Documented in 1 files:

Defined in 1 files as a function:

Referenced in 2 files:

Smatch caller information:

kernel/audit.c audit_receive() -> nlmsg_next()

Type Parameter Key Value
PARAM_VALUE 0 nlh 4096-ptr_max
PARAM_VALUE 0 nlh->nlmsg_len 16-s32max
PARAM_VALUE 1 remaining 6674593609185751040
PARAM_VALUE 1 *remaining 16-s32max
BUF_SIZE 0 nlh (-1),1-s32max
BUF_SIZE 0 nlh (-1),1-s32max
CAPPED_DATA 0 nlh->nlmsg_len 1
NOSPEC 0 nlh->nlmsg_len
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 nlh->nlmsg_flags 0-u16max
USER_DATA 0 nlh->nlmsg_len 16-s32max[c]
USER_DATA 0 nlh->nlmsg_pid 0-u32max
USER_DATA 0 nlh->nlmsg_seq 0-u32max
USER_DATA 0 nlh->nlmsg_type 0-u16max
USER_DATA 1 *remaining 16-s32max[c][u]
NO_OVERFLOW_SIMPLE 0 nlh->nlmsg_len
NO_OVERFLOW_SIMPLE 1 *remaining
UNITS 0 nlh unit_byte
USER_PTR 0 nlh
USER_PTR 1 remaining
LOCK2 global &audit_cmd_mutex.lock
HALF_LOCKED2 global &hwsim_phys_lock
HALF_LOCKED2 global &rtnl_mutex
HALF_LOCKED2 global &rx_queue_mutex
HALF_LOCKED2 rcu_read

net/tipc/netlink_compat.c __tipc_nl_compat_dumpit() -> nlmsg_next()

Type Parameter Key Value
PARAM_VALUE 0 nlh 4096-ptr_max
PARAM_VALUE 0 nlh->nlmsg_len 20-s32max
PARAM_VALUE 1 remaining 1755956801097863168
PARAM_VALUE 1 *remaining 16-s32max
BUF_SIZE 0 nlh (-1),1-s32max
BUF_SIZE 0 nlh (-1),1-s32max
CAPPED_DATA 0 nlh->nlmsg_len 1
NOSPEC 0 nlh->nlmsg_len
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 nlh->nlmsg_flags 0-u16max
USER_DATA 0 nlh->nlmsg_len 20-s32max[c]
USER_DATA 0 nlh->nlmsg_pid 0-u32max
USER_DATA 0 nlh->nlmsg_seq 0-u32max
USER_DATA 0 nlh->nlmsg_type 0-u16max
USER_DATA 1 *remaining 16-s32max[c][u]
UNITS 0 nlh unit_byte
USER_PTR 0 nlh
USER_PTR 1 remaining