Documented in 1 files:

Defined in 1 files as a function:

Referenced in 8 files:

Smatch caller information:

drivers/net/can/dev/rx-offload.c __skb_queue_add_sort() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 1-u64max
PARAM_VALUE 2 newsk 4096-ptr_max
BUF_SIZE 2 newsk (-1)-s32max
BUF_SIZE 2 newsk (-1)-s32max
CAPPED_DATA 0 list 1
DATA_SOURCE 0 list $0
DATA_SOURCE 2 newsk $1
PARAM_COMPARE 0 list != $1
PARAM_COMPARE 0 list != $1
PARAM_COMPARE 1 prev != $0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 0 list unit_byte
UNITS 1 prev unit_byte

drivers/net/can/dev/rx-offload.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
BUF_SIZE 2 newsk (-1)-s32max
BUF_SIZE 2 newsk (-1)-s32max
CAPPED_DATA 0 list 1
CAPPED_DATA 1 prev 1
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 0 list unit_byte
UNITS 1 prev unit_byte

drivers/net/wireless/intersil/p54/txrx.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 0 list->qlen 0-31,33-u32max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 0 list unit_byte
UNITS 1 prev unit_byte
LOCK2 &priv->tx_queue.lock
LOCK2 flags
HALF_LOCKED2 &priv->conf_mutex
HALF_LOCKED2 &priv->eeprom_mutex
TYPE_LOCK (struct sk_buff_head)->lock

drivers/net/wireless/intersil/p54/txrx.c p54_assign_address() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 0 list->qlen 0-31,33-u32max
PARAM_VALUE 1 prev 1-u64max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD <- disables preempt
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 0 list unit_byte
UNITS 1 prev unit_byte
LOCK2 &priv->tx_queue.lock
LOCK2 flags
HALF_LOCKED2 &priv->conf_mutex
HALF_LOCKED2 &priv->eeprom_mutex
TYPE_LOCK (struct sk_buff_head)->lock

drivers/net/wireless/morsemicro/mm81x/skbq.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
CAPPED_DATA 0 list 1
CAPPED_DATA 1 prev 1
CAPPED_DATA 2 newsk->len 1
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
NOCHECK_CALL
UNITS 2 newsk unit_byte
LOCK2 &mq->lock
LOCK2 bh
TYPE_LOCK (struct mm81x_skbq)->lock

drivers/net/ethernet/netronome/nfp/nfd3/dp.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
LOCK2 &r_vec->lock
HALF_LOCKED2 bh
TYPE_LOCK (struct nfp_net_r_vector)->lock

drivers/net/xen-netfront.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 7017782652513509376
PARAM_VALUE 1 prev 7017782652513509376
PARAM_VALUE 2 newsk 0,4096-7017782652513509376
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
LOCK2 &queue->rx_lock
HALF_LOCKED2 &ni->dev_lock
HALF_LOCKED2 bh
HALF_LOCKED2 rcu_read
TYPE_LOCK (struct netfront_queue)->rx_lock

drivers/net/ethernet/netronome/nfp/nfdk/dp.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
LOCK2 &r_vec->lock
HALF_LOCKED2 bh
TYPE_LOCK (struct nfp_net_r_vector)->lock

net/core/skbuff.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 2 newsk 0,4096-ptr_max
BUF_SIZE 0 list (-1)-0,96
BUF_SIZE 0 list (-1)-0,96
BUF_SIZE 1 prev (-1)-0,96
BUF_SIZE 1 prev (-1)-0,96
BUF_SIZE 2 newsk (-1)-s32max
BUF_SIZE 2 newsk (-1)-s32max
CAPPED_DATA 2 newsk 1
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 2 newsk->csum_offset 0-u16max
HOST_DATA 2 newsk->data_len 0-u32max[c]
HOST_DATA 2 newsk->len 0-u32max[c]
HOST_DATA 2 newsk->prev->csum_offset 0-u16max
HOST_DATA 2 newsk->prev->data_len 0-u32max[c]
HOST_DATA 2 newsk->prev->len 0-u32max[c]
HOST_DATA 2 newsk->prev->truesize 0-u32max
HOST_DATA 2 newsk->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 newsk->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 newsk->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 newsk->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 *newsk->data 0-255
NO_OVERFLOW_SIMPLE 0 list->next->data_len
NO_OVERFLOW_SIMPLE 0 list->next->prev->data_len
NO_OVERFLOW_SIMPLE 2 newsk->data_len
NO_OVERFLOW_SIMPLE 2 newsk->dev->group
NO_OVERFLOW_SIMPLE 2 newsk->dev->num_tc
NO_OVERFLOW_SIMPLE 2 newsk->dev->proto_down
NO_OVERFLOW_SIMPLE 2 newsk->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 2 newsk->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 2 newsk->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 2 newsk->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 2 newsk->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 2 newsk->end
NO_OVERFLOW_SIMPLE 2 newsk->extensions
NO_OVERFLOW_SIMPLE 2 newsk->len
NO_OVERFLOW_SIMPLE 2 newsk->next->end
NO_OVERFLOW_SIMPLE 2 newsk->next->len
NO_OVERFLOW_SIMPLE 2 newsk->next->tail
NO_OVERFLOW_SIMPLE 2 newsk->next->truesize
NO_OVERFLOW_SIMPLE 2 newsk->prev->data_len
NO_OVERFLOW_SIMPLE 2 newsk->prev->end
NO_OVERFLOW_SIMPLE 2 newsk->prev->len
NO_OVERFLOW_SIMPLE 2 newsk->prev->tail
NO_OVERFLOW_SIMPLE 2 newsk->prev->truesize
NO_OVERFLOW_SIMPLE 2 newsk->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 2 newsk->tail
NO_OVERFLOW_SIMPLE 2 newsk->truesize
UNITS 0 list unit_byte
UNITS 1 prev unit_byte
UNITS 2 newsk unit_byte
LOCK2 0 &list->lock
HALF_LOCKED2 &bcsp->unack.lock
HALF_LOCKED2 &commonring->lock
HALF_LOCKED2 &data->lock
HALF_LOCKED2 &data->open_mutex
HALF_LOCKED2 &fws->spinlock
HALF_LOCKED2 &h5->unack.lock
HALF_LOCKED2 &idev->hu_lock
HALF_LOCKED2 &lapb->lock
HALF_LOCKED2 &local->queue_stop_reason_lock
HALF_LOCKED2 &mux->rx_lock
HALF_LOCKED2 &pch->downl
HALF_LOCKED2 &pool->lock
HALF_LOCKED2 &ppp->wlock
HALF_LOCKED2 &shdlc->state_mutex
HALF_LOCKED2 &skb_queue->lock
HALF_LOCKED2 &wl->mutex
HALF_LOCKED2 Flags
HALF_LOCKED2 bh
HALF_LOCKED2 flags
HALF_LOCKED2 fws->flags
HALF_LOCKED2 global &rfcomm_mutex
HALF_LOCKED2 rcu_read
HALF_LOCKED2 sk
TYPE_LOCK (struct sk_buff_head)->lock

net/core/skbuff.c skb_append() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 1 prev->next 4096-ptr_max
PARAM_VALUE 1 prev->next->prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $2
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD <- disables preempt
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
NO_OVERFLOW_SIMPLE 1 prev->next->data_len
NO_OVERFLOW_SIMPLE 1 prev->next->prev->data_len
NO_OVERFLOW_SIMPLE 2 newsk->next->data_len
LOCK2 flags
LOCK2 0 &list->lock
HALF_LOCKED2 &lapb->lock
HALF_LOCKED2 bh
TYPE_LOCK (struct sk_buff_head)->lock

net/tipc/socket.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
LOCK2 new_sk
LOCK2 sk

net/sched/sch_dualpi2.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HALF_LOCKED2 rcu_read

drivers/net/wireless/ath/ath10k/htt_rx.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 2162693216325697536
PARAM_VALUE 1 prev 2162693216325697536
PARAM_VALUE 2 newsk 4096-2162693216325697536
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
CAPPED_DATA 0 list->next 1
CAPPED_DATA 1 prev->next 1
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 0 list unit_byte
UNITS 1 prev unit_byte
HALF_LOCKED2 &ni->dev_lock
HALF_LOCKED2 rcu_read

drivers/scsi/fcoe/fcoe_transport.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
NO_OVERFLOW_SIMPLE 2 newsk->tail
LOCK2 &port->fcoe_pending_queue.lock
LOCK2 bh
TYPE_LOCK (struct sk_buff_head)->lock

net/tls/tls_sw.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HALF_LOCKED2 sk

drivers/net/usb/lan78xx.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
LOCK2 &dev->txq_pend.lock
LOCK2 flags
HALF_LOCKED2 &ni->dev_lock
HALF_LOCKED2 bh
HALF_LOCKED2 rcu_read
TYPE_LOCK (struct sk_buff_head)->lock

drivers/net/usb/r8152.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 2962894155746627584
PARAM_VALUE 1 prev 2962894155746627584
PARAM_VALUE 2 newsk 4096-2962894155746627584
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HALF_LOCKED2 bh

net/vmw_vsock/virtio_transport.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
NOCHECK_CALL
LOCK2 &vsock->tx_lock
LOCK2 bh
LOCK2 0 &list->lock
HALF_LOCKED2 &pool->lock
TYPE_LOCK (struct sk_buff_head)->lock
TYPE_LOCK (struct virtio_vsock)->tx_lock

drivers/net/wireless/ath/ath6kl/debug.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
NOCHECK_CALL
LOCK2 &ar->debug.fwlog_queue.lock
TYPE_LOCK (struct sk_buff_head)->lock

drivers/net/wireless/broadcom/brcm80211/brcmfmac/fwsignal.c brcmf_fws_enq() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
BUF_SIZE 0 list 96
CAPPED_DATA 0 list 1
CAPPED_DATA 1 prev 1
CAPPED_DATA 2 newsk->priority 1
DATA_SOURCE 2 newsk $3
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
NO_OVERFLOW_SIMPLE 2 newsk->data_len
NO_OVERFLOW_SIMPLE 2 newsk->dev->group
NO_OVERFLOW_SIMPLE 2 newsk->dev->num_tc
NO_OVERFLOW_SIMPLE 2 newsk->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 2 newsk->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 2 newsk->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 2 newsk->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 2 newsk->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 2 newsk->end
NO_OVERFLOW_SIMPLE 2 newsk->extensions
NO_OVERFLOW_SIMPLE 2 newsk->len
NO_OVERFLOW_SIMPLE 2 newsk->prev->data_len
NO_OVERFLOW_SIMPLE 2 newsk->prev->end
NO_OVERFLOW_SIMPLE 2 newsk->prev->len
NO_OVERFLOW_SIMPLE 2 newsk->prev->tail
NO_OVERFLOW_SIMPLE 2 newsk->prev->truesize
NO_OVERFLOW_SIMPLE 2 newsk->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 2 newsk->tail
NO_OVERFLOW_SIMPLE 2 newsk->truesize
LOCK2 &fws->spinlock
LOCK2 fws->flags
HALF_LOCKED2 &pool->lock
TYPE_LOCK (struct brcmf_fws_info)->spinlock

net/tipc/msg.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->prev 0
BUF_SIZE 0 list 96
BUF_SIZE 1 prev 96
BUF_SIZE 1 prev 96
CAPPED_DATA 0 list 1
CAPPED_DATA 1 prev 1
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 0 list->next->csum 0-126976[c]
HOST_DATA 0 list->next->csum_offset 0-u16max
HOST_DATA 0 list->next->data_len 0-u32max[c]
HOST_DATA 0 list->next->len 0-u32max[c]
HOST_DATA 0 list->next->prev->csum 0-126976[c]
HOST_DATA 0 list->next->prev->csum_offset 0-u16max
HOST_DATA 0 list->next->prev->data_len 0-u32max[c]
HOST_DATA 0 list->next->prev->len 0-u32max[c]
HOST_DATA 0 list->prev->csum 0-65024[c]
HOST_DATA 0 list->prev->csum_offset 0-u16max
HOST_DATA 0 list->prev->data_len 0-u32max[c]
HOST_DATA 0 list->prev->len 0-u32max[c]
HOST_DATA 0 list->prev->next->csum 0-65024[c]
HOST_DATA 0 list->prev->next->csum_offset 0-u16max
HOST_DATA 0 list->prev->next->data_len 0-u32max[c]
HOST_DATA 0 list->prev->next->len 0-u32max[c]
HOST_DATA 0 list->prev->next->truesize 0-u32max
HOST_DATA 0 list->prev->next->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 list->prev->truesize 0-u32max
HOST_DATA 0 list->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 newsk->csum 0-4294967040[c]
HOST_DATA 2 newsk->csum_offset 0-u16max
HOST_DATA 2 newsk->data_len 0-u32max[c]
HOST_DATA 2 newsk->len 0-u32max[c]
HOST_DATA 2 newsk->next->csum_offset 0-u16max
HOST_DATA 2 newsk->next->data_len 0-u32max[c]
HOST_DATA 2 newsk->next->len 0-u32max[c]
HOST_DATA 2 newsk->prev->csum_offset 0-u16max
HOST_DATA 2 newsk->prev->data_len 0-u32max[c]
HOST_DATA 2 newsk->prev->len 1-u32max[c]
HOST_DATA 2 newsk->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 newsk->truesize 0-u32max
HOST_DATA 2 newsk->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 newsk->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 *newsk->data 0-255
NO_OVERFLOW_SIMPLE 0 list->next->end
NO_OVERFLOW_SIMPLE 0 list->next->prev->end
NO_OVERFLOW_SIMPLE 0 list->prev->data_len
NO_OVERFLOW_SIMPLE 0 list->prev->end
NO_OVERFLOW_SIMPLE 0 list->prev->len
NO_OVERFLOW_SIMPLE 0 list->prev->next->data_len
NO_OVERFLOW_SIMPLE 0 list->prev->next->end
NO_OVERFLOW_SIMPLE 0 list->prev->next->len
NO_OVERFLOW_SIMPLE 0 list->prev->next->tail
NO_OVERFLOW_SIMPLE 0 list->prev->next->truesize
NO_OVERFLOW_SIMPLE 0 list->prev->tail
NO_OVERFLOW_SIMPLE 0 list->prev->truesize
NO_OVERFLOW_SIMPLE 2 newsk->data_len
NO_OVERFLOW_SIMPLE 2 newsk->dev->group
NO_OVERFLOW_SIMPLE 2 newsk->dev->num_tc
NO_OVERFLOW_SIMPLE 2 newsk->dev->proto_down
NO_OVERFLOW_SIMPLE 2 newsk->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 2 newsk->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 2 newsk->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 2 newsk->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 2 newsk->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 2 newsk->end
NO_OVERFLOW_SIMPLE 2 newsk->len
NO_OVERFLOW_SIMPLE 2 newsk->next->data_len
NO_OVERFLOW_SIMPLE 2 newsk->next->end
NO_OVERFLOW_SIMPLE 2 newsk->next->len
NO_OVERFLOW_SIMPLE 2 newsk->next->prev->data_len
NO_OVERFLOW_SIMPLE 2 newsk->next->prev->tail
NO_OVERFLOW_SIMPLE 2 newsk->next->prev->truesize
NO_OVERFLOW_SIMPLE 2 newsk->next->tail
NO_OVERFLOW_SIMPLE 2 newsk->next->truesize
NO_OVERFLOW_SIMPLE 2 newsk->prev->end
NO_OVERFLOW_SIMPLE 2 newsk->prev->len
NO_OVERFLOW_SIMPLE 2 newsk->prev->tail
NO_OVERFLOW_SIMPLE 2 newsk->prev->truesize
NO_OVERFLOW_SIMPLE 2 newsk->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 2 newsk->tail
NO_OVERFLOW_SIMPLE 2 newsk->truesize
UNITS 2 newsk unit_byte
LOCK2 bh
HALF_LOCKED2 &le->lock
HALF_LOCKED2 &n->lock
HALF_LOCKED2 rcu_read

drivers/net/wireless/ath/wcn36xx/txrx.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
CAPPED_DATA 0 list 1
CAPPED_DATA 1 prev 1
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
UNITS 0 list unit_byte
UNITS 1 prev unit_byte
LOCK2 &ch->lock
HALF_LOCKED2 &desc->request_mutex
HALF_LOCKED2 _T->lock
HALF_LOCKED2 flags
TYPE_LOCK (struct wcn36xx_dxe_ch)->lock

drivers/vhost/vsock.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
LOCK2 &vq->mutex
LOCK2 bh
LOCK2 0 &list->lock
TYPE_LOCK (struct sk_buff_head)->lock
TYPE_LOCK (struct vhost_virtqueue)->mutex

net/bluetooth/hci_core.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
PARAM_VALUE 2 newsk->next 0
PARAM_VALUE 2 newsk->prev 0
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
RX_PATH
NOCHECK_CALL
LOCK2 &hdev->cmd_q.lock
LOCK2 flags
HALF_LOCKED2 &pool->lock
TYPE_LOCK (struct sk_buff_head)->lock

drivers/net/wireless/ath/carl9170/tx.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
CAPPED_DATA 2 newsk->head 1
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
PREEMPT_ADD
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 2 newsk->csum_offset 0-u16max
HOST_DATA 2 newsk->data_len 0-2147483648[c]
HOST_DATA 2 newsk->prev->csum_offset 0-u16max
HOST_DATA 2 newsk->prev->data_len 0-u32max[c]
HOST_DATA 2 newsk->prev->len 1-u32max[c]
HOST_DATA 2 newsk->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 newsk->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 newsk->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 *newsk->data 0-255
NO_OVERFLOW_SIMPLE 2 newsk->dev->group
NO_OVERFLOW_SIMPLE 2 newsk->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 2 newsk->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 2 newsk->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 2 newsk->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 2 newsk->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 2 newsk->end
NO_OVERFLOW_SIMPLE 2 newsk->extensions
NO_OVERFLOW_SIMPLE 2 newsk->len
NO_OVERFLOW_SIMPLE 2 newsk->prev->end
NO_OVERFLOW_SIMPLE 2 newsk->prev->len
NO_OVERFLOW_SIMPLE 2 newsk->prev->tail
NO_OVERFLOW_SIMPLE 2 newsk->prev->truesize
NO_OVERFLOW_SIMPLE 2 newsk->tail
NO_OVERFLOW_SIMPLE 2 newsk->truesize
UNITS 0 list unit_byte
UNITS 1 prev unit_byte
LOCK2 &agg->lock
LOCK2 bh
LOCK2 rcu_read
HALF_LOCKED2 &local->handle_wake_tx_queue_lock
TYPE_LOCK (struct carl9170_sta_tid)->lock

drivers/net/wireless/ath/carl9170/tx.c carl9170_tx_ampdu_queue() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
CAPPED_DATA 2 newsk->head 1
DATA_SOURCE 2 newsk $2
PARAM_COMPARE 0 list != $1
PARAM_COMPARE 1 prev != $0
PREEMPT_ADD <- disables preempt
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 2 newsk->csum_offset 0-u16max
HOST_DATA 2 newsk->data_len 0-2147483648[c]
HOST_DATA 2 newsk->prev->csum_offset 0-u16max
HOST_DATA 2 newsk->prev->data_len 0-u32max[c]
HOST_DATA 2 newsk->prev->len 1-u32max[c]
HOST_DATA 2 newsk->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 newsk->tstamp 500000002-4294967299794967295[c]
HOST_DATA 2 newsk->users.refs.counter s32min-0,2-s32max
HOST_DATA 2 *newsk->data 0-255
NO_OVERFLOW_SIMPLE 2 newsk->dev->group
NO_OVERFLOW_SIMPLE 2 newsk->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 2 newsk->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 2 newsk->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 2 newsk->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 2 newsk->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 2 newsk->end
NO_OVERFLOW_SIMPLE 2 newsk->extensions
NO_OVERFLOW_SIMPLE 2 newsk->len
NO_OVERFLOW_SIMPLE 2 newsk->next->tail
NO_OVERFLOW_SIMPLE 2 newsk->prev->end
NO_OVERFLOW_SIMPLE 2 newsk->prev->len
NO_OVERFLOW_SIMPLE 2 newsk->prev->tail
NO_OVERFLOW_SIMPLE 2 newsk->prev->truesize
NO_OVERFLOW_SIMPLE 2 newsk->tail
NO_OVERFLOW_SIMPLE 2 newsk->truesize
UNITS 0 list unit_byte
UNITS 1 prev unit_byte
LOCK2 &agg->lock
LOCK2 bh
LOCK2 rcu_read
HALF_LOCKED2 &local->handle_wake_tx_queue_lock
TYPE_LOCK (struct carl9170_sta_tid)->lock

net/sched/sch_codel.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HALF_LOCKED2 rcu_read

drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c brcmf_sdio_txpkt_prep_sg() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4698027336267026432
PARAM_VALUE 0 list->qlen 2-u32max
PARAM_VALUE 1 prev 4096-4698027336267026431,4698027336267026433-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
BUF_SIZE 2 newsk (-1)-s32max
BUF_SIZE 2 newsk (-1)-s32max
DATA_SOURCE 0 list $1
DATA_SOURCE 1 prev $2
DATA_SOURCE 2 newsk r brcmu_pkt_buf_get_skb
NOCHECK_CALL
UNITS 0 list unit_byte
UNITS 1 prev unit_byte
LOCK2 &pool->lock

net/sched/sch_fq_codel.c __skb_queue_head() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
DATA_SOURCE 0 list $0
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HALF_LOCKED2 rcu_read

net/ipv4/tcp_output.c tcp_insert_write_queue_after() -> __skb_queue_after()

Type Parameter Key Value
PARAM_VALUE 0 list 4096-ptr_max
PARAM_VALUE 1 prev 4096-ptr_max
PARAM_VALUE 2 newsk 4096-ptr_max
BUF_SIZE 2 newsk 320
BUF_SIZE 2 newsk 320
CAPPED_DATA 1 prev 1
CAPPED_DATA 2 newsk->len 1
DATA_SOURCE 1 prev $0
DATA_SOURCE 2 newsk $1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
NO_OVERFLOW_SIMPLE 2 newsk->data_len
NO_OVERFLOW_SIMPLE 2 newsk->len