Open Menu /

Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 6 files:

Smatch caller information:

drivers/vhost/net.c handle_rx() -> (struct proto_ops)->recvmsg()

Type Parameter Key Value
PARAM_VALUE 0 sock 4096-ptr_max
PARAM_VALUE 0 sock->ops 4096-ptr_max
PARAM_VALUE 1 msg 677290564554752
PARAM_VALUE 1 msg->msg_control_is_user 0
PARAM_VALUE 1 msg->msg_controllen 0
PARAM_VALUE 1 msg->msg_flags 64
PARAM_VALUE 1 msg->msg_get_inq 0
PARAM_VALUE 1 msg->msg_inq 0
PARAM_VALUE 1 msg->msg_name 0
PARAM_VALUE 1 msg->msg_namelen 0
PARAM_VALUE 1 msg->msg_ubuf 0
PARAM_VALUE 1 msg->sg_from_iter 0
PARAM_VALUE 2 size 1
PARAM_VALUE 3 flags 96
BUF_SIZE 0 sock s32min-(-2),1-s32max
BUF_SIZE 0 sock s32min-(-2),1-s32max
CONTAINER 0 -152-32+0 $(-1)
RX_PATH
TASK_NOT_RUNNING
LOCK2 &vq->mutex
TYPE_LOCK (struct vhost_virtqueue)->mutex

drivers/vhost/net.c handle_rx() -> (struct proto_ops)->recvmsg()

Type Parameter Key Value
PARAM_VALUE 0 sock 4096-ptr_max
PARAM_VALUE 0 sock->ops 4096-ptr_max
PARAM_VALUE 1 msg 677290564554752
PARAM_VALUE 1 msg->msg_control_is_user 0
PARAM_VALUE 1 msg->msg_controllen 0
PARAM_VALUE 1 msg->msg_flags 64
PARAM_VALUE 1 msg->msg_get_inq 0
PARAM_VALUE 1 msg->msg_inq 0
PARAM_VALUE 1 msg->msg_name 0
PARAM_VALUE 1 msg->msg_namelen 0
PARAM_VALUE 1 msg->msg_ubuf 0
PARAM_VALUE 1 msg->sg_from_iter 0
PARAM_VALUE 3 flags 96
BUF_SIZE 0 sock s32min-(-2),1-s32max
BUF_SIZE 0 sock s32min-(-2),1-s32max
CONTAINER 0 -152-32+0 $(-1)
RX_PATH
TASK_NOT_RUNNING
LOCK2 &vq->mutex
TYPE_LOCK (struct vhost_virtqueue)->mutex

net/smc/af_smc.c smc_recvmsg() -> (struct proto_ops)->recvmsg()

Type Parameter Key Value
PARAM_VALUE 0 sock 4096-ptr_max
PARAM_VALUE 0 sock->ops 4096-ptr_max
BUF_SIZE 1 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 1 msg->msg_name (-1)-0,12,128
DATA_SOURCE 1 msg $1
DATA_SOURCE 2 size $2
DATA_SOURCE 3 flags $3
CONTAINER 0 *(-152-32+0) $(-1)
NOSPEC 1 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
USER_DATA 1 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 1 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 1 msg->msg_controllen 0-u64max
USER_DATA 1 msg->msg_flags 0-u32max[c]
USER_DATA 1 msg->msg_iter.count 0-u64max
USER_DATA 1 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 1 *msg->msg_name s64min-s64max
USER_DATA 2 size 0-u64max
USER_DATA 3 flags s32min-s32max
LOCK2 sk
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sk

net/socket.c sock_recvmsg_nosec() -> sock_recvmsg_nosec ptr __f1()

Type Parameter Key Value
PARAM_VALUE 0 *sock->sk->sk_backlog.head->dev->name 0-255
PARAM_VALUE 1 msg 4096-ptr_max
PARAM_VALUE 2 size 0-1000000000
BUF_SIZE 0 sock s32min-(-1),1-s32max
BUF_SIZE 0 sock s32min-(-1),1-s32max
BUF_SIZE 1 msg->msg_control (-1)-0,16-17
BUF_SIZE 1 msg->msg_name (-1),12,128
DATA_SOURCE 0 sock $0
DATA_SOURCE 1 msg $1
DATA_SOURCE 3 flags $2
RX_PATH
TASK_NOT_RUNNING
USER_DATA 1 msg->msg_controllen 0-u64max
USER_DATA 1 msg->msg_flags 0-u32max[c]
USER_DATA 1 msg->msg_iter.count 0-u64max
USER_DATA 1 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 1 *msg->msg_name s64min-s64max
USER_DATA 2 size 0-1000000000
USER_DATA 3 flags s32min-s32max
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_backlog.len
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->next->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->next->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_receive_queue.prev->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->tail
NO_OVERFLOW_SIMPLE 0 sock->sk->sk_write_queue.next->truesize