Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 3 files:
Smatch caller information:
net/key/af_key.c pfkey_spdadd() -> km_policy_notify()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->action | 0-1 |
| PARAM_VALUE | 0 | xp->bydst.next->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->bydst.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->byidx->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->byidx.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->curlft.use_time | 0 |
| PARAM_VALUE | 0 | xp->family | 0,2,10 |
| PARAM_VALUE | 0 | xp->lft.hard_byte_limit | 1-u64max |
| PARAM_VALUE | 0 | xp->lft.hard_packet_limit | 1-u32max,u64max |
| PARAM_VALUE | 0 | xp->lft.soft_byte_limit | 1-u64max |
| PARAM_VALUE | 0 | xp->lft.soft_packet_limit | 1-u32max,u64max |
| PARAM_VALUE | 0 | xp->lock.magic | 3736018669 |
| PARAM_VALUE | 0 | xp->lock.owner | (-1) |
| PARAM_VALUE | 0 | xp->lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | xp->polq.hold_queue.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->polq.hold_queue.next->prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->polq.hold_queue.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->polq.hold_timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->polq.hold_timer.lockdep_map->name | 0-255 |
| PARAM_VALUE | 0 | xp->polq.timeout | 25 |
| PARAM_VALUE | 0 | xp->selector.family | 0,2,10 |
| PARAM_VALUE | 0 | xp->selector.proto | 0-254 |
| PARAM_VALUE | 0 | xp->timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->timer.lockdep_map->name | 0-255 |
| PARAM_VALUE | 0 | xp->walk.all.next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->walk.all.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->walk.all.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->walk.all.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->walk.all.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xfrm_nr | 0-6 |
| PARAM_VALUE | 0 | xp->xp_net.net | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.inexact_bins.next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.inexact_bins.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.inexact_bins.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.policy_all.next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.policy_all.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.policy_all.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.xfrm_policy_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *xp->xp_net.net->xfrm.policy_count | 1-12 |
| PARAM_VALUE | 1 | dir | 0-2 |
| PARAM_VALUE | 2 | c | 4524526444439773184 |
| PARAM_VALUE | 2 | c->event | 19,25 |
| BUF_SIZE | 0 | xp | 1064 |
| CAPPED_DATA | 0 | xp->xp_net.net | 1 |
| DATA_SOURCE | 0 | xp | r xfrm_policy_alloc |
| FUZZY_MAX | 0 | xp->action | 1 |
| FUZZY_MAX | 0 | xp->lft.hard_byte_limit | u64max |
| FUZZY_MAX | 0 | xp->lft.hard_packet_limit | u64max |
| FUZZY_MAX | 0 | xp->lft.soft_byte_limit | u64max |
| FUZZY_MAX | 0 | xp->lft.soft_packet_limit | u64max |
| FUZZY_MAX | 0 | xp->xfrm_nr | 0 |
| HARD_MAX | 0 | xp->action | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 2 | c->portid | 0-u32max[u] |
| USER_DATA | 2 | c->seq | 0-u32max[u] |
| LOCK2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk | ||
| TYPE_LOCK | (struct netns_xfrm)->xfrm_cfg_mutex |
net/key/af_key.c pfkey_spddelete() -> km_policy_notify()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 4096-ptr_max |
| PARAM_VALUE | 1 | dir | 0-2 |
| PARAM_VALUE | 2 | c | 6472441508980473856 |
| PARAM_VALUE | 2 | c->data.byid | 0 |
| PARAM_VALUE | 2 | c->event | 20 |
| DATA_SOURCE | 0 | xp | r xfrm_policy_bysel_ctx |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 2 | c->portid | 0-u32max[u] |
| USER_DATA | 2 | c->seq | 0-u32max[u] |
| LOCK2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk | ||
| TYPE_LOCK | (struct netns_xfrm)->xfrm_cfg_mutex |
net/key/af_key.c pfkey_spdflush() -> km_policy_notify()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 0 |
| PARAM_VALUE | 1 | dir | 0 |
| PARAM_VALUE | 2 | c | 2147254005147250688 |
| PARAM_VALUE | 2 | c->data.type | 0 |
| PARAM_VALUE | 2 | c->event | 29 |
| PARAM_VALUE | 2 | c->net | 4096-ptr_max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 2 | c->portid | 0-u32max[u] |
| USER_DATA | 2 | c->seq | 0-u32max[u] |
| LOCK2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk | ||
| TYPE_LOCK | (struct netns_xfrm)->xfrm_cfg_mutex |
net/key/af_key.c pfkey_spdget() -> km_policy_notify()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->type | 0-1 |
| PARAM_VALUE | 1 | dir | 0-2 |
| PARAM_VALUE | 2 | c | 9184993226675712000 |
| PARAM_VALUE | 2 | c->data.byid | 1 |
| PARAM_VALUE | 2 | c->event | 20 |
| CAPPED_DATA | 0 | xp->if_id | 1 |
| CAPPED_DATA | 0 | xp->index | 1 |
| CAPPED_DATA | 0 | xp->mark.m | 1 |
| CAPPED_DATA | 0 | xp->mark.v | 1 |
| CAPPED_DATA | 0 | xp->type | 1 |
| CAPPED_DATA | 1 | dir | 1 |
| DATA_SOURCE | 0 | xp | r xfrm_policy_byid |
| DATA_SOURCE | 1 | dir | r xfrm_policy_id2dir |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 2 | c->portid | 0-u32max[u] |
| USER_DATA | 2 | c->seq | 0-u32max[u] |
| LOCK2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk | ||
| TYPE_LOCK | (struct netns_xfrm)->xfrm_cfg_mutex |
net/xfrm/xfrm_state.c km_policy_expired() -> km_policy_notify()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 4096-ptr_max |
| PARAM_VALUE | 0 | *xp->xp_net.net->xfrm.policy_count | 0-4294967295 |
| PARAM_VALUE | 1 | dir | 0-7 |
| PARAM_VALUE | 2 | c | 1095813527240302592 |
| PARAM_VALUE | 2 | c->event | 27 |
| CAPPED_DATA | 1 | dir | 1 |
| DATA_SOURCE | 0 | xp | $0 |
| DATA_SOURCE | 1 | dir | $1 |
| NOSPEC | 1 | dir | |
| NOSPEC | 1 | dir | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | dir | 0-2[c] |
| USER_DATA | 2 | c->data.hard | 0-255 |
| USER_DATA | 2 | c->portid | 0-u32max[u] |
| HALF_LOCKED2 | 0 | &xp->lock |
net/xfrm/xfrm_user.c xfrm_add_policy() -> km_policy_notify()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->action | 0-1 |
| PARAM_VALUE | 0 | xp->bydst.next->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->bydst.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->byidx->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->byidx.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->curlft.use_time | 0 |
| PARAM_VALUE | 0 | xp->family | 2,10 |
| PARAM_VALUE | 0 | xp->lock.magic | 3736018669 |
| PARAM_VALUE | 0 | xp->lock.owner | (-1) |
| PARAM_VALUE | 0 | xp->lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | xp->polq.hold_queue.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->polq.hold_queue.next->prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->polq.hold_queue.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->polq.hold_timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->polq.hold_timer.lockdep_map->name | 0-255 |
| PARAM_VALUE | 0 | xp->polq.timeout | 25 |
| PARAM_VALUE | 0 | xp->selector.family | 2,10 |
| PARAM_VALUE | 0 | xp->selector.prefixlen_d | 0-128 |
| PARAM_VALUE | 0 | xp->selector.prefixlen_s | 0-128 |
| PARAM_VALUE | 0 | xp->timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->timer.lockdep_map->name | 0-255 |
| PARAM_VALUE | 0 | xp->type | 0-1 |
| PARAM_VALUE | 0 | xp->walk.all.next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->walk.all.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->walk.all.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->walk.all.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->walk.all.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xfrm_nr | 0-6 |
| PARAM_VALUE | 0 | xp->xp_net.net | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.inexact_bins.next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.inexact_bins.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.inexact_bins.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.policy_all.next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.policy_all.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.policy_all.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | xp->xp_net.net->xfrm.xfrm_policy_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *xp->xp_net.net->xfrm.policy_count | 1-12 |
| PARAM_VALUE | 1 | dir | 0-2 |
| PARAM_VALUE | 2 | c | 2797675905761210368 |
| PARAM_VALUE | 2 | c->event | 0-u16max |
| BUF_SIZE | 0 | xp | 1064 |
| CAPPED_DATA | 0 | xp->xp_net.net | 1 |
| CAPPED_DATA | 1 | dir | 1 |
| DATA_SOURCE | 0 | xp | r xfrm_policy_construct |
| NOSPEC | 0 | xp->type | |
| NOSPEC | 1 | dir | |
| NOSPEC | 1 | dir | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | xp->action | 0-1 |
| USER_DATA | 0 | xp->family | 2,10 |
| USER_DATA | 0 | xp->flags | 0-255 |
| USER_DATA | 0 | xp->index | 1-u32max[c] |
| USER_DATA | 0 | xp->lft.hard_add_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_byte_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_packet_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.hard_use_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_add_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_byte_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_packet_limit | 0-u64max |
| USER_DATA | 0 | xp->lft.soft_use_expires_seconds | 0-u64max |
| USER_DATA | 0 | xp->priority | 0-u32max |
| USER_DATA | 0 | xp->selector.dport | 0-u16max |
| USER_DATA | 0 | xp->selector.dport_mask | 0-u16max |
| USER_DATA | 0 | xp->selector.family | 2,10 |
| USER_DATA | 0 | xp->selector.ifindex | s32min-s32max |
| USER_DATA | 0 | xp->selector.prefixlen_d | 0-128 |
| USER_DATA | 0 | xp->selector.prefixlen_s | 0-128 |
| USER_DATA | 0 | xp->selector.proto | 0-255 |
| USER_DATA | 0 | xp->selector.sport | 0-u16max |
| USER_DATA | 0 | xp->selector.sport_mask | 0-u16max |
| USER_DATA | 0 | xp->selector.user | 0-u32max |
| USER_DATA | 0 | xp->type | 0-1 |
| USER_DATA | 0 | xp->xfrm_nr | 1-6[c] |
| USER_DATA | 1 | dir | 0-2[c] |
| USER_DATA | 2 | c->event | 16-18,20-41[u] |
| USER_DATA | 2 | c->portid | 0-u32max[u] |
| USER_DATA | 2 | c->seq | 0-u32max[u] |
| HALF_LOCKED2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | global &cb_lock | ||
| HALF_LOCKED2 | global &crypto_cfg_mutex | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
net/xfrm/xfrm_user.c xfrm_flush_policy() -> km_policy_notify()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 0 |
| PARAM_VALUE | 1 | dir | 0 |
| PARAM_VALUE | 2 | c | 3439319400748724224 |
| PARAM_VALUE | 2 | c->data.type | 0-1 |
| PARAM_VALUE | 2 | c->event | 0-u16max |
| PARAM_VALUE | 2 | c->net | 4096-ptr_max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 2 | c->event | 16-41[u] |
| USER_DATA | 2 | c->portid | 0-u32max[u] |
| USER_DATA | 2 | c->seq | 0-u32max[u] |
| HALF_LOCKED2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | global &cb_lock | ||
| HALF_LOCKED2 | global &crypto_cfg_mutex | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
net/xfrm/xfrm_user.c xfrm_get_policy() -> km_policy_notify()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | xp | 4096-ptr_max |
| PARAM_VALUE | 1 | dir | 0-2 |
| PARAM_VALUE | 2 | c | 2635123614402174976 |
| PARAM_VALUE | 2 | c->event | 20 |
| CAPPED_DATA | 1 | dir | 1 |
| NOSPEC | 1 | dir | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | dir | 0-2[c] |
| USER_DATA | 2 | c->data.byid | 0-u32max[c] |
| USER_DATA | 2 | c->portid | 0-u32max[u] |
| USER_DATA | 2 | c->seq | 0-u32max[u] |
| HALF_LOCKED2 | &net->xfrm.xfrm_cfg_mutex | ||
| HALF_LOCKED2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | global &cb_lock | ||
| HALF_LOCKED2 | global &crypto_cfg_mutex | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |