Documented in 1 files:
Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 4 files:
- drivers/scsi/libiscsi_tcp.c, line 928
- drivers/target/iscsi/cxgbit/cxgbit_target.c, line 819
- net/core/skbuff.c
- net/xfrm/xfrm_iptfs.c
Smatch caller information:
net/xfrm/xfrm_iptfs.c __input_process_payload() -> skb_prepare_seq_read()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | from | 0-4294967294 |
| PARAM_VALUE | 2 | to | 1-u32max |
| PARAM_VALUE | 3 | st | 5021221164563156992 |
| PARAM_VALUE | 3 | st->root_skb | 4096-ptr_max |
| PARAM_VALUE | 3 | st->stepped_offset | 1-u32max |
| PARAM_VALUE | 3 | st->upper_offset | 1-u32max |
| CAPPED_DATA | 1 | from | 1 |
| DATA_SOURCE | 1 | from | $1 [m] |
| DATA_SOURCE | 3 | st | $2 |
| PARAM_COMPARE | 1 | from | < $2 |
| PARAM_COMPARE | 1 | from | < $3->upper_offset |
| PARAM_COMPARE | 2 | to | > $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | from | 4-s32max[c] |
| HOST_DATA | 3 | st->cur_skb->csum | 0-126976[c] |
| HOST_DATA | 3 | st->cur_skb->csum_offset | 0-u16max |
| HOST_DATA | 3 | st->cur_skb->data_len | 0-u32max[c] |
| HOST_DATA | 3 | st->cur_skb->len | 0-u32max[c] |
| HOST_DATA | 3 | st->cur_skb->truesize | 0-u32max |
| HOST_DATA | 3 | st->cur_skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 3 | st->cur_skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 3 | st->upper_offset | 40-2147483687[c] |
| USER_DATA | 1 | from | 4-s32max[c] |
| USER_DATA | 3 | st->lower_offset | 4-s32max[c] |
| NO_OVERFLOW_SIMPLE | 3 | st->cur_skb->data_len | |
| NO_OVERFLOW_SIMPLE | 3 | st->cur_skb->tail | |
| NO_OVERFLOW_SIMPLE | 3 | st->cur_skb->truesize | |
| NO_OVERFLOW_SIMPLE | 3 | st->upper_offset | |
| UNITS | 1 | from | unit_byte |
| UNITS | 2 | to | unit_byte |
net/xfrm/xfrm_iptfs.c __input_process_payload() -> skb_prepare_seq_read()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | from | 0 |
| PARAM_VALUE | 3 | st | 5021221164563156992 |
| PARAM_VALUE | 3 | st->stepped_offset | 0 |
| DATA_SOURCE | 3 | st | $2 |
| BIT_INFO | 0 | skb->protocol | 0x0,0x8edd |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 3 | st->cur_skb->csum | 0-126976[c] |
| HOST_DATA | 3 | st->cur_skb->csum_offset | 0-u16max |
| HOST_DATA | 3 | st->cur_skb->data_len | 0-u32max[c] |
| HOST_DATA | 3 | st->cur_skb->len | 0-u32max[c] |
| HOST_DATA | 3 | st->cur_skb->truesize | 0-u32max |
| HOST_DATA | 3 | st->cur_skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 3 | st->cur_skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 3 | st->upper_offset | 40-2147483687[c] |
| USER_DATA | 3 | st->lower_offset | 4-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 3 | st->cur_skb->data_len | |
| NO_OVERFLOW_SIMPLE | 3 | st->cur_skb->tail | |
| NO_OVERFLOW_SIMPLE | 3 | st->cur_skb->truesize | |
| NO_OVERFLOW_SIMPLE | 3 | st->upper_offset | |
| UNITS | 1 | from | unit_byte |
| UNITS | 2 | to | unit_byte |
net/xfrm/xfrm_iptfs.c iptfs_copy_create_frags() -> skb_prepare_seq_read()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-6248339207923081216 |
| PARAM_VALUE | 1 | from | 0 |
| PARAM_VALUE | 2 | to | 2-u32max |
| PARAM_VALUE | 3 | st | 3537385581009248256 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 2 | to | unit_byte |
| HALF_LOCKED2 | irq |
net/xfrm/xfrm_iptfs.c iptfs_input_ordered() -> skb_prepare_seq_read()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | from | 0 |
| PARAM_VALUE | 3 | st | 5021221164563156992 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb->dev | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->napi_id | 0-u32max |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| HOST_DATA | 2 | to | 0-u32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | to | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 2 | to | unit_byte |
net/core/skbuff.c skb_find_text() -> skb_prepare_seq_read()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 3 | st | 4259267498826035204 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | from | $1 |
| DATA_SOURCE | 2 | to | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-192512[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->protocol | 1-255 |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | from | unit_byte |
| UNITS | 2 | to | unit_byte |
drivers/target/iscsi/cxgbit/cxgbit_target.c cxgbit_skb_copy_to_sg() -> skb_prepare_seq_read()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 3 | st | 6498572989528694784 |
| DATA_SOURCE | 0 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | from | unit_byte |
| UNITS | 2 | to | unit_byte |
drivers/scsi/libiscsi_tcp.c iscsi_tcp_recv_skb() -> skb_prepare_seq_read()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 3 | st | 2001085521716449280 |
| CAPPED_DATA | 0 | skb | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| DATA_SOURCE | 1 | from | $2 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | from | |
| UNITS | 1 | from | unit_byte |
| UNITS | 2 | to | unit_byte |
| HALF_LOCKED2 | &csk->lock | ||
| HALF_LOCKED2 | bh |