Open Menu /

Defined in 7 files as a member:

Defined in 1 files as a function:

Referenced in 3 files:

Smatch caller information:

net/ipv4/tcp_input.c tcp_rcv_established() -> tcp_urg()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 0 sk->__sk_common.skc_u16hashes 0-u32max
PARAM_VALUE 0 sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->cb 4096-ptr_max
PARAM_VALUE 1 skb->data 4096-ptr_max
PARAM_VALUE 1 skb->data->rst 0
PARAM_VALUE 1 skb->data->words 4096-ptr_max
PARAM_VALUE 1 skb->ip_summed 0,2-3
PARAM_VALUE 1 skb->next->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 skb->next->sk->ns_tracker->dead 0-1
PARAM_VALUE 1 skb->next->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 skb->next->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 skb->next->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 skb->next->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 1 skb->next->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 1 skb->next->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 skb->next->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 skb->next->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 skb->next->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 1 skb->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 1 skb->sk->ns_tracker->dead 0-1
PARAM_VALUE 1 skb->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 1 skb->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 skb->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 skb->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 1 skb->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 1 skb->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 skb->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 skb->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 1 skb->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 1 *skb->dev->name 0-255
PARAM_VALUE 2 th 4096-ptr_max
PARAM_VALUE 2 th->rst 0
PARAM_VALUE 2 th->words 4096-ptr_max
BUF_SIZE 1 skb (-1)-s32max
BUF_SIZE 1 skb (-1)-s32max
BUF_SIZE 2 th 1-s32max
BUF_SIZE 2 th 1-s32max
CAPPED_DATA 0 sk 1
CAPPED_DATA 1 skb 1
DATA_SOURCE 0 sk $0
DATA_SOURCE 1 skb $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 0 sk->sk_backlog.head->csum 0-4294967040[c]
HOST_DATA 0 sk->sk_backlog.tail->csum 0-4294967040[c]
HOST_DATA 0 sk->sk_backlog.tail->next->csum 0-4294967040[c]
HOST_DATA 0 sk->sk_receive_queue.prev->csum_offset 0-u16max
HOST_DATA 0 sk->sk_receive_queue.prev->data_len 0-u32max[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->csum_offset 0-u16max
HOST_DATA 0 sk->sk_receive_queue.prev->next->data_len 0-u32max[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->truesize 0-u32max
HOST_DATA 0 sk->sk_receive_queue.prev->truesize 0-u32max
HOST_DATA 1 skb->csum 0-4294967041[c]
HOST_DATA 1 skb->csum_offset 0-u16max
HOST_DATA 1 skb->data_len 0-u32max[c]
HOST_DATA 1 skb->len 0-u32max[c]
HOST_DATA 1 skb->prev->csum_offset 0-u16max
HOST_DATA 1 skb->prev->data_len 0-u32max[c]
HOST_DATA 1 skb->prev->len 1-u32max[c]
HOST_DATA 1 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *skb->data 0-255
USER_DATA 2 th->ack 0-1[u]
USER_DATA 2 th->ack_seq 0-u32max[u]
USER_DATA 2 th->ae 0-1[u]
USER_DATA 2 th->check 0-u16max[u]
USER_DATA 2 th->cwr 0-1[u]
USER_DATA 2 th->dest 0-u16max[u]
USER_DATA 2 th->doff 0-15[u]
USER_DATA 2 th->ece 0-1[u]
USER_DATA 2 th->fin 0-1[u]
USER_DATA 2 th->psh 0-1[u]
USER_DATA 2 th->res1 0-7[u]
USER_DATA 2 th->rst 0[u]
USER_DATA 2 th->seq 0-u32max[u]
USER_DATA 2 th->source 0-u16max[u]
USER_DATA 2 th->syn 0-1[u]
USER_DATA 2 th->urg 0-1[u]
USER_DATA 2 th->urg_ptr 0-u16max[u]
USER_DATA 2 th->window 0-u16max[u]
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_prot_creator->twsk_prot->twsk_slab->sheaf_capacity
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->truesize
NO_OVERFLOW_SIMPLE 1 skb->data_len
NO_OVERFLOW_SIMPLE 1 skb->dev->group
NO_OVERFLOW_SIMPLE 1 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 1 skb->dev->proto_down
NO_OVERFLOW_SIMPLE 1 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 skb->end
NO_OVERFLOW_SIMPLE 1 skb->len
NO_OVERFLOW_SIMPLE 1 skb->next->data_len
NO_OVERFLOW_SIMPLE 1 skb->next->end
NO_OVERFLOW_SIMPLE 1 skb->next->len
NO_OVERFLOW_SIMPLE 1 skb->next->tail
NO_OVERFLOW_SIMPLE 1 skb->next->truesize
NO_OVERFLOW_SIMPLE 1 skb->prev->data_len
NO_OVERFLOW_SIMPLE 1 skb->prev->end
NO_OVERFLOW_SIMPLE 1 skb->prev->len
NO_OVERFLOW_SIMPLE 1 skb->prev->tail
NO_OVERFLOW_SIMPLE 1 skb->prev->truesize
NO_OVERFLOW_SIMPLE 1 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 skb->tail
NO_OVERFLOW_SIMPLE 1 skb->truesize
UNITS 0 sk unit_byte
UNITS 1 skb unit_byte
UNITS 2 th unit_byte
USER_PTR 2 th
HALF_LOCKED2 0 sk
HALF_LOCKED2 0 &sk->sk_lock.slock