Defined in 2 files as a function:
- drivers/usb/host/ehci-mem.c, line 106 (as a function)
- drivers/usb/host/oxu210hp-hcd.c, line 1121 (as a function)
Referenced in 3 files:
Smatch caller information:
drivers/usb/host/ehci-hcd.c ehci_mem_init() -> ehci_mem_cleanup()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ehci | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async_idle.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async_idle.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async_idle.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async_idle.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async_idle.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async_unlink.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async_unlink.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async_unlink.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async_unlink.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async_unlink.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->cached_itd_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->cached_itd_list.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->cached_itd_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->cached_itd_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->cached_itd_list.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->cached_sitd_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->cached_sitd_list.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->cached_sitd_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->cached_sitd_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->cached_sitd_list.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->caps | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->hrtimer._softexpires | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.base | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->hrtimer.function | 1-u64max |
| PARAM_VALUE | 0 | ehci->hrtimer.is_hard | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.is_lazy | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.is_queued | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.is_rel | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.is_soft | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.expires | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.next | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.node.rb_left | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.node.rb_right | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.prev | 0 |
| PARAM_VALUE | 0 | ehci->intr_qh_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_qh_list.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_qh_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_qh_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_qh_list.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_unlink.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_unlink.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_unlink.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_unlink.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_unlink.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_unlink_wait.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_unlink_wait.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_unlink_wait.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_unlink_wait.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->intr_unlink_wait.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->need_io_watchdog | 1 |
| PARAM_VALUE | 0 | ehci->next_hrtimer_event | 99 |
| PARAM_VALUE | 0 | ehci->periodic_size | 512,1024 |
| PARAM_VALUE | 0 | ehci->pshadow | 0 |
| PARAM_VALUE | 0 | ehci->qtd_pool | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ehci->tt_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->tt_list.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->tt_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->tt_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->tt_list.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->uframe_periodic_max | 100 |
| BUF_SIZE | 0 | ehci->async | (-1),144 |
| BUF_SIZE | 0 | ehci->dummy | (-1),144 |
| BUF_SIZE | 0 | ehci->itd_pool | (-1),192 |
| BUF_SIZE | 0 | ehci->periodic | 2048,4096,u64max |
| BUF_SIZE | 0 | ehci->pshadow | 8,u64max |
| BUF_SIZE | 0 | ehci->qh_pool | (-1),192 |
| BUF_SIZE | 0 | ehci->qtd_pool | (-1),192 |
| BUF_SIZE | 0 | ehci->sitd_pool | (-1),192 |
| CAPPED_DATA | 0 | ehci->periodic_size | 1 |
| DATA_SOURCE | 0 | ehci | $0 |
| FUZZY_MAX | 0 | ehci->periodic_size | 1024 |
| BIT_INFO | 0 | ehci->periodic_size | 0x0,0x600 |
| HARD_MAX | 0 | ehci->periodic_size | 1024 |
| MEM_ZERO | 0 | &ehci->hrtimer | |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | ehci->periodic_size |
drivers/usb/host/ehci-hcd.c ehci_setup() -> ehci_mem_cleanup()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ehci | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async->dummy->hw_alt_next | 1 |
| PARAM_VALUE | 0 | ehci->async->dummy->hw_next | 1 |
| PARAM_VALUE | 0 | ehci->async->dummy->hw_token | 64 |
| PARAM_VALUE | 0 | ehci->async->hw->hw_info1 | 32768 |
| PARAM_VALUE | 0 | ehci->async->hw->hw_next | 0,2-4294967295 |
| PARAM_VALUE | 0 | ehci->async->hw->hw_qtd_next | 1 |
| PARAM_VALUE | 0 | ehci->async->hw->hw_token | 64 |
| PARAM_VALUE | 0 | ehci->async->qh_next.qh | 0 |
| PARAM_VALUE | 0 | ehci->async->qh_state | 1 |
| PARAM_VALUE | 0 | ehci->caps | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->command | 0,2-u32max |
| PARAM_VALUE | 0 | ehci->dummy->hw->hw_alt_next | 1 |
| PARAM_VALUE | 0 | ehci->dummy->hw->hw_next | 1 |
| PARAM_VALUE | 0 | ehci->dummy->hw->hw_qtd_next | 1 |
| PARAM_VALUE | 0 | ehci->has_ppcd | 1 |
| PARAM_VALUE | 0 | ehci->hrtimer._softexpires | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.is_hard | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.is_lazy | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.is_queued | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.is_rel | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.is_soft | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.expires | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.next | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.node.rb_left | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.node.rb_right | 0 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.prev | 0 |
| PARAM_VALUE | 0 | ehci->i_thresh | 0,2-9 |
| PARAM_VALUE | 0 | ehci->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ehci->need_io_watchdog | 1 |
| PARAM_VALUE | 0 | ehci->next_hrtimer_event | 99 |
| PARAM_VALUE | 0 | ehci->old_current | 4294967295 |
| PARAM_VALUE | 0 | ehci->periodic_size | 512,1024 |
| PARAM_VALUE | 0 | ehci->qh_pool->dev->cma_area->alloc_mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | ehci->qh_pool->dev->cma_area->alloc_mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | ehci->qh_pool->dev->cma_area->alloc_mutex.osq.tail.counter | s32min-s32max |
| PARAM_VALUE | 0 | ehci->qh_pool->dev->dma_uses_io_tlb | 1 |
| PARAM_VALUE | 0 | ehci->qh_pool->dev->iommu->pci_32bit_workaround | 0-1 |
| PARAM_VALUE | 0 | ehci->qh_pool->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ehci->qtd_pool->dev->cma_area->alloc_mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | ehci->qtd_pool->dev->cma_area->alloc_mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | ehci->qtd_pool->dev->cma_area->alloc_mutex.osq.tail.counter | s32min-s32max |
| PARAM_VALUE | 0 | ehci->qtd_pool->dev->dma_uses_io_tlb | 1 |
| PARAM_VALUE | 0 | ehci->qtd_pool->dev->iommu->pci_32bit_workaround | 0-1 |
| PARAM_VALUE | 0 | ehci->qtd_pool->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ehci->regs | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->sbrn | 32 |
| PARAM_VALUE | 0 | ehci->uframe_periodic_max | 100 |
| NOCHECK_CALL | |||
| HOST_DATA | 0 | ehci->hcs_params | 0-u32max |
drivers/usb/host/ehci-hcd.c ehci_stop() -> ehci_mem_cleanup()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ehci | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->command | 0,2-u32max |
| PARAM_VALUE | 0 | ehci->debug | 0 |
| PARAM_VALUE | 0 | ehci->debug_dir | 0,4096-u64max |
| PARAM_VALUE | 0 | ehci->debug_dir->d_fsdata->management_timer.flags | 0-4294967295 |
| PARAM_VALUE | 0 | ehci->debug_dir->d_inode->i_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ehci->debug_dir->d_sb->s_fs_info->lookup_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ehci->debug_dir->d_sb->s_roots_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ehci->hrtimer.base->active.rb_root.rb_leftmost->node.__rb_parent_color | 1 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.node.__rb_parent_color | 1 |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.node.rb_left | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->hrtimer.node.node.node.rb_right | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->itd_pool->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ehci->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ehci->regs | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->rh_state | 0 |
| PARAM_VALUE | 0 | ehci->sitd_pool->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ehci->debug_dir->d_fsdata->d_inode->i_sb->s_fs_info->wbuf | 0-255 |
| PARAM_VALUE | 0 | *ehci->debug_dir->d_fsdata->d_inode->i_sb->s_fs_info->wbuf_verify | 0-255 |
| PARAM_VALUE | 0 | *ehci->debug_dir->d_inode->i_hash.next->pprev | 1-u64max |
| PARAM_VALUE | 0 | *ehci->debug_dir->d_inode->i_sb->s_fs_info->nm_info->nat_root.xa_head | (-4611686018427387904)-4611686018427387903 |
| PARAM_VALUE | 0 | *ehci->debug_dir->d_inode->i_sb->s_fs_info->page_eio_cnt | s32min-s32max |
| CAPPED_DATA | 0 | ehci->debug_dir | 1 |
| CAPPED_DATA | 0 | &ehci->hrtimer | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | global &companions_rwsem | ||
| HALF_LOCKED2 | global &xenwatch_mutex |
drivers/usb/host/oxu210hp-hcd.c ehci_mem_init() -> ehci_mem_cleanup()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ehci | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->mem | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->mem->frame_list | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->murb_pool | 0,4096-ptr_max |
| PARAM_VALUE | 0 | ehci->periodic | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->periodic_size | 1024 |
| PARAM_VALUE | 0 | ehci->pshadow | 0 |
| PARAM_VALUE | 0 | ehci->qh_used | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->qtd_used | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->watchdog.entry.pprev | 0 |
| PARAM_VALUE | 0 | ehci->watchdog.flags | 0-4194302 |
| PARAM_VALUE | 0 | ehci->watchdog.lockdep_map->name | 0-255 |
| PARAM_VALUE | 0 | *ehci->qh_used | 0-255 |
| PARAM_VALUE | 0 | *ehci->qtd_used | 0-255 |
| BUF_SIZE | 0 | ehci->murb_pool | 1664 |
| BUF_SIZE | 0 | ehci->periodic | (-1),4096 |
| BUF_SIZE | 0 | ehci->pshadow | 8,u64max |
| CAPPED_DATA | 0 | ehci->periodic | 1 |
| DATA_SOURCE | 0 | ehci | $0 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | ehci->periodic_size |
drivers/usb/host/oxu210hp-hcd.c oxu_run() -> ehci_mem_cleanup()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ehci | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->regs | 4096-ptr_max |
| NOCHECK_CALL |
drivers/usb/host/oxu210hp-hcd.c oxu_stop() -> ehci_mem_cleanup()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ehci | 4096-ptr_max |
| PARAM_VALUE | 0 | ehci->async->qh_next.qh->qh_state | 3 |
| PARAM_VALUE | 0 | ehci->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | ehci->reclaim->dummy->qtd_buffer_len | 0,512-2048 |
| PARAM_VALUE | 0 | ehci->regs | 4096-ptr_max |
| CAPPED_DATA | 0 | ehci->async | 1 |
| CAPPED_DATA | 0 | &ehci->watchdog | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | ehci->next_uframe | s32min-s32max |
| HALF_LOCKED2 | global &companions_rwsem | ||
| HALF_LOCKED2 | global &xenwatch_mutex |