716 static int copy_verifier_state(struct bpf_verifier_state *dst_state,  in copy_verifier_state()  argument
723 	if (dst_state->jmp_history_cnt < src->jmp_history_cnt) {  in copy_verifier_state()
724 		kfree(dst_state->jmp_history);  in copy_verifier_state()
725 		dst_state->jmp_history = kmalloc(jmp_sz, GFP_USER);  in copy_verifier_state()
726 		if (!dst_state->jmp_history)  in copy_verifier_state()
729 	memcpy(dst_state->jmp_history, src->jmp_history, jmp_sz);  in copy_verifier_state()
730 	dst_state->jmp_history_cnt = src->jmp_history_cnt;  in copy_verifier_state()
733 	for (i = src->curframe + 1; i <= dst_state->curframe; i++) {  in copy_verifier_state()
734 		free_func_state(dst_state->frame[i]);  in copy_verifier_state()
735 		dst_state->frame[i] = NULL;  in copy_verifier_state()
737 	dst_state->speculative = src->speculative;  in copy_verifier_state()
738 	dst_state->curframe = src->curframe;  in copy_verifier_state()
739 	dst_state->active_spin_lock = src->active_spin_lock;  in copy_verifier_state()
740 	dst_state->branches = src->branches;  in copy_verifier_state()
741 	dst_state->parent = src->parent;  in copy_verifier_state()
742 	dst_state->first_insn_idx = src->first_insn_idx;  in copy_verifier_state()
743 	dst_state->last_insn_idx = src->last_insn_idx;  in copy_verifier_state()
745 		dst = dst_state->frame[i];  in copy_verifier_state()
750 			dst_state->frame[i] = dst;  in copy_verifier_state()