Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 7 files:
- drivers/net/ethernet/sun/sunvnet_common.c, line 1170
- net/core/skbuff.c
- net/ipv4/icmp.c, line 370
- net/ipv4/ip_output.c, line 1157
- net/ipv6/icmp.c, line 326
- net/ipv6/ip6_output.c, line 1723
- net/sunrpc/socklib.c, line 52
Smatch caller information:
net/core/skbuff.c skb_copy_and_csum_bits() -> skb_copy_and_csum_bits()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 2 | to | s32min-(-1),1-s32max |
| BUF_SIZE | 2 | to | s32min-(-1),1-s32max |
| CAPPED_DATA | 3 | len | 1 |
| DATA_SOURCE | 2 | to | $2 [m] |
| NOSPEC | 2 | to | |
| NOSPEC | 2 | to | |
| NOSPEC | 3 | len | |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 2 | to | 4096-ptr_max[c] |
| HOST_DATA | 3 | len | s32min-2147483646[c] |
| USER_DATA | 2 | to | 4096-ptr_max[c][u] |
| USER_DATA | 3 | len | 1-2147483646[c] |
| NO_OVERFLOW_SIMPLE | 3 | len | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| UNITS | 2 | to | unit_byte |
| UNITS | 3 | len | unit_byte |
net/core/skbuff.c skb_copy_and_csum_dev() -> skb_copy_and_csum_bits()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 1 | offset | s32min-(-1) |
| PARAM_VALUE | 2 | to | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| PARAM_COMPARE | 1 | offset | != $0->len |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| HOST_DATA | 3 | len | s32min-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
| UNITS | 2 | to | unit_byte |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &hw_priv->hwlock | ||
| HALF_LOCKED2 | &priv->lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | irq | ||
| HALF_LOCKED2 | rcu_read |
net/ipv4/icmp.c icmp_glue_bits() -> skb_copy_and_csum_bits()
| Type | Parameter | Key | Value |
|---|---|---|---|
| DATA_SOURCE | 2 | to | $1 |
| DATA_SOURCE | 3 | len | $3 |
| UNITS | 0 | skb | unit_byte |
net/sunrpc/socklib.c xdr_skb_read_bits() -> skb_copy_and_csum_bits()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 2 | to | s32min-(-1),1-s32max |
| CAPPED_DATA | 3 | len | 1 |
| DATA_SOURCE | 2 | to | $1 |
| DATA_SOURCE | 3 | len | $2 [m] |
| PREEMPT_ADD | |||
| RX_PATH | |||
| UNITS | 2 | to | unit_byte |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | &transport->recv_mutex | ||
| HALF_LOCKED2 | bh |
net/ipv6/ip6_output.c __ip6_append_data() -> skb_copy_and_csum_bits()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->ip_summed | 0-3 |
| PARAM_VALUE | 2 | to | 4096-ptr_max |
| PARAM_VALUE | 3 | len | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| FUZZY_MAX | 0 | skb->ip_summed | 3 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| UNITS | 2 | to | unit_byte |
| UNITS | 3 | len | unit_byte |
net/ipv6/icmp.c icmpv6_getfrag() -> skb_copy_and_csum_bits()
| Type | Parameter | Key | Value |
|---|---|---|---|
| DATA_SOURCE | 2 | to | $1 |
| DATA_SOURCE | 3 | len | $3 |
| UNITS | 0 | skb | unit_byte |
net/ipv4/ip_output.c __ip_append_data() -> skb_copy_and_csum_bits()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 3 | len | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| UNITS | 2 | to | unit_byte |
| UNITS | 3 | len | unit_byte |