Documented in 1 files:
Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
net/tipc/socket.c __tipc_sendmsg() -> tipc_msg_build()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | mhdr | 4096-ptr_max |
| PARAM_VALUE | 0 | *mhdr->hdr | 0-4294967295 |
| PARAM_VALUE | 1 | m | 4096-ptr_max |
| PARAM_VALUE | 1 | m->msg_name | 0 |
| PARAM_VALUE | 2 | offset | 0 |
| PARAM_VALUE | 3 | dsz | 0-66000 |
| PARAM_VALUE | 5 | list | 7813506379459416064 |
| PARAM_VALUE | 5 | list->next | 7813506379459416064 |
| PARAM_VALUE | 5 | list->prev | 7813506379459416064 |
| PARAM_VALUE | 5 | list->qlen | 0 |
| BUF_SIZE | 0 | mhdr | 60 |
| BUF_SIZE | 1 | m->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | m->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 1 | m->msg_ubuf | (-1),16 |
| DATA_SOURCE | 1 | m | $1 |
| DATA_SOURCE | 3 | dsz | $2 |
| DATA_SOURCE | 4 | pktmax | r tipc_node_get_mtu |
| NOSPEC | 1 | m->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | m->msg_controllen | 0-s32max[c] |
| USER_DATA | 1 | m->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | m->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 1 | m->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | m->msg_namelen | 0-128 |
| USER_DATA | 1 | *m->msg_name | s64min-s64max |
| USER_DATA | 3 | dsz | 0-66000 |
| USER_PTR | 1 | m->msg_control | |
| USER_PTR | 1 | m->msg_name | |
| LOCK2 | sk |
net/tipc/socket.c __tipc_sendstream() -> tipc_msg_build()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | mhdr | 4096-ptr_max |
| PARAM_VALUE | 1 | m | 4096-ptr_max |
| PARAM_VALUE | 2 | offset | 0-2147483646 |
| PARAM_VALUE | 3 | dsz | 1-66000 |
| PARAM_VALUE | 5 | list | 4096-ptr_max |
| BUF_SIZE | 0 | mhdr | 60 |
| BUF_SIZE | 1 | m->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | m->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 1 | m->msg_ubuf | (-1),16 |
| BUF_SIZE | 5 | list | 96 |
| CAPPED_DATA | 2 | offset | 1 |
| CAPPED_DATA | 3 | dsz | 1 |
| CAPPED_DATA | 5 | list | 1 |
| DATA_SOURCE | 1 | m | $1 |
| FUZZY_MAX | 2 | offset | 0 |
| NOSPEC | 1 | m->msg_iter.count | |
| NOSPEC | 2 | offset | |
| NOSPEC | 3 | dsz | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | m->msg_controllen | 0-s32max[c] |
| USER_DATA | 1 | m->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | m->msg_iter.count | 0-u64max |
| USER_DATA | 1 | m->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | m->msg_namelen | 0-128 |
| USER_DATA | 1 | *m->msg_name | s64min-s64max |
| USER_DATA | 2 | offset | 0-65999[c][u] |
| USER_DATA | 3 | dsz | 1-65999[c] |
| UNITS | 4 | pktmax | unit_byte |
| USER_PTR | 1 | m->msg_control | |
| USER_PTR | 1 | m->msg_name | |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex |
net/tipc/socket.c tipc_send_group_bcast() -> tipc_msg_build()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | mhdr | 4096-ptr_max |
| PARAM_VALUE | 0 | *mhdr->hdr | 0-4294967295 |
| PARAM_VALUE | 1 | m | 4096-ptr_max |
| PARAM_VALUE | 1 | m->msg_name | 0,4096-ptr_max |
| PARAM_VALUE | 2 | offset | 0 |
| PARAM_VALUE | 3 | dsz | 0-66000 |
| PARAM_VALUE | 4 | pktmax | (-32)-65463 |
| PARAM_VALUE | 5 | list | 2189553660715999232 |
| PARAM_VALUE | 5 | list->next | 2189553660715999232 |
| PARAM_VALUE | 5 | list->prev | 2189553660715999232 |
| PARAM_VALUE | 5 | list->qlen | 0 |
| BUF_SIZE | 0 | mhdr | 60 |
| BUF_SIZE | 1 | m->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | m->msg_name | (-1)-s32max |
| BUF_SIZE | 1 | m->msg_ubuf | (-1),16 |
| DATA_SOURCE | 1 | m | $1 |
| DATA_SOURCE | 3 | dsz | $2 |
| DATA_SOURCE | 4 | pktmax | r tipc_bcast_get_mtu |
| NOSPEC | 1 | m->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | m->msg_controllen | 0-s32max[c] |
| USER_DATA | 1 | m->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | m->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 1 | m->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | m->msg_namelen | 0-128 |
| USER_DATA | 1 | *m->msg_name | s64min-s64max |
| USER_DATA | 3 | dsz | 0-66000 |
| USER_PTR | 1 | m->msg_control | |
| USER_PTR | 1 | m->msg_name | |
| HALF_LOCKED2 | sk |
net/tipc/socket.c tipc_send_group_msg() -> tipc_msg_build()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | mhdr | 4096-ptr_max |
| PARAM_VALUE | 0 | *mhdr->hdr | 0-4294967295 |
| PARAM_VALUE | 1 | m | 4096-ptr_max |
| PARAM_VALUE | 1 | m->msg_name | 4096-ptr_max |
| PARAM_VALUE | 1 | m->msg_namelen | s32min-(-1),16-s32max |
| PARAM_VALUE | 2 | offset | 0 |
| PARAM_VALUE | 3 | dsz | 0-66000 |
| PARAM_VALUE | 5 | list | 5443104656086294528 |
| PARAM_VALUE | 5 | list->next | 5443104656086294528 |
| PARAM_VALUE | 5 | list->prev | 5443104656086294528 |
| PARAM_VALUE | 5 | list->qlen | 0 |
| BUF_SIZE | 0 | mhdr | 60 |
| BUF_SIZE | 1 | m->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | m->msg_name | (-1)-s32max |
| BUF_SIZE | 1 | m->msg_ubuf | (-1),16 |
| DATA_SOURCE | 1 | m | $2 |
| DATA_SOURCE | 3 | dsz | $6 |
| DATA_SOURCE | 4 | pktmax | r tipc_node_get_mtu |
| NOSPEC | 1 | m->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | m->msg_controllen | 0-s32max[c] |
| USER_DATA | 1 | m->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | m->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 1 | m->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | m->msg_namelen | 16-128 |
| USER_DATA | 1 | *m->msg_name | s64min-s64max |
| USER_DATA | 3 | dsz | 0-66000 |
| USER_PTR | 1 | m->msg_control | |
| USER_PTR | 1 | m->msg_name | |
| HALF_LOCKED2 | sk |
net/tipc/socket.c tipc_sendmcast() -> tipc_msg_build()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | mhdr | 4096-ptr_max |
| PARAM_VALUE | 0 | *mhdr->hdr | 0-4294967295 |
| PARAM_VALUE | 1 | m | 4096-ptr_max |
| PARAM_VALUE | 1 | m->msg_name | 0,4096-ptr_max |
| PARAM_VALUE | 2 | offset | 0 |
| PARAM_VALUE | 3 | dsz | 0-66000 |
| PARAM_VALUE | 4 | pktmax | (-32)-65463 |
| PARAM_VALUE | 5 | list | 2994927922706333696 |
| PARAM_VALUE | 5 | list->next | 2994927922706333696 |
| PARAM_VALUE | 5 | list->prev | 2994927922706333696 |
| PARAM_VALUE | 5 | list->qlen | 0 |
| BUF_SIZE | 0 | mhdr | 60 |
| BUF_SIZE | 1 | m->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | m->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 1 | m->msg_ubuf | (-1),16 |
| DATA_SOURCE | 1 | m | $2 |
| DATA_SOURCE | 3 | dsz | $3 |
| DATA_SOURCE | 4 | pktmax | r tipc_bcast_get_mtu |
| NOSPEC | 1 | m->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | m->msg_controllen | 0-s32max[c] |
| USER_DATA | 1 | m->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | m->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 1 | m->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | m->msg_namelen | 0-128 |
| USER_DATA | 1 | *m->msg_name | s64min-s64max |
| USER_DATA | 3 | dsz | 0-66000 |
| USER_PTR | 1 | m->msg_control | |
| USER_PTR | 1 | m->msg_name | |
| HALF_LOCKED2 | sk |
net/tipc/msg.c tipc_msg_build() -> tipc_msg_build()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | mhdr | 4096-ptr_max |
| BUF_SIZE | 0 | mhdr | (-1),60 |
| BUF_SIZE | 0 | mhdr | (-1),60 |
| BUF_SIZE | 1 | m->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | m->msg_name | (-1)-s32max |
| BUF_SIZE | 1 | m->msg_ubuf | (-1),16 |
| BUF_SIZE | 5 | list | (-1),96 |
| BUF_SIZE | 5 | list | (-1),96 |
| DATA_SOURCE | 0 | mhdr | $0 |
| DATA_SOURCE | 1 | m | $1 |
| DATA_SOURCE | 2 | offset | $2 |
| DATA_SOURCE | 3 | dsz | $3 |
| DATA_SOURCE | 5 | list | $5 |
| NOSPEC | 1 | m->msg_iter.count | |
| NOSPEC | 2 | offset | |
| NOSPEC | 2 | offset | |
| NOSPEC | 3 | dsz | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | m->msg_controllen | 0-s32max[c] |
| USER_DATA | 1 | m->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | m->msg_iter.count | 0-u64max |
| USER_DATA | 1 | m->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | m->msg_namelen | 0-128 |
| USER_DATA | 1 | *m->msg_name | s64min-s64max |
| USER_DATA | 2 | offset | 0-65999[c][u] |
| USER_DATA | 3 | dsz | 0-66000 |
| NO_OVERFLOW_SIMPLE | 5 | list->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 5 | list->prev->end | |
| NO_OVERFLOW_SIMPLE | 5 | list->prev->len | |
| NO_OVERFLOW_SIMPLE | 5 | list->prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 5 | list->prev->next->end | |
| NO_OVERFLOW_SIMPLE | 5 | list->prev->next->len | |
| NO_OVERFLOW_SIMPLE | 5 | list->prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 5 | list->prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 5 | list->prev->tail | |
| NO_OVERFLOW_SIMPLE | 5 | list->prev->truesize | |
| UNITS | 3 | dsz | unit_byte |
| USER_PTR | 1 | m->msg_control | |
| USER_PTR | 1 | m->msg_name | |
| HALF_LOCKED2 | sk |