95 	char *corename __counted_by_ptr(size);
105 	char *corename;  in expand_corename()  local
108 	corename = krealloc(cn->corename, size, GFP_KERNEL);  in expand_corename()
109 	if (!corename)  in expand_corename()
112 	cn->corename = corename;  in expand_corename()
131 	need = vsnprintf(cn->corename + cn->used, free, fmt, arg_copy);  in cn_vprintf()
173 		if ((cn->used - cur == 1 && cn->corename[cur] == '.') ||  in cn_esc_printf()
174 				(cn->used - cur == 2 && cn->corename[cur] == '.'  in cn_esc_printf()
175 				&& cn->corename[cur+1] == '.'))  in cn_esc_printf()
176 			cn->corename[cur] = '!';  in cn_esc_printf()
189 		if (cn->corename[cur] == '/')  in cn_esc_printf()
190 			cn->corename[cur] = '!';  in cn_esc_printf()
249 	cn->corename = NULL;  in coredump_parse()
260 	cn->corename[0] = '\0';  in coredump_parse()
292 		if (cn->corename[0] != '/')  in coredump_parse()
299 		if (strchr(cn->corename, ' ')) {  in coredump_parse()
300 			coredump_report_failure("Coredump socket may not %s contain spaces", cn->corename);  in coredump_parse()
305 		if (name_contains_dotdot(cn->corename)) {  in coredump_parse()
306 			coredump_report_failure("Coredump socket may not %s contain '..' spaces", cn->corename);  in coredump_parse()
310 		if (strlen(cn->corename) >= UNIX_PATH_MAX) {  in coredump_parse()
311 			coredump_report_failure("Coredump socket path %s too long", cn->corename);  in coredump_parse()
676 	addr_len = strscpy(addr.sun_path, cn->corename);  in coredump_sock_connect()
887 	if (coredump_force_suid_safe(cprm) && cn->corename[0] != '/') {  in coredump_file()
898 		CLASS(filename_kernel, name)(cn->corename);  in coredump_file()
929 		file = file_open_root(&root, cn->corename, open_flags, 0600);  in coredump_file()
932 		file = filp_open(cn->corename, open_flags, 0600);  in coredump_file()
956 		coredump_report_failure("Core dump to %s aborted: cannot preserve file owner", cn->corename);  in coredump_file()
960 …coredump_report_failure("Core dump to %s aborted: cannot preserve file permissions", cn->corename);  in coredump_file()
1012 		helper_argv[argi] = cn->corename + argv[argi];  in coredump_pipe()
1022 		coredump_report_failure("|%s pipe failed", cn->corename);  in coredump_pipe()
1031 		coredump_report_failure("Core dump to |%s disabled", cn->corename);  in coredump_pipe()
1074 	kfree(cn->corename);  in coredump_cleanup()