Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 6 files:
- net/ipv6/icmp.c
- net/ipv6/ip6_output.c, line 1891
- net/ipv6/ping.c, line 174
- net/ipv6/raw.c, line 913
- net/ipv6/udp.c, line 1733
- net/l2tp/l2tp_ip6.c, line 655
Smatch caller information:
net/ipv6/ping.c ping_v6_sendmsg() -> ip6_append_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_prot | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 0-5,7-255 |
| PARAM_VALUE | 0 | sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 8492816415181324288 |
| PARAM_VALUE | 3 | length | 8-u16max |
| PARAM_VALUE | 4 | transhdrlen | 8 |
| PARAM_VALUE | 5 | ipc6 | 2189001213010419712 |
| PARAM_VALUE | 6 | fl6 | 547411931194654720 |
| PARAM_VALUE | 6 | fl6->__fl_common.flowic_proto | 58 |
| PARAM_VALUE | 8 | flags | 64 |
| BUF_SIZE | 2 | from | 24 |
| CAPPED_DATA | 0 | sk | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 3 | length | $2 |
| HARD_MAX | 3 | length | u16max |
| MEM_ZERO | 6 | fl6 | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 3 | length | 8-u16max |
| USER_DATA | 5 | ipc6->dontfrag | 0-1 |
| USER_DATA | 5 | ipc6->sockc.transmit_time | 0-9223372036854775807 |
| USER_DATA | 5 | ipc6->tclass | (-1)-255 |
| USER_DATA | 6 | fl6->__fl_common.flowic_oif | s32min-(-1),1-s32max |
| USER_DATA | 6 | fl6->flowlabel | 0-u32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| UNITS | 0 | sk | unit_byte |
| UNITS | 3 | length | unit_byte |
| UNITS | 4 | transhdrlen | unit_byte |
| LOCK2 | 0 | sk | |
| HALF_LOCKED2 | &vq->mutex |
net/l2tp/l2tp_ip6.c l2tp_ip6_sendmsg() -> ip6_append_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_prot | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 0-5,7-255 |
| PARAM_VALUE | 0 | sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 4096-ptr_max |
| PARAM_VALUE | 3 | length | 0-s32max |
| PARAM_VALUE | 4 | transhdrlen | 4 |
| PARAM_VALUE | 5 | ipc6 | 9175465522676625408 |
| PARAM_VALUE | 5 | ipc6->opt | 0,4096-ptr_max |
| PARAM_VALUE | 6 | fl6 | 8491236259787087872 |
| CAPPED_DATA | 0 | sk | 1 |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| CAPPED_DATA | 0 | &sk->sk_write_queue | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 2 | from | $1 |
| BIT_INFO | 8 | flags | 0x0,0xfffffffe |
| NOSPEC | 6 | fl6->__fl_common.flowic_oif | |
| MEM_ZERO | 6 | fl6 | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 3 | length | 1-s32max[c] |
| USER_DATA | 5 | ipc6->dontfrag | 0-1 |
| USER_DATA | 5 | ipc6->sockc.transmit_time | 0-9223372036854775807 |
| USER_DATA | 5 | ipc6->tclass | (-1)-255 |
| USER_DATA | 6 | fl6->__fl_common.flowic_oif | s32min-(-1),1-s32max |
| USER_DATA | 6 | fl6->flowlabel | 0-u32max[c] |
| USER_DATA | 8 | flags | 0-u32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| UNITS | 0 | sk | unit_byte |
| UNITS | 3 | length | unit_byte |
| LOCK2 | 0 | sk | |
| HALF_LOCKED2 | &vq->mutex |
net/ipv6/raw.c rawv6_sendmsg() -> ip6_append_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_prot | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 0-5,7-255 |
| PARAM_VALUE | 0 | sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 2 | from | 465478980997652480 |
| PARAM_VALUE | 3 | length | 0-s32max |
| PARAM_VALUE | 4 | transhdrlen | 0 |
| PARAM_VALUE | 5 | ipc6 | 5497335225115070464 |
| PARAM_VALUE | 5 | ipc6->opt | 0,4096-ptr_max |
| PARAM_VALUE | 6 | fl6 | 147540059252310016 |
| PARAM_VALUE | 6 | fl6->__fl_common.flowic_proto | 0,58,135 |
| BUF_SIZE | 2 | from | 16 |
| CAPPED_DATA | 0 | sk | 1 |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 3 | length | $2 |
| BIT_INFO | 8 | flags | 0x0,0xfffffffe |
| NOSPEC | 6 | fl6->__fl_common.flowic_oif | |
| MEM_ZERO | 6 | fl6 | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 3 | length | 0-s32max |
| USER_DATA | 5 | ipc6->dontfrag | 0-1 |
| USER_DATA | 5 | ipc6->sockc.transmit_time | 0-9223372036854775807 |
| USER_DATA | 5 | ipc6->tclass | (-1)-255 |
| USER_DATA | 6 | fl6->__fl_common.flowic_oif | s32min-(-1),1-s32max |
| USER_DATA | 6 | fl6->__fl_common.flowic_proto | 58,135[c][u] |
| USER_DATA | 6 | fl6->flowlabel | 0-u32max[c] |
| USER_DATA | 8 | flags | 0-u32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| UNITS | 0 | sk | unit_byte |
| UNITS | 3 | length | unit_byte |
| LOCK2 | 0 | sk | |
| HALF_LOCKED2 | &vq->mutex |
net/ipv6/icmp.c icmp6_send() -> ip6_append_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk->__sk_common.skc_net.net->ipv6.fib6_local_tbl->tb6_root.subtree->fn_flags | 4-u16max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_net.net->ipv6.fib6_main_tbl->tb6_root.subtree->fn_flags | 4-u16max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_net.net->ipv6.ip6_null_entry->dst.dst_trace_seq.counter | s32min-s32max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 0-5,7-255 |
| PARAM_VALUE | 2 | from | 4047572315413295104 |
| PARAM_VALUE | 3 | length | 8-1240 |
| PARAM_VALUE | 4 | transhdrlen | 8 |
| PARAM_VALUE | 5 | ipc6 | 1660784924244668416 |
| PARAM_VALUE | 6 | fl6 | 196650708650180608 |
| PARAM_VALUE | 6 | fl6->__fl_common.flowic_proto | 58 |
| PARAM_VALUE | 6 | fl6->uli.icmpt.type | 1-4,129 |
| PARAM_VALUE | 8 | flags | 64 |
| BUF_SIZE | 0 | sk | 0 |
| BUF_SIZE | 2 | from | 16 |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| CAPPED_DATA | 3 | length | 1 |
| DATA_SOURCE | 0 | sk | r icmpv6_xmit_lock |
| BIT_INFO | 0 | sk | 0x0,0x0 |
| MEM_ZERO | 6 | fl6 | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 3 | length | unit_byte |
| UNITS | 4 | transhdrlen | unit_byte |
| LOCK2 | bh | ||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &x->lock |
net/ipv6/icmp.c icmpv6_echo_reply() -> ip6_append_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 0-5,7-255 |
| PARAM_VALUE | 2 | from | 1952880644578369536 |
| PARAM_VALUE | 4 | transhdrlen | 8 |
| PARAM_VALUE | 5 | ipc6 | 409532831159685120 |
| PARAM_VALUE | 5 | ipc6->tclass | 0-255 |
| PARAM_VALUE | 6 | fl6 | 312139106390683648 |
| PARAM_VALUE | 6 | fl6->__fl_common.flowic_iif | 0-1 |
| PARAM_VALUE | 6 | fl6->__fl_common.flowic_proto | 58 |
| PARAM_VALUE | 6 | fl6->flowlabel | 0-1048575 |
| PARAM_VALUE | 6 | fl6->uli.icmpt.type | 129,161 |
| PARAM_VALUE | 8 | flags | 64 |
| BUF_SIZE | 0 | sk | 0 |
| BUF_SIZE | 2 | from | 16 |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| DATA_SOURCE | 0 | sk | r icmpv6_xmit_lock |
| BIT_INFO | 0 | sk | 0x0,0x0 |
| MEM_ZERO | 6 | fl6 | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 3 | length | unit_byte |
| UNITS | 4 | transhdrlen | unit_byte |
| LOCK2 | bh |