Documented in 1 files:
Defined in 1 files as a function:
Referenced in 8 files:
- drivers/net/can/dev/rx-offload.c, line 103
- drivers/net/wireless/ath/carl9170/tx.c, line 1441
- drivers/net/wireless/broadcom/brcm80211/brcmfmac/fwsignal.c, line 1294
- drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c, line 2161
- drivers/net/wireless/intersil/p54/txrx.c, line 143
- include/linux/skbuff.h, line 2454
- net/core/skbuff.c, line 4155
- net/ipv4/tcp_output.c, line 1834
Smatch caller information:
drivers/net/can/dev/rx-offload.c __skb_queue_add_sort() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 1-u64max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| BUF_SIZE | 2 | newsk | (-1)-s32max |
| BUF_SIZE | 2 | newsk | (-1)-s32max |
| CAPPED_DATA | 0 | list | 1 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PARAM_COMPARE | 0 | list | != $1 |
| PARAM_COMPARE | 0 | list | != $1 |
| PARAM_COMPARE | 1 | prev | != $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | list | unit_byte |
| UNITS | 1 | prev | unit_byte |
drivers/net/can/dev/rx-offload.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| BUF_SIZE | 2 | newsk | (-1)-s32max |
| BUF_SIZE | 2 | newsk | (-1)-s32max |
| CAPPED_DATA | 0 | list | 1 |
| CAPPED_DATA | 1 | prev | 1 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | list | unit_byte |
| UNITS | 1 | prev | unit_byte |
drivers/net/wireless/intersil/p54/txrx.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 0 | list->qlen | 0-31,33-u32max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | list | unit_byte |
| UNITS | 1 | prev | unit_byte |
| LOCK2 | &priv->tx_queue.lock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &priv->conf_mutex | ||
| HALF_LOCKED2 | &priv->eeprom_mutex | ||
| TYPE_LOCK | (struct sk_buff_head)->lock |
drivers/net/wireless/intersil/p54/txrx.c p54_assign_address() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 0 | list->qlen | 0-31,33-u32max |
| PARAM_VALUE | 1 | prev | 1-u64max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | list | unit_byte |
| UNITS | 1 | prev | unit_byte |
| LOCK2 | &priv->tx_queue.lock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &priv->conf_mutex | ||
| HALF_LOCKED2 | &priv->eeprom_mutex | ||
| TYPE_LOCK | (struct sk_buff_head)->lock |
drivers/net/wireless/morsemicro/mm81x/skbq.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| CAPPED_DATA | 0 | list | 1 |
| CAPPED_DATA | 1 | prev | 1 |
| CAPPED_DATA | 2 | newsk->len | 1 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| NOCHECK_CALL | |||
| UNITS | 2 | newsk | unit_byte |
| LOCK2 | &mq->lock | ||
| LOCK2 | bh | ||
| TYPE_LOCK | (struct mm81x_skbq)->lock |
drivers/net/ethernet/netronome/nfp/nfd3/dp.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &r_vec->lock | ||
| HALF_LOCKED2 | bh | ||
| TYPE_LOCK | (struct nfp_net_r_vector)->lock |
drivers/net/xen-netfront.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 7017782652513509376 |
| PARAM_VALUE | 1 | prev | 7017782652513509376 |
| PARAM_VALUE | 2 | newsk | 0,4096-7017782652513509376 |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &queue->rx_lock | ||
| HALF_LOCKED2 | &ni->dev_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct netfront_queue)->rx_lock |
drivers/net/ethernet/netronome/nfp/nfdk/dp.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &r_vec->lock | ||
| HALF_LOCKED2 | bh | ||
| TYPE_LOCK | (struct nfp_net_r_vector)->lock |
net/core/skbuff.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 2 | newsk | 0,4096-ptr_max |
| BUF_SIZE | 0 | list | (-1)-0,96 |
| BUF_SIZE | 0 | list | (-1)-0,96 |
| BUF_SIZE | 1 | prev | (-1)-0,96 |
| BUF_SIZE | 1 | prev | (-1)-0,96 |
| BUF_SIZE | 2 | newsk | (-1)-s32max |
| BUF_SIZE | 2 | newsk | (-1)-s32max |
| CAPPED_DATA | 2 | newsk | 1 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 2 | newsk->csum_offset | 0-u16max |
| HOST_DATA | 2 | newsk->data_len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->prev->csum_offset | 0-u16max |
| HOST_DATA | 2 | newsk->prev->data_len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->prev->len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->prev->truesize | 0-u32max |
| HOST_DATA | 2 | newsk->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | newsk->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 2 | newsk->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | newsk->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 2 | *newsk->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | list->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | list->next->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->group | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->extensions | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->truesize | |
| UNITS | 0 | list | unit_byte |
| UNITS | 1 | prev | unit_byte |
| UNITS | 2 | newsk | unit_byte |
| LOCK2 | 0 | &list->lock | |
| HALF_LOCKED2 | &bcsp->unack.lock | ||
| HALF_LOCKED2 | &commonring->lock | ||
| HALF_LOCKED2 | &data->lock | ||
| HALF_LOCKED2 | &data->open_mutex | ||
| HALF_LOCKED2 | &fws->spinlock | ||
| HALF_LOCKED2 | &h5->unack.lock | ||
| HALF_LOCKED2 | &idev->hu_lock | ||
| HALF_LOCKED2 | &lapb->lock | ||
| HALF_LOCKED2 | &local->queue_stop_reason_lock | ||
| HALF_LOCKED2 | &mux->rx_lock | ||
| HALF_LOCKED2 | &pch->downl | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | &ppp->wlock | ||
| HALF_LOCKED2 | &shdlc->state_mutex | ||
| HALF_LOCKED2 | &skb_queue->lock | ||
| HALF_LOCKED2 | &wl->mutex | ||
| HALF_LOCKED2 | Flags | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | fws->flags | ||
| HALF_LOCKED2 | global &rfcomm_mutex | ||
| HALF_LOCKED2 | rcu_read | ||
| HALF_LOCKED2 | sk | ||
| TYPE_LOCK | (struct sk_buff_head)->lock |
net/core/skbuff.c skb_append() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 1 | prev->next | 4096-ptr_max |
| PARAM_VALUE | 1 | prev->next->prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $2 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | prev->next->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->data_len | |
| LOCK2 | flags | ||
| LOCK2 | 0 | &list->lock | |
| HALF_LOCKED2 | &lapb->lock | ||
| HALF_LOCKED2 | bh | ||
| TYPE_LOCK | (struct sk_buff_head)->lock |
net/tipc/socket.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | new_sk | ||
| LOCK2 | sk |
net/sched/sch_dualpi2.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
drivers/net/wireless/ath/ath10k/htt_rx.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 2162693216325697536 |
| PARAM_VALUE | 1 | prev | 2162693216325697536 |
| PARAM_VALUE | 2 | newsk | 4096-2162693216325697536 |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| CAPPED_DATA | 0 | list->next | 1 |
| CAPPED_DATA | 1 | prev->next | 1 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | list | unit_byte |
| UNITS | 1 | prev | unit_byte |
| HALF_LOCKED2 | &ni->dev_lock | ||
| HALF_LOCKED2 | rcu_read |
drivers/scsi/fcoe/fcoe_transport.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 2 | newsk->tail | |
| LOCK2 | &port->fcoe_pending_queue.lock | ||
| LOCK2 | bh | ||
| TYPE_LOCK | (struct sk_buff_head)->lock |
net/tls/tls_sw.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | sk |
drivers/net/usb/lan78xx.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &dev->txq_pend.lock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &ni->dev_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct sk_buff_head)->lock |
drivers/net/usb/r8152.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 2962894155746627584 |
| PARAM_VALUE | 1 | prev | 2962894155746627584 |
| PARAM_VALUE | 2 | newsk | 4096-2962894155746627584 |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | bh |
net/vmw_vsock/virtio_transport.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| NOCHECK_CALL | |||
| LOCK2 | &vsock->tx_lock | ||
| LOCK2 | bh | ||
| LOCK2 | 0 | &list->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct sk_buff_head)->lock | ||
| TYPE_LOCK | (struct virtio_vsock)->tx_lock |
drivers/net/wireless/ath/ath6kl/debug.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| NOCHECK_CALL | |||
| LOCK2 | &ar->debug.fwlog_queue.lock | ||
| TYPE_LOCK | (struct sk_buff_head)->lock |
drivers/net/wireless/broadcom/brcm80211/brcmfmac/fwsignal.c brcmf_fws_enq() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| BUF_SIZE | 0 | list | 96 |
| CAPPED_DATA | 0 | list | 1 |
| CAPPED_DATA | 1 | prev | 1 |
| CAPPED_DATA | 2 | newsk->priority | 1 |
| DATA_SOURCE | 2 | newsk | $3 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 2 | newsk->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->group | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->extensions | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->truesize | |
| LOCK2 | &fws->spinlock | ||
| LOCK2 | fws->flags | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct brcmf_fws_info)->spinlock |
net/tipc/msg.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| BUF_SIZE | 0 | list | 96 |
| BUF_SIZE | 1 | prev | 96 |
| BUF_SIZE | 1 | prev | 96 |
| CAPPED_DATA | 0 | list | 1 |
| CAPPED_DATA | 1 | prev | 1 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | list->next->csum | 0-126976[c] |
| HOST_DATA | 0 | list->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | list->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | list->next->len | 0-u32max[c] |
| HOST_DATA | 0 | list->next->prev->csum | 0-126976[c] |
| HOST_DATA | 0 | list->next->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | list->next->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | list->next->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | list->prev->csum | 0-65024[c] |
| HOST_DATA | 0 | list->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | list->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | list->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | list->prev->next->csum | 0-65024[c] |
| HOST_DATA | 0 | list->prev->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | list->prev->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | list->prev->next->len | 0-u32max[c] |
| HOST_DATA | 0 | list->prev->next->truesize | 0-u32max |
| HOST_DATA | 0 | list->prev->next->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | list->prev->truesize | 0-u32max |
| HOST_DATA | 0 | list->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 2 | newsk->csum | 0-4294967040[c] |
| HOST_DATA | 2 | newsk->csum_offset | 0-u16max |
| HOST_DATA | 2 | newsk->data_len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->next->csum_offset | 0-u16max |
| HOST_DATA | 2 | newsk->next->data_len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->next->len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->prev->csum_offset | 0-u16max |
| HOST_DATA | 2 | newsk->prev->data_len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->prev->len | 1-u32max[c] |
| HOST_DATA | 2 | newsk->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | newsk->truesize | 0-u32max |
| HOST_DATA | 2 | newsk->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | newsk->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 2 | *newsk->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | list->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | list->next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | list->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | list->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | list->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | list->prev->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | list->prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | list->prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | list->prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | list->prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | list->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | list->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->group | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->truesize | |
| UNITS | 2 | newsk | unit_byte |
| LOCK2 | bh | ||
| HALF_LOCKED2 | &le->lock | ||
| HALF_LOCKED2 | &n->lock | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/wireless/ath/wcn36xx/txrx.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| CAPPED_DATA | 0 | list | 1 |
| CAPPED_DATA | 1 | prev | 1 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | list | unit_byte |
| UNITS | 1 | prev | unit_byte |
| LOCK2 | &ch->lock | ||
| HALF_LOCKED2 | &desc->request_mutex | ||
| HALF_LOCKED2 | _T->lock | ||
| HALF_LOCKED2 | flags | ||
| TYPE_LOCK | (struct wcn36xx_dxe_ch)->lock |
drivers/vhost/vsock.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &vq->mutex | ||
| LOCK2 | bh | ||
| LOCK2 | 0 | &list->lock | |
| TYPE_LOCK | (struct sk_buff_head)->lock | ||
| TYPE_LOCK | (struct vhost_virtqueue)->mutex |
net/bluetooth/hci_core.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk->next | 0 |
| PARAM_VALUE | 2 | newsk->prev | 0 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &hdev->cmd_q.lock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct sk_buff_head)->lock |
drivers/net/wireless/ath/carl9170/tx.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| CAPPED_DATA | 2 | newsk->head | 1 |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| PREEMPT_ADD | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 2 | newsk->csum_offset | 0-u16max |
| HOST_DATA | 2 | newsk->data_len | 0-2147483648[c] |
| HOST_DATA | 2 | newsk->prev->csum_offset | 0-u16max |
| HOST_DATA | 2 | newsk->prev->data_len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->prev->len | 1-u32max[c] |
| HOST_DATA | 2 | newsk->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | newsk->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | newsk->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 2 | *newsk->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->group | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->extensions | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->truesize | |
| UNITS | 0 | list | unit_byte |
| UNITS | 1 | prev | unit_byte |
| LOCK2 | &agg->lock | ||
| LOCK2 | bh | ||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &local->handle_wake_tx_queue_lock | ||
| TYPE_LOCK | (struct carl9170_sta_tid)->lock |
drivers/net/wireless/ath/carl9170/tx.c carl9170_tx_ampdu_queue() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| CAPPED_DATA | 2 | newsk->head | 1 |
| DATA_SOURCE | 2 | newsk | $2 |
| PARAM_COMPARE | 0 | list | != $1 |
| PARAM_COMPARE | 1 | prev | != $0 |
| PREEMPT_ADD | <- disables preempt | ||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 2 | newsk->csum_offset | 0-u16max |
| HOST_DATA | 2 | newsk->data_len | 0-2147483648[c] |
| HOST_DATA | 2 | newsk->prev->csum_offset | 0-u16max |
| HOST_DATA | 2 | newsk->prev->data_len | 0-u32max[c] |
| HOST_DATA | 2 | newsk->prev->len | 1-u32max[c] |
| HOST_DATA | 2 | newsk->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | newsk->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | newsk->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 2 | *newsk->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->group | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->extensions | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->next->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->end | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->tail | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->truesize | |
| UNITS | 0 | list | unit_byte |
| UNITS | 1 | prev | unit_byte |
| LOCK2 | &agg->lock | ||
| LOCK2 | bh | ||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &local->handle_wake_tx_queue_lock | ||
| TYPE_LOCK | (struct carl9170_sta_tid)->lock |
net/sched/sch_codel.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c brcmf_sdio_txpkt_prep_sg() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4698027336267026432 |
| PARAM_VALUE | 0 | list->qlen | 2-u32max |
| PARAM_VALUE | 1 | prev | 4096-4698027336267026431,4698027336267026433-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| BUF_SIZE | 2 | newsk | (-1)-s32max |
| BUF_SIZE | 2 | newsk | (-1)-s32max |
| DATA_SOURCE | 0 | list | $1 |
| DATA_SOURCE | 1 | prev | $2 |
| DATA_SOURCE | 2 | newsk | r brcmu_pkt_buf_get_skb |
| NOCHECK_CALL | |||
| UNITS | 0 | list | unit_byte |
| UNITS | 1 | prev | unit_byte |
| LOCK2 | &pool->lock |
net/sched/sch_fq_codel.c __skb_queue_head() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| DATA_SOURCE | 0 | list | $0 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | rcu_read |
net/ipv4/tcp_output.c tcp_insert_write_queue_after() -> __skb_queue_after()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | list | 4096-ptr_max |
| PARAM_VALUE | 1 | prev | 4096-ptr_max |
| PARAM_VALUE | 2 | newsk | 4096-ptr_max |
| BUF_SIZE | 2 | newsk | 320 |
| BUF_SIZE | 2 | newsk | 320 |
| CAPPED_DATA | 1 | prev | 1 |
| CAPPED_DATA | 2 | newsk->len | 1 |
| DATA_SOURCE | 1 | prev | $0 |
| DATA_SOURCE | 2 | newsk | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 2 | newsk->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | newsk->len |