181         // Safe because we know that the descriptor is valid and we verify the return result.  in new_with_path()
198         // Safe because we know that our file is a KVM fd and we verify the return result.  in new_with_path()
234             // this ioctl is safe because we know this kvm descriptor is valid,  in check_capability()
267         // Safe because we know kvm is a real kvm fd as this module is the only one that can make  in new()
318         // Safe because we know that our file is a VM fd and we verify the return result.  in create_kvm_vcpu()
353         // Safe because we know that our file is a VM fd and we verify the return result.  in create_irq_chip()
369         // Safe because we know that our file is a VM fd, we know the kernel will only read the  in set_irq_line()
399         // Safe because we know that our file is a VM fd, we know the kernel will only read the  in register_irqfd()
422         // Safe because we know that our file is a VM fd, we know the kernel will only read the  in unregister_irqfd()
505         // Safe because we know that our file is a VM fd, we know the kernel will only read the  in ioeventfd()
518         // Safe because we know that our file is a KVM fd, and if the cap is invalid KVM assumes  in check_raw_capability()
555         // Safe because we allocated the struct and we know the kernel will read exactly the size of
675         // know that the pointer and size are correct because the MemoryMapping interface ensures  in add_memory_region()
789         // Safe because we know that our file is a VM fd, we know the kernel will only write correct  in create_device()
954         // Safe because we know we mapped enough memory to hold the kvm_run struct because the  in set_immediate_exit()
996         // Safe because we allocated the struct and we know the kernel will read exactly the size of
1011         // Safe because we know that our file is a VCPU fd and we verify the return result.  in run()
1018         // Safe because we know we mapped enough memory to hold the kvm_run struct because the  in run()
1052                 // Safe because we know the exit reason told us this union  in run()
1057                     // Safe because we know the exit reason told us this union  in run()
1079         // Safe because we know we mapped enough memory to hold the kvm_run struct because the  in handle_mmio()
1105         // Safe because we know we mapped enough memory to hold the kvm_run struct because the  in handle_io()
1166             // Safe because we know that our file is a VCPU fd, we know the kernel will only write  in get_mp_state()