Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/vhost/net.c handle_rx() -> (struct proto_ops)->recvmsg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sock | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->ops | 4096-ptr_max |
| PARAM_VALUE | 1 | msg | 677290564554752 |
| PARAM_VALUE | 1 | msg->msg_control_is_user | 0 |
| PARAM_VALUE | 1 | msg->msg_controllen | 0 |
| PARAM_VALUE | 1 | msg->msg_flags | 64 |
| PARAM_VALUE | 1 | msg->msg_get_inq | 0 |
| PARAM_VALUE | 1 | msg->msg_inq | 0 |
| PARAM_VALUE | 1 | msg->msg_name | 0 |
| PARAM_VALUE | 1 | msg->msg_namelen | 0 |
| PARAM_VALUE | 1 | msg->msg_ubuf | 0 |
| PARAM_VALUE | 1 | msg->sg_from_iter | 0 |
| PARAM_VALUE | 2 | len | 1 |
| PARAM_VALUE | 3 | flags | 96 |
| BUF_SIZE | 0 | sock | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | sock | s32min-(-2),1-s32max |
| CONTAINER | 0 | -152-32+0 | $(-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &vq->mutex | ||
| TYPE_LOCK | (struct vhost_virtqueue)->mutex |
drivers/vhost/net.c handle_rx() -> (struct proto_ops)->recvmsg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sock | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->ops | 4096-ptr_max |
| PARAM_VALUE | 1 | msg | 677290564554752 |
| PARAM_VALUE | 1 | msg->msg_control_is_user | 0 |
| PARAM_VALUE | 1 | msg->msg_controllen | 0 |
| PARAM_VALUE | 1 | msg->msg_flags | 64 |
| PARAM_VALUE | 1 | msg->msg_get_inq | 0 |
| PARAM_VALUE | 1 | msg->msg_inq | 0 |
| PARAM_VALUE | 1 | msg->msg_name | 0 |
| PARAM_VALUE | 1 | msg->msg_namelen | 0 |
| PARAM_VALUE | 1 | msg->msg_ubuf | 0 |
| PARAM_VALUE | 1 | msg->sg_from_iter | 0 |
| PARAM_VALUE | 3 | flags | 96 |
| BUF_SIZE | 0 | sock | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | sock | s32min-(-2),1-s32max |
| CONTAINER | 0 | -152-32+0 | $(-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &vq->mutex | ||
| TYPE_LOCK | (struct vhost_virtqueue)->mutex |
net/smc/af_smc.c smc_recvmsg() -> (struct proto_ops)->recvmsg()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sock | 4096-ptr_max |
| PARAM_VALUE | 0 | sock->ops | 4096-ptr_max |
| BUF_SIZE | 1 | msg->msg_control | (-1)-0,16-17,24 |
| BUF_SIZE | 1 | msg->msg_name | (-1)-0,12,128 |
| DATA_SOURCE | 1 | msg | $1 |
| DATA_SOURCE | 2 | len | $2 |
| DATA_SOURCE | 3 | flags | $3 |
| CONTAINER | 0 | *(-152-32+0) | $(-1) |
| NOSPEC | 1 | msg->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | msg->msg_control | 4096-ptr_max[c][u] |
| USER_DATA | 1 | msg->msg_control_user | 4096-ptr_max[c][u] |
| USER_DATA | 1 | msg->msg_controllen | 0-u64max |
| USER_DATA | 1 | msg->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | msg->msg_iter.count | 0-u64max |
| USER_DATA | 1 | msg->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | *msg->msg_name | s64min-s64max |
| USER_DATA | 2 | len | 0-u64max |
| USER_DATA | 3 | flags | s32min-s32max |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/socket.c sock_recvmsg_nosec() -> sock_recvmsg_nosec ptr __f1()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | *sock->sk->sk_backlog.head->dev->name | 0-255 |
| PARAM_VALUE | 1 | msg | 4096-ptr_max |
| PARAM_VALUE | 2 | len | 0-1000000000 |
| BUF_SIZE | 0 | sock | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sock | s32min-(-1),1-s32max |
| BUF_SIZE | 1 | msg->msg_control | (-1)-0,16-17 |
| BUF_SIZE | 1 | msg->msg_name | (-1),12,128 |
| DATA_SOURCE | 0 | sock | $0 |
| DATA_SOURCE | 1 | msg | $1 |
| DATA_SOURCE | 3 | flags | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | msg->msg_controllen | 0-u64max |
| USER_DATA | 1 | msg->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | msg->msg_iter.count | 0-u64max |
| USER_DATA | 1 | msg->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | *msg->msg_name | s64min-s64max |
| USER_DATA | 2 | len | 0-1000000000 |
| USER_DATA | 3 | flags | s32min-s32max |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_receive_queue.prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | sock->sk->sk_write_queue.next->truesize |