Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | common | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd_size | 0-s32max |
| PARAM_VALUE | 0 | common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->data_size_from_cmnd | 1-256 |
| PARAM_VALUE | 0 | common->filesem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->next_buffhd_to_drain | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill->state | 0-s32max |
| PARAM_VALUE | 0 | common->phase_error | 0 |
| PARAM_VALUE | 0 | common->running | 1 |
| PARAM_VALUE | 0 | common->short_packet_received | 0 |
| PARAM_VALUE | 0 | common->state | 0 |
| PARAM_VALUE | 1 | cmnd_size | 6 |
| PARAM_VALUE | 2 | data_dir | 2 |
| PARAM_VALUE | 3 | mask | 30 |
| PARAM_VALUE | 4 | needs_medium | 1 |
| PARAM_VALUE | 5 | name | 1665629033111830528 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 5 | name | 8 |
| CAPPED_DATA | 0 | common->cmnd_size | 1 |
| CAPPED_DATA | 0 | &common->filesem | 1 |
| DATA_SOURCE | 0 | common | $0 |
| FUZZY_MAX | 0 | common->data_size_from_cmnd | 256 |
| STR_LEN | 0 | common | 7 |
| TERMINATED | 5 | name | 1 |
| LOCK2 | 0 | &common->filesem | |
| TYPE_LOCK | (struct fsg_common)->filesem |
drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | common | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd_size | 0-s32max |
| PARAM_VALUE | 0 | common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->data_size_from_cmnd | 0-255 |
| PARAM_VALUE | 0 | common->filesem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->next_buffhd_to_drain | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill->state | 0-s32max |
| PARAM_VALUE | 0 | common->phase_error | 0 |
| PARAM_VALUE | 0 | common->running | 1 |
| PARAM_VALUE | 0 | common->short_packet_received | 0 |
| PARAM_VALUE | 0 | common->state | 0 |
| PARAM_VALUE | 1 | cmnd_size | 10 |
| PARAM_VALUE | 2 | data_dir | 2 |
| PARAM_VALUE | 3 | mask | 446 |
| PARAM_VALUE | 4 | needs_medium | 1 |
| PARAM_VALUE | 5 | name | 7436662933140492288 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 5 | name | 9 |
| CAPPED_DATA | 0 | common->cmnd_size | 1 |
| CAPPED_DATA | 0 | &common->filesem | 1 |
| DATA_SOURCE | 0 | common | $0 |
| STR_LEN | 0 | common | 8 |
| TERMINATED | 5 | name | 1 |
| LOCK2 | 0 | &common->filesem | |
| TYPE_LOCK | (struct fsg_common)->filesem |
drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | common | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd_size | 0-s32max |
| PARAM_VALUE | 0 | common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->data_size_from_cmnd | 0-255 |
| PARAM_VALUE | 0 | common->filesem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->next_buffhd_to_drain | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill->state | 0-s32max |
| PARAM_VALUE | 0 | common->phase_error | 0 |
| PARAM_VALUE | 0 | common->running | 1 |
| PARAM_VALUE | 0 | common->short_packet_received | 0 |
| PARAM_VALUE | 0 | common->state | 0 |
| PARAM_VALUE | 1 | cmnd_size | 12 |
| PARAM_VALUE | 2 | data_dir | 2 |
| PARAM_VALUE | 3 | mask | 1022 |
| PARAM_VALUE | 4 | needs_medium | 1 |
| PARAM_VALUE | 5 | name | 5743179183131209728 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 5 | name | 9 |
| CAPPED_DATA | 0 | common->cmnd_size | 1 |
| CAPPED_DATA | 0 | &common->filesem | 1 |
| DATA_SOURCE | 0 | common | $0 |
| STR_LEN | 0 | common | 8 |
| TERMINATED | 5 | name | 1 |
| LOCK2 | 0 | &common->filesem | |
| TYPE_LOCK | (struct fsg_common)->filesem |
drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | common | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd_size | 0-s32max |
| PARAM_VALUE | 0 | common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->data_size_from_cmnd | 0-255 |
| PARAM_VALUE | 0 | common->filesem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->next_buffhd_to_drain | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill->state | 0-s32max |
| PARAM_VALUE | 0 | common->phase_error | 0 |
| PARAM_VALUE | 0 | common->running | 1 |
| PARAM_VALUE | 0 | common->short_packet_received | 0 |
| PARAM_VALUE | 0 | common->state | 0 |
| PARAM_VALUE | 1 | cmnd_size | 16 |
| PARAM_VALUE | 2 | data_dir | 2 |
| PARAM_VALUE | 3 | mask | 16382 |
| PARAM_VALUE | 4 | needs_medium | 1 |
| PARAM_VALUE | 5 | name | 3948287818234433536 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 5 | name | 9 |
| CAPPED_DATA | 0 | common->cmnd_size | 1 |
| CAPPED_DATA | 0 | &common->filesem | 1 |
| DATA_SOURCE | 0 | common | $0 |
| STR_LEN | 0 | common | 8 |
| TERMINATED | 5 | name | 1 |
| LOCK2 | 0 | &common->filesem | |
| TYPE_LOCK | (struct fsg_common)->filesem |
drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | common | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd_size | 0-s32max |
| PARAM_VALUE | 0 | common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->data_size_from_cmnd | 1-256 |
| PARAM_VALUE | 0 | common->filesem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->next_buffhd_to_drain | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill->state | 0-s32max |
| PARAM_VALUE | 0 | common->phase_error | 0 |
| PARAM_VALUE | 0 | common->running | 1 |
| PARAM_VALUE | 0 | common->short_packet_received | 0 |
| PARAM_VALUE | 0 | common->state | 0 |
| PARAM_VALUE | 1 | cmnd_size | 6 |
| PARAM_VALUE | 2 | data_dir | 1 |
| PARAM_VALUE | 3 | mask | 30 |
| PARAM_VALUE | 4 | needs_medium | 1 |
| PARAM_VALUE | 5 | name | 2149749936192495616 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 5 | name | 9 |
| CAPPED_DATA | 0 | common->cmnd_size | 1 |
| CAPPED_DATA | 0 | &common->filesem | 1 |
| DATA_SOURCE | 0 | common | $0 |
| FUZZY_MAX | 0 | common->data_size_from_cmnd | 256 |
| STR_LEN | 0 | common | 8 |
| TERMINATED | 5 | name | 1 |
| LOCK2 | 0 | &common->filesem | |
| TYPE_LOCK | (struct fsg_common)->filesem |
drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | common | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd_size | 0-s32max |
| PARAM_VALUE | 0 | common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->data_size_from_cmnd | 0-255 |
| PARAM_VALUE | 0 | common->filesem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->next_buffhd_to_drain | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill->state | 0-s32max |
| PARAM_VALUE | 0 | common->phase_error | 0 |
| PARAM_VALUE | 0 | common->running | 1 |
| PARAM_VALUE | 0 | common->short_packet_received | 0 |
| PARAM_VALUE | 0 | common->state | 0 |
| PARAM_VALUE | 1 | cmnd_size | 10 |
| PARAM_VALUE | 2 | data_dir | 1 |
| PARAM_VALUE | 3 | mask | 446 |
| PARAM_VALUE | 4 | needs_medium | 1 |
| PARAM_VALUE | 5 | name | 216763734521892864 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 5 | name | 10 |
| CAPPED_DATA | 0 | common->cmnd_size | 1 |
| CAPPED_DATA | 0 | &common->filesem | 1 |
| DATA_SOURCE | 0 | common | $0 |
| STR_LEN | 0 | common | 9 |
| TERMINATED | 5 | name | 1 |
| LOCK2 | 0 | &common->filesem | |
| TYPE_LOCK | (struct fsg_common)->filesem |
drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | common | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd_size | 0-s32max |
| PARAM_VALUE | 0 | common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->data_size_from_cmnd | 0-255 |
| PARAM_VALUE | 0 | common->filesem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->next_buffhd_to_drain | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill->state | 0-s32max |
| PARAM_VALUE | 0 | common->phase_error | 0 |
| PARAM_VALUE | 0 | common->running | 1 |
| PARAM_VALUE | 0 | common->short_packet_received | 0 |
| PARAM_VALUE | 0 | common->state | 0 |
| PARAM_VALUE | 1 | cmnd_size | 12 |
| PARAM_VALUE | 2 | data_dir | 1 |
| PARAM_VALUE | 3 | mask | 1022 |
| PARAM_VALUE | 4 | needs_medium | 1 |
| PARAM_VALUE | 5 | name | 790222367062847488 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 5 | name | 10 |
| CAPPED_DATA | 0 | common->cmnd_size | 1 |
| CAPPED_DATA | 0 | &common->filesem | 1 |
| DATA_SOURCE | 0 | common | $0 |
| STR_LEN | 0 | common | 9 |
| TERMINATED | 5 | name | 1 |
| LOCK2 | 0 | &common->filesem | |
| TYPE_LOCK | (struct fsg_common)->filesem |
drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | common | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | common->cmnd_size | 0-s32max |
| PARAM_VALUE | 0 | common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->data_size_from_cmnd | 0-255 |
| PARAM_VALUE | 0 | common->filesem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.next | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->list.prev | 2212933610777083904 |
| PARAM_VALUE | 0 | common->filesem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner | (-1) |
| PARAM_VALUE | 0 | common->filesem.wait_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->io_wait.head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | common->next_buffhd_to_drain | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill | 1-u64max |
| PARAM_VALUE | 0 | common->next_buffhd_to_fill->state | 0-s32max |
| PARAM_VALUE | 0 | common->phase_error | 0 |
| PARAM_VALUE | 0 | common->running | 1 |
| PARAM_VALUE | 0 | common->short_packet_received | 0 |
| PARAM_VALUE | 0 | common->state | 0 |
| PARAM_VALUE | 1 | cmnd_size | 16 |
| PARAM_VALUE | 2 | data_dir | 1 |
| PARAM_VALUE | 3 | mask | 16382 |
| PARAM_VALUE | 4 | needs_medium | 1 |
| PARAM_VALUE | 5 | name | 230776450166743040 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 0 | common | 128 |
| BUF_SIZE | 5 | name | 10 |
| CAPPED_DATA | 0 | common->cmnd_size | 1 |
| CAPPED_DATA | 0 | &common->filesem | 1 |
| DATA_SOURCE | 0 | common | $0 |
| STR_LEN | 0 | common | 9 |
| TERMINATED | 5 | name | 1 |
| LOCK2 | 0 | &common->filesem | |
| TYPE_LOCK | (struct fsg_common)->filesem |