Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 4 files:
Smatch caller information:
net/mctp/route.c __mctp_key_done_in() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->dev | 0 |
| PARAM_VALUE | 0 | key->hlist->next->pprev | 1-u64max |
| PARAM_VALUE | 0 | key->hlist.next | 0 |
| PARAM_VALUE | 0 | key->hlist.pprev | 0 |
| PARAM_VALUE | 0 | key->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | key->manual_alloc | 0 |
| PARAM_VALUE | 0 | key->reasm_dead | 1 |
| PARAM_VALUE | 0 | key->reasm_head | 0 |
| PARAM_VALUE | 0 | key->sklist->next->pprev | 1-u64max |
| PARAM_VALUE | 0 | key->sklist.next | 0 |
| PARAM_VALUE | 0 | key->sklist.pprev | 0 |
| PARAM_VALUE | 0 | key->tag | 0-15 |
| PARAM_VALUE | 0 | key->valid | 0 |
| DATA_SOURCE | 0 | key | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->len | |
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->truesize | |
| LOCK2 | &net->mctp.keys_lock | ||
| LOCK2 | flags | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct netns_mctp)->keys_lock |
net/mctp/route.c __mctp_key_done_in() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->lock.rlock.dep_map->name | 0-255 |
| CAPPED_DATA | 0 | key | 1 |
| DATA_SOURCE | 0 | key | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->len | |
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->truesize | |
| LOCK2 | rcu_read |
net/mctp/route.c mctp_alloc_local_tag() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->peer_addr | 1-255 |
| PARAM_VALUE | 0 | key->refs.refs.counter | 1 |
| PARAM_VALUE | 0 | key->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | key->tag | 0 |
| PARAM_VALUE | 0 | key->valid | 1 |
| BUF_SIZE | 0 | key | 184 |
| DATA_SOURCE | 0 | key | r mctp_key_alloc |
| FUZZY_MAX | 0 | key->peer_addr | 255 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | key->peer_addr | 1-255 |
net/mctp/route.c mctp_dst_input() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->reasm_head->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | key->reasm_head->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | key->reasm_head->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | key->reasm_head->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 0 | key->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | key->tag | 0-15 |
| PARAM_VALUE | 0 | key->valid | 1 |
| BUF_SIZE | 0 | key | 184 |
| CAPPED_DATA | 0 | key->tag | 1 |
| DATA_SOURCE | 0 | key | r mctp_key_alloc |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | key->reasm_head->csum_offset | 0-u16max |
| HOST_DATA | 0 | key->reasm_head->data_len | 0-u32max[c] |
| HOST_DATA | 0 | key->reasm_head->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | key->reasm_head->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | key->reasm_head->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | key->reasm_head->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | key->reasm_head->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | key->reasm_head->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *key->reasm_head->data | 0-255 |
| HOST_DATA | 0 | *key->reasm_tailp->csum_offset | 0-u16max |
| HOST_DATA | 0 | *key->reasm_tailp->data_len | 0-4294967295[c] |
| HOST_DATA | 0 | *key->reasm_tailp->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | *key->reasm_tailp->users.refs.counter | s32min-0,2-s32max |
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->len | |
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | *key->reasm_tailp->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | *key->reasm_tailp->end | |
| NO_OVERFLOW_SIMPLE | 0 | *key->reasm_tailp->len | |
| NO_OVERFLOW_SIMPLE | 0 | *key->reasm_tailp->tail | |
| NO_OVERFLOW_SIMPLE | 0 | *key->reasm_tailp->truesize | |
| LOCK2 | rcu_read |
net/mctp/route.c mctp_dst_input() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | key->reasm_head->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | key->reasm_head->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | key->reasm_head->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | key->reasm_head->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 0 | key->tag | 0-15 |
| PARAM_VALUE | 0 | key->valid | 1 |
| CAPPED_DATA | 0 | key | 1 |
| CAPPED_DATA | 0 | key->tag | 1 |
| DATA_SOURCE | 0 | key | r mctp_lookup_key |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | key->reasm_head->csum_offset | 0-u16max |
| HOST_DATA | 0 | key->reasm_head->data_len | 0-u32max[c] |
| HOST_DATA | 0 | key->reasm_head->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | key->reasm_head->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | key->reasm_head->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | key->reasm_head->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | key->reasm_head->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | key->reasm_head->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *key->reasm_head->data | 0-255 |
| HOST_DATA | 0 | *key->reasm_tailp->csum_offset | 0-u16max |
| HOST_DATA | 0 | *key->reasm_tailp->data_len | 0-4294967295[c] |
| HOST_DATA | 0 | *key->reasm_tailp->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | *key->reasm_tailp->users.refs.counter | s32min-0,2-s32max |
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->len | |
| NO_OVERFLOW_SIMPLE | 0 | key->reasm_head->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | *key->reasm_tailp->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | *key->reasm_tailp->end | |
| NO_OVERFLOW_SIMPLE | 0 | *key->reasm_tailp->len | |
| NO_OVERFLOW_SIMPLE | 0 | *key->reasm_tailp->tail | |
| NO_OVERFLOW_SIMPLE | 0 | *key->reasm_tailp->truesize |
net/mctp/route.c mctp_dst_input() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | key->tag | 0-15 |
| PARAM_VALUE | 0 | key->valid | 1 |
| DATA_SOURCE | 0 | key | r mctp_lookup_key |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
net/mctp/route.c mctp_local_output() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->hlist.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | key->peer_addr | 1-255 |
| PARAM_VALUE | 0 | key->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | key->sklist.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | key->valid | 1 |
| BUF_SIZE | 0 | key | (-1),184 |
| BUF_SIZE | 0 | key | (-1),184 |
| CAPPED_DATA | 0 | key->peer_addr | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | key->peer_addr | 1-255[c] |
net/mctp/route.c mctp_test_route_input_multiple_nets_key_fini() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| NOCHECK_CALL |
net/mctp/route.c mctp_test_route_input_sk_keys() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->hlist.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | key->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | key->sklist.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | key->valid | 1 |
| BUF_SIZE | 0 | key | 184 |
| DATA_SOURCE | 0 | key | r mctp_key_alloc |
| NOCHECK_CALL |
net/core/skbuff.c skb_ext_put_mctp() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 1-u64max |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &sk->sk_lock.slock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
net/mctp/af_mctp.c __mctp_key_remove() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->dev | 0 |
| PARAM_VALUE | 0 | key->hlist->next->pprev | 1-u64max |
| PARAM_VALUE | 0 | key->hlist.next | 0 |
| PARAM_VALUE | 0 | key->hlist.pprev | 0 |
| PARAM_VALUE | 0 | key->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | key->reasm_dead | 1 |
| PARAM_VALUE | 0 | key->reasm_head | 0 |
| PARAM_VALUE | 0 | key->sklist->next->pprev | 1-u64max |
| PARAM_VALUE | 0 | key->sklist.next | 0 |
| PARAM_VALUE | 0 | key->sklist.pprev | 0 |
| PARAM_VALUE | 0 | key->valid | 0 |
| BUF_SIZE | 0 | key | (-1),184 |
| BUF_SIZE | 0 | key | (-1),184 |
| DATA_SOURCE | 0 | key | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | key->peer_addr | 1-255[c] |
| LOCK2 | &net->mctp.keys_lock | ||
| LOCK2 | flags | ||
| TYPE_LOCK | (struct netns_mctp)->keys_lock |
net/mctp/af_mctp.c mctp_ioctl_alloctag() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->hlist->next->pprev | 1-u64max |
| PARAM_VALUE | 0 | key->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | key->reasm_head->_nfct | 0 |
| PARAM_VALUE | 0 | key->reasm_head->_skb_refdst | 0 |
| PARAM_VALUE | 0 | key->reasm_head->active_extensions | 0 |
| PARAM_VALUE | 0 | key->reasm_head->destructor | 0 |
| PARAM_VALUE | 0 | key->reasm_head->sk | 0 |
| PARAM_VALUE | 0 | key->reasm_head->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | key->reasm_head->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | key->reasm_head->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | key->reasm_head->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | key->reasm_head->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | key->reasm_head->sk->sk_callback_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | key->reasm_head->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | key->reasm_head->sk->sk_owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 0 | key->reasm_head->sk->sk_prot_creator->owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 0 | key->reasm_head->sk->sk_rcu.func | 1-u64max |
| PARAM_VALUE | 0 | key->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | key->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | key->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | key->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | key->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | key->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | key->sk->sk_callback_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | key->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | key->sk->sk_callback_lock.raw_lock.wlocked | 0 |
| PARAM_VALUE | 0 | key->sk->sk_rcu.func | 1-u64max |
| PARAM_VALUE | 0 | key->sk->sk_rcu.next | 0 |
| PARAM_VALUE | 0 | key->sk->sk_reuseport_cb | 0 |
| PARAM_VALUE | 0 | key->sk->sk_user_data | 0 |
| PARAM_VALUE | 0 | key->sklist->next->pprev | 1-u64max |
| BUF_SIZE | 0 | key | 184 |
| CAPPED_DATA | 0 | key | 1 |
| DATA_SOURCE | 0 | key | r mctp_alloc_local_tag |
| NOCHECK_CALL | |||
| LOCK2 | &net->mctp.keys_lock | ||
| LOCK2 | flags | ||
| TYPE_LOCK | (struct netns_mctp)->keys_lock |
net/mctp/af_mctp.c mctp_ioctl_alloctag() -> mctp_key_unref()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | key | 4096-ptr_max |
| PARAM_VALUE | 0 | key->hlist.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | key->local_addr | 255 |
| PARAM_VALUE | 0 | key->manual_alloc | 1 |
| PARAM_VALUE | 0 | key->net | 1 |
| PARAM_VALUE | 0 | key->peer_addr | 1-255 |
| PARAM_VALUE | 0 | key->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | key->sklist.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | key->valid | 1 |
| BUF_SIZE | 0 | key | 184 |
| DATA_SOURCE | 0 | key | r mctp_alloc_local_tag |
| NOCHECK_CALL | |||
| USER_DATA | 0 | key->peer_addr | 1-255 |