Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/tipc/socket.c __tipc_sendstream() -> __tipc_sendmsg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sock | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk->__sk_common.skc_state | 7 |
| PARAM_VALUE | 0 | sock->sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sock->sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sock->sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 1 | m | 4096-ptr_max |
| PARAM_VALUE | 1 | m->msg_name | 1-u64max |
| PARAM_VALUE | 2 | dlen | 0-s32max |
| BUF_SIZE | 0 | sock | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sock | s32min-(-1),1-s32max |
| BUF_SIZE | 1 | m->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | m->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 1 | m->msg_ubuf | (-1),16 |
| DATA_SOURCE | 0 | sock | $0 |
| DATA_SOURCE | 1 | m | $1 |
| DATA_SOURCE | 2 | dlen | $2 |
| NOSPEC | 1 | m->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | m->msg_controllen | 0-s32max[c] |
| USER_DATA | 1 | m->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | m->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 1 | m->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | m->msg_namelen | 0-128 |
| USER_DATA | 1 | *m->msg_name | s64min-s64max |
| USER_DATA | 2 | dlen | 0-s32max |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->truesize | |
| USER_PTR | 1 | m->msg_control | |
| USER_PTR | 1 | m->msg_name | |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex |
net/tipc/socket.c tipc_connect() -> __tipc_sendmsg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sock | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sock->sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sock->sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk->sk_type | 0-1,3,5-u16max |
| PARAM_VALUE | 1 | m | 8243845532690493440 |
| PARAM_VALUE | 1 | m->msg_controllen | 0 |
| PARAM_VALUE | 1 | m->msg_flags | 0,64 |
| PARAM_VALUE | 1 | m->msg_inq | 0 |
| PARAM_VALUE | 1 | m->msg_namelen | 16 |
| PARAM_VALUE | 1 | m->msg_ubuf | 0 |
| PARAM_VALUE | 2 | dlen | 0 |
| BUF_SIZE | 0 | sock | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sock | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sock | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_prot_creator->twsk_prot->twsk_slab->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->prev->data_len | |
| LOCK2 | sk |
net/tipc/socket.c tipc_sendmsg() -> __tipc_sendmsg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sock | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sock->sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sock->sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 1 | m | 4096-ptr_max |
| BUF_SIZE | 0 | sock | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sock | s32min-(-1),1-s32max |
| BUF_SIZE | 1 | m->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | m->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 1 | m->msg_ubuf | (-1),16 |
| DATA_SOURCE | 0 | sock | $0 |
| DATA_SOURCE | 1 | m | $1 |
| DATA_SOURCE | 2 | dlen | $2 |
| NOSPEC | 1 | m->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | m->msg_controllen | 0-s32max[c] |
| USER_DATA | 1 | m->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | m->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 1 | m->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | m->msg_namelen | 0-128 |
| USER_DATA | 1 | *m->msg_name | s64min-s64max |
| USER_DATA | 2 | dlen | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->truesize | |
| USER_PTR | 1 | m->msg_control | |
| USER_PTR | 1 | m->msg_name | |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |