Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/ipv4/ip_output.c ip_do_fragment() -> ip_frag_ipcb()

Type Parameter Key Value
PARAM_VALUE 0 from 4096-ptr_max
PARAM_VALUE 0 from->cb 4096-ptr_max
PARAM_VALUE 0 from->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 0 from->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 0 from->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 0 from->dev->ndisc_ops->parse_options 4096-ptr_max
PARAM_VALUE 0 from->dev->ndisc_ops->update 4096-ptr_max
PARAM_VALUE 0 from->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 0 from->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE 0 from->ip_summed 0-2
PARAM_VALUE 0 from->sk 0,4096-ptr_max
PARAM_VALUE 0 *from->cb 0-255
PARAM_VALUE 0 *from->dev->name 0-255
PARAM_VALUE 1 to 4096-ptr_max
PARAM_VALUE 1 to->data 4096-ptr_max
PARAM_VALUE 1 to->data_len 0
PARAM_VALUE 1 to->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 1 to->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 1 to->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 1 to->dev->ndisc_ops->parse_options 4096-ptr_max
PARAM_VALUE 1 to->dev->ndisc_ops->update 4096-ptr_max
PARAM_VALUE 1 to->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 1 to->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE 1 to->extensions 4096-ptr_max
BUF_SIZE 0 from (-1)-s32max
BUF_SIZE 0 from (-1)-s32max
BUF_SIZE 1 to 0-s32max
BUF_SIZE 1 to 0-s32max
DATA_SOURCE 0 from $2
DATA_SOURCE 1 to r ip_frag_next
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 0 from->csum 0-4294967041[c]
HOST_DATA 0 from->csum_offset 0-u16max
HOST_DATA 0 from->data_len 0-u32max[c]
HOST_DATA 0 from->inner_protocol 1-255
HOST_DATA 0 from->len 0-u32max[c]
HOST_DATA 0 from->next->prev->csum_offset 0-u16max
HOST_DATA 0 from->next->prev->data_len 0-u32max[c]
HOST_DATA 0 from->next->prev->len 1-u32max[c]
HOST_DATA 0 from->next->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 from->prev->csum_offset 0-u16max
HOST_DATA 0 from->prev->data_len 0-u32max[c]
HOST_DATA 0 from->prev->len 0-u32max[c]
HOST_DATA 0 from->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 from->protocol 1-255
HOST_DATA 0 from->truesize 0-u32max
HOST_DATA 0 from->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 from->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 *from->data 0-255
HOST_DATA 1 to->next->prev->csum_offset 0-u16max
HOST_DATA 1 to->next->prev->data_len 0-u32max[c]
HOST_DATA 1 to->next->prev->len 1-u32max[c]
HOST_DATA 1 to->next->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 to->protocol 1-255
NO_OVERFLOW_SIMPLE 0 from->data_len
NO_OVERFLOW_SIMPLE 0 from->dev->group
NO_OVERFLOW_SIMPLE 0 from->dev->num_tc
NO_OVERFLOW_SIMPLE 0 from->dev->proto_down
NO_OVERFLOW_SIMPLE 0 from->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 from->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 from->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 from->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 from->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 0 from->end
NO_OVERFLOW_SIMPLE 0 from->extensions
NO_OVERFLOW_SIMPLE 0 from->len
NO_OVERFLOW_SIMPLE 0 from->next->end
NO_OVERFLOW_SIMPLE 0 from->next->len
NO_OVERFLOW_SIMPLE 0 from->next->tail
NO_OVERFLOW_SIMPLE 0 from->next->truesize
NO_OVERFLOW_SIMPLE 0 from->prev->end
NO_OVERFLOW_SIMPLE 0 from->prev->len
NO_OVERFLOW_SIMPLE 0 from->prev->tail
NO_OVERFLOW_SIMPLE 0 from->prev->truesize
NO_OVERFLOW_SIMPLE 0 from->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 from->tail
NO_OVERFLOW_SIMPLE 0 from->truesize
NO_OVERFLOW_SIMPLE 1 to->dev->group
NO_OVERFLOW_SIMPLE 1 to->dev->num_tc
NO_OVERFLOW_SIMPLE 1 to->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 to->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 to->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 to->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 to->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 to->sk->sk_backlog.len
UNITS 0 from unit_byte