| tag | line | file | source code |
| verify_area | 108 | arch/alpha/kernel/osf_sys.c | error = verify_area(VERIFY_WRITE, dirent, count); |
| verify_area | 112 | arch/alpha/kernel/osf_sys.c | error = verify_area(VERIFY_WRITE, basep, sizeof(long)); |
| verify_area | 190 | arch/alpha/kernel/osf_sys.c | retval = verify_area(VERIFY_WRITE, buffer, bufsiz); |
| verify_area | 211 | arch/alpha/kernel/osf_sys.c | retval = verify_area(VERIFY_WRITE, buffer, bufsiz); |
| verify_area | 316 | arch/alpha/kernel/osf_sys.c | retval = verify_area(VERIFY_READ, args, sizeof(*args)); |
| verify_area | 336 | arch/alpha/kernel/osf_sys.c | retval = verify_area(VERIFY_READ, args, sizeof(*args)); |
| verify_area | 356 | arch/alpha/kernel/osf_sys.c | retval = verify_area(VERIFY_READ, args, sizeof(*args)); |
| verify_area | 406 | arch/alpha/kernel/osf_sys.c | retval = verify_area(VERIFY_READ, sleep, sizeof(*sleep)); |
| verify_area | 409 | arch/alpha/kernel/osf_sys.c | if (remain && (retval = verify_area(VERIFY_WRITE, remain, sizeof(*remain)))) |
| verify_area | 434 | arch/alpha/kernel/osf_sys.c | int error = verify_area(VERIFY_WRITE, name, 5*32); |
| verify_area | 482 | arch/alpha/kernel/osf_sys.c | error = verify_area(VERIFY_WRITE, name, namelen); |
| verify_area | 587 | arch/alpha/kernel/osf_sys.c | error = verify_area(VERIFY_READ, &args->set.nbytes, |
| verify_area | 594 | arch/alpha/kernel/osf_sys.c | error = verify_area(VERIFY_READ, &args->fset.nbytes, |
| verify_area | 601 | arch/alpha/kernel/osf_sys.c | error = verify_area(VERIFY_READ, &args->get.min_buf_size, |
| verify_area | 606 | arch/alpha/kernel/osf_sys.c | error = verify_area(VERIFY_WRITE, min_buf_size_ptr, |
| verify_area | 614 | arch/alpha/kernel/osf_sys.c | error = verify_area(VERIFY_READ, &args->fget.min_buf_size, |
| verify_area | 619 | arch/alpha/kernel/osf_sys.c | error = verify_area(VERIFY_WRITE, min_buf_size_ptr, |
| verify_area | 78 | arch/alpha/kernel/signal.c | if (verify_area(VERIFY_READ, sc, sizeof(*sc))) |
| verify_area | 144 | arch/alpha/kernel/signal.c | if (verify_area(VERIFY_WRITE, sc, sizeof(*sc))) |
| verify_area | 315 | arch/alpha/kernel/traps.c | if (verify_area(dir, va, size)) { |
| verify_area | 30 | arch/i386/kernel/ldt.c | error = verify_area(VERIFY_WRITE, ptr, size); |
| verify_area | 46 | arch/i386/kernel/ldt.c | error = verify_area(VERIFY_READ, ptr, sizeof(ldt_info)); |
| verify_area | 358 | arch/i386/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
| verify_area | 373 | arch/i386/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
| verify_area | 58 | arch/i386/kernel/signal.c | if (verify_area(VERIFY_READ, (void *) regs->esp, sizeof(context))) |
| verify_area | 96 | arch/i386/kernel/signal.c | if (verify_area(VERIFY_WRITE,frame,32*4)) |
| verify_area | 29 | arch/i386/kernel/sys_i386.c | error = verify_area(VERIFY_WRITE,fildes,8); |
| verify_area | 52 | arch/i386/kernel/sys_i386.c | error = verify_area(VERIFY_READ, buffer, 6*sizeof(long)); |
| verify_area | 76 | arch/i386/kernel/sys_i386.c | n = verify_area(VERIFY_READ, buffer, 5*sizeof(unsigned long)); |
| verify_area | 110 | arch/i386/kernel/sys_i386.c | if ((err = verify_area (VERIFY_READ, ptr, sizeof(long)))) |
| verify_area | 130 | arch/i386/kernel/sys_i386.c | if ((err = verify_area (VERIFY_READ, ptr, sizeof(tmp)))) |
| verify_area | 153 | arch/i386/kernel/sys_i386.c | if ((err = verify_area(VERIFY_WRITE, (ulong*) third, sizeof(ulong)))) |
| verify_area | 111 | arch/i386/kernel/vm86.c | error = verify_area(VERIFY_WRITE,v86,sizeof(*v86)); |
| verify_area | 220 | arch/i386/kernel/vm86.c | if (verify_area(VERIFY_READ, bitmap, 256/8) < 0) |
| verify_area | 312 | arch/i386/kernel/vm86.c | if (verify_area(VERIFY_READ, intr_ptr, 4) < 0) |
| verify_area | 66 | arch/i386/math-emu/fpu_system.h | #define FPU_verify_area(x,y,z) if ( verify_area(x,y,z) ) \ |
| verify_area | 44 | arch/mips/kernel/ipc.c | if ((err = verify_area (VERIFY_READ, ptr, sizeof(long)))) |
| verify_area | 64 | arch/mips/kernel/ipc.c | if ((err = verify_area (VERIFY_READ, ptr, sizeof(tmp)))) |
| verify_area | 87 | arch/mips/kernel/ipc.c | if ((err = verify_area(VERIFY_WRITE, (ulong*) third, sizeof(ulong)))) |
| verify_area | 340 | arch/mips/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
| verify_area | 355 | arch/mips/kernel/ptrace.c | res = verify_area(VERIFY_WRITE, (void *) data, sizeof(long)); |
| verify_area | 58 | arch/mips/kernel/signal.c | if (verify_area(VERIFY_READ, context, sizeof(struct sigcontext_struct)) || |
| verify_area | 160 | arch/mips/kernel/signal.c | if (verify_area(VERIFY_WRITE, frame, sizeof (struct sc)) || |
| verify_area | 182 | arch/mips/kernel/syscall.c | errno = verify_area(VERIFY_READ, (void *) (usp + 16), |
| verify_area | 74 | arch/mips/kernel/sysmips.c | retval = verify_area(VERIFY_WRITE, p, sizeof(*p)); |
| verify_area | 144 | arch/mips/kernel/traps.c | if ((!verify_area(VERIFY_READ, pc, 5 * sizeof(*pc)) || |
| verify_area | 80 | arch/sparc/kernel/signal.c | if(verify_area(VERIFY_READ, sigmaskp, sizeof(unsigned int))) |
| verify_area | 97 | arch/sparc/kernel/signal.c | if(verify_area(VERIFY_READ, scptr, sizeof(struct sigcontext_struct)) || |
| verify_area | 134 | arch/sparc/kernel/signal.c | if(!(sp & 7) && !verify_area(VERIFY_WRITE, (char *)sp, |
| verify_area | 186 | arch/sparc/kernel/signal.c | if(verify_area(VERIFY_WRITE, sframep, sizeof(*sframep)) || |
| verify_area | 356 | arch/sparc/kernel/signal.c | if(verify_area(VERIFY_WRITE, ossptr, sizeof(struct sigstack))) |
| verify_area | 363 | arch/sparc/kernel/signal.c | if(verify_area(VERIFY_READ, ssptr, sizeof(struct sigstack))) |
| verify_area | 69 | arch/sparc/kernel/sys_sparc.c | if ((err = verify_area (VERIFY_READ, ptr, sizeof(long)))) |
| verify_area | 89 | arch/sparc/kernel/sys_sparc.c | if ((err = verify_area (VERIFY_READ, ptr, sizeof(tmp)))) |
| verify_area | 112 | arch/sparc/kernel/sys_sparc.c | if ((err = verify_area(VERIFY_WRITE, (ulong*) third, sizeof(ulong)))) |
| verify_area | 282 | arch/sparc/kernel/sys_sunos.c | if(verify_area(VERIFY_WRITE, array, num_pages)) |
| verify_area | 383 | arch/sparc/kernel/sys_sunos.c | if(verify_area(VERIFY_WRITE, dirent, cnt)) |
| verify_area | 408 | arch/sparc/kernel/sys_sunos.c | error = verify_area(VERIFY_WRITE, name, len); |
| verify_area | 429 | arch/sparc/kernel/sys_sunos.c | error = verify_area(VERIFY_WRITE, name, sizeof *name); |
| verify_area | 659 | arch/sparc/kernel/sys_sunos.c | error = verify_area(VERIFY_READ, data, sizeof (struct sunos_nfs_mount_args)); |
| verify_area | 739 | arch/sparc/kernel/sys_sunos.c | error = verify_area(VERIFY_READ, type, 16); |
| verify_area | 252 | arch/sparc/mm/fault.c | verify_area(VERIFY_WRITE, |
| verify_area | 272 | arch/sparc/mm/fault.c | verify_area(VERIFY_READ, |
| verify_area | 287 | arch/sparc/mm/fault.c | verify_area(VERIFY_READ, (char *) sp, |
| verify_area | 2753 | drivers/block/floppy.c | ECALL(verify_area(VERIFY_WRITE,param,size)); |
| verify_area | 2765 | drivers/block/floppy.c | ECALL(verify_area(VERIFY_READ,param,size)); |
| verify_area | 2945 | drivers/block/floppy.c | ECALL( verify_area( VERIFY_WRITE, ptr->data, |
| verify_area | 3206 | drivers/block/floppy.c | ECALL(verify_area(VERIFY_WRITE,(void *) param, size)); |
| verify_area | 793 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, loc, sizeof(*loc)); |
| verify_area | 812 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 819 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 842 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 850 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 878 | drivers/block/hd.c | err = verify_area(VERIFY_WRITE, (char *) arg, sizeof(struct hd_driveid)); |
| verify_area | 2172 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *)arg, sizeof (msf)); |
| verify_area | 2195 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *)arg, sizeof (ti)); |
| verify_area | 2220 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (tochdr)); |
| verify_area | 2242 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (tocentry)); |
| verify_area | 2244 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (tocentry)); |
| verify_area | 2277 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (subchnl)); |
| verify_area | 2279 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (subchnl)); |
| verify_area | 2339 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (volctrl)); |
| verify_area | 2364 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, sizeof (volctrl)); |
| verify_area | 2386 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *)arg, sizeof (ms_info)); |
| verify_area | 2388 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *)arg, sizeof (ms_info)); |
| verify_area | 2432 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (char *)arg, sizeof (ra)); |
| verify_area | 2442 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (char *)ra.buf, |
| verify_area | 2492 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (char *)arg, sizeof (msf)); |
| verify_area | 2494 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (char *)arg, blocksize); |
| verify_area | 2537 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (pc.c)); |
| verify_area | 2542 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_READ, (void *) arg, sizeof (len)); |
| verify_area | 2548 | drivers/block/ide-cd.c | stat = verify_area (VERIFY_WRITE, (void *) arg, len); |
| verify_area | 3833 | drivers/block/ide-tape.c | retval=verify_area (VERIFY_READ,(char *) arg,sizeof (struct mtop)); |
| verify_area | 3839 | drivers/block/ide-tape.c | retval=verify_area (VERIFY_WRITE,(char *) arg,sizeof (struct mtget)); |
| verify_area | 3848 | drivers/block/ide-tape.c | retval=verify_area (VERIFY_WRITE,(char *) arg,sizeof (struct mtpos)); |
| verify_area | 1829 | drivers/block/ide.c | if ((err = verify_area(VERIFY_WRITE, (long *)useraddr, sizeof(long)))) |
| verify_area | 1852 | drivers/block/ide.c | err = verify_area(VERIFY_WRITE, loc, sizeof(*loc)); |
| verify_area | 1901 | drivers/block/ide.c | err = verify_area(VERIFY_WRITE, (char *)arg, sizeof(*drive->id)); |
| verify_area | 1988 | drivers/block/ide.c | if (!(err = verify_area(VERIFY_READ,(long *)arg,sizeof(long)))) |
| verify_area | 1991 | drivers/block/ide.c | if (!(err = verify_area(VERIFY_WRITE,(long *)arg,sizeof(long)))) { |
| verify_area | 386 | drivers/block/loop.c | err = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 288 | drivers/block/md.c | err=verify_area (VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 307 | drivers/block/md.c | err=verify_area (VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 315 | drivers/block/md.c | err = verify_area(VERIFY_WRITE, loc, sizeof(*loc)); |
| verify_area | 149 | drivers/block/rd.c | err = verify_area(VERIFY_WRITE, (long *) arg, |
| verify_area | 249 | drivers/block/xd.c | if ((err = verify_area(VERIFY_WRITE,geometry,sizeof(*geometry)))) |
| verify_area | 270 | drivers/block/xd.c | if ((err = verify_area(VERIFY_WRITE,(long *) arg,sizeof(long)))) |
| verify_area | 676 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_READ, (void*) arg, sizeof(struct cdrom_multisession)); |
| verify_area | 689 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_WRITE, (void*) arg, sizeof(struct cdrom_multisession)); |
| verify_area | 706 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof ti); |
| verify_area | 737 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
| verify_area | 767 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof tocHdr); |
| verify_area | 774 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof entry); |
| verify_area | 776 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof entry); |
| verify_area | 803 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_subchnl)); |
| verify_area | 810 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof(struct cdrom_subchnl)); |
| verify_area | 849 | drivers/cdrom/aztcd.c | st=verify_area(VERIFY_READ,(void *) arg, sizeof(volctrl)); |
| verify_area | 889 | drivers/cdrom/aztcd.c | { st = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
| verify_area | 891 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof buf); |
| verify_area | 927 | drivers/cdrom/aztcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
| verify_area | 1976 | drivers/cdrom/cdu31a.c | err = verify_area(VERIFY_READ, (char *) arg, sizeof(schi)) || |
| verify_area | 1977 | drivers/cdrom/cdu31a.c | verify_area(VERIFY_WRITE, (char *) arg, sizeof(schi)); |
| verify_area | 2448 | drivers/cdrom/cdu31a.c | i=verify_area(VERIFY_READ, (char *) arg, 6); |
| verify_area | 2482 | drivers/cdrom/cdu31a.c | i=verify_area(VERIFY_WRITE, hdr, sizeof(*hdr)); |
| verify_area | 2505 | drivers/cdrom/cdu31a.c | i=verify_area(VERIFY_READ, entry, sizeof(*entry)); |
| verify_area | 2508 | drivers/cdrom/cdu31a.c | i=verify_area(VERIFY_WRITE, entry, sizeof(*entry)); |
| verify_area | 2561 | drivers/cdrom/cdu31a.c | i=verify_area(VERIFY_READ, (char *) arg, sizeof(ti)); |
| verify_area | 2630 | drivers/cdrom/cdu31a.c | i=verify_area(VERIFY_READ, (char *) arg, sizeof(volctrl)); |
| verify_area | 2659 | drivers/cdrom/cdu31a.c | i=verify_area(VERIFY_READ, (char *) arg, sizeof(ra)); |
| verify_area | 2664 | drivers/cdrom/cdu31a.c | i=verify_area(VERIFY_WRITE, ra.buf, CD_FRAMESIZE_RAW * ra.nframes); |
| verify_area | 902 | drivers/cdrom/cm206.c | st=verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 932 | drivers/cdrom/cm206.c | st=verify_area(VERIFY_WRITE, (void *) arg, sizeof(header)); |
| verify_area | 944 | drivers/cdrom/cm206.c | st=verify_area(VERIFY_WRITE, (void *) arg, sizeof(entry)); |
| verify_area | 955 | drivers/cdrom/cm206.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(msf)); |
| verify_area | 965 | drivers/cdrom/cm206.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(track_index)); |
| verify_area | 1002 | drivers/cdrom/cm206.c | st=verify_area(VERIFY_WRITE, (void *) arg, sizeof(q)); |
| verify_area | 1015 | drivers/cdrom/cm206.c | st=verify_area(VERIFY_WRITE, (void *) arg, 8); |
| verify_area | 368 | drivers/cdrom/mcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof ti); |
| verify_area | 411 | drivers/cdrom/mcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
| verify_area | 450 | drivers/cdrom/mcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof tocHdr); |
| verify_area | 461 | drivers/cdrom/mcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof entry); |
| verify_area | 498 | drivers/cdrom/mcd.c | st = verify_area(VERIFY_WRITE, (void *) arg, sizeof subchnl); |
| verify_area | 537 | drivers/cdrom/mcd.c | st = verify_area(VERIFY_READ, (void *) arg, sizeof(volctrl)); |
| verify_area | 294 | drivers/cdrom/mcdx.c | if ((ans = verify_area(VERIFY_READ, (void*) arg, sizeof(ti)))) |
| verify_area | 316 | drivers/cdrom/mcdx.c | if ((ans = verify_area( |
| verify_area | 347 | drivers/cdrom/mcdx.c | if ((ans = verify_area(VERIFY_READ, (void *) arg, sizeof(entry)))) return ans; |
| verify_area | 369 | drivers/cdrom/mcdx.c | if ((ans = verify_area(VERIFY_WRITE, (void*) arg, sizeof(entry)))) return ans; |
| verify_area | 382 | drivers/cdrom/mcdx.c | if ((ans = verify_area(VERIFY_READ, |
| verify_area | 422 | drivers/cdrom/mcdx.c | if ((ans = verify_area(VERIFY_WRITE, (void*) arg, sizeof(sub)))) |
| verify_area | 434 | drivers/cdrom/mcdx.c | if ((ans = verify_area(VERIFY_WRITE, (void*) arg, sizeof toc))) |
| verify_area | 458 | drivers/cdrom/mcdx.c | if (0 != (ans = verify_area(VERIFY_READ, (void*) arg, |
| verify_area | 473 | drivers/cdrom/mcdx.c | if (0 != (ans = verify_area(VERIFY_WRITE, (void*) arg, |
| verify_area | 518 | drivers/cdrom/mcdx.c | if ((ans = verify_area( |
| verify_area | 1437 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
| verify_area | 1461 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_READ, (void *) arg, sizeof ti); |
| verify_area | 1506 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_WRITE, (void *) arg, sizeof tochdr); |
| verify_area | 1524 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_READ, (void *) arg, sizeof entry); |
| verify_area | 1527 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_WRITE, (void *) arg, sizeof entry); |
| verify_area | 1563 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_READ, (void *) arg, sizeof volctrl); |
| verify_area | 1589 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_READ, (void *) arg, sizeof subchnl); |
| verify_area | 1592 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_WRITE, (void *) arg, sizeof subchnl); |
| verify_area | 1618 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
| verify_area | 1621 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_WRITE, (void *) arg, blocksize); |
| verify_area | 1648 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_READ, (void *) arg, sizeof msf); |
| verify_area | 1670 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_READ, (void*) arg, sizeof ms); |
| verify_area | 1673 | drivers/cdrom/optcd.c | status = verify_area(VERIFY_WRITE, (void*) arg, sizeof ms); |
| verify_area | 3917 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_msf)); |
| verify_area | 3945 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_READ,(void *) arg,sizeof(struct cdrom_ti)); |
| verify_area | 3971 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_WRITE, (void *) arg, sizeof(struct cdrom_tochdr)); |
| verify_area | 3978 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_tocentry)); |
| verify_area | 3996 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_WRITE,(void *) arg, sizeof(struct cdrom_tocentry)); |
| verify_area | 4042 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_READ,(void *) arg,sizeof(volctrl)); |
| verify_area | 4054 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_WRITE,(void *)arg,sizeof(volctrl)); |
| verify_area | 4070 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_WRITE, (void *) arg, sizeof(struct cdrom_subchnl)); |
| verify_area | 4072 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_subchnl)); |
| verify_area | 4162 | drivers/cdrom/sbpcd.c | i=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_read_audio)); |
| verify_area | 4166 | drivers/cdrom/sbpcd.c | i=verify_area(VERIFY_WRITE, read_audio.buf, |
| verify_area | 4358 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_READ, (void *) arg, sizeof(struct cdrom_multisession)); |
| verify_area | 4368 | drivers/cdrom/sbpcd.c | st=verify_area(VERIFY_WRITE,(void *) arg, sizeof(struct cdrom_multisession)); |
| verify_area | 724 | drivers/cdrom/sjcd.c | if( ( s = verify_area( VERIFY_READ, (void *)arg, sizeof( ti ) ) ) == 0 ){ |
| verify_area | 750 | drivers/cdrom/sjcd.c | if( ( s = verify_area( VERIFY_READ, (void *)arg, sizeof( sjcd_msf ) ) ) == 0 ){ |
| verify_area | 779 | drivers/cdrom/sjcd.c | if( ( s = verify_area( VERIFY_WRITE, (void *)arg, sizeof( toc_header ) ) ) == 0 ){ |
| verify_area | 792 | drivers/cdrom/sjcd.c | if( ( s = verify_area( VERIFY_WRITE, (void *)arg, sizeof( toc_entry ) ) ) == 0 ){ |
| verify_area | 827 | drivers/cdrom/sjcd.c | if( ( s = verify_area( VERIFY_WRITE, (void *)arg, sizeof( subchnl ) ) ) == 0 ){ |
| verify_area | 864 | drivers/cdrom/sjcd.c | if( ( s = verify_area( VERIFY_READ, (void *)arg, sizeof( vol_ctrl ) ) ) == 0 ){ |
| verify_area | 894 | drivers/cdrom/sjcd.c | if( ( s = verify_area( VERIFY_WRITE, (void *)arg, sizeof( statistic ) ) ) == 0 ) |
| verify_area | 1016 | drivers/cdrom/sonycd535.c | err = verify_area(VERIFY_WRITE /* and read */ , (char *)arg, sizeof schi); |
| verify_area | 1171 | drivers/cdrom/sonycd535.c | err = verify_area(VERIFY_READ, (char *)arg, 6); |
| verify_area | 1212 | drivers/cdrom/sonycd535.c | err = verify_area(VERIFY_WRITE, hdr, sizeof *hdr); |
| verify_area | 1234 | drivers/cdrom/sonycd535.c | err = verify_area(VERIFY_WRITE /* and read */ , entry, sizeof *entry); |
| verify_area | 1275 | drivers/cdrom/sonycd535.c | err = verify_area(VERIFY_READ, (char *)arg, sizeof ti); |
| verify_area | 1346 | drivers/cdrom/sonycd535.c | err = verify_area(VERIFY_READ, (char *)arg, sizeof volctrl); |
| verify_area | 177 | drivers/char/busmouse.c | if ((r = verify_area(VERIFY_WRITE, buffer, count))) |
| verify_area | 232 | drivers/char/consolemap.c | i = verify_area(VERIFY_READ, (void *)arg, E_TABSZ); |
| verify_area | 248 | drivers/char/consolemap.c | i = verify_area(VERIFY_WRITE, (void *)arg, E_TABSZ); |
| verify_area | 265 | drivers/char/consolemap.c | i = verify_area(VERIFY_READ, (void *)arg, |
| verify_area | 282 | drivers/char/consolemap.c | i = verify_area(VERIFY_WRITE, (void *)arg, |
| verify_area | 2150 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2159 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2171 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2183 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2195 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2229 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2245 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 2254 | drivers/char/cyclades.c | error = verify_area(VERIFY_WRITE, (void *) arg |
| verify_area | 1885 | drivers/char/istallion.c | if ((rc = verify_area(VERIFY_WRITE, (void *) arg, sizeof(long))) == 0) |
| verify_area | 1889 | drivers/char/istallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(long))) == 0) { |
| verify_area | 1895 | drivers/char/istallion.c | if ((rc = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned int))) == 0) { |
| verify_area | 1903 | drivers/char/istallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(long))) == 0) { |
| verify_area | 1910 | drivers/char/istallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(long))) == 0) { |
| verify_area | 1917 | drivers/char/istallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(long))) == 0) { |
| verify_area | 1924 | drivers/char/istallion.c | if ((rc = verify_area(VERIFY_WRITE, (void *) arg, sizeof(struct serial_struct))) == 0) |
| verify_area | 1928 | drivers/char/istallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(struct serial_struct))) == 0) |
| verify_area | 1932 | drivers/char/istallion.c | if ((rc = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned long))) == 0) |
| verify_area | 1936 | drivers/char/istallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(unsigned long))) == 0) { |
| verify_area | 476 | drivers/char/lp.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 483 | drivers/char/lp.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 496 | drivers/char/lp.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 507 | drivers/char/lp.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 739 | drivers/char/random.c | retval = verify_area(VERIFY_WRITE, (void *) arg, sizeof(int)); |
| verify_area | 747 | drivers/char/random.c | retval = verify_area(VERIFY_READ, (void *) arg, sizeof(int)); |
| verify_area | 758 | drivers/char/random.c | retval = verify_area(VERIFY_WRITE, (void *) p, sizeof(int)); |
| verify_area | 762 | drivers/char/random.c | retval = verify_area(VERIFY_READ, (void *) p, sizeof(int)); |
| verify_area | 778 | drivers/char/random.c | retval = verify_area(VERIFY_READ, (void *) p, 2*sizeof(int)); |
| verify_area | 2276 | drivers/char/scc.c | error = verify_area(VERIFY_WRITE, (void *) arg,sizeof(unsigned int *)); |
| verify_area | 2327 | drivers/char/scc.c | error = verify_area(VERIFY_WRITE, (void *) arg, sizeof(struct termios)); |
| verify_area | 2365 | drivers/char/scc.c | error = verify_area(VERIFY_WRITE, (void *) arg,sizeof(struct scc_stat)); |
| verify_area | 2382 | drivers/char/scc.c | error = verify_area(VERIFY_WRITE, (void *) arg,sizeof(struct ioctl_command)); |
| verify_area | 91 | drivers/char/selection.c | int i = verify_area(VERIFY_READ, (char *) arg, 36); |
| verify_area | 1629 | drivers/char/serial.c | error = verify_area(VERIFY_READ, value, sizeof(int)); |
| verify_area | 1903 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg,sizeof(long)); |
| verify_area | 1916 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1926 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1939 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1947 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1963 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1972 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 2016 | drivers/char/serial.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1192 | drivers/char/stallion.c | if ((rc = verify_area(VERIFY_WRITE, (void *) arg, sizeof(long))) == 0) |
| verify_area | 1196 | drivers/char/stallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(long))) == 0) { |
| verify_area | 1202 | drivers/char/stallion.c | if ((rc = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned int))) == 0) { |
| verify_area | 1208 | drivers/char/stallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(long))) == 0) { |
| verify_area | 1214 | drivers/char/stallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(long))) == 0) { |
| verify_area | 1220 | drivers/char/stallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(long))) == 0) { |
| verify_area | 1226 | drivers/char/stallion.c | if ((rc = verify_area(VERIFY_WRITE, (void *) arg, sizeof(struct serial_struct))) == 0) |
| verify_area | 1230 | drivers/char/stallion.c | if ((rc = verify_area(VERIFY_READ, (void *) arg, sizeof(struct serial_struct))) == 0) |
| verify_area | 389 | drivers/char/tga.c | i = verify_area(set ? VERIFY_READ : VERIFY_WRITE, (void *)arg, 16*3); |
| verify_area | 1949 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, buf, count); |
| verify_area | 2131 | drivers/char/tpqic02.c | error = verify_area(VERIFY_READ, buf, count); |
| verify_area | 2588 | drivers/char/tpqic02.c | error = verify_area(VERIFY_READ, (int *) ioarg, sizeof(int)); |
| verify_area | 2615 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, (void *) ioarg, sizeof(qic02_tape_dynconf)); |
| verify_area | 2641 | drivers/char/tpqic02.c | error = verify_area(VERIFY_READ, (char *) ioarg, sizeof(qic02_tape_dynconf)); |
| verify_area | 2673 | drivers/char/tpqic02.c | error = verify_area(VERIFY_READ, (char *) ioarg, sizeof(operation)); |
| verify_area | 2730 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, (void *) ioarg, sizeof(ioctl_status)); |
| verify_area | 2758 | drivers/char/tpqic02.c | error = verify_area(VERIFY_WRITE, (void *) ioarg, sizeof(ioctl_tell)); |
| verify_area | 1343 | drivers/char/tty_io.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct tstruct)); |
| verify_area | 1386 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, 1); |
| verify_area | 1393 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1401 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 1430 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, sizeof(int)); |
| verify_area | 1491 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1513 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1530 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, (void *) arg, 1); |
| verify_area | 1572 | drivers/char/tty_io.c | retval = verify_area(VERIFY_READ, |
| verify_area | 1585 | drivers/char/tty_io.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 154 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, sizeof(struct termio)); |
| verify_area | 162 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, sizeof(struct termios)); |
| verify_area | 184 | drivers/char/tty_ioctl.c | i = verify_area(VERIFY_WRITE, termio, sizeof (struct termio)); |
| verify_area | 239 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, sgttyb, sizeof(struct sgttyb)); |
| verify_area | 282 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, sgttyb, sizeof(struct sgttyb)); |
| verify_area | 304 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, tchars, sizeof(struct tchars)); |
| verify_area | 322 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, tchars, sizeof(struct tchars)); |
| verify_area | 342 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, ltchars, sizeof(struct ltchars)); |
| verify_area | 360 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, ltchars, sizeof(struct ltchars)); |
| verify_area | 408 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 477 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 488 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 500 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 511 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 523 | drivers/char/tty_ioctl.c | retval = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 331 | drivers/char/vga.c | i = verify_area(set ? VERIFY_READ : VERIFY_WRITE, (void *)arg, |
| verify_area | 539 | drivers/char/vga.c | i = verify_area(set ? VERIFY_READ : VERIFY_WRITE, (void *)arg, 16*3); |
| verify_area | 248 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned char)); |
| verify_area | 308 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(int)); |
| verify_area | 347 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(int)); |
| verify_area | 373 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(int)); |
| verify_area | 387 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)a, sizeof(struct kbkeycode)); |
| verify_area | 405 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)a, sizeof(struct kbkeycode)); |
| verify_area | 419 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)a, sizeof(struct kbentry)); |
| verify_area | 446 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (const void *)a, sizeof(struct kbentry)); |
| verify_area | 516 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)a, sizeof(struct kbsentry)); |
| verify_area | 543 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)a, sizeof(struct kbsentry)); |
| verify_area | 612 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) a, sizeof(struct kbdiacrs)); |
| verify_area | 628 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *) a, sizeof(struct kbdiacrs)); |
| verify_area | 642 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned char)); |
| verify_area | 662 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(unsigned char)); |
| verify_area | 703 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)vtmode, sizeof(struct vt_mode)); |
| verify_area | 724 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct vt_mode)); |
| verify_area | 745 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE,(void *)vtstat, sizeof(struct vt_stat)); |
| verify_area | 761 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) arg, sizeof(int)); |
| verify_area | 894 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)vtsizes, sizeof(struct vt_sizes)); |
| verify_area | 909 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)vtconsize, sizeof(struct vt_consize)); |
| verify_area | 989 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)arg, |
| verify_area | 1038 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)arg, |
| verify_area | 1077 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)arg, sizeof(struct unimapinit)); |
| verify_area | 1092 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *)arg, sizeof(struct unimapdesc)); |
| verify_area | 1097 | drivers/char/vt.c | i = verify_area(VERIFY_READ, (void *) list, |
| verify_area | 1110 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct unimapdesc)); |
| verify_area | 1116 | drivers/char/vt.c | i = verify_area(VERIFY_WRITE, (void *) list, |
| verify_area | 137 | drivers/char/wdt.c | err=verify_area(VERIFY_WRITE, buf, 1); |
| verify_area | 773 | drivers/isdn/icn/icn.c | if ((ret = verify_area(VERIFY_READ, (void *) buffer, ICN_CODE_STAGE1))) |
| verify_area | 867 | drivers/isdn/icn/icn.c | if ((ret = verify_area(VERIFY_READ, (void *) buffer, ICN_CODE_STAGE2))) |
| verify_area | 867 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) src, sizeof(int)))) { |
| verify_area | 876 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) src, sizeof(cfg)))) { |
| verify_area | 890 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) src, sizeof(buf)))) { |
| verify_area | 912 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) src, sizeof(buf)))) { |
| verify_area | 953 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_WRITE, (void *) dest, sizeof(cfg) + 10))) { |
| verify_area | 1030 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, sizeof(name)))) |
| verify_area | 1037 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_WRITE, (void *) arg, strlen(s) + 1))) |
| verify_area | 1046 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, sizeof(bname)))) |
| verify_area | 1052 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_WRITE, (void *) arg, strlen(s) + 1))) |
| verify_area | 1061 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, sizeof(name)))) |
| verify_area | 1070 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, sizeof(cfg)))) |
| verify_area | 1079 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, sizeof(cfg)))) |
| verify_area | 1083 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_WRITE, (void *) arg, sizeof(cfg)))) |
| verify_area | 1093 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, sizeof(phone)))) |
| verify_area | 1102 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, sizeof(phone)))) |
| verify_area | 1112 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, sizeof(phone)))) |
| verify_area | 1120 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, sizeof(name)))) |
| verify_area | 1129 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, |
| verify_area | 1144 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, sizeof(name)))) |
| verify_area | 1169 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 1214 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 1235 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 1258 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 1274 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) iocts.arg, 255))) |
| verify_area | 1292 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_WRITE, (void *) iocts.arg, |
| verify_area | 1302 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_WRITE, (void *) arg, sizeof(ulong)))) |
| verify_area | 1317 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 1334 | drivers/isdn/isdn_common.c | if ((ret = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 2067 | drivers/isdn/isdn_net.c | if ((ret = verify_area(VERIFY_WRITE, (void *) phones, strlen(n->num) + 1))) { |
| verify_area | 260 | drivers/isdn/isdn_ppp.c | if ((r = verify_area(VERIFY_READ, (void *) b, sizeof(unsigned long)))) |
| verify_area | 269 | drivers/isdn/isdn_ppp.c | if ((r = verify_area(VERIFY_WRITE, b, sizeof(unsigned long)))) |
| verify_area | 461 | drivers/isdn/isdn_ppp.c | if ((r = verify_area(VERIFY_WRITE, (void *) buf, count))) |
| verify_area | 1169 | drivers/isdn/isdn_ppp.c | error = verify_area(VERIFY_WRITE, r, len); |
| verify_area | 663 | drivers/isdn/isdn_tty.c | error = verify_area(VERIFY_WRITE, (void *) arg, sizeof(long)); |
| verify_area | 675 | drivers/isdn/isdn_tty.c | error = verify_area(VERIFY_WRITE, (void *) arg, sizeof(uint)); |
| verify_area | 684 | drivers/isdn/isdn_tty.c | error = verify_area(VERIFY_WRITE, (void *) arg, sizeof(uint)); |
| verify_area | 693 | drivers/isdn/isdn_tty.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 715 | drivers/isdn/isdn_tty.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 735 | drivers/isdn/isdn_tty.c | error = verify_area(VERIFY_WRITE, (void *) arg, |
| verify_area | 2510 | drivers/net/de4x5.c | status = verify_area(VERIFY_WRITE, (void *)ioc->data, ioc->len); |
| verify_area | 2520 | drivers/net/de4x5.c | status = verify_area(VERIFY_READ, (void *)ioc->data, ETH_ALEN); |
| verify_area | 2572 | drivers/net/de4x5.c | status = verify_area(VERIFY_WRITE, ioc->data, ioc->len); |
| verify_area | 2581 | drivers/net/de4x5.c | if (!(status = verify_area(VERIFY_READ, (void *)ioc->data, ETH_ALEN * ioc->len))) { |
| verify_area | 2613 | drivers/net/de4x5.c | status = verify_area(VERIFY_WRITE, (void *)ioc->data, ioc->len); |
| verify_area | 2634 | drivers/net/de4x5.c | if (!(status = verify_area(VERIFY_WRITE, (void *)ioc->data, 1))) { |
| verify_area | 2641 | drivers/net/de4x5.c | if (!(status = verify_area(VERIFY_READ, (void *)ioc->data, 1))) { |
| verify_area | 2661 | drivers/net/de4x5.c | if (!(status = verify_area(VERIFY_WRITE, (void *)ioc->data, ioc->len))) { |
| verify_area | 2724 | drivers/net/de4x5.c | if (!(status = verify_area(VERIFY_WRITE, (void *)ioc->data, ioc->len))) { |
| verify_area | 1717 | drivers/net/depca.c | if (!(status = verify_area(VERIFY_WRITE, (void *)ioc->data, ioc->len))) { |
| verify_area | 1724 | drivers/net/depca.c | if (!(status = verify_area(VERIFY_READ, (void *)ioc->data, ETH_ALEN))) { |
| verify_area | 1786 | drivers/net/depca.c | if (!(status = verify_area(VERIFY_WRITE, ioc->data, ioc->len))) { |
| verify_area | 1793 | drivers/net/depca.c | if (!(status=verify_area(VERIFY_READ, ioc->data, ETH_ALEN*ioc->len))) { |
| verify_area | 1821 | drivers/net/depca.c | if (!(status=verify_area(VERIFY_WRITE, ioc->data, ioc->len))) { |
| verify_area | 1844 | drivers/net/depca.c | if (!(status=verify_area(VERIFY_WRITE, ioc->data, ioc->len))) { |
| verify_area | 433 | drivers/net/eql.c | err = verify_area(VERIFY_READ, (void *)srqp, sizeof (slaving_request_t)); |
| verify_area | 473 | drivers/net/eql.c | err = verify_area(VERIFY_READ, (void *)srqp, sizeof (slaving_request_t)); |
| verify_area | 504 | drivers/net/eql.c | err = verify_area(VERIFY_READ, (void *)scp, sizeof (slave_config_t)); |
| verify_area | 522 | drivers/net/eql.c | err = verify_area(VERIFY_WRITE, (void *)scp, sizeof (slave_config_t)); |
| verify_area | 541 | drivers/net/eql.c | err = verify_area(VERIFY_READ, (void *)scp, sizeof (slave_config_t)); |
| verify_area | 583 | drivers/net/eql.c | err = verify_area(VERIFY_WRITE, (void *)mcp, sizeof (master_config_t)); |
| verify_area | 602 | drivers/net/eql.c | err = verify_area(VERIFY_READ, (void *)mcp, sizeof (master_config_t)); |
| verify_area | 1688 | drivers/net/ewrk3.c | if (!(status = verify_area(VERIFY_WRITE, (void *)ioc->data, ioc->len))) { |
| verify_area | 1695 | drivers/net/ewrk3.c | if (!(status = verify_area(VERIFY_READ, (void *)ioc->data, ETH_ALEN))) { |
| verify_area | 1740 | drivers/net/ewrk3.c | if (!(status = verify_area(VERIFY_WRITE, ioc->data, ioc->len))) { |
| verify_area | 1760 | drivers/net/ewrk3.c | if (!(status=verify_area(VERIFY_READ, ioc->data, ETH_ALEN*ioc->len))) { |
| verify_area | 1791 | drivers/net/ewrk3.c | if (!(status=verify_area(VERIFY_WRITE, ioc->data, ioc->len))) { |
| verify_area | 1810 | drivers/net/ewrk3.c | if (!(status=verify_area(VERIFY_WRITE, ioc->data, ioc->len))) { |
| verify_area | 1817 | drivers/net/ewrk3.c | if (!(status=verify_area(VERIFY_READ, ioc->data, 1))) { |
| verify_area | 1837 | drivers/net/ewrk3.c | if (!(status=verify_area(VERIFY_WRITE, ioc->data, ioc->len))) { |
| verify_area | 1847 | drivers/net/ewrk3.c | if (!(status=verify_area(VERIFY_READ, ioc->data, EEPROM_MAX))) { |
| verify_area | 1861 | drivers/net/ewrk3.c | if (!(status=verify_area(VERIFY_WRITE, ioc->data, ioc->len))) { |
| verify_area | 1601 | drivers/net/pi2.c | int ret = verify_area(VERIFY_WRITE, ifr->ifr_data, sizeof(struct pi_req)); |
| verify_area | 1826 | drivers/net/ppp.c | indx = verify_area (VERIFY_WRITE, buf, nr); |
| verify_area | 1890 | drivers/net/ppp.c | indx = verify_area (VERIFY_WRITE, buf, len + 2); |
| verify_area | 2223 | drivers/net/ppp.c | status = verify_area (VERIFY_READ, data, count); |
| verify_area | 2259 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, odp, sizeof (data)); |
| verify_area | 2267 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, ptr, nb); |
| verify_area | 2353 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) param3, |
| verify_area | 2369 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) param3, |
| verify_area | 2388 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) param3, |
| verify_area | 2415 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) param3, |
| verify_area | 2431 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) param3, |
| verify_area | 2445 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) param3, |
| verify_area | 2459 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) param3, |
| verify_area | 2473 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) param3, |
| verify_area | 2489 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) param3, |
| verify_area | 2505 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, (void *) param3, |
| verify_area | 2525 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, |
| verify_area | 2543 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) param3, |
| verify_area | 2572 | drivers/net/ppp.c | error = verify_area (VERIFY_READ, (void *) param3, |
| verify_area | 2760 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, result, len); |
| verify_area | 2783 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, |
| verify_area | 2826 | drivers/net/ppp.c | error = verify_area (VERIFY_WRITE, |
| verify_area | 1035 | drivers/net/pt.c | int ret = verify_area(VERIFY_WRITE, ifr->ifr_data, sizeof(struct pt_req)); |
| verify_area | 1020 | drivers/net/slip.c | err = verify_area(VERIFY_READ, addr, AX25_ADDR_LEN); |
| verify_area | 1055 | drivers/net/slip.c | err = verify_area(VERIFY_WRITE, arg, strlen(sl->dev->name) + 1); |
| verify_area | 1063 | drivers/net/slip.c | err = verify_area(VERIFY_WRITE, arg, sizeof(int)); |
| verify_area | 1071 | drivers/net/slip.c | err = verify_area(VERIFY_READ, arg, sizeof(int)); |
| verify_area | 1126 | drivers/net/slip.c | err = verify_area(VERIFY_READ, arg, sizeof(int)); |
| verify_area | 1141 | drivers/net/slip.c | err = verify_area(VERIFY_WRITE, arg, sizeof(int)); |
| verify_area | 1151 | drivers/net/slip.c | err = verify_area(VERIFY_READ, arg, sizeof(int)); |
| verify_area | 1166 | drivers/net/slip.c | err = verify_area(VERIFY_WRITE, arg, sizeof(int)); |
| verify_area | 3207 | drivers/scsi/53c7,8xx.c | if (error = verify_area(VERIFY_READ,buf,count)) |
| verify_area | 44 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_READ, buffer, sizeof(long)); |
| verify_area | 56 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_WRITE, buffer, len); |
| verify_area | 179 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_READ, buffer, 2*sizeof(long) + 1); |
| verify_area | 220 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_READ, cmd_in, |
| verify_area | 254 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_WRITE, |
| verify_area | 262 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_WRITE, cmd_in, outlen); |
| verify_area | 310 | drivers/scsi/scsi_ioctl.c | result = verify_area(VERIFY_WRITE, (void *) arg, 2*sizeof(long)); |
| verify_area | 33 | drivers/scsi/sd_ioctl.c | error = verify_area(VERIFY_WRITE, loc, sizeof(*loc)); |
| verify_area | 51 | drivers/scsi/sd_ioctl.c | error = verify_area(VERIFY_WRITE, (long *) arg, sizeof(long)); |
| verify_area | 76 | drivers/scsi/sg.c | result = verify_area(VERIFY_READ, (const void *)arg, sizeof(long)); |
| verify_area | 205 | drivers/scsi/sg.c | if ((i=verify_area(VERIFY_WRITE,buf,count))) |
| verify_area | 306 | drivers/scsi/sg.c | if ((i=verify_area(VERIFY_READ,buf,count))) |
| verify_area | 131 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_READ, (void *) arg, sizeof (msf)); |
| verify_area | 155 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_READ, (void *) arg, sizeof (blk)); |
| verify_area | 179 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_READ, (void *) arg, sizeof (ti)); |
| verify_area | 223 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_WRITE, (void *) arg, sizeof (struct cdrom_tochdr)); |
| verify_area | 236 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_READ, (void *) arg, sizeof (struct cdrom_tocentry)); |
| verify_area | 265 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_WRITE, (void *) arg, sizeof (struct cdrom_tocentry)); |
| verify_area | 318 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_READ, (void *) arg, sizeof (struct cdrom_volctrl)); |
| verify_area | 416 | drivers/scsi/sr_ioctl.c | err = verify_area (VERIFY_WRITE, (void *) arg, sizeof (struct cdrom_subchnl)); |
| verify_area | 434 | drivers/scsi/sr_ioctl.c | err = verify_area(VERIFY_READ, (void *) arg, |
| verify_area | 452 | drivers/scsi/sr_ioctl.c | err=verify_area(VERIFY_WRITE,(void *) arg, |
| verify_area | 1785 | drivers/scsi/st.c | i = verify_area(VERIFY_READ, (void *)arg, sizeof(mtc)); |
| verify_area | 1853 | drivers/scsi/st.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct mtget)); |
| verify_area | 1920 | drivers/scsi/st.c | i = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct mtpos)); |
| verify_area | 177 | drivers/sound/soundcard.c | if ((err = verify_area (VERIFY_READ, (void *) arg, len)) < 0) |
| verify_area | 183 | drivers/sound/soundcard.c | if ((err = verify_area (VERIFY_WRITE, (void *) arg, len)) < 0) |
| verify_area | 150 | fs/binfmt_aout.c | if (verify_area(VERIFY_READ, (void *) START_DATA(dump), dump.u_dsize << PAGE_SHIFT)) |
| verify_area | 152 | fs/binfmt_aout.c | if (verify_area(VERIFY_READ, (void *) dump.start_stack, dump.u_ssize << PAGE_SHIFT)) |
| verify_area | 83 | fs/binfmt_elf.c | if (verify_area(VERIFY_WRITE, (void *) elf_bss, nbyte)) { |
| verify_area | 1919 | fs/buffer.c | error = verify_area(VERIFY_WRITE, (void *) data, sizeof(int)); |
| verify_area | 594 | fs/dquot.c | if ((error = verify_area(VERIFY_READ, dqblk, sizeof(struct dqblk))) != 0) |
| verify_area | 652 | fs/dquot.c | if ((error = verify_area(VERIFY_WRITE, dqblk, sizeof(struct dqblk))) != 0) |
| verify_area | 668 | fs/dquot.c | if ((error = verify_area(VERIFY_WRITE, addr, sizeof(struct dqstats))) != 0) |
| verify_area | 260 | fs/exec.c | error = verify_area(VERIFY_READ, tmp, sizeof(char *)); |
| verify_area | 265 | fs/exec.c | error = verify_area(VERIFY_READ, p, 1); |
| verify_area | 399 | fs/exec.c | result = verify_area(VERIFY_WRITE, addr, count); |
| verify_area | 29 | fs/ext2/ioctl.c | if ((err = verify_area (VERIFY_WRITE, (long *) arg, sizeof(long)))) |
| verify_area | 62 | fs/ext2/ioctl.c | if ((err = verify_area (VERIFY_WRITE, (long *) arg, sizeof(long)))) |
| verify_area | 28 | fs/ioctl.c | error = verify_area(VERIFY_WRITE,(void *) arg,4); |
| verify_area | 38 | fs/ioctl.c | error = verify_area(VERIFY_WRITE,(void *) arg,4); |
| verify_area | 45 | fs/ioctl.c | error = verify_area(VERIFY_WRITE,(void *) arg,sizeof(int)); |
| verify_area | 182 | fs/locks.c | error = verify_area(VERIFY_WRITE, l, sizeof(*l)); |
| verify_area | 230 | fs/locks.c | error = verify_area(VERIFY_READ, l, sizeof(*l)); |
| verify_area | 35 | fs/ncpfs/ioctl.c | if ((result = verify_area(VERIFY_READ, (char *)arg, |
| verify_area | 51 | fs/ncpfs/ioctl.c | if ((result = verify_area(VERIFY_WRITE, (char *)request.data, |
| verify_area | 84 | fs/ncpfs/ioctl.c | if ((result = verify_area(VERIFY_WRITE, (char *)arg, |
| verify_area | 115 | fs/ncpfs/ioctl.c | if ((result = verify_area(VERIFY_WRITE, (uid_t*) arg, |
| verify_area | 30 | fs/open.c | error = verify_area(VERIFY_WRITE, buf, sizeof(struct statfs)); |
| verify_area | 51 | fs/open.c | error = verify_area(VERIFY_WRITE, buf, sizeof(struct statfs)); |
| verify_area | 163 | fs/open.c | error = verify_area(VERIFY_READ, times, sizeof(*times)); |
| verify_area | 205 | fs/open.c | error = verify_area(VERIFY_READ, utimes, sizeof(times)); |
| verify_area | 141 | fs/pipe.c | error = verify_area(VERIFY_WRITE, (void *) arg, sizeof(int)); |
| verify_area | 67 | fs/read_write.c | if ((err = verify_area(VERIFY_WRITE, result, sizeof(loff_t)))) |
| verify_area | 117 | fs/read_write.c | error = verify_area(VERIFY_WRITE,buf,count); |
| verify_area | 138 | fs/read_write.c | error = verify_area(VERIFY_READ,buf,count); |
| verify_area | 207 | fs/read_write.c | retval = verify_area(VERIFY_READ, vector, count*sizeof(*vector)); |
| verify_area | 214 | fs/read_write.c | retval = verify_area(type, iov[i].iov_base, iov[i].iov_len); |
| verify_area | 66 | fs/readdir.c | error = verify_area(VERIFY_WRITE, dirent, sizeof(struct old_linux_dirent)); |
| verify_area | 130 | fs/readdir.c | error = verify_area(VERIFY_WRITE, dirent, count); |
| verify_area | 165 | fs/select.c | error = verify_area(VERIFY_WRITE,fs_pointer,sizeof(fd_set)); |
| verify_area | 227 | fs/select.c | i = verify_area(VERIFY_WRITE, tvp, sizeof(*tvp)); |
| verify_area | 24 | fs/smbfs/ioctl.c | if ((result = verify_area(VERIFY_WRITE, (uid_t*) arg, |
| verify_area | 115 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 132 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 154 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 172 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 195 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 212 | fs/stat.c | error = verify_area(VERIFY_WRITE,statbuf,sizeof (*statbuf)); |
| verify_area | 228 | fs/stat.c | error = verify_area(VERIFY_WRITE,buf,bufsiz); |
| verify_area | 219 | fs/super.c | err = verify_area(VERIFY_WRITE, buf, len); |
| verify_area | 402 | fs/super.c | error = verify_area(VERIFY_WRITE,ubuf,sizeof(struct ustat)); |
| verify_area | 71 | fs/umsdos/ioctl.c | if ((err = verify_area(VERIFY_WRITE,(void*)data,sizeof(struct umsdos_ioctl))) < 0) { |
| verify_area | 102 | include/linux/blk.h | case BLKROGET: { int __err = verify_area(VERIFY_WRITE, (void *) (where), sizeof(long)); \ |
| verify_area | 18 | include/linux/mm.h | extern int verify_area(int, const void *, unsigned long); |
| verify_area | 65 | ipc/msg.c | err = verify_area (VERIFY_READ, msgp->mtext, msgsz); |
| verify_area | 172 | ipc/msg.c | err = verify_area (VERIFY_WRITE, msgp->mtext, msgsz); |
| verify_area | 455 | ipc/msg.c | err = verify_area (VERIFY_WRITE, buf, sizeof (struct msginfo)); |
| verify_area | 464 | ipc/msg.c | err = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
| verify_area | 489 | ipc/msg.c | err = verify_area (VERIFY_READ, buf, sizeof (*buf)); |
| verify_area | 497 | ipc/msg.c | err = verify_area (VERIFY_WRITE, buf, sizeof(*buf)); |
| verify_area | 395 | ipc/sem.c | i = verify_area(VERIFY_WRITE, tmp, sizeof(struct seminfo)); |
| verify_area | 404 | ipc/sem.c | i = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
| verify_area | 459 | ipc/sem.c | i = verify_area (VERIFY_WRITE, array, nsems*sizeof(ushort)); |
| verify_area | 477 | ipc/sem.c | if ((i = verify_area (VERIFY_READ, array, nsems*sizeof(ushort)))) |
| verify_area | 486 | ipc/sem.c | if ((i = verify_area (VERIFY_WRITE, buf, sizeof(*buf)))) |
| verify_area | 491 | ipc/sem.c | if ((i = verify_area (VERIFY_READ, buf, sizeof (*buf)))) |
| verify_area | 571 | ipc/sem.c | if ((i = verify_area (VERIFY_READ, tsops, nsops * sizeof(*tsops)))) |
| verify_area | 215 | ipc/shm.c | err = verify_area (VERIFY_READ, buf, sizeof (*buf)); |
| verify_area | 232 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (struct shminfo)); |
| verify_area | 243 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (shm_info)); |
| verify_area | 258 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
| verify_area | 311 | ipc/shm.c | err = verify_area (VERIFY_WRITE, buf, sizeof (*buf)); |
| verify_area | 560 | kernel/exit.c | flag = verify_area(VERIFY_WRITE, stat_addr, sizeof(*stat_addr)); |
| verify_area | 565 | kernel/exit.c | flag = verify_area(VERIFY_WRITE, ru, sizeof(*ru)); |
| verify_area | 23 | kernel/info.c | error = verify_area(VERIFY_WRITE, info, sizeof(struct sysinfo)); |
| verify_area | 91 | kernel/itimer.c | error = verify_area(VERIFY_WRITE, value, sizeof(struct itimerval)); |
| verify_area | 162 | kernel/itimer.c | error = verify_area(VERIFY_READ, value, sizeof(*value)); |
| verify_area | 170 | kernel/itimer.c | error = verify_area(VERIFY_WRITE, ovalue, sizeof(struct itimerval)); |
| verify_area | 151 | kernel/ksyms.c | X(verify_area), |
| verify_area | 256 | kernel/module.c | if ((error = verify_area(VERIFY_READ, &symtab->size, sizeof(symtab->size)))) |
| verify_area | 264 | kernel/module.c | if ((error = verify_area(VERIFY_READ, symtab, size))) { |
| verify_area | 415 | kernel/module.c | if ((i = verify_area(VERIFY_WRITE, to, nmodsyms * sizeof(*table)))) |
| verify_area | 80 | kernel/printk.c | error = verify_area(VERIFY_WRITE,buf,len); |
| verify_area | 113 | kernel/printk.c | error = verify_area(VERIFY_WRITE,buf,len); |
| verify_area | 1017 | kernel/sched.c | error = verify_area(VERIFY_READ, param, sizeof(struct sched_param)); |
| verify_area | 1090 | kernel/sched.c | error = verify_area(VERIFY_WRITE, param, sizeof(struct sched_param)); |
| verify_area | 1142 | kernel/sched.c | error = verify_area(VERIFY_WRITE, interval, sizeof(struct timespec)); |
| verify_area | 1183 | kernel/sched.c | error = verify_area(VERIFY_READ, rqtp, sizeof(struct timespec)); |
| verify_area | 1188 | kernel/sched.c | error = verify_area(VERIFY_WRITE, rmtp, |
| verify_area | 35 | kernel/signal.c | error = verify_area(VERIFY_READ, set, sizeof(sigset_t)); |
| verify_area | 54 | kernel/signal.c | error = verify_area(VERIFY_WRITE, oset, sizeof(sigset_t)); |
| verify_area | 84 | kernel/signal.c | error = verify_area(VERIFY_WRITE, set, sizeof(sigset_t)); |
| verify_area | 138 | kernel/signal.c | err = verify_area(VERIFY_READ, handler, 1); |
| verify_area | 163 | kernel/signal.c | int err = verify_area(VERIFY_READ, action, sizeof(*action)); |
| verify_area | 172 | kernel/signal.c | err = verify_area(VERIFY_READ, new_sa.sa_handler, 1); |
| verify_area | 178 | kernel/signal.c | int err = verify_area(VERIFY_WRITE, oldaction, sizeof(*oldaction)); |
| verify_area | 426 | kernel/sys.c | int error = verify_area(VERIFY_WRITE,tbuf,sizeof *tbuf); |
| verify_area | 605 | kernel/sys.c | i = verify_area(VERIFY_WRITE, grouplist, sizeof(gid_t) * gidsetsize); |
| verify_area | 629 | kernel/sys.c | i = verify_area(VERIFY_READ, grouplist, sizeof(gid_t) * gidsetsize); |
| verify_area | 662 | kernel/sys.c | error = verify_area(VERIFY_WRITE, name, sizeof *name); |
| verify_area | 679 | kernel/sys.c | error = verify_area(VERIFY_WRITE, name,sizeof *name); |
| verify_area | 700 | kernel/sys.c | error = verify_area(VERIFY_WRITE, name,sizeof *name); |
| verify_area | 726 | kernel/sys.c | error = verify_area(VERIFY_READ, name, len); |
| verify_area | 740 | kernel/sys.c | i = verify_area(VERIFY_WRITE, name, len); |
| verify_area | 762 | kernel/sys.c | error = verify_area(VERIFY_READ, name, len); |
| verify_area | 776 | kernel/sys.c | error = verify_area(VERIFY_WRITE,rlim,sizeof *rlim); |
| verify_area | 790 | kernel/sys.c | err = verify_area(VERIFY_READ, rlim, sizeof(*rlim)); |
| verify_area | 820 | kernel/sys.c | error = verify_area(VERIFY_WRITE, ru, sizeof *ru); |
| verify_area | 154 | kernel/sysctl.c | error = verify_area(VERIFY_READ,name,nlen*sizeof(int)); |
| verify_area | 159 | kernel/sysctl.c | error = verify_area(VERIFY_WRITE,oldlenp,sizeof(size_t)); |
| verify_area | 161 | kernel/sysctl.c | error = verify_area(VERIFY_WRITE,oldval,get_user(oldlenp)); |
| verify_area | 165 | kernel/sysctl.c | error = verify_area(VERIFY_READ,newval,newlen); |
| verify_area | 186 | kernel/sysctl.c | error = verify_area(VERIFY_READ, args, sizeof(*args)); |
| verify_area | 435 | kernel/sysctl.c | error = verify_area(write ? VERIFY_READ : VERIFY_WRITE, buf, count); |
| verify_area | 51 | kernel/time.c | int error = verify_area(VERIFY_WRITE, tloc, sizeof(*tloc)); |
| verify_area | 71 | kernel/time.c | error = verify_area(VERIFY_READ, tptr, sizeof(*tptr)); |
| verify_area | 93 | kernel/time.c | error = verify_area(VERIFY_WRITE, tv, sizeof *tv); |
| verify_area | 100 | kernel/time.c | error = verify_area(VERIFY_WRITE, tz, sizeof *tz); |
| verify_area | 150 | kernel/time.c | int error = verify_area(VERIFY_READ, tv, sizeof(*tv)); |
| verify_area | 156 | kernel/time.c | int error = verify_area(VERIFY_READ, tz, sizeof(*tz)); |
| verify_area | 203 | kernel/time.c | error = verify_area(VERIFY_WRITE, txc_p, sizeof(struct timex)); |
| verify_area | 695 | net/appletalk/ddp.c | int err=verify_area(ro?VERIFY_READ:VERIFY_WRITE, arg,sizeof(atreq)); |
| verify_area | 821 | net/appletalk/ddp.c | err=verify_area(VERIFY_READ, arg, sizeof(rt)); |
| verify_area | 977 | net/appletalk/ddp.c | err=verify_area(VERIFY_READ,optval,sizeof(int)); |
| verify_area | 1031 | net/appletalk/ddp.c | err=verify_area(VERIFY_WRITE,optlen,sizeof(int)); |
| verify_area | 1035 | net/appletalk/ddp.c | err=verify_area(VERIFY_WRITE,optval,sizeof(int)); |
| verify_area | 1793 | net/appletalk/ddp.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(struct timeval)); |
| verify_area | 1843 | net/appletalk/ddp.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(unsigned long)); |
| verify_area | 743 | net/ax25/af_ax25.c | if ((err = verify_area(VERIFY_READ, optval, sizeof(int))) != 0) |
| verify_area | 853 | net/ax25/af_ax25.c | if ((err = verify_area(VERIFY_WRITE, optlen, sizeof(int))) != 0) |
| verify_area | 858 | net/ax25/af_ax25.c | if ((err = verify_area(VERIFY_WRITE, optval, sizeof(int))) != 0) |
| verify_area | 2003 | net/ax25/af_ax25.c | if ((err = verify_area(VERIFY_WRITE, (void *)arg, sizeof(unsigned long))) != 0) |
| verify_area | 2017 | net/ax25/af_ax25.c | if ((err = verify_area(VERIFY_WRITE, (void *)arg, sizeof(unsigned long))) != 0) |
| verify_area | 2027 | net/ax25/af_ax25.c | if ((err = verify_area(VERIFY_WRITE,(void *)arg,sizeof(struct timeval))) != 0) |
| verify_area | 2039 | net/ax25/af_ax25.c | if ((err = verify_area(VERIFY_READ, (void *)arg, sizeof(struct sockaddr_ax25))) != 0) |
| verify_area | 2046 | net/ax25/af_ax25.c | if ((err = verify_area(VERIFY_READ, (void *)arg, sizeof(unsigned long))) != 0) |
| verify_area | 177 | net/ax25/ax25_route.c | if ((err = verify_area(VERIFY_READ, arg, sizeof(route))) != 0) |
| verify_area | 232 | net/ax25/ax25_route.c | if ((err = verify_area(VERIFY_READ, arg, sizeof(route))) != 0) |
| verify_area | 601 | net/ax25/ax25_route.c | if ((err = verify_area(VERIFY_READ, arg, sizeof(ax25_parms))) != 0) |
| verify_area | 652 | net/ax25/ax25_route.c | if ((err = verify_area(VERIFY_WRITE, arg, sizeof(struct ax25_parms_struct))) != 0) |
| verify_area | 736 | net/ax25/ax25_route.c | if ((err = verify_area(VERIFY_READ, arg, sizeof(bpqaddr))) != 0) |
| verify_area | 776 | net/core/dev.c | err=verify_area(VERIFY_WRITE, arg, sizeof(struct ifconf)); |
| verify_area | 788 | net/core/dev.c | err=verify_area(VERIFY_WRITE,pos,len); |
| verify_area | 944 | net/core/dev.c | int err=verify_area(VERIFY_WRITE, arg, sizeof(struct ifreq)); |
| verify_area | 40 | net/core/iovec.c | err=verify_area(mode, m->msg_name, m->msg_namelen); |
| verify_area | 46 | net/core/iovec.c | err=verify_area(mode, m->msg_accrights, m->msg_accrightslen); |
| verify_area | 53 | net/core/iovec.c | err=verify_area(VERIFY_READ, &m->msg_iov[ct], sizeof(struct iovec)); |
| verify_area | 57 | net/core/iovec.c | err=verify_area(mode, iov[ct].iov_base, iov[ct].iov_len); |
| verify_area | 145 | net/core/sock.c | err=verify_area(VERIFY_READ, optval, sizeof(int)); |
| verify_area | 212 | net/core/sock.c | err=verify_area(VERIFY_READ,optval,sizeof(ling)); |
| verify_area | 295 | net/core/sock.c | err=verify_area(VERIFY_WRITE,optval,sizeof(ling)); |
| verify_area | 298 | net/core/sock.c | err=verify_area(VERIFY_WRITE,optlen,sizeof(int)); |
| verify_area | 314 | net/core/sock.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
| verify_area | 319 | net/core/sock.c | err=verify_area(VERIFY_WRITE, optval, sizeof(int)); |
| verify_area | 1204 | net/ipv4/af_inet.c | err=verify_area(VERIFY_READ,(int *)arg,sizeof(long)); |
| verify_area | 1215 | net/ipv4/af_inet.c | err=verify_area(VERIFY_WRITE,(void *) arg, sizeof(long)); |
| verify_area | 1223 | net/ipv4/af_inet.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(struct timeval)); |
| verify_area | 1878 | net/ipv4/arp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
| verify_area | 1888 | net/ipv4/arp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq_old)); |
| verify_area | 1954 | net/ipv4/arp.c | err = verify_area(VERIFY_WRITE, arg, sizeof(struct arpreq)); |
| verify_area | 1962 | net/ipv4/arp.c | err = verify_area(VERIFY_WRITE, arg, sizeof(struct arpreq_old)); |
| verify_area | 125 | net/ipv4/ip_sockglue.c | err=verify_area(VERIFY_READ, optval, sizeof(int)); |
| verify_area | 149 | net/ipv4/ip_sockglue.c | err = verify_area(VERIFY_READ, optval, optlen); |
| verify_area | 221 | net/ipv4/ip_sockglue.c | err=verify_area(VERIFY_READ, optval, sizeof(addr)); |
| verify_area | 271 | net/ipv4/ip_sockglue.c | err=verify_area(VERIFY_READ, optval, sizeof(mreq)); |
| verify_area | 328 | net/ipv4/ip_sockglue.c | err=verify_area(VERIFY_READ, optval, sizeof(mreq)); |
| verify_area | 394 | net/ipv4/ip_sockglue.c | err=verify_area(VERIFY_READ,optval,optlen); |
| verify_area | 412 | net/ipv4/ip_sockglue.c | err=verify_area(VERIFY_READ,optval,optlen); |
| verify_area | 453 | net/ipv4/ip_sockglue.c | err = verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
| verify_area | 466 | net/ipv4/ip_sockglue.c | err = verify_area(VERIFY_WRITE, optval, opt->optlen); |
| verify_area | 519 | net/ipv4/ip_sockglue.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
| verify_area | 523 | net/ipv4/ip_sockglue.c | err=verify_area(VERIFY_WRITE, optval, len); |
| verify_area | 533 | net/ipv4/ip_sockglue.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
| verify_area | 538 | net/ipv4/ip_sockglue.c | err=verify_area(VERIFY_WRITE, optval, sizeof(int)); |
| verify_area | 446 | net/ipv4/ipmr.c | if((err=verify_area(VERIFY_READ,optval,sizeof(int)))<0) |
| verify_area | 463 | net/ipv4/ipmr.c | if((err=verify_area(VERIFY_READ, optval, sizeof(vif)))<0) |
| verify_area | 540 | net/ipv4/ipmr.c | err=verify_area(VERIFY_READ, optval, sizeof(mfc)); |
| verify_area | 551 | net/ipv4/ipmr.c | if((err=verify_area(VERIFY_READ, optval,sizeof(int)))<0) |
| verify_area | 581 | net/ipv4/ipmr.c | err=verify_area(VERIFY_WRITE, optval,sizeof(int)); |
| verify_area | 606 | net/ipv4/ipmr.c | err=verify_area(VERIFY_WRITE, (void *)arg, sizeof(vr)); |
| verify_area | 624 | net/ipv4/ipmr.c | err=verify_area(VERIFY_WRITE, (void *)arg, sizeof(sr)); |
| verify_area | 454 | net/ipv4/rarp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
| verify_area | 465 | net/ipv4/rarp.c | err = verify_area(VERIFY_WRITE, arg, sizeof(struct arpreq)); |
| verify_area | 472 | net/ipv4/rarp.c | err = verify_area(VERIFY_READ, arg, sizeof(struct arpreq)); |
| verify_area | 1763 | net/ipv4/route.c | err=verify_area(VERIFY_READ, arg, sizeof(struct rtentry)); |
| verify_area | 764 | net/ipv4/tcp.c | err=verify_area(VERIFY_WRITE,(void *)arg, sizeof(int)); |
| verify_area | 774 | net/ipv4/tcp.c | err = verify_area(VERIFY_WRITE,(void *) arg, sizeof(int)); |
| verify_area | 786 | net/ipv4/tcp.c | err=verify_area(VERIFY_WRITE,(void *)arg, sizeof(int)); |
| verify_area | 2121 | net/ipv4/tcp.c | err=verify_area(VERIFY_READ, optval, sizeof(int)); |
| verify_area | 2165 | net/ipv4/tcp.c | err=verify_area(VERIFY_WRITE, optlen, sizeof(int)); |
| verify_area | 2170 | net/ipv4/tcp.c | err=verify_area(VERIFY_WRITE, optval, sizeof(int)); |
| verify_area | 455 | net/ipv4/udp.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
| verify_area | 479 | net/ipv4/udp.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
| verify_area | 1003 | net/ipx/af_ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(ifr)); |
| verify_area | 1026 | net/ipx/af_ipx.c | err=verify_area(VERIFY_WRITE,arg,sizeof(ifr)); |
| verify_area | 1044 | net/ipx/af_ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(char)); |
| verify_area | 1049 | net/ipx/af_ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(char)); |
| verify_area | 1269 | net/ipx/af_ipx.c | err=verify_area(VERIFY_READ,arg,sizeof(rt)); |
| verify_area | 1506 | net/ipx/af_ipx.c | err=verify_area(VERIFY_READ,optval,sizeof(int)); |
| verify_area | 1561 | net/ipx/af_ipx.c | err=verify_area(VERIFY_WRITE,optlen,sizeof(int)); |
| verify_area | 1565 | net/ipx/af_ipx.c | err=verify_area(VERIFY_WRITE,optval,sizeof(int)); |
| verify_area | 2092 | net/ipx/af_ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(unsigned long)); |
| verify_area | 2106 | net/ipx/af_ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(unsigned long)); |
| verify_area | 2126 | net/ipx/af_ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg, |
| verify_area | 2136 | net/ipx/af_ipx.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(struct timeval)); |
| verify_area | 302 | net/netrom/af_netrom.c | if ((err = verify_area(VERIFY_READ, optval, sizeof(int))) != 0) |
| verify_area | 371 | net/netrom/af_netrom.c | if ((err = verify_area(VERIFY_WRITE, optlen, sizeof(int))) != 0) |
| verify_area | 376 | net/netrom/af_netrom.c | if ((err = verify_area(VERIFY_WRITE, optval, sizeof(int))) != 0) |
| verify_area | 1177 | net/netrom/af_netrom.c | if ((err = verify_area(VERIFY_WRITE, (void *)arg, sizeof(unsigned long))) != 0) |
| verify_area | 1190 | net/netrom/af_netrom.c | if ((err = verify_area(VERIFY_WRITE, (void *)arg, sizeof(unsigned long))) != 0) |
| verify_area | 1200 | net/netrom/af_netrom.c | if ((err = verify_area(VERIFY_WRITE,(void *)arg,sizeof(struct timeval))) != 0) |
| verify_area | 1228 | net/netrom/af_netrom.c | if ((err = verify_area(VERIFY_WRITE, (void *)arg, sizeof(struct nr_parms_struct))) != 0) |
| verify_area | 1239 | net/netrom/af_netrom.c | if ((err = verify_area(VERIFY_READ, (void *)arg, sizeof(struct nr_parms_struct))) != 0) |
| verify_area | 574 | net/netrom/nr_route.c | if ((err = verify_area(VERIFY_READ, arg, sizeof(struct nr_route_struct))) != 0) |
| verify_area | 594 | net/netrom/nr_route.c | if ((err = verify_area(VERIFY_READ, arg, sizeof(struct nr_route_struct))) != 0) |
| verify_area | 614 | net/netrom/nr_route.c | if ((err = verify_area(VERIFY_READ, arg, sizeof(int))) != 0) |
| verify_area | 129 | net/socket.c | if((err=verify_area(VERIFY_READ,uaddr,ulen))<0) |
| verify_area | 141 | net/socket.c | if((err=verify_area(VERIFY_WRITE,ulen,sizeof(*ulen)))<0) |
| verify_area | 150 | net/socket.c | if((err=verify_area(VERIFY_WRITE,uaddr,len))<0) |
| verify_area | 337 | net/socket.c | if ((err=verify_area(VERIFY_WRITE,ubuf,size))<0) |
| verify_area | 371 | net/socket.c | if ((err=verify_area(VERIFY_READ,ubuf,size))<0) |
| verify_area | 618 | net/socket.c | er=verify_area(VERIFY_WRITE, usockvec, sizeof(usockvec)); |
| verify_area | 879 | net/socket.c | err=verify_area(VERIFY_READ, buff, len); |
| verify_area | 915 | net/socket.c | err=verify_area(VERIFY_READ,buff,len); |
| verify_area | 956 | net/socket.c | err=verify_area(VERIFY_WRITE, ubuf, size); |
| verify_area | 995 | net/socket.c | err=verify_area(VERIFY_WRITE,ubuf,size); |
| verify_area | 1096 | net/socket.c | err=verify_area(VERIFY_READ, msg,sizeof(struct msghdr)); |
| verify_area | 1135 | net/socket.c | err=verify_area(VERIFY_READ, msg,sizeof(struct msghdr)); |
| verify_area | 1198 | net/socket.c | er=verify_area(VERIFY_READ, args, nargs[call] * sizeof(unsigned long)); |
| verify_area | 1026 | net/unix/af_unix.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(unsigned long)); |
| verify_area | 1042 | net/unix/af_unix.c | err=verify_area(VERIFY_WRITE,(void *)arg,sizeof(unsigned long)); |