Defined in 3 files as a function:

Referenced in 3 files:

Smatch caller information:

fs/smb/server/transport_ipc.c handle_generic_event() -> handle_response()

Type Parameter Key Value
PARAM_VALUE 0 type 0-17
PARAM_VALUE 1 payload 4096-ptr_max
PARAM_VALUE 2 sz 0-u16max
DATA_SOURCE 1 payload r nla_data
DATA_SOURCE 2 sz r nla_len
RX_PATH
TASK_NOT_RUNNING
USER_DATA 1 *payload s64min-s64max
USER_PTR 1 payload
HALF_LOCKED2 &dev->lock
HALF_LOCKED2 &devlink->lock
HALF_LOCKED2 &net->xfrm.xfrm_cfg_mutex
HALF_LOCKED2 &pool->lock
HALF_LOCKED2 global &audit_cmd_mutex.lock
HALF_LOCKED2 global &cb_lock
HALF_LOCKED2 global &crypto_cfg_mutex
HALF_LOCKED2 global &dpll_lock
HALF_LOCKED2 global &hwsim_phys_lock
HALF_LOCKED2 global &net_dm_mutex
HALF_LOCKED2 global &rtnl_mutex
HALF_LOCKED2 global &rx_queue_mutex
HALF_LOCKED2 rcu_read

net/netfilter/ipvs/ip_vs_core.c ip_vs_out_hook() -> handle_response()

Type Parameter Key Value
PARAM_VALUE 0 type 0-255
PARAM_VALUE 1 payload 4096-ptr_max
PARAM_VALUE 1 payload->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 1 payload->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 1 payload->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 1 payload->dev->ndisc_ops->parse_options 4096-ptr_max
PARAM_VALUE 1 payload->dev->ndisc_ops->update 4096-ptr_max
PARAM_VALUE 1 payload->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 1 payload->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE 1 payload->ipvs_property 0
PARAM_VALUE 1 payload->sk->__sk_common.skc_state 0-11,13-255
PARAM_VALUE 2 sz 4096-ptr_max
PARAM_VALUE 2 sz->pp 4096-ptr_max
PARAM_VALUE 2 sz->pp->dont_defrag 0-1
PARAM_VALUE 3 data 4096-ptr_max
PARAM_VALUE 4 iph 1013711727101136896
PARAM_VALUE 4 iph->flags 0-6
PARAM_VALUE 4 iph->fragoffs 0,8-65528
PARAM_VALUE 4 iph->protocol 0-255
PARAM_VALUE 5 hooknum 0-255
BUF_SIZE 1 payload (-1)-s32max
BUF_SIZE 1 payload (-1)-s32max
CAPPED_DATA 1 payload 1
CAPPED_DATA 2 sz->pp->protocol 1
CAPPED_DATA 3 data->af 1
CAPPED_DATA 3 data->cport 1
CAPPED_DATA 3 data->protocol 1
DATA_SOURCE 1 payload $1
DATA_SOURCE 2 sz r ip_vs_proto_data_get
FUZZY_MAX 0 type 10
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 1 payload->csum 0-192512[c]
HOST_DATA 1 payload->csum_offset 0-u16max
HOST_DATA 1 payload->data_len 0-u32max[c]
HOST_DATA 1 payload->inner_protocol 1-255
HOST_DATA 1 payload->len 0-u32max[c]
HOST_DATA 1 payload->prev->csum_offset 0-u16max
HOST_DATA 1 payload->prev->data_len 0-u32max[c]
HOST_DATA 1 payload->prev->len 0-u32max[c]
HOST_DATA 1 payload->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 payload->protocol 1-255
HOST_DATA 1 payload->truesize 0-u32max
HOST_DATA 1 payload->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 payload->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *payload->data 0-255
NO_OVERFLOW_SIMPLE 1 payload->data_len
NO_OVERFLOW_SIMPLE 1 payload->dev->group
NO_OVERFLOW_SIMPLE 1 payload->dev->num_tc
NO_OVERFLOW_SIMPLE 1 payload->dev->proto_down
NO_OVERFLOW_SIMPLE 1 payload->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 payload->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 payload->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 payload->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 payload->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 payload->end
NO_OVERFLOW_SIMPLE 1 payload->extensions
NO_OVERFLOW_SIMPLE 1 payload->len
NO_OVERFLOW_SIMPLE 1 payload->next->end
NO_OVERFLOW_SIMPLE 1 payload->next->len
NO_OVERFLOW_SIMPLE 1 payload->next->tail
NO_OVERFLOW_SIMPLE 1 payload->prev->end
NO_OVERFLOW_SIMPLE 1 payload->prev->len
NO_OVERFLOW_SIMPLE 1 payload->prev->tail
NO_OVERFLOW_SIMPLE 1 payload->prev->truesize
NO_OVERFLOW_SIMPLE 1 payload->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 payload->tail
NO_OVERFLOW_SIMPLE 1 payload->truesize
HALF_LOCKED2 rcu_read

net/netfilter/ipvs/ip_vs_core.c ip_vs_out_hook() -> handle_response()

Type Parameter Key Value
PARAM_VALUE 0 type 0-255
PARAM_VALUE 1 payload 4096-ptr_max
PARAM_VALUE 1 payload->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 1 payload->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 1 payload->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 1 payload->dev->ndisc_ops->parse_options 4096-ptr_max
PARAM_VALUE 1 payload->dev->ndisc_ops->update 4096-ptr_max
PARAM_VALUE 1 payload->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 1 payload->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE 1 payload->ipvs_property 0
PARAM_VALUE 1 payload->sk->__sk_common.skc_state 0-11,13-255
PARAM_VALUE 2 sz 4096-ptr_max
PARAM_VALUE 2 sz->pp 4096-ptr_max
PARAM_VALUE 2 sz->pp->dont_defrag 0-1
PARAM_VALUE 2 sz->pp->protocol 17
PARAM_VALUE 4 iph 1013711727101136896
PARAM_VALUE 4 iph->flags 0-6
PARAM_VALUE 4 iph->fragoffs 0,8-65528
PARAM_VALUE 4 iph->protocol 0-255
PARAM_VALUE 5 hooknum 0-255
BUF_SIZE 1 payload (-1)-s32max
BUF_SIZE 1 payload (-1)-s32max
CAPPED_DATA 0 type 1
CAPPED_DATA 1 payload 1
DATA_SOURCE 1 payload $1
DATA_SOURCE 2 sz r ip_vs_proto_data_get
DATA_SOURCE 3 data r __ip_vs_rs_conn_out
FUZZY_MAX 0 type 10
BIT_INFO 3 data 0x0,0x0
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 1 payload->csum 0-192512[c]
HOST_DATA 1 payload->csum_offset 0-u16max
HOST_DATA 1 payload->data_len 0-u32max[c]
HOST_DATA 1 payload->inner_protocol 1-255
HOST_DATA 1 payload->len 0-u32max[c]
HOST_DATA 1 payload->prev->csum_offset 0-u16max
HOST_DATA 1 payload->prev->data_len 0-u32max[c]
HOST_DATA 1 payload->prev->len 0-u32max[c]
HOST_DATA 1 payload->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 payload->protocol 1-255
HOST_DATA 1 payload->truesize 0-u32max
HOST_DATA 1 payload->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 payload->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *payload->data 0-255
NO_OVERFLOW_SIMPLE 1 payload->data_len
NO_OVERFLOW_SIMPLE 1 payload->dev->group
NO_OVERFLOW_SIMPLE 1 payload->dev->num_tc
NO_OVERFLOW_SIMPLE 1 payload->dev->proto_down
NO_OVERFLOW_SIMPLE 1 payload->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 payload->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 payload->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 payload->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 payload->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 payload->end
NO_OVERFLOW_SIMPLE 1 payload->extensions
NO_OVERFLOW_SIMPLE 1 payload->len
NO_OVERFLOW_SIMPLE 1 payload->next->end
NO_OVERFLOW_SIMPLE 1 payload->next->len
NO_OVERFLOW_SIMPLE 1 payload->next->tail
NO_OVERFLOW_SIMPLE 1 payload->prev->end
NO_OVERFLOW_SIMPLE 1 payload->prev->len
NO_OVERFLOW_SIMPLE 1 payload->prev->tail
NO_OVERFLOW_SIMPLE 1 payload->prev->truesize
NO_OVERFLOW_SIMPLE 1 payload->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 payload->tail
NO_OVERFLOW_SIMPLE 1 payload->truesize
HALF_LOCKED2 rcu_read

drivers/fsi/fsi-master-ast-cf.c fsi_master_acf_xfer() -> handle_response()

Type Parameter Key Value
PARAM_VALUE 0 type 4096-ptr_max
PARAM_VALUE 0 type->cvic 0,4096-ptr_max
PARAM_VALUE 0 type->lock.dep_map->name 0-255
PARAM_VALUE 0 type->lock.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 type->lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 type->lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 type->lock.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 type->lock.wait_lock.owner (-1)
PARAM_VALUE 0 type->lock.wait_lock.owner_cpu u32max
PARAM_VALUE 0 type->sram 65537-ptr_max
PARAM_VALUE 2 sz 0,8-16,32
BUF_SIZE 3 data (-1),4
BUF_SIZE 3 data (-1),4
DATA_SOURCE 0 type $0
DATA_SOURCE 1 payload $1
DATA_SOURCE 2 sz $3 [m]
DATA_SOURCE 3 data $4
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 2 sz 8-16,32[c]
HOST_DATA 3 *data s64min-s64max
USER_DATA 1 payload 0-3[c]
USER_DATA 2 sz 8-16[c][u]
LOCK2 0 &type->lock
HALF_LOCKED2 &of->mutex
TYPE_LOCK (struct fsi_master_acf)->lock