Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 2 files:

Smatch caller information:

net/mac80211/tx.c __ieee80211_subif_start_xmit() -> ieee80211_select_queue()

Type Parameter Key Value
PARAM_VALUE 0 sdata 4096-ptr_max
PARAM_VALUE 0 sdata->local 4096-ptr_max
PARAM_VALUE 0 sdata->local->hw.flags 4096-ptr_max
PARAM_VALUE 0 sdata->vif.type 1-4,7,11,13
PARAM_VALUE 1 sta 0-ptr_max
PARAM_VALUE 2 skb 4096-ptr_max
PARAM_VALUE 2 skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 2 skb->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 2 skb->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 2 skb->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE 2 skb->len 14-u32max
PARAM_VALUE 2 skb->sk 0,4096-ptr_max
BUF_SIZE 2 skb (-1)-s32max
BUF_SIZE 2 skb (-1)-s32max
BUF_SIZE 2 skb->dev s32min-(-1),1-s32max
CAPPED_DATA 0 sdata 1
DATA_SOURCE 0 sdata r IEEE80211_DEV_TO_SUB_IF
DATA_SOURCE 2 skb $0
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 2 skb->csum_offset 0-u16max
HOST_DATA 2 skb->data_len 0-2147483648[c]
HOST_DATA 2 skb->len 14-u32max[c]
HOST_DATA 2 skb->next->csum_offset 0-u16max
HOST_DATA 2 skb->next->data_len 0-u32max[c]
HOST_DATA 2 skb->next->len 1-u32max[c]
HOST_DATA 2 skb->prev->csum_offset 0-u16max
HOST_DATA 2 skb->prev->data_len 0-u32max[c]
HOST_DATA 2 skb->prev->len 0-u32max[c]
HOST_DATA 2 skb->prev->truesize 0-u32max
HOST_DATA 2 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 *skb->data 0-255
NO_OVERFLOW_SIMPLE 2 skb->data_len
NO_OVERFLOW_SIMPLE 2 skb->dev->group
NO_OVERFLOW_SIMPLE 2 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 2 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 2 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 2 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 2 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 2 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 2 skb->end
NO_OVERFLOW_SIMPLE 2 skb->extensions
NO_OVERFLOW_SIMPLE 2 skb->len
NO_OVERFLOW_SIMPLE 2 skb->prev->data_len
NO_OVERFLOW_SIMPLE 2 skb->prev->end
NO_OVERFLOW_SIMPLE 2 skb->prev->len
NO_OVERFLOW_SIMPLE 2 skb->prev->tail
NO_OVERFLOW_SIMPLE 2 skb->prev->truesize
NO_OVERFLOW_SIMPLE 2 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 2 skb->tail
NO_OVERFLOW_SIMPLE 2 skb->truesize
UNITS 2 skb unit_byte
LOCK2 rcu_read
HALF_LOCKED2 bh

net/mac80211/tx.c ieee80211_8023_xmit() -> ieee80211_select_queue()

Type Parameter Key Value
PARAM_VALUE 0 sdata 4096-ptr_max
PARAM_VALUE 0 sdata->local 4096-ptr_max
PARAM_VALUE 0 sdata->vif.type 1-4,11,13
PARAM_VALUE 1 sta 0,4096-ptr_max
PARAM_VALUE 1 sta->ptk 4096-ptr_max
PARAM_VALUE 1 sta->uploaded 1
PARAM_VALUE 2 skb 4096-ptr_max
PARAM_VALUE 2 skb->data->h_dest 4096-4294967295
PARAM_VALUE 2 skb->dev->ethtool_ops->get_link_ext_state 0-9223372036854775807
PARAM_VALUE 2 skb->dev->ethtool_ops->get_mm_stats 0-9223372036854775807
PARAM_VALUE 2 skb->dev->ip6_ptr->dead s32min-s32max
PARAM_VALUE 2 skb->dev->ip6_ptr->mc_gq_running 0-255
PARAM_VALUE 2 skb->dev->ip6_ptr->mc_maxdelay 0-s64max
PARAM_VALUE 2 skb->dev->ip6_ptr->mc_qri 0-s64max
PARAM_VALUE 2 skb->dev->ip6_ptr->mc_qrv 0-255
PARAM_VALUE 2 skb->dev->ip6_ptr->ra_mtu 0-4294967295
PARAM_VALUE 2 skb->dev->linkwatch_dev_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 2 skb->dev->linkwatch_dev_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 2 skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 2 skb->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 2 skb->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 2 skb->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,9688-u64max
PARAM_VALUE 2 skb->next->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 2 skb->next->sk->ns_tracker->dead 0-1
PARAM_VALUE 2 skb->next->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 2 skb->sk 0,4096-ptr_max
PARAM_VALUE 2 skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 2 skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 2 skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 2 skb->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 2 skb->sk->ns_tracker->dead 0-1
PARAM_VALUE 2 skb->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 2 skb->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 2 skb->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 2 skb->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 2 skb->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 2 skb->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 2 skb->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 2 skb->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 2 skb->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 2 *skb->data->h_dest 0-255
BUF_SIZE 2 skb (-1)-s32max
BUF_SIZE 2 skb (-1)-s32max
CAPPED_DATA 0 sdata 1
DATA_SOURCE 0 sdata $0
DATA_SOURCE 1 sta $2
DATA_SOURCE 2 skb $4
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 2 skb->csum_offset 0-u16max
HOST_DATA 2 skb->data_len 0-2147483648[c]
HOST_DATA 2 skb->len 14-u32max[c]
HOST_DATA 2 skb->prev->csum_offset 0-u16max
HOST_DATA 2 skb->prev->data_len 0-u32max[c]
HOST_DATA 2 skb->prev->len 0-u32max[c]
HOST_DATA 2 skb->prev->truesize 0-u32max
HOST_DATA 2 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 *skb->data 0-255
NO_OVERFLOW_SIMPLE 2 skb->data_len
NO_OVERFLOW_SIMPLE 2 skb->dev->group
NO_OVERFLOW_SIMPLE 2 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 2 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 2 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 2 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 2 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 2 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 2 skb->end
NO_OVERFLOW_SIMPLE 2 skb->extensions
NO_OVERFLOW_SIMPLE 2 skb->len
NO_OVERFLOW_SIMPLE 2 skb->prev->data_len
NO_OVERFLOW_SIMPLE 2 skb->prev->end
NO_OVERFLOW_SIMPLE 2 skb->prev->len
NO_OVERFLOW_SIMPLE 2 skb->prev->tail
NO_OVERFLOW_SIMPLE 2 skb->prev->truesize
NO_OVERFLOW_SIMPLE 2 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 2 skb->tail
NO_OVERFLOW_SIMPLE 2 skb->truesize
UNITS 2 skb unit_byte
LOCK2 rcu_read
HALF_LOCKED2 &dev->tx_global_lock
HALF_LOCKED2 &txq->_xmit_lock
HALF_LOCKED2 bh
HALF_LOCKED2 flags

net/mac80211/tx.c ieee80211_tx_control_port() -> ieee80211_select_queue()

Type Parameter Key Value
PARAM_VALUE 0 sdata 4096-ptr_max
PARAM_VALUE 0 sdata->local 4096-ptr_max
PARAM_VALUE 0 sdata->local->hw.queues 4-u16max
PARAM_VALUE 0 sdata->vif.link_conf 4096-ptr_max
PARAM_VALUE 0 sdata->vif.type 1-4,7,11,13
PARAM_VALUE 1 sta 0-ptr_max
PARAM_VALUE 2 skb 4096-ptr_max
PARAM_VALUE 2 skb->data_len 0
PARAM_VALUE 2 skb->dev 4096-ptr_max
PARAM_VALUE 2 skb->dev->ieee80211_ptr 4096-ptr_max
BUF_SIZE 2 skb (-1)-s32max
BUF_SIZE 2 skb (-1)-s32max
BUF_SIZE 2 skb->dev s32min-(-2),1-s32max
CAPPED_DATA 0 sdata 1
CAPPED_DATA 2 skb->head 1
CAPPED_DATA 2 skb->protocol 1
DATA_SOURCE 0 sdata r IEEE80211_DEV_TO_SUB_IF
DATA_SOURCE 2 skb r dev_alloc_skb
FUZZY_MAX 0 sdata->local->hw.queues 4
TASK_NOT_RUNNING
LOCK2 rcu_read
HALF_LOCKED2 &dev->lock
HALF_LOCKED2 &devlink->lock
HALF_LOCKED2 &net->xfrm.xfrm_cfg_mutex
HALF_LOCKED2 global &audit_cmd_mutex.lock
HALF_LOCKED2 global &cb_lock
HALF_LOCKED2 global &crypto_cfg_mutex
HALF_LOCKED2 global &dpll_lock
HALF_LOCKED2 global &hwsim_phys_lock
HALF_LOCKED2 global &net_dm_mutex
HALF_LOCKED2 global &rtnl_mutex
HALF_LOCKED2 global &rx_queue_mutex

net/mac80211/mesh.c ieee80211_mesh_xmit_fast() -> ieee80211_select_queue()

Type Parameter Key Value
PARAM_VALUE 0 sdata 4096-ptr_max
PARAM_VALUE 0 sdata->local 4096-ptr_max
PARAM_VALUE 0 sdata->local->hw.flags 4096-ptr_max
PARAM_VALUE 0 sdata->u.mesh.mshcfg.dot11MeshNolearn 0
PARAM_VALUE 0 sdata->u.mesh.ps_peers_deep_sleep 0
PARAM_VALUE 0 sdata->u.mesh.ps_peers_light_sleep 0
PARAM_VALUE 0 sdata->u.mesh.tx_cache.rht.p.hashfn 4096-ptr_max
PARAM_VALUE 0 sdata->vif.addr 4096-ptr_max
PARAM_VALUE 0 sdata->vif.type 7
PARAM_VALUE 1 sta 4096-ptr_max
PARAM_VALUE 1 sta->ampdu_mlme.tid_tx 4096-ptr_max
PARAM_VALUE 2 skb 4096-ptr_max
PARAM_VALUE 2 skb->dev->ethtool_ops->get_link_ext_state 0-9223372036854775807
PARAM_VALUE 2 skb->dev->ethtool_ops->get_mm_stats 0-9223372036854775807
PARAM_VALUE 2 skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 2 skb->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 2 skb->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 2 skb->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE 2 skb->ip_summed 0-2
PARAM_VALUE 2 skb->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 2 skb->sk->ns_tracker->dead 0-1
PARAM_VALUE 2 skb->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 2 skb->sk->sk_owner->refcnt.counter 0-s32max
PARAM_VALUE 2 skb->sk->sk_security 0
BUF_SIZE 2 skb (-1)-s32max
BUF_SIZE 2 skb (-1)-s32max
DATA_SOURCE 0 sdata $0
DATA_SOURCE 2 skb r skb_share_check
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 2 skb->csum_offset 0-u16max
HOST_DATA 2 skb->data_len 0-2147483648[c]
HOST_DATA 2 skb->len 14-u32max[c]
HOST_DATA 2 skb->next->csum_offset 0-u16max
HOST_DATA 2 skb->next->data_len 0-u32max[c]
HOST_DATA 2 skb->next->len 1-u32max[c]
HOST_DATA 2 skb->prev->csum_offset 0-u16max
HOST_DATA 2 skb->prev->data_len 0-u32max[c]
HOST_DATA 2 skb->prev->len 0-u32max[c]
HOST_DATA 2 skb->prev->truesize 0-u32max
HOST_DATA 2 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 *skb->data 0-255
NO_OVERFLOW_SIMPLE 2 skb->data_len
NO_OVERFLOW_SIMPLE 2 skb->dev->group
NO_OVERFLOW_SIMPLE 2 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 2 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 2 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 2 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 2 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 2 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 2 skb->end
NO_OVERFLOW_SIMPLE 2 skb->extensions
NO_OVERFLOW_SIMPLE 2 skb->len
NO_OVERFLOW_SIMPLE 2 skb->next->truesize
NO_OVERFLOW_SIMPLE 2 skb->prev->data_len
NO_OVERFLOW_SIMPLE 2 skb->prev->end
NO_OVERFLOW_SIMPLE 2 skb->prev->len
NO_OVERFLOW_SIMPLE 2 skb->prev->tail
NO_OVERFLOW_SIMPLE 2 skb->prev->truesize
NO_OVERFLOW_SIMPLE 2 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 2 skb->tail
NO_OVERFLOW_SIMPLE 2 skb->truesize
LOCK2 rcu_read
HALF_LOCKED2 bh