skb_frag_ref identifier - Linux source code next-20260811

Projects

linux

Versions

FIXME
- FIXME
  - next-20260811

Documented in 1 files:

include/linux/skbuff_ref.h, line 23

Defined in 1 files as a function:

include/linux/skbuff_ref.h, line 30 (as a function)

Referenced in 3 files:

Smatch caller information:

net/xfrm/xfrm_iptfs.c iptfs_consume_frags() -> skb_frag_ref()

Type	Parameter	Key	Value
PARAM_VALUE	0	skb	4096-ptr_max
PARAM_VALUE	0	skb->_skb_refdst	1-u64max
PARAM_VALUE	0	skb->destructor	0
PARAM_VALUE	0	skb->next	0
PARAM_VALUE	0	skb->prev	0
PARAM_VALUE	0	skb->protocol	2048,34525
PARAM_VALUE	0	skb->sk	0
PARAM_VALUE	0	skb->users.refs.counter	1
PARAM_VALUE	1	f	0-255
CAPPED_DATA	0	skb->pp_recycle	1
DATA_SOURCE	0	skb	$0
FUZZY_MAX	0	skb->protocol	34525
HARD_MAX	0	skb->protocol	34525
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HALF_LOCKED2		irq

net/core/skbuff.c __pskb_copy_fclone() -> skb_frag_ref()

Type	Parameter	Key	Value
PARAM_VALUE	0	skb	4096-ptr_max
PARAM_VALUE	0	skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire	0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE	0	skb->dev->nd_net.net->ipv4.fqdir->f->qsize	0,304,320
PARAM_VALUE	0	skb->dev->ndisc_ops->fill_addr_option	4096-ptr_max
PARAM_VALUE	0	skb->dev->ndisc_ops->parse_options	4096-ptr_max
PARAM_VALUE	0	skb->dev->ndisc_ops->update	4096-ptr_max
PARAM_VALUE	0	skb->dev->rtnl_link_ops->maxtype	0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE	0	skb->dev->rtnl_link_ops->priv_size	0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE	1	f	0-254
BUF_SIZE	0	skb	(-1)-s32max
BUF_SIZE	0	skb	(-1)-s32max
CAPPED_DATA	0	skb	1
CAPPED_DATA	1	f	1
DATA_SOURCE	0	skb	$0
CONSTRAINT	1	f	<3485
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA	0	skb->csum_offset	0-u16max
HOST_DATA	0	skb->data_len	0-u32max[c]
HOST_DATA	0	skb->len	0-u32max[c]
HOST_DATA	0	skb->next->csum_offset	0-u16max
HOST_DATA	0	skb->next->data_len	0-u32max[c]
HOST_DATA	0	skb->next->len	1-u32max[c]
HOST_DATA	0	skb->next->prev->data_len	0-u32max[c]
HOST_DATA	0	skb->prev->csum_offset	0-u16max
HOST_DATA	0	skb->prev->data_len	0-u32max[c]
HOST_DATA	0	skb->prev->len	0-u32max[c]
HOST_DATA	0	skb->prev->truesize	0-u32max
HOST_DATA	0	skb->prev->tstamp	500000002-4294967299794967295[c]
HOST_DATA	0	skb->prev->users.refs.counter	s32min-0,2-s32max
HOST_DATA	0	skb->truesize	0-u32max
HOST_DATA	0	skb->tstamp	500000002-4294967299794967295[c]
HOST_DATA	0	skb->users.refs.counter	s32min-0,2-s32max
HOST_DATA	0	*skb->data	0-255
NO_OVERFLOW_SIMPLE	0	skb->data_len
NO_OVERFLOW_SIMPLE	0	skb->dev->group
NO_OVERFLOW_SIMPLE	0	skb->dev->num_tc
NO_OVERFLOW_SIMPLE	0	skb->dev->proto_down
NO_OVERFLOW_SIMPLE	0	skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE	0	skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE	0	skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE	0	skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE	0	skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE	0	skb->end
NO_OVERFLOW_SIMPLE	0	skb->extensions
NO_OVERFLOW_SIMPLE	0	skb->len
NO_OVERFLOW_SIMPLE	0	skb->next->end
NO_OVERFLOW_SIMPLE	0	skb->next->len
NO_OVERFLOW_SIMPLE	0	skb->next->tail
NO_OVERFLOW_SIMPLE	0	skb->prev->data_len
NO_OVERFLOW_SIMPLE	0	skb->prev->end
NO_OVERFLOW_SIMPLE	0	skb->prev->len
NO_OVERFLOW_SIMPLE	0	skb->prev->tail
NO_OVERFLOW_SIMPLE	0	skb->prev->truesize
NO_OVERFLOW_SIMPLE	0	skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE	0	skb->tail
NO_OVERFLOW_SIMPLE	0	skb->truesize
UNITS	0	skb	unit_byte
HALF_LOCKED2		&local->raw_sockets.lock
HALF_LOCKED2		&pool->lock
HALF_LOCKED2		bh
HALF_LOCKED2		global &fakelb_ifup_phys_lock
HALF_LOCKED2		global &hci_sk_list.lock
HALF_LOCKED2		global &qrtr_node_lock
HALF_LOCKED2		global &raw_sk_list.lock
HALF_LOCKED2		rcu_read

net/core/skbuff.c __skb_zcopy_downgrade_managed() -> skb_frag_ref()

Type	Parameter	Key	Value
PARAM_VALUE	0	skb	4096-ptr_max
PARAM_VALUE	0	skb->dev->header_ops->parse	0,836034408504639488,1549207736952049664,2557666104032284672,2873682388240314368,3226767679038275584,4717025337529622528,7964469038492160000
PARAM_VALUE	0	skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire	0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE	0	skb->dev->nd_net.net->ipv4.fqdir->f->qsize	0,304,320
PARAM_VALUE	0	skb->dev->ndisc_ops->fill_addr_option	4096-ptr_max
PARAM_VALUE	0	skb->dev->ndisc_ops->parse_options	4096-ptr_max
PARAM_VALUE	0	skb->dev->ndisc_ops->update	4096-ptr_max
PARAM_VALUE	0	skb->dev->rtnl_link_ops->maxtype	0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE	0	skb->dev->rtnl_link_ops->priv_size	0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE	1	f	0-254
BUF_SIZE	0	skb	(-1)-s32max
BUF_SIZE	0	skb	(-1)-s32max
CAPPED_DATA	1	f	1
DATA_SOURCE	0	skb	$0
CONSTRAINT	1	f	<3485
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA	0	skb->csum	0-192512[c]
HOST_DATA	0	skb->csum_offset	0-u16max
HOST_DATA	0	skb->data_len	0-u32max[c]
HOST_DATA	0	skb->inner_protocol	1-255
HOST_DATA	0	skb->len	0-u32max[c]
HOST_DATA	0	skb->prev->csum_offset	0-u16max
HOST_DATA	0	skb->prev->data_len	0-u32max[c]
HOST_DATA	0	skb->prev->len	0-u32max[c]
HOST_DATA	0	skb->prev->tstamp	500000002-4294967299794967295[c]
HOST_DATA	0	skb->protocol	1-255
HOST_DATA	0	skb->tstamp	500000002-4294967299794967295[c]
HOST_DATA	0	skb->users.refs.counter	s32min-0,2-s32max
HOST_DATA	0	*skb->data	0-255
NO_OVERFLOW_SIMPLE	0	skb->data_len
NO_OVERFLOW_SIMPLE	0	skb->dev->group
NO_OVERFLOW_SIMPLE	0	skb->dev->num_tc
NO_OVERFLOW_SIMPLE	0	skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE	0	skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE	0	skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE	0	skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE	0	skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE	0	skb->end
NO_OVERFLOW_SIMPLE	0	skb->extensions
NO_OVERFLOW_SIMPLE	0	skb->len
NO_OVERFLOW_SIMPLE	0	skb->prev->data_len
NO_OVERFLOW_SIMPLE	0	skb->prev->end
NO_OVERFLOW_SIMPLE	0	skb->prev->len
NO_OVERFLOW_SIMPLE	0	skb->prev->tail
NO_OVERFLOW_SIMPLE	0	skb->prev->truesize
NO_OVERFLOW_SIMPLE	0	skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE	0	skb->tail
NO_OVERFLOW_SIMPLE	0	skb->truesize
UNITS	0	skb	unit_byte

net/core/skbuff.c pskb_carve_inside_header() -> skb_frag_ref()

Type	Parameter	Key	Value
PARAM_VALUE	0	skb	4096-ptr_max
PARAM_VALUE	1	f	0-254
BUF_SIZE	0	skb	(-1),240
BUF_SIZE	0	skb	(-1),240
CAPPED_DATA	1	f	1
DATA_SOURCE	0	skb	$0
CONSTRAINT	1	f	<3485
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
NO_OVERFLOW_SIMPLE	0	skb->len
UNITS	0	skb	unit_byte

net/core/skbuff.c pskb_carve_inside_nonlinear() -> skb_frag_ref()

Type	Parameter	Key	Value
PARAM_VALUE	0	skb	4096-ptr_max
PARAM_VALUE	1	f	0-254
BUF_SIZE	0	skb	(-1),240
BUF_SIZE	0	skb	(-1),240
CAPPED_DATA	1	f	1
DATA_SOURCE	0	skb	$0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS	0	skb	unit_byte

net/core/skbuff.c pskb_expand_head() -> skb_frag_ref()

Type	Parameter	Key	Value
PARAM_VALUE	0	skb	4096-ptr_max
PARAM_VALUE	0	skb->users.refs.counter	1
PARAM_VALUE	1	f	0-254
CAPPED_DATA	1	f	1
DATA_SOURCE	0	skb	$0
CONSTRAINT	1	f	<3485
NOCHECK_CALL

net/core/skbuff.c skb_split_no_header() -> skb_frag_ref()

Type	Parameter	Key	Value
PARAM_VALUE	0	skb	4096-ptr_max
PARAM_VALUE	0	skb->dev->linkwatch_dev_tracker->alloc_stack_handle	0-4294967295
PARAM_VALUE	0	skb->dev->linkwatch_dev_tracker->free_stack_handle	0-4294967295
PARAM_VALUE	0	skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire	0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE	0	skb->dev->nd_net.net->ipv4.fqdir->f->qsize	0,304,320
PARAM_VALUE	0	skb->dev->ndisc_ops->fill_addr_option	4096-ptr_max
PARAM_VALUE	0	skb->dev->ndisc_ops->parse_options	4096-ptr_max
PARAM_VALUE	0	skb->dev->ndisc_ops->update	4096-ptr_max
PARAM_VALUE	0	skb->dev->rtnl_link_ops->maxtype	0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE	0	skb->dev->rtnl_link_ops->priv_size	0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE	1	f	0-254
BUF_SIZE	0	skb	(-1)-s32max
BUF_SIZE	0	skb	(-1)-s32max
CAPPED_DATA	0	skb	1
CAPPED_DATA	0	skb->data_len	1
CAPPED_DATA	0	skb->len	1
CAPPED_DATA	1	f	1
DATA_SOURCE	0	skb	$0
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA	0	skb->csum_offset	0-u16max
HOST_DATA	0	skb->len	1-u32max[c]
HOST_DATA	0	skb->next->data_len	0-u32max[c]
HOST_DATA	0	skb->next->prev->csum_offset	0-u16max
HOST_DATA	0	skb->next->prev->data_len	0-u32max[c]
HOST_DATA	0	skb->next->prev->len	1-u32max[c]
HOST_DATA	0	skb->next->prev->tstamp	500000002-4294967299794967295[c]
HOST_DATA	0	skb->prev->csum_offset	0-u16max
HOST_DATA	0	skb->prev->data_len	0-u32max[c]
HOST_DATA	0	skb->prev->len	0-u32max[c]
HOST_DATA	0	skb->prev->tstamp	500000002-4294967299794967295[c]
HOST_DATA	0	skb->tstamp	500000002-4294967299794967295[c]
HOST_DATA	0	skb->users.refs.counter	s32min-0,2-s32max
HOST_DATA	0	*skb->data	0-255
NO_OVERFLOW_SIMPLE	0	skb->data_len
NO_OVERFLOW_SIMPLE	0	skb->dev->group
NO_OVERFLOW_SIMPLE	0	skb->dev->num_tc
NO_OVERFLOW_SIMPLE	0	skb->dev->proto_down
NO_OVERFLOW_SIMPLE	0	skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE	0	skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE	0	skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE	0	skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE	0	skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE	0	skb->end
NO_OVERFLOW_SIMPLE	0	skb->extensions
NO_OVERFLOW_SIMPLE	0	skb->len
NO_OVERFLOW_SIMPLE	0	skb->prev->end
NO_OVERFLOW_SIMPLE	0	skb->prev->len
NO_OVERFLOW_SIMPLE	0	skb->prev->tail
NO_OVERFLOW_SIMPLE	0	skb->prev->truesize
NO_OVERFLOW_SIMPLE	0	skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE	0	skb->tail
NO_OVERFLOW_SIMPLE	0	skb->truesize

net/core/skbuff.c skb_zerocopy() -> skb_frag_ref()

Type	Parameter	Key	Value
PARAM_VALUE	0	skb	4096-ptr_max
PARAM_VALUE	1	f	0-s32max
BUF_SIZE	0	skb	0-s32max
BUF_SIZE	0	skb	0-s32max
DATA_SOURCE	0	skb	$0
FUZZY_MAX	1	f	1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL

net/ipv4/tcp_output.c tcp_clone_payload() -> skb_frag_ref()

Type	Parameter	Key	Value
PARAM_VALUE	0	skb	4096-ptr_max
PARAM_VALUE	0	skb->data	4096-ptr_max
PARAM_VALUE	0	skb->ip_summed	3
PARAM_VALUE	0	skb->tcp_tsorted_anchor.next	4096-ptr_max
PARAM_VALUE	0	skb->tcp_tsorted_anchor.next->next	4096-ptr_max
PARAM_VALUE	0	skb->tcp_tsorted_anchor.prev	4096-ptr_max
PARAM_VALUE	0	skb->tcp_tsorted_anchor.prev->next	4096-ptr_max
PARAM_VALUE	0	skb->tcp_tsorted_anchor.prev->prev	4096-ptr_max
PARAM_VALUE	1	f	0-s32max
BUF_SIZE	0	skb	320
BUF_SIZE	0	skb	320
CAPPED_DATA	1	f	1
DATA_SOURCE	0	skb	$1
CONSTRAINT	1	f	<3485
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HALF_LOCKED2		&sk->sk_callback_lock
HALF_LOCKED2		&sk->sk_lock.slock
HALF_LOCKED2		sk