); |
verify_area | 367 | drivers/block/mcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
verify_area | 406 | drivers/block/mcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof tocHdr); |
verify_area | 417 | drivers/block/mcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof entry); |
verify_area | 454 | drivers/block/mcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof subchnl); |
verify_area | 493 | drivers/block/mcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof(volctrl)); |
verify_area | 3240 | drivers/block/sbpcd.c | i = verify_area(VERIFY_READ, (int *) arg, sizeof(int)); |
verify_area | 3295 | drivers/block/sbpcd.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_msf)); |
verify_area | 3323 | drivers/block/sbpcd.c | st=verify_area(VERIFY_READ,(void *) arg,sizeof(struct cdrom_ti)); |
verify_area | 3349 | drivers/block/sbpcd.c | st=verify_area(VERIFY_WRITE, (void *) arg, sizeof(struct cdrom_tochdr)); |
verify_area | 3356 | drivers/block/sbpcd.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_tocentry)); |
verify_area | 3373 | drivers/block/sbpcd.c | st=verify_area(VERIFY_WRITE,(void *) arg, sizeof(struct cdrom_tocentry)); |
verify_area | 3412 | drivers/block/sbpcd.c | st=verify_area(VERIFY_READ,(void *) arg,sizeof(volctrl)); |
verify_area | 3427 | drivers/block/sbpcd.c | st=verify_area(VERIFY_WRITE, (void *) arg, sizeof(struct cdrom_subchnl)); |
verify_area | 3500 | drivers/block/sbpcd.c | i=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_read_audio)); |
verify_area | 3504 | drivers/block/sbpcd.c | i=verify_area(VERIFY_WRITE, read_audio.buf, |
verify_area | 3687 | drivers/block/sbpcd.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_multisession)); |
verify_area | 3697 | drivers/block/sbpcd.c | st=verify_area(VERIFY_WRITE,(void *) arg, sizeof(struct cdrom_multisession)); |
verify_area | 1021 | drivers/block/sonycd535.c | verify_area(VERIFY_WRITE /* and read */ , (char *)arg, sizeof schi); |
verify_area | 1173 | drivers/block/sonycd535.c | verify_area(VERIFY_READ, (char *)arg, 6); |
verify_area | 1212 | drivers/block/sonycd535.c | verify_area(VERIFY_WRITE, hdr, sizeof *hdr); |
verify_area | 1232 | drivers/block/sonycd535.c | verify_area(VERIFY_WRITE /* and read */ , entry, sizeof *entry); |
verify_area | 1271 | drivers/block/sonycd535.c | verify_area(VERIFY_READ, (char *)arg, sizeof ti); |
verify_area | 1340 | drivers/block/sonycd535.c | verify_area(VERIFY_READ, (char *)arg, sizeof volctrl); |
verify_area | 247 | drivers/block/xd.c | if ((err = verify_area(VERIFY_WRITE,geometry,sizeof(*geometry)))) |
verify_area | 265 | drivers/block/xd.c | if ((err = verify_area(VERIFY_WRITE,(long *) arg,sizeof(long)))) |
verify_area | 145 | drivers/char/busmouse.c | if ((r = verify_area(VERIFY_WRITE, buffer, count))) |
verify_area | 2208 | drivers/char/console.c | i = verify_area(set ? VERIFY_READ : VERIFY_WRITE, (void *)arg, cmapsz); |
verify_area | 141 | drivers/char/consolemap.c | i = verify_area(VERIFY_READ, (void *)arg, E_TABSZ); |
verify_area | 157 | drivers/char/consolemap.c | i = verify_area(VERIFY_WRITE, (void *)arg, E_TABSZ); |
verify_area | 1930 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
verify_area | 1946 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
verify_area | 1955 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
verify_area | 492 | drivers/char/lp.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 499 | drivers/char/lp.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 90 | drivers/char/selection.c | int i = verify_area(VERIFY_READ, (char *) arg, 36); |
verify_area | 1579 | drivers/char/serial.c | error = verify_area(VERIFY_READ, value, sizeof(int)); |
verify_area | 1834 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg,sizeof(long)); |
verify_area | 1847 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 1857 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 1870 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 1878 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 1894 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 1903 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 1948 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, buf, count); |
verify_area | 2130 | drivers/char/tpqic02.c | error = verify_area(VERIFY_READ, buf, count); |
verify_area | 2593 | drivers/char/tpqic02.c | verify_area(VERIFY_READ, (int *) ioarg, sizeof(int)); |
verify_area | 2619 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, (void *) ioarg, sizeof(qic02_tape_dynconf)); |
verify_area | 2645 | drivers/char/tpqic02.c | error = verify_area(VERIFY_READ, (char *) ioarg, sizeof(qic02_tape_dynconf)); |
verify_area | 2677 | drivers/char/tpqic02.c | error = verify_area(VERIFY_READ, (char *) ioarg, sizeof(operation)); |
verify_area | 2734 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, (void *) ioarg, sizeof(ioctl_status)); |
verify_area | 2762 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, (void *) ioarg, sizeof(ioctl_tell)); |
verify_area | 1261 | drivers/char/tty_io.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct tstruct)); |
verify_area | 1304 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, 1); |
verify_area | 1311 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 1319 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, |
verify_area | 1348 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, sizeof(long)); |
verify_area | 1409 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 1431 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 1448 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, 1); |
verify_area | 1492 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 109 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, sizeof(struct termio)); |
verify_area | 124 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, sizeof(struct termios)); |
verify_area | 185 | drivers/char/tty_ioctl.c | i = verify_area(VERIFY_WRITE, termio, sizeof (struct termio)); |
verify_area | 233 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 302 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 313 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 325 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
verify_area | 336 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, |
verify_area | 348 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, |
verify_area | 185 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned char)); |
verify_area | 239 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned long)); |
verify_area | 278 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned long)); |
verify_area | 304 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned long)); |
verify_area | 318 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)a, sizeof(struct kbkeycode)); |
verify_area | 336 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)a, sizeof(struct kbkeycode)); |
verify_area | 350 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)a, sizeof(struct kbentry)); |
verify_area | 377 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)a, sizeof(struct kbentry)); |
verify_area | 447 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)a, sizeof(struct kbsentry)); |
verify_area | 474 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)a, sizeof(struct kbsentry)); |
verify_area | 543 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) a, sizeof(struct kbdiacrs)); |
verify_area | 559 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *) a, sizeof(struct kbdiacrs)); |
verify_area | 573 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned char)); |
verify_area | 593 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned char)); |
verify_area | 634 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)vtmode, sizeof(struct vt_mode)); |
verify_area | 655 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct vt_mode)); |
verify_area | 676 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE,(void *)vtstat, sizeof(struct vt_stat)); |
verify_area | 692 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(long)); |
verify_area | 819 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)vtsizes, sizeof(struct vt_sizes)); |
verify_area | 853 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)arg, sizeof(struct unimapinit)); |
verify_area | 868 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)arg, sizeof(struct unimapdesc)); |
verify_area | 873 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *) list, |
verify_area | 886 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct unimapdesc)); |
verify_area | 892 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) list, |
verify_area | 633 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, |
verify_area | 1422 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
verify_area | 1432 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (temp_i)); |
verify_area | 1446 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
verify_area | 1455 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (temp_i)); |
verify_area | 1464 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
verify_area | 1476 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
verify_area | 1485 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (temp_i)); |
verify_area | 1493 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
verify_area | 1502 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
verify_area | 1513 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (temp_i)); |
verify_area | 1522 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (struct ppp_stats)); |
verify_area | 1530 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (struct ppp_ddinfo)); |
verify_area | 1547 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, |
verify_area | 1559 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, |
verify_area | 1581 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
verify_area | 936 | drivers/net/slip.c | err = verify_area(VERIFY_READ, addr, 7); |
verify_area | 970 | drivers/net/slip.c | err = verify_area(VERIFY_WRITE, arg, 16); |
verify_area | 978 | drivers/net/slip.c | err = verify_area(VERIFY_WRITE, arg, sizeof(long)); |
verify_area | 986 | drivers/net/slip.c | err = verify_area(VERIFY_READ, arg, sizeof(long)); |
verify_area | 2087 | drivers/scsi/53c7,8xx.c | if (error = verify_area(VERIFY_READ,buf,count)) |
verify_area | 45 | drivers/scsi/scsi_ioctl.c | verify_area(VERIFY_WRITE, buffer, len); |
verify_area | 199 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_WRITE, cmd_in, sizeof(SCpnt->sense_buffer)); |
verify_area | 205 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_WRITE, cmd_in, (outlen > MAX_BUF) ? MAX_BUF : outlen); |
verify_area | 251 | drivers/scsi/scsi_ioctl.c | verify_area(VERIFY_WRITE, (void *) arg, sizeof(int)); |
verify_area | 29 | drivers/scsi/sd_ioctl.c | error = verify_area(VERIFY_WRITE, loc, sizeof(*loc)); |
verify_area | 51 | drivers/scsi/sd_ioctl.c | error = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
verify_area | 175 | drivers/scsi/sg.c | if ((i=verify_area(VERIFY_WRITE,buf,count))) |
verify_area | 237 | drivers/scsi/sg.c | if ((i=verify_area(VERIFY_READ,buf,count))) |
verify_area | 197 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_WRITE, (void *) arg, sizeof (struct cdrom_tochdr)); |
verify_area | 210 | drivers/scsi/sr_ioctl.c | verify_area (VERIFY_READ, (void *) arg, sizeof (struct cdrom_tocentry)); |
verify_area | 237 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_WRITE, (void *) arg, sizeof (struct cdrom_tocentry)); |
verify_area | 282 | drivers/scsi/sr_ioctl.c | verify_area (VERIFY_READ, (void *) arg, sizeof (struct cdrom_volctrl)); |
verify_area | 378 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_WRITE, (void *) arg, sizeof (struct cdrom_subchnl)); |
verify_area | 396 | drivers/scsi/sr_ioctl.c | err = verify_area(VERIFY_READ, (void *) arg, |
verify_area | 414 | drivers/scsi/sr_ioctl.c | err=verify_area(VERIFY_WRITE,(void *) arg, |
verify_area | 1695 | drivers/scsi/st.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(mtc)); |
verify_area | 1721 | drivers/scsi/st.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct mtget)); |
verify_area | 1784 | drivers/scsi/st.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct mtpos)); |
verify_area | 52 | drivers/sound/soundcard.c | error = verify_area(VERIFY_WRITE, addr, sizeof(int)); |
verify_area | 73 | fs/binfmt_elf.c | verify_area(VERIFY_WRITE, (void *) elf_bss, nbyte); |
verify_area | 1778 | fs/buffer.c | error = verify_area(VERIFY_WRITE, (void *) data, sizeof(int)); |
verify_area | 357 | fs/exec.c | error = verify_area(VERIFY_READ, tmp, sizeof(char *)); |
verify_area | 362 | fs/exec.c | error = verify_area(VERIFY_READ, p, 1); |
verify_area | 488 | fs/exec.c | result = verify_area(VERIFY_WRITE, addr, count); |
verify_area | 28 | fs/ext2/ioctl.c | if ((err = verify_area (VERIFY_WRITE, (long *) arg, sizeof(long)))) |
verify_area | 60 | fs/ext2/ioctl.c | if ((err = verify_area (VERIFY_WRITE, (long *) arg, sizeof(long)))) |
verify_area | 28 | fs/ioctl.c | error = verify_area(VERIFY_WRITE,(void *) arg,4); |
verify_area | 38 | fs/ioctl.c | error = verify_area(VERIFY_WRITE,(void *) arg,4); |
verify_area | 45 | fs/ioctl.c | error = verify_area(VERIFY_WRITE,(void *) arg,4); |
verify_area | 67 | fs/locks.c | error = verify_area(VERIFY_WRITE,l, sizeof(*l)); |
verify_area | 111 | fs/locks.c | error = verify_area(VERIFY_READ, l, sizeof(*l)); |
verify_area | 35 | fs/open.c | error = verify_area(VERIFY_WRITE, buf, sizeof(struct statfs)); |
verify_area | 56 | fs/open.c | error = verify_area(VERIFY_WRITE, buf, sizeof(struct statfs)); |
verify_area | 155 | fs/open.c | error = verify_area(VERIFY_READ, times, sizeof(*times)); |
verify_area | 141 | fs/pipe.c | error = verify_area(VERIFY_WRITE, (void *) arg,4); |
verify_area | 386 | fs/pipe.c | j = verify_area(VERIFY_WRITE,fildes,8); |
verify_area | 40 | fs/read_write.c | error = verify_area(VERIFY_WRITE, dirent, size); |
verify_area | 96 | fs/read_write.c | if ((err = verify_area(VERIFY_WRITE, result, sizeof(loff_t)))) |
verify_area | 136 | fs/read_write.c | error = verify_area(VERIFY_WRITE,buf,count); |
verify_area | 157 | fs/read_write.c | error = verify_area(VERIFY_READ,buf,count); |
verify_area | 164 | fs/select.c | error = verify_area(VERIFY_WRITE,fs_pointer,sizeof(fd_set)); |
verify_area | 213 | fs/select.c | i = verify_area(VERIFY_READ, buffer, 20); |
verify_area | 230 | fs/select.c | i = verify_area(VERIFY_WRITE, tvp, sizeof(*tvp)); |
verify_area | 102 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
verify_area | 118 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
verify_area | 134 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
verify_area | 150 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
verify_area | 167 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
verify_area | 182 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
verify_area | 198 | fs/stat.c | error = verify_area(VERIFY_WRITE,buf,bufsiz); |
verify_area | 110 | fs/super.c | err = verify_area(VERIFY_WRITE, buf, len); |
verify_area | 18 | include/linux/mm.h | extern int verify_area(int, const void *, unsigned long); |
verify_area | 51 | ipc/msg.c | err = verify_area (VERIFY_READ, msgp->mtext, msgsz); |
verify_area | 124 | ipc/msg.c | err = verify_area (VERIFY_WRITE, msgp->mtext, msgsz); |
verify_area | 348 | ipc/msg.c | err = verify_area (VERIFY_WRITE, buf, sizeof (struct msginfo)); |
verify_area | 357 | ipc/msg.c | err = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
verify_area | 382 | ipc/msg.c | err = verify_area (VERIFY_READ, buf, sizeof (*buf)); |
verify_area | 390 | ipc/msg.c | err = verify_area (VERIFY_WRITE, buf, sizeof(*buf)); |
verify_area | 395 | ipc/sem.c | i = verify_area(VERIFY_WRITE, tmp, sizeof(struct seminfo)); |
verify_area | 404 | ipc/sem.c | i = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
verify_area | 459 | ipc/sem.c | i = verify_area (VERIFY_WRITE, array, nsems*sizeof(ushort)); |
verify_area | 477 | ipc/sem.c | if ((i = verify_area (VERIFY_READ, array, nsems*sizeof(ushort)))) |
verify_area | 486 | ipc/sem.c | if ((i = verify_area (VERIFY_WRITE, buf, sizeof(*buf)))) |
verify_area | 491 | ipc/sem.c | if ((i = verify_area (VERIFY_READ, buf, sizeof (*buf)))) |
verify_area | 571 | ipc/sem.c | if ((i = verify_area (VERIFY_READ, tsops, nsops * sizeof(*tsops)))) |
verify_area | 215 | ipc/shm.c | err = verify_area (VERIFY_READ, buf, sizeof (*buf)); |
verify_area | 232 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (struct shminfo)); |
verify_area | 243 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (shm_info)); |
verify_area | 258 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
verify_area | 311 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
verify_area | 84 | ipc/util.c | if ((err = verify_area (VERIFY_READ, ptr, sizeof(long)))) |
verify_area | 104 | ipc/util.c | if ((err = verify_area (VERIFY_READ, ptr, sizeof(tmp)))) |
verify_area | 127 | ipc/util.c | if ((err = verify_area(VERIFY_WRITE, (ulong*) third, sizeof(ulong)))) |
verify_area | 487 | kernel/exit.c | flag = verify_area(VERIFY_WRITE, stat_addr, 4); |
verify_area | 23 | kernel/info.c | error = verify_area(VERIFY_WRITE, info, sizeof(struct sysinfo)); |
verify_area | 67 | kernel/itimer.c | error = verify_area(VERIFY_WRITE, value, sizeof(struct itimerval)); |
verify_area | 117 | kernel/itimer.c | error = verify_area(VERIFY_READ, value, sizeof(*value)); |
verify_area | 125 | kernel/itimer.c | error = verify_area(VERIFY_WRITE, ovalue, sizeof(struct itimerval)); |
verify_area | 108 | kernel/ksyms.c | X(verify_area), |
verify_area | 234 | kernel/module.c | if ((error = verify_area(VERIFY_READ, symtab, sizeof(int)))) |
verify_area | 242 | kernel/module.c | if ((error = verify_area(VERIFY_READ, symtab, size))) { |
verify_area | 381 | kernel/module.c | if ((i = verify_area(VERIFY_WRITE, to, nmodsyms * sizeof(*table)))) |
verify_area | 74 | kernel/printk.c | error = verify_area(VERIFY_WRITE,buf,len); |
verify_area | 107 | kernel/printk.c | error = verify_area(VERIFY_WRITE,buf,len); |
verify_area | 28 | kernel/signal.c | error = verify_area(VERIFY_READ, set, sizeof(sigset_t)); |
verify_area | 47 | kernel/signal.c | error = verify_area(VERIFY_WRITE, oset, sizeof(sigset_t)); |
verify_area | 72 | kernel/signal.c | error = verify_area(VERIFY_WRITE, set, 4); |
verify_area | 122 | kernel/signal.c | err = verify_area(VERIFY_READ, handler, 1); |
verify_area | 147 | kernel/signal.c | int err = verify_area(VERIFY_READ, action, sizeof(*action)); |
verify_area | 158 | kernel/signal.c | err = verify_area(VERIFY_READ, new_sa.sa_handler, 1); |
verify_area | 164 | kernel/signal.c | int err = verify_area(VERIFY_WRITE, oldaction, sizeof(*oldaction)); |
verify_area | 368 | kernel/sys.c | int error = verify_area(VERIFY_WRITE,tbuf,sizeof *tbuf); |
verify_area | 532 | kernel/sys.c | i = verify_area(VERIFY_WRITE, grouplist, sizeof(gid_t) * gidsetsize); |
verify_area | 585 | kernel/sys.c | error = verify_area(VERIFY_WRITE, name, sizeof *name); |
verify_area | 596 | kernel/sys.c | error = verify_area(VERIFY_WRITE, name,sizeof *name); |
verify_area | 617 | kernel/sys.c | error = verify_area(VERIFY_WRITE, name,sizeof *name); |
verify_area | 678 | kernel/sys.c | error = verify_area(VERIFY_WRITE,rlim,sizeof *rlim); |
verify_area | 695 | kernel/sys.c | err = verify_area(VERIFY_READ, rlim, sizeof(*rlim)); |
verify_area | 725 | kernel/sys.c | error = verify_area(VERIFY_WRITE, ru, sizeof *ru); |
verify_area | 112 | kernel/time.c | error = verify_area(VERIFY_WRITE, tloc, 4); |
verify_area | 127 | kernel/time.c | error = verify_area(VERIFY_READ, tptr, sizeof(*tptr)); |
verify_area | 222 | kernel/time.c | error = verify_area(VERIFY_WRITE, tv, sizeof *tv); |
verify_area | 230 | kernel/time.c | error = verify_area(VERIFY_WRITE, tz, sizeof *tz); |
verify_area | 280 | kernel/time.c | int error = verify_area(VERIFY_READ, tv, sizeof(*tv)); |
verify_area | 286 | kernel/time.c | int error = verify_area(VERIFY_READ, tz, sizeof(*tz)); |
verify_area | 334 | kernel/time.c | error = verify_area(VERIFY_WRITE, txc_p, sizeof(struct timex)); |
verify_area | 193 | mm/mmap.c | error = verify_area(VERIFY_READ, buffer, 6*sizeof(long)); |
verify_area | 1254 | net/inet/af_inet.c | err=verify_area(VERIFY_READ,(int *)arg,sizeof(long)); |
verify_area | 1261 | net/inet/af_inet.c | err=verify_area(VERIFY_WRITE,(void *) arg, sizeof(long)); |
verify_area | 1269 | net/inet/af_inet.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(struct timeval)); |
verify_area | 1222 | net/inet/arp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
verify_area | 1232 | net/inet/arp.c | err = verify_area(VERIFY_WRITE, arg, sizeof(struct arpreq)); |
verify_area | 1239 | net/inet/arp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
verify_area | 831 | net/inet/dev.c | err=verify_area(VERIFY_WRITE, arg, sizeof(struct ifconf)); |
verify_area | 843 | net/inet/dev.c | err=verify_area(VERIFY_WRITE,pos,len); |
verify_area | 996 | net/inet/dev.c | int err=verify_area(VERIFY_WRITE, arg, sizeof(struct ifreq)); |
verify_area | 2046 | net/inet/ip.c | err=verify_area(VERIFY_READ, optval, sizeof(int)); |
verify_area | 2102 | net/inet/ip.c | err=verify_area(VERIFY_READ, optval, sizeof(addr)); |
verify_area | 2159 | net/inet/ip.c | err=verify_area(VERIFY_READ, optval, sizeof(mreq)); |
verify_area | 2219 | net/inet/ip.c | err=verify_area(VERIFY_READ, optval, sizeof(mreq)); |
verify_area | 2278 | net/inet/ip.c | err=verify_area(VERIFY_READ,optval,optlen); |
verify_area | 2295 | net/inet/ip.c | err=verify_area(VERIFY_READ,optval,optlen); |
verify_area | 2339 | net/inet/ip.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
verify_area | 2343 | net/inet/ip.c | err=verify_area(VERIFY_WRITE, optval, len); |
verify_area | 2353 | net/inet/ip.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
verify_area | 2358 | net/inet/ip.c | err=verify_area(VERIFY_WRITE, optval, sizeof(int)); |
verify_area | 818 | net/inet/ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(ifr)); |
verify_area | 841 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,arg,sizeof(ifr)); |
verify_area | 858 | net/inet/ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(char)); |
verify_area | 863 | net/inet/ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(char)); |
verify_area | 1052 | net/inet/ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(rt)); |
verify_area | 1268 | net/inet/ipx.c | err=verify_area(VERIFY_READ,optval,sizeof(int)); |
verify_area | 1325 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,optlen,sizeof(int)); |
verify_area | 1329 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,optval,sizeof(int)); |
verify_area | 1795 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(unsigned long)); |
verify_area | 1809 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(unsigned long)); |
verify_area | 1827 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
verify_area | 1837 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(struct timeval)); |
verify_area | 397 | net/inet/rarp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
verify_area | 408 | net/inet/rarp.c | err = verify_area(VERIFY_WRITE, arg, sizeof(struct arpreq)); |
verify_area | 415 | net/inet/rarp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
verify_area | 625 | net/inet/route.c | err=verify_area(VERIFY_READ, src, sizeof(*src)); |
verify_area | 664 | net/inet/route.c | err=verify_area(VERIFY_READ, arg, sizeof(struct rtentry)); |
verify_area | 127 | net/inet/sock.c | err=verify_area(VERIFY_READ, optval, sizeof(int)); |
verify_area | 157 | net/inet/sock.c | err=verify_area(VERIFY_READ,optval,sizeof(ling)); |
verify_area | 244 | net/inet/sock.c | err=verify_area(VERIFY_WRITE,optval,sizeof(ling)); |
verify_area | 247 | net/inet/sock.c | err=verify_area(VERIFY_WRITE,optlen,sizeof(int)); |
verify_area | 302 | net/inet/sock.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
verify_area | 307 | net/inet/sock.c | err=verify_area(VERIFY_WRITE, optval, sizeof(int)); |
verify_area | 975 | net/inet/tcp.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
verify_area | 986 | net/inet/tcp.c | err = verify_area(VERIFY_WRITE,(void *) arg, |
verify_area | 999 | net/inet/tcp.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
verify_area | 5008 | net/inet/tcp.c | err=verify_area(VERIFY_READ, optval, sizeof(int)); |
verify_area | 5052 | net/inet/tcp.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
verify_area | 5057 | net/inet/tcp.c | err=verify_area(VERIFY_WRITE, optval, sizeof(int)); |
verify_area | 423 | net/inet/udp.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
verify_area | 447 | net/inet/udp.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
verify_area | 123 | net/socket.c | if((err=verify_area(VERIFY_READ,uaddr,ulen))<0) |
verify_area | 135 | net/socket.c | if((err=verify_area(VERIFY_WRITE,ulen,sizeof(*ulen)))<0) |
verify_area | 144 | net/socket.c | if((err=verify_area(VERIFY_WRITE,uaddr,len))<0) |
verify_area | 332 | net/socket.c | if ((err=verify_area(VERIFY_WRITE,ubuf,size))<0) |
verify_area | 361 | net/socket.c | if ((err=verify_area(VERIFY_READ,ubuf,size))<0) |
verify_area | 704 | net/socket.c | er=verify_area(VERIFY_WRITE, usockvec, 2 * sizeof(int)); |
verify_area | 961 | net/socket.c | err=verify_area(VERIFY_READ, buff, len); |
verify_area | 988 | net/socket.c | err=verify_area(VERIFY_READ,buff,len); |
verify_area | 1024 | net/socket.c | err=verify_area(VERIFY_WRITE, buff, len); |
verify_area | 1054 | net/socket.c | err=verify_area(VERIFY_WRITE,buff,len); |
verify_area | 1157 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
verify_area | 1164 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
verify_area | 1171 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
verify_area | 1178 | net/socket.c | er=verify_area(VERIFY_READ, args, 2 * sizeof(long)); |
verify_area | 1184 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
verify_area | 1191 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
verify_area | 1198 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
verify_area | 1205 | net/socket.c | er=verify_area(VERIFY_READ, args, 4 * sizeof(long)); |
verify_area | 1213 | net/socket.c | er=verify_area(VERIFY_READ, args, 4 * sizeof(unsigned long)); |
verify_area | 1221 | net/socket.c | er=verify_area(VERIFY_READ, args, 6 * sizeof(unsigned long)); |
verify_area | 1231 | net/socket.c | er=verify_area(VERIFY_READ, args, 4 * sizeof(unsigned long)); |
verify_area | 1239 | net/socket.c | er=verify_area(VERIFY_READ, args, 6 * sizeof(unsigned long)); |
verify_area | 1249 | net/socket.c | er=verify_area(VERIFY_READ, args, 2* sizeof(unsigned long)); |
verify_area | 1255 | net/socket.c | er=verify_area(VERIFY_READ, args, 5*sizeof(unsigned long)); |
verify_area | 1264 | net/socket.c | er=verify_area(VERIFY_READ, args, 5*sizeof(unsigned long)); |
verify_area | 843 | net/unix/sock.c | er=verify_area(VERIFY_WRITE,(void *)arg, sizeof(unsigned long)); |
verify_area | 854 | net/unix/sock.c | er=verify_area(VERIFY_WRITE,(void *)arg, sizeof(unsigned long)); |