3158 	struct bpf_reg_state *ptr_reg = NULL, *value_reg = NULL;  in check_stack_write_var_off()  local
3166 	ptr_reg = &cur->regs[ptr_regno];  in check_stack_write_var_off()
3167 	min_off = ptr_reg->smin_value + off;  in check_stack_write_var_off()
3168 	max_off = ptr_reg->smax_value + off + size;  in check_stack_write_var_off()
7888 static int retrieve_ptr_limit(const struct bpf_reg_state *ptr_reg,  in retrieve_ptr_limit()  argument
7893 	switch (ptr_reg->type) {  in retrieve_ptr_limit()
7901 		ptr_limit = -(ptr_reg->var_off.value + ptr_reg->off);  in retrieve_ptr_limit()
7904 		max = ptr_reg->map_ptr->value_size;  in retrieve_ptr_limit()
7906 			     ptr_reg->smin_value :  in retrieve_ptr_limit()
7907 			     ptr_reg->umax_value) + ptr_reg->off;  in retrieve_ptr_limit()
7986 			    const struct bpf_reg_state *ptr_reg,  in sanitize_ptr_alu()  argument
7996 	bool ptr_is_dst_reg = ptr_reg == dst_reg;  in sanitize_ptr_alu()
8022 	err = retrieve_ptr_limit(ptr_reg, &alu_limit, info->mask_to_left);  in sanitize_ptr_alu()
8071 		*dst_reg = *ptr_reg;  in sanitize_ptr_alu()
8205 				   const struct bpf_reg_state *ptr_reg,  in adjust_ptr_min_max_vals()  argument
8213 	    smin_ptr = ptr_reg->smin_value, smax_ptr = ptr_reg->smax_value;  in adjust_ptr_min_max_vals()
8215 	    umin_ptr = ptr_reg->umin_value, umax_ptr = ptr_reg->umax_value;  in adjust_ptr_min_max_vals()
8245 	if (ptr_reg->type & PTR_MAYBE_NULL) {  in adjust_ptr_min_max_vals()
8247 			dst, reg_type_str(env, ptr_reg->type));  in adjust_ptr_min_max_vals()
8251 	switch (base_type(ptr_reg->type)) {  in adjust_ptr_min_max_vals()
8263 			dst, reg_type_str(env, ptr_reg->type));  in adjust_ptr_min_max_vals()
8272 	dst_reg->type = ptr_reg->type;  in adjust_ptr_min_max_vals()
8273 	dst_reg->id = ptr_reg->id;  in adjust_ptr_min_max_vals()
8275 	if (!check_reg_sane_offset(env, off_reg, ptr_reg->type) ||  in adjust_ptr_min_max_vals()
8276 	    !check_reg_sane_offset(env, ptr_reg, ptr_reg->type))  in adjust_ptr_min_max_vals()
8283 		ret = sanitize_ptr_alu(env, insn, ptr_reg, off_reg, dst_reg,  in adjust_ptr_min_max_vals()
8294 		if (known && (ptr_reg->off + smin_val ==  in adjust_ptr_min_max_vals()
8295 			      (s64)(s32)(ptr_reg->off + smin_val))) {  in adjust_ptr_min_max_vals()
8301 			dst_reg->var_off = ptr_reg->var_off;  in adjust_ptr_min_max_vals()
8302 			dst_reg->off = ptr_reg->off + smin_val;  in adjust_ptr_min_max_vals()
8303 			dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
8331 		dst_reg->var_off = tnum_add(ptr_reg->var_off, off_reg->var_off);  in adjust_ptr_min_max_vals()
8332 		dst_reg->off = ptr_reg->off;  in adjust_ptr_min_max_vals()
8333 		dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
8334 		if (reg_is_pkt_pointer(ptr_reg)) {  in adjust_ptr_min_max_vals()
8351 		if (ptr_reg->type == PTR_TO_STACK) {  in adjust_ptr_min_max_vals()
8356 		if (known && (ptr_reg->off - smin_val ==  in adjust_ptr_min_max_vals()
8357 			      (s64)(s32)(ptr_reg->off - smin_val))) {  in adjust_ptr_min_max_vals()
8363 			dst_reg->var_off = ptr_reg->var_off;  in adjust_ptr_min_max_vals()
8364 			dst_reg->id = ptr_reg->id;  in adjust_ptr_min_max_vals()
8365 			dst_reg->off = ptr_reg->off - smin_val;  in adjust_ptr_min_max_vals()
8366 			dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
8390 		dst_reg->var_off = tnum_sub(ptr_reg->var_off, off_reg->var_off);  in adjust_ptr_min_max_vals()
8391 		dst_reg->off = ptr_reg->off;  in adjust_ptr_min_max_vals()
8392 		dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
8393 		if (reg_is_pkt_pointer(ptr_reg)) {  in adjust_ptr_min_max_vals()
8414 	if (!check_reg_sane_offset(env, dst_reg, ptr_reg->type))  in adjust_ptr_min_max_vals()
9167 	struct bpf_reg_state *ptr_reg = NULL, off_reg = {0};  in adjust_reg_min_max_vals()  local
9174 		ptr_reg = dst_reg;  in adjust_reg_min_max_vals()
9207 		} else if (ptr_reg) {  in adjust_reg_min_max_vals()
9222 		if (ptr_reg) /* pointer += K */  in adjust_reg_min_max_vals()
9224 						       ptr_reg, src_reg);  in adjust_reg_min_max_vals()
9228 	if (WARN_ON_ONCE(ptr_reg)) {  in adjust_reg_min_max_vals()