Documented in 1 files:

Defined in 1 files as a function:

Referenced in 6 files:

Smatch caller information:

drivers/net/ethernet/qualcomm/rmnet/rmnet_map_data.c rmnet_send_skb() -> skb_needs_linearize()

Type Parameter Key Value
PARAM_VALUE 0 skb 1-u64max
DATA_SOURCE 0 skb $1
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 0 skb->data_len
NO_OVERFLOW_SIMPLE 0 skb->len
NO_OVERFLOW_SIMPLE 0 skb->truesize

net/ipv4/esp4_offload.c esp_xmit() -> skb_needs_linearize()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
BUF_SIZE 0 skb (-1)-s32max
BUF_SIZE 0 skb (-1)-s32max
CAPPED_DATA 0 skb 1
CAPPED_DATA 0 skb->head 1
DATA_SOURCE 0 skb $1
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 skb->csum_offset 0-u16max
HOST_DATA 0 skb->data_len 0-2147483648[c]
HOST_DATA 0 skb->prev->csum_offset 0-u16max
HOST_DATA 0 skb->prev->data_len 0-u32max[c]
HOST_DATA 0 skb->prev->len 0-u32max[c]
HOST_DATA 0 skb->prev->truesize 0-u32max
HOST_DATA 0 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 *skb->data 0-255
NO_OVERFLOW_SIMPLE 0 skb->data_len
NO_OVERFLOW_SIMPLE 0 skb->dev->group
NO_OVERFLOW_SIMPLE 0 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 0 skb->dev->proto_down
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 0 skb->end
NO_OVERFLOW_SIMPLE 0 skb->len
NO_OVERFLOW_SIMPLE 0 skb->next->end
NO_OVERFLOW_SIMPLE 0 skb->next->len
NO_OVERFLOW_SIMPLE 0 skb->prev->data_len
NO_OVERFLOW_SIMPLE 0 skb->prev->end
NO_OVERFLOW_SIMPLE 0 skb->prev->len
NO_OVERFLOW_SIMPLE 0 skb->prev->tail
NO_OVERFLOW_SIMPLE 0 skb->prev->truesize
NO_OVERFLOW_SIMPLE 0 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 skb->tail
NO_OVERFLOW_SIMPLE 0 skb->truesize
HALF_LOCKED2 rcu_read

net/mac80211/tx.c ieee80211_tx_skb_fixup() -> skb_needs_linearize()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
BUF_SIZE 0 skb (-1)-s32max
BUF_SIZE 0 skb (-1)-s32max
BUF_SIZE 0 skb->dev s32min-(-1),1-s32max
DATA_SOURCE 0 skb $0
DATA_SOURCE 1 features $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 skb->csum_offset 0-u16max
HOST_DATA 0 skb->data_len 0-2147483648[c]
HOST_DATA 0 skb->len 14-u32max[c]
HOST_DATA 0 skb->next->csum_offset 0-u16max
HOST_DATA 0 skb->next->data_len 0-u32max[c]
HOST_DATA 0 skb->next->len 1-u32max[c]
HOST_DATA 0 skb->prev->csum_offset 0-u16max
HOST_DATA 0 skb->prev->data_len 0-u32max[c]
HOST_DATA 0 skb->prev->len 0-u32max[c]
HOST_DATA 0 skb->prev->truesize 0-u32max
HOST_DATA 0 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 *skb->data 0-255
NO_OVERFLOW_SIMPLE 0 skb->data_len
NO_OVERFLOW_SIMPLE 0 skb->dev->group
NO_OVERFLOW_SIMPLE 0 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 0 skb->end
NO_OVERFLOW_SIMPLE 0 skb->extensions
NO_OVERFLOW_SIMPLE 0 skb->len
NO_OVERFLOW_SIMPLE 0 skb->next->truesize
NO_OVERFLOW_SIMPLE 0 skb->prev->data_len
NO_OVERFLOW_SIMPLE 0 skb->prev->end
NO_OVERFLOW_SIMPLE 0 skb->prev->len
NO_OVERFLOW_SIMPLE 0 skb->prev->tail
NO_OVERFLOW_SIMPLE 0 skb->prev->truesize
NO_OVERFLOW_SIMPLE 0 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 skb->tail
NO_OVERFLOW_SIMPLE 0 skb->truesize
LOCK2 rcu_read

net/core/skbuff.c skb_segment_list() -> skb_needs_linearize()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
BUF_SIZE 0 skb (-1),240
BUF_SIZE 0 skb (-1),240
CAPPED_DATA 0 skb->head 1
DATA_SOURCE 1 features $1
UNITS 0 skb unit_byte

net/core/skbuff.c skb_segment_list() -> skb_needs_linearize()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
BUF_SIZE 0 skb->next (-1),240
BUF_SIZE 0 skb->prev (-1)-0,240
DATA_SOURCE 0 skb $0
DATA_SOURCE 1 features $1

net/core/dev.c validate_xmit_skb() -> skb_needs_linearize()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
BUF_SIZE 0 skb (-1)-s32max
BUF_SIZE 0 skb (-1)-s32max
CAPPED_DATA 0 skb 1
DATA_SOURCE 0 skb r sk_validate_xmit_skb
DATA_SOURCE 1 features r netif_skb_features
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 skb->csum_offset 0-u16max
HOST_DATA 0 skb->len 0-u32max[c]
HOST_DATA 0 skb->next->csum_offset 0-u16max
HOST_DATA 0 skb->next->data_len 0-u32max[c]
HOST_DATA 0 skb->next->len 1-u32max[c]
HOST_DATA 0 skb->prev->csum_offset 0-u16max
HOST_DATA 0 skb->prev->data_len 0-u32max[c]
HOST_DATA 0 skb->prev->len 0-u32max[c]
HOST_DATA 0 skb->prev->truesize 0-u32max
HOST_DATA 0 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 *skb->data 0-255
NO_OVERFLOW_SIMPLE 0 skb->data_len
NO_OVERFLOW_SIMPLE 0 skb->dev->group
NO_OVERFLOW_SIMPLE 0 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 0 skb->dev->proto_down
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 0 skb->end
NO_OVERFLOW_SIMPLE 0 skb->len
NO_OVERFLOW_SIMPLE 0 skb->next->end
NO_OVERFLOW_SIMPLE 0 skb->next->len
NO_OVERFLOW_SIMPLE 0 skb->next->tail
NO_OVERFLOW_SIMPLE 0 skb->prev->data_len
NO_OVERFLOW_SIMPLE 0 skb->prev->end
NO_OVERFLOW_SIMPLE 0 skb->prev->len
NO_OVERFLOW_SIMPLE 0 skb->prev->tail
NO_OVERFLOW_SIMPLE 0 skb->prev->truesize
NO_OVERFLOW_SIMPLE 0 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 skb->tail
NO_OVERFLOW_SIMPLE 0 skb->truesize
UNITS 0 skb unit_byte
HALF_LOCKED2 rcu_read

net/ipv6/esp6_offload.c esp6_xmit() -> skb_needs_linearize()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
BUF_SIZE 0 skb (-1)-s32max
BUF_SIZE 0 skb (-1)-s32max
CAPPED_DATA 0 skb 1
CAPPED_DATA 0 skb->head 1
DATA_SOURCE 0 skb $1
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 skb->csum_offset 0-u16max
HOST_DATA 0 skb->data_len 0-2147483648[c]
HOST_DATA 0 skb->prev->csum_offset 0-u16max
HOST_DATA 0 skb->prev->data_len 0-u32max[c]
HOST_DATA 0 skb->prev->len 0-u32max[c]
HOST_DATA 0 skb->prev->truesize 0-u32max
HOST_DATA 0 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 *skb->data 0-255
NO_OVERFLOW_SIMPLE 0 skb->data_len
NO_OVERFLOW_SIMPLE 0 skb->dev->group
NO_OVERFLOW_SIMPLE 0 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 0 skb->dev->proto_down
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 0 skb->end
NO_OVERFLOW_SIMPLE 0 skb->len
NO_OVERFLOW_SIMPLE 0 skb->next->end
NO_OVERFLOW_SIMPLE 0 skb->next->len
NO_OVERFLOW_SIMPLE 0 skb->prev->data_len
NO_OVERFLOW_SIMPLE 0 skb->prev->end
NO_OVERFLOW_SIMPLE 0 skb->prev->len
NO_OVERFLOW_SIMPLE 0 skb->prev->tail
NO_OVERFLOW_SIMPLE 0 skb->prev->truesize
NO_OVERFLOW_SIMPLE 0 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 skb->tail
NO_OVERFLOW_SIMPLE 0 skb->truesize
HALF_LOCKED2 rcu_read