1014 			     int off, int size, int value_regno, int insn_idx)  in check_stack_write()  argument
1035 	if (value_regno >= 0 &&  in check_stack_write()
1036 	    is_spillable_regtype((type = cur->regs[value_regno].type))) {  in check_stack_write()
1050 		state->stack[spi].spilled_ptr = cur->regs[value_regno];  in check_stack_write()
1098 		if (value_regno >= 0 &&  in check_stack_write()
1099 		    register_is_null(&cur->regs[value_regno]))  in check_stack_write()
1166 			    int off, int size, int value_regno)  in check_stack_read()  argument
1192 		if (value_regno >= 0) {  in check_stack_read()
1194 			state->regs[value_regno] = reg_state->stack[spi].spilled_ptr;  in check_stack_read()
1199 			state->regs[value_regno].live |= REG_LIVE_WRITTEN;  in check_stack_read()
1220 		if (value_regno >= 0) {  in check_stack_read()
1225 				__mark_reg_const_zero(&state->regs[value_regno]);  in check_stack_read()
1228 				mark_reg_unknown(env, state->regs, value_regno);  in check_stack_read()
1230 			state->regs[value_regno].live |= REG_LIVE_WRITTEN;  in check_stack_read()
1676 			    int value_regno, bool strict_alignment_once)  in check_mem_access()  argument
1696 		if (t == BPF_WRITE && value_regno >= 0 &&  in check_mem_access()
1697 		    is_pointer_value(env, value_regno)) {  in check_mem_access()
1698 			verbose(env, "R%d leaks addr into map\n", value_regno);  in check_mem_access()
1703 		if (!err && t == BPF_READ && value_regno >= 0)  in check_mem_access()
1704 			mark_reg_unknown(env, regs, value_regno);  in check_mem_access()
1709 		if (t == BPF_WRITE && value_regno >= 0 &&  in check_mem_access()
1710 		    is_pointer_value(env, value_regno)) {  in check_mem_access()
1711 			verbose(env, "R%d leaks addr into ctx\n", value_regno);  in check_mem_access()
1720 		if (!err && t == BPF_READ && value_regno >= 0) {  in check_mem_access()
1726 				mark_reg_unknown(env, regs, value_regno);  in check_mem_access()
1729 						    value_regno);  in check_mem_access()
1730 			regs[value_regno].id = 0;  in check_mem_access()
1731 			regs[value_regno].off = 0;  in check_mem_access()
1732 			regs[value_regno].range = 0;  in check_mem_access()
1733 			regs[value_regno].type = reg_type;  in check_mem_access()
1763 						value_regno, insn_idx);  in check_mem_access()
1766 					       value_regno);  in check_mem_access()
1772 		if (t == BPF_WRITE && value_regno >= 0 &&  in check_mem_access()
1773 		    is_pointer_value(env, value_regno)) {  in check_mem_access()
1775 				value_regno);  in check_mem_access()
1779 		if (!err && t == BPF_READ && value_regno >= 0)  in check_mem_access()
1780 			mark_reg_unknown(env, regs, value_regno);  in check_mem_access()
1787 	if (!err && size < BPF_REG_SIZE && value_regno >= 0 && t == BPF_READ &&  in check_mem_access()
1788 	    regs[value_regno].type == SCALAR_VALUE) {  in check_mem_access()
1790 		coerce_reg_to_size(&regs[value_regno], size);  in check_mem_access()