Open Menu /

Defined in 1 files as a function:

Referenced in 5 files:

Smatch caller information:

net/ipv6/datagram.c ipv6_recv_error() -> ip_cmsg_recv()

Type Parameter Key Value
PARAM_VALUE 0 msg 4096-ptr_max
PARAM_VALUE 0 msg->msg_control->cmsg_level 0-1,6,17,41,101,107,132,263,268,270-272,274,276,282,287
PARAM_VALUE 0 msg->msg_control->cmsg_type 1-9,11-13,15-16,20,23,25,29,35-37,40-41,50,52,54,57-59,61,63-65,67,74,77-79,104
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->cb 4096-ptr_max
PARAM_VALUE 1 skb->cb->ee.ee_origin 0,2-6
PARAM_VALUE 1 skb->next 0
PARAM_VALUE 1 skb->prev 0
PARAM_VALUE 1 skb->protocol 0-34524,34526-u16max
PARAM_VALUE 1 skb->tstamp_type 0
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
DATA_SOURCE 0 msg $1
DATA_SOURCE 1 skb r sock_dequeue_err_skb
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 1 skb->data

net/ipv4/ping.c ping_recvmsg() -> ip_cmsg_recv()

Type Parameter Key Value
PARAM_VALUE 0 msg 4096-ptr_max
PARAM_VALUE 0 msg->msg_control->cmsg_level 0-1,6,17,41,101,107,132,263,268,270-272,274,276,282,287
PARAM_VALUE 0 msg->msg_control->cmsg_type 1-9,11-13,15-16,20,23,25,29,35-37,40-41,50,52,54,57-59,61,63-65,67,74,77-79,104
PARAM_VALUE 0 msg->msg_name 0,4096-ptr_max
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->tstamp_type 0
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 skb (-1),1-s32max
BUF_SIZE 1 skb (-1),1-s32max
DATA_SOURCE 0 msg $1
DATA_SOURCE 1 skb r skb_recv_datagram
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 1 skb->data

net/ipv4/ping.c ping_recvmsg() -> ip_cmsg_recv()

Type Parameter Key Value
PARAM_VALUE 0 msg 4096-ptr_max
PARAM_VALUE 0 msg->msg_control->cmsg_level 0-1,6,17,41,101,107,132,263,268,270-272,274,276,282,287
PARAM_VALUE 0 msg->msg_control->cmsg_type 1-9,11-13,15-16,20,23,25,29,35-37,40-41,50,52,54,57-59,61,63-65,67,74,77-79,104
PARAM_VALUE 0 msg->msg_name 0,4096-ptr_max
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->protocol 2048
PARAM_VALUE 1 skb->tstamp_type 0
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 skb (-1),1-s32max
BUF_SIZE 1 skb (-1),1-s32max
DATA_SOURCE 0 msg $1
DATA_SOURCE 1 skb r skb_recv_datagram
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 1 skb->data

net/ipv4/raw.c raw_recvmsg() -> ip_cmsg_recv()

Type Parameter Key Value
PARAM_VALUE 0 msg 4096-ptr_max
PARAM_VALUE 0 msg->msg_control 4096-ptr_max
PARAM_VALUE 0 msg->msg_control->cmsg_level 0-1,6,17,41,101,107,132,263,268,270-272,274,276,282,287
PARAM_VALUE 0 msg->msg_control->cmsg_type 1-9,11-13,15-16,20,23,25,29,35-37,40-41,50,52,54,57-59,61,63-65,67,74,77-79,104
PARAM_VALUE 0 msg->msg_control_user 4096-ptr_max
PARAM_VALUE 0 msg->msg_name 0,4096-ptr_max
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->tstamp_type 0
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 skb (-1),1-s32max
BUF_SIZE 1 skb (-1),1-s32max
DATA_SOURCE 0 msg $1
DATA_SOURCE 1 skb r skb_recv_datagram
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 1 skb->data

net/l2tp/l2tp_ip.c l2tp_ip_recvmsg() -> ip_cmsg_recv()

Type Parameter Key Value
PARAM_VALUE 0 msg 4096-ptr_max
PARAM_VALUE 0 msg->msg_control->cmsg_level 0-1,6,17,41,101,107,132,263,268,270-272,274,276,282,287
PARAM_VALUE 0 msg->msg_control->cmsg_type 1-9,11-13,15-16,20,23,25,29,35-37,40-41,50,52,54,57-59,61,63-65,67,74,77-79,104
PARAM_VALUE 0 msg->msg_name 0,4096-ptr_max
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->tstamp_type 0
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 skb (-1),1-s32max
BUF_SIZE 1 skb (-1),1-s32max
DATA_SOURCE 0 msg $1
DATA_SOURCE 1 skb r skb_recv_datagram
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 1 skb->data

net/ipv4/ip_sockglue.c ip_recv_error() -> ip_cmsg_recv()

Type Parameter Key Value
PARAM_VALUE 0 msg 4096-ptr_max
PARAM_VALUE 0 msg->msg_control->cmsg_level 0-1,6,17,41,101,107,132,263,268,270-272,274,276,282,287
PARAM_VALUE 0 msg->msg_control->cmsg_type 1-9,11-13,15-16,20,23,25,29,35-37,40-41,50,52,54,57-59,61,63-65,67,74,77-79,104
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->cb 4096-ptr_max
PARAM_VALUE 1 skb->cb->ee.ee_origin 0,2-6
PARAM_VALUE 1 skb->next 0
PARAM_VALUE 1 skb->prev 0
PARAM_VALUE 1 skb->tstamp_type 0
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
DATA_SOURCE 0 msg $1
DATA_SOURCE 1 skb r sock_dequeue_err_skb
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 1 skb->data