868 static int copy_verifier_state(struct bpf_verifier_state *dst_state,  in copy_verifier_state()  argument
875 	if (dst_state->jmp_history_cnt < src->jmp_history_cnt) {  in copy_verifier_state()
876 		kfree(dst_state->jmp_history);  in copy_verifier_state()
877 		dst_state->jmp_history = kmalloc(jmp_sz, GFP_USER);  in copy_verifier_state()
878 		if (!dst_state->jmp_history)  in copy_verifier_state()
881 	memcpy(dst_state->jmp_history, src->jmp_history, jmp_sz);  in copy_verifier_state()
882 	dst_state->jmp_history_cnt = src->jmp_history_cnt;  in copy_verifier_state()
885 	for (i = src->curframe + 1; i <= dst_state->curframe; i++) {  in copy_verifier_state()
886 		free_func_state(dst_state->frame[i]);  in copy_verifier_state()
887 		dst_state->frame[i] = NULL;  in copy_verifier_state()
889 	dst_state->speculative = src->speculative;  in copy_verifier_state()
890 	dst_state->curframe = src->curframe;  in copy_verifier_state()
891 	dst_state->active_spin_lock = src->active_spin_lock;  in copy_verifier_state()
892 	dst_state->branches = src->branches;  in copy_verifier_state()
893 	dst_state->parent = src->parent;  in copy_verifier_state()
894 	dst_state->first_insn_idx = src->first_insn_idx;  in copy_verifier_state()
895 	dst_state->last_insn_idx = src->last_insn_idx;  in copy_verifier_state()
897 		dst = dst_state->frame[i];  in copy_verifier_state()
902 			dst_state->frame[i] = dst;  in copy_verifier_state()