Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/mptcp/subflow.c subflow_v4_send_synack() -> subflow_prep_synack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 2 | foc | 0,4096-ptr_max |
| PARAM_VALUE | 2 | foc->len | (-1)-0,4-16 |
| BUF_SIZE | 0 | sk->__sk_common.skc_prot | (-1),448 |
| BUF_SIZE | 1 | req | (-1)-s32max |
| BUF_SIZE | 1 | req | (-1)-s32max |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 1 | req | $3 |
| DATA_SOURCE | 2 | foc | $4 |
| DATA_SOURCE | 3 | synack_type | $5 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | sk->sk_backlog.head->csum | 0-4294967040[c] |
| HOST_DATA | 0 | sk->sk_backlog.tail->csum | 0-4294967040[c] |
| HOST_DATA | 0 | sk->sk_backlog.tail->next->csum | 0-4294967040[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->truesize | 0-u32max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->truesize | 0-u32max |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_prot_creator->twsk_prot->twsk_slab->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_prot_creator->twsk_prot->twsk_slab->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | req->rsk_ops->slab->object_size | |
| NO_OVERFLOW_SIMPLE | 1 | req->rsk_ops->slab->sheaf_capacity | |
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read | ||
| HALF_LOCKED2 | 0 | sk | |
| HALF_LOCKED2 | 0 | &sk->sk_lock.slock |
net/mptcp/subflow.c subflow_v6_send_synack() -> subflow_prep_synack()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 2 | foc | 0,4096-ptr_max |
| PARAM_VALUE | 2 | foc->len | (-1)-0,4-16 |
| BUF_SIZE | 0 | sk->__sk_common.skc_prot | (-1),448 |
| BUF_SIZE | 1 | req | (-1)-s32max |
| BUF_SIZE | 1 | req | (-1)-s32max |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 1 | req | $3 |
| DATA_SOURCE | 2 | foc | $4 |
| DATA_SOURCE | 3 | synack_type | $5 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | sk->sk_backlog.head->csum | 0-4294967040[c] |
| HOST_DATA | 0 | sk->sk_backlog.tail->csum | 0-4294967040[c] |
| HOST_DATA | 0 | sk->sk_backlog.tail->next->csum | 0-4294967040[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->next->truesize | 0-u32max |
| HOST_DATA | 0 | sk->sk_receive_queue.prev->truesize | 0-u32max |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.head->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.tail->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_prot_creator->twsk_prot->twsk_slab->object_size | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_prot_creator->twsk_prot->twsk_slab->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_write_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | req->rsk_ops->slab->object_size | |
| NO_OVERFLOW_SIMPLE | 1 | req->rsk_ops->slab->sheaf_capacity | |
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read | ||
| HALF_LOCKED2 | 0 | sk | |
| HALF_LOCKED2 | 0 | &sk->sk_lock.slock |