Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 4 files:

Smatch caller information:

net/mctp/route.c __mctp_key_done_in() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->dev 0
PARAM_VALUE 0 key->hlist->next->pprev 1-u64max
PARAM_VALUE 0 key->hlist.next 0
PARAM_VALUE 0 key->hlist.pprev 0
PARAM_VALUE 0 key->lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 key->manual_alloc 0
PARAM_VALUE 0 key->reasm_dead 1
PARAM_VALUE 0 key->reasm_head 0
PARAM_VALUE 0 key->sklist->next->pprev 1-u64max
PARAM_VALUE 0 key->sklist.next 0
PARAM_VALUE 0 key->sklist.pprev 0
PARAM_VALUE 0 key->tag 0-15
PARAM_VALUE 0 key->valid 0
DATA_SOURCE 0 key $0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
NO_OVERFLOW_SIMPLE 0 key->reasm_head->data_len
NO_OVERFLOW_SIMPLE 0 key->reasm_head->len
NO_OVERFLOW_SIMPLE 0 key->reasm_head->truesize
LOCK2 &net->mctp.keys_lock
LOCK2 flags
LOCK2 rcu_read
TYPE_LOCK (struct netns_mctp)->keys_lock

net/mctp/route.c __mctp_key_done_in() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->lock.rlock.dep_map->name 0-255
CAPPED_DATA 0 key 1
DATA_SOURCE 0 key $0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
NO_OVERFLOW_SIMPLE 0 key->reasm_head->data_len
NO_OVERFLOW_SIMPLE 0 key->reasm_head->len
NO_OVERFLOW_SIMPLE 0 key->reasm_head->truesize
LOCK2 rcu_read

net/mctp/route.c mctp_alloc_local_tag() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->peer_addr 1-255
PARAM_VALUE 0 key->refs.refs.counter 1
PARAM_VALUE 0 key->sk 4096-ptr_max
PARAM_VALUE 0 key->tag 0
PARAM_VALUE 0 key->valid 1
BUF_SIZE 0 key 184
DATA_SOURCE 0 key r mctp_key_alloc
FUZZY_MAX 0 key->peer_addr 255
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 key->peer_addr 1-255

net/mctp/route.c mctp_dst_input() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->reasm_head->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 0 key->reasm_head->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 0 key->reasm_head->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 0 key->reasm_head->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE 0 key->sk 4096-ptr_max
PARAM_VALUE 0 key->tag 0-15
PARAM_VALUE 0 key->valid 1
BUF_SIZE 0 key 184
CAPPED_DATA 0 key->tag 1
DATA_SOURCE 0 key r mctp_key_alloc
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 0 key->reasm_head->csum_offset 0-u16max
HOST_DATA 0 key->reasm_head->data_len 0-u32max[c]
HOST_DATA 0 key->reasm_head->prev->csum_offset 0-u16max
HOST_DATA 0 key->reasm_head->prev->data_len 0-u32max[c]
HOST_DATA 0 key->reasm_head->prev->len 1-u32max[c]
HOST_DATA 0 key->reasm_head->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 key->reasm_head->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 key->reasm_head->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 *key->reasm_head->data 0-255
HOST_DATA 0 *key->reasm_tailp->csum_offset 0-u16max
HOST_DATA 0 *key->reasm_tailp->data_len 0-4294967295[c]
HOST_DATA 0 *key->reasm_tailp->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 *key->reasm_tailp->users.refs.counter s32min-0,2-s32max
NO_OVERFLOW_SIMPLE 0 key->reasm_head->data_len
NO_OVERFLOW_SIMPLE 0 key->reasm_head->len
NO_OVERFLOW_SIMPLE 0 key->reasm_head->truesize
NO_OVERFLOW_SIMPLE 0 *key->reasm_tailp->data_len
NO_OVERFLOW_SIMPLE 0 *key->reasm_tailp->end
NO_OVERFLOW_SIMPLE 0 *key->reasm_tailp->len
NO_OVERFLOW_SIMPLE 0 *key->reasm_tailp->tail
NO_OVERFLOW_SIMPLE 0 *key->reasm_tailp->truesize
LOCK2 rcu_read

net/mctp/route.c mctp_dst_input() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 key->reasm_head->dev->nd_net.net->ipv4.fqdir->f->frag_expire 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560
PARAM_VALUE 0 key->reasm_head->dev->nd_net.net->ipv4.fqdir->f->qsize 0,304,320
PARAM_VALUE 0 key->reasm_head->dev->rtnl_link_ops->maxtype 0-6,8-10,15,18,20,22,24,34,50
PARAM_VALUE 0 key->reasm_head->dev->rtnl_link_ops->priv_size 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max
PARAM_VALUE 0 key->tag 0-15
PARAM_VALUE 0 key->valid 1
CAPPED_DATA 0 key 1
CAPPED_DATA 0 key->tag 1
DATA_SOURCE 0 key r mctp_lookup_key
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HOST_DATA 0 key->reasm_head->csum_offset 0-u16max
HOST_DATA 0 key->reasm_head->data_len 0-u32max[c]
HOST_DATA 0 key->reasm_head->prev->csum_offset 0-u16max
HOST_DATA 0 key->reasm_head->prev->data_len 0-u32max[c]
HOST_DATA 0 key->reasm_head->prev->len 1-u32max[c]
HOST_DATA 0 key->reasm_head->prev->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 key->reasm_head->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 key->reasm_head->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 *key->reasm_head->data 0-255
HOST_DATA 0 *key->reasm_tailp->csum_offset 0-u16max
HOST_DATA 0 *key->reasm_tailp->data_len 0-4294967295[c]
HOST_DATA 0 *key->reasm_tailp->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 *key->reasm_tailp->users.refs.counter s32min-0,2-s32max
NO_OVERFLOW_SIMPLE 0 key->reasm_head->data_len
NO_OVERFLOW_SIMPLE 0 key->reasm_head->len
NO_OVERFLOW_SIMPLE 0 key->reasm_head->truesize
NO_OVERFLOW_SIMPLE 0 *key->reasm_tailp->data_len
NO_OVERFLOW_SIMPLE 0 *key->reasm_tailp->end
NO_OVERFLOW_SIMPLE 0 *key->reasm_tailp->len
NO_OVERFLOW_SIMPLE 0 *key->reasm_tailp->tail
NO_OVERFLOW_SIMPLE 0 *key->reasm_tailp->truesize

net/mctp/route.c mctp_dst_input() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 key->tag 0-15
PARAM_VALUE 0 key->valid 1
DATA_SOURCE 0 key r mctp_lookup_key
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL

net/mctp/route.c mctp_local_output() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->hlist.pprev 4096-ptr_max
PARAM_VALUE 0 key->peer_addr 1-255
PARAM_VALUE 0 key->sk 4096-ptr_max
PARAM_VALUE 0 key->sklist.pprev 4096-ptr_max
PARAM_VALUE 0 key->valid 1
BUF_SIZE 0 key (-1),184
BUF_SIZE 0 key (-1),184
CAPPED_DATA 0 key->peer_addr 1
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 key->peer_addr 1-255[c]

net/mctp/route.c mctp_test_route_input_multiple_nets_key_fini() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
NOCHECK_CALL

net/mctp/route.c mctp_test_route_input_sk_keys() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->hlist.pprev 4096-ptr_max
PARAM_VALUE 0 key->sk 4096-ptr_max
PARAM_VALUE 0 key->sklist.pprev 4096-ptr_max
PARAM_VALUE 0 key->valid 1
BUF_SIZE 0 key 184
DATA_SOURCE 0 key r mctp_key_alloc
NOCHECK_CALL

net/core/skbuff.c skb_ext_put_mctp() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 1-u64max
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
HALF_LOCKED2 &sk->sk_lock.slock
HALF_LOCKED2 bh
HALF_LOCKED2 rcu_read

net/mctp/af_mctp.c __mctp_key_remove() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->dev 0
PARAM_VALUE 0 key->hlist->next->pprev 1-u64max
PARAM_VALUE 0 key->hlist.next 0
PARAM_VALUE 0 key->hlist.pprev 0
PARAM_VALUE 0 key->lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 key->reasm_dead 1
PARAM_VALUE 0 key->reasm_head 0
PARAM_VALUE 0 key->sklist->next->pprev 1-u64max
PARAM_VALUE 0 key->sklist.next 0
PARAM_VALUE 0 key->sklist.pprev 0
PARAM_VALUE 0 key->valid 0
BUF_SIZE 0 key (-1),184
BUF_SIZE 0 key (-1),184
DATA_SOURCE 0 key $0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 key->peer_addr 1-255[c]
LOCK2 &net->mctp.keys_lock
LOCK2 flags
TYPE_LOCK (struct netns_mctp)->keys_lock

net/mctp/af_mctp.c mctp_ioctl_alloctag() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->hlist->next->pprev 1-u64max
PARAM_VALUE 0 key->lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 key->reasm_head->_nfct 0
PARAM_VALUE 0 key->reasm_head->_skb_refdst 0
PARAM_VALUE 0 key->reasm_head->active_extensions 0
PARAM_VALUE 0 key->reasm_head->destructor 0
PARAM_VALUE 0 key->reasm_head->sk 0
PARAM_VALUE 0 key->reasm_head->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 0 key->reasm_head->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev 4096-ptr_max
PARAM_VALUE 0 key->reasm_head->sk->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 0 key->reasm_head->sk->sk_bpf_storage->owner_refcnt.refs.counter s32min-s32max
PARAM_VALUE 0 key->reasm_head->sk->sk_callback_lock.owner (-1)
PARAM_VALUE 0 key->reasm_head->sk->sk_callback_lock.owner_cpu u32max
PARAM_VALUE 0 key->reasm_head->sk->sk_callback_lock.raw_lock.cnts.counter 0-s32max
PARAM_VALUE 0 key->reasm_head->sk->sk_owner->refcnt.counter 0-s32max
PARAM_VALUE 0 key->reasm_head->sk->sk_prot_creator->owner->refcnt.counter 0-s32max
PARAM_VALUE 0 key->reasm_head->sk->sk_rcu.func 1-u64max
PARAM_VALUE 0 key->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead 1
PARAM_VALUE 0 key->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev 4096-ptr_max
PARAM_VALUE 0 key->sk->__sk_common.skc_net.net->refcnt_tracker.dead 1
PARAM_VALUE 0 key->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 key->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 key->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 key->sk->sk_callback_lock.dep_map->name 0-255
PARAM_VALUE 0 key->sk->sk_callback_lock.raw_lock.cnts.counter 0-s32max
PARAM_VALUE 0 key->sk->sk_callback_lock.raw_lock.wlocked 0
PARAM_VALUE 0 key->sk->sk_rcu.func 1-u64max
PARAM_VALUE 0 key->sk->sk_rcu.next 0
PARAM_VALUE 0 key->sk->sk_reuseport_cb 0
PARAM_VALUE 0 key->sk->sk_user_data 0
PARAM_VALUE 0 key->sklist->next->pprev 1-u64max
BUF_SIZE 0 key 184
CAPPED_DATA 0 key 1
DATA_SOURCE 0 key r mctp_alloc_local_tag
NOCHECK_CALL
LOCK2 &net->mctp.keys_lock
LOCK2 flags
TYPE_LOCK (struct netns_mctp)->keys_lock

net/mctp/af_mctp.c mctp_ioctl_alloctag() -> mctp_key_unref()

Type Parameter Key Value
PARAM_VALUE 0 key 4096-ptr_max
PARAM_VALUE 0 key->hlist.pprev 4096-ptr_max
PARAM_VALUE 0 key->local_addr 255
PARAM_VALUE 0 key->manual_alloc 1
PARAM_VALUE 0 key->net 1
PARAM_VALUE 0 key->peer_addr 1-255
PARAM_VALUE 0 key->sk 4096-ptr_max
PARAM_VALUE 0 key->sklist.pprev 4096-ptr_max
PARAM_VALUE 0 key->valid 1
BUF_SIZE 0 key 184
DATA_SOURCE 0 key r mctp_alloc_local_tag
NOCHECK_CALL
USER_DATA 0 key->peer_addr 1-255