Open Menu /

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 5 files:

Smatch caller information:

net/xfrm/xfrm_nat_keepalive.c nat_keepalive_send_ipv6() -> ip6_xmit()

Type Parameter Key Value
PARAM_VALUE 0 sk 0
PARAM_VALUE 0 sk->__sk_common.skc_state 0-5,7-255
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->_skb_refdst 4096-18446744073709547520
PARAM_VALUE 1 skb->data_len 0
PARAM_VALUE 2 fl6 3668737330450255872
PARAM_VALUE 2 fl6->__fl_common.flowic_proto 17
PARAM_VALUE 4 opt 0
PARAM_VALUE 5 tclass 0
PARAM_VALUE 6 priority 0
BUF_SIZE 0 sk 0
BUF_SIZE 1 skb 49
BUF_SIZE 1 skb 49
CAPPED_DATA 1 skb->head 1
CAPPED_DATA 1 skb->len 1
DATA_SOURCE 1 skb $0
BIT_INFO 0 &sk->__sk_common.skc_net 0x30,0xffffffffffffffff
MEM_ZERO 2 fl6

net/ipv6/inet6_connection_sock.c inet6_csk_xmit() -> ip6_xmit()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 1 skb->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 1 skb->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 1 skb->dev->ndisc_ops->parse_options 4096-ptr_max
PARAM_VALUE 1 skb->dev->ndisc_ops->update 4096-ptr_max
PARAM_VALUE 1 skb->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 1 skb->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
BUF_SIZE 0 sk->__sk_common.skc_prot (-1),448
BUF_SIZE 0 sk->sk_user_data (-1),368
BUF_SIZE 1 skb (-1)-s32max
BUF_SIZE 1 skb (-1)-s32max
BUF_SIZE 2 fl6 88
CAPPED_DATA 0 sk 1
CAPPED_DATA 1 skb 1
CAPPED_DATA 1 skb->head 1
DATA_SOURCE 0 sk $0
DATA_SOURCE 1 skb $1
MEM_ZERO 1 skb->cb
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 sk->sk_receive_queue.prev->csum 0-126976[c]
HOST_DATA 0 sk->sk_receive_queue.prev->csum_offset 0-u16max
HOST_DATA 0 sk->sk_receive_queue.prev->data_len 0-u32max[c]
HOST_DATA 0 sk->sk_receive_queue.prev->len 1-241[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->csum 0-126976[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->csum_offset 0-u16max
HOST_DATA 0 sk->sk_receive_queue.prev->next->data_len 0-u32max[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->len 1-241[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->truesize 0-u32max
HOST_DATA 0 sk->sk_receive_queue.prev->truesize 0-u32max
HOST_DATA 1 skb->csum_offset 0-u16max
HOST_DATA 1 skb->data_len 0-u32max[c]
HOST_DATA 1 skb->next->csum_offset 0-u16max
HOST_DATA 1 skb->next->data_len 0-u32max[c]
HOST_DATA 1 skb->next->len 1-u32max[c]
HOST_DATA 1 skb->next->prev->csum_offset 0-u16max
HOST_DATA 1 skb->next->prev->data_len 0-u32max[c]
HOST_DATA 1 skb->next->prev->len 1-u32max[c]
HOST_DATA 1 skb->next->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->prev->csum_offset 0-u16max
HOST_DATA 1 skb->prev->data_len 0-u32max[c]
HOST_DATA 1 skb->prev->len 0-u32max[c]
HOST_DATA 1 skb->prev->truesize 0-u32max
HOST_DATA 1 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 skb->truesize 0-u32max[c]
HOST_DATA 1 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *skb->data 0-255
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_prot_creator->twsk_prot->twsk_slab->sheaf_capacity
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->truesize
NO_OVERFLOW_SIMPLE 1 skb->data_len
NO_OVERFLOW_SIMPLE 1 skb->dev->group
NO_OVERFLOW_SIMPLE 1 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 1 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 skb->end
NO_OVERFLOW_SIMPLE 1 skb->extensions
NO_OVERFLOW_SIMPLE 1 skb->len
NO_OVERFLOW_SIMPLE 1 skb->next->end
NO_OVERFLOW_SIMPLE 1 skb->next->len
NO_OVERFLOW_SIMPLE 1 skb->prev->data_len
NO_OVERFLOW_SIMPLE 1 skb->prev->end
NO_OVERFLOW_SIMPLE 1 skb->prev->len
NO_OVERFLOW_SIMPLE 1 skb->prev->tail
NO_OVERFLOW_SIMPLE 1 skb->prev->truesize
NO_OVERFLOW_SIMPLE 1 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 skb->tail
NO_OVERFLOW_SIMPLE 1 skb->truesize
UNITS 0 sk unit_byte
LOCK2 rcu_read
HALF_LOCKED2 &sk->sk_lock.slock
HALF_LOCKED2 0 sk
HALF_LOCKED2 0 &sk->sk_callback_lock
HALF_LOCKED2 0 &sk->sk_lock.slock

net/ipv6/tcp_ipv6.c tcp_v6_send_response() -> ip6_xmit()

Type Parameter Key Value
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->_skb_refdst 4096-18446744073709547520
PARAM_VALUE 1 skb->csum_offset 16
PARAM_VALUE 1 skb->ip_summed 3
PARAM_VALUE 2 fl6 4144066587828322304
PARAM_VALUE 2 fl6->__fl_common.flowic_proto 6
PARAM_VALUE 4 opt 0
BUF_SIZE 1 skb 320
BUF_SIZE 1 skb 320
CAPPED_DATA 1 skb->head 1
CAPPED_DATA 1 skb->len 1
DATA_SOURCE 1 skb r alloc_skb
DATA_SOURCE 5 tclass $9
DATA_SOURCE 6 priority $11
MEM_ZERO 2 fl6
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
NO_OVERFLOW_SIMPLE 1 skb->sk->sk_backlog.len
HALF_LOCKED2 &sk->sk_lock.slock
HALF_LOCKED2 rcu_read
HALF_LOCKED2 sk

net/ipv6/tcp_ipv6.c tcp_v6_send_synack() -> ip6_xmit()

Type Parameter Key Value
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->_skb_refdst 4096-18446744073709547520
PARAM_VALUE 1 skb->cb 4096-ptr_max
PARAM_VALUE 1 skb->csum_offset 16
PARAM_VALUE 1 skb->data 4096-ptr_max
PARAM_VALUE 1 skb->data->ack 1
PARAM_VALUE 1 skb->data->ae 0
PARAM_VALUE 1 skb->data->cwr 0
PARAM_VALUE 1 skb->data->syn 1
PARAM_VALUE 1 skb->ip_summed 3
PARAM_VALUE 1 skb->l4_hash 1
PARAM_VALUE 1 skb->sw_hash 0
PARAM_VALUE 1 skb->tstamp_type 0-1
PARAM_VALUE 2 fl6 4096-ptr_max
PARAM_VALUE 2 fl6->__fl_common.flowic_dscp 0
PARAM_VALUE 2 fl6->__fl_common.flowic_flags 0
PARAM_VALUE 2 fl6->__fl_common.flowic_l3mdev 0
PARAM_VALUE 2 fl6->__fl_common.flowic_multipath_hash 0
PARAM_VALUE 2 fl6->__fl_common.flowic_proto 0,6
PARAM_VALUE 2 fl6->__fl_common.flowic_scope 0
PARAM_VALUE 2 fl6->__fl_common.flowic_secid 0
PARAM_VALUE 2 fl6->__fl_common.flowic_tun_key.tun_id 0
PARAM_VALUE 2 fl6->flowlabel 0-1048575
PARAM_VALUE 2 fl6->uli.gre_key 0
PARAM_VALUE 2 fl6->uli.icmpt.code 0
PARAM_VALUE 2 fl6->uli.icmpt.type 0
PARAM_VALUE 2 fl6->uli.mht.type 0
BUF_SIZE 0 sk->__sk_common.skc_prot (-1),448
BUF_SIZE 1 skb 320
BUF_SIZE 1 skb 320
BUF_SIZE 2 fl6 88
CAPPED_DATA 0 sk->__sk_common.skc_net.net 1
CAPPED_DATA 1 skb->head 1
CAPPED_DATA 1 skb->len 1
DATA_SOURCE 0 sk $0
DATA_SOURCE 1 skb r tcp_make_synack
FUZZY_MAX 2 fl6->__fl_common.flowic_proto 0
FUZZY_MAX 2 fl6->flowlabel 0
TASK_NOT_RUNNING
HOST_DATA 0 sk->sk_backlog.head->csum 0-4294967040[c]
HOST_DATA 0 sk->sk_backlog.tail->csum 0-4294967040[c]
HOST_DATA 0 sk->sk_backlog.tail->next->csum 0-4294967040[c]
HOST_DATA 0 sk->sk_receive_queue.prev->csum_offset 0-u16max
HOST_DATA 0 sk->sk_receive_queue.prev->data_len 0-u32max[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->csum_offset 0-u16max
HOST_DATA 0 sk->sk_receive_queue.prev->next->data_len 0-u32max[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->truesize 0-u32max
HOST_DATA 0 sk->sk_receive_queue.prev->truesize 0-u32max
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_prot_creator->twsk_prot->twsk_slab->object_size
NO_OVERFLOW_SIMPLE 0 sk->sk_prot_creator->twsk_prot->twsk_slab->sheaf_capacity
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->truesize
NO_OVERFLOW_SIMPLE 1 skb->sk->sk_backlog.len
LOCK2 rcu_read
HALF_LOCKED2 bh
HALF_LOCKED2 0 sk
HALF_LOCKED2 0 &sk->sk_lock.slock

net/sctp/ipv6.c sctp_v6_xmit() -> ip6_xmit()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->_skb_refdst 4096-18446744073709547520
PARAM_VALUE 1 skb->destructor 0,5871617288306880512,7346051344949997568
PARAM_VALUE 1 skb->sk 4096-ptr_max
BUF_SIZE 1 skb 0-s32max
BUF_SIZE 1 skb 0-s32max
BUF_SIZE 2 fl6 88
CAPPED_DATA 0 sk->__sk_common.skc_net.net 1
CAPPED_DATA 1 skb 1
CAPPED_DATA 1 skb->head 1
DATA_SOURCE 1 skb $0
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 skb->sk->sk_backlog.len
UNITS 0 sk unit_byte
LOCK2 rcu_read