Open Menu /

Defined in 1 files as a function:

Referenced in 2 files:

Smatch caller information:

net/unix/af_unix.c unix_dgram_sendmsg() -> scm_send()

Type Parameter Key Value
PARAM_VALUE 0 sock 4096-ptr_max
PARAM_VALUE 1 msg 4096-ptr_max
PARAM_VALUE 2 scm 4602298320966565888
PARAM_VALUE 3 forcecreds 0
BUF_SIZE 0 sock s32min-(-1),1-s32max
BUF_SIZE 0 sock s32min-(-1),1-s32max
BUF_SIZE 1 msg->msg_control (-1)-0,16,24,36-s32max
BUF_SIZE 1 msg->msg_name (-1)-0,12,28,128
BUF_SIZE 1 msg->msg_ubuf (-1),16
DATA_SOURCE 0 sock $0
DATA_SOURCE 1 msg $1
NOSPEC 1 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 1 msg->msg_controllen 0-s32max[c]
USER_DATA 1 msg->msg_flags 0-u32max[c]
USER_DATA 1 msg->msg_iter.count 1-18446744073709551614
USER_DATA 1 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 1 msg->msg_namelen 0-128
USER_DATA 1 *msg->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->truesize
USER_PTR 1 msg->msg_control
USER_PTR 1 msg->msg_name
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sk

net/unix/af_unix.c unix_stream_sendmsg() -> scm_send()

Type Parameter Key Value
PARAM_VALUE 0 sock 4096-ptr_max
PARAM_VALUE 1 msg 4096-ptr_max
PARAM_VALUE 2 scm 4671398612165189632
PARAM_VALUE 3 forcecreds 0
BUF_SIZE 0 sock s32min-(-1),1-s32max
BUF_SIZE 0 sock s32min-(-1),1-s32max
BUF_SIZE 1 msg->msg_control (-1)-0,16,24,36-s32max
BUF_SIZE 1 msg->msg_name (-1)-0,12,28,128
BUF_SIZE 1 msg->msg_ubuf (-1),16
DATA_SOURCE 0 sock $0
DATA_SOURCE 1 msg $1
NOSPEC 1 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 1 msg->msg_controllen 0-s32max[c]
USER_DATA 1 msg->msg_flags 0-u32max[c]
USER_DATA 1 msg->msg_iter.count 1-18446744073709551614
USER_DATA 1 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 1 msg->msg_namelen 0-128
USER_DATA 1 *msg->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->truesize
USER_PTR 1 msg->msg_control
USER_PTR 1 msg->msg_name
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sk

net/netlink/af_netlink.c netlink_sendmsg() -> scm_send()

Type Parameter Key Value
PARAM_VALUE 0 sock 4096-ptr_max
PARAM_VALUE 1 msg 4096-ptr_max
PARAM_VALUE 2 scm 1364153323681607680
PARAM_VALUE 3 forcecreds 1
BUF_SIZE 0 sock s32min-(-1),1-s32max
BUF_SIZE 0 sock s32min-(-1),1-s32max
BUF_SIZE 1 msg->msg_control (-1)-0,16,24,36-s32max
BUF_SIZE 1 msg->msg_name (-1)-0,12,28,128
BUF_SIZE 1 msg->msg_ubuf (-1),16
DATA_SOURCE 0 sock $0
DATA_SOURCE 1 msg $1
BIT_INFO 1 msg->msg_flags 0x0,0xfffffffe
NOSPEC 1 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 1 msg->msg_controllen 0-s32max[c]
USER_DATA 1 msg->msg_flags 0-u32max[c]
USER_DATA 1 msg->msg_iter.count 1-18446744073709551614
USER_DATA 1 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 1 msg->msg_namelen 0-128
USER_DATA 1 *msg->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->truesize
USER_PTR 1 msg->msg_control
USER_PTR 1 msg->msg_name
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sk