Documented in 1 files:
Defined in 1 files as a prototype:
Defined in 2 files as a function:
Referenced in 3 files:
Smatch caller information:
net/sctp/sm_make_chunk.c sctp_process_asconf_param() -> security_sctp_bind_connect()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | optname | 448 |
| PARAM_VALUE | 2 | address | 7246040815937822720 |
| BUF_SIZE | 2 | address | 28 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 0 | sk | unit_byte |
| UNITS | 3 | addrlen | unit_byte |
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | &sk->sk_lock.slock | ||
| HALF_LOCKED2 | sk |
net/sctp/sm_make_chunk.c sctp_process_asconf_param() -> security_sctp_bind_connect()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | optname | 1216 |
| PARAM_VALUE | 2 | address | 7246040815937822720 |
| BUF_SIZE | 2 | address | 28 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 0 | sk | unit_byte |
| UNITS | 3 | addrlen | unit_byte |
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | &sk->sk_lock.slock | ||
| HALF_LOCKED2 | sk |
net/sctp/socket.c __sctp_setsockopt_connectx() -> security_sctp_bind_connect()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 1 | optname | 110 |
| PARAM_VALUE | 2 | address | 0-ptr_max |
| PARAM_VALUE | 3 | addrlen | 2-s32max |
| BUF_SIZE | 2 | address | (-1)-135168 |
| BUF_SIZE | 2 | address | (-1)-135168 |
| CAPPED_DATA | 3 | addrlen | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 2 | address | $1 |
| DATA_SOURCE | 3 | addrlen | $2 |
| NOSPEC | 3 | addrlen | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | address->sa_family | 0-u16max |
| USER_DATA | 3 | addrlen | 2-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| UNITS | 3 | addrlen | unit_byte |
| BYTE_COUNT | 2 | ==address3 | 8050 |
| USER_PTR | 2 | address | |
| USER_PTR | 2 | address->sa_data | |
| LOCK2 | 0 | sk |
net/sctp/socket.c sctp_sendmsg_new_asoc() -> security_sctp_bind_connect()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->__sk_common.skc_prot | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 1 | optname | 126 |
| PARAM_VALUE | 2 | address | 4096-ptr_max |
| BUF_SIZE | 2 | address | (-1)-0,12,28,128 |
| BUF_SIZE | 2 | address | (-1)-0,12,28,128 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 2 | address | $3 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | address->sa_family | 0-u16max[u] |
| UNITS | 0 | sk | unit_byte |
| UNITS | 3 | addrlen | unit_byte |
| USER_PTR | 2 | address | |
| LOCK2 | 0 | sk | |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk |
net/sctp/socket.c sctp_setsockopt_bindx() -> security_sctp_bind_connect()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | *sk->sk_backlog.head->dev->name | 0-255 |
| PARAM_VALUE | 1 | optname | 100 |
| PARAM_VALUE | 2 | address | 0-ptr_max |
| PARAM_VALUE | 3 | addrlen | 2-135168 |
| BUF_SIZE | 2 | address | (-1)-135168 |
| BUF_SIZE | 2 | address | (-1)-135168 |
| CAPPED_DATA | 3 | addrlen | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| DATA_SOURCE | 2 | address | $1 |
| DATA_SOURCE | 3 | addrlen | $2 |
| NOSPEC | 3 | addrlen | |
| NOSPEC | 3 | addrlen | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | address->sa_family | 0-u16max[u] |
| USER_DATA | 3 | addrlen | 2-135167[c] |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_receive_queue.prev->truesize | |
| UNITS | 3 | addrlen | unit_byte |
| USER_PTR | 2 | address | |
| LOCK2 | 0 | sk |
net/sctp/socket.c sctp_setsockopt_peer_primary_addr() -> security_sctp_bind_connect()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 1 | optname | 5 |
| PARAM_VALUE | 2 | address | 4096-ptr_max |
| BUF_SIZE | 2 | address | 128 |
| CAPPED_DATA | 0 | sk | 1 |
| DATA_SOURCE | 0 | sk | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| UNITS | 3 | addrlen | unit_byte |
| LOCK2 | 0 | sk |
net/sctp/socket.c sctp_setsockopt_primary_addr() -> security_sctp_bind_connect()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sk | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.owned | 1 |
| PARAM_VALUE | 0 | sk->sk_lock.slock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | sk->sk_lock.wq.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 1 | optname | 6 |
| PARAM_VALUE | 2 | address | 4096-ptr_max |
| BUF_SIZE | 2 | address | 128 |
| DATA_SOURCE | 0 | sk | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | sk->sk_backlog.len | |
| UNITS | 3 | addrlen | unit_byte |
| LOCK2 | 0 | sk |