Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 6 files:
- net/ipv4/netfilter/ip_tables.c, line 1850
- net/ipv4/netfilter/iptable_filter.c, line 82
- net/ipv4/netfilter/iptable_mangle.c
- net/ipv4/netfilter/iptable_nat.c
- net/ipv4/netfilter/iptable_raw.c, line 80
- net/ipv4/netfilter/iptable_security.c, line 70
Smatch caller information:
net/ipv4/netfilter/iptable_mangle.c ipt_mangle_out() -> ipt_do_table()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 1 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 1 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 2 | state | 4096-ptr_max |
| PARAM_VALUE | 2 | state->hook | 3 |
| BUF_SIZE | 0 | priv | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | priv | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | priv | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | state | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 1 | skb->csum | 0-192512[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->truesize | 0-u32max |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->group | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->proto_down | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->group | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | state->sk->sk_backlog.len | |
| HALF_LOCKED2 | rcu_read |
net/ipv4/netfilter/iptable_mangle.c iptable_mangle_hook() -> ipt_do_table()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 1 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 1 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 2 | state | 4096-ptr_max |
| PARAM_VALUE | 2 | state->hook | 0-2,4-255 |
| BUF_SIZE | 0 | priv | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | priv | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | priv | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | state | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 1 | skb->csum | 0-192512[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->truesize | 0-u32max |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->group | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->group | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | state->sk->sk_backlog.len | |
| HALF_LOCKED2 | rcu_read |
net/netfilter/nfnetlink_queue.c nf_hook_entry_hookfn() -> (struct nf_hook_entry)->hook()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 2 | state | 4096-ptr_max |
| PARAM_VALUE | 2 | state->pf | 2,7,10 |
| BUF_SIZE | 0 | priv | s32min-(-2),1-s32max |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | state | $2 |
| CONTAINER | 0 | *(-0+8) | $(-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| HALF_LOCKED2 | &queue->lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
net/bridge/br_input.c nf_hook_entry_hookfn() -> (struct nf_hook_entry)->hook()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 0 |
| PARAM_VALUE | 1 | skb->dev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ip6_ptr->stats.proc_dir_entry | 0,4806605944481423360 |
| PARAM_VALUE | 1 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 1 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 1 | skb->dev->nd_net.net->nf.hooks_bridge | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->fill_addr_option | 9149257602806276096 |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->parse_options | 4570881757937598464 |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->update | 8455145027589103616 |
| PARAM_VALUE | 1 | skb->pkt_type | 0-4,6-7 |
| PARAM_VALUE | 1 | skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 1 | skb->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 1 | skb->sk->sk_callback_lock.owner_cpu | u32max |
| PARAM_VALUE | 1 | skb->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_prot_creator->owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_rcu.func | 1-u64max |
| PARAM_VALUE | 1 | skb->sk->sk_rcu.next | 0 |
| PARAM_VALUE | 2 | state | 7798400090736705536 |
| PARAM_VALUE | 2 | state->hook | 0 |
| PARAM_VALUE | 2 | state->in | 4096-ptr_max |
| PARAM_VALUE | 2 | state->net | 4096-ptr_max |
| PARAM_VALUE | 2 | state->okfn | 8550237040268242944 |
| PARAM_VALUE | 2 | state->out | 0 |
| PARAM_VALUE | 2 | state->pf | 7 |
| PARAM_VALUE | 2 | state->sk | 0 |
| BUF_SIZE | 0 | priv | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | skb | (-1),240 |
| BUF_SIZE | 1 | skb | (-1),240 |
| CAPPED_DATA | 1 | skb | 1 |
| CAPPED_DATA | 1 | skb->dev->nd_net.net | 1 |
| CAPPED_DATA | 1 | skb->dev->rx_handler_data | 1 |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | state | $2 |
| FUZZY_MAX | 1 | skb->pkt_type | 0 |
| CONTAINER | 0 | *(-0+8) | $(-1) |
| MEM_ZERO | 1 | skb->cb | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | bh |
net/netfilter/nf_nat_core.c nf_nat_inet_fn() -> (struct nf_hook_entry)->hook()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->create_rxfh_context | 0-s64max |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->get_link_ext_state | 0-s64max |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->get_mm_stats | 0-s64max |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->modify_rxfh_context | 0-s64max |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->remove_rxfh_context | 0-s64max |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->rxfh_max_num_contexts | 0-4294967295 |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->supported_coalesce_params | 0-4294967295 |
| PARAM_VALUE | 1 | skb->dev->ip6_ptr->mc_query_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 1 | skb->dev->ip6_ptr->mc_query_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 1 | skb->dev->ip6_ptr->mc_query_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 1 | skb->dev->ip6_ptr->mc_report_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 1 | skb->dev->ip6_ptr->mc_report_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 1 | skb->dev->ip6_ptr->mc_report_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 1 | skb->dev->ip6_ptr->stats.proc_dir_entry | 0,4806605944481423360 |
| PARAM_VALUE | 1 | skb->dev->linkwatch_dev_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->dev->linkwatch_dev_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 1 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 1 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,9688-u64max |
| PARAM_VALUE | 1 | skb->next->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->next->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | skb->next->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 1 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 1 | skb->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 2 | state | 4096-ptr_max |
| BUF_SIZE | 0 | priv | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | state | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 1 | skb->csum | 0-192512[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->truesize | 0-u32max |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->group | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->in->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->group | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | state->out->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | state->sk->sk_backlog.len | |
| HALF_LOCKED2 | rcu_read |
net/netfilter/core.c nf_hook_entry_hookfn() -> (struct nf_hook_entry)->hook()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->get_link_ext_state | 0-s64max |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->get_mm_stats | 0-s64max |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->rxfh_max_num_contexts | 0-4294967295 |
| PARAM_VALUE | 1 | skb->dev->ethtool_ops->supported_coalesce_params | 0-s64max |
| PARAM_VALUE | 1 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 1 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 1 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 2 | state | 4096-ptr_max |
| PARAM_VALUE | 2 | state->hook | 0-4 |
| PARAM_VALUE | 2 | state->okfn | 0,4096-ptr_max |
| PARAM_VALUE | 2 | state->pf | 2-3,5,7,10 |
| BUF_SIZE | 0 | priv | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $1 |
| DATA_SOURCE | 2 | state | $2 |
| CONTAINER | 0 | *(-0+8) | $(-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 1 | skb->csum | 0-192512[c] |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->inner_protocol | 1-255 |
| HOST_DATA | 1 | skb->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->next->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->next->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->next->prev->len | 1-u32max[c] |
| HOST_DATA | 1 | skb->next->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 1 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->protocol | 1-255 |
| HOST_DATA | 1 | skb->truesize | 0-u32max |
| HOST_DATA | 1 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 1 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 1 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 1 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 1 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | skb->truesize | |
| HALF_LOCKED2 | rcu_read |