Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 7 files:
- drivers/net/ppp/ppp_async.c, line 493
- drivers/net/ppp/ppp_generic.c, line 3671
- drivers/net/ppp/ppp_synctty.c, line 488
- drivers/net/ppp/pppoe.c, line 359
- drivers/net/ppp/pptp.c, line 341
- net/atm/pppoatm.c, line 226
- net/l2tp/l2tp_ppp.c, line 225
Smatch caller information:
drivers/net/ppp/ppp_synctty.c ppp_sync_process() -> ppp_input()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->len | 1-u32max |
| PARAM_VALUE | 1 | skb->next | 0 |
| PARAM_VALUE | 1 | skb->prev | 0 |
| DATA_SOURCE | 1 | skb | r skb_dequeue |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | bh |
drivers/net/ppp/pptp.c pptp_rcv_core() -> ppp_input()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data->gre_hd.flags | 4096-u16max |
| PARAM_VALUE | 1 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3720,9688-u64max |
| PARAM_VALUE | 1 | skb->ip_summed | 0 |
| PARAM_VALUE | 1 | skb->next->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->next->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | skb->next->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| HALF_LOCKED2 | &sk->sk_lock.slock | ||
| HALF_LOCKED2 | sk |
drivers/net/ppp/pppoe.c pppoe_rcv_core() -> ppp_input()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3720,9688-u64max |
| PARAM_VALUE | 1 | skb->next->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->next->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | skb->next->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| HALF_LOCKED2 | &sk->sk_lock.slock | ||
| HALF_LOCKED2 | sk |
drivers/net/ppp/ppp_async.c ppp_async_process() -> ppp_input()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->next | 0 |
| PARAM_VALUE | 1 | skb->prev | 0 |
| DATA_SOURCE | 1 | skb | r skb_dequeue |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | bh |
net/l2tp/l2tp_ppp.c pppol2tp_recv() -> ppp_input()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->destructor | 0 |
| PARAM_VALUE | 1 | skb->next | 0 |
| PARAM_VALUE | 1 | skb->prev | 0 |
| PARAM_VALUE | 1 | skb->sk | 0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | rcu_read |
net/atm/pppoatm.c pppoatm_push() -> ppp_input()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->data_len | |
| HALF_LOCKED2 | global &ioctl_mutex |