Open Menu /

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 2 files:

Smatch caller information:

net/ipv4/tcp_input.c tcp_shift_skb_data() -> tcp_skb_shift()

Type Parameter Key Value
PARAM_VALUE 0 to 4096-ptr_max
PARAM_VALUE 0 to->cb 4096-ptr_max
PARAM_VALUE 1 from 4096-ptr_max
PARAM_VALUE 1 from->cb 4096-ptr_max
PARAM_VALUE 1 from->data_len 1
PARAM_VALUE 1 from->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 1 from->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 from->sk->ns_tracker->dead 0-1
PARAM_VALUE 1 from->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 from->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 from->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 2 pcount 0-s32max
CAPPED_DATA 1 &from->rbnode 1
CAPPED_DATA 2 pcount 1
DATA_SOURCE 1 from $1
FUZZY_MAX 2 pcount 1
PARAM_COMPARE 1 &from->rbnode != $1->rbnode.__rb_parent_color
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 1 from->next->data_len 0-u32max[c]
HOST_DATA 1 from->next->prev->data_len 0-u32max[c]
UNITS 3 shiftlen unit_byte
HALF_LOCKED2 &sk->sk_lock.slock
HALF_LOCKED2 sk

net/ipv4/tcp_input.c tcp_shift_skb_data() -> tcp_skb_shift()

Type Parameter Key Value
PARAM_VALUE 0 to 4096-ptr_max
PARAM_VALUE 0 to->cb 4096-ptr_max
PARAM_VALUE 0 to->data 4096-ptr_max
PARAM_VALUE 0 to->hdr_len 0
PARAM_VALUE 0 to->head_frag 0
PARAM_VALUE 0 to->ip_summed 3
PARAM_VALUE 0 to->nohdr 0
PARAM_VALUE 0 to->pp_recycle 0
PARAM_VALUE 1 from 4096-ptr_max
PARAM_VALUE 1 from->cb 4096-ptr_max
PARAM_VALUE 1 from->data_len 1
PARAM_VALUE 1 from->dev->ndisc_ops->fill_addr_option 4096-ptr_max
PARAM_VALUE 1 from->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 from->sk->ns_tracker->dead 0-1
PARAM_VALUE 1 from->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 from->sk->sk_callback_lock.owner (-1)
PARAM_VALUE 1 from->sk->sk_callback_lock.owner_cpu u32max
PARAM_VALUE 1 from->sk->sk_filter 0
PARAM_VALUE 1 from->sk->sk_filter->rcu.func 1-u64max
PARAM_VALUE 1 from->sk->sk_frag.page 0
PARAM_VALUE 1 from->sk->sk_owner->refcnt.counter 0-s32max
PARAM_VALUE 1 from->sk->sk_prot_creator->owner->refcnt.counter 0-s32max
PARAM_VALUE 1 from->sk->sk_rcu.func 1-u64max
PARAM_VALUE 1 from->sk->sk_rcu.next 0
PARAM_VALUE 1 from->sk->sk_reuseport_cb->rcu.func 1-u64max
PARAM_VALUE 1 from->sk->sk_security 0
PARAM_VALUE 2 pcount 0-u16max
CAPPED_DATA 0 &to->rbnode 1
CAPPED_DATA 2 pcount 1
DATA_SOURCE 2 pcount r tcp_skb_pcount
PARAM_COMPARE 0 &to->rbnode != $0->rbnode.__rb_parent_color
CONSTRAINT 3 shiftlen <=49
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 1 from->next->data_len 0-u32max[c]
HOST_DATA 1 from->next->prev->data_len 0-u32max[c]
UNITS 3 shiftlen unit_byte
HALF_LOCKED2 &sk->sk_lock.slock
HALF_LOCKED2 sk

net/ipv4/tcp_output.c tcp_collapse_retrans() -> tcp_skb_shift()

Type Parameter Key Value
PARAM_VALUE 0 to 4096-ptr_max
PARAM_VALUE 0 to->cb 4096-ptr_max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_query_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_query_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_query_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_report_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_report_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 to->dev->ip6_ptr->mc_report_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 to->dev->ip6_ptr->stats.proc_dir_entry 0,4806605944481423360
PARAM_VALUE 0 to->dev->linkwatch_dev_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 to->dev->linkwatch_dev_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 to->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 0 to->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 0 to->dev->ndisc_ops->fill_addr_option 9149257602806276096
PARAM_VALUE 0 to->dev->ndisc_ops->parse_options 4570881757937598464
PARAM_VALUE 0 to->dev->ndisc_ops->update 8455145027589103616
PARAM_VALUE 0 to->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 0 to->dev->rtnl_link_ops->priv_size 0,8,32,48,56,88,112,120,144,160,224,240,256,296,616,624,728,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,9688-u64max
PARAM_VALUE 0 to->head 1-u64max
PARAM_VALUE 0 to->ip_summed 3
PARAM_VALUE 0 to->next->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 to->next->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 to->next->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 to->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 to->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 to->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 to->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 to->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 to->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 from 4096-ptr_max
PARAM_VALUE 1 from->len 1-u32max
PARAM_VALUE 2 pcount 1
PARAM_VALUE 3 shiftlen s32min-(-1),1-s32max
CAPPED_DATA 0 &to->rbnode 1
DATA_SOURCE 0 to $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
UNITS 3 shiftlen unit_byte
HALF_LOCKED2 &sk->sk_lock.slock
HALF_LOCKED2 sk