Open Menu /

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 2 files:

Smatch caller information:

drivers/net/usb/cdc_mbim.c cdc_mbim_tx_fixup() -> cdc_ncm_fill_tx_frame()

Type Parameter Key Value
PARAM_VALUE 0 dev 4096-ptr_max
PARAM_VALUE 0 dev->data.ctx->mtx.rlock.dep_map->name 0-255
PARAM_VALUE 0 dev->driver_info 4096-ptr_max
PARAM_VALUE 0 dev->driver_info->tx_fixup 4096-ptr_max
PARAM_VALUE 1 skb 0,4096-ptr_max
PARAM_VALUE 1 skb->data 4096-ptr_max
PARAM_VALUE 1 skb->dev 4096-ptr_max
PARAM_VALUE 1 skb->dev->ethtool_ops->get_link_ext_state 0-9223372036854775807
PARAM_VALUE 1 skb->dev->ethtool_ops->get_mm_stats 0-9223372036854775807
PARAM_VALUE 1 skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 1 skb->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 1 skb->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 1 skb->sk->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_owner->refcnt.counter 0-s32max
PARAM_VALUE 1 skb->sk->sk_prot_creator->owner->refcnt.counter 0-s32max
PARAM_VALUE 2 sign 5460041,5460804
BUF_SIZE 1 skb (-1)-s32max
BUF_SIZE 1 skb (-1)-s32max
DATA_SOURCE 0 dev $0
DATA_SOURCE 1 skb $1
FUZZY_MAX 2 sign 5460804
BIT_INFO 2 sign 0x535040,0x53534d
HARD_MAX 2 sign 5460804
PREEMPT_ADD <- disables preempt
TASK_NOT_RUNNING
HOST_DATA 1 skb->csum_offset 0-u16max
HOST_DATA 1 skb->data_len 0-2147483648[c]
HOST_DATA 1 skb->next->csum_offset 0-u16max
HOST_DATA 1 skb->next->data_len 0-u32max[c]
HOST_DATA 1 skb->next->len 1-u32max[c]
HOST_DATA 1 skb->prev->csum_offset 0-u16max
HOST_DATA 1 skb->prev->data_len 0-u32max[c]
HOST_DATA 1 skb->prev->len 0-u32max[c]
HOST_DATA 1 skb->prev->truesize 0-u32max
HOST_DATA 1 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *skb->data 0-255
NO_OVERFLOW_SIMPLE 1 skb->data_len
NO_OVERFLOW_SIMPLE 1 skb->dev->group
NO_OVERFLOW_SIMPLE 1 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 1 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 skb->end
NO_OVERFLOW_SIMPLE 1 skb->extensions
NO_OVERFLOW_SIMPLE 1 skb->len
NO_OVERFLOW_SIMPLE 1 skb->prev->data_len
NO_OVERFLOW_SIMPLE 1 skb->prev->end
NO_OVERFLOW_SIMPLE 1 skb->prev->len
NO_OVERFLOW_SIMPLE 1 skb->prev->tail
NO_OVERFLOW_SIMPLE 1 skb->prev->truesize
NO_OVERFLOW_SIMPLE 1 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 skb->tail
NO_OVERFLOW_SIMPLE 1 skb->truesize
LOCK2 &ctx->mtx
LOCK2 bh
HALF_LOCKED2 &net->tx_global_lock
HALF_LOCKED2 &of->mutex
HALF_LOCKED2 &txq->_xmit_lock
HALF_LOCKED2 flags
HALF_LOCKED2 rcu_read
TYPE_LOCK (struct cdc_ncm_ctx)->mtx

drivers/net/usb/cdc_ncm.c cdc_ncm_tx_fixup() -> cdc_ncm_fill_tx_frame()

Type Parameter Key Value
PARAM_VALUE 0 dev 4096-ptr_max
PARAM_VALUE 0 dev->data 4096-ptr_max
PARAM_VALUE 0 dev->driver_info 4096-ptr_max
PARAM_VALUE 0 dev->driver_info->tx_fixup 4096-ptr_max
PARAM_VALUE 1 skb 0,4096-ptr_max
PARAM_VALUE 1 skb->dev->ethtool_ops->get_link_ext_state 0-9223372036854775807
PARAM_VALUE 1 skb->dev->ethtool_ops->get_mm_stats 0-9223372036854775807
PARAM_VALUE 1 skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 1 skb->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 1 skb->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine_avail 0-4294967295
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->ns.__ns_ref.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->passive.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->refcnt_tracker.quarantine_avail 0-4294967295
PARAM_VALUE 1 skb->sk->__sk_common.skc_refcnt.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_backlog.rmem_alloc.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_error_queue.qlen 0-4294967295
PARAM_VALUE 1 skb->sk->sk_omem_alloc.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_owner->refcnt.counter 0-s32max
PARAM_VALUE 1 skb->sk->sk_peer_pid->count.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_prot_creator->owner->refcnt.counter 0-s32max
PARAM_VALUE 1 skb->sk->sk_wmem_alloc.refs.counter s32min-s32max
PARAM_VALUE 2 sign 810369870
BUF_SIZE 1 skb (-1)-s32max
BUF_SIZE 1 skb (-1)-s32max
DATA_SOURCE 0 dev $0
DATA_SOURCE 1 skb $1
PREEMPT_ADD <- disables preempt
TASK_NOT_RUNNING
HOST_DATA 1 skb->csum_offset 0-u16max
HOST_DATA 1 skb->data_len 0-2147483648[c]
HOST_DATA 1 skb->len 0-u32max[c]
HOST_DATA 1 skb->next->csum_offset 0-u16max
HOST_DATA 1 skb->next->data_len 0-u32max[c]
HOST_DATA 1 skb->next->len 1-u32max[c]
HOST_DATA 1 skb->prev->csum_offset 0-u16max
HOST_DATA 1 skb->prev->data_len 0-u32max[c]
HOST_DATA 1 skb->prev->len 0-u32max[c]
HOST_DATA 1 skb->prev->truesize 0-u32max
HOST_DATA 1 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *skb->data 0-255
NO_OVERFLOW_SIMPLE 1 skb->data_len
NO_OVERFLOW_SIMPLE 1 skb->dev->group
NO_OVERFLOW_SIMPLE 1 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 1 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 skb->end
NO_OVERFLOW_SIMPLE 1 skb->extensions
NO_OVERFLOW_SIMPLE 1 skb->len
NO_OVERFLOW_SIMPLE 1 skb->prev->data_len
NO_OVERFLOW_SIMPLE 1 skb->prev->end
NO_OVERFLOW_SIMPLE 1 skb->prev->len
NO_OVERFLOW_SIMPLE 1 skb->prev->tail
NO_OVERFLOW_SIMPLE 1 skb->prev->truesize
NO_OVERFLOW_SIMPLE 1 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 skb->tail
NO_OVERFLOW_SIMPLE 1 skb->truesize
LOCK2 &ctx->mtx
LOCK2 bh
HALF_LOCKED2 &net->tx_global_lock
HALF_LOCKED2 &of->mutex
HALF_LOCKED2 &txq->_xmit_lock
HALF_LOCKED2 flags
HALF_LOCKED2 rcu_read
TYPE_LOCK (struct cdc_ncm_ctx)->mtx

drivers/net/usb/cdc_ncm.c cdc_ncm_tx_fixup() -> cdc_ncm_fill_tx_frame()

Type Parameter Key Value
PARAM_VALUE 0 dev 4096-ptr_max
PARAM_VALUE 0 dev->data 4096-ptr_max
PARAM_VALUE 0 dev->driver_info 4096-ptr_max
PARAM_VALUE 0 dev->driver_info->tx_fixup 4096-ptr_max
PARAM_VALUE 1 skb 0,4096-ptr_max
PARAM_VALUE 1 skb->dev->ethtool_ops->get_link_ext_state 0-9223372036854775807
PARAM_VALUE 1 skb->dev->ethtool_ops->get_mm_stats 0-9223372036854775807
PARAM_VALUE 1 skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 1 skb->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 1 skb->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine_avail 0-4294967295
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->ns.__ns_ref.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->passive.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 1 skb->sk->__sk_common.skc_net.net->refcnt_tracker.quarantine_avail 0-4294967295
PARAM_VALUE 1 skb->sk->__sk_common.skc_refcnt.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_backlog.rmem_alloc.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_error_queue.qlen 0-4294967295
PARAM_VALUE 1 skb->sk->sk_omem_alloc.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_owner->refcnt.counter 0-s32max
PARAM_VALUE 1 skb->sk->sk_peer_pid->count.refs.counter s32min-s32max
PARAM_VALUE 1 skb->sk->sk_prot_creator->owner->refcnt.counter 0-s32max
PARAM_VALUE 1 skb->sk->sk_wmem_alloc.refs.counter s32min-s32max
PARAM_VALUE 2 sign 812475246
BUF_SIZE 1 skb (-1)-s32max
BUF_SIZE 1 skb (-1)-s32max
DATA_SOURCE 0 dev $0
DATA_SOURCE 1 skb $1
PREEMPT_ADD <- disables preempt
TASK_NOT_RUNNING
HOST_DATA 1 skb->csum_offset 0-u16max
HOST_DATA 1 skb->data_len 0-2147483648[c]
HOST_DATA 1 skb->len 0-u32max[c]
HOST_DATA 1 skb->next->csum_offset 0-u16max
HOST_DATA 1 skb->next->data_len 0-u32max[c]
HOST_DATA 1 skb->next->len 1-u32max[c]
HOST_DATA 1 skb->prev->csum_offset 0-u16max
HOST_DATA 1 skb->prev->data_len 0-u32max[c]
HOST_DATA 1 skb->prev->len 0-u32max[c]
HOST_DATA 1 skb->prev->truesize 0-u32max
HOST_DATA 1 skb->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->prev->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 1 skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 1 *skb->data 0-255
NO_OVERFLOW_SIMPLE 1 skb->data_len
NO_OVERFLOW_SIMPLE 1 skb->dev->group
NO_OVERFLOW_SIMPLE 1 skb->dev->num_tc
NO_OVERFLOW_SIMPLE 1 skb->dev->real_num_rx_queues
NO_OVERFLOW_SIMPLE 1 skb->dev->real_num_tx_queues
NO_OVERFLOW_SIMPLE 1 skb->dev->stats.rx_bytes
NO_OVERFLOW_SIMPLE 1 skb->dev->stats.tx_bytes
NO_OVERFLOW_SIMPLE 1 skb->dev->tx_queue_len
NO_OVERFLOW_SIMPLE 1 skb->end
NO_OVERFLOW_SIMPLE 1 skb->extensions
NO_OVERFLOW_SIMPLE 1 skb->len
NO_OVERFLOW_SIMPLE 1 skb->prev->data_len
NO_OVERFLOW_SIMPLE 1 skb->prev->end
NO_OVERFLOW_SIMPLE 1 skb->prev->len
NO_OVERFLOW_SIMPLE 1 skb->prev->tail
NO_OVERFLOW_SIMPLE 1 skb->prev->truesize
NO_OVERFLOW_SIMPLE 1 skb->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 skb->tail
NO_OVERFLOW_SIMPLE 1 skb->truesize
LOCK2 &ctx->mtx
LOCK2 bh
HALF_LOCKED2 &net->tx_global_lock
HALF_LOCKED2 &of->mutex
HALF_LOCKED2 &txq->_xmit_lock
HALF_LOCKED2 flags
HALF_LOCKED2 rcu_read
TYPE_LOCK (struct cdc_ncm_ctx)->mtx