sctp_make_violation_paramlen identifier - Linux source code next-20260811

Projects

linux

Versions

FIXME
- FIXME
  - next-20260811

Defined in 1 files as a prototype:

include/net/sctp/sm.h, line 214 (as a prototype)

Defined in 1 files as a function:

net/sctp/sm_make_chunk.c, line 1091 (as a function)

Referenced in 2 files:

Smatch caller information:

net/sctp/sm_make_chunk.c sctp_process_inv_paramlength() -> sctp_make_violation_paramlen()

Type	Parameter	Key	Value
PARAM_VALUE	0	asoc	0,4096-ptr_max
PARAM_VALUE	0	asoc->addip_last_asconf->auth_chunk->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->addip_last_asconf->auth_chunk->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->addip_last_asconf->auth_chunk->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->addip_last_asconf->skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->addip_last_asconf->skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->addip_last_asconf->skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.inqueue.in_progress->auth_chunk->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.inqueue.in_progress->auth_chunk->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->base.inqueue.in_progress->auth_chunk->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.inqueue.in_progress->skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.inqueue.in_progress->skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->base.inqueue.in_progress->skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->base.sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.sk->sk_backlog.head->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.sk->sk_backlog.head->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->base.sk->sk_backlog.head->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->outqueue.asoc->stream.out_curr->state	0-1
PARAM_VALUE	0	asoc->outqueue.asoc->stream.si->generate_ftsn	4096-ptr_max
PARAM_VALUE	0	asoc->strreset_chunk->auth_chunk->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->strreset_chunk->auth_chunk->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->strreset_chunk->auth_chunk->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->strreset_chunk->skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->strreset_chunk->skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->strreset_chunk->skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	1	chunk	4096-ptr_max
PARAM_VALUE	1	chunk->chunk_hdr	4096-ptr_max
PARAM_VALUE	1	chunk->chunk_hdr->length	20-u16max
PARAM_VALUE	1	chunk->pdiscard	0
BUF_SIZE	1	chunk	(-1),40
BUF_SIZE	1	chunk	(-1),40
BUF_SIZE	1	chunk->subh.cookie_hdr	(-1),1-s32max
BUF_SIZE	1	chunk->subh.init_hdr	(-1),1-s32max
CAPPED_DATA	1	chunk->sctp_hdr->vtag	1
DATA_SOURCE	0	asoc	$0
DATA_SOURCE	1	chunk	$2
DATA_SOURCE	2	param	$1
RX_PATH
TASK_NOT_RUNNING
USER_DATA	0	asoc->force_delay	0-1
USER_DATA	1	chunk->subh.cookie_hdr->__pad	0-u32max[u]
USER_DATA	1	chunk->subh.init_hdr->a_rwnd	0-u32max[u]
USER_DATA	1	chunk->subh.init_hdr->init_tag	0-u32max[u]
USER_DATA	1	chunk->subh.init_hdr->initial_tsn	0-u32max[u]
USER_DATA	1	chunk->subh.init_hdr->num_inbound_streams	0-u16max[u]
USER_DATA	1	chunk->subh.init_hdr->num_outbound_streams	0-u16max[u]
USER_PTR	1	chunk->subh.cookie_hdr
USER_PTR	1	chunk->subh.init_hdr
HALF_LOCKED2		&pool->lock
HALF_LOCKED2		&sk->sk_lock.slock
HALF_LOCKED2		sk

net/sctp/sm_statefuns.c sctp_sf_violation_paramlen() -> sctp_make_violation_paramlen()

Type	Parameter	Key	Value
PARAM_VALUE	0	asoc	4096-ptr_max
PARAM_VALUE	0	asoc->addip_last_asconf->auth_chunk->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->addip_last_asconf->auth_chunk->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->addip_last_asconf->auth_chunk->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->addip_last_asconf->skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->addip_last_asconf->skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->addip_last_asconf->skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.inqueue.in_progress->auth_chunk->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.inqueue.in_progress->auth_chunk->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->base.inqueue.in_progress->auth_chunk->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.inqueue.in_progress->skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.inqueue.in_progress->skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->base.inqueue.in_progress->skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->base.sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.sk->sk_backlog.head->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->base.sk->sk_backlog.head->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->base.sk->sk_backlog.head->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->outqueue.asoc->stream.out_curr->state	0-1
PARAM_VALUE	0	asoc->outqueue.asoc->stream.si->generate_ftsn	4096-ptr_max
PARAM_VALUE	0	asoc->strreset_chunk->auth_chunk->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->strreset_chunk->auth_chunk->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->strreset_chunk->auth_chunk->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->strreset_chunk->skb->sk->ns_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	asoc->strreset_chunk->skb->sk->ns_tracker->dead	0-1
PARAM_VALUE	0	asoc->strreset_chunk->skb->sk->ns_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	1	chunk	4096-ptr_max
BUF_SIZE	1	chunk	(-1),40
BUF_SIZE	1	chunk	(-1),40
BUF_SIZE	2	param	(-1),1-s32max
BUF_SIZE	2	param	(-1),1-s32max
CAPPED_DATA	0	asoc->c.my_vtag	1
DATA_SOURCE	0	asoc	$2
DATA_SOURCE	1	chunk	$4
DATA_SOURCE	2	param	$5
NOSPEC	0	asoc->c.raw_addr_list_len
NOSPEC	0	asoc->peer.port
RX_PATH
TASK_NOT_RUNNING
USER_DATA	0	asoc->addip_serial	0-u32max[u]
USER_DATA	0	asoc->c.adaptation_ind	0-u32max[u]
USER_DATA	0	asoc->c.expiration	s64min-s64max
USER_DATA	0	asoc->c.initial_tsn	0-u32max[u]
USER_DATA	0	asoc->c.my_ttag	0-u32max
USER_DATA	0	asoc->c.padding	0-255[u]
USER_DATA	0	asoc->c.peer_addr.sa.sa_family	0-u16max[u]
USER_DATA	0	asoc->c.peer_addr.v4.sin_family	0-u16max[u]
USER_DATA	0	asoc->c.peer_addr.v6.sin6_family	0-u16max[u]
USER_DATA	0	asoc->c.peer_addr.v6.sin6_flowinfo	0-u32max[u]
USER_DATA	0	asoc->c.peer_addr.v6.sin6_port	0-u16max[u]
USER_DATA	0	asoc->c.peer_addr.v6.sin6_scope_id	0-u32max[u]
USER_DATA	0	asoc->c.peer_ttag	0-u32max
USER_DATA	0	asoc->c.peer_vtag	0-u32max
USER_DATA	0	asoc->c.prsctp_capable	0-255[u]
USER_DATA	0	asoc->c.raw_addr_list_len	0-65331[c][u]
USER_DATA	0	asoc->c.sinit_max_instreams	0-u16max[u]
USER_DATA	0	asoc->c.sinit_num_ostreams	0-u16max[u]
USER_DATA	0	asoc->force_delay	0-1
USER_DATA	0	asoc->next_tsn	0-u32max[u]
USER_DATA	0	asoc->peer.adaptation_ind	0-u32max
USER_DATA	0	asoc->peer.port	0-u16max
USER_DATA	0	asoc->peer.primary_addr.sa.sa_family	2,10[c]
USER_DATA	0	asoc->peer.primary_addr.v4.sin_family	0-u16max
USER_DATA	0	asoc->peer.primary_addr.v4.sin_port	0-u16max
USER_DATA	0	asoc->peer.primary_addr.v6.sin6_family	0-u16max
USER_DATA	0	asoc->peer.primary_addr.v6.sin6_flowinfo	0-u32max
USER_DATA	0	asoc->peer.primary_addr.v6.sin6_port	0-u16max
USER_DATA	0	asoc->peer.primary_addr.v6.sin6_scope_id	0-u32max
USER_DATA	0	asoc->peer.primary_path->cacc.next_tsn_at_change	0-u32max[u]
USER_DATA	0	asoc->peer.prsctp_capable	0-1[u]
USER_DATA	0	asoc->peer.tsn_map.base_tsn	0-u32max
USER_DATA	0	asoc->strreset_outseq	0-u32max[u]
USER_DATA	2	param->length	0-u16max[u]
USER_DATA	2	param->type	0-u16max[u]
UNITS	2	param	unit_byte
USER_PTR	2	param
HALF_LOCKED2		&sk->sk_lock.slock
HALF_LOCKED2		sk