| /linux/drivers/net/ethernet/sfc/ |
| H A D | efx_reflash.c | 30 if (check_add_overflow(header_offset, EFX_REFLASH_HEADER_LENGTH_OFST + in efx_reflash_parse_reflash_header() 48 if (check_add_overflow(header_offset, header_len, &trailer_offset) || in efx_reflash_parse_reflash_header() 49 check_add_overflow(trailer_offset, payload_size, &trailer_offset) || in efx_reflash_parse_reflash_header() 50 check_add_overflow(trailer_offset, EFX_REFLASH_TRAILER_LEN, in efx_reflash_parse_reflash_header() 117 if (check_add_overflow(header_offset, EFX_SNICIMAGE_HEADER_MINLEN, in efx_reflash_parse_snic_header() 132 if (check_add_overflow(header_offset, header_len, &header_end)) in efx_reflash_parse_snic_header() 135 if (check_add_overflow(header_end, payload_size, &payload_end) || in efx_reflash_parse_snic_header() 172 if (check_add_overflow(header_offset, EFX_SNICBUNDLE_HEADER_LEN, in efx_reflash_parse_snic_bundle_header()
|
| /linux/tools/testing/selftests/vfio/lib/ |
| H A D | iova_allocator.c | 67 if (check_add_overflow(iova, size - 1, &last) || in iova_allocator_alloc() 75 if (check_add_overflow(iova, size - 1, &last) || in iova_allocator_alloc()
|
| /linux/include/linux/usb/ |
| H A D | func_utils.h | 31 if (check_add_overflow(offset, size, \ 48 if (check_add_overflow(offset, groupname##_##name##__sz,\
|
| /linux/fs/smb/server/ |
| H A D | smbacl.c | 646 if (check_add_overflow(*size, ace_sz, size)) { in set_posix_acl_entries_dacl() 660 if (check_add_overflow(*size, ace_sz, size)) { in set_posix_acl_entries_dacl() 705 if (check_add_overflow(*size, ace_sz, size)) { in set_posix_acl_entries_dacl() 744 if (check_add_overflow(size, nt_ace_size, &size)) in set_ntacl_dacl() 951 check_add_overflow(len, ppntsd_size - dacl_offset, &len)) in smb_acl_sec_desc_scratch_len() 958 check_add_overflow(len, tmp, &len)) in smb_acl_sec_desc_scratch_len() 962 if (check_add_overflow(len, 5 * sizeof(struct smb_ace), &len)) in smb_acl_sec_desc_scratch_len() 969 check_add_overflow(len, tmp, &len)) 1090 if (check_add_overflow(*nt_size, ace_size, nt_size) || in smb_append_inherited_ace() 1125 check_add_overflow(dacloffse in smb_inherit_dacl() [all...] |
| /linux/tools/include/linux/ |
| H A D | overflow.h | 44 #define check_add_overflow(a, b, d) ({ \ macro 141 if (check_add_overflow(bytes, c, &bytes)) in __ab_c_size()
|
| /linux/include/linux/ |
| H A D | overflow.h | 61 #define check_add_overflow(a, b, d) \ macro 213 check_add_overflow((x), v, &v); \ 353 if (check_add_overflow(addend1, addend2, &bytes)) in size_add()
|
| /linux/lib/ |
| H A D | buildid.c | 164 if (check_add_overflow(note_off, note_size, ¬e_end)) in parse_build_id() 176 if (check_add_overflow(new_off, ALIGN(name_sz, 4), &new_off) || in parse_build_id() 177 check_add_overflow(new_off, ALIGN(desc_sz, 4), &new_off) || in parse_build_id()
|
| /linux/drivers/vfio/pci/ |
| H A D | vfio_pci_dmabuf.c | 158 if (check_add_overflow(start, dma_ranges[i].offset, in vfio_pci_core_fill_phys_vec() 160 check_add_overflow(phys_vec[i].paddr, in vfio_pci_core_fill_phys_vec() 206 if (check_add_overflow(length, len, &length)) in validate_dmabuf_input()
|
| /linux/io_uring/ |
| H A D | memmap.c | 46 if (check_add_overflow(uaddr, len, &end)) in io_pin_pages() 48 if (check_add_overflow(end, PAGE_SIZE - 1, &end)) in io_pin_pages() 206 if (check_add_overflow(reg->user_addr, reg->size, &end)) in io_create_region()
|
| H A D | rsrc.c | 94 if (check_add_overflow(base, acct_len, &tmp)) in io_validate_user_buf_range() 341 if (check_add_overflow(up->offset, nr_args, &tmp)) in __io_register_rsrc_update() 1032 if (unlikely(check_add_overflow(buf_addr, (u64)len, &buf_end))) in validate_fixed_range() 1182 if (check_add_overflow(arg->nr, arg->src_off, &off) || off > nbufs) in io_clone_buffers() 1184 if (check_add_overflow(arg->nr, arg->dst_off, &nbufs)) in io_clone_buffers() 1355 if (unlikely(check_add_overflow(total_len, iov_len, &total_len))) in io_vec_fill_bvec() 1462 if (unlikely(check_add_overflow(total_len, iov[i].iov_len, in io_kern_bvec_size()
|
| /linux/drivers/iommu/iommufd/ |
| H A D | viommu.c | 303 if (check_add_overflow(offset, cmd->length, &length)) in iommufd_hw_queue_alloc_phys() 305 if (check_add_overflow(length, PAGE_SIZE - 1, &length)) in iommufd_hw_queue_alloc_phys() 371 if (check_add_overflow(cmd->nesting_parent_iova, cmd->length - 1, in iommufd_hw_queue_alloc_ioctl()
|
| /linux/drivers/rtc/ |
| H A D | rtc-s32g.c | 106 if (check_add_overflow(ktime_get_real_seconds(), in s32g_rtc_read_time() 343 if (check_add_overflow(priv->sleep_sec, div64_u64(apival, priv->rtc_hz), in s32g_rtc_suspend()
|
| /linux/drivers/gpu/drm/nouveau/nvif/ |
| H A D | object.c | 111 if (check_add_overflow(sizeof(*args), size, &args_size)) in nvif_object_mthd() 248 if (check_add_overflow(sizeof(*args), size, &args_size)) { in nvif_object_ctor()
|
| /linux/crypto/asymmetric_keys/ |
| H A D | asymmetric_type.c | 149 if (check_add_overflow(len_1, len_2, &len)) in asymmetric_key_generate_id() 151 if (check_add_overflow(sizeof(struct asymmetric_key_id), len, &kid_sz)) in asymmetric_key_generate_id()
|
| /linux/security/integrity/ima/ |
| H A D | ima_kexec.c | 313 if (check_add_overflow(phys, (phys_addr_t)size - 1, &end_phys)) in ima_validate_range()
|
| /linux/drivers/net/ethernet/intel/ice/ |
| H A D | ice_nvm.c | 476 if (check_add_overflow(pfa_ptr, pfa_len - 1, &max_tlv)) { in ice_get_pfa_module_tlv() 511 if (check_add_overflow(next_tlv, 2, &next_tlv) || in ice_get_pfa_module_tlv() 512 check_add_overflow(next_tlv, tlv_len, &next_tlv)) { in ice_get_pfa_module_tlv()
|
| /linux/drivers/infiniband/core/ |
| H A D | umem.c | 122 if (check_add_overflow(curr_base, curr_len, &end) || in ib_umem_find_best_pgsz()
|
| H A D | umem_dmabuf.c | 129 if (check_add_overflow(offset, (unsigned long)size, &end)) in ib_umem_dmabuf_get_with_dma_device()
|
| /linux/block/ |
| H A D | ioctl.c | 51 if (check_add_overflow(start, length, &end)) in blkpg_do_ioctl() 115 if (check_add_overflow(start, len, &end) || end > bdev_nr_bytes(bdev)) in blk_validate_byte_range() 194 if (check_add_overflow(start, len, &end) || in blk_ioctl_secure_erase()
|
| /linux/drivers/gpu/drm/virtio/ |
| H A D | virtgpu_vram.c | 60 if (check_add_overflow(vma->vm_pgoff << PAGE_SHIFT, vm_size, &vm_end)) in virtio_gpu_vram_mmap()
|
| /linux/drivers/accel/amdxdna/ |
| H A D | amdxdna_ubuf.c | 171 if (check_add_overflow(exp_info.size, va_ent[i].len, &exp_info.size)) { in amdxdna_get_ubuf()
|
| /linux/security/landlock/ |
| H A D | tsync.c | 257 if (check_add_overflow(s->size, n, &new_capacity)) in tsync_works_grow_by()
|
| /linux/drivers/gpu/drm/imagination/ |
| H A D | pvr_vm.c | 243 if (check_add_overflow(offset, size, &offset_plus_size)) in pvr_vm_bind_op_map_init() 1110 if (check_add_overflow(start, size - 1, &end)) in pvr_find_heap_containing()
|
| /linux/drivers/vfio/pci/nvgrace-gpu/ |
| H A D | main.c | 380 check_add_overflow(PFN_PHYS(pgoff), req_len, &end)) in nvgrace_gpu_mmap() 1090 if ((check_add_overflow(nvdev->usemem.memphys, in nvgrace_gpu_init_nvdev_struct()
|
| /linux/net/xdp/ |
| H A D | xsk_queue.h | 203 if (check_add_overflow(addr, len, &end) || end > pool->addrs_cnt) in xp_unaligned_validate_desc()
|