| tag | line | file | source code |
|---|
| verify_area | 94 | arch/i386/ibcs/binfmt_coff.c | status = verify_area (VERIFY_WRITE, |
| verify_area | 49 | arch/i386/ibcs/binfmt_elf.c | verify_area(VERIFY_WRITE, (void *) elf_bss, nbyte); |
| verify_area | 30 | arch/i386/kernel/ldt.c | error = verify_area(VERIFY_WRITE, ptr, size); |
| verify_area | 46 | arch/i386/kernel/ldt.c | error = verify_area(VERIFY_READ, ptr, sizeof(ldt_info)); |
| verify_area | 360 | arch/i386/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
| verify_area | 375 | arch/i386/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
| verify_area | 57 | arch/i386/kernel/signal.c | if (verify_area(VERIFY_READ, (void *) regs->esp, sizeof(context))) |
| verify_area | 95 | arch/i386/kernel/signal.c | if (verify_area(VERIFY_WRITE,frame,32*4)) |
| verify_area | 111 | arch/i386/kernel/vm86.c | error = verify_area(VERIFY_WRITE,v86,sizeof(*v86)); |
| verify_area | 66 | arch/i386/math-emu/fpu_system.h | #define FPU_verify_area(x,y,z) if ( verify_area(x,y,z) ) \ |
| verify_area | 341 | arch/mips/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
| verify_area | 356 | arch/mips/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
| verify_area | 53 | arch/mips/kernel/signal.c | if (verify_area(VERIFY_READ, (void *) regs->reg29, sizeof(context))) |
| verify_area | 112 | arch/mips/kernel/signal.c | if (verify_area(VERIFY_WRITE,frame,21*4)) |
| verify_area | 569 | drivers/block/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof ti); |
| verify_area | 600 | drivers/block/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
| verify_area | 630 | drivers/block/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof tocHdr); |
| verify_area | 637 | drivers/block/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof entry); |
| verify_area | 639 | drivers/block/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof entry); |
| verify_area | 666 | drivers/block/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof subchnl); |
| verify_area | 668 | drivers/block/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof subchnl); |
| verify_area | 698 | drivers/block/aztcd.c | st=verify_area(VERIFY_READ,(void *) arg, sizeof(volctrl)); |
| verify_area | 727 | drivers/block/aztcd.c | { st = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
| verify_area | 729 | drivers/block/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof buf); |
| verify_area | 80 | drivers/block/blk.h | case BLKROGET: { int __err = verify_area(VERIFY_WRITE, (void *) (where), sizeof(long)); \ |
| verify_area | 1789 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, (char *) arg, sizeof(schi)); |
| verify_area | 1790 | drivers/block/cdu31a.c | verify_area(VERIFY_WRITE, (char *) arg, sizeof(schi)); |
| verify_area | 2265 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, (char *) arg, 6); |
| verify_area | 2302 | drivers/block/cdu31a.c | verify_area(VERIFY_WRITE, hdr, sizeof(*hdr)); |
| verify_area | 2324 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, entry, sizeof(*entry)); |
| verify_area | 2325 | drivers/block/cdu31a.c | verify_area(VERIFY_WRITE, entry, sizeof(*entry)); |
| verify_area | 2376 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, (char *) arg, sizeof(ti)); |
| verify_area | 2442 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, (char *) arg, sizeof(volctrl)); |
| verify_area | 2483 | drivers/block/cdu31a.c | verify_area(VERIFY_READ, (char *) arg, sizeof(ra)); |
| verify_area | 2486 | drivers/block/cdu31a.c | verify_area(VERIFY_WRITE, ra.buf, CD_FRAMESIZE_RAW * ra.nframes); |
| verify_area | 2591 | drivers/block/floppy.c | i = verify_area(VERIFY_WRITE,param,size); |
| verify_area | 2658 | drivers/block/floppy.c | i = verify_area(VERIFY_READ, raw_cmd.data, count ); |
| verify_area | 2730 | drivers/block/floppy.c | i=verify_area(VERIFY_WRITE,(void *) param,16); |
| verify_area | 794 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, loc, sizeof(*loc)); |
| verify_area | 813 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 820 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 843 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 851 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 879 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (char *) arg, sizeof(struct hd_driveid)); |
| verify_area | 1339 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *)arg, sizeof (msf)); |
| verify_area | 1362 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *)arg, sizeof (ti)); |
| verify_area | 1387 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (tochdr)); |
| verify_area | 1409 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (tocentry)); |
| verify_area | 1411 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (tocentry)); |
| verify_area | 1444 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (subchnl)); |
| verify_area | 1446 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (subchnl)); |
| verify_area | 1492 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (volctrl)); |
| verify_area | 1519 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (pc.c)); |
| verify_area | 1531 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (reqbuf)); |
| verify_area | 1398 | drivers/block/ide.c | if ((err = verify_area(VERIFY_WRITE, (long *)useraddr, sizeof(long)))) |
| verify_area | 1419 | drivers/block/ide.c | err = verify_area(VERIFY_WRITE, loc, sizeof(*loc)); |
| verify_area | 1465 | drivers/block/ide.c | err = verify_area(VERIFY_WRITE, (char *)arg, sizeof(*dev->id)); |
| verify_area | 1520 | drivers/block/ide.c | if (!(err = verify_area(VERIFY_WRITE,(long *)arg,sizeof(long)))) |
| verify_area | 324 | drivers/block/mcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof ti); |
| verify_area | 367 | drivers/block/mcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
| verify_area | 406 | drivers/block/mcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof tocHdr); |
| verify_area | 417 | drivers/block/mcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof entry); |
| verify_area | 454 | drivers/block/mcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof subchnl); |
| verify_area | 493 | drivers/block/mcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof(volctrl)); |
| verify_area | 3107 | drivers/block/sbpcd.c | i = verify_area(VERIFY_READ, (int *) arg, sizeof(int)); |
| verify_area | 3162 | drivers/block/sbpcd.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_msf)); |
| verify_area | 3190 | drivers/block/sbpcd.c | st=verify_area(VERIFY_READ,(void *) arg,sizeof(struct cdrom_ti)); |
| verify_area | 3216 | drivers/block/sbpcd.c | st=verify_area(VERIFY_WRITE, (void *) arg, sizeof(struct cdrom_tochdr)); |
| verify_area | 3223 | drivers/block/sbpcd.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_tocentry)); |
| verify_area | 3240 | drivers/block/sbpcd.c | st=verify_area(VERIFY_WRITE,(void *) arg, sizeof(struct cdrom_tocentry)); |
| verify_area | 3279 | drivers/block/sbpcd.c | st=verify_area(VERIFY_READ,(void *) arg,sizeof(volctrl)); |
| verify_area | 3294 | drivers/block/sbpcd.c | st=verify_area(VERIFY_WRITE, (void *) arg, sizeof(struct cdrom_subchnl)); |
| verify_area | 3366 | drivers/block/sbpcd.c | i=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_read_audio)); |
| verify_area | 3370 | drivers/block/sbpcd.c | i=verify_area(VERIFY_WRITE, read_audio.buf, |
| verify_area | 3553 | drivers/block/sbpcd.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_multisession)); |
| verify_area | 3563 | drivers/block/sbpcd.c | st=verify_area(VERIFY_WRITE,(void *) arg, sizeof(struct cdrom_multisession)); |
| verify_area | 1021 | drivers/block/sonycd535.c | verify_area(VERIFY_WRITE /* and read */ , (char *)arg, sizeof schi); |
| verify_area | 1173 | drivers/block/sonycd535.c | verify_area(VERIFY_READ, (char *)arg, 6); |
| verify_area | 1212 | drivers/block/sonycd535.c | verify_area(VERIFY_WRITE, hdr, sizeof *hdr); |
| verify_area | 1232 | drivers/block/sonycd535.c | verify_area(VERIFY_WRITE /* and read */ , entry, sizeof *entry); |
| verify_area | 1271 | drivers/block/sonycd535.c | verify_area(VERIFY_READ, (char *)arg, sizeof ti); |
| verify_area | 1340 | drivers/block/sonycd535.c | verify_area(VERIFY_READ, (char *)arg, sizeof volctrl); |
| verify_area | 247 | drivers/block/xd.c | if ((err = verify_area(VERIFY_WRITE,geometry,sizeof(*geometry)))) |
| verify_area | 265 | drivers/block/xd.c | if ((err = verify_area(VERIFY_WRITE,(long *) arg,sizeof(long)))) |
| verify_area | 145 | drivers/char/busmouse.c | if ((r = verify_area(VERIFY_WRITE, buffer, count))) |
| verify_area | 2213 | drivers/char/console.c | i = verify_area(set ? VERIFY_READ : VERIFY_WRITE, (void *)arg, cmapsz); |
| verify_area | 141 | drivers/char/consolemap.c | i = verify_area(VERIFY_READ, (void *)arg, E_TABSZ); |
| verify_area | 157 | drivers/char/consolemap.c | i = verify_area(VERIFY_WRITE, (void *)arg, E_TABSZ); |
| verify_area | 2090 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2099 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2111 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2123 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2135 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2169 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2185 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2194 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 492 | drivers/char/lp.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 499 | drivers/char/lp.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 90 | drivers/char/selection.c | int i = verify_area(VERIFY_READ, (char *) arg, 36); |
| verify_area | 1579 | drivers/char/serial.c | error = verify_area(VERIFY_READ, value, sizeof(int)); |
| verify_area | 1834 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg,sizeof(long)); |
| verify_area | 1847 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1857 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1870 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1878 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1894 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1903 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1948 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, buf, count); |
| verify_area | 2130 | drivers/char/tpqic02.c | error = verify_area(VERIFY_READ, buf, count); |
| verify_area | 2593 | drivers/char/tpqic02.c | verify_area(VERIFY_READ, (int *) ioarg, sizeof(int)); |
| verify_area | 2619 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, (void *) ioarg, sizeof(qic02_tape_dynconf)); |
| verify_area | 2645 | drivers/char/tpqic02.c | error = verify_area(VERIFY_READ, (char *) ioarg, sizeof(qic02_tape_dynconf)); |
| verify_area | 2677 | drivers/char/tpqic02.c | error = verify_area(VERIFY_READ, (char *) ioarg, sizeof(operation)); |
| verify_area | 2734 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, (void *) ioarg, sizeof(ioctl_status)); |
| verify_area | 2762 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, (void *) ioarg, sizeof(ioctl_tell)); |
| verify_area | 1263 | drivers/char/tty_io.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct tstruct)); |
| verify_area | 1306 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, 1); |
| verify_area | 1313 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1321 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 1350 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, sizeof(long)); |
| verify_area | 1411 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1433 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1450 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, 1); |
| verify_area | 1494 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 109 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, sizeof(struct termio)); |
| verify_area | 124 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, sizeof(struct termios)); |
| verify_area | 185 | drivers/char/tty_ioctl.c | i = verify_area(VERIFY_WRITE, termio, sizeof (struct termio)); |
| verify_area | 233 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 302 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 313 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 325 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 336 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 348 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 185 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned char)); |
| verify_area | 239 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned long)); |
| verify_area | 278 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned long)); |
| verify_area | 304 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned long)); |
| verify_area | 318 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)a, sizeof(struct kbkeycode)); |
| verify_area | 336 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)a, sizeof(struct kbkeycode)); |
| verify_area | 350 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)a, sizeof(struct kbentry)); |
| verify_area | 377 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)a, sizeof(struct kbentry)); |
| verify_area | 447 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)a, sizeof(struct kbsentry)); |
| verify_area | 474 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)a, sizeof(struct kbsentry)); |
| verify_area | 543 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) a, sizeof(struct kbdiacrs)); |
| verify_area | 559 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *) a, sizeof(struct kbdiacrs)); |
| verify_area | 573 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned char)); |
| verify_area | 593 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned char)); |
| verify_area | 634 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)vtmode, sizeof(struct vt_mode)); |
| verify_area | 655 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct vt_mode)); |
| verify_area | 676 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE,(void *)vtstat, sizeof(struct vt_stat)); |
| verify_area | 692 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(long)); |
| verify_area | 819 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)vtsizes, sizeof(struct vt_sizes)); |
| verify_area | 853 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)arg, sizeof(struct unimapinit)); |
| verify_area | 868 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)arg, sizeof(struct unimapdesc)); |
| verify_area | 873 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *) list, |
| verify_area | 886 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct unimapdesc)); |
| verify_area | 892 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) list, |
| verify_area | 633 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, |
| verify_area | 1422 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
| verify_area | 1432 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (temp_i)); |
| verify_area | 1446 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
| verify_area | 1455 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (temp_i)); |
| verify_area | 1464 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
| verify_area | 1475 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
| verify_area | 1484 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (temp_i)); |
| verify_area | 1492 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
| verify_area | 1501 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
| verify_area | 1512 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (temp_i)); |
| verify_area | 1521 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (struct ppp_stats)); |
| verify_area | 1529 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) l, sizeof (struct ppp_ddinfo)); |
| verify_area | 1546 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, |
| verify_area | 1558 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, |
| verify_area | 1580 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) l, sizeof (temp_i)); |
| verify_area | 939 | drivers/net/slip.c | err = verify_area(VERIFY_READ, addr, 7); |
| verify_area | 973 | drivers/net/slip.c | err = verify_area(VERIFY_WRITE, arg, 16); |
| verify_area | 981 | drivers/net/slip.c | err = verify_area(VERIFY_WRITE, arg, sizeof(long)); |
| verify_area | 989 | drivers/net/slip.c | err = verify_area(VERIFY_READ, arg, sizeof(long)); |
| verify_area | 2087 | drivers/scsi/53c7,8xx.c | if (error = verify_area(VERIFY_READ,buf,count)) |
| verify_area | 45 | drivers/scsi/scsi_ioctl.c | verify_area(VERIFY_WRITE, buffer, len); |
| verify_area | 199 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_WRITE, cmd_in, sizeof(SCpnt->sense_buffer)); |
| verify_area | 205 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_WRITE, cmd_in, (outlen > MAX_BUF) ? MAX_BUF : outlen); |
| verify_area | 251 | drivers/scsi/scsi_ioctl.c | verify_area(VERIFY_WRITE, (void *) arg, sizeof(int)); |
| verify_area | 29 | drivers/scsi/sd_ioctl.c | error = verify_area(VERIFY_WRITE, loc, sizeof(*loc)); |
| verify_area | 51 | drivers/scsi/sd_ioctl.c | error = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 175 | drivers/scsi/sg.c | if ((i=verify_area(VERIFY_WRITE,buf,count))) |
| verify_area | 237 | drivers/scsi/sg.c | if ((i=verify_area(VERIFY_READ,buf,count))) |
| verify_area | 197 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_WRITE, (void *) arg, sizeof (struct cdrom_tochdr)); |
| verify_area | 210 | drivers/scsi/sr_ioctl.c | verify_area (VERIFY_READ, (void *) arg, sizeof (struct cdrom_tocentry)); |
| verify_area | 237 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_WRITE, (void *) arg, sizeof (struct cdrom_tocentry)); |
| verify_area | 282 | drivers/scsi/sr_ioctl.c | verify_area (VERIFY_READ, (void *) arg, sizeof (struct cdrom_volctrl)); |
| verify_area | 378 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_WRITE, (void *) arg, sizeof (struct cdrom_subchnl)); |
| verify_area | 396 | drivers/scsi/sr_ioctl.c | err = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 414 | drivers/scsi/sr_ioctl.c | err=verify_area(VERIFY_WRITE,(void *) arg, |
| verify_area | 1755 | drivers/scsi/st.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(mtc)); |
| verify_area | 1781 | drivers/scsi/st.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct mtget)); |
| verify_area | 1844 | drivers/scsi/st.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct mtpos)); |
| verify_area | 52 | drivers/sound/soundcard.c | error = verify_area(VERIFY_WRITE, addr, sizeof(int)); |
| verify_area | 73 | fs/binfmt_elf.c | verify_area(VERIFY_WRITE, (void *) elf_bss, nbyte); |
| verify_area | 1778 | fs/buffer.c | error = verify_area(VERIFY_WRITE, (void *) data, sizeof(int)); |
| verify_area | 357 | fs/exec.c | error = verify_area(VERIFY_READ, tmp, sizeof(char *)); |
| verify_area | 362 | fs/exec.c | error = verify_area(VERIFY_READ, p, 1); |
| verify_area | 488 | fs/exec.c | result = verify_area(VERIFY_WRITE, addr, count); |
| verify_area | 29 | fs/ext2/ioctl.c | if ((err = verify_area (VERIFY_WRITE, (long *) arg, sizeof(long)))) |
| verify_area | 61 | fs/ext2/ioctl.c | if ((err = verify_area (VERIFY_WRITE, (long *) arg, sizeof(long)))) |
| verify_area | 28 | fs/ioctl.c | error = verify_area(VERIFY_WRITE,(void *) arg,4); |
| verify_area | 38 | fs/ioctl.c | error = verify_area(VERIFY_WRITE,(void *) arg,4); |
| verify_area | 45 | fs/ioctl.c | error = verify_area(VERIFY_WRITE,(void *) arg,4); |
| verify_area | 67 | fs/locks.c | error = verify_area(VERIFY_WRITE,l, sizeof(*l)); |
| verify_area | 111 | fs/locks.c | error = verify_area(VERIFY_READ, l, sizeof(*l)); |
| verify_area | 35 | fs/open.c | error = verify_area(VERIFY_WRITE, buf, sizeof(struct statfs)); |
| verify_area | 56 | fs/open.c | error = verify_area(VERIFY_WRITE, buf, sizeof(struct statfs)); |
| verify_area | 155 | fs/open.c | error = verify_area(VERIFY_READ, times, sizeof(*times)); |
| verify_area | 141 | fs/pipe.c | error = verify_area(VERIFY_WRITE, (void *) arg,4); |
| verify_area | 386 | fs/pipe.c | j = verify_area(VERIFY_WRITE,fildes,8); |
| verify_area | 40 | fs/read_write.c | error = verify_area(VERIFY_WRITE, dirent, size); |
| verify_area | 96 | fs/read_write.c | if ((err = verify_area(VERIFY_WRITE, result, sizeof(loff_t)))) |
| verify_area | 136 | fs/read_write.c | error = verify_area(VERIFY_WRITE,buf,count); |
| verify_area | 157 | fs/read_write.c | error = verify_area(VERIFY_READ,buf,count); |
| verify_area | 164 | fs/select.c | error = verify_area(VERIFY_WRITE,fs_pointer,sizeof(fd_set)); |
| verify_area | 213 | fs/select.c | i = verify_area(VERIFY_READ, buffer, 20); |
| verify_area | 230 | fs/select.c | i = verify_area(VERIFY_WRITE, tvp, sizeof(*tvp)); |
| verify_area | 102 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 118 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 134 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 150 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 167 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 182 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 198 | fs/stat.c | error = verify_area(VERIFY_WRITE,buf,bufsiz); |
| verify_area | 110 | fs/super.c | err = verify_area(VERIFY_WRITE, buf, len); |
| verify_area | 18 | include/linux/mm.h | extern int verify_area(int, const void *, unsigned long); |
| verify_area | 51 | ipc/msg.c | err = verify_area (VERIFY_READ, msgp->mtext, msgsz); |
| verify_area | 124 | ipc/msg.c | err = verify_area (VERIFY_WRITE, msgp->mtext, msgsz); |
| verify_area | 348 | ipc/msg.c | err = verify_area (VERIFY_WRITE, buf, sizeof (struct msginfo)); |
| verify_area | 357 | ipc/msg.c | err = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
| verify_area | 382 | ipc/msg.c | err = verify_area (VERIFY_READ, buf, sizeof (*buf)); |
| verify_area | 390 | ipc/msg.c | err = verify_area (VERIFY_WRITE, buf, sizeof(*buf)); |
| verify_area | 395 | ipc/sem.c | i = verify_area(VERIFY_WRITE, tmp, sizeof(struct seminfo)); |
| verify_area | 404 | ipc/sem.c | i = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
| verify_area | 459 | ipc/sem.c | i = verify_area (VERIFY_WRITE, array, nsems*sizeof(ushort)); |
| verify_area | 477 | ipc/sem.c | if ((i = verify_area (VERIFY_READ, array, nsems*sizeof(ushort)))) |
| verify_area | 486 | ipc/sem.c | if ((i = verify_area (VERIFY_WRITE, buf, sizeof(*buf)))) |
| verify_area | 491 | ipc/sem.c | if ((i = verify_area (VERIFY_READ, buf, sizeof (*buf)))) |
| verify_area | 571 | ipc/sem.c | if ((i = verify_area (VERIFY_READ, tsops, nsops * sizeof(*tsops)))) |
| verify_area | 215 | ipc/shm.c | err = verify_area (VERIFY_READ, buf, sizeof (*buf)); |
| verify_area | 232 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (struct shminfo)); |
| verify_area | 243 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (shm_info)); |
| verify_area | 258 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
| verify_area | 311 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
| verify_area | 84 | ipc/util.c | if ((err = verify_area (VERIFY_READ, ptr, sizeof(long)))) |
| verify_area | 104 | ipc/util.c | if ((err = verify_area (VERIFY_READ, ptr, sizeof(tmp)))) |
| verify_area | 127 | ipc/util.c | if ((err = verify_area(VERIFY_WRITE, (ulong*) third, sizeof(ulong)))) |
| verify_area | 488 | kernel/exit.c | flag = verify_area(VERIFY_WRITE, stat_addr, 4); |
| verify_area | 23 | kernel/info.c | error = verify_area(VERIFY_WRITE, info, sizeof(struct sysinfo)); |
| verify_area | 67 | kernel/itimer.c | error = verify_area(VERIFY_WRITE, value, sizeof(struct itimerval)); |
| verify_area | 117 | kernel/itimer.c | error = verify_area(VERIFY_READ, value, sizeof(*value)); |
| verify_area | 125 | kernel/itimer.c | error = verify_area(VERIFY_WRITE, ovalue, sizeof(struct itimerval)); |
| verify_area | 110 | kernel/ksyms.c | X(verify_area), |
| verify_area | 234 | kernel/module.c | if ((error = verify_area(VERIFY_READ, symtab, sizeof(int)))) |
| verify_area | 242 | kernel/module.c | if ((error = verify_area(VERIFY_READ, symtab, size))) { |
| verify_area | 381 | kernel/module.c | if ((i = verify_area(VERIFY_WRITE, to, nmodsyms * sizeof(*table)))) |
| verify_area | 74 | kernel/printk.c | error = verify_area(VERIFY_WRITE,buf,len); |
| verify_area | 107 | kernel/printk.c | error = verify_area(VERIFY_WRITE,buf,len); |
| verify_area | 28 | kernel/signal.c | error = verify_area(VERIFY_READ, set, sizeof(sigset_t)); |
| verify_area | 47 | kernel/signal.c | error = verify_area(VERIFY_WRITE, oset, sizeof(sigset_t)); |
| verify_area | 72 | kernel/signal.c | error = verify_area(VERIFY_WRITE, set, 4); |
| verify_area | 122 | kernel/signal.c | err = verify_area(VERIFY_READ, handler, 1); |
| verify_area | 147 | kernel/signal.c | int err = verify_area(VERIFY_READ, action, sizeof(*action)); |
| verify_area | 158 | kernel/signal.c | err = verify_area(VERIFY_READ, new_sa.sa_handler, 1); |
| verify_area | 164 | kernel/signal.c | int err = verify_area(VERIFY_WRITE, oldaction, sizeof(*oldaction)); |
| verify_area | 368 | kernel/sys.c | int error = verify_area(VERIFY_WRITE,tbuf,sizeof *tbuf); |
| verify_area | 532 | kernel/sys.c | i = verify_area(VERIFY_WRITE, grouplist, sizeof(gid_t) * gidsetsize); |
| verify_area | 585 | kernel/sys.c | error = verify_area(VERIFY_WRITE, name, sizeof *name); |
| verify_area | 596 | kernel/sys.c | error = verify_area(VERIFY_WRITE, name,sizeof *name); |
| verify_area | 617 | kernel/sys.c | error = verify_area(VERIFY_WRITE, name,sizeof *name); |
| verify_area | 678 | kernel/sys.c | error = verify_area(VERIFY_WRITE,rlim,sizeof *rlim); |
| verify_area | 695 | kernel/sys.c | err = verify_area(VERIFY_READ, rlim, sizeof(*rlim)); |
| verify_area | 725 | kernel/sys.c | error = verify_area(VERIFY_WRITE, ru, sizeof *ru); |
| verify_area | 124 | kernel/time.c | error = verify_area(VERIFY_WRITE, tloc, 4); |
| verify_area | 139 | kernel/time.c | error = verify_area(VERIFY_READ, tptr, sizeof(*tptr)); |
| verify_area | 234 | kernel/time.c | error = verify_area(VERIFY_WRITE, tv, sizeof *tv); |
| verify_area | 242 | kernel/time.c | error = verify_area(VERIFY_WRITE, tz, sizeof *tz); |
| verify_area | 293 | kernel/time.c | int error = verify_area(VERIFY_READ, tv, sizeof(*tv)); |
| verify_area | 299 | kernel/time.c | int error = verify_area(VERIFY_READ, tz, sizeof(*tz)); |
| verify_area | 347 | kernel/time.c | error = verify_area(VERIFY_WRITE, txc_p, sizeof(struct timex)); |
| verify_area | 193 | mm/mmap.c | error = verify_area(VERIFY_READ, buffer, 6*sizeof(long)); |
| verify_area | 1261 | net/inet/af_inet.c | err=verify_area(VERIFY_READ,(int *)arg,sizeof(long)); |
| verify_area | 1268 | net/inet/af_inet.c | err=verify_area(VERIFY_WRITE,(void *) arg, sizeof(long)); |
| verify_area | 1276 | net/inet/af_inet.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(struct timeval)); |
| verify_area | 1236 | net/inet/arp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
| verify_area | 1246 | net/inet/arp.c | err = verify_area(VERIFY_WRITE, arg, sizeof(struct arpreq)); |
| verify_area | 1253 | net/inet/arp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
| verify_area | 831 | net/inet/dev.c | err=verify_area(VERIFY_WRITE, arg, sizeof(struct ifconf)); |
| verify_area | 843 | net/inet/dev.c | err=verify_area(VERIFY_WRITE,pos,len); |
| verify_area | 996 | net/inet/dev.c | int err=verify_area(VERIFY_WRITE, arg, sizeof(struct ifreq)); |
| verify_area | 2061 | net/inet/ip.c | err=verify_area(VERIFY_READ, optval, sizeof(int)); |
| verify_area | 2117 | net/inet/ip.c | err=verify_area(VERIFY_READ, optval, sizeof(addr)); |
| verify_area | 2174 | net/inet/ip.c | err=verify_area(VERIFY_READ, optval, sizeof(mreq)); |
| verify_area | 2234 | net/inet/ip.c | err=verify_area(VERIFY_READ, optval, sizeof(mreq)); |
| verify_area | 2293 | net/inet/ip.c | err=verify_area(VERIFY_READ,optval,optlen); |
| verify_area | 2310 | net/inet/ip.c | err=verify_area(VERIFY_READ,optval,optlen); |
| verify_area | 2354 | net/inet/ip.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
| verify_area | 2358 | net/inet/ip.c | err=verify_area(VERIFY_WRITE, optval, len); |
| verify_area | 2368 | net/inet/ip.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
| verify_area | 2373 | net/inet/ip.c | err=verify_area(VERIFY_WRITE, optval, sizeof(int)); |
| verify_area | 820 | net/inet/ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(ifr)); |
| verify_area | 843 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,arg,sizeof(ifr)); |
| verify_area | 860 | net/inet/ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(char)); |
| verify_area | 865 | net/inet/ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(char)); |
| verify_area | 1054 | net/inet/ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(rt)); |
| verify_area | 1270 | net/inet/ipx.c | err=verify_area(VERIFY_READ,optval,sizeof(int)); |
| verify_area | 1325 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,optlen,sizeof(int)); |
| verify_area | 1329 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,optval,sizeof(int)); |
| verify_area | 1792 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(unsigned long)); |
| verify_area | 1806 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(unsigned long)); |
| verify_area | 1824 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
| verify_area | 1834 | net/inet/ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(struct timeval)); |
| verify_area | 397 | net/inet/rarp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
| verify_area | 408 | net/inet/rarp.c | err = verify_area(VERIFY_WRITE, arg, sizeof(struct arpreq)); |
| verify_area | 415 | net/inet/rarp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
| verify_area | 625 | net/inet/route.c | err=verify_area(VERIFY_READ, src, sizeof(*src)); |
| verify_area | 664 | net/inet/route.c | err=verify_area(VERIFY_READ, arg, sizeof(struct rtentry)); |
| verify_area | 127 | net/inet/sock.c | err=verify_area(VERIFY_READ, optval, sizeof(int)); |
| verify_area | 157 | net/inet/sock.c | err=verify_area(VERIFY_READ,optval,sizeof(ling)); |
| verify_area | 244 | net/inet/sock.c | err=verify_area(VERIFY_WRITE,optval,sizeof(ling)); |
| verify_area | 247 | net/inet/sock.c | err=verify_area(VERIFY_WRITE,optlen,sizeof(int)); |
| verify_area | 302 | net/inet/sock.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
| verify_area | 307 | net/inet/sock.c | err=verify_area(VERIFY_WRITE, optval, sizeof(int)); |
| verify_area | 978 | net/inet/tcp.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
| verify_area | 989 | net/inet/tcp.c | err = verify_area(VERIFY_WRITE,(void *) arg, |
| verify_area | 1002 | net/inet/tcp.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
| verify_area | 5011 | net/inet/tcp.c | err=verify_area(VERIFY_READ, optval, sizeof(int)); |
| verify_area | 5055 | net/inet/tcp.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
| verify_area | 5060 | net/inet/tcp.c | err=verify_area(VERIFY_WRITE, optval, sizeof(int)); |
| verify_area | 423 | net/inet/udp.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
| verify_area | 447 | net/inet/udp.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
| verify_area | 126 | net/socket.c | if((err=verify_area(VERIFY_READ,uaddr,ulen))<0) |
| verify_area | 138 | net/socket.c | if((err=verify_area(VERIFY_WRITE,ulen,sizeof(*ulen)))<0) |
| verify_area | 147 | net/socket.c | if((err=verify_area(VERIFY_WRITE,uaddr,len))<0) |
| verify_area | 335 | net/socket.c | if ((err=verify_area(VERIFY_WRITE,ubuf,size))<0) |
| verify_area | 364 | net/socket.c | if ((err=verify_area(VERIFY_READ,ubuf,size))<0) |
| verify_area | 707 | net/socket.c | er=verify_area(VERIFY_WRITE, usockvec, 2 * sizeof(int)); |
| verify_area | 964 | net/socket.c | err=verify_area(VERIFY_READ, buff, len); |
| verify_area | 991 | net/socket.c | err=verify_area(VERIFY_READ,buff,len); |
| verify_area | 1027 | net/socket.c | err=verify_area(VERIFY_WRITE, buff, len); |
| verify_area | 1057 | net/socket.c | err=verify_area(VERIFY_WRITE,buff,len); |
| verify_area | 1160 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
| verify_area | 1167 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
| verify_area | 1174 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
| verify_area | 1181 | net/socket.c | er=verify_area(VERIFY_READ, args, 2 * sizeof(long)); |
| verify_area | 1187 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
| verify_area | 1194 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
| verify_area | 1201 | net/socket.c | er=verify_area(VERIFY_READ, args, 3 * sizeof(long)); |
| verify_area | 1208 | net/socket.c | er=verify_area(VERIFY_READ, args, 4 * sizeof(long)); |
| verify_area | 1216 | net/socket.c | er=verify_area(VERIFY_READ, args, 4 * sizeof(unsigned long)); |
| verify_area | 1224 | net/socket.c | er=verify_area(VERIFY_READ, args, 6 * sizeof(unsigned long)); |
| verify_area | 1234 | net/socket.c | er=verify_area(VERIFY_READ, args, 4 * sizeof(unsigned long)); |
| verify_area | 1242 | net/socket.c | er=verify_area(VERIFY_READ, args, 6 * sizeof(unsigned long)); |
| verify_area | 1252 | net/socket.c | er=verify_area(VERIFY_READ, args, 2* sizeof(unsigned long)); |
| verify_area | 1258 | net/socket.c | er=verify_area(VERIFY_READ, args, 5*sizeof(unsigned long)); |
| verify_area | 1267 | net/socket.c | er=verify_area(VERIFY_READ, args, 5*sizeof(unsigned long)); |
| verify_area | 843 | net/unix/sock.c | er=verify_area(VERIFY_WRITE,(void *)arg, sizeof(unsigned long)); |
| verify_area | 854 | net/unix/sock.c | er=verify_area(VERIFY_WRITE,(void *)arg, sizeof(unsigned long)); |