Defined in 1 files as a function:
Referenced in 13 files:
- drivers/bluetooth/bfusb.c, line 523
- drivers/net/ethernet/broadcom/b44.c, line 820
- drivers/net/ethernet/mellanox/mlx4/en_tx.c, line 715
- drivers/net/ethernet/qlogic/netxen/netxen_nic_main.c
- drivers/net/ethernet/qlogic/qla3xxx.c, line 2078
- drivers/net/ethernet/qlogic/qlcnic/qlcnic_io.c
- drivers/net/ethernet/sun/cassini.c, line 2757
- drivers/net/wireless/intel/ipw2x00/libipw_crypto_wep.c, line 115
- drivers/net/wireless/intel/ipw2x00/libipw_rx.c, line 608
- drivers/net/wireless/intel/ipw2x00/libipw_tx.c, line 298
- net/bridge/br_netfilter_hooks.c
- net/bridge/netfilter/nf_conntrack_bridge.c, line 333
- net/core/skbuff.c
Smatch caller information:
drivers/net/wireless/intel/ipw2x00/libipw_crypto_wep.c libipw_wep_encrypt() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0 |
| PARAM_VALUE | 1 | offset | 24,26 |
| PARAM_VALUE | 2 | to | 2700233661991264256 |
| PARAM_VALUE | 3 | len | 3 |
| BUF_SIZE | 2 | to | 16 |
| CAPPED_DATA | 0 | skb->head | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| FUZZY_MAX | 1 | offset | 24 |
| CONSTRAINT | 1 | offset | <=49 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| LOCK2 | &ieee->lock | ||
| HALF_LOCKED2 | &dev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct libipw_device)->lock |
drivers/net/wireless/intel/ipw2x00/libipw_tx.c libipw_xmit() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 0 | skb->len | 8-u32max |
| PARAM_VALUE | 1 | offset | 6 |
| PARAM_VALUE | 2 | to | 9192817171908587520 |
| PARAM_VALUE | 3 | len | 6 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 2 | to | 6 |
| CAPPED_DATA | 0 | skb | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| FUZZY_MAX | 0 | skb->len | 8 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 0 | skb->len | 8-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| LOCK2 | &ieee->lock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &dev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct libipw_device)->lock |
net/core/skbuff.c pskb_carve_inside_header() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| PARAM_VALUE | 2 | to | 1-u64max |
| PARAM_VALUE | 3 | len | 1-u32max |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| DATA_SOURCE | 2 | to | r kmalloc_reserve |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| UNITS | 3 | len | unit_byte |
net/core/skbuff.c skb_copy_bits() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| CAPPED_DATA | 1 | offset | 1 |
| CAPPED_DATA | 3 | len | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| DATA_SOURCE | 2 | to | $2 |
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| UNITS | 3 | len | unit_byte |
net/core/skbuff.c skb_segment() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->_skb_refdst | 1-u64max |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 2 | *to | 0-255 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb->dev | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->inner_protocol | 1-255 |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->protocol | 1-255 |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 2 | to | unit_byte |
| UNITS | 3 | len | unit_byte |
net/core/skbuff.c skb_segment_list() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->_skb_refdst | 1-u64max |
| PARAM_VALUE | 2 | *to | 0-255 |
| BUF_SIZE | 0 | skb->next | (-1),240 |
| DATA_SOURCE | 0 | skb | $0 |
| NOCHECK_CALL | |||
| UNITS | 2 | to | unit_byte |
net/core/skbuff.c skb_split_inside_header() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->linkwatch_dev_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->dev->linkwatch_dev_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| PARAM_VALUE | 2 | to | 4096-ptr_max |
| PARAM_VALUE | 3 | len | 1-u32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $2 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| HOST_DATA | 1 | offset | 2-s32max[c] |
| HOST_DATA | 3 | len | 1-2147483646[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
| UNITS | 3 | len | unit_byte |
drivers/net/ethernet/broadcom/b44.c b44_rx() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 30 |
| PARAM_VALUE | 2 | to | 4096-ptr_max |
| BUF_SIZE | 2 | to | 1-s32max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 2 | to | unit_byte |
| USER_PTR | 2 | to | |
| HALF_LOCKED2 | &ni->dev_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/wireless/intel/ipw2x00/libipw_rx.c libipw_rx() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data->addr1 | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data->addr2 | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0 |
| PARAM_VALUE | 1 | offset | 10,16,24,26,30,32 |
| PARAM_VALUE | 2 | to | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| DATA_SOURCE | 1 | offset | r libipw_get_hdrlen |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| UNITS | 1 | offset | unit_byte |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &priv->lock | ||
| HALF_LOCKED2 | &priv->low_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
drivers/net/ethernet/qlogic/qla3xxx.c ql_process_macip_rx_intr() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 2 |
| PARAM_VALUE | 3 | len | 14,18 |
| BUF_SIZE | 2 | to | 1-s32max |
| FUZZY_MAX | 3 | len | 14 |
| RX_PATH | |||
| NOCHECK_CALL |
drivers/net/ethernet/qlogic/qlcnic/qlcnic_io.c qlcnic_tx_encap_pkt() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_link_ext_state | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_mm_stats | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 0 | skb->encapsulation | 1 |
| PARAM_VALUE | 0 | skb->protocol | 2048,34525 |
| PARAM_VALUE | 1 | offset | 0-509 |
| PARAM_VALUE | 2 | to | 4096-ptr_max |
| PARAM_VALUE | 3 | len | 1-64 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->data | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| CAPPED_DATA | 3 | len | 1 |
| DATA_SOURCE | 0 | skb | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/qlogic/qlcnic/qlcnic_io.c qlcnic_tx_pkt() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_link_ext_state | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_mm_stats | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 1 | offset | 12 |
| PARAM_VALUE | 2 | *to | 0-255 |
| PARAM_VALUE | 3 | len | 0-46,4294967284-u32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->data | 1 |
| CAPPED_DATA | 3 | len | 1 |
| DATA_SOURCE | 0 | skb | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 2 | to | unit_byte |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/qlogic/qlcnic/qlcnic_io.c qlcnic_tx_pkt() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_link_ext_state | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_mm_stats | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 1 | offset | 0-254 |
| PARAM_VALUE | 2 | *to | 0-255 |
| PARAM_VALUE | 3 | len | 1-64 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->data | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| CAPPED_DATA | 3 | len | 1 |
| DATA_SOURCE | 0 | skb | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
| UNITS | 2 | to | unit_byte |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/mellanox/mlx4/en_tx.c build_inline_wqe() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_link_ext_state | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_mm_stats | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 0 | skb->len | 45-u32max |
| PARAM_VALUE | 1 | offset | 44 |
| PARAM_VALUE | 3 | len | 1-4294967251 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| FUZZY_MAX | 0 | skb->len | 45 |
| PARAM_COMPARE | 0 | skb->len | > $1 |
| PARAM_COMPARE | 1 | offset | < $0->len |
| CONSTRAINT | 1 | offset | <49 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 0 | skb->len | 45-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &dev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/sun/cassini.c cas_xmit_tx_ringN() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_link_ext_state | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_mm_stats | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 2 | to | 4096-ptr_max |
| PARAM_VALUE | 3 | len | 32 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb | 1 |
| CAPPED_DATA | 0 | skb->data | 1 |
| DATA_SOURCE | 0 | skb | $2 |
| DATA_SOURCE | 3 | len | r cas_calc_tabort |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| LOCK2 | flags | ||
| HALF_LOCKED2 | &dev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
net/bridge/netfilter/nf_conntrack_bridge.c nf_ct_bridge_frag_save() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->create_rxfh_context | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_link_ext_state | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_mm_stats | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->modify_rxfh_context | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->remove_rxfh_context | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->rxfh_max_num_contexts | 0-4294967295 |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->supported_coalesce_params | 0-4294967295 |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_query_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_query_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_query_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_report_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_report_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_report_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->stats.proc_dir_entry | 0,4806605944481423360 |
| PARAM_VALUE | 0 | skb->dev->linkwatch_dev_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->dev->linkwatch_dev_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,9688-u64max |
| PARAM_VALUE | 0 | skb->next->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->next->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->next->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | offset | (-14) |
| PARAM_VALUE | 3 | len | 14 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 2 | to | 14 |
| DATA_SOURCE | 0 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-192512[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->protocol | 1-255 |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| HALF_LOCKED2 | rcu_read |
net/bridge/br_netfilter_hooks.c br_nf_dev_queue_xmit() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 0 | skb->protocol | 2048 |
| PARAM_VALUE | 0 | *skb->cb | 0-255 |
| PARAM_VALUE | 1 | offset | 242 |
| PARAM_VALUE | 3 | len | 14 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 2 | to | 22 |
| DATA_SOURCE | 0 | skb | $2 |
| MEM_ZERO | 0 | skb->cb | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967041[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->inner_protocol | 1-255 |
| HOST_DATA | 0 | skb->len | 0-4294967294[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 0 | skb | unit_byte |
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
net/bridge/br_netfilter_hooks.c br_nf_dev_queue_xmit() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 0 | skb->protocol | 34525 |
| PARAM_VALUE | 0 | *skb->cb | 0-255 |
| PARAM_VALUE | 1 | offset | 242 |
| PARAM_VALUE | 3 | len | 14 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 2 | to | 22 |
| CAPPED_DATA | 0 | skb->dev->ip6_ptr | 1 |
| DATA_SOURCE | 0 | skb | $2 |
| MEM_ZERO | 0 | skb->cb | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967041[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->inner_protocol | 1-255 |
| HOST_DATA | 0 | skb->len | 0-4294967294[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 0 | skb | unit_byte |
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
net/bridge/br_netfilter_hooks.c br_nf_pre_routing_finish_bridge() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev | 1-u64max |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 0 | skb->dev->rx_handler_data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | (-8) |
| PARAM_VALUE | 3 | len | 8 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 2 | to | 8 |
| CAPPED_DATA | 0 | skb->dev->rx_handler_data | 1 |
| DATA_SOURCE | 0 | skb | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-192512[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->inner_protocol | 1-255 |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->protocol | 1-255 |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 0 | skb | unit_byte |
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/qlogic/netxen/netxen_nic_main.c netxen_tso_check() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_link_ext_state | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_mm_stats | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 0 | skb->protocol | 0-33023,33025-u16max |
| PARAM_VALUE | 0 | skb->vlan_all | 1-u32max |
| PARAM_VALUE | 1 | offset | 12 |
| PARAM_VALUE | 2 | *to | 0-255 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->data | 1 |
| CAPPED_DATA | 3 | len | 1 |
| DATA_SOURCE | 0 | skb | $3 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/qlogic/netxen/netxen_nic_main.c netxen_tso_check() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_link_ext_state | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->ethtool_ops->get_mm_stats | 0-9223372036854775807 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->priv_size | 0,8,32,40,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736,744,1056,1128,1336,1616,2176,2240,2272,2560,3296,3544,3552,3720,9688-u64max |
| PARAM_VALUE | 1 | offset | s32min-2147483646 |
| PARAM_VALUE | 2 | *to | 0-255 |
| PARAM_VALUE | 3 | len | 1-64,2147483648-u32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->data | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| CAPPED_DATA | 3 | len | 1 |
| DATA_SOURCE | 0 | skb | $3 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
| UNITS | 2 | to | unit_byte |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/bluetooth/bfusb.c bfusb_send_frame() -> skb_copy_from_linear_data_offset()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 0-s32max |
| PARAM_VALUE | 2 | to | 4096-ptr_max |
| PARAM_VALUE | 3 | len | 1-256 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->head | 1 |
| CAPPED_DATA | 3 | len | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| FUZZY_MAX | 1 | offset | 0 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &hdev->req_lock |