777 	zone_security_flags_t zsflags = zone_security_config(zone), src_zsflags;  in zone_page_metadata_index_confusion_panic()  local
781 	if (zsflags.z_kalloc_type) {  in zone_page_metadata_index_confusion_panic()
2534 	zone_security_flags_t zsflags = zone_security_config(z);  in zone_heap_name()  local
2535 	if (__probable(zsflags.z_kheap_id < KHEAP_ID_COUNT)) {  in zone_heap_name()
2536 		return kalloc_heap_names[zsflags.z_kheap_id];  in zone_heap_name()
2861 zone_submap(zone_security_flags_t zsflags)  in zone_submap()  argument
2863 	return zone_submaps[zsflags.z_submap_idx];  in zone_submap()
2943 	zone_security_flags_t zsflags = zone_security_config(z);  in track_kalloc_zones()  local
2947 	if (zsflags.z_kalloc_type && zsflags.z_kheap_id == KHEAP_ID_KT_VAR &&  in track_kalloc_zones()
2956 	if (zsflags.z_kalloc_type && zsflags.z_kheap_id != KHEAP_ID_KT_VAR &&  in track_kalloc_zones()
2965 	if ((zsflags.z_kheap_id || zsflags.z_kalloc_type) &&  in track_kalloc_zones()
2973 	if ((zsflags.z_kheap_id == KHEAP_ID_SHARED) &&  in track_kalloc_zones()
3807 zone_submap_is_sequestered(zone_security_flags_t zsflags)  in zone_submap_is_sequestered()  argument
3809 	return zone_submap_is_sequestered(zsflags.z_submap_idx);  in zone_submap_is_sequestered()
3813 zone_kma_flags(zone_t z, zone_security_flags_t zsflags, zalloc_flags_t flags)  in zone_kma_flags()  argument
3817 	if (zsflags.z_noencrypt) {  in zone_kma_flags()
3820 	if (zsflags.z_submap_idx == Z_SUBMAP_IDX_DATA) {  in zone_kma_flags()
3827 	    zone_submap_is_sequestered(zsflags))) {  in zone_kma_flags()
3830 	if (zsflags.z_submap_from_end) {  in zone_kma_flags()
3897 	zone_security_flags_t *zsflags = &zone_security_array[zone_index(zone)];  in zcram_memtag_init()  local
3899 	if (!zsflags->z_tag) {  in zcram_memtag_init()
4139 zone_submap_alloc_sequestered_va(zone_security_flags_t zsflags, uint32_t pages,  in zone_submap_alloc_sequestered_va()  argument
4143 	vm_map_t map = zone_submap(zsflags);  in zone_submap_alloc_sequestered_va()
4157 	if (zsflags.z_submap_from_end) {  in zone_submap_alloc_sequestered_va()
4180 	zone_security_flags_t zsflags = zone_security_config(zone);  in zone_fill_initially()  local
4185 	kmaflags |= zone_kma_flags(zone, zsflags, Z_WAITOK);  in zone_fill_initially()
4187 	if (zone_submap_is_sequestered(zsflags)) {  in zone_fill_initially()
4188 		kr = zone_submap_alloc_sequestered_va(zsflags, pages, &addr);  in zone_fill_initially()
4196 		assert(zsflags.z_submap_idx != Z_SUBMAP_IDX_READ_ONLY);  in zone_fill_initially()
4197 		kmem_alloc(zone_submap(zsflags), &addr, ptoa(pages),  in zone_fill_initially()
4335 	zone_security_flags_t zsflags = zone_security_config(z);  in zone_allocate_va_locked()  local
4337 	kma_flags_t kmaflags = zone_kma_flags(z, zsflags, flags) | KMA_VAONLY;  in zone_allocate_va_locked()
4376 	if (!z->z_percpu && zone_submap_is_sequestered(zsflags)) {  in zone_allocate_va_locked()
4410 	} else if (!zsflags.z_pgz_use_guards && !z->z_pgz_use_guards) {  in zone_allocate_va_locked()
4445 	if (!z->z_percpu && zone_submap_is_sequestered(zsflags)) {  in zone_allocate_va_locked()
4488 	if (zone_submap_is_sequestered(zsflags)) {  in zone_allocate_va_locked()
4489 		kr = zone_submap_alloc_sequestered_va(zsflags,  in zone_allocate_va_locked()
4492 		assert(zsflags.z_submap_idx != Z_SUBMAP_IDX_READ_ONLY);  in zone_allocate_va_locked()
4493 		kr = kmem_alloc(zone_submap(zsflags), &addr,  in zone_allocate_va_locked()
4755 	zone_security_flags_t zsflags = zone_security_config(z);  in zone_mapping_type()  local
4762 	switch (zsflags.z_submap_idx) {  in zone_mapping_type()
4773 zone_page_prot(zone_security_flags_t zsflags)  in zone_page_prot()  argument
4775 	switch (zsflags.z_submap_idx) {  in zone_page_prot()
4786 	zone_security_flags_t zsflags = zone_security_config(z);  in zone_expand_locked()  local
4964 		    zone_kma_flags(z, zsflags, flags), VM_KERN_MEMORY_ZONE,  in zone_expand_locked()
4965 		    zone_page_prot(zsflags), zone_mapping_type(z));  in zone_expand_locked()
6884 			zone_security_flags_t zsflags = zone_security_config(zone);  in zalloc_ext()  local
6886 			if (zsflags.z_kheap_id == KHEAP_ID_DATA_BUFFERS) {  in zalloc_ext()
6888 			} else if (zsflags.z_kheap_id == KHEAP_ID_KT_VAR ||  in zalloc_ext()
6889 			    zsflags.z_kalloc_type) {  in zalloc_ext()
7462 	zone_security_flags_t zsflags = zone_security_config(z);  in zone_reclaim_chunk()  local
7466 	if (zone_submap_is_sequestered(zsflags)) {  in zone_reclaim_chunk()
7569 		kma_flags_t flags = zone_kma_flags(z, zsflags, 0) | KMA_KOBJECT;  in zone_reclaim_chunk()
7573 		assert(zsflags.z_submap_idx != Z_SUBMAP_IDX_VM);  in zone_reclaim_chunk()
7574 		kmem_free(zone_submap(zsflags), page_addr,  in zone_reclaim_chunk()
8216 	zone_security_flags_t zsflags = zone_security_config(z);  in panic_print_types_in_zone()  local
8219 	if (zsflags.z_kheap_id == KHEAP_ID_KT_VAR) {  in panic_print_types_in_zone()
8694 	zone_security_flags_t zsflags = zone_security_array[zone_index];  in zone_info_needs_to_be_coalesced()  local
8695 	if (zsflags.z_kalloc_type || zsflags.z_kheap_id == KHEAP_ID_KT_VAR) {  in zone_info_needs_to_be_coalesced()
9497 	zone_security_flags_t *zsflags;  variable
9520 	zsflags = &zone_security_array[zid];
9563 		zsflags->z_lifo  = true;
9594 		zsflags->z_submap_idx = Z_SUBMAP_IDX_READ_ONLY;
9617 		zsflags->z_noencrypt = true;
9636 			zsflags->z_pgz_use_guards = true;
9644 		zsflags->z_tag = false;
9650 		zsflags->z_kalloc_type = true;
9654 		zsflags->z_submap_idx = Z_SUBMAP_IDX_VM;
9657 		zsflags->z_kheap_id = KHEAP_ID_DATA_BUFFERS;
9700 	if ((zsflags->z_kheap_id || zsflags->z_kalloc_type) && zone_tagging_on) {
9705 		if (zsflags->z_kheap_id == KHEAP_ID_DATA_BUFFERS) {
9733 	if (zsflags->z_kheap_id == KHEAP_ID_DATA_BUFFERS) {
9741 		zsflags->z_submap_idx = Z_SUBMAP_IDX_DATA;
9742 		zsflags->z_lifo = true;
9827 	zone_security_flags_t zsflags;  in zone_view_startup_init()  local
9849 	zsflags = zone_security_config(z);  in zone_view_startup_init()
9850 	if (z->z_views == NULL && zsflags.z_kheap_id == KHEAP_ID_NONE) {  in zone_view_startup_init()
9906 	zone_security_flags_t zsflags = zone_security_array[zindex];  in zdestroy()  local
9918 	if (!zone_submap_is_sequestered(zsflags)) {  in zdestroy()
9927 			kmem_free(zone_submap(zsflags), zone_meta_to_addr(meta),  in zdestroy()
9936 	    (z->z_va_cur && !zone_submap_is_sequestered(zsflags))) {  in zdestroy()
9945 	if (!zone_submap_is_sequestered(zsflags)) {  in zdestroy()
10760 	zone_security_flags_t zsflags;  in zone_ro_basic_test_run()  local
10769 	zsflags = zone_security_array[ZONE_ID__FIRST_RO];  in zone_ro_basic_test_run()
10778 		assert(zsflags.z_submap_idx == Z_SUBMAP_IDX_READ_ONLY);  in zone_ro_basic_test_run()
10809 		assert(zsflags.z_submap_idx != Z_SUBMAP_IDX_READ_ONLY);  in zone_ro_basic_test_run()