Defined in 2 files as a function:
Referenced in 20 files:
- drivers/net/ethernet/intel/iavf/iavf_txrx.c, line 2403
- drivers/net/usb/asix_common.c, line 296
- drivers/net/usb/cdc_eem.c, line 120
- drivers/net/usb/gl620a.c, line 153
- drivers/net/usb/int51x1.c, line 69
- drivers/net/usb/kalmia.c, line 185
- drivers/net/usb/lg-vl600.c, line 261
- drivers/net/usb/net1080.c, line 439
- drivers/net/usb/rndis_host.c, line 576
- drivers/net/usb/sr9700.c, line 365
- drivers/net/usb/sr9800.c, line 126
- drivers/net/veth.c, line 884
- drivers/net/wireless/ath/ath6kl/txrx.c
- drivers/staging/octeon/ethernet-rx.c, line 287
- drivers/staging/rtl8723bs/core/rtw_recv.c, line 1824
- drivers/staging/rtl8723bs/hal/sdio_ops.c, line 686
- include/linux/skbuff.h, line 3328
- net/core/dev.c, line 5544
- net/core/skbuff.c
- net/mac80211/rx.c, line 2869
Smatch caller information:
net/ipv6/esp6.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-126977[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
net/netfilter/nfnetlink_queue.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),20-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &nft_net->commit_mutex | ||
| HALF_LOCKED2 | global &audit_cmd_mutex.lock | ||
| HALF_LOCKED2 | global &hwsim_phys_lock | ||
| HALF_LOCKED2 | global &rtnl_mutex | ||
| HALF_LOCKED2 | global &rx_queue_mutex | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/marvell/prestera/prestera_rxtx.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 0-16383 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| NOCHECK_CALL |
drivers/net/usb/int51x1.c int51x1_tx_fixup() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-1[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | offset | 0-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &net->tx_global_lock | ||
| HALF_LOCKED2 | &of->mutex | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
net/xfrm/xfrm_iptfs.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),1-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
drivers/net/macsec.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | bh |
drivers/scsi/bnx2fc/bnx2fc_fcoe.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
drivers/net/wireless/ath/ath6kl/txrx.c ath6kl_refill_amsdu_rxbufs() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 0,4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | r ath6kl_buf_alloc |
| DATA_SOURCE | 1 | offset | r skb_headlen |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
drivers/net/wireless/ath/ath6kl/txrx.c ath6kl_rx_refill() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 0,4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | r ath6kl_buf_alloc |
| DATA_SOURCE | 1 | offset | r skb_headlen |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
drivers/net/ethernet/qualcomm/emac/emac-mac.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
net/packet/af_packet.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->len | 0-4294967294[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| HOST_DATA | 1 | offset | 0-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | rcu_read |
net/mac80211/wpa.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-8470318223388241920 |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| LOCK2 | &rx->local->rx_path_lock | ||
| LOCK2 | bh | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct ieee80211_local)->rx_path_lock |
drivers/net/usb/cdc_eem.c eem_tx_fixup() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-1[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | offset | 0-u16max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &net->tx_global_lock | ||
| HALF_LOCKED2 | &of->mutex | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/staging/rtl8723bs/hal/sdio_ops.c sd_recv_rxfifo() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 1-255 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | offset | $1 |
| NOCHECK_CALL | |||
| USER_PTR | 0 | skb->data | |
| HALF_LOCKED2 | &pool->lock |
drivers/net/wireless/quantenna/qtnfmac/pcie/pearl_pcie.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb | 1 |
| CAPPED_DATA | 0 | skb->dev | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &ndev->tx_global_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
net/mac80211/rx.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &dev->rx_lock | ||
| HALF_LOCKED2 | bh |
net/ipv6/ip6_gre.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &dev->tx_global_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/scsi/cxgbi/cxgb4i/cxgb4i.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 0-u16max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| CONSTRAINT | 0 | skb | <=49 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | offset | 0-u16max[u] |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| LOCK2 | &csk->lock | ||
| LOCK2 | bh | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct cxgbi_sock)->lock |
drivers/net/usb/rndis_host.c rndis_tx_fixup() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-1[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | offset | 0-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &net->tx_global_lock | ||
| HALF_LOCKED2 | &of->mutex | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
net/core/skbuff.c ___pskb_trim() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb->prev | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| STR_LEN | 0 | skb->sk | (-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967041[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->inner_protocol | 1-255 |
| HOST_DATA | 0 | skb->len | 0-s32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->protocol | 1-255 |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| HOST_DATA | 1 | offset | 1-s32max[c] |
| USER_DATA | 1 | offset | 1-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &ax_local->spi_lock | ||
| HALF_LOCKED2 | &csk->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
net/core/skbuff.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967041[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->inner_protocol | 1-255 |
| HOST_DATA | 0 | skb->len | 0-s32max,4294967282-4294967294[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->protocol | 1-255 |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| HOST_DATA | 1 | offset | 0-s32max[c] |
| USER_DATA | 1 | offset | 1-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
net/core/skbuff.c pskb_carve_inside_header() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 1-u64max |
| PARAM_VALUE | 0 | skb->head | 1-u64max |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb->data | s32min-s32max |
| BUF_SIZE | 0 | skb->head | s32min-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| UNITS | 0 | skb | unit_byte |
net/core/skbuff.c skb_split_inside_header() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb | 1 |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $2 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->len | 1-s32max[c] |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| HOST_DATA | 1 | offset | 2-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
net/atm/br2684.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | global &ioctl_mutex |
drivers/net/wireless/mediatek/mt76/mt76x02_mac.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1),1-s32max |
| BUF_SIZE | 0 | skb | (-1),1-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | bh |
net/core/filter.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| STR_LEN | 0 | skb->sk | (-1) |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| USER_DATA | 1 | offset | 3-60[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
drivers/net/usb/asix_common.c asix_tx_fixup() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-1[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | offset | 0-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &net->tx_global_lock | ||
| HALF_LOCKED2 | &of->mutex | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/phy/bcm-phy-ptp.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->head | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| CONSTRAINT | 0 | skb | <=49 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-126976[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->truesize | 0-u32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &ei_local->page_lock | ||
| HALF_LOCKED2 | &lp->rx_lock | ||
| HALF_LOCKED2 | &ocelot->inj_lock | ||
| HALF_LOCKED2 | flags |
drivers/scsi/fcoe/fcoe.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-3317316561003966464 |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| LOCK2 | &pool->lock |
net/psp/psp_main.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->extensions | 1 |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | bh |
drivers/net/ethernet/intel/iavf/iavf_txrx.c iavf_xmit_frame() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 17 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-1[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/atheros/atl1e/atl1e_main.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
net/ipv4/esp4.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-126977[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
drivers/net/wireguard/receive.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| USER_DATA | 1 | offset | 21-65575[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
drivers/net/wireless/ath/ath9k/hif_usb.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 0 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &pool->lock |
net/ipv4/ip_tunnel_core.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 548,1232 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
drivers/net/veth.c veth_xdp_rcv_skb() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| DATA_SOURCE | 0 | skb | $1 [m] |
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
drivers/net/ethernet/intel/e1000e/netdev.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &ni->dev_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/wireless/intel/ipw2x00/libipw_rx.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &priv->lock | ||
| HALF_LOCKED2 | &priv->low_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
drivers/net/ethernet/intel/e1000/e1000_main.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &ni->dev_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
net/xfrm/espintcp.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| UNITS | 1 | offset | unit_byte |
drivers/scsi/cxgbi/cxgb3i/cxgb3i.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 0-131086 |
| CAPPED_DATA | 0 | skb->len | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| CONSTRAINT | 0 | skb | <=49 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | offset | 17-131086[c][u] |
| LOCK2 | &csk->lock | ||
| LOCK2 | bh | ||
| TYPE_LOCK | (struct cxgbi_sock)->lock |
net/phonet/af_phonet.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 0-65533 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | rcu_read |
net/ipv4/ip_gre.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &dev->tx_global_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
drivers/net/ethernet/asix/ax88796c_main.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 0-2047 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | offset | 1-2047[c] |
| UNITS | 1 | offset | unit_byte |
| LOCK2 | &ax_local->spi_lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct ax88796c_device)->spi_lock |
drivers/net/ethernet/atheros/atlx/atl1.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
drivers/net/usb/sr9700.c sr9700_rx_fixup() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 0-1514 |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| FUZZY_MAX | 1 | offset | 0 |
| CONSTRAINT | 1 | offset | <=49 |
| NOSPEC | 1 | offset | |
| HARD_MAX | 1 | offset | 1514 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 1 | offset | 0-1514[c] |
| UNITS | 1 | offset | unit_byte |
drivers/net/usb/gl620a.c genelink_tx_fixup() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-1[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | offset | 0-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &net->tx_global_lock | ||
| HALF_LOCKED2 | &of->mutex | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/atheros/atl1c/atl1c_main.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
drivers/net/wireless/broadcom/brcm80211/brcmsmac/main.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-1115747022175772671,1115747022175772673-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| LOCK2 | &wl->lock | ||
| LOCK2 | bh | ||
| TYPE_LOCK | (struct brcms_info)->lock |
drivers/net/usb/net1080.c net1080_tx_fixup() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-1[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | offset | 0-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &net->tx_global_lock | ||
| HALF_LOCKED2 | &of->mutex | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
net/xfrm/xfrm_ipcomp.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 0 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-126976[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
drivers/net/wireless/broadcom/brcm80211/brcmsmac/dma.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | skb | unit_byte |
| LOCK2 | &wl->lock | ||
| LOCK2 | bh | ||
| TYPE_LOCK | (struct brcms_info)->lock |
net/ipv4/icmp.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| LOCK2 | bh | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | &sk->sk_lock.slock | ||
| HALF_LOCKED2 | &x->lock | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/netronome/nfp/ccm_mbox.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-1),4-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->len | 4-s32max[c] |
| HOST_DATA | 1 | offset | 5-s32max[c] |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &nn->bar_lock | ||
| HALF_LOCKED2 | &pool->lock |
net/netfilter/nf_nat_helper.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| STR_LEN | 0 | skb | (-1),5,16,23 |
| STR_LEN | 0 | skb | (-1),5,16,23 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-192512[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->protocol | 1-255 |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | global &nf_h323_lock |
drivers/net/tun.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->len | 1-s32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| HOST_DATA | 1 | offset | 2-s32max[c] |
| USER_DATA | 1 | offset | s32min-s32max |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &tfile->napi_mutex | ||
| HALF_LOCKED2 | rcu_read |
net/ipv6/ip6_output.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| UNITS | 1 | offset | unit_byte |
drivers/net/ethernet/mscc/ocelot_fdma.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1),1-s32max |
| BUF_SIZE | 0 | skb | (-1),1-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &ni->dev_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
net/tipc/crypto.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
drivers/staging/rtl8723bs/core/rtw_recv.c rtw_recv_indicatepkt() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &ppending_recvframe_queue->lock | ||
| HALF_LOCKED2 | bh |
drivers/net/usb/kalmia.c kalmia_tx_fixup() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-1[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | offset | 0-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &net->tx_global_lock | ||
| HALF_LOCKED2 | &of->mutex | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/wireless/quantenna/qtnfmac/core.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/ethernet/emulex/benet/be_main.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 14-65549 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
drivers/net/ethernet/chelsio/cxgb3/cxgb3_offload.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 24 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
drivers/net/ethernet/freescale/gianfar.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1),1-s32max |
| BUF_SIZE | 0 | skb | (-1),1-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &ni->dev_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->next->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| UNITS | 0 | skb | unit_byte |
| LOCK2 | &pool->lock |
drivers/staging/octeon/ethernet-rx.c cvm_oct_poll() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | 0-u16max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &ni->dev_lock | ||
| HALF_LOCKED2 | rcu_read |
net/core/dev.c bpf_prog_run_generic_xdp() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | rcu_read |
net/mac80211/wep.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-8470318223388241920 |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
| LOCK2 | &rx->local->rx_path_lock | ||
| LOCK2 | bh | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct ieee80211_local)->rx_path_lock |
net/openvswitch/actions.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-192512[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->inner_protocol | 1-255 |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->protocol | 1-255 |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | offset | unit_byte |
drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_rxtx.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->protocol | 2048,34525 |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| BIT_INFO | 0 | skb->protocol | 0x0,0x8edd |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags |
drivers/net/wireless/mediatek/mt76/sdio_txrx.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
drivers/net/usb/lg-vl600.c vl600_tx_fixup() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-1),14-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-1[c] |
| HOST_DATA | 0 | skb->len | 14-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | offset | 14-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &net->tx_global_lock | ||
| HALF_LOCKED2 | &of->mutex | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
net/ipv6/icmp.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| LOCK2 | bh | ||
| LOCK2 | rcu_read | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | &sk->sk_lock.slock | ||
| HALF_LOCKED2 | &x->lock |
drivers/net/usb/sr9800.c sr_tx_fixup() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->data_len | 0-1[c] |
| HOST_DATA | 0 | skb->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 1 | offset | 0-s32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 1 | offset | |
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | &net->tx_global_lock | ||
| HALF_LOCKED2 | &of->mutex | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/scsi/qedf/qedf_main.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| CONSTRAINT | 0 | skb | <=49 |
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| LOCK2 | &pool->lock |
net/tls/tls_strp.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| BUF_SIZE | 0 | skb | 0-s32max |
| BUF_SIZE | 0 | skb | 0-s32max |
| BUF_SIZE | 0 | skb->prev | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |
| HALF_LOCKED2 | rcu_read |
net/ipv4/ip_output.c __skb_set_length() -> skb_set_tail_pointer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | offset | s32min-(-2),0-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->len | 1 |
| CAPPED_DATA | 1 | offset | 1 |
| DATA_SOURCE | 0 | skb | $0 |
| DATA_SOURCE | 1 | offset | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 1 | offset | unit_byte |