Open Menu /

Documented in 1 files:

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 7 files:

Smatch caller information:

net/ipv4/tcp_ipv4.c tcp_add_backlog() -> skb_try_coalesce()

Type Parameter Key Value
PARAM_VALUE 0 to 4096-ptr_max
PARAM_VALUE 0 to->cb 4096-ptr_max
PARAM_VALUE 0 to->data 4096-ptr_max
PARAM_VALUE 1 from 4096-ptr_max
PARAM_VALUE 1 from->_nfct 0
PARAM_VALUE 1 from->_skb_refdst 0
PARAM_VALUE 1 from->cb 4096-ptr_max
PARAM_VALUE 1 from->data 4096-ptr_max
PARAM_VALUE 1 from->data->doff 5-15
PARAM_VALUE 1 from->dev 0
PARAM_VALUE 1 from->ip_summed 0,2-3
PARAM_VALUE 1 from->next->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 from->next->sk->ns_tracker->dead 0-1
PARAM_VALUE 1 from->next->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 from->next->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->next->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 from->next->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->next->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 1 from->next->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->next->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 from->next->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->next->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 from->pkt_type 0
PARAM_VALUE 1 from->sk->__req_common.skc_flags 0
PARAM_VALUE 1 from->sk->__req_common.skc_listener 0
PARAM_VALUE 1 from->sk->__req_common.skc_tw_dr 0
PARAM_VALUE 1 from->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 1 from->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 1 from->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 1 from->sk->__sk_common.skc_u16hashes 0-u32max
PARAM_VALUE 1 from->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 from->sk->ns_tracker->dead 0-1
PARAM_VALUE 1 from->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 from->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 *from->dev->name 0-255
PARAM_VALUE 2 fragstolen 3107268811339628544
PARAM_VALUE 3 delta_truesize 2749599329810960384
BUF_SIZE 1 from (-1)-s32max
BUF_SIZE 1 from (-1)-s32max
CAPPED_DATA 1 from 1
CAPPED_DATA 1 from->data_len 1
DATA_SOURCE 1 from $1
FUZZY_MAX 1 from->data->doff 5
CONSTRAINT 1 from->data_len <=49
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 1 from->csum 0-4294967040[c]
HOST_DATA 1 from->csum_offset 0-u16max
HOST_DATA 1 from->prev->csum_offset 0-u16max
HOST_DATA 1 from->prev->data_len 0-u32max[c]
HOST_DATA 1 from->prev->len 0-u32max[c]
HOST_DATA 1 from->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 from->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 from->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *from->data 0-255
NO_OVERFLOW_SIMPLE 1 from->data_len
NO_OVERFLOW_SIMPLE 1 from->dev->group
NO_OVERFLOW_SIMPLE 1 from->dev->num_tc
NO_OVERFLOW_SIMPLE 1 from->dev->proto_down
NO_OVERFLOW_SIMPLE 1 from->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 from->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 from->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 from->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 from->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 from->end
NO_OVERFLOW_SIMPLE 1 from->len
NO_OVERFLOW_SIMPLE 1 from->next->end
NO_OVERFLOW_SIMPLE 1 from->next->len
NO_OVERFLOW_SIMPLE 1 from->next->tail
NO_OVERFLOW_SIMPLE 1 from->next->truesize
NO_OVERFLOW_SIMPLE 1 from->prev->end
NO_OVERFLOW_SIMPLE 1 from->prev->len
NO_OVERFLOW_SIMPLE 1 from->prev->tail
NO_OVERFLOW_SIMPLE 1 from->prev->truesize
NO_OVERFLOW_SIMPLE 1 from->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 from->tail
NO_OVERFLOW_SIMPLE 1 from->truesize
UNITS 0 to unit_byte
UNITS 1 from unit_byte
LOCK2 &sk->sk_lock.slock
TYPE_LOCK (struct socket_lock_t)->slock

net/ipv4/tcp_input.c tcp_try_coalesce() -> skb_try_coalesce()

Type Parameter Key Value
PARAM_VALUE 0 to 4096-ptr_max
PARAM_VALUE 0 to->cb 4096-ptr_max
PARAM_VALUE 1 from 4096-ptr_max
PARAM_VALUE 1 from->cb 4096-ptr_max
PARAM_VALUE 1 from->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3720,9688-u64max
PARAM_VALUE 1 *from->dev->name 0-255
PARAM_VALUE 2 fragstolen 346050994939162624,485157648194973696,2062302655791919104,8700824907435913216,8968171480942112768
PARAM_VALUE 2 *fragstolen 0
PARAM_VALUE 3 delta_truesize 5627260247380099072
BUF_SIZE 1 from (-1)-s32max
BUF_SIZE 1 from (-1)-s32max
DATA_SOURCE 0 to $1
DATA_SOURCE 1 from $2
DATA_SOURCE 2 fragstolen $3
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 1 from->csum 0-4294967040[c]
HOST_DATA 1 from->csum_offset 0-u16max
HOST_DATA 1 from->data_len 0-u32max[c]
HOST_DATA 1 from->prev->csum_offset 0-u16max
HOST_DATA 1 from->prev->data_len 0-u32max[c]
HOST_DATA 1 from->prev->len 1-u32max[c]
HOST_DATA 1 from->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 from->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 from->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *from->data 0-255
NO_OVERFLOW_SIMPLE 1 from->data_len
NO_OVERFLOW_SIMPLE 1 from->dev->group
NO_OVERFLOW_SIMPLE 1 from->dev->num_tc
NO_OVERFLOW_SIMPLE 1 from->dev->proto_down
NO_OVERFLOW_SIMPLE 1 from->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 from->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 from->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 from->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 from->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 from->end
NO_OVERFLOW_SIMPLE 1 from->len
NO_OVERFLOW_SIMPLE 1 from->next->data_len
NO_OVERFLOW_SIMPLE 1 from->next->end
NO_OVERFLOW_SIMPLE 1 from->next->len
NO_OVERFLOW_SIMPLE 1 from->next->tail
NO_OVERFLOW_SIMPLE 1 from->next->truesize
NO_OVERFLOW_SIMPLE 1 from->prev->end
NO_OVERFLOW_SIMPLE 1 from->prev->len
NO_OVERFLOW_SIMPLE 1 from->prev->tail
NO_OVERFLOW_SIMPLE 1 from->prev->truesize
NO_OVERFLOW_SIMPLE 1 from->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 from->tail
NO_OVERFLOW_SIMPLE 1 from->truesize
UNITS 0 to unit_byte
UNITS 1 from unit_byte
HALF_LOCKED2 &sk->sk_lock.slock
HALF_LOCKED2 sk

drivers/net/wireless/ath/wil6210/txrx_edma.c wil_sring_reap_rx_edma() -> skb_try_coalesce()

Type Parameter Key Value
PARAM_VALUE 0 to 1-u64max
PARAM_VALUE 1 from 4096-ptr_max
PARAM_VALUE 2 fragstolen 2347557250219429888
PARAM_VALUE 3 delta_truesize 1141068526477393920
RX_PATH
TASK_NOT_RUNNING
USER_PTR 0 to->data
HALF_LOCKED2 &ni->dev_lock
HALF_LOCKED2 bh
HALF_LOCKED2 rcu_read

net/mptcp/protocol.c __mptcp_try_coalesce() -> skb_try_coalesce()

Type Parameter Key Value
PARAM_VALUE 0 to 4096-ptr_max
PARAM_VALUE 0 to->cb 4096-ptr_max
PARAM_VALUE 1 from 4096-ptr_max
PARAM_VALUE 1 from->cb 4096-ptr_max
PARAM_VALUE 2 fragstolen 1539655353650216960,3391604008473481216
PARAM_VALUE 3 delta_truesize 4475115545429098496,5228578777602232320
DATA_SOURCE 0 to $1
DATA_SOURCE 1 from $2
DATA_SOURCE 2 fragstolen $3
DATA_SOURCE 3 delta_truesize $4
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 1 from->prev->end
NO_OVERFLOW_SIMPLE 1 from->prev->len
NO_OVERFLOW_SIMPLE 1 from->sk->sk_backlog.len
UNITS 1 from unit_byte
HALF_LOCKED2 &sk->sk_lock.slock
HALF_LOCKED2 bh

net/tipc/msg.c tipc_buf_append() -> skb_try_coalesce()

Type Parameter Key Value
PARAM_VALUE 0 to 1-u64max
PARAM_VALUE 1 from 4096-ptr_max
PARAM_VALUE 1 from->data 4096-ptr_max
PARAM_VALUE 1 from->next 0
PARAM_VALUE 2 fragstolen 3330427078928240640
PARAM_VALUE 3 delta_truesize 7593542443062747136
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HALF_LOCKED2 bh

net/ipv4/inet_fragment.c inet_frag_reasm_finish() -> skb_try_coalesce()

Type Parameter Key Value
PARAM_VALUE 0 to 4096-ptr_max
PARAM_VALUE 0 to->cb 4096-ptr_max
PARAM_VALUE 0 to->cloned 1
PARAM_VALUE 0 to->destructor 0
PARAM_VALUE 0 to->dev->ip6_ptr->mc_query_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_query_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_query_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_report_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_report_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_report_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 to->dev->ip6_ptr->stats.proc_dir_entry 0,4806605944481423360
PARAM_VALUE 0 to->dev->linkwatch_dev_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 to->dev->linkwatch_dev_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 to->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 0 to->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 0 to->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 0 to->dev->ndisc_ops->parse_options 4096-ptr_max
PARAM_VALUE 0 to->dev->ndisc_ops->update 4096-ptr_max
PARAM_VALUE 0 to->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 0 to->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,9688-u64max
PARAM_VALUE 0 to->next 0
PARAM_VALUE 0 to->nohdr 0
PARAM_VALUE 0 to->peeked 0
PARAM_VALUE 0 to->prev 0
PARAM_VALUE 0 to->rbnode.__rb_parent_color 1
PARAM_VALUE 0 to->rbnode.rb_left 4096-ptr_max
PARAM_VALUE 0 to->rbnode.rb_right 4096-ptr_max
PARAM_VALUE 0 to->sk 0
PARAM_VALUE 0 to->users.refs.counter 1
PARAM_VALUE 0 *to->cb 0-255
PARAM_VALUE 1 from 4096-ptr_max
PARAM_VALUE 1 from->cb 4096-ptr_max
PARAM_VALUE 2 fragstolen 3437812845726068736
PARAM_VALUE 3 delta_truesize 8559375264637374464
BUF_SIZE 0 to (-1)-s32max
BUF_SIZE 0 to (-1)-s32max
CAPPED_DATA 0 to 1
CAPPED_DATA 0 to->head 1
CAPPED_DATA 0 &to->rbnode 1
DATA_SOURCE 0 to $1
PARAM_COMPARE 0 &to->rbnode != $0->rbnode.__rb_parent_color
PARAM_COMPARE 1 from->ip_summed >= $0->ip_summed
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 to->csum 0-4294967043[c]
HOST_DATA 0 to->csum_offset 0-u16max
HOST_DATA 0 to->data_len 3-242[c]
HOST_DATA 0 to->inner_protocol 1-255
HOST_DATA 0 to->prev->csum_offset 0-u16max
HOST_DATA 0 to->prev->data_len 0-u32max[c]
HOST_DATA 0 to->prev->len 0-u32max[c]
HOST_DATA 0 to->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 to->protocol 1-255
HOST_DATA 0 to->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 *to->data 0-255
NO_OVERFLOW_SIMPLE 0 to->data_len
NO_OVERFLOW_SIMPLE 0 to->dev->group
NO_OVERFLOW_SIMPLE 0 to->dev->num_tc
NO_OVERFLOW_SIMPLE 0 to->dev->proto_down
NO_OVERFLOW_SIMPLE 0 to->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 0 to->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 0 to->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 0 to->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 0 to->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 0 to->end
NO_OVERFLOW_SIMPLE 0 to->extensions
NO_OVERFLOW_SIMPLE 0 to->len
NO_OVERFLOW_SIMPLE 0 to->next->data_len
NO_OVERFLOW_SIMPLE 0 to->next->end
NO_OVERFLOW_SIMPLE 0 to->next->len
NO_OVERFLOW_SIMPLE 0 to->next->tail
NO_OVERFLOW_SIMPLE 0 to->next->truesize
NO_OVERFLOW_SIMPLE 0 to->prev->data_len
NO_OVERFLOW_SIMPLE 0 to->prev->end
NO_OVERFLOW_SIMPLE 0 to->prev->len
NO_OVERFLOW_SIMPLE 0 to->prev->tail
NO_OVERFLOW_SIMPLE 0 to->prev->truesize
NO_OVERFLOW_SIMPLE 0 to->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 to->tail
NO_OVERFLOW_SIMPLE 0 to->truesize
UNITS 0 to unit_byte
UNITS 1 from unit_byte
LOCK2 rcu_read
HALF_LOCKED2 &fq->q.lock
HALF_LOCKED2 &qp->q.lock
TYPE_LOCK (struct inet_frag_queue)->lock