Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 5 files:

Smatch caller information:

net/ipv4/udp_bpf.c udp_bpf_recvmsg() -> sk_msg_recvmsg()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 0 sk->sk_lock.owned 1
PARAM_VALUE 0 sk->sk_lock.slock.rlock.dep_map->name 0-255
PARAM_VALUE 0 sk->sk_lock.wq.head.prev 4096-ptr_max
PARAM_VALUE 0 sk->sk_lock.wq.head.prev->next 4096-ptr_max
PARAM_VALUE 0 sk->sk_lock.wq.head.prev->next->next 4096-ptr_max
PARAM_VALUE 1 psock 4096-ptr_max
PARAM_VALUE 1 psock->ingress_skb.next 4096-ptr_max
PARAM_VALUE 1 psock->refcnt.refs.counter (-1073741824),0-s32max
BUF_SIZE 2 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 2 msg->msg_name (-1)-0,12,128
CAPPED_DATA 1 psock->ingress_skb.next 1
DATA_SOURCE 0 sk $0
DATA_SOURCE 1 psock r sk_psock_get
DATA_SOURCE 2 msg $1
DATA_SOURCE 3 len $2
DATA_SOURCE 4 flags $3
BIT_INFO 4 flags 0x0,0xffffdfff
NOSPEC 2 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 2 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 2 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 2 msg->msg_controllen 0-u64max
USER_DATA 2 msg->msg_flags 0-u32max[c]
USER_DATA 2 msg->msg_iter.count 0-u64max
USER_DATA 2 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 2 *msg->msg_name s64min-s64max
USER_DATA 3 len s32min-s32max
USER_DATA 4 flags s32min-s32max
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sk->sk_prot_creator->twsk_prot->twsk_slab->sheaf_capacity
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->data_len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->truesize
UNITS 0 sk unit_byte
UNITS 3 len unit_byte
LOCK2 0 sk

net/unix/unix_bpf.c unix_bpf_recvmsg() -> sk_msg_recvmsg()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 1 psock 4096-ptr_max
PARAM_VALUE 1 psock->refcnt.refs.counter (-1073741824),0-s32max
BUF_SIZE 2 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 2 msg->msg_name (-1)-0,12,128
CAPPED_DATA 0 sk->sk_user_data 1
CAPPED_DATA 0 &sk->sk_receive_queue 1
DATA_SOURCE 0 sk $0
DATA_SOURCE 1 psock r sk_psock_get
DATA_SOURCE 2 msg $1
DATA_SOURCE 3 len $2
DATA_SOURCE 4 flags $3
BIT_INFO 4 flags 0x0,0xfffffffe
NOSPEC 2 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 2 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 2 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 2 msg->msg_controllen 0-u64max
USER_DATA 2 msg->msg_flags 0-u32max[c]
USER_DATA 2 msg->msg_iter.count 0-u64max
USER_DATA 2 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 2 *msg->msg_name s64min-s64max
USER_DATA 3 len s32min-s32max
USER_DATA 4 flags s32min-s32max
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->truesize
UNITS 0 sk unit_byte
UNITS 3 len unit_byte
LOCK2 &u->iolock
TYPE_LOCK (struct unix_sock)->iolock

net/ipv4/tcp_bpf.c tcp_bpf_recvmsg() -> sk_msg_recvmsg()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 0 sk->sk_lock.owned 1
PARAM_VALUE 0 sk->sk_lock.slock.rlock.dep_map->name 0-255
PARAM_VALUE 0 sk->sk_lock.wq.head.prev 4096-ptr_max
PARAM_VALUE 0 sk->sk_lock.wq.head.prev->next 4096-ptr_max
PARAM_VALUE 0 sk->sk_lock.wq.head.prev->next->next 4096-ptr_max
PARAM_VALUE 1 psock 4096-ptr_max
PARAM_VALUE 1 psock->refcnt.refs.counter (-1073741824),0-s32max
BUF_SIZE 2 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 2 msg->msg_name (-1)-0,12,128
CAPPED_DATA 0 &sk->sk_receive_queue 1
DATA_SOURCE 0 sk $0
DATA_SOURCE 1 psock r sk_psock_get
DATA_SOURCE 2 msg $1
DATA_SOURCE 3 len $2
DATA_SOURCE 4 flags $3
BIT_INFO 4 flags 0x0,0xffffdfff
NOSPEC 2 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 2 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 2 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 2 msg->msg_controllen 0-u64max
USER_DATA 2 msg->msg_flags 0-u32max[c]
USER_DATA 2 msg->msg_iter.count 0-u64max
USER_DATA 2 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 2 *msg->msg_name s64min-s64max
USER_DATA 3 len s32min-s32max
USER_DATA 4 flags s32min-s32max
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->truesize
UNITS 0 sk unit_byte
UNITS 3 len unit_byte
LOCK2 0 sk

net/vmw_vsock/vsock_bpf.c vsock_bpf_recvmsg() -> sk_msg_recvmsg()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 0 sk->peer_shutdown 0-4294967295
PARAM_VALUE 0 sk->sk_lock.owned 1
PARAM_VALUE 0 sk->sk_lock.slock.rlock.dep_map->name 0-255
PARAM_VALUE 0 sk->sk_lock.wq.head.prev 4096-ptr_max
PARAM_VALUE 0 sk->sk_lock.wq.head.prev->next 4096-ptr_max
PARAM_VALUE 0 sk->sk_lock.wq.head.prev->next->next 4096-ptr_max
PARAM_VALUE 0 sk->trans->chan->inbound.pkt_buffer->flags 0-u16max
PARAM_VALUE 0 sk->trans->chan->inbound.pkt_buffer->len8 0-u16max
PARAM_VALUE 0 sk->trans->chan->inbound.pkt_buffer->offset8 2-u16max
PARAM_VALUE 0 sk->trans->chan->inbound.pkt_buffer->type 0-u16max
PARAM_VALUE 0 sk->trans->recv_data_len 0-4088
PARAM_VALUE 0 sk->trans->recv_data_off 0
PARAM_VALUE 0 sk->trans->recv_desc 0
PARAM_VALUE 0 sk->trans->recv_desc->flags 0-u16max
PARAM_VALUE 0 sk->trans->recv_desc->len8 0-u16max
PARAM_VALUE 0 sk->trans->recv_desc->offset8 2-u16max
PARAM_VALUE 0 sk->trans->recv_desc->type 0-u16max
PARAM_VALUE 0 sk->trans->rx_lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 sk->trans->vsk->peer_shutdown 0,2-4294967295
PARAM_VALUE 0 sk->transport 313939572454838272,4304869436517031936,5599459859400630272,7768179779944185856,8703969711714045952
PARAM_VALUE 1 psock 4096-ptr_max
PARAM_VALUE 1 psock->refcnt.refs.counter (-1073741824),0-s32max
BUF_SIZE 2 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 2 msg->msg_name (-1)-0,12,128
CAPPED_DATA 0 sk->sk_user_data 1
DATA_SOURCE 0 sk $0
DATA_SOURCE 1 psock r sk_psock_get
DATA_SOURCE 2 msg $1
DATA_SOURCE 3 len $2
DATA_SOURCE 4 flags $3
NOSPEC 2 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 2 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 2 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 2 msg->msg_controllen 0-u64max
USER_DATA 2 msg->msg_flags 0-u32max[c]
USER_DATA 2 msg->msg_iter.count 0-u64max
USER_DATA 2 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 2 *msg->msg_name s64min-s64max
USER_DATA 3 len s32min-s32max
USER_DATA 4 flags s32min-s32max
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->end
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->len
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sk->sk_write_queue.next->truesize
UNITS 0 sk unit_byte
UNITS 3 len unit_byte
LOCK2 0 sk