Defined in 1 files as a function:
Referenced in 4 files:
- net/ipv6/af_inet6.c, line 838
- net/ipv6/inet6_connection_sock.c, line 92
- net/ipv6/route.c, line 3059
- net/ipv6/tcp_ipv6.c
Smatch caller information:
net/ipv6/inet6_connection_sock.c inet6_csk_route_socket() -> ip6_dst_store()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 0-5,7-255 |
| PARAM_VALUE | 1 | dst | 4096-ptr_max |
| PARAM_VALUE | 2 | daddr_set | 0 |
| PARAM_VALUE | 3 | saddr_set | 0 |
| BUF_SIZE | 0 | sk->__sk_common.skc_prot | (-1),448 |
| BUF_SIZE | 0 | sk->sk_user_data | (-1),368 |
| BUF_SIZE | 1 | dst | (-1)-0,4,24,64,144,152,168-s32max |
| BUF_SIZE | 1 | dst | (-1)-0,4,24,64,144,152,168-s32max |
| CAPPED_DATA | 0 | sk | 1 |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 1 | dst | r ip6_dst_lookup_flow |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | sk->sk_receive_queue.prev->csum | 0-126976[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->csum | 0-126976[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->truesize | 0-u32max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->truesize | 0-u32max |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_prot_creator->twsk_prot->twsk_slab->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->truesize | |
| UNITS | 0 | sk | unit_byte |
| HALF_LOCKED2 | 0 | sk | |
| HALF_LOCKED2 | 0 | &sk->sk_lock.slock |
net/ipv6/route.c ip6_sk_dst_store_flow() -> ip6_dst_store()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 0-5,7-255 |
| PARAM_VALUE | 1 | dst | 4096-ptr_max |
| BUF_SIZE | 1 | dst | (-1)-0,4,24,64,144,152,168-s32max |
| BUF_SIZE | 1 | dst | (-1)-0,4,24,64,144,152,168-s32max |
| CAPPED_DATA | 0 | sk | 1 |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 1 | dst | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->truesize | |
| UNITS | 0 | sk | unit_byte |
| HALF_LOCKED2 | 0 | sk | |
| HALF_LOCKED2 | 0 | &sk->sk_lock.slock |
net/ipv6/tcp_ipv6.c tcp_v6_connect() -> ip6_dst_store()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_net.net->loopback_dev->refcnt_tracker.list.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_net.net->loopback_dev->refcnt_tracker.list.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 0-5,7-255 |
| PARAM_VALUE | 0 | sk->sk_gso_type | 16 |
| PARAM_VALUE | 0 | sk->sk_txhash | 1-u32max |
| PARAM_VALUE | 1 | dst | 4096-ptr_max |
| PARAM_VALUE | 2 | daddr_set | 0 |
| PARAM_VALUE | 3 | saddr_set | 0 |
| BUF_SIZE | 1 | dst | (-1)-0,4,24,64,144,152,168-s32max |
| BUF_SIZE | 1 | dst | (-1)-0,4,24,64,144,152,168-s32max |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 1 | dst | r ip6_dst_lookup_flow |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_prot_creator->twsk_prot->twsk_slab->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->data_len | |
| HALF_LOCKED2 | 0 | sk |
net/ipv6/tcp_ipv6.c tcp_v6_syn_recv_sock() -> ip6_dst_store()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 3 |
| PARAM_VALUE | 0 | sk->sk_gso_type | 16 |
| PARAM_VALUE | 0 | sk->sk_rx_dst | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_user_frags.xa_flags | 12 |
| PARAM_VALUE | 0 | sk->sk_user_frags.xa_head | 0 |
| PARAM_VALUE | 0 | sk->tcp_retransmit_timer.entry.pprev | 0 |
| PARAM_VALUE | 0 | sk->tcp_retransmit_timer.flags | 0-4194302 |
| PARAM_VALUE | 0 | sk->tcp_retransmit_timer.lockdep_map->name | 0-255 |
| PARAM_VALUE | 1 | dst | 1-u64max |
| PARAM_VALUE | 2 | daddr_set | 0 |
| PARAM_VALUE | 3 | saddr_set | 0 |
| BUF_SIZE | 1 | dst | (-1)-s32max |
| BUF_SIZE | 1 | dst | (-1)-s32max |
| CAPPED_DATA | 0 | sk | 1 |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| DATA_SOURCE | 0 | sk | r tcp_create_openreq_child |
| DATA_SOURCE | 1 | dst | r inet6_csk_route_req |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
net/ipv6/af_inet6.c inet6_sk_rebuild_header() -> ip6_dst_store()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 0-5,7-255 |
| PARAM_VALUE | 0 | sk->sk_dst_cache | 0 |
| PARAM_VALUE | 0 | sk->sk_dst_cache->callback_head.func | 1-u64max |
| PARAM_VALUE | 0 | sk->sk_dst_cache->callback_head.next | 0 |
| PARAM_VALUE | 0 | sk->sk_dst_cache->ops->pcpuc_entries.lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sk->sk_dst_cache->ops->pcpuc_entries.lock.owner | (-1) |
| PARAM_VALUE | 0 | sk->sk_dst_cache->ops->pcpuc_entries.lock.owner_cpu | u32max |
| PARAM_VALUE | 1 | dst | 4096-ptr_max |
| PARAM_VALUE | 2 | daddr_set | 0 |
| PARAM_VALUE | 3 | saddr_set | 0 |
| BUF_SIZE | 0 | sk->__sk_common.skc_prot | (-1),448 |
| BUF_SIZE | 1 | dst | (-1)-0,4,24,64,144,152,168-s32max |
| BUF_SIZE | 1 | dst | (-1)-0,4,24,64,144,152,168-s32max |
| CAPPED_DATA | 0 | sk | 1 |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 1 | dst | r ip6_dst_lookup_flow |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | sk->sk_receive_queue.prev->csum | 0-126976[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->csum | 0-126976[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->truesize | 0-u32max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->truesize | 0-u32max |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->truesize | |
| HALF_LOCKED2 | 0 | sk | |
| HALF_LOCKED2 | 0 | &sk->sk_lock.slock |