5149 	struct bpf_reg_state *ptr_reg = NULL, *value_reg = NULL;  in check_stack_write_var_off()  local
5158 	ptr_reg = &cur->regs[ptr_regno];  in check_stack_write_var_off()
5159 	min_off = ptr_reg->smin_value + off;  in check_stack_write_var_off()
5160 	max_off = ptr_reg->smax_value + off + size;  in check_stack_write_var_off()
13966 static int retrieve_ptr_limit(const struct bpf_reg_state *ptr_reg,  in retrieve_ptr_limit()  argument
13971 	switch (ptr_reg->type) {  in retrieve_ptr_limit()
13979 		ptr_limit = -(ptr_reg->var_off.value + ptr_reg->off);  in retrieve_ptr_limit()
13982 		max = ptr_reg->map_ptr->value_size;  in retrieve_ptr_limit()
13984 			     ptr_reg->smin_value :  in retrieve_ptr_limit()
13985 			     ptr_reg->umax_value) + ptr_reg->off;  in retrieve_ptr_limit()
14064 			    const struct bpf_reg_state *ptr_reg,  in sanitize_ptr_alu()  argument
14074 	bool ptr_is_dst_reg = ptr_reg == dst_reg;  in sanitize_ptr_alu()
14100 	err = retrieve_ptr_limit(ptr_reg, &alu_limit, info->mask_to_left);  in sanitize_ptr_alu()
14149 		copy_register_state(dst_reg, ptr_reg);  in sanitize_ptr_alu()
14283 				   const struct bpf_reg_state *ptr_reg,  in adjust_ptr_min_max_vals()  argument
14291 	    smin_ptr = ptr_reg->smin_value, smax_ptr = ptr_reg->smax_value;  in adjust_ptr_min_max_vals()
14293 	    umin_ptr = ptr_reg->umin_value, umax_ptr = ptr_reg->umax_value;  in adjust_ptr_min_max_vals()
14323 	if (ptr_reg->type & PTR_MAYBE_NULL) {  in adjust_ptr_min_max_vals()
14325 			dst, reg_type_str(env, ptr_reg->type));  in adjust_ptr_min_max_vals()
14329 	switch (base_type(ptr_reg->type)) {  in adjust_ptr_min_max_vals()
14354 			dst, reg_type_str(env, ptr_reg->type));  in adjust_ptr_min_max_vals()
14361 	dst_reg->type = ptr_reg->type;  in adjust_ptr_min_max_vals()
14362 	dst_reg->id = ptr_reg->id;  in adjust_ptr_min_max_vals()
14364 	if (!check_reg_sane_offset(env, off_reg, ptr_reg->type) ||  in adjust_ptr_min_max_vals()
14365 	    !check_reg_sane_offset(env, ptr_reg, ptr_reg->type))  in adjust_ptr_min_max_vals()
14372 		ret = sanitize_ptr_alu(env, insn, ptr_reg, off_reg, dst_reg,  in adjust_ptr_min_max_vals()
14383 		if (known && (ptr_reg->off + smin_val ==  in adjust_ptr_min_max_vals()
14384 			      (s64)(s32)(ptr_reg->off + smin_val))) {  in adjust_ptr_min_max_vals()
14390 			dst_reg->var_off = ptr_reg->var_off;  in adjust_ptr_min_max_vals()
14391 			dst_reg->off = ptr_reg->off + smin_val;  in adjust_ptr_min_max_vals()
14392 			dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
14414 		dst_reg->var_off = tnum_add(ptr_reg->var_off, off_reg->var_off);  in adjust_ptr_min_max_vals()
14415 		dst_reg->off = ptr_reg->off;  in adjust_ptr_min_max_vals()
14416 		dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
14417 		if (reg_is_pkt_pointer(ptr_reg)) {  in adjust_ptr_min_max_vals()
14434 		if (ptr_reg->type == PTR_TO_STACK) {  in adjust_ptr_min_max_vals()
14439 		if (known && (ptr_reg->off - smin_val ==  in adjust_ptr_min_max_vals()
14440 			      (s64)(s32)(ptr_reg->off - smin_val))) {  in adjust_ptr_min_max_vals()
14446 			dst_reg->var_off = ptr_reg->var_off;  in adjust_ptr_min_max_vals()
14447 			dst_reg->id = ptr_reg->id;  in adjust_ptr_min_max_vals()
14448 			dst_reg->off = ptr_reg->off - smin_val;  in adjust_ptr_min_max_vals()
14449 			dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
14470 		dst_reg->var_off = tnum_sub(ptr_reg->var_off, off_reg->var_off);  in adjust_ptr_min_max_vals()
14471 		dst_reg->off = ptr_reg->off;  in adjust_ptr_min_max_vals()
14472 		dst_reg->raw = ptr_reg->raw;  in adjust_ptr_min_max_vals()
14473 		if (reg_is_pkt_pointer(ptr_reg)) {  in adjust_ptr_min_max_vals()
14494 	if (!check_reg_sane_offset(env, dst_reg, ptr_reg->type))  in adjust_ptr_min_max_vals()
15183 	struct bpf_reg_state *ptr_reg = NULL, off_reg = {0};  in adjust_reg_min_max_vals()  local
15206 		ptr_reg = dst_reg;  in adjust_reg_min_max_vals()
15235 		} else if (ptr_reg) {  in adjust_reg_min_max_vals()
15255 		if (ptr_reg) /* pointer += K */  in adjust_reg_min_max_vals()
15257 						       ptr_reg, src_reg);  in adjust_reg_min_max_vals()
15261 	if (WARN_ON_ONCE(ptr_reg)) {  in adjust_reg_min_max_vals()