Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()

Type Parameter Key Value
PARAM_VALUE 0 common 4096-ptr_max
PARAM_VALUE 0 common->cmnd 4096-ptr_max
PARAM_VALUE 0 common->cmnd_size 0-s32max
PARAM_VALUE 0 common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 common->data_size_from_cmnd 1-256
PARAM_VALUE 0 common->filesem.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 common->filesem.first_waiter->list.next 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->list.prev 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->type 0-1
PARAM_VALUE 0 common->filesem.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.wait_lock.owner (-1)
PARAM_VALUE 0 common->filesem.wait_lock.owner_cpu u32max
PARAM_VALUE 0 common->io_wait.head.prev->next 4096-ptr_max
PARAM_VALUE 0 common->io_wait.head.prev->next->next 4096-ptr_max
PARAM_VALUE 0 common->next_buffhd_to_drain 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill->state 0-s32max
PARAM_VALUE 0 common->phase_error 0
PARAM_VALUE 0 common->running 1
PARAM_VALUE 0 common->short_packet_received 0
PARAM_VALUE 0 common->state 0
PARAM_VALUE 1 cmnd_size 6
PARAM_VALUE 2 data_dir 2
PARAM_VALUE 3 mask 30
PARAM_VALUE 4 needs_medium 1
PARAM_VALUE 5 name 1665629033111830528
BUF_SIZE 0 common 128
BUF_SIZE 0 common 128
BUF_SIZE 5 name 8
CAPPED_DATA 0 common->cmnd_size 1
CAPPED_DATA 0 &common->filesem 1
DATA_SOURCE 0 common $0
FUZZY_MAX 0 common->data_size_from_cmnd 256
STR_LEN 0 common 7
TERMINATED 5 name 1
LOCK2 0 &common->filesem
TYPE_LOCK (struct fsg_common)->filesem

drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()

Type Parameter Key Value
PARAM_VALUE 0 common 4096-ptr_max
PARAM_VALUE 0 common->cmnd 4096-ptr_max
PARAM_VALUE 0 common->cmnd_size 0-s32max
PARAM_VALUE 0 common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 common->data_size_from_cmnd 0-255
PARAM_VALUE 0 common->filesem.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 common->filesem.first_waiter->list.next 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->list.prev 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->type 0-1
PARAM_VALUE 0 common->filesem.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.wait_lock.owner (-1)
PARAM_VALUE 0 common->filesem.wait_lock.owner_cpu u32max
PARAM_VALUE 0 common->io_wait.head.prev->next 4096-ptr_max
PARAM_VALUE 0 common->io_wait.head.prev->next->next 4096-ptr_max
PARAM_VALUE 0 common->next_buffhd_to_drain 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill->state 0-s32max
PARAM_VALUE 0 common->phase_error 0
PARAM_VALUE 0 common->running 1
PARAM_VALUE 0 common->short_packet_received 0
PARAM_VALUE 0 common->state 0
PARAM_VALUE 1 cmnd_size 10
PARAM_VALUE 2 data_dir 2
PARAM_VALUE 3 mask 446
PARAM_VALUE 4 needs_medium 1
PARAM_VALUE 5 name 7436662933140492288
BUF_SIZE 0 common 128
BUF_SIZE 0 common 128
BUF_SIZE 5 name 9
CAPPED_DATA 0 common->cmnd_size 1
CAPPED_DATA 0 &common->filesem 1
DATA_SOURCE 0 common $0
STR_LEN 0 common 8
TERMINATED 5 name 1
LOCK2 0 &common->filesem
TYPE_LOCK (struct fsg_common)->filesem

drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()

Type Parameter Key Value
PARAM_VALUE 0 common 4096-ptr_max
PARAM_VALUE 0 common->cmnd 4096-ptr_max
PARAM_VALUE 0 common->cmnd_size 0-s32max
PARAM_VALUE 0 common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 common->data_size_from_cmnd 0-255
PARAM_VALUE 0 common->filesem.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 common->filesem.first_waiter->list.next 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->list.prev 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->type 0-1
PARAM_VALUE 0 common->filesem.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.wait_lock.owner (-1)
PARAM_VALUE 0 common->filesem.wait_lock.owner_cpu u32max
PARAM_VALUE 0 common->io_wait.head.prev->next 4096-ptr_max
PARAM_VALUE 0 common->io_wait.head.prev->next->next 4096-ptr_max
PARAM_VALUE 0 common->next_buffhd_to_drain 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill->state 0-s32max
PARAM_VALUE 0 common->phase_error 0
PARAM_VALUE 0 common->running 1
PARAM_VALUE 0 common->short_packet_received 0
PARAM_VALUE 0 common->state 0
PARAM_VALUE 1 cmnd_size 12
PARAM_VALUE 2 data_dir 2
PARAM_VALUE 3 mask 1022
PARAM_VALUE 4 needs_medium 1
PARAM_VALUE 5 name 5743179183131209728
BUF_SIZE 0 common 128
BUF_SIZE 0 common 128
BUF_SIZE 5 name 9
CAPPED_DATA 0 common->cmnd_size 1
CAPPED_DATA 0 &common->filesem 1
DATA_SOURCE 0 common $0
STR_LEN 0 common 8
TERMINATED 5 name 1
LOCK2 0 &common->filesem
TYPE_LOCK (struct fsg_common)->filesem

drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()

Type Parameter Key Value
PARAM_VALUE 0 common 4096-ptr_max
PARAM_VALUE 0 common->cmnd 4096-ptr_max
PARAM_VALUE 0 common->cmnd_size 0-s32max
PARAM_VALUE 0 common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 common->data_size_from_cmnd 0-255
PARAM_VALUE 0 common->filesem.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 common->filesem.first_waiter->list.next 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->list.prev 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->type 0-1
PARAM_VALUE 0 common->filesem.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.wait_lock.owner (-1)
PARAM_VALUE 0 common->filesem.wait_lock.owner_cpu u32max
PARAM_VALUE 0 common->io_wait.head.prev->next 4096-ptr_max
PARAM_VALUE 0 common->io_wait.head.prev->next->next 4096-ptr_max
PARAM_VALUE 0 common->next_buffhd_to_drain 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill->state 0-s32max
PARAM_VALUE 0 common->phase_error 0
PARAM_VALUE 0 common->running 1
PARAM_VALUE 0 common->short_packet_received 0
PARAM_VALUE 0 common->state 0
PARAM_VALUE 1 cmnd_size 16
PARAM_VALUE 2 data_dir 2
PARAM_VALUE 3 mask 16382
PARAM_VALUE 4 needs_medium 1
PARAM_VALUE 5 name 3948287818234433536
BUF_SIZE 0 common 128
BUF_SIZE 0 common 128
BUF_SIZE 5 name 9
CAPPED_DATA 0 common->cmnd_size 1
CAPPED_DATA 0 &common->filesem 1
DATA_SOURCE 0 common $0
STR_LEN 0 common 8
TERMINATED 5 name 1
LOCK2 0 &common->filesem
TYPE_LOCK (struct fsg_common)->filesem

drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()

Type Parameter Key Value
PARAM_VALUE 0 common 4096-ptr_max
PARAM_VALUE 0 common->cmnd 4096-ptr_max
PARAM_VALUE 0 common->cmnd_size 0-s32max
PARAM_VALUE 0 common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 common->data_size_from_cmnd 1-256
PARAM_VALUE 0 common->filesem.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 common->filesem.first_waiter->list.next 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->list.prev 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->type 0-1
PARAM_VALUE 0 common->filesem.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.wait_lock.owner (-1)
PARAM_VALUE 0 common->filesem.wait_lock.owner_cpu u32max
PARAM_VALUE 0 common->io_wait.head.prev->next 4096-ptr_max
PARAM_VALUE 0 common->io_wait.head.prev->next->next 4096-ptr_max
PARAM_VALUE 0 common->next_buffhd_to_drain 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill->state 0-s32max
PARAM_VALUE 0 common->phase_error 0
PARAM_VALUE 0 common->running 1
PARAM_VALUE 0 common->short_packet_received 0
PARAM_VALUE 0 common->state 0
PARAM_VALUE 1 cmnd_size 6
PARAM_VALUE 2 data_dir 1
PARAM_VALUE 3 mask 30
PARAM_VALUE 4 needs_medium 1
PARAM_VALUE 5 name 2149749936192495616
BUF_SIZE 0 common 128
BUF_SIZE 0 common 128
BUF_SIZE 5 name 9
CAPPED_DATA 0 common->cmnd_size 1
CAPPED_DATA 0 &common->filesem 1
DATA_SOURCE 0 common $0
FUZZY_MAX 0 common->data_size_from_cmnd 256
STR_LEN 0 common 8
TERMINATED 5 name 1
LOCK2 0 &common->filesem
TYPE_LOCK (struct fsg_common)->filesem

drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()

Type Parameter Key Value
PARAM_VALUE 0 common 4096-ptr_max
PARAM_VALUE 0 common->cmnd 4096-ptr_max
PARAM_VALUE 0 common->cmnd_size 0-s32max
PARAM_VALUE 0 common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 common->data_size_from_cmnd 0-255
PARAM_VALUE 0 common->filesem.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 common->filesem.first_waiter->list.next 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->list.prev 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->type 0-1
PARAM_VALUE 0 common->filesem.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.wait_lock.owner (-1)
PARAM_VALUE 0 common->filesem.wait_lock.owner_cpu u32max
PARAM_VALUE 0 common->io_wait.head.prev->next 4096-ptr_max
PARAM_VALUE 0 common->io_wait.head.prev->next->next 4096-ptr_max
PARAM_VALUE 0 common->next_buffhd_to_drain 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill->state 0-s32max
PARAM_VALUE 0 common->phase_error 0
PARAM_VALUE 0 common->running 1
PARAM_VALUE 0 common->short_packet_received 0
PARAM_VALUE 0 common->state 0
PARAM_VALUE 1 cmnd_size 10
PARAM_VALUE 2 data_dir 1
PARAM_VALUE 3 mask 446
PARAM_VALUE 4 needs_medium 1
PARAM_VALUE 5 name 216763734521892864
BUF_SIZE 0 common 128
BUF_SIZE 0 common 128
BUF_SIZE 5 name 10
CAPPED_DATA 0 common->cmnd_size 1
CAPPED_DATA 0 &common->filesem 1
DATA_SOURCE 0 common $0
STR_LEN 0 common 9
TERMINATED 5 name 1
LOCK2 0 &common->filesem
TYPE_LOCK (struct fsg_common)->filesem

drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()

Type Parameter Key Value
PARAM_VALUE 0 common 4096-ptr_max
PARAM_VALUE 0 common->cmnd 4096-ptr_max
PARAM_VALUE 0 common->cmnd_size 0-s32max
PARAM_VALUE 0 common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 common->data_size_from_cmnd 0-255
PARAM_VALUE 0 common->filesem.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 common->filesem.first_waiter->list.next 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->list.prev 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->type 0-1
PARAM_VALUE 0 common->filesem.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.wait_lock.owner (-1)
PARAM_VALUE 0 common->filesem.wait_lock.owner_cpu u32max
PARAM_VALUE 0 common->io_wait.head.prev->next 4096-ptr_max
PARAM_VALUE 0 common->io_wait.head.prev->next->next 4096-ptr_max
PARAM_VALUE 0 common->next_buffhd_to_drain 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill->state 0-s32max
PARAM_VALUE 0 common->phase_error 0
PARAM_VALUE 0 common->running 1
PARAM_VALUE 0 common->short_packet_received 0
PARAM_VALUE 0 common->state 0
PARAM_VALUE 1 cmnd_size 12
PARAM_VALUE 2 data_dir 1
PARAM_VALUE 3 mask 1022
PARAM_VALUE 4 needs_medium 1
PARAM_VALUE 5 name 790222367062847488
BUF_SIZE 0 common 128
BUF_SIZE 0 common 128
BUF_SIZE 5 name 10
CAPPED_DATA 0 common->cmnd_size 1
CAPPED_DATA 0 &common->filesem 1
DATA_SOURCE 0 common $0
STR_LEN 0 common 9
TERMINATED 5 name 1
LOCK2 0 &common->filesem
TYPE_LOCK (struct fsg_common)->filesem

drivers/usb/gadget/function/f_mass_storage.c do_scsi_command() -> check_command_size_in_blocks()

Type Parameter Key Value
PARAM_VALUE 0 common 4096-ptr_max
PARAM_VALUE 0 common->cmnd 4096-ptr_max
PARAM_VALUE 0 common->cmnd_size 0-s32max
PARAM_VALUE 0 common->curlun->filp->f_mapping->host->i_mapping->i_mmap_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 common->data_size_from_cmnd 0-255
PARAM_VALUE 0 common->filesem.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 common->filesem.first_waiter->list.next 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->list.prev 2212933610777083904
PARAM_VALUE 0 common->filesem.first_waiter->type 0-1
PARAM_VALUE 0 common->filesem.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 common->filesem.wait_lock.owner (-1)
PARAM_VALUE 0 common->filesem.wait_lock.owner_cpu u32max
PARAM_VALUE 0 common->io_wait.head.prev->next 4096-ptr_max
PARAM_VALUE 0 common->io_wait.head.prev->next->next 4096-ptr_max
PARAM_VALUE 0 common->next_buffhd_to_drain 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill 1-u64max
PARAM_VALUE 0 common->next_buffhd_to_fill->state 0-s32max
PARAM_VALUE 0 common->phase_error 0
PARAM_VALUE 0 common->running 1
PARAM_VALUE 0 common->short_packet_received 0
PARAM_VALUE 0 common->state 0
PARAM_VALUE 1 cmnd_size 16
PARAM_VALUE 2 data_dir 1
PARAM_VALUE 3 mask 16382
PARAM_VALUE 4 needs_medium 1
PARAM_VALUE 5 name 230776450166743040
BUF_SIZE 0 common 128
BUF_SIZE 0 common 128
BUF_SIZE 5 name 10
CAPPED_DATA 0 common->cmnd_size 1
CAPPED_DATA 0 &common->filesem 1
DATA_SOURCE 0 common $0
STR_LEN 0 common 9
TERMINATED 5 name 1
LOCK2 0 &common->filesem
TYPE_LOCK (struct fsg_common)->filesem