Open Menu /

Documented in 1 files:

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 2 files:

Smatch caller information:

net/xfrm/xfrm_iptfs.c __input_process_payload() -> skb_copy_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 st 5021221164563156992
PARAM_VALUE 1 offset s32min-(-2),0-s32max
PARAM_VALUE 2 to 8308920120558555136
PARAM_VALUE 3 len 1-6
BUF_SIZE 2 to 40
CAPPED_DATA 1 offset 1
CAPPED_DATA 3 len 1
DATA_SOURCE 0 st $2
DATA_SOURCE 1 offset $1 [m]
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 st->cur_skb->csum 0-126976[c]
HOST_DATA 0 st->cur_skb->csum_offset 0-u16max
HOST_DATA 0 st->cur_skb->data_len 0-u32max[c]
HOST_DATA 0 st->cur_skb->len 0-u32max[c]
HOST_DATA 0 st->cur_skb->truesize 0-u32max
HOST_DATA 0 st->cur_skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 st->cur_skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 st->upper_offset 40-2147483687[c]
HOST_DATA 1 offset 5-s32max[c]
HOST_DATA 3 len 2-5[c]
USER_DATA 0 st->lower_offset 4-s32max[c]
USER_DATA 1 offset 5-s32max[c]
USER_DATA 3 len 2-5[c]
NO_OVERFLOW_SIMPLE 0 st->cur_skb->data_len
NO_OVERFLOW_SIMPLE 0 st->cur_skb->tail
NO_OVERFLOW_SIMPLE 0 st->cur_skb->truesize
NO_OVERFLOW_SIMPLE 0 st->upper_offset
UNITS 1 offset unit_byte
UNITS 3 len unit_byte

net/xfrm/xfrm_iptfs.c iptfs_copy_create_frag() -> skb_copy_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 st 3537385581009248256
PARAM_VALUE 0 st->root_skb->_skb_refdst 1-u64max
PARAM_VALUE 0 st->root_skb->dev->rtnl_link_ops->priv_size 0,8,32,48,56,88,112,120,144,160,224,240,256,296,616,624,728,736
PARAM_VALUE 2 to 4096-ptr_max
PARAM_VALUE 3 len s32min-(-2),1-s32max
CAPPED_DATA 3 len 1
DATA_SOURCE 0 st $0
DATA_SOURCE 1 offset $1
DATA_SOURCE 3 len $2
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 0 st->upper_offset
UNITS 1 offset unit_byte
UNITS 3 len unit_byte
HALF_LOCKED2 irq

net/xfrm/xfrm_iptfs.c iptfs_input_ordered() -> skb_copy_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 st 5021221164563156992
PARAM_VALUE 0 st->frag_data 0
PARAM_VALUE 0 st->frag_idx 0
PARAM_VALUE 0 st->frag_off 0
PARAM_VALUE 0 st->stepped_offset 0
PARAM_VALUE 1 offset 0
PARAM_VALUE 2 to 2769137165381988352
PARAM_VALUE 3 len 4
BUF_SIZE 2 to 24
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 0 st->upper_offset
UNITS 3 len unit_byte

net/xfrm/xfrm_iptfs.c iptfs_input_ordered() -> skb_copy_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 st 5021221164563156992
PARAM_VALUE 0 st->upper_offset 1-u32max
PARAM_VALUE 1 offset 4
PARAM_VALUE 2 to 2769137165381988354
PARAM_VALUE 3 len 20
BUF_SIZE 2 to 20
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 0 st->upper_offset
UNITS 1 offset unit_byte
UNITS 3 len unit_byte

net/xfrm/xfrm_iptfs.c iptfs_pskb_add_frags() -> skb_copy_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 st 5021221164563156992
PARAM_VALUE 0 st->stepped_offset 0
PARAM_VALUE 1 offset s32min-(-2),0-s32max
PARAM_VALUE 2 to 4096-ptr_max
PARAM_VALUE 3 len 20-60
CAPPED_DATA 1 offset 1
CAPPED_DATA 3 len 1
DATA_SOURCE 0 st $4
DATA_SOURCE 1 offset $2
DATA_SOURCE 3 len $5
BIT_INFO 3 len 0x0,0x2c
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 st->cur_skb->csum 0-126976[c]
HOST_DATA 0 st->cur_skb->csum_offset 0-u16max
HOST_DATA 0 st->cur_skb->data_len 0-u32max[c]
HOST_DATA 0 st->cur_skb->len 0-u32max[c]
HOST_DATA 0 st->cur_skb->truesize 0-u32max
HOST_DATA 0 st->cur_skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 st->cur_skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 st->lower_offset 4-s32max[c]
HOST_DATA 0 st->upper_offset 40-2147483687[c]
USER_DATA 0 st->lower_offset 4-s32max[c]
USER_DATA 1 offset 5-s32max[c]
NO_OVERFLOW_SIMPLE 0 st->cur_skb->data_len
NO_OVERFLOW_SIMPLE 0 st->cur_skb->truesize
NO_OVERFLOW_SIMPLE 0 st->upper_offset
UNITS 1 offset unit_byte
UNITS 3 len unit_byte

net/xfrm/xfrm_iptfs.c iptfs_pskb_extract_seq() -> skb_copy_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 st 5021221164563156992
PARAM_VALUE 0 st->root_skb->_skb_refdst 1-u64max
PARAM_VALUE 1 offset s32min-(-2),0-s32max
PARAM_VALUE 2 to 4096-ptr_max
CAPPED_DATA 1 offset 1
CAPPED_DATA 3 len 1
DATA_SOURCE 0 st $1
DATA_SOURCE 1 offset $2
DATA_SOURCE 3 len $3
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 st->cur_skb->csum 0-126976[c]
HOST_DATA 0 st->cur_skb->csum_offset 0-u16max
HOST_DATA 0 st->cur_skb->data_len 0-u32max[c]
HOST_DATA 0 st->cur_skb->len 0-u32max[c]
HOST_DATA 0 st->cur_skb->truesize 0-u32max
HOST_DATA 0 st->cur_skb->tstamp 500000002-4294967299794967295[c]
HOST_DATA 0 st->cur_skb->users.refs.counter s32min-0,2-s32max
HOST_DATA 0 st->lower_offset 4-s32max[c]
HOST_DATA 0 st->upper_offset 40-2147483687[c]
USER_DATA 0 st->lower_offset 4-s32max[c]
USER_DATA 1 offset 5-s32max[c]
USER_DATA 3 len 5-2147483643[c]
NO_OVERFLOW_SIMPLE 0 st->cur_skb->data_len
NO_OVERFLOW_SIMPLE 0 st->cur_skb->truesize
NO_OVERFLOW_SIMPLE 0 st->upper_offset
UNITS 1 offset unit_byte
UNITS 3 len unit_byte

net/xfrm/xfrm_iptfs.c iptfs_reassem_cont() -> skb_copy_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 st 5021221164563156992
PARAM_VALUE 0 st->upper_offset 1-u32max
PARAM_VALUE 1 offset 4,24
PARAM_VALUE 2 to 4096-ptr_max
PARAM_VALUE 2 *to 0-255
PARAM_VALUE 3 len 0-5
CAPPED_DATA 3 len 1
DATA_SOURCE 0 st $2
DATA_SOURCE 1 offset $4
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 st->upper_offset 40-2147483687[c]
NO_OVERFLOW_SIMPLE 0 st->upper_offset
UNITS 1 offset unit_byte
UNITS 3 len unit_byte
LOCK2 &xtfs->drop_lock
TYPE_LOCK (struct xfrm_iptfs_data)->drop_lock

net/xfrm/xfrm_iptfs.c iptfs_reassem_cont() -> skb_copy_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 st 5021221164563156992
PARAM_VALUE 0 st->upper_offset 1-u32max
PARAM_VALUE 1 offset 4,24
PARAM_VALUE 2 to 4096-ptr_max
PARAM_VALUE 3 len 0-40
CAPPED_DATA 3 len 1
DATA_SOURCE 0 st $2
DATA_SOURCE 1 offset $4
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 st->upper_offset 40-2147483687[c]
HOST_DATA 3 len 13-39[c]
USER_DATA 3 len 2-39[c]
NO_OVERFLOW_SIMPLE 0 st->upper_offset
UNITS 1 offset unit_byte
UNITS 3 len unit_byte
LOCK2 &xtfs->drop_lock
TYPE_LOCK (struct xfrm_iptfs_data)->drop_lock

net/xfrm/xfrm_iptfs.c iptfs_reassem_cont() -> skb_copy_seq_read()

Type Parameter Key Value
PARAM_VALUE 0 st 5021221164563156992
PARAM_VALUE 0 st->upper_offset 1-u32max
PARAM_VALUE 1 offset 4-64
PARAM_VALUE 2 to 4096-ptr_max
PARAM_VALUE 3 len 0-u16max
CAPPED_DATA 3 len 1
DATA_SOURCE 0 st $2
DATA_SOURCE 1 offset $4 [m]
FUZZY_MAX 1 offset 4
PREEMPT_ADD
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 0 st->upper_offset 40-2147483687[c]
HOST_DATA 3 len 1-u16max[c]
USER_DATA 3 len 1-u16max[c]
NO_OVERFLOW_SIMPLE 0 st->upper_offset
UNITS 1 offset unit_byte
UNITS 3 len unit_byte
LOCK2 &xtfs->drop_lock
TYPE_LOCK (struct xfrm_iptfs_data)->drop_lock