Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
net/rxrpc/rxgk.c rxgk_verify_packet() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->security_use_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->local->socket->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->local->socket->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->local->socket->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 1-u64max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 0 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 1233242887 |
| PARAM_VALUE | 3 | why | 56 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->data | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxgk.c rxgk_verify_packet_encrypted() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->security_level | 2 |
| PARAM_VALUE | 0 | call->conn->security_use_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 1-u64max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 0 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 1233242881 |
| PARAM_VALUE | 3 | why | 55 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxgk.c rxgk_verify_packet_encrypted() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->security_level | 2 |
| PARAM_VALUE | 0 | call->conn->security_use_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 1-u64max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 0 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 1233242880-1233242881,1233242883 |
| PARAM_VALUE | 3 | why | 52 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxgk.c rxgk_verify_packet_encrypted() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->security_level | 2 |
| PARAM_VALUE | 0 | call->conn->security_use_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 1-u64max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 0 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 1233242881 |
| PARAM_VALUE | 3 | why | 55 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxgk.c rxgk_verify_packet_encrypted() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->security_level | 2 |
| PARAM_VALUE | 0 | call->conn->security_use_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 1-u64max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 0 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 1233242883 |
| PARAM_VALUE | 3 | why | 53 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxgk.c rxgk_verify_packet_integrity() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->security_level | 1 |
| PARAM_VALUE | 0 | call->conn->security_use_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 1-u64max |
| PARAM_VALUE | 0 | call->rx_dec_len | 0-65534 |
| PARAM_VALUE | 0 | call->rx_dec_offset | 0 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 1233242881 |
| PARAM_VALUE | 3 | why | 50 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxgk.c rxgk_verify_packet_integrity() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->security_level | 1 |
| PARAM_VALUE | 0 | call->conn->security_use_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 1-u64max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 0 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 0 | call->security_ix | 0-255 |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 1233242880-1233242881,1233242883 |
| PARAM_VALUE | 3 | why | 51 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxkad.c rxkad_verify_packet() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->rxkad.cipher | 1-u64max |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->local->socket->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->local->socket->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->local->socket->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 1-u64max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 0 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb.hdr.cksum | 0 |
| PARAM_VALUE | 2 | abort_code | 19270410 |
| PARAM_VALUE | 3 | why | 21 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->data | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxkad.c rxkad_verify_packet_1() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->rxkad.cipher | 1-u64max |
| PARAM_VALUE | 0 | call->conn->security_level | 1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 1-u64max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 0 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 19270410 |
| PARAM_VALUE | 3 | why | 15 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxkad.c rxkad_verify_packet_1() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->rxkad.cipher | 1-u64max |
| PARAM_VALUE | 0 | call->conn->security_level | 1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 4096-ptr_max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 4 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 19270410 |
| PARAM_VALUE | 3 | why | 12 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxkad.c rxkad_verify_packet_1() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->rxkad.cipher | 1-u64max |
| PARAM_VALUE | 0 | call->conn->security_level | 1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 4096-ptr_max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 4 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 19270411 |
| PARAM_VALUE | 3 | why | 13 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxkad.c rxkad_verify_packet_2() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->rxkad.cipher | 1-u64max |
| PARAM_VALUE | 0 | call->conn->security_level | 2 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 1-u64max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 0 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 19270410 |
| PARAM_VALUE | 3 | why | 19 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxkad.c rxkad_verify_packet_2() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->key->payload.data | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->rxkad.cipher | 1-u64max |
| PARAM_VALUE | 0 | call->conn->security_level | 2 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 4096-ptr_max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 8 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 19270410 |
| PARAM_VALUE | 3 | why | 16 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |
net/rxrpc/rxkad.c rxkad_verify_packet_2() -> rxrpc_abort_eproto()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | call | 4096-ptr_max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->bundle->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->key->payload.data | 4096-ptr_max |
| PARAM_VALUE | 0 | call->conn->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->conn->rxkad.cipher | 1-u64max |
| PARAM_VALUE | 0 | call->conn->security_level | 2 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | call->conn->tx_response->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | call->key->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | call->key->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | call->rx_dec_buffer | 4096-ptr_max |
| PARAM_VALUE | 0 | call->rx_dec_offset | 8 |
| PARAM_VALUE | 0 | call->security | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | abort_code | 19270411 |
| PARAM_VALUE | 3 | why | 18 |
| BUF_SIZE | 0 | call->rx_dec_buffer | (-1),2048-u16max |
| CAPPED_DATA | 0 | call->rx_dec_len | 1 |
| DATA_SOURCE | 0 | call | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | call->hard_timo | |
| NO_OVERFLOW_SIMPLE | 0 | call->rx_dec_len | |
| LOCK2 | 0 | &call->user_mutex | |
| TYPE_LOCK | (struct rxrpc_call)->user_mutex |