Open Menu /

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 3 files:

Smatch caller information:

net/ipv4/syncookies.c tcp_get_cookie_sock() -> inet_csk_reqsk_queue_add()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 0 sk->__sk_common.skc_net.net->ipv4.sysctl_tcp_syncookies 1-255
PARAM_VALUE 0 sk->__sk_common.skc_net.net->loopback_dev->refcnt_tracker.list.next->next 4096-ptr_max
PARAM_VALUE 0 sk->__sk_common.skc_net.net->loopback_dev->refcnt_tracker.list.next->prev 4096-ptr_max
PARAM_VALUE 0 sk->__sk_common.skc_refcnt.refs.counter (-1073741824),0-s32max
PARAM_VALUE 0 sk->__sk_common.skc_state 0-5,7-255
PARAM_VALUE 0 sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_peer_cred->process_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 sk->sk_peer_cred->process_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 sk->sk_peer_cred->request_key_auth->user->qnbytes s32min-s32max
PARAM_VALUE 0 sk->sk_peer_cred->request_key_auth->user->qnkeys s32min-s32max
PARAM_VALUE 0 sk->sk_peer_cred->session_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 sk->sk_peer_cred->session_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 sk->sk_peer_cred->thread_keyring->user->qnbytes s32min-s32max
PARAM_VALUE 0 sk->sk_peer_cred->thread_keyring->user->qnkeys s32min-s32max
PARAM_VALUE 0 sk->sk_socket->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_socket->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->sk_socket->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_userlocks 2-255
PARAM_VALUE 1 req 4096-ptr_max
PARAM_VALUE 1 req->__req_common.skc_incoming_cpu 0-s32max
PARAM_VALUE 1 req->__req_common.skc_rcv_wnd 0-s32max
PARAM_VALUE 1 req->__req_common.skc_refcnt.refs.counter 1
PARAM_VALUE 1 req->__req_common.skc_tw_rcv_nxt 0-s32max
PARAM_VALUE 2 child 4096-ptr_max
BUF_SIZE 0 sk->__sk_common.skc_prot (-1),448
BUF_SIZE 1 req (-1)-s32max
BUF_SIZE 1 req (-1)-s32max
CAPPED_DATA 0 sk->__sk_common.skc_net.net 1
CAPPED_DATA 0 sk->psp_assoc 1
DATA_SOURCE 0 sk $0
DATA_SOURCE 1 req $2
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->truesize
UNITS 0 sk unit_byte
HALF_LOCKED2 0 sk
HALF_LOCKED2 0 &sk->sk_lock.slock

net/ipv4/tcp_input.c tcp_conn_request() -> inet_csk_reqsk_queue_add()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 0 sk->__sk_common.skc_refcnt.refs.counter (-1073741824),0-s32max
PARAM_VALUE 0 sk->sk_userlocks 2-255
PARAM_VALUE 1 req 4096-ptr_max
PARAM_VALUE 1 req->__req_common.skc_flags 0,4096-18446744073709547520
PARAM_VALUE 1 req->__req_common.skc_incoming_cpu 0-s32max
PARAM_VALUE 1 req->__req_common.skc_listener 0,4096-ptr_max
PARAM_VALUE 1 req->__req_common.skc_rcv_wnd 0-s32max
PARAM_VALUE 1 req->__req_common.skc_refcnt.refs.counter 2
PARAM_VALUE 1 req->__req_common.skc_tw_dr 0,4096-ptr_max
PARAM_VALUE 1 req->__req_common.skc_tw_rcv_nxt 0-s32max
PARAM_VALUE 1 req->num_retrans 0
PARAM_VALUE 1 req->num_timeout 0
PARAM_VALUE 1 req->rsk_ops 6033189039505203200,7526321648135888896,7759756757659627520,8053103009269706752
PARAM_VALUE 1 req->rsk_ops->family 0,2,10
PARAM_VALUE 1 req->saved_syn 0,4096-ptr_max
PARAM_VALUE 1 req->sk 0
PARAM_VALUE 1 req->syncookie 0
PARAM_VALUE 1 req->timeout 250
PARAM_VALUE 2 child 4096-ptr_max
PARAM_VALUE 2 child->__sk_common.skc_state 0-5,7-255
PARAM_VALUE 2 child->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 2 child->ns_tracker->dead 0-1
PARAM_VALUE 2 child->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 2 child->sk_backlog.head->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 2 child->sk_backlog.head->sk->ns_tracker->dead 0-1
PARAM_VALUE 2 child->sk_backlog.head->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 2 child->tcp_retransmit_timer.entry->pprev 4096-ptr_max
BUF_SIZE 0 sk->__sk_common.skc_prot (-1),448
CAPPED_DATA 0 sk->__sk_common.skc_net.net 1
CAPPED_DATA 2 child 1
DATA_SOURCE 0 sk $2
DATA_SOURCE 1 req r inet_reqsk_alloc
DATA_SOURCE 2 child r tcp_try_fastopen
PARAM_COMPARE 0 sk->sk_ack_backlog <= $0->sk_max_ack_backlog
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.head->len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->len
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.tail->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.prev->truesize
HALF_LOCKED2 bh
HALF_LOCKED2 rcu_read
HALF_LOCKED2 0 sk
HALF_LOCKED2 0 &sk->sk_lock.slock

net/ipv4/inet_connection_sock.c inet_csk_complete_hashdance() -> inet_csk_reqsk_queue_add()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 0 sk->__req_common.skc_listener->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 0 sk->__req_common.skc_listener->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 0 sk->__req_common.skc_listener->__sk_common.skc_state 0-5,7-255
PARAM_VALUE 0 sk->__req_common.skc_listener->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->__req_common.skc_listener->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->__req_common.skc_listener->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 sk->__req_common.skc_listener->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 0 sk->__req_common.skc_listener->sk_callback_lock.raw_lock.cnts.counter 0-s32max
PARAM_VALUE 0 sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 sk->rsk_timer.entry.pprev 0
PARAM_VALUE 0 sk->rsk_timer.lockdep_map->name 0-255
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 0 sk->sk_filter 0,4096-ptr_max
PARAM_VALUE 0 sk->sk_filter->rcu.func 1-u64max
PARAM_VALUE 0 sk->sk_filter->rcu.next 0
PARAM_VALUE 0 sk->sk_filter->refcnt.refs.counter (-1073741824),0-s32max
PARAM_VALUE 0 sk->sk_prot_creator->owner->refcnt.counter 0-s32max
PARAM_VALUE 1 req 4096-ptr_max
PARAM_VALUE 1 req->__req_common.skc_flags 1-18446744073709547520
PARAM_VALUE 1 req->__req_common.skc_listener 1-ptr_max
PARAM_VALUE 1 req->__req_common.skc_refcnt.refs.counter 1
PARAM_VALUE 1 req->__req_common.skc_tw_dr 1-ptr_max
PARAM_VALUE 1 req->__sk_common.skc_node.pprev 0
PARAM_VALUE 2 child 4096-ptr_max
CAPPED_DATA 0 sk 1
CAPPED_DATA 2 child 1
DATA_SOURCE 0 sk $0 [m]
DATA_SOURCE 1 req r inet_reqsk_clone
DATA_SOURCE 2 child $1
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 sk->sk_receive_queue.prev->csum_offset 0-u16max
HOST_DATA 0 sk->sk_receive_queue.prev->data_len 0-u32max[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->csum_offset 0-u16max
HOST_DATA 0 sk->sk_receive_queue.prev->next->data_len 0-u32max[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->truesize 0-u32max
HOST_DATA 0 sk->sk_receive_queue.prev->truesize 0-u32max
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 1 req->__req_common.skc_listener->sk_backlog.len
UNITS 0 sk unit_byte

net/ipv4/inet_connection_sock.c inet_csk_complete_hashdance() -> inet_csk_reqsk_queue_add()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 0 sk->__req_common.skc_listener->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 0 sk->__req_common.skc_listener->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 0 sk->__req_common.skc_listener->__sk_common.skc_state 0-5,7-255
PARAM_VALUE 0 sk->__req_common.skc_listener->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->__req_common.skc_listener->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->__req_common.skc_listener->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 sk->__req_common.skc_listener->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 0 sk->__req_common.skc_listener->sk_callback_lock.raw_lock.cnts.counter 0-s32max
PARAM_VALUE 0 sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 sk->rsk_timer.entry.pprev 0
PARAM_VALUE 0 sk->rsk_timer.lockdep_map->name 0-255
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->sk_backlog.head->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 0 sk->sk_filter 0,4096-ptr_max
PARAM_VALUE 0 sk->sk_filter->rcu.func 1-u64max
PARAM_VALUE 0 sk->sk_filter->rcu.next 0
PARAM_VALUE 0 sk->sk_filter->refcnt.refs.counter (-1073741824),0-s32max
PARAM_VALUE 0 sk->sk_prot_creator->owner->refcnt.counter 0-s32max
PARAM_VALUE 1 req 4096-ptr_max
PARAM_VALUE 1 req->__req_common.skc_listener 4096-ptr_max
PARAM_VALUE 2 child 4096-ptr_max
CAPPED_DATA 0 sk 1
CAPPED_DATA 1 req 1
CAPPED_DATA 1 req->__req_common.skc_listener 1
CAPPED_DATA 2 child 1
DATA_SOURCE 0 sk $0
DATA_SOURCE 1 req $2
DATA_SOURCE 2 child $1
PARAM_COMPARE 0 sk == $1->__req_common.skc_listener
PARAM_COMPARE 1 req->__req_common.skc_listener == $0
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 sk->sk_receive_queue.prev->csum_offset 0-u16max
HOST_DATA 0 sk->sk_receive_queue.prev->data_len 0-u32max[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->csum_offset 0-u16max
HOST_DATA 0 sk->sk_receive_queue.prev->next->data_len 0-u32max[c]
HOST_DATA 0 sk->sk_receive_queue.prev->next->truesize 0-u32max
HOST_DATA 0 sk->sk_receive_queue.prev->truesize 0-u32max
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
UNITS 0 sk unit_byte
UNITS 1 req unit_byte

net/ipv4/inet_connection_sock.c inet_csk_listen_stop() -> inet_csk_reqsk_queue_add()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 0 sk->__sk_common.skc_refcnt.refs.counter (-1073741824),0-s32max
PARAM_VALUE 1 req 4096-ptr_max
PARAM_VALUE 1 req->__req_common.skc_flags 1-18446744073709547520
PARAM_VALUE 1 req->__req_common.skc_listener 1-ptr_max
PARAM_VALUE 1 req->__req_common.skc_refcnt.refs.counter 1
PARAM_VALUE 1 req->__req_common.skc_tw_dr 1-ptr_max
PARAM_VALUE 1 req->__sk_common.skc_node.pprev 0
PARAM_VALUE 2 child 4096-ptr_max
PARAM_VALUE 2 child->sk_lock.owned 0-1
PARAM_VALUE 2 child->sk_lock.slock.rlock.dep_map->name 0-255
CAPPED_DATA 0 sk 1
DATA_SOURCE 0 sk r reuseport_migrate_sock
DATA_SOURCE 1 req r inet_reqsk_clone
PREEMPT_ADD <- disables preempt
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 1 req->__req_common.skc_listener->sk_backlog.len
UNITS 2 child unit_byte
LOCK2 bh
LOCK2 rcu_read
LOCK2 2 &child->sk_lock.slock
HALF_LOCKED2 sk
TYPE_LOCK (struct socket_lock_t)->slock