Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/ceph/messenger_v2.c prepare_banner() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->msgr | 4096-ptr_max |
| PARAM_VALUE | 0 | con->msgr->global_seq_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | con->mutex.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | con->mutex.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | con->mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | con->mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | con->mutex.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | con->mutex.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | con->mutex.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->state | 5 |
| PARAM_VALUE | 0 | con->v2.conn_buf_cnt | 2-16 |
| PARAM_VALUE | 0 | con->v2.global_seq | 1-u32max |
| PARAM_VALUE | 0 | con->v2.in_kvec_cnt | 1-3 |
| PARAM_VALUE | 0 | con->v2.in_sign_kvec_cnt | 1-8 |
| PARAM_VALUE | 0 | con->v2.out_iter_sendpage | 0 |
| PARAM_VALUE | 0 | con->v2.out_kvec_cnt | 0 |
| PARAM_VALUE | 1 | buf | 16,4096-ptr_max |
| PARAM_VALUE | 2 | len | 26 |
| BUF_SIZE | 1 | buf | 26 |
| BUF_SIZE | 1 | buf | 26 |
| CAPPED_DATA | 0 | con | 1 |
| DATA_SOURCE | 0 | con | $0 |
| DATA_SOURCE | 1 | buf | r alloc_conn_buf |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| LOCK2 | 0 | &con->mutex | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct ceph_connection)->mutex |
net/ceph/messenger_v2.c prepare_epilogue_plain() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->peer_reset | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->sparse_read | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.out_epil.late_status | 1,14 |
| PARAM_VALUE | 0 | con->v2.out_iter_sendpage | 0 |
| PARAM_VALUE | 0 | con->v2.out_kvec_cnt | 0-8 |
| PARAM_VALUE | 0 | con->v2.out_state | 1-2,4-6 |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| PARAM_VALUE | 2 | len | 13 |
| BUF_SIZE | 1 | buf | 16 |
| DATA_SOURCE | 0 | con | $0 |
| NOSPEC | 0 | con->v2.out_cursor.lastlen | |
| NOSPEC | 0 | con->v2.out_cursor.resid | |
| HARD_MAX | 0 | con->v2.out_state | 6 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v2.out_cursor.bio_iter.iter.bi_size | 1-s32max[c] |
| USER_DATA | 0 | con->v2.out_cursor.bvec_iter.bi_size | 1-s32max[c] |
| USER_DATA | 0 | con->v2.out_cursor.iov_iter.count | 0-u64max |
| USER_DATA | 0 | con->v2.out_cursor.iov_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 0 | con->v2.out_cursor.lastlen | 1-4096[c] |
| USER_DATA | 0 | con->v2.out_cursor.need_crc | 0-1 |
| USER_DATA | 0 | con->v2.out_cursor.page_offset | 0-2559[c] |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| USER_DATA | 0 | con->v2.out_iter.count | 0-7442450943,18446744071562067969-u64max |
| HALF_LOCKED2 | 0 | &con->mutex |
net/ceph/messenger_v2.c prepare_head_plain() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->peer_reset | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->sparse_read | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.con_mode | s32min-1,3-s32max |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| PARAM_VALUE | 2 | len | (-2147483612)-35 |
| BUF_SIZE | 1 | buf | (-1),72,84,96,512 |
| BUF_SIZE | 1 | buf | (-1),72,84,96,512 |
| DATA_SOURCE | 0 | con | $0 |
| DATA_SOURCE | 1 | buf | $1 |
| NOSPEC | 0 | con->v2.out_bvec.bv_len | |
| NOSPEC | 0 | con->v2.out_cursor.resid | |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v1.actual_peer_addr.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v1.peer_addr_for_me.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v2.con_mode | 1 |
| USER_DATA | 0 | con->v2.out_bvec.bv_len | 1-1000000000[c] |
| USER_DATA | 0 | con->v2.out_bvec.bv_offset | 0-4095[c] |
| USER_DATA | 0 | con->v2.out_cursor.bvec_iter.bi_size | 1-s32max[c] |
| USER_DATA | 0 | con->v2.out_cursor.iov_iter.count | 0-u64max |
| USER_DATA | 0 | con->v2.out_cursor.lastlen | 1-4096[c] |
| USER_DATA | 0 | con->v2.out_cursor.need_crc | 0-1 |
| USER_DATA | 0 | con->v2.out_cursor.page_offset | 0-2559[c] |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.auth->authorizer_buf_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.out_connect.authorizer_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v2.out_iter.count | |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | 0 | &con->mutex |
net/ceph/messenger_v2.c prepare_head_plain() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->peer_reset | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->sparse_read | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.con_mode | s32min-1,3-s32max |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| PARAM_VALUE | 1 | *buf | 0-u16max |
| BUF_SIZE | 1 | buf | (-1),72,84,96,512 |
| BUF_SIZE | 1 | buf | (-1),72,84,96,512 |
| DATA_SOURCE | 0 | con | $0 |
| DATA_SOURCE | 1 | buf | $1 |
| NOSPEC | 0 | con->v2.out_bvec.bv_len | |
| NOSPEC | 0 | con->v2.out_cursor.resid | |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v1.actual_peer_addr.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v1.peer_addr_for_me.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v2.con_mode | 1 |
| USER_DATA | 0 | con->v2.out_bvec.bv_len | 1-1000000000[c] |
| USER_DATA | 0 | con->v2.out_bvec.bv_offset | 0-4095[c] |
| USER_DATA | 0 | con->v2.out_cursor.iov_iter.count | 0-u64max |
| USER_DATA | 0 | con->v2.out_cursor.page_offset | 0-2559[c] |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.auth->authorizer_buf_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.out_connect.authorizer_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v2.out_iter.count | |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | 0 | &con->mutex |
net/ceph/messenger_v2.c prepare_head_plain() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->peer_reset | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->sparse_read | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.con_mode | s32min-1,3-s32max |
| PARAM_VALUE | 0 | con->v2.out_kvec_cnt | 1-8 |
| PARAM_VALUE | 2 | len | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | con | $0 |
| DATA_SOURCE | 1 | buf | $3 |
| DATA_SOURCE | 2 | len | $4 |
| NOSPEC | 0 | con->v2.out_bvec.bv_len | |
| NOSPEC | 0 | con->v2.out_cursor.resid | |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v1.actual_peer_addr.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v1.peer_addr_for_me.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v2.con_mode | 1 |
| USER_DATA | 0 | con->v2.out_bvec.bv_len | 1-1000000000[c] |
| USER_DATA | 0 | con->v2.out_bvec.bv_offset | 0-4095[c] |
| USER_DATA | 0 | con->v2.out_cursor.iov_iter.count | 0-u64max |
| USER_DATA | 0 | con->v2.out_cursor.page_offset | 0-2559[c] |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.auth->authorizer_buf_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.out_connect.authorizer_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v2.out_iter.count | |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | 0 | &con->mutex |
net/ceph/messenger_v2.c prepare_head_plain() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->peer_reset | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->sparse_read | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.con_mode | s32min-1,3-s32max |
| PARAM_VALUE | 0 | con->v2.out_kvec_cnt | 2-8 |
| PARAM_VALUE | 2 | len | 4 |
| DATA_SOURCE | 0 | con | $0 |
| NOSPEC | 0 | con->v2.out_bvec.bv_len | |
| NOSPEC | 0 | con->v2.out_cursor.resid | |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v1.actual_peer_addr.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v1.peer_addr_for_me.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v2.con_mode | 1 |
| USER_DATA | 0 | con->v2.out_bvec.bv_len | 1-1000000000[c] |
| USER_DATA | 0 | con->v2.out_bvec.bv_offset | 0-4095[c] |
| USER_DATA | 0 | con->v2.out_cursor.iov_iter.count | 0-u64max |
| USER_DATA | 0 | con->v2.out_cursor.page_offset | 0-2559[c] |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.auth->authorizer_buf_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.out_connect.authorizer_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v2.out_iter.count | |
| UNITS | 1 | buf | unit_byte |
| HALF_LOCKED2 | 0 | &con->mutex |
net/ceph/messenger_v2.c prepare_head_secure_big() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->peer_reset | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->sparse_read | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->state | 8-9,11-12 |
| PARAM_VALUE | 0 | con->v2.con_mode | 2 |
| PARAM_VALUE | 0 | con->v2.gcm_req | 4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.gcm_req->assoclen | 0 |
| PARAM_VALUE | 0 | con->v2.gcm_req->dst | 5571107025374945280 |
| PARAM_VALUE | 0 | con->v2.gcm_req->iv | 4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.gcm_req->src | 5571107025374945280 |
| PARAM_VALUE | 0 | con->v2.gcm_wait.completion.done | 0 |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| PARAM_VALUE | 1 | *buf | 0-u16max |
| BUF_SIZE | 1 | buf | (-1),96 |
| BUF_SIZE | 1 | buf | (-1),96 |
| CAPPED_DATA | 1 | buf | 1 |
| DATA_SOURCE | 0 | con | $0 |
| DATA_SOURCE | 1 | buf | $1 |
| NOSPEC | 0 | con->v2.out_cursor.resid | |
| HARD_MAX | 0 | con->state | 12 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v1.actual_peer_addr.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v1.peer_addr_for_me.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v2.con_mode | 2 |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.auth->authorizer_buf_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.out_connect.authorizer_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v2.out_iter.count | |
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | 0 | &con->mutex |
net/ceph/messenger_v2.c prepare_head_secure_big() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->peer_reset | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->sparse_read | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->state | 8-9,11-12 |
| PARAM_VALUE | 0 | con->v2.con_mode | 2 |
| PARAM_VALUE | 0 | con->v2.gcm_req | 4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.gcm_req->assoclen | 0 |
| PARAM_VALUE | 0 | con->v2.gcm_req->dst | 5571107025374945280 |
| PARAM_VALUE | 0 | con->v2.gcm_req->iv | 4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.gcm_req->src | 5571107025374945280 |
| PARAM_VALUE | 0 | con->v2.gcm_wait.completion.done | 0 |
| PARAM_VALUE | 0 | con->v2.out_kvec_cnt | 1-8 |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| PARAM_VALUE | 2 | len | 16 |
| CAPPED_DATA | 1 | buf | 1 |
| DATA_SOURCE | 0 | con | $0 |
| NOSPEC | 0 | con->v2.out_cursor.resid | |
| HARD_MAX | 0 | con->state | 12 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v1.actual_peer_addr.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v1.peer_addr_for_me.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v2.con_mode | 2 |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.auth->authorizer_buf_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.out_connect.authorizer_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v2.out_iter.count | |
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | 0 | &con->mutex |
net/ceph/messenger_v2.c prepare_head_secure_big() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->peer_reset | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->sparse_read | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->state | 8-9,11-12 |
| PARAM_VALUE | 0 | con->v2.con_mode | 2 |
| PARAM_VALUE | 0 | con->v2.gcm_req | 4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.gcm_req->assoclen | 0 |
| PARAM_VALUE | 0 | con->v2.gcm_req->dst | 5571107025374945280 |
| PARAM_VALUE | 0 | con->v2.gcm_req->iv | 4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.gcm_req->src | 5571107025374945280 |
| PARAM_VALUE | 0 | con->v2.gcm_wait.completion.done | 0 |
| PARAM_VALUE | 0 | con->v2.out_kvec_cnt | 2-8 |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| CAPPED_DATA | 1 | buf | 1 |
| DATA_SOURCE | 0 | con | $0 |
| NOSPEC | 0 | con->v2.out_cursor.resid | |
| HARD_MAX | 0 | con->state | 12 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v1.actual_peer_addr.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v1.peer_addr_for_me.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v2.con_mode | 2 |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.auth->authorizer_buf_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.out_connect.authorizer_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v2.out_iter.count | |
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | 0 | &con->mutex |
net/ceph/messenger_v2.c prepare_head_secure_small() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->peer_reset | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->sparse_read | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->state | 8-9,11-12 |
| PARAM_VALUE | 0 | con->v2.con_mode | 2 |
| PARAM_VALUE | 0 | con->v2.gcm_req | 4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.gcm_req->assoclen | 0 |
| PARAM_VALUE | 0 | con->v2.gcm_req->cryptlen | 80 |
| PARAM_VALUE | 0 | con->v2.gcm_req->dst | 4837228935406977024 |
| PARAM_VALUE | 0 | con->v2.gcm_req->iv | 4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.gcm_req->src | 4837228935406977024 |
| PARAM_VALUE | 0 | con->v2.gcm_wait.completion.done | 0 |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| PARAM_VALUE | 2 | len | 96 |
| BUF_SIZE | 1 | buf | (-1),96 |
| BUF_SIZE | 1 | buf | (-1),96 |
| CAPPED_DATA | 1 | buf | 1 |
| DATA_SOURCE | 0 | con | $0 |
| DATA_SOURCE | 1 | buf | $1 |
| NOSPEC | 0 | con->v2.out_cursor.resid | |
| HARD_MAX | 0 | con->state | 12 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v1.actual_peer_addr.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v1.peer_addr_for_me.in_addr.ss_family | 0-u16max |
| USER_DATA | 0 | con->v2.con_mode | 2 |
| USER_DATA | 0 | con->v2.out_cursor.bvec_iter.bi_size | 1-s32max[c] |
| USER_DATA | 0 | con->v2.out_cursor.iov_iter.count | 0-u64max |
| USER_DATA | 0 | con->v2.out_cursor.lastlen | 1-4096[c] |
| USER_DATA | 0 | con->v2.out_cursor.need_crc | 0-1 |
| USER_DATA | 0 | con->v2.out_cursor.page_offset | 0-2559[c] |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | con->sock->sk->sk_write_queue.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.auth->authorizer_buf_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v1.out_connect.authorizer_len | |
| NO_OVERFLOW_SIMPLE | 0 | con->v2.out_iter.count | |
| HALF_LOCKED2 | 0 | &con->mutex |
net/ceph/messenger_v2.c prepare_message_plain() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->out_msg | 4096-ptr_max |
| PARAM_VALUE | 0 | con->out_sent.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | con->out_sent.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | con->out_sent.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->state | 12 |
| PARAM_VALUE | 0 | con->v2.con_mode | s32min-1,3-s32max |
| PARAM_VALUE | 0 | con->v2.out_buf | 4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.out_iter_sendpage | 0 |
| PARAM_VALUE | 0 | con->v2.out_kvec_cnt | 1-8 |
| PARAM_VALUE | 0 | con->v2.out_state | 6 |
| PARAM_VALUE | 2 | len | 1-s32max |
| BUF_SIZE | 1 | buf | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | con | 1 |
| CAPPED_DATA | 0 | con->in_seq | 1 |
| DATA_SOURCE | 0 | con | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v2.out_cursor.lastlen | 1-4096[c] |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| UNITS | 1 | buf | unit_byte |
net/ceph/messenger_v2.c prepare_message_plain() -> add_out_kvec()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | con | 4096-ptr_max |
| PARAM_VALUE | 0 | con->ops->dispatch | 0,4096-ptr_max |
| PARAM_VALUE | 0 | con->out_msg | 4096-ptr_max |
| PARAM_VALUE | 0 | con->out_sent.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | con->out_sent.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | con->out_sent.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | con->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | con->state | 12 |
| PARAM_VALUE | 0 | con->v2.con_mode | s32min-1,3-s32max |
| PARAM_VALUE | 0 | con->v2.out_buf | 4096-ptr_max |
| PARAM_VALUE | 0 | con->v2.out_iter_sendpage | 0 |
| PARAM_VALUE | 0 | con->v2.out_kvec_cnt | 1-8 |
| PARAM_VALUE | 0 | con->v2.out_state | 6 |
| PARAM_VALUE | 2 | len | 1-s32max |
| BUF_SIZE | 1 | buf | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | con | 1 |
| CAPPED_DATA | 0 | con->in_seq | 1 |
| DATA_SOURCE | 0 | con | $0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | con->v2.out_cursor.lastlen | 1-4096[c] |
| USER_DATA | 0 | con->v2.out_cursor.resid | 0-u64max |
| UNITS | 1 | buf | unit_byte |