Defined in 2 files as a function:

Referenced in 4 files:

Smatch caller information:

net/mctp/route.c mctp_do_fragment_route() -> skb_ext_copy()

Type Parameter Key Value
PARAM_VALUE 0 dst 4096-ptr_max
PARAM_VALUE 0 dst->data 4096-ptr_max
PARAM_VALUE 0 dst->data_len 0
PARAM_VALUE 1 src 4096-ptr_max
PARAM_VALUE 1 src->data 4096-ptr_max
PARAM_VALUE 1 src->data_len 0
PARAM_VALUE 1 src->len 1-u32max
PARAM_VALUE 1 src->sk 0,4096-ptr_max
BUF_SIZE 0 dst 0-s32max
BUF_SIZE 0 dst 0-s32max
BUF_SIZE 1 src (-1)-s32max
BUF_SIZE 1 src (-1)-s32max
DATA_SOURCE 0 dst r alloc_skb
DATA_SOURCE 1 src $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL

net/ipv6/ip6_output.c ip6_copy_metadata() -> skb_ext_copy()

Type Parameter Key Value
PARAM_VALUE 0 dst 4096-ptr_max
PARAM_VALUE 0 dst->_skb_refdst 0,4096-18446744073709547520
PARAM_VALUE 1 src 4096-ptr_max
PARAM_VALUE 1 src->cb 4096-ptr_max
PARAM_VALUE 1 src->dev->ethtool_ops->create_rxfh_context 0-s64max
PARAM_VALUE 1 src->dev->ethtool_ops->get_link_ext_state 0-s64max
PARAM_VALUE 1 src->dev->ethtool_ops->get_mm_stats 0-s64max
PARAM_VALUE 1 src->dev->ethtool_ops->modify_rxfh_context 0-s64max
PARAM_VALUE 1 src->dev->ethtool_ops->remove_rxfh_context 0-s64max
PARAM_VALUE 1 src->dev->ethtool_ops->rxfh_max_num_contexts 0-4294967295
PARAM_VALUE 1 src->dev->ethtool_ops->supported_coalesce_params 0-4294967295
PARAM_VALUE 1 src->dev->ip6_ptr->mc_query_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_query_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_query_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_report_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_report_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_report_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 1 src->dev->ip6_ptr->stats.proc_dir_entry 0,4806605944481423360
PARAM_VALUE 1 src->dev->linkwatch_dev_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 src->dev->linkwatch_dev_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 src->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 1 src->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 1 src->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 1 src->dev->ndisc_ops->parse_options 4096-ptr_max
PARAM_VALUE 1 src->dev->ndisc_ops->update 4096-ptr_max
PARAM_VALUE 1 src->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 1 src->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,9688-u64max
PARAM_VALUE 1 src->next->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 src->next->sk->ns_tracker->dead 0-1
PARAM_VALUE 1 src->next->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 src->next->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 1 src->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 1 src->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 1 src->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 src->sk->ns_tracker->dead 0-1
PARAM_VALUE 1 src->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 src->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 *src->cb 0-255
PARAM_VALUE 1 *src->dev->name 0-255
BUF_SIZE 0 dst (-1)-s32max
BUF_SIZE 0 dst (-1)-s32max
BUF_SIZE 1 src (-1)-s32max
BUF_SIZE 1 src (-1)-s32max
DATA_SOURCE 0 dst $0
DATA_SOURCE 1 src $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 0 dst->protocol 1-255
HOST_DATA 1 src->csum 0-192512[c]
HOST_DATA 1 src->csum_offset 0-u16max
HOST_DATA 1 src->data_len 0-u32max[c]
HOST_DATA 1 src->inner_protocol 1-255
HOST_DATA 1 src->len 0-u32max[c]
HOST_DATA 1 src->prev->csum_offset 0-u16max
HOST_DATA 1 src->prev->data_len 0-u32max[c]
HOST_DATA 1 src->prev->len 0-u32max[c]
HOST_DATA 1 src->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 src->protocol 1-255
HOST_DATA 1 src->truesize 0-u32max
HOST_DATA 1 src->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 src->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *src->data 0-255
NO_OVERFLOW_SIMPLE 0 dst->dev->group
NO_OVERFLOW_SIMPLE 0 dst->dev->num_tc
NO_OVERFLOW_SIMPLE 0 dst->dev->proto_down
NO_OVERFLOW_SIMPLE 0 dst->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 dst->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 dst->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 dst->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 dst->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 src->data_len
NO_OVERFLOW_SIMPLE 1 src->dev->group
NO_OVERFLOW_SIMPLE 1 src->dev->num_tc
NO_OVERFLOW_SIMPLE 1 src->dev->proto_down
NO_OVERFLOW_SIMPLE 1 src->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 src->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 src->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 src->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 src->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 src->end
NO_OVERFLOW_SIMPLE 1 src->extensions
NO_OVERFLOW_SIMPLE 1 src->len
NO_OVERFLOW_SIMPLE 1 src->next->end
NO_OVERFLOW_SIMPLE 1 src->next->len
NO_OVERFLOW_SIMPLE 1 src->next->tail
NO_OVERFLOW_SIMPLE 1 src->prev->end
NO_OVERFLOW_SIMPLE 1 src->prev->len
NO_OVERFLOW_SIMPLE 1 src->prev->tail
NO_OVERFLOW_SIMPLE 1 src->prev->truesize
NO_OVERFLOW_SIMPLE 1 src->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 src->tail
NO_OVERFLOW_SIMPLE 1 src->truesize
UNITS 0 dst unit_byte
UNITS 1 src unit_byte

net/ipv4/tcp_output.c mptcp_skb_ext_copy() -> skb_ext_copy()

Type Parameter Key Value
PARAM_VALUE 0 dst 4096-ptr_max
PARAM_VALUE 0 dst->data 4096-ptr_max
PARAM_VALUE 0 dst->ip_summed 3
PARAM_VALUE 0 dst->tcp_tsorted_anchor.next 4096-ptr_max
PARAM_VALUE 0 dst->tcp_tsorted_anchor.next->next 4096-ptr_max
PARAM_VALUE 0 dst->tcp_tsorted_anchor.prev 4096-ptr_max
PARAM_VALUE 0 dst->tcp_tsorted_anchor.prev->next 4096-ptr_max
PARAM_VALUE 0 dst->tcp_tsorted_anchor.prev->prev 4096-ptr_max
PARAM_VALUE 1 src 4096-ptr_max
PARAM_VALUE 1 src->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 1 src->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 1 src->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 1 src->dev->ndisc_ops->parse_options 4570881757937598464
PARAM_VALUE 1 src->dev->ndisc_ops->update 8455145027589103616
PARAM_VALUE 1 src->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 1 src->dev->rtnl_link_ops->priv_size 0,8,32,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
BUF_SIZE 0 dst 320
BUF_SIZE 0 dst 320
CAPPED_DATA 1 src 1
DATA_SOURCE 0 dst $0
DATA_SOURCE 1 src $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL

net/ipv4/ip_output.c ip_copy_metadata() -> skb_ext_copy()

Type Parameter Key Value
PARAM_VALUE 0 dst 4096-ptr_max
PARAM_VALUE 1 src 4096-ptr_max
PARAM_VALUE 1 src->cb 4096-ptr_max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_query_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_query_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_query_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_report_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_report_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 1 src->dev->ip6_ptr->mc_report_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 1 src->dev->ip6_ptr->stats.proc_dir_entry 0,4806605944481423360
PARAM_VALUE 1 src->dev->linkwatch_dev_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 src->dev->linkwatch_dev_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 src->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 1 src->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 1 src->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 1 src->dev->ndisc_ops->parse_options 4096-ptr_max
PARAM_VALUE 1 src->dev->ndisc_ops->update 4096-ptr_max
PARAM_VALUE 1 src->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 1 src->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,9688-u64max
PARAM_VALUE 1 src->next->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 src->next->sk->ns_tracker->dead 0-1
PARAM_VALUE 1 src->next->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 src->next->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->next->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 1 src->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 1 src->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 1 src->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 src->sk->ns_tracker->dead 0-1
PARAM_VALUE 1 src->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 src->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 src->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 *src->dev->name 0-255
BUF_SIZE 0 dst (-1)-s32max
BUF_SIZE 0 dst (-1)-s32max
BUF_SIZE 1 src (-1)-s32max
BUF_SIZE 1 src (-1)-s32max
DATA_SOURCE 0 dst $0
DATA_SOURCE 1 src $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 0 dst->protocol 1-255
HOST_DATA 1 src->csum 0-192512[c]
HOST_DATA 1 src->csum_offset 0-u16max
HOST_DATA 1 src->data_len 0-u32max[c]
HOST_DATA 1 src->inner_protocol 1-255
HOST_DATA 1 src->len 0-u32max[c]
HOST_DATA 1 src->prev->csum_offset 0-u16max
HOST_DATA 1 src->prev->data_len 0-u32max[c]
HOST_DATA 1 src->prev->len 1-u32max[c]
HOST_DATA 1 src->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 src->protocol 1-255
HOST_DATA 1 src->truesize 0-u32max
HOST_DATA 1 src->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 src->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *src->data 0-255
NO_OVERFLOW_SIMPLE 0 dst->dev->group
NO_OVERFLOW_SIMPLE 0 dst->dev->num_tc
NO_OVERFLOW_SIMPLE 0 dst->dev->proto_down
NO_OVERFLOW_SIMPLE 0 dst->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 dst->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 dst->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 dst->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 dst->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 src->data_len
NO_OVERFLOW_SIMPLE 1 src->dev->group
NO_OVERFLOW_SIMPLE 1 src->dev->num_tc
NO_OVERFLOW_SIMPLE 1 src->dev->proto_down
NO_OVERFLOW_SIMPLE 1 src->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 src->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 src->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 src->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 src->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 src->end
NO_OVERFLOW_SIMPLE 1 src->extensions
NO_OVERFLOW_SIMPLE 1 src->len
NO_OVERFLOW_SIMPLE 1 src->next->end
NO_OVERFLOW_SIMPLE 1 src->next->len
NO_OVERFLOW_SIMPLE 1 src->next->tail
NO_OVERFLOW_SIMPLE 1 src->prev->end
NO_OVERFLOW_SIMPLE 1 src->prev->len
NO_OVERFLOW_SIMPLE 1 src->prev->tail
NO_OVERFLOW_SIMPLE 1 src->prev->truesize
NO_OVERFLOW_SIMPLE 1 src->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 src->tail
NO_OVERFLOW_SIMPLE 1 src->truesize
UNITS 0 dst unit_byte
UNITS 1 src unit_byte