Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
io_uring/net.c io_notif_flush() -> io_tx_ubuf_complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 0 |
| PARAM_VALUE | 1 | uarg | 4096-ptr_max |
| PARAM_VALUE | 2 | success | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
io_uring/notif.c io_tx_ubuf_complete() -> io_tx_ubuf_complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb->dev->header_ops->parse | 0,836034408504639488,1549207736952049664,2557666104032284672,2873682388240314368,3226767679038275584,4717025337529622528,7964469038492160000 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 0 | skb->sk->channel | 0-127 |
| PARAM_VALUE | 1 | uarg | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb->dev | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 2 | success | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->inner_protocol | 1-255 |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->napi_id | 0-u32max |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->protocol | 1-255 |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data | |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| HALF_LOCKED2 | rcu_read |
net/core/skbuff.c skb_zcopy_clear() -> (struct ubuf_info_ops)->complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->header_ops->parse | 0,836034408504639488,1549207736952049664,2557666104032284672,2873682388240314368,3226767679038275584,4717025337529622528,7964469038492160000 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 1 | uarg | 4096-ptr_max |
| PARAM_VALUE | 1 | uarg->ops | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb->dev | s32min-(-1),1-s32max |
| BUF_SIZE | 1 | uarg | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | uarg | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | skb | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | uarg | r skb_zcopy |
| DATA_SOURCE | 2 | success | $1 |
| CONTAINER | 1 | -0-0+0 | $(-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->inner_protocol | 1-255 |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->protocol | 1-255 |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize |
drivers/net/tap.c tap_get_user() -> (struct ubuf_info_ops)->complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 0 |
| PARAM_VALUE | 1 | uarg | 4096-ptr_max |
| PARAM_VALUE | 1 | uarg->ops | 4096-ptr_max |
| PARAM_VALUE | 2 | success | 0 |
| BUF_SIZE | 1 | uarg | 0,16 |
| BUF_SIZE | 1 | uarg | 0,16 |
| DATA_SOURCE | 1 | uarg | $1 |
| CONTAINER | 1 | -0-0+0 | $(-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &vq->mutex |
drivers/net/xen-netback/netback.c xenvif_handle_frag_list() -> (struct ubuf_info_ops)->complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 0 |
| PARAM_VALUE | 1 | uarg | 4096-ptr_max |
| PARAM_VALUE | 1 | uarg->ops | 4096-ptr_max |
| PARAM_VALUE | 2 | success | 1 |
| BUF_SIZE | 1 | uarg | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | uarg | s32min-(-2),1-s32max |
| CONTAINER | 1 | -0-0+0 | $(-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/tun.c tun_get_user() -> (struct ubuf_info_ops)->complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 0 |
| PARAM_VALUE | 1 | uarg | 4096-ptr_max |
| PARAM_VALUE | 1 | uarg->ops | 4096-ptr_max |
| PARAM_VALUE | 2 | success | 0 |
| BUF_SIZE | 1 | uarg | 0,16 |
| BUF_SIZE | 1 | uarg | 0,16 |
| DATA_SOURCE | 1 | uarg | $2 |
| CONTAINER | 1 | -0-0+0 | $(-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &tfile->napi_mutex | ||
| HALF_LOCKED2 | &vq->mutex |
net/vmw_vsock/virtio_transport_common.c net_zcopy_put() -> (struct ubuf_info_ops)->complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 0 |
| PARAM_VALUE | 1 | uarg | 4096-ptr_max |
| PARAM_VALUE | 1 | uarg->ops | 4096-ptr_max |
| PARAM_VALUE | 2 | success | 1 |
| BUF_SIZE | 1 | uarg | (-1)-0,16 |
| BUF_SIZE | 1 | uarg | (-1)-0,16 |
| DATA_SOURCE | 1 | uarg | $0 |
| CONTAINER | 1 | -0-0+0 | $(-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | child | ||
| HALF_LOCKED2 | sk |
net/ipv6/ip6_output.c net_zcopy_put() -> (struct ubuf_info_ops)->complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 0 |
| PARAM_VALUE | 1 | uarg | 4096-ptr_max |
| PARAM_VALUE | 1 | uarg->ops | 4096-ptr_max |
| PARAM_VALUE | 2 | success | 1 |
| DATA_SOURCE | 1 | uarg | $0 |
| CONTAINER | 1 | -0-0+0 | $(-1) |
| NOCHECK_CALL |
net/ipv4/ip_output.c net_zcopy_put() -> (struct ubuf_info_ops)->complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 0 |
| PARAM_VALUE | 1 | uarg | 4096-ptr_max |
| PARAM_VALUE | 1 | uarg->ops | 4096-ptr_max |
| PARAM_VALUE | 2 | success | 1 |
| DATA_SOURCE | 1 | uarg | $0 |
| CONTAINER | 1 | -0-0+0 | $(-1) |
| NOCHECK_CALL |