4443 	struct bpf_reg_state *ptr_reg = NULL, *value_reg = NULL;  in check_stack_write_var_off()  local
4452 	ptr_reg = &cur->regs[ptr_regno];  in check_stack_write_var_off()
4453 	min_off = ptr_reg->smin_value + off;  in check_stack_write_var_off()
4454 	max_off = ptr_reg->smax_value + off + size;  in check_stack_write_var_off()
11711 static int retrieve_ptr_limit(const struct bpf_reg_state *ptr_reg,  in retrieve_ptr_limit()  argument
11716 	switch (ptr_reg->type) {  in retrieve_ptr_limit()
11724 		ptr_limit = -(ptr_reg->var_off.value + ptr_reg->off);  in retrieve_ptr_limit()
11727 		max = ptr_reg->map_ptr->value_size;  in retrieve_ptr_limit()
11729 			     ptr_reg->smin_value :  in retrieve_ptr_limit()
11730 			     ptr_reg->umax_value) + ptr_reg->off;  in retrieve_ptr_limit()
11809 			    const struct bpf_reg_state *ptr_reg,  in sanitize_ptr_alu()  argument
11819 	bool ptr_is_dst_reg = ptr_reg == dst_reg;  in sanitize_ptr_alu()
11845 	err = retrieve_ptr_limit(ptr_reg, &alu_limit, info->mask_to_left);  in sanitize_ptr_alu()
11894 		copy_register_state(dst_reg, ptr_reg);  in sanitize_ptr_alu()
12028 				   const struct bpf_reg_state *ptr_reg,  in adjust_ptr_min_max_vals()  argument
12036 	    smin_ptr = ptr_reg->smin_value, smax_ptr = ptr_reg->smax_value;  in adjust_ptr_min_max_vals()
12038 	    umin_ptr = ptr_reg->umin_value, umax_ptr = ptr_reg->umax_value;  in adjust_ptr_min_max_vals()
12068 	if (ptr_reg->type & PTR_MAYBE_NULL) {  in adjust_ptr_min_max_vals()
12070 			dst, reg_type_str(env, ptr_reg->type));  in adjust_ptr_min_max_vals()
12074 	switch (base_type(ptr_reg->type)) {  in adjust_ptr_min_max_vals()
12086 			dst, reg_type_str(env, ptr_reg->type));  in adjust_ptr_min_max_vals()
12095 	dst_reg->type = ptr_reg->type;  in adjust_ptr_min_max_vals()
12096 	dst_reg->id = ptr_reg->id;  in adjust_ptr_min_max_vals()
12098 	if (!check_reg_sane_offset(env, off_reg, ptr_reg->type) ||  in adjust_ptr_min_max_vals()
12099 	    !check_reg_sane_offset(env, ptr_reg, ptr_reg->type))  in adjust_ptr_min_max_vals()
12106 		ret = sanitize_ptr_alu(env, insn, ptr_reg, off_reg, dst_reg,  in adjust_ptr_min_max_vals()
12117 		if (known && (ptr_reg->off + smin_val ==  in adjust_ptr_min_max_vals()
12118 			      (s64)(s32)(ptr_reg->off + smin_val))) {  in adjust_ptr_min_max_vals()
12124 			dst_reg->var_off = ptr_reg->var_off;  in adjust_ptr_min_max_vals()
12125 			dst_reg->off = ptr_reg->off + smin_val;  in adjust_ptr_min_max_vals()
12126 			dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
12154 		dst_reg->var_off = tnum_add(ptr_reg->var_off, off_reg->var_off);  in adjust_ptr_min_max_vals()
12155 		dst_reg->off = ptr_reg->off;  in adjust_ptr_min_max_vals()
12156 		dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
12157 		if (reg_is_pkt_pointer(ptr_reg)) {  in adjust_ptr_min_max_vals()
12174 		if (ptr_reg->type == PTR_TO_STACK) {  in adjust_ptr_min_max_vals()
12179 		if (known && (ptr_reg->off - smin_val ==  in adjust_ptr_min_max_vals()
12180 			      (s64)(s32)(ptr_reg->off - smin_val))) {  in adjust_ptr_min_max_vals()
12186 			dst_reg->var_off = ptr_reg->var_off;  in adjust_ptr_min_max_vals()
12187 			dst_reg->id = ptr_reg->id;  in adjust_ptr_min_max_vals()
12188 			dst_reg->off = ptr_reg->off - smin_val;  in adjust_ptr_min_max_vals()
12189 			dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
12213 		dst_reg->var_off = tnum_sub(ptr_reg->var_off, off_reg->var_off);  in adjust_ptr_min_max_vals()
12214 		dst_reg->off = ptr_reg->off;  in adjust_ptr_min_max_vals()
12215 		dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
12216 		if (reg_is_pkt_pointer(ptr_reg)) {  in adjust_ptr_min_max_vals()
12237 	if (!check_reg_sane_offset(env, dst_reg, ptr_reg->type))  in adjust_ptr_min_max_vals()
12990 	struct bpf_reg_state *ptr_reg = NULL, off_reg = {0};  in adjust_reg_min_max_vals()  local
12997 		ptr_reg = dst_reg;  in adjust_reg_min_max_vals()
13030 		} else if (ptr_reg) {  in adjust_reg_min_max_vals()
13050 		if (ptr_reg) /* pointer += K */  in adjust_reg_min_max_vals()
13052 						       ptr_reg, src_reg);  in adjust_reg_min_max_vals()
13056 	if (WARN_ON_ONCE(ptr_reg)) {  in adjust_reg_min_max_vals()