Documented in 1 files:

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 4 files:

Smatch caller information:

net/xfrm/xfrm_iptfs.c __input_process_payload() -> skb_prepare_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
PARAM_VALUE 1 from 0-4294967294
PARAM_VALUE 2 to 1-u32max
PARAM_VALUE 3 st 5021221164563156992
PARAM_VALUE 3 st->root_skb 4096-ptr_max
PARAM_VALUE 3 st->stepped_offset 1-u32max
PARAM_VALUE 3 st->upper_offset 1-u32max
CAPPED_DATA 1 from 1
DATA_SOURCE 1 from $1 [m]
DATA_SOURCE 3 st $2
PARAM_COMPARE 1 from < $2
PARAM_COMPARE 1 from < $3->upper_offset
PARAM_COMPARE 2 to > $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 1 from 4-s32max[c]
HOST_DATA 3 st->cur_skb->csum 0-126976[c]
HOST_DATA 3 st->cur_skb->csum_offset 0-u16max
HOST_DATA 3 st->cur_skb->data_len 0-u32max[c]
HOST_DATA 3 st->cur_skb->len 0-u32max[c]
HOST_DATA 3 st->cur_skb->truesize 0-u32max
HOST_DATA 3 st->cur_skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 3 st->cur_skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 3 st->upper_offset 40-2147483687[c]
USER_DATA 1 from 4-s32max[c]
USER_DATA 3 st->lower_offset 4-s32max[c]
NO_OVERFLOW_SIMPLE 3 st->cur_skb->data_len
NO_OVERFLOW_SIMPLE 3 st->cur_skb->tail
NO_OVERFLOW_SIMPLE 3 st->cur_skb->truesize
NO_OVERFLOW_SIMPLE 3 st->upper_offset
UNITS 1 from unit_byte
UNITS 2 to unit_byte

net/xfrm/xfrm_iptfs.c __input_process_payload() -> skb_prepare_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
PARAM_VALUE 1 from 0
PARAM_VALUE 3 st 5021221164563156992
PARAM_VALUE 3 st->stepped_offset 0
DATA_SOURCE 3 st $2
BIT_INFO 0 skb->protocol 0x0,0x8edd
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 3 st->cur_skb->csum 0-126976[c]
HOST_DATA 3 st->cur_skb->csum_offset 0-u16max
HOST_DATA 3 st->cur_skb->data_len 0-u32max[c]
HOST_DATA 3 st->cur_skb->len 0-u32max[c]
HOST_DATA 3 st->cur_skb->truesize 0-u32max
HOST_DATA 3 st->cur_skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 3 st->cur_skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 3 st->upper_offset 40-2147483687[c]
USER_DATA 3 st->lower_offset 4-s32max[c]
NO_OVERFLOW_SIMPLE 0 skb->dev->group
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 3 st->cur_skb->data_len
NO_OVERFLOW_SIMPLE 3 st->cur_skb->tail
NO_OVERFLOW_SIMPLE 3 st->cur_skb->truesize
NO_OVERFLOW_SIMPLE 3 st->upper_offset
UNITS 1 from unit_byte
UNITS 2 to unit_byte

net/xfrm/xfrm_iptfs.c iptfs_copy_create_frags() -> skb_prepare_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-6248339207923081216
PARAM_VALUE 1 from 0
PARAM_VALUE 2 to 2-u32max
PARAM_VALUE 3 st 3537385581009248256
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 2 to unit_byte
HALF_LOCKED2 irq

net/xfrm/xfrm_iptfs.c iptfs_input_ordered() -> skb_prepare_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
PARAM_VALUE 1 from 0
PARAM_VALUE 3 st 5021221164563156992
BUF_SIZE 0 skb (-1)-s32max
BUF_SIZE 0 skb (-1)-s32max
BUF_SIZE 0 skb->dev s32min-(-1),1-s32max
DATA_SOURCE 0 skb $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 0 skb->csum 0-4294967040[c]
HOST_DATA 0 skb->csum_offset 0-u16max
HOST_DATA 0 skb->data_len 0-u32max[c]
HOST_DATA 0 skb->len 0-u32max[c]
HOST_DATA 0 skb->napi_id 0-u32max
HOST_DATA 0 skb->prev->csum_offset 0-u16max
HOST_DATA 0 skb->prev->data_len 0-u32max[c]
HOST_DATA 0 skb->prev->len 1-u32max[c]
HOST_DATA 0 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->truesize 0-u32max
HOST_DATA 0 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 *skb->data 0-255
HOST_DATA 2 to 0-u32max[c]
NO_OVERFLOW_SIMPLE 0 skb->data_len
NO_OVERFLOW_SIMPLE 0 skb->dev->group
NO_OVERFLOW_SIMPLE 0 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 0 skb->dev->proto_down
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 0 skb->end
NO_OVERFLOW_SIMPLE 0 skb->len
NO_OVERFLOW_SIMPLE 0 skb->next->end
NO_OVERFLOW_SIMPLE 0 skb->next->len
NO_OVERFLOW_SIMPLE 0 skb->next->tail
NO_OVERFLOW_SIMPLE 0 skb->next->truesize
NO_OVERFLOW_SIMPLE 0 skb->prev->end
NO_OVERFLOW_SIMPLE 0 skb->prev->len
NO_OVERFLOW_SIMPLE 0 skb->prev->tail
NO_OVERFLOW_SIMPLE 0 skb->prev->truesize
NO_OVERFLOW_SIMPLE 0 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 skb->tail
NO_OVERFLOW_SIMPLE 0 skb->truesize
NO_OVERFLOW_SIMPLE 2 to
UNITS 0 skb unit_byte
UNITS 2 to unit_byte

net/core/skbuff.c skb_find_text() -> skb_prepare_seq_read()

Type Parameter Key Value
PARAM_VALUE 3 st 4259267498826035204
BUF_SIZE 0 skb (-1)-s32max
BUF_SIZE 0 skb (-1)-s32max
DATA_SOURCE 0 skb $0
DATA_SOURCE 1 from $1
DATA_SOURCE 2 to $2
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 0 skb->csum 0-192512[c]
HOST_DATA 0 skb->csum_offset 0-u16max
HOST_DATA 0 skb->data_len 0-u32max[c]
HOST_DATA 0 skb->len 0-u32max[c]
HOST_DATA 0 skb->prev->csum_offset 0-u16max
HOST_DATA 0 skb->prev->data_len 0-u32max[c]
HOST_DATA 0 skb->prev->len 1-u32max[c]
HOST_DATA 0 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->protocol 1-255
HOST_DATA 0 skb->truesize 0-u32max
HOST_DATA 0 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 *skb->data 0-255
NO_OVERFLOW_SIMPLE 0 skb->data_len
NO_OVERFLOW_SIMPLE 0 skb->dev->group
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 0 skb->end
NO_OVERFLOW_SIMPLE 0 skb->len
NO_OVERFLOW_SIMPLE 0 skb->prev->end
NO_OVERFLOW_SIMPLE 0 skb->prev->len
NO_OVERFLOW_SIMPLE 0 skb->prev->tail
NO_OVERFLOW_SIMPLE 0 skb->tail
NO_OVERFLOW_SIMPLE 0 skb->truesize
UNITS 1 from unit_byte
UNITS 2 to unit_byte

drivers/target/iscsi/cxgbit/cxgbit_target.c cxgbit_skb_copy_to_sg() -> skb_prepare_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
PARAM_VALUE 3 st 6498572989528694784
DATA_SOURCE 0 skb $0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 1 from unit_byte
UNITS 2 to unit_byte

drivers/scsi/libiscsi_tcp.c iscsi_tcp_recv_skb() -> skb_prepare_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 skb 4096-ptr_max
PARAM_VALUE 3 st 2001085521716449280
CAPPED_DATA 0 skb 1
DATA_SOURCE 0 skb $1
DATA_SOURCE 1 from $2
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
NO_OVERFLOW_SIMPLE 1 from
UNITS 1 from unit_byte
UNITS 2 to unit_byte
HALF_LOCKED2 &csk->lock
HALF_LOCKED2 bh