Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
net/ipv6/udp.c udpv6_recvmsg() -> copy_linear_skb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 2 | off | 0-s32max |
| PARAM_VALUE | 3 | to | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| CAPPED_DATA | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | r __skb_recv_udp |
| NOSPEC | 3 | to->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | len | 1-s32max[c] |
| USER_DATA | 3 | to->count | 0-u64max |
| USER_DATA | 3 | to->iov_offset | 0-u64max[c] |
| UNITS | 1 | len | unit_byte |
| UNITS | 2 | off | unit_byte |
net/ipv4/udp.c udp_recvmsg() -> copy_linear_skb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 2 | off | 0-s32max |
| PARAM_VALUE | 3 | to | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| CAPPED_DATA | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | r __skb_recv_udp |
| NOSPEC | 3 | to->count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | len | 1-s32max[c] |
| USER_DATA | 3 | to->count | 0-u64max |
| USER_DATA | 3 | to->iov_offset | 0-u64max[c] |
| UNITS | 1 | len | unit_byte |
| UNITS | 2 | off | unit_byte |