Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/sctp/socket.c sctp_recvmsg() -> sctp_ulpevent_read_nxtinfo()

Type Parameter Key Value
PARAM_VALUE 0 event 4096-ptr_max
PARAM_VALUE 0 event->chunk 0,4096-ptr_max
PARAM_VALUE 1 msghdr 4096-ptr_max
PARAM_VALUE 1 msghdr->msg_control 4096-ptr_max
PARAM_VALUE 1 msghdr->msg_control->cmsg_level 0-1,6,17,41,101,107,132,263,268,270-272,274,276,282,287
PARAM_VALUE 1 msghdr->msg_control->cmsg_type 1-9,11-13,15-16,20,23,25,29,35-37,40-41,50,52,54,57-59,61,63-65,67,74,77-79,104
PARAM_VALUE 1 msghdr->msg_control_user 4096-ptr_max
PARAM_VALUE 2 sk 4096-ptr_max
PARAM_VALUE 2 sk->__sk_common.skc_net.net->loopback_dev->refcnt_tracker.list.next->next 4096-ptr_max
PARAM_VALUE 2 sk->__sk_common.skc_net.net->mctp.bind_lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 2 sk->__sk_common.skc_net.net->mctp.bind_lock.first_waiter->list.prev->prev 5159360019465732096
PARAM_VALUE 2 sk->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 2 sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev 4096-ptr_max
PARAM_VALUE 2 sk->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 2 sk->listener->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 2 sk->listener->ns_tracker->dead 0-1
PARAM_VALUE 2 sk->listener->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 2 sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 2 sk->ns_tracker->dead 0-1
PARAM_VALUE 2 sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 2 sk->sk_backlog.head->sk->__sk_common.skc_net.net 4096-ptr_max
PARAM_VALUE 2 sk->sk_backlog.head->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 2 sk->sk_backlog.head->sk->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 2 sk->sk_backlog.head->sk->__sk_common.skc_prot 4096-ptr_max
PARAM_VALUE 2 sk->sk_backlog.head->sk->__sk_common.skc_rx_queue_mapping 0-65534
PARAM_VALUE 2 sk->sk_backlog.head->sk->__sk_common.skc_state 0-9,11-255
PARAM_VALUE 2 sk->sk_backlog.head->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 2 sk->sk_backlog.head->sk->ns_tracker->dead 0-1
PARAM_VALUE 2 sk->sk_backlog.head->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 2 sk->sk_backlog.head->sk->sk_callback_lock.owner (-1)
PARAM_VALUE 2 sk->sk_backlog.head->sk->sk_callback_lock.owner_cpu u32max
PARAM_VALUE 2 sk->sk_backlog.head->sk->sk_callback_lock.raw_lock.cnts.counter 0-s32max
PARAM_VALUE 2 sk->sk_backlog.head->sk->sk_dst_pending_confirm 1-u32max
PARAM_VALUE 2 sk->sk_backlog.head->sk->sk_pacing_rate 0-1099511627775
PARAM_VALUE 2 sk->sk_backlog.head->sk->sk_rcu.func 1-u64max
PARAM_VALUE 2 sk->sk_backlog.head->sk->sk_rx_dst 0,2-u64max
PARAM_VALUE 2 sk->sk_backlog.head->sk->sk_sndbuf s32min-(-1),4608-s32max
PARAM_VALUE 2 sk->sk_backlog.head->sk->sk_userlocks 1-255
PARAM_VALUE 2 sk->sk_dst_cache->callback_head.flags 0-4294967295
PARAM_VALUE 2 sk->sk_dst_cache->callback_head.is_hard 0-1
PARAM_VALUE 2 sk->sk_dst_cache->callback_head.is_lazy 0-1
PARAM_VALUE 2 sk->sk_dst_cache->callback_head.is_queued 0-1
PARAM_VALUE 2 sk->sk_dst_cache->callback_head.is_soft 0-1
PARAM_VALUE 2 sk->sk_dst_cache->ops->pcpuc_entries.lock.owner (-1)
PARAM_VALUE 2 sk->sk_dst_cache->ops->pcpuc_entries.lock.owner_cpu u32max
PARAM_VALUE 2 sk->sk_dst_cache->ops->pcpuc_entries.lock.raw_lock.val.counter 0-s32max
PARAM_VALUE 2 sk->sk_error_queue.next->prev 2011684551238094848
PARAM_VALUE 2 sk->sk_lock.dep_map->name 0-255
PARAM_VALUE 2 sk->sk_lock.owned 1
PARAM_VALUE 2 sk->sk_lock.slock.rlock.dep_map->name 0-255
PARAM_VALUE 2 sk->sk_lock.wq.head.prev 4096-ptr_max
PARAM_VALUE 2 sk->sk_lock.wq.head.prev->next 4096-ptr_max
PARAM_VALUE 2 sk->sk_lock.wq.head.prev->next->next 4096-ptr_max
PARAM_VALUE 2 sk->sk_memcg->high_work.entry.next->prev 4096-ptr_max
PARAM_VALUE 2 sk->sk_memcg->id.id 0-s32max
PARAM_VALUE 2 sk->sk_owner->refcnt.counter 0-s32max
PARAM_VALUE 2 sk->sk_prot_creator->owner->refcnt.counter 0-s32max
PARAM_VALUE 2 sk->sk_reuseport_cb->rcu.is_queued 0-1
PARAM_VALUE 2 sk->sk_stamp s64min-(-1000000001),(-999999999)-s64max
PARAM_VALUE 2 sk->sk_user_data->connect_cookie 0-4294967295
PARAM_VALUE 2 sk->sk_user_data->cp_conn->c_proposed_version 769
PARAM_VALUE 2 sk->sk_user_data->cp_reconnect_jiffies 0
PARAM_VALUE 2 sk->sk_user_data->cp_recv_w.cpu s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->cp_recv_w.timer.flags 0-4294967295
PARAM_VALUE 2 sk->sk_user_data->cp_recv_w.timer.is_hard 0-1
PARAM_VALUE 2 sk->sk_user_data->cp_recv_w.timer.is_lazy 0-1
PARAM_VALUE 2 sk->sk_user_data->cp_recv_w.timer.is_queued 0-1
PARAM_VALUE 2 sk->sk_user_data->cp_recv_w.timer.is_soft 0-1
PARAM_VALUE 2 sk->sk_user_data->cp_send_w.cpu s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->cp_send_w.timer.flags 0-4294967295
PARAM_VALUE 2 sk->sk_user_data->cp_send_w.timer.is_hard 0-1
PARAM_VALUE 2 sk->sk_user_data->cp_send_w.timer.is_lazy 0-1
PARAM_VALUE 2 sk->sk_user_data->cp_send_w.timer.is_queued 0-1
PARAM_VALUE 2 sk->sk_user_data->cp_send_w.timer.is_soft 0-1
PARAM_VALUE 2 sk->sk_user_data->cp_state.counter 0-s32max
PARAM_VALUE 2 sk->sk_user_data->ctrl->ctrl.failfast_work.cpu s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->ctrl->ctrl.failfast_work.timer.flags 0-4294967295
PARAM_VALUE 2 sk->sk_user_data->ctrl->ctrl.failfast_work.timer.is_hard 0-1
PARAM_VALUE 2 sk->sk_user_data->ctrl->ctrl.failfast_work.timer.is_lazy 0-1
PARAM_VALUE 2 sk->sk_user_data->ctrl->ctrl.failfast_work.timer.is_queued 0-1
PARAM_VALUE 2 sk->sk_user_data->ctrl->ctrl.failfast_work.timer.is_soft 0-1
PARAM_VALUE 2 sk->sk_user_data->ctrl->ctrl.state 2
PARAM_VALUE 2 sk->sk_user_data->dev->carrier_down_count.counter s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->dev->refcnt_tracker.untracked.refs.counter s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->door_bell.done 0-4294967295
PARAM_VALUE 2 sk->sk_user_data->door_bell.wait.lock.owner (-1)
PARAM_VALUE 2 sk->sk_user_data->door_bell.wait.lock.owner_cpu 4294967295
PARAM_VALUE 2 sk->sk_user_data->door_bell.wait.lock.raw_lock.val.counter s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->kref.refcount.refs.counter s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->login_work.cpu s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->login_work.timer.flags 0-4294967295
PARAM_VALUE 2 sk->sk_user_data->login_work.timer.is_hard 0-1
PARAM_VALUE 2 sk->sk_user_data->login_work.timer.is_lazy 0-1
PARAM_VALUE 2 sk->sk_user_data->login_work.timer.is_queued 0-1
PARAM_VALUE 2 sk->sk_user_data->login_work.timer.is_soft 0-1
PARAM_VALUE 2 sk->sk_user_data->mpa_timer->type 5,7
PARAM_VALUE 2 sk->sk_user_data->private->o_auth.authorizer->buf 0
PARAM_VALUE 2 sk->sk_user_data->private->o_auth.authorizer->session_key.key 0
PARAM_VALUE 2 sk->sk_user_data->private->o_sparse_read.sr_count 0
PARAM_VALUE 2 sk->sk_user_data->private->o_sparse_read.sr_datalen 0
PARAM_VALUE 2 sk->sk_user_data->private->o_sparse_read.sr_ext_len 0
PARAM_VALUE 2 sk->sk_user_data->private->o_sparse_read.sr_extent 0
PARAM_VALUE 2 sk->sk_user_data->private->o_sparse_read.sr_index 0
PARAM_VALUE 2 sk->sk_user_data->private->o_sparse_read.sr_pos 0
PARAM_VALUE 2 sk->sk_user_data->private->o_sparse_read.sr_req_len 0
PARAM_VALUE 2 sk->sk_user_data->private->o_sparse_read.sr_req_off 0
PARAM_VALUE 2 sk->sk_user_data->private->o_sparse_read.sr_state 0
PARAM_VALUE 2 sk->sk_user_data->private->s_delegated_inos.xa_flags 0-4294967295
PARAM_VALUE 2 sk->sk_user_data->private->s_delegated_inos.xa_head 0
PARAM_VALUE 2 sk->sk_user_data->qp->tx_ctx.tx_suspend 1
PARAM_VALUE 2 sk->sk_user_data->read.counter s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->reestablish_timeout 0,750
PARAM_VALUE 2 sk->sk_user_data->ref.refcount.refs.counter s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->sc_kref.refcount.refs.counter s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->sc_node->nd_item.ci_dentry->d_fsdata->s_dependent_count s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->sc_page->_refcount.counter s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->sc_page->page_type 0-4294967295
PARAM_VALUE 2 sk->sk_user_data->session->state s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->sock_state.counter s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->work.cpu s32min-s32max
PARAM_VALUE 2 sk->sk_user_data->work.flags 0-4294967295
PARAM_VALUE 2 sk->sk_user_data->work.is_hard 0-1
PARAM_VALUE 2 sk->sk_user_data->work.is_lazy 0-1
PARAM_VALUE 2 sk->sk_user_data->work.is_queued 0-1
PARAM_VALUE 2 sk->sk_user_data->work.is_soft 0-1
PARAM_VALUE 2 sk->sk_user_data->work.node.node.next 0
PARAM_VALUE 2 sk->sk_user_data->work.node.node.prev 0
PARAM_VALUE 2 sk->sk_user_data->work.timer.flags 0-4294967295
PARAM_VALUE 2 sk->sk_user_data->work.timer.is_hard 0-1
PARAM_VALUE 2 sk->sk_user_data->work.timer.is_lazy 0-1
PARAM_VALUE 2 sk->sk_user_data->work.timer.is_queued 0-1
PARAM_VALUE 2 sk->sk_user_data->work.timer.is_soft 0-1
PARAM_VALUE 2 *sk->sk_backlog.head->dev->name 0-255
PARAM_VALUE 2 *sk->sk_user_data->dev->pcpu_refcnt s32min-s32max
PARAM_VALUE 2 *sk->sk_user_data->private->o_auth.authorizer->session_key.key (-4611686018427387904)-4611686018427387903
PARAM_VALUE 2 *sk->sk_user_data->private->o_auth.authorizer->session_key.krb5_tfms 0
PARAM_VALUE 2 *sk->sk_user_data->private->s_auth.authorizer->session_key.key (-4611686018427387904)-4611686018427387903
PARAM_VALUE 2 *sk->sk_user_data->private->s_auth.authorizer->session_key.krb5_tfms 0
BUF_SIZE 0 event 48
BUF_SIZE 0 event 48
BUF_SIZE 1 msghdr->msg_name (-1)-0,12,128
CAPPED_DATA 2 sk 1
CAPPED_DATA 2 &sk->sk_receive_queue 1
DATA_SOURCE 1 msghdr $1
DATA_SOURCE 2 sk $0
NOSPEC 1 msghdr->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 1 msghdr->msg_control 4096-ptr_max[c][u]
USER_DATA 1 msghdr->msg_control_user 4096-ptr_max[c][u]
USER_DATA 1 msghdr->msg_controllen 0-u64max
USER_DATA 1 msghdr->msg_flags 0-u32max[c]
USER_DATA 1 msghdr->msg_iter.count 0-u64max
USER_DATA 1 msghdr->msg_iter.iov_offset 0-u64max[c]
USER_DATA 1 msghdr->msg_name->v4.sin_addr.s_addr 0-4294967295[u]
USER_DATA 1 msghdr->msg_name->v4.sin_family 0-u16max[u]
USER_DATA 1 msghdr->msg_name->v4.sin_port 0-u16max
USER_DATA 1 msghdr->msg_name->v6.sin6_port 0-u16max[u]
USER_DATA 1 msghdr->msg_name->v6.sin6_scope_id 0-4294967295[u]
USER_DATA 1 *msghdr->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 2 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 2 sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 2 sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 2 sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 2 sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 2 sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 2 sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 2 sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 2 sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 2 sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 2 sk->sk_write_queue.next->len
NO_OVERFLOW_SIMPLE 2 sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 2 sk->sk_write_queue.next->prev->len
NO_OVERFLOW_SIMPLE 2 sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 2 sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 2 sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 2 sk->sk_write_queue.next->truesize
UNITS 2 sk unit_byte
LOCK2 2 sk