Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
net/ipv4/tcp.c tcp_rtx_queue_purge() -> tcp_rtx_queue_unlink()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | sk | 4096-ptr_max |
| PARAM_VALUE | 1 | sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->sk_backlog.head->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->sk_backlog.head->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | sk->sk_backlog.head->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->tcp_rtx_queue.rb_node | 4096-ptr_max |
| BUF_SIZE | 1 | sk | (-1),16,24,32,40,56,88,96,120,160,248,568,672,1040,1080,1216 |
| BUF_SIZE | 1 | sk | (-1),16,24,32,40,56,88,96,120,160,248,568,672,1040,1080,1216 |
| BUF_SIZE | 1 | sk->__sk_common.skc_net.net | (-1),1-s32max |
| BUF_SIZE | 1 | sk->__sk_common.skc_prot | (-1),448 |
| BUF_SIZE | 1 | sk->sk_prot_creator | (-1),448 |
| CAPPED_DATA | 1 | sk | 1 |
| DATA_SOURCE | 1 | sk | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | sk->sk_receive_queue.prev->csum | 0-126976[c] |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->len | 0-241,4294901762-u32max[c] |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->next->csum | 0-126976[c] |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->next->csum_offset | 0-u16max |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->next->data_len | 0-u32max[c] |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->next->len | 0-241,4294901762-u32max[c] |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->next->truesize | 0-u32max |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->truesize | 0-u32max |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_prot_creator->twsk_prot->twsk_slab->object_size | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_prot_creator->twsk_prot->twsk_slab->sheaf_capacity | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_security | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->truesize | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | sk | unit_byte |
| HALF_LOCKED2 | 1 | sk | |
| HALF_LOCKED2 | 1 | &sk->__sk_common.skc_net.net->ipv4.ra_mutex | |
| HALF_LOCKED2 | 1 | &sk->__sk_common.skc_net.net->mctp.keys_lock | |
| HALF_LOCKED2 | 1 | &sk->sk_lock.slock |
net/ipv4/tcp_input.c tcp_rtx_queue_unlink_and_free() -> tcp_rtx_queue_unlink()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 1 | sk | 4096-ptr_max |
| PARAM_VALUE | 1 | sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->sk_backlog.head->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->sk_backlog.head->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | sk->sk_backlog.head->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| BUF_SIZE | 1 | sk->__sk_common.skc_prot | (-1),448 |
| CAPPED_DATA | 0 | skb | 1 |
| CAPPED_DATA | 1 | sk | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | sk | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | sk->sk_receive_queue.prev->csum | 0-126976[c] |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->next->csum | 0-126976[c] |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->next->csum_offset | 0-u16max |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->next->data_len | 0-u32max[c] |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->truesize | |
| UNITS | 1 | sk | unit_byte |
| HALF_LOCKED2 | 1 | sk | |
| HALF_LOCKED2 | 1 | &sk->sk_lock.slock |
net/ipv4/tcp_output.c tcp_rtx_queue_unlink_and_free() -> tcp_rtx_queue_unlink()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | sk | 4096-ptr_max |
| PARAM_VALUE | 1 | sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->sk_backlog.head->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->sk_backlog.head->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | sk->sk_backlog.head->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | sk->sk_socket->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->sk_socket->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | sk->sk_socket->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | sk->tcp_rtx_queue.rb_node | 1-u64max |
| BUF_SIZE | 1 | sk->__sk_common.skc_prot | (-1),448 |
| CAPPED_DATA | 0 | skb | 1 |
| CAPPED_DATA | 1 | sk->__sk_common.skc_net.net | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | sk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | sk->sk_receive_queue.prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->next->csum_offset | 0-u16max |
| HOST_DATA | 1 | sk->sk_receive_queue.prev->next->data_len | 0-u32max[c] |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.head->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_backlog.tail->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | sk->sk_write_queue.prev->truesize | |
| UNITS | 1 | sk | unit_byte |
| HALF_LOCKED2 | 1 | sk | |
| HALF_LOCKED2 | 1 | &sk->sk_lock.slock |