Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/xfrm/xfrm_user.c xfrm_alloc_userspi() -> xfrm_state_netlink()

Type Parameter Key Value
PARAM_VALUE 0 in_skb 4096-ptr_max
PARAM_VALUE 0 in_skb->data 4096-ptr_max
PARAM_VALUE 0 in_skb->data->nlmsg_flags 1-u16max
PARAM_VALUE 0 in_skb->data->nlmsg_len 16-4294967295
PARAM_VALUE 0 in_skb->data->nlmsg_type 16-u16max
PARAM_VALUE 0 in_skb->destructor 0,172217845709488128
PARAM_VALUE 0 in_skb->hdr_len 0
PARAM_VALUE 0 in_skb->head_frag 0
PARAM_VALUE 0 in_skb->len 16-u32max
PARAM_VALUE 0 in_skb->nohdr 0
PARAM_VALUE 0 in_skb->sk 0,4096-ptr_max
PARAM_VALUE 0 in_skb->sk->__sk_common.skc_net.net->gen->s.len 0-s32max
PARAM_VALUE 0 in_skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 in_skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 in_skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 in_skb->sk->__sk_common.skc_net.net->xfrm.xfrm_state_lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 in_skb->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 in_skb->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 in_skb->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_protocol 0,2,4-6,10,12,16
PARAM_VALUE 1 x 4096-ptr_max
PARAM_VALUE 1 x->byspi.pprev 4096-ptr_max
PARAM_VALUE 1 x->id.spi 1-u32max
PARAM_VALUE 1 x->km.state 1
PARAM_VALUE 1 x->lock.rlock.dep_map->name 0-255
PARAM_VALUE 1 x->xs_net.net->xfrm.xfrm_state_lock.rlock.dep_map->name 0-255
BUF_SIZE 0 in_skb (-1)-s32max
BUF_SIZE 0 in_skb (-1)-s32max
CAPPED_DATA 0 in_skb 1
CAPPED_DATA 0 in_skb->sk->__sk_common.skc_net.net 1
CAPPED_DATA 1 x->pcpu_num 1
CAPPED_DATA 1 x->xs_net.net 1
DATA_SOURCE 0 in_skb $0
FUZZY_MAX 0 in_skb->data->nlmsg_len 16
FUZZY_MAX 0 in_skb->data->nlmsg_type 16
STR_LEN 0 in_skb->sk (-1)
NOSPEC 1 x->id.spi
NOSPEC 1 x->km.seq
RX_PATH
TASK_NOT_RUNNING
USER_DATA 1 x->id.spi 1-u16max[c]
USER_DATA 1 x->km.seq 1-u32max[c]
USER_DATA 2 seq 0-u32max[u]
NO_OVERFLOW_SIMPLE 0 in_skb->end
NO_OVERFLOW_SIMPLE 0 in_skb->extensions
NO_OVERFLOW_SIMPLE 0 in_skb->len
NO_OVERFLOW_SIMPLE 0 in_skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 in_skb->tail
HALF_LOCKED2 &net->xfrm.xfrm_cfg_mutex
HALF_LOCKED2 global &audit_cmd_mutex.lock
HALF_LOCKED2 global &cb_lock
HALF_LOCKED2 global &crypto_cfg_mutex
HALF_LOCKED2 global &hwsim_phys_lock
HALF_LOCKED2 global &rtnl_mutex
HALF_LOCKED2 global &rx_queue_mutex
HALF_LOCKED2 rcu_read

net/xfrm/xfrm_user.c xfrm_get_sa() -> xfrm_state_netlink()

Type Parameter Key Value
PARAM_VALUE 0 in_skb 4096-ptr_max
PARAM_VALUE 0 in_skb->data 4096-ptr_max
PARAM_VALUE 0 in_skb->data->nlmsg_flags 1-u16max
PARAM_VALUE 0 in_skb->data->nlmsg_len 16-4294967295
PARAM_VALUE 0 in_skb->data->nlmsg_type 16-u16max
PARAM_VALUE 0 in_skb->destructor 0,172217845709488128
PARAM_VALUE 0 in_skb->hdr_len 0
PARAM_VALUE 0 in_skb->head_frag 0
PARAM_VALUE 0 in_skb->len 16-u32max
PARAM_VALUE 0 in_skb->nohdr 0
PARAM_VALUE 0 in_skb->sk 0,4096-ptr_max
PARAM_VALUE 0 in_skb->sk->__sk_common.skc_net.net->gen->s.len 0-s32max
PARAM_VALUE 0 in_skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 in_skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 in_skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 in_skb->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 in_skb->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 in_skb->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 in_skb->sk->sk_protocol 0,2,4-6,10,12,16
PARAM_VALUE 1 x 4096-ptr_max
PARAM_VALUE 1 x->refcnt.refs.counter (-1073741824),0-s32max
BUF_SIZE 0 in_skb (-1)-s32max
BUF_SIZE 0 in_skb (-1)-s32max
CAPPED_DATA 0 in_skb 1
CAPPED_DATA 0 in_skb->sk->__sk_common.skc_net.net 1
CAPPED_DATA 1 x->id.proto 1
CAPPED_DATA 1 x->mark.v 1
CAPPED_DATA 1 x->props.family 1
DATA_SOURCE 0 in_skb $0
DATA_SOURCE 1 x r xfrm_user_state_lookup
FUZZY_MAX 0 in_skb->data->nlmsg_len 16
FUZZY_MAX 0 in_skb->data->nlmsg_type 16
STR_LEN 0 in_skb->sk (-1)
RX_PATH
TASK_NOT_RUNNING
USER_DATA 2 seq 0-u32max[u]
NO_OVERFLOW_SIMPLE 0 in_skb->end
NO_OVERFLOW_SIMPLE 0 in_skb->extensions
NO_OVERFLOW_SIMPLE 0 in_skb->len
NO_OVERFLOW_SIMPLE 0 in_skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 in_skb->tail
HALF_LOCKED2 &net->xfrm.xfrm_cfg_mutex
HALF_LOCKED2 global &audit_cmd_mutex.lock
HALF_LOCKED2 global &cb_lock
HALF_LOCKED2 global &crypto_cfg_mutex
HALF_LOCKED2 global &hwsim_phys_lock
HALF_LOCKED2 global &rtnl_mutex
HALF_LOCKED2 global &rx_queue_mutex
HALF_LOCKED2 rcu_read