Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 14 files:
- drivers/net/ethernet/freescale/enetc/enetc.c
- include/net/checksum.h, line 161
- net/core/filter.c, line 2012
- net/core/utils.c, line 440
- net/ipv4/tcp_offload.c, line 47
- net/ipv4/udp_offload.c, line 363
- net/netfilter/nf_conntrack_seqadj.c
- net/netfilter/nf_flow_table_ip.c
- net/netfilter/nf_nat_proto.c, line 398
- net/netfilter/nf_synproxy_core.c, line 232
- net/netfilter/nft_exthdr.c, line 297
- net/netfilter/xt_TCPMSS.c, line 186
- net/openvswitch/actions.c
- net/sched/act_nat.c
Smatch caller information:
drivers/net/ethernet/freescale/enetc/enetc.c enetc_update_ptp_sync_msg() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| HALF_LOCKED2 | &ndev->tx_global_lock | ||
| HALF_LOCKED2 | bh |
drivers/net/ethernet/freescale/enetc/enetc.c enetc_update_ptp_sync_msg() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 3 | to | 0-999999999 |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| CAPPED_DATA | 3 | to | 1 |
| DATA_SOURCE | 1 | skb | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| HOST_DATA | 3 | to | 0-999999999 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| HALF_LOCKED2 | &ndev->tx_global_lock | ||
| HALF_LOCKED2 | bh |
drivers/net/ethernet/freescale/enetc/enetc.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-u16max |
| PARAM_VALUE | 3 | to | 0-u16max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 1 | skb->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| HALF_LOCKED2 | &ndev->tx_global_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | bh |
net/netfilter/nf_flow_table_core.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-u16max |
| PARAM_VALUE | 3 | to | 0-u16max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize |
net/ipv6/ip6_offload.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-u16max |
| PARAM_VALUE | 3 | to | 0-u16max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| NOCHECK_CALL | |||
| UNITS | 1 | skb | unit_byte |
net/ipv4/tcp_offload.c __tcpv4_gso_segment_csum() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 1 |
| DATA_SOURCE | 1 | skb | $0 |
| DATA_SOURCE | 3 | to | $2 |
| NOCHECK_CALL | |||
| UNITS | 1 | skb | unit_byte |
| UNITS | 2 | from | unit_byte |
| UNITS | 3 | to | unit_byte |
net/ipv4/tcp_offload.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-u16max |
| PARAM_VALUE | 3 | to | 0-u16max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| NOCHECK_CALL | |||
| UNITS | 1 | skb | unit_byte |
net/core/filter.c ____bpf_l4_csum_replace() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 0 | *sum | 0-255 |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| DATA_SOURCE | 1 | skb | $0 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| BIT_INFO | 4 | pseudohdr | 0x0,0x0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *sum | 0-255[u] |
| UNITS | 0 | sum | unit_byte |
| USER_PTR | 0 | sum |
net/core/filter.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 0 | *sum | 0-255 |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-u16max |
| PARAM_VALUE | 3 | to | 0-u16max |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| BIT_INFO | 4 | pseudohdr | 0x0,0x0 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *sum | 0-255[u] |
| UNITS | 0 | sum | unit_byte |
| USER_PTR | 0 | sum |
net/netfilter/nf_conntrack_seqadj.c nf_ct_sack_block_adjust() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-126976[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| USER_DATA | 0 | *sum | 0-u16max[u] |
| USER_DATA | 2 | from | 0-u32max[u] |
| USER_DATA | 3 | to | 0-u32max[u] |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 2 | from | unit_byte |
| UNITS | 3 | to | unit_byte |
| USER_PTR | 0 | sum | |
| LOCK2 | &ct->lock | ||
| LOCK2 | bh | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct nf_conn)->lock |
net/netfilter/nf_conntrack_seqadj.c nf_ct_sack_block_adjust() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-126976[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| USER_DATA | 0 | *sum | 0-u16max[u] |
| USER_DATA | 2 | from | 0-u32max[u] |
| USER_DATA | 3 | to | 0-u32max[u] |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 2 | from | unit_byte |
| UNITS | 3 | to | unit_byte |
| USER_PTR | 0 | sum | |
| LOCK2 | &ct->lock | ||
| LOCK2 | bh | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct nf_conn)->lock |
net/netfilter/nf_conntrack_seqadj.c nf_ct_seq_adjust() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| CAPPED_DATA | 1 | skb | 1 |
| DATA_SOURCE | 1 | skb | $0 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| USER_DATA | 0 | *sum | 0-u16max[u] |
| USER_DATA | 2 | from | 0-u32max[u] |
| USER_DATA | 3 | to | 0-u32max[u] |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 2 | from | unit_byte |
| UNITS | 3 | to | unit_byte |
| USER_PTR | 0 | sum | |
| LOCK2 | &ct->lock | ||
| LOCK2 | bh | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct nf_conn)->lock |
net/netfilter/nf_conntrack_seqadj.c nf_ct_seq_adjust() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| CAPPED_DATA | 1 | skb | 1 |
| DATA_SOURCE | 1 | skb | $0 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| USER_DATA | 0 | *sum | 0-u16max[u] |
| USER_DATA | 2 | from | 0-u32max[u] |
| USER_DATA | 3 | to | 0-u32max[u] |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 2 | from | unit_byte |
| UNITS | 3 | to | unit_byte |
| USER_PTR | 0 | sum | |
| LOCK2 | &ct->lock | ||
| LOCK2 | bh | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct nf_conn)->lock |
net/netfilter/nft_exthdr.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-65280 |
| PARAM_VALUE | 3 | to | 0-u16max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *sum | 0-u16max[u] |
| USER_DATA | 2 | from | 0-65280 |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| USER_PTR | 0 | sum |
net/netfilter/nft_exthdr.c nft_exthdr_tcp_set_eval() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-255 |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| DATA_SOURCE | 3 | to | r nft_reg_load_be32 |
| PARAM_COMPARE | 2 | from | != $3 |
| PARAM_COMPARE | 3 | to | != $2 |
| NOCHECK_CALL | |||
| USER_DATA | 0 | *sum | 0-u16max[u] |
| USER_DATA | 2 | from | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| USER_PTR | 0 | sum |
net/ipv4/udp_offload.c __udpv4_gso_segment_csum() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 0 | *sum | 1-u16max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 1 |
| DATA_SOURCE | 1 | skb | $0 |
| NOCHECK_CALL | |||
| UNITS | 1 | skb | unit_byte |
net/ipv4/udp_offload.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-u16max |
| PARAM_VALUE | 3 | to | 0-u16max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| UNITS | 1 | skb | unit_byte |
net/sched/act_nat.c tcf_nat_act() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 1 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| CAPPED_DATA | 1 | skb | 1 |
| DATA_SOURCE | 1 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 2 | from | unit_byte |
| HALF_LOCKED2 | rcu_read |
net/sched/act_nat.c tcf_nat_act() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 1 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| CAPPED_DATA | 1 | skb | 1 |
| DATA_SOURCE | 1 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 2 | from | unit_byte |
| HALF_LOCKED2 | rcu_read |
net/sched/act_nat.c tcf_nat_act() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| CAPPED_DATA | 1 | skb | 1 |
| DATA_SOURCE | 1 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 2 | from | unit_byte |
| HALF_LOCKED2 | rcu_read |
net/netfilter/nf_nat_proto.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-u16max |
| PARAM_VALUE | 3 | to | 0-u16max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| STR_LEN | 0 | sum | (-1),5,16,23 |
| STR_LEN | 0 | sum | (-1),5,16,23 |
| STR_LEN | 1 | skb | (-1),5,16,23 |
| STR_LEN | 1 | skb | (-1),5,16,23 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-192512[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| USER_DATA | 0 | *sum | 0-u16max[u] |
| USER_DATA | 2 | from | 0-u16max[u] |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 2 | from | unit_byte |
| UNITS | 3 | to | unit_byte |
| USER_PTR | 0 | sum |
net/netfilter/nf_nat_proto.c nf_nat_ipv4_csum_update() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 1 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | sum | $2 |
| DATA_SOURCE | 1 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| USER_DATA | 0 | *sum | 0-u16max[u] |
| USER_DATA | 2 | from | 0-u32max[u] |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 2 | from | unit_byte |
| UNITS | 3 | to | unit_byte |
| USER_PTR | 0 | sum |
net/netfilter/nf_synproxy_core.c synproxy_tstamp_adjust() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-255 |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-192512[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| USER_DATA | 0 | *sum | 0-u16max[u] |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| USER_PTR | 0 | sum | |
| HALF_LOCKED2 | rcu_read |
net/netfilter/xt_TCPOPTSTRIP.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-65280 |
| PARAM_VALUE | 3 | to | 1,256 |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-126976[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| HALF_LOCKED2 | &table->lock | ||
| HALF_LOCKED2 | bh |
net/ipv4/netfilter/ipt_ECN.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-u16max |
| PARAM_VALUE | 3 | to | 0-u16max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-126976[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| HALF_LOCKED2 | &table->lock | ||
| HALF_LOCKED2 | bh |
net/netfilter/xt_TCPMSS.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-u16max |
| PARAM_VALUE | 3 | to | 0-u16max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-126976[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 2 | from | unit_byte |
| UNITS | 3 | to | unit_byte |
| HALF_LOCKED2 | &table->lock | ||
| HALF_LOCKED2 | bh |
net/netfilter/xt_TCPMSS.c tcpmss_mangle_packet() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0 |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| HALF_LOCKED2 | &table->lock | ||
| HALF_LOCKED2 | bh |
net/netfilter/nf_flow_table_ip.c nf_flow_nat_ip_tcp() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 1 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| CAPPED_DATA | 3 | to | 1 |
| DATA_SOURCE | 1 | skb | $0 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 2 | from | unit_byte |
| UNITS | 3 | to | unit_byte |
net/netfilter/nf_flow_table_ip.c nf_flow_nat_ip_udp() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 1 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| CAPPED_DATA | 3 | to | 1 |
| DATA_SOURCE | 1 | skb | $0 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 2 | from | unit_byte |
| UNITS | 3 | to | unit_byte |
net/openvswitch/actions.c inet_proto_csum_replace2() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 0-u16max |
| PARAM_VALUE | 3 | to | 0-u16max |
| PARAM_VALUE | 4 | pseudohdr | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | sum | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| DATA_SOURCE | 4 | pseudohdr | $4 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-192512[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| USER_DATA | 3 | to | 0-u16max |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
net/openvswitch/actions.c update_ip_l4_checksum() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 1 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $0 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-192512[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| USER_DATA | 3 | to | 0-u32max |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 3 | to | unit_byte |
net/openvswitch/actions.c update_ip_l4_checksum() -> inet_proto_csum_replace4()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sum | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | pseudohdr | 1 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $0 |
| DATA_SOURCE | 2 | from | $2 |
| DATA_SOURCE | 3 | to | $3 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->csum | 0-192512[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| USER_DATA | 3 | to | 0-u32max |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| UNITS | 1 | skb | unit_byte |
| UNITS | 3 | to | unit_byte |