221 	switch(audit_classify_arch(arch->val)) {  in audit_match_signal()
414 		if ((f->val != 0) && (f->val != 1))  in audit_field_valid()
418 		if (f->val & ~15)  in audit_field_valid()
422 		if (f->val & ~S_IFMT)  in audit_field_valid()
426 		if (f->val > AUDIT_MAX_FIELD_COMPARE)  in audit_field_valid()
430 		if (f->val >= AF_MAX)  in audit_field_valid()
467 		f->val = data->values[i];  in audit_data_to_entry()
470 		if ((f->type == AUDIT_LOGINUID) && (f->val == AUDIT_UID_UNSET)) {  in audit_data_to_entry()
472 			f->val = 0;  in audit_data_to_entry()
488 			f->uid = make_kuid(current_user_ns(), f->val);  in audit_data_to_entry()
497 			f->gid = make_kgid(current_user_ns(), f->val);  in audit_data_to_entry()
514 			str = audit_unpack_string(&bufp, &remain, f->val);  in audit_data_to_entry()
517 			entry->rule.buflen += f->val;  in audit_data_to_entry()
535 			str = audit_unpack_string(&bufp, &remain, f->val);  in audit_data_to_entry()
538 			entry->rule.buflen += f->val;  in audit_data_to_entry()
540 			err = audit_to_watch(&entry->rule, str, f->val, f->op);  in audit_data_to_entry()
547 			str = audit_unpack_string(&bufp, &remain, f->val);  in audit_data_to_entry()
550 			entry->rule.buflen += f->val;  in audit_data_to_entry()
563 			if (entry->rule.filterkey || f->val > AUDIT_MAX_KEY_LEN)  in audit_data_to_entry()
565 			str = audit_unpack_string(&bufp, &remain, f->val);  in audit_data_to_entry()
568 			entry->rule.buflen += f->val;  in audit_data_to_entry()
572 			if (entry->rule.exe || f->val > PATH_MAX)  in audit_data_to_entry()
574 			str = audit_unpack_string(&bufp, &remain, f->val);  in audit_data_to_entry()
579 			entry->rule.buflen += f->val;  in audit_data_to_entry()
581 			audit_mark = audit_alloc_mark(&entry->rule, str, f->val);  in audit_data_to_entry()
672 			if (krule->pflags & AUDIT_LOGINUID_LEGACY && !f->val) {  in audit_krule_to_data()
679 			data->values[i] = f->val;  in audit_krule_to_data()
758 			if (a->fields[i].val != b->fields[i].val)  in audit_compare_rule()
892 		h = audit_hash_ino(entry->rule.inode_f->val);  in audit_find_rule()
1332 				result = audit_comparator(pid, f->op, f->val);  in audit_filter()
1346 							  f->op, f->val);  in audit_filter()
1349 				result = audit_comparator(msgtype, f->op, f->val);  in audit_filter()