Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 5 files:
- drivers/net/wireless/ath/ath11k/dp_rx.c, line 3279
- drivers/net/wireless/ath/ath12k/wifi7/dp_rx.c, line 1032
- drivers/net/wireless/intel/ipw2x00/libipw_crypto_tkip.c
- net/mac80211/wpa.c
- net/wireless/michael-mic.c, line 87
Smatch caller information:
drivers/net/wireless/intel/ipw2x00/libipw_crypto_tkip.c libipw_michael_mic_add() -> michael_mic()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 1 | hdr | 4096-ptr_max |
| PARAM_VALUE | 3 | data_len | 0-u32max |
| PARAM_VALUE | 4 | mic | 4096-ptr_max |
| BUF_SIZE | 0 | key | 16 |
| BUF_SIZE | 1 | hdr | 1-s32max |
| DATA_SOURCE | 4 | mic | r skb_put |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | hdr->duration_id | 0-u16max[u] |
| USER_DATA | 1 | hdr->frame_control | 0-u16max[u] |
| USER_DATA | 1 | hdr->seq_ctrl | 0-u16max[u] |
| USER_DATA | 2 | *data | 0-255 |
| UNITS | 1 | hdr | unit_byte |
| UNITS | 2 | data | unit_byte |
| UNITS | 3 | data_len | unit_byte |
| USER_PTR | 1 | hdr | |
| USER_PTR | 2 | data | |
| LOCK2 | &ieee->lock | ||
| HALF_LOCKED2 | &dev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct libipw_device)->lock |
drivers/net/wireless/intel/ipw2x00/libipw_crypto_tkip.c libipw_michael_mic_verify() -> michael_mic()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 1 | hdr | 4096-ptr_max |
| PARAM_VALUE | 3 | data_len | 0-u32max |
| PARAM_VALUE | 4 | mic | 727961635531198464 |
| BUF_SIZE | 0 | key | 8 |
| BUF_SIZE | 1 | hdr | 1-s32max |
| BUF_SIZE | 4 | mic | 8 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | hdr->duration_id | 0-u16max[u] |
| USER_DATA | 1 | hdr->frame_control | 0-u16max[u] |
| USER_DATA | 1 | hdr->seq_ctrl | 0-u16max[u] |
| USER_DATA | 2 | *data | 0-255 |
| UNITS | 1 | hdr | unit_byte |
| UNITS | 2 | data | unit_byte |
| UNITS | 3 | data_len | unit_byte |
| USER_PTR | 1 | hdr | |
| USER_PTR | 2 | data | |
| HALF_LOCKED2 | &priv->lock | ||
| HALF_LOCKED2 | &priv->low_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
net/mac80211/wpa.c ieee80211_rx_h_michael_mic_verify() -> michael_mic()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 1 | hdr | 4096-ptr_max |
| PARAM_VALUE | 3 | data_len | 0-u32max |
| PARAM_VALUE | 4 | mic | 2423132740022513664 |
| BUF_SIZE | 1 | hdr | 1-s32max |
| BUF_SIZE | 1 | hdr | 1-s32max |
| BUF_SIZE | 4 | mic | 8 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | hdr->duration_id | 0-u16max[u] |
| USER_DATA | 1 | hdr->frame_control | 0-u16max[u] |
| USER_DATA | 1 | hdr->seq_ctrl | 0-u16max[u] |
| USER_DATA | 2 | *data | 0-255 |
| UNITS | 1 | hdr | unit_byte |
| UNITS | 2 | data | unit_byte |
| UNITS | 3 | data_len | unit_byte |
| USER_PTR | 1 | hdr | |
| USER_PTR | 2 | data |
net/mac80211/wpa.c ieee80211_tx_h_michael_mic_add() -> michael_mic()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 1 | hdr | 4096-ptr_max |
| PARAM_VALUE | 3 | data_len | 1-2147483643 |
| PARAM_VALUE | 4 | mic | 4096-ptr_max |
| BUF_SIZE | 1 | hdr | 1-s32max |
| BUF_SIZE | 1 | hdr | 1-s32max |
| DATA_SOURCE | 4 | mic | r skb_put |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | hdr->duration_id | 0-u16max[u] |
| USER_DATA | 1 | hdr->frame_control | 0-u16max[u] |
| USER_DATA | 1 | hdr->seq_ctrl | 0-u16max[u] |
| USER_DATA | 2 | *data | 0-255 |
| UNITS | 1 | hdr | unit_byte |
| UNITS | 2 | data | unit_byte |
| UNITS | 3 | data_len | unit_byte |
| USER_PTR | 1 | hdr | |
| USER_PTR | 2 | data | |
| HALF_LOCKED2 | rcu_read |
drivers/net/wireless/ath/ath12k/wifi7/dp_rx.c ath12k_wifi7_dp_rx_h_verify_tkip_mic() -> michael_mic()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 1 | hdr | 4096-ptr_max |
| PARAM_VALUE | 1 | hdr->addr1 | 4096-ptr_max |
| PARAM_VALUE | 1 | *hdr->addr1 | 1-255 |
| PARAM_VALUE | 2 | data | 4096-ptr_max |
| PARAM_VALUE | 3 | data_len | 0-u32max |
| PARAM_VALUE | 4 | mic | 4924497808324726784 |
| BUF_SIZE | 4 | mic | 8 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | hdr->duration_id | 0-u16max[u] |
| USER_DATA | 1 | hdr->frame_control | 0-u16max[u] |
| USER_DATA | 1 | hdr->seq_ctrl | 0-u16max[u] |
| USER_DATA | 2 | *data | 0-255 |
| UNITS | 1 | hdr | unit_byte |
| UNITS | 2 | data | unit_byte |
| UNITS | 3 | data_len | unit_byte |
| USER_PTR | 1 | hdr | |
| USER_PTR | 2 | data | |
| LOCK2 | &dp->dp_lock | ||
| LOCK2 | &srng->lock | ||
| LOCK2 | bh | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct ath12k_dp)->dp_lock | ||
| TYPE_LOCK | (struct hal_srng)->lock |
drivers/net/wireless/ath/ath11k/dp_rx.c ath11k_dp_rx_h_verify_tkip_mic() -> michael_mic()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 1 | hdr | 4096-ptr_max |
| PARAM_VALUE | 1 | hdr->addr1 | 4096-ptr_max |
| PARAM_VALUE | 1 | *hdr->addr1 | 1-255 |
| PARAM_VALUE | 2 | data | 4096-ptr_max |
| PARAM_VALUE | 3 | data_len | 0-u32max |
| PARAM_VALUE | 4 | mic | 598765619364413440 |
| BUF_SIZE | 4 | mic | 8 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | hdr->duration_id | 0-u16max[u] |
| USER_DATA | 1 | hdr->frame_control | 0-u16max[u] |
| USER_DATA | 1 | hdr->seq_ctrl | 0-u16max[u] |
| USER_DATA | 2 | *data | 0-255 |
| UNITS | 1 | hdr | unit_byte |
| UNITS | 2 | data | unit_byte |
| UNITS | 3 | data_len | unit_byte |
| USER_PTR | 1 | hdr | |
| USER_PTR | 2 | data | |
| LOCK2 | &ab->base_lock | ||
| LOCK2 | &srng->lock | ||
| LOCK2 | bh | ||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &ni->dev_lock | ||
| TYPE_LOCK | (struct ath11k_base)->base_lock | ||
| TYPE_LOCK | (struct hal_srng)->lock |