Open Menu /

Defined in 1 files as a function:

Referenced in 10 files:

Smatch caller information:

net/can/raw.c raw_recvmsg() -> memcpy_to_msg()

Type Parameter Key Value
BUF_SIZE 0 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 data 1-s32max
CAPPED_DATA 2 len 1
DATA_SOURCE 0 msg $1
DATA_SOURCE 2 len $2 [m]
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
USER_DATA 2 len 1-s32max[c]
UNITS 1 data unit_byte
UNITS 2 len unit_byte
USER_PTR 1 data
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sk

net/packet/af_packet.c packet_rcv_vnet() -> memcpy_to_msg()

Type Parameter Key Value
PARAM_VALUE 1 data 7360962024279576576
PARAM_VALUE 2 len 10,12
BUF_SIZE 0 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 data 12
CAPPED_DATA 2 len 1
DATA_SOURCE 0 msg $0
DATA_SOURCE 2 len $3
NOSPEC 0 msg->msg_iter.count
MEM_ZERO 1 data
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
UNITS 2 len unit_byte
HALF_LOCKED2 &vq->mutex

net/smc/smc_rx.c smc_rx_recv_urg() -> memcpy_to_msg()

Type Parameter Key Value
PARAM_VALUE 0 msg 4096-ptr_max
PARAM_VALUE 0 msg->msg_namelen 0
PARAM_VALUE 1 data 4096-ptr_max
PARAM_VALUE 2 len 1
BUF_SIZE 0 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
DATA_SOURCE 0 msg $1
BIT_INFO 0 msg->msg_flags 0x1,0xffffffff
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
HALF_LOCKED2 sk

net/smc/smc_rx.c smc_rx_recvmsg() -> memcpy_to_msg()

Type Parameter Key Value
PARAM_VALUE 0 msg 4096-ptr_max
PARAM_VALUE 0 msg->msg_namelen 0
PARAM_VALUE 1 *data 0-255
BUF_SIZE 0 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
DATA_SOURCE 0 msg $1
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
USER_DATA 2 len (-2147483647)-s32max
UNITS 1 data unit_byte
UNITS 2 len unit_byte
LOCK2 sk
HALF_LOCKED2 &vq->mutex

net/ipv4/tcp.c tcp_recv_urg() -> memcpy_to_msg()

Type Parameter Key Value
PARAM_VALUE 0 msg 4096-ptr_max
PARAM_VALUE 1 data 4203463699583877120
PARAM_VALUE 1 *data 0-255
PARAM_VALUE 2 len 1
DATA_SOURCE 0 msg $1
BIT_INFO 0 msg->msg_flags 0x1,0xffffffff

net/vmw_vsock/hyperv_transport.c hvs_stream_dequeue() -> memcpy_to_msg()

Type Parameter Key Value
PARAM_VALUE 1 data 4096-ptr_max
PARAM_VALUE 1 *data 0-255
BUF_SIZE 0 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
CAPPED_DATA 2 len 1
DATA_SOURCE 0 msg $1
NOSPEC 0 msg->msg_iter.count
RX_PATH
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
UNITS 2 len unit_byte
LOCK2 sk

net/can/bcm.c bcm_recvmsg() -> memcpy_to_msg()

Type Parameter Key Value
BUF_SIZE 0 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 data 1-s32max
CAPPED_DATA 2 len 1
DATA_SOURCE 0 msg $1
DATA_SOURCE 2 len $2 [m]
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
USER_DATA 2 len 1-s32max[c]
UNITS 1 data unit_byte
UNITS 2 len unit_byte
USER_PTR 1 data
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sk

net/can/isotp.c isotp_recvmsg() -> memcpy_to_msg()

Type Parameter Key Value
BUF_SIZE 0 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 data 1-s32max
CAPPED_DATA 2 len 1
DATA_SOURCE 0 msg $1
DATA_SOURCE 2 len $2 [m]
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
USER_DATA 2 len 1-s32max[c]
UNITS 1 data unit_byte
UNITS 2 len unit_byte
USER_PTR 1 data
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sk

crypto/algif_hash.c hash_recvmsg() -> memcpy_to_msg()

Type Parameter Key Value
PARAM_VALUE 1 data 1-u64max
BUF_SIZE 0 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 data 1-s32max
CAPPED_DATA 2 len 1
DATA_SOURCE 0 msg $1
DATA_SOURCE 2 len $2 [m]
NOSPEC 0 msg->msg_iter.count
NOSPEC 2 len
NOSPEC 2 len
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
USER_DATA 2 len 1-s32max[c]
LOCK2 sk
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sk

crypto/algif_rng.c _rng_recvmsg() -> memcpy_to_msg()

Type Parameter Key Value
PARAM_VALUE 1 data 2242129261363044352
PARAM_VALUE 2 len 1-128
BUF_SIZE 0 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 data 128
DATA_SOURCE 0 msg $1
DATA_SOURCE 2 len $2 [m]
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
USER_DATA 2 len 1-128
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sock->sk

net/can/j1939/socket.c j1939_sk_recvmsg() -> memcpy_to_msg()

Type Parameter Key Value
BUF_SIZE 0 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 0 msg->msg_name (-1)-0,12,128
BUF_SIZE 1 data 1-s32max
CAPPED_DATA 2 len 1
DATA_SOURCE 0 msg $1
DATA_SOURCE 2 len $2 [m]
NOSPEC 0 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 0 msg->msg_controllen 0-u64max
USER_DATA 0 msg->msg_flags 0-u32max[c]
USER_DATA 0 msg->msg_iter.count 0-u64max
USER_DATA 0 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 0 *msg->msg_name s64min-s64max
USER_DATA 2 len 1-s32max[c]
UNITS 1 data unit_byte
UNITS 2 len unit_byte
USER_PTR 1 data
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sk