Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/bluetooth/l2cap_core.c l2cap_config_req() -> cmd_reject_invalid_cid()

Type Parameter Key Value
PARAM_VALUE 0 conn 4096-ptr_max
PARAM_VALUE 0 conn->hcon 4096-ptr_max
PARAM_VALUE 0 conn->hcon->debugfs->d_inode->i_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 conn->hcon->debugfs->d_inode->i_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_init 0,2385819921126617088,7057831443282669568,7824184004865302528
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_iput 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_manage 0,1859587847549206528
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_prune 0,2225594340392566784,7225953709177749504
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_real 0,4509355519306412032
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_automount 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_init 0,2385819921126617088,7057831443282669568,7824184004865302528
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_iput 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_manage 0,1859587847549206528
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_prune 0,2225594340392566784,7225953709177749504
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_real 0,4509355519306412032
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_unalias_trylock 0,6635409759016140800
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_unalias_unlock 0,6336447517789900800
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_weak_revalidate 0,5632434648052031488,5669063523602272256,7231033168839651328
PARAM_VALUE 0 conn->hcon->dev.iommu_group->id s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.iommu_group->owner_cnt 0-4294967295
PARAM_VALUE 0 conn->hcon->dev.kobj.parent->release.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->dev.kobj.parent->release.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.parent->release.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.release.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->dev.kobj.release.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.release.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.sd->attr.open->nr_mmapped 0-4294967295
PARAM_VALUE 0 conn->hcon->dev.p->dead 0-1
PARAM_VALUE 0 conn->hcon->dev.p->deferred_probe_reason 0-s64max
PARAM_VALUE 0 conn->hcon->dev.parent->kobj.release.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->dev.parent->kobj.release.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.parent->kobj.release.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev 4096-ptr_max
PARAM_VALUE 0 conn->hcon->hdev->adv_instance_expire.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->hdev->adv_instance_expire.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->adv_instance_expire.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->interleave_scan.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->hdev->interleave_scan.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->interleave_scan.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->req_skb->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->req_skb->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 conn->hcon->hdev->req_skb->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->req_workqueue->flush_color s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->req_workqueue->work_color s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->sent_cmd->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 conn->hcon->hdev->sent_cmd->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->workqueue->flags 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->workqueue->flush_color s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->workqueue->nr_drainers s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->workqueue->work_color s32min-s32max
PARAM_VALUE 0 conn->hcon->state 1
PARAM_VALUE 0 conn->hcon->type 1
PARAM_VALUE 0 conn->lock.dep_map->name 0-255
PARAM_VALUE 0 conn->lock.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 conn->lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 conn->lock.first_waiter->list.prev->prev 5159360019465732096
PARAM_VALUE 0 conn->lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 conn->lock.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 conn->lock.wait_lock.owner (-1)
PARAM_VALUE 0 conn->lock.wait_lock.owner_cpu u32max
PARAM_VALUE 1 ident 1-255
PARAM_VALUE 3 dcid 0
BUF_SIZE 0 conn (-1),896
BUF_SIZE 0 conn (-1),896
CAPPED_DATA 0 conn->hcon 1
DATA_SOURCE 0 conn $0
RX_PATH
NOCHECK_CALL
USER_DATA 1 ident 1-255[u]
NO_OVERFLOW_SIMPLE 0 conn->hchan->data_q.prev->len
NO_OVERFLOW_SIMPLE 0 conn->hchan->data_q.prev->next->len
LOCK2 &pool->lock
LOCK2 0 &conn->lock
TYPE_LOCK (struct l2cap_conn)->lock

net/bluetooth/l2cap_core.c l2cap_config_req() -> cmd_reject_invalid_cid()

Type Parameter Key Value
PARAM_VALUE 0 conn 4096-ptr_max
PARAM_VALUE 0 conn->hcon 4096-ptr_max
PARAM_VALUE 0 conn->hcon->debugfs->d_inode->i_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 conn->hcon->debugfs->d_inode->i_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_init 0,2385819921126617088,7057831443282669568,7824184004865302528
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_iput 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_manage 0,1859587847549206528
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_prune 0,2225594340392566784,7225953709177749504
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_real 0,4509355519306412032
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_automount 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_init 0,2385819921126617088,7057831443282669568,7824184004865302528
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_iput 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_manage 0,1859587847549206528
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_prune 0,2225594340392566784,7225953709177749504
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_real 0,4509355519306412032
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_unalias_trylock 0,6635409759016140800
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_unalias_unlock 0,6336447517789900800
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_weak_revalidate 0,5632434648052031488,5669063523602272256,7231033168839651328
PARAM_VALUE 0 conn->hcon->dev.iommu_group->id s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.iommu_group->owner_cnt 0-4294967295
PARAM_VALUE 0 conn->hcon->dev.kobj.parent->release.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->dev.kobj.parent->release.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.parent->release.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.release.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->dev.kobj.release.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.release.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.sd->attr.open->nr_mmapped 0-4294967295
PARAM_VALUE 0 conn->hcon->dev.p->dead 0-1
PARAM_VALUE 0 conn->hcon->dev.p->deferred_probe_reason 0-s64max
PARAM_VALUE 0 conn->hcon->dev.parent->kobj.release.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->dev.parent->kobj.release.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.parent->kobj.release.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev 4096-ptr_max
PARAM_VALUE 0 conn->hcon->hdev->adv_instance_expire.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->hdev->adv_instance_expire.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->adv_instance_expire.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->interleave_scan.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->hdev->interleave_scan.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->interleave_scan.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->req_skb->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->req_skb->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 conn->hcon->hdev->req_skb->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->req_workqueue->flush_color s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->req_workqueue->work_color s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->sent_cmd->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 conn->hcon->hdev->sent_cmd->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->workqueue->flags 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->workqueue->flush_color s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->workqueue->nr_drainers s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->workqueue->work_color s32min-s32max
PARAM_VALUE 0 conn->hcon->state 1
PARAM_VALUE 0 conn->hcon->type 1
PARAM_VALUE 0 conn->lock.dep_map->name 0-255
PARAM_VALUE 0 conn->lock.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 conn->lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 conn->lock.first_waiter->list.prev->prev 5159360019465732096
PARAM_VALUE 0 conn->lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 conn->lock.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 conn->lock.wait_lock.owner (-1)
PARAM_VALUE 0 conn->lock.wait_lock.owner_cpu u32max
PARAM_VALUE 1 ident 1-255
BUF_SIZE 0 conn (-1),896
BUF_SIZE 0 conn (-1),896
CAPPED_DATA 0 conn->hcon 1
DATA_SOURCE 0 conn $0
RX_PATH
NOCHECK_CALL
USER_DATA 1 ident 1-255[u]
NO_OVERFLOW_SIMPLE 0 conn->hchan->data_q.prev->len
NO_OVERFLOW_SIMPLE 0 conn->hchan->data_q.prev->next->len
LOCK2 &pool->lock
LOCK2 0 &conn->lock
TYPE_LOCK (struct l2cap_conn)->lock

net/bluetooth/l2cap_core.c l2cap_disconnect_req() -> cmd_reject_invalid_cid()

Type Parameter Key Value
PARAM_VALUE 0 conn 4096-ptr_max
PARAM_VALUE 0 conn->hcon 4096-ptr_max
PARAM_VALUE 0 conn->hcon->debugfs->d_inode->i_rwsem.first_waiter->handoff_set 0-1
PARAM_VALUE 0 conn->hcon->debugfs->d_inode->i_rwsem.first_waiter->type 0-1
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_init 0,2385819921126617088,7057831443282669568,7824184004865302528
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_iput 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_manage 0,1859587847549206528
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_prune 0,2225594340392566784,7225953709177749504
PARAM_VALUE 0 conn->hcon->debugfs->d_parent->d_sb->__s_d_op->d_real 0,4509355519306412032
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_automount 0,2908707185815040000,3401111987815645184,6746145930460459008,7190988915944083456,7386785427940065280,8018779550845526016
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_init 0,2385819921126617088,7057831443282669568,7824184004865302528
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_iput 0,170374395438985216,837750826476904448,5086081384299388928,8216155483032948736
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_manage 0,1859587847549206528
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_prune 0,2225594340392566784,7225953709177749504
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_real 0,4509355519306412032
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_unalias_trylock 0,6635409759016140800
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_unalias_unlock 0,6336447517789900800
PARAM_VALUE 0 conn->hcon->debugfs->d_sb->__s_d_op->d_weak_revalidate 0,5632434648052031488,5669063523602272256,7231033168839651328
PARAM_VALUE 0 conn->hcon->dev.iommu_group->id s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.iommu_group->owner_cnt 0-4294967295
PARAM_VALUE 0 conn->hcon->dev.kobj.parent->release.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->dev.kobj.parent->release.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.parent->release.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.release.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->dev.kobj.release.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.release.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.kobj.sd->attr.open->nr_mmapped 0-4294967295
PARAM_VALUE 0 conn->hcon->dev.p->dead 0-1
PARAM_VALUE 0 conn->hcon->dev.p->deferred_probe_reason 0-s64max
PARAM_VALUE 0 conn->hcon->dev.parent->kobj.release.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->dev.parent->kobj.release.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.parent->kobj.release.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev 4096-ptr_max
PARAM_VALUE 0 conn->hcon->hdev->adv_instance_expire.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->hdev->adv_instance_expire.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->adv_instance_expire.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->interleave_scan.wq->dfl_pwq 0-s64max
PARAM_VALUE 0 conn->hcon->hdev->interleave_scan.wq->saved_max_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->interleave_scan.wq->saved_min_active s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->req_skb->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->req_skb->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 conn->hcon->hdev->req_skb->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->req_workqueue->flush_color s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->req_workqueue->work_color s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->sent_cmd->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 conn->hcon->hdev->sent_cmd->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->workqueue->flags 0-4294967295
PARAM_VALUE 0 conn->hcon->hdev->workqueue->flush_color s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->workqueue->nr_drainers s32min-s32max
PARAM_VALUE 0 conn->hcon->hdev->workqueue->work_color s32min-s32max
PARAM_VALUE 0 conn->hcon->state 1
PARAM_VALUE 0 conn->hcon->type 1,128
PARAM_VALUE 0 conn->lock.dep_map->name 0-255
PARAM_VALUE 0 conn->lock.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 conn->lock.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 conn->lock.first_waiter->list.prev->prev 5159360019465732096
PARAM_VALUE 0 conn->lock.osq.tail.counter 0-s32max
PARAM_VALUE 0 conn->lock.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 conn->lock.wait_lock.owner (-1)
PARAM_VALUE 0 conn->lock.wait_lock.owner_cpu u32max
PARAM_VALUE 1 ident 1-255
BUF_SIZE 0 conn (-1),896
BUF_SIZE 0 conn (-1),896
CAPPED_DATA 0 conn->hcon 1
DATA_SOURCE 0 conn $0
HARD_MAX 0 conn->hcon->type 128
RX_PATH
NOCHECK_CALL
USER_DATA 1 ident 1-255[u]
NO_OVERFLOW_SIMPLE 0 conn->hchan->data_q.prev->len
NO_OVERFLOW_SIMPLE 0 conn->hchan->data_q.prev->next->len
LOCK2 &pool->lock
LOCK2 0 &conn->lock
TYPE_LOCK (struct l2cap_conn)->lock