Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 3 files:
Smatch caller information:
net/ipv4/ping.c ping_v4_sendmsg() -> ip_cmsg_send()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk->__sk_common.skc_prot | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 1 | msg | 4096-ptr_max |
| PARAM_VALUE | 1 | msg->msg_controllen | 1-u64max |
| PARAM_VALUE | 1 | msg->msg_iter.__iov | 4096-u64max |
| PARAM_VALUE | 1 | msg->msg_iter.bvec | 4096-u64max |
| PARAM_VALUE | 1 | msg->msg_iter.folioq | 1-u64max |
| PARAM_VALUE | 1 | msg->msg_iter.kvec | 4096-u64max |
| PARAM_VALUE | 1 | msg->msg_name | 0,4096-ptr_max |
| PARAM_VALUE | 2 | ipc | 8093818204654346240 |
| PARAM_VALUE | 3 | allow_ipv6 | 0 |
| BUF_SIZE | 1 | msg->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | msg->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 1 | msg->msg_ubuf | (-1),16 |
| CAPPED_DATA | 0 | sk | 1 |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 1 | msg | $1 |
| NOSPEC | 1 | msg->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | msg->msg_controllen | 1-s32max[c] |
| USER_DATA | 1 | msg->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | msg->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 1 | msg->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | msg->msg_namelen | 0-128 |
| USER_DATA | 1 | *msg->msg_name | s64min-s64max |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| UNITS | 0 | sk | unit_byte |
| USER_PTR | 1 | msg->msg_control | |
| USER_PTR | 1 | msg->msg_name | |
| HALF_LOCKED2 | &vq->mutex |
net/ipv4/raw.c raw_sendmsg() -> ip_cmsg_send()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk->__sk_common.skc_prot | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 1 | msg | 4096-ptr_max |
| PARAM_VALUE | 1 | msg->msg_controllen | 1-u64max |
| PARAM_VALUE | 1 | msg->msg_namelen | s32min-0,16-s32max |
| PARAM_VALUE | 2 | ipc | 1423554224653365248 |
| PARAM_VALUE | 3 | allow_ipv6 | 0 |
| BUF_SIZE | 1 | msg->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | msg->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 1 | msg->msg_ubuf | (-1),16 |
| CAPPED_DATA | 0 | sk | 1 |
| CAPPED_DATA | 0 | sk->__sk_common.skc_net.net | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 1 | msg | $1 |
| FUZZY_MAX | 1 | msg->msg_namelen | 16 |
| BIT_INFO | 1 | msg->msg_flags | 0x0,0xfffffffe |
| NOSPEC | 1 | msg->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | msg->msg_controllen | 1-s32max[c] |
| USER_DATA | 1 | msg->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | msg->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 1 | msg->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | msg->msg_namelen | 0,16-128 |
| USER_DATA | 1 | *msg->msg_name | s64min-s64max |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| UNITS | 0 | sk | unit_byte |
| USER_PTR | 1 | msg->msg_control | |
| USER_PTR | 1 | msg->msg_name | |
| HALF_LOCKED2 | &vq->mutex |
net/ipv4/udp.c udp_sendmsg() -> ip_cmsg_send()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 0 | *sk->sk_backlog.head->dev->name | 0-255 |
| PARAM_VALUE | 1 | msg | 4096-ptr_max |
| PARAM_VALUE | 1 | msg->msg_control->cmsg_level | s32min-16,18-s32max |
| PARAM_VALUE | 1 | msg->msg_control->cmsg_type | 103 |
| PARAM_VALUE | 1 | msg->msg_controllen | 16-u64max |
| PARAM_VALUE | 1 | msg->msg_name | 0,4096-ptr_max |
| PARAM_VALUE | 2 | ipc | 220240098717503488 |
| BUF_SIZE | 1 | msg->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | msg->msg_name | (-1)-0,12,16,28,128 |
| BUF_SIZE | 1 | msg->msg_ubuf | (-1),16 |
| CAPPED_DATA | 1 | msg->msg_control->cmsg_len | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 1 | msg | $1 |
| BIT_INFO | 1 | msg->msg_flags | 0x0,0xfffffffe |
| NOSPEC | 1 | msg->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | msg->msg_controllen | 16-s32max[c] |
| USER_DATA | 1 | msg->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | msg->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 1 | msg->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | msg->msg_namelen | 0-128 |
| USER_DATA | 1 | *msg->msg_name | s64min-s64max |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| UNITS | 0 | sk | unit_byte |
| USER_PTR | 1 | msg->msg_control | |
| USER_PTR | 1 | msg->msg_name |