Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 2 files:
Smatch caller information:
drivers/scsi/esas2r/esas2r_ioctl.c csmi_ioctl_tunnel() -> esas2r_build_ioctl_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | a | 4096-ptr_max |
| PARAM_VALUE | 0 | a->buffered_ioctl_done | 0 |
| PARAM_VALUE | 0 | a->pcid | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->alloc_mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->alloc_mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->alloc_mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->nranges | s32min-s32max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_pools.next | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_pools.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_pools.next->prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_mem->spinlock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | a->pcid->dev.dma_uses_io_tlb | 1 |
| PARAM_VALUE | 0 | a->pcid->dev.iommu->pci_32bit_workaround | 0-1 |
| PARAM_VALUE | 0 | a->request_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *a->req_table | 4096-ptr_max |
| PARAM_VALUE | 1 | rq | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->comp_cb | 8574913642816892928 |
| PARAM_VALUE | 1 | rq->data_buf | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->flags | 0 |
| PARAM_VALUE | 1 | rq->interrupt_cb | 0 |
| PARAM_VALUE | 1 | rq->req_stat | 254 |
| PARAM_VALUE | 1 | rq->req_type | 1 |
| PARAM_VALUE | 1 | rq->sg_table_head.next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.next->next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->timeout | 0 |
| PARAM_VALUE | 1 | rq->vda_req_sz | 0 |
| PARAM_VALUE | 1 | rq->vda_rsp_data | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->vrq | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->vrq->scsi.chain_offset | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.flags | 0-255 |
| PARAM_VALUE | 1 | rq->vrq->scsi.function | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.reserved | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.sense_len | 252 |
| PARAM_VALUE | 1 | rq->vrq_md | 4096-ptr_max |
| PARAM_VALUE | 3 | sub_func | 1 |
| BUF_SIZE | 0 | a | 0 |
| DATA_SOURCE | 0 | a | $0 |
| DATA_SOURCE | 1 | rq | $2 |
| BIT_INFO | 0 | a | 0x0,0x0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 2 | length | unit_byte |
| LOCK2 | global &buffered_ioctl_semaphore |
drivers/scsi/esas2r/esas2r_ioctl.c hba_ioctl_tunnel() -> esas2r_build_ioctl_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | a->buffered_ioctl_done | 0 |
| PARAM_VALUE | 0 | a->pcid | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->alloc_mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->alloc_mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->alloc_mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->nranges | s32min-s32max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_pools.next | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_pools.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_pools.next->prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_mem->spinlock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | a->pcid->dev.dma_uses_io_tlb | 1 |
| PARAM_VALUE | 0 | a->pcid->dev.iommu->pci_32bit_workaround | 0-1 |
| PARAM_VALUE | 0 | a->request_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *a->req_table | 4096-ptr_max |
| PARAM_VALUE | 1 | rq | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->comp_cb | 8574913642816892928 |
| PARAM_VALUE | 1 | rq->data_buf | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->flags | 0 |
| PARAM_VALUE | 1 | rq->interrupt_cb | 0 |
| PARAM_VALUE | 1 | rq->req_stat | 254 |
| PARAM_VALUE | 1 | rq->req_type | 1 |
| PARAM_VALUE | 1 | rq->sg_table_head.next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.next->next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->timeout | 0 |
| PARAM_VALUE | 1 | rq->vda_req_sz | 0 |
| PARAM_VALUE | 1 | rq->vda_rsp_data | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->vrq | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->vrq->scsi.chain_offset | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.flags | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.function | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.reserved | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.sense_len | 252 |
| PARAM_VALUE | 1 | rq->vrq_md | 4096-ptr_max |
| PARAM_VALUE | 3 | sub_func | 0 |
| BUF_SIZE | 0 | a | 0 |
| DATA_SOURCE | 0 | a | $0 |
| DATA_SOURCE | 1 | rq | $2 |
| BIT_INFO | 0 | a | 0x0,0x0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 2 | length | unit_byte |
| LOCK2 | global &buffered_ioctl_semaphore |
drivers/scsi/esas2r/esas2r_ioctl.c smp_ioctl_callback() -> esas2r_build_ioctl_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | a->buffered_ioctl_done | 0 |
| PARAM_VALUE | 0 | a->pcid | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->alloc_mutex.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->alloc_mutex.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->alloc_mutex.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->nranges | s32min-s32max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_pools.next | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_pools.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_pools.next->prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_mem->spinlock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | a->pcid->dev.dma_uses_io_tlb | 1 |
| PARAM_VALUE | 0 | a->pcid->dev.iommu->attach_deferred | 0-1 |
| PARAM_VALUE | 0 | a->request_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | *a->req_table | 4096-ptr_max |
| PARAM_VALUE | 1 | rq | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->comp_cb | 8574913642816892928 |
| PARAM_VALUE | 1 | rq->data_buf | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->flags | 0 |
| PARAM_VALUE | 1 | rq->interrupt_cb | 0 |
| PARAM_VALUE | 1 | rq->req_stat | 254 |
| PARAM_VALUE | 1 | rq->req_type | 1 |
| PARAM_VALUE | 1 | rq->sg_table_head.next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.next->next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->timeout | 0 |
| PARAM_VALUE | 1 | rq->vda_req_sz | 0 |
| PARAM_VALUE | 1 | rq->vda_rsp_data | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->vrq | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->vrq->scsi.chain_offset | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.flags | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.function | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.reserved | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.sense_len | 252 |
| PARAM_VALUE | 1 | rq->vrq_md | 4096-ptr_max |
| PARAM_VALUE | 3 | sub_func | 2 |
| BUF_SIZE | 0 | a | 0 |
| DATA_SOURCE | 0 | a | $0 |
| DATA_SOURCE | 1 | rq | $1 |
| BIT_INFO | 0 | a | 0x0,0x0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 2 | length | unit_byte |
| LOCK2 | global &buffered_ioctl_semaphore |
drivers/scsi/esas2r/esas2r_disc.c esas2r_disc_passthru_dev_addr() -> esas2r_build_ioctl_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | a | 4096-ptr_max |
| PARAM_VALUE | 0 | a->buffered_ioctl_done | 0-1 |
| PARAM_VALUE | 0 | a->build_sgl | 0,4096-ptr_max |
| PARAM_VALUE | 0 | a->disc_ctx.dev_addr_type | 0,4 |
| PARAM_VALUE | 0 | a->disc_ctx.flags | 0-2,4-65532 |
| PARAM_VALUE | 0 | a->disc_ctx.state | 0-6,255 |
| PARAM_VALUE | 0 | a->firmware.state | 0-2 |
| PARAM_VALUE | 0 | a->flash_context.comp_typ | 0,2-5 |
| PARAM_VALUE | 0 | a->flash_context.fi_hdr_len | 0,2176 |
| PARAM_VALUE | 0 | a->flash_context.func | 0-1 |
| PARAM_VALUE | 0 | a->flash_context.interrupt_cb | 0,4096-ptr_max |
| PARAM_VALUE | 0 | a->flash_context.num_comps | 0,6 |
| PARAM_VALUE | 0 | a->flash_context.task | 0-8 |
| PARAM_VALUE | 0 | a->fm_api_command_done | 0-1 |
| PARAM_VALUE | 0 | a->fs_api_command_done | 0-1 |
| PARAM_VALUE | 0 | a->fw_events_off | 0-1 |
| PARAM_VALUE | 0 | a->general_req.vda_rsp_data->mgt_data.data.grp_info.grp_index | 0-31 |
| PARAM_VALUE | 0 | a->general_req.vda_rsp_data->mgt_data.data.part_info.part_no | 0-127 |
| PARAM_VALUE | 0 | a->index | 0-31,2147483648-u32max |
| PARAM_VALUE | 0 | a->init_msg | 0-4 |
| PARAM_VALUE | 0 | a->int_mask | 0,4112 |
| PARAM_VALUE | 0 | a->intr_mode | 0-1 |
| PARAM_VALUE | 0 | a->max_vdareq_size | 0,128,1024 |
| PARAM_VALUE | 0 | a->nvram_command_done | 0-1 |
| PARAM_VALUE | 0 | a->nvram_semaphore.first_waiter->up | 0-1 |
| PARAM_VALUE | 0 | a->outbound_copy | 0,8-u64max |
| PARAM_VALUE | 0 | a->pcid->bus->self->link_bwctrl->cdev | 0-s64max |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->available_count | 0-s64max |
| PARAM_VALUE | 0 | a->pcid->dev.cma_area->nranges | s32min-s32max |
| PARAM_VALUE | 0 | a->pcid->dev.dma_io_tlb_mem->for_alloc | 0-1 |
| PARAM_VALUE | 0 | a->pcid->dev.iommu_group->default_domain | 0-s64max |
| PARAM_VALUE | 0 | a->pcid->dev.iommu_group->recovery_cnt | 0-4294967295 |
| PARAM_VALUE | 0 | a->pcid->dev.msi.data->__iter_idx | 0-s64max |
| PARAM_VALUE | 0 | a->pcid->sriov->pos | s32min-s32max |
| PARAM_VALUE | 0 | a->req_table | 4096-ptr_max |
| PARAM_VALUE | 0 | a->targetdb->block_size | 0-4294967295 |
| PARAM_VALUE | 0 | a->targetdb->buffered_target_state | 0-255 |
| PARAM_VALUE | 0 | a->targetdb->flags | 0-255 |
| PARAM_VALUE | 0 | a->targetdb->identifier_len | 0-255 |
| PARAM_VALUE | 0 | a->targetdb->inter_block | 0-4294967295 |
| PARAM_VALUE | 0 | a->targetdb->inter_byte | 0-4294967295 |
| PARAM_VALUE | 0 | a->targetdb->lu_event.byreserved | 0-255 |
| PARAM_VALUE | 0 | a->targetdb->lu_event.bystate | 0-255 |
| PARAM_VALUE | 0 | a->targetdb->lu_event.dwevent | 0-4294967295 |
| PARAM_VALUE | 0 | a->targetdb->lu_event.hdr.byflags | 0-255 |
| PARAM_VALUE | 0 | a->targetdb->lu_event.hdr.bylength | 0-255 |
| PARAM_VALUE | 0 | a->targetdb->lu_event.hdr.bytype | 0-255 |
| PARAM_VALUE | 0 | a->targetdb->lu_event.hdr.byversion | 0-255 |
| PARAM_VALUE | 0 | a->targetdb->lu_event.id.tgtlun.bylun | 0-255 |
| PARAM_VALUE | 0 | a->targetdb->lu_event.wphys_target_id | 0-u16max |
| PARAM_VALUE | 0 | a->targetdb->new_target_state | 0,5,255 |
| PARAM_VALUE | 0 | a->targetdb->phys_targ_id | 0-u16max |
| PARAM_VALUE | 0 | a->targetdb->target_state | 0,5 |
| PARAM_VALUE | 0 | a->targetdb->virt_targ_id | 0-u16max |
| PARAM_VALUE | 0 | a->vda_command_done | 0-1 |
| PARAM_VALUE | 0 | a->vrq_mds | 0 |
| PARAM_VALUE | 0 | a->window_base | 0,131072-u32max |
| PARAM_VALUE | 0 | *a->flash_rev | 0-255 |
| PARAM_VALUE | 0 | *a->image_type | 0-255 |
| PARAM_VALUE | 0 | *a->name | 0-255 |
| PARAM_VALUE | 0 | *a->req_table | 4096-ptr_max |
| PARAM_VALUE | 1 | rq | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->comp_cb | 3949462890837843968 |
| PARAM_VALUE | 1 | rq->data_buf | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->flags | 0 |
| PARAM_VALUE | 1 | rq->interrupt_cb | 0 |
| PARAM_VALUE | 1 | rq->interrupt_cx | 1-u64max |
| PARAM_VALUE | 1 | rq->req_stat | 254 |
| PARAM_VALUE | 1 | rq->req_type | 1 |
| PARAM_VALUE | 1 | rq->sg_table_head.next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.next->next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->sg_table_head.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->timeout | 0 |
| PARAM_VALUE | 1 | rq->vda_req_sz | 0 |
| PARAM_VALUE | 1 | rq->vda_rsp_data | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->vda_rsp_data->mgt_data.data.grp_info.grp_index | 0-31 |
| PARAM_VALUE | 1 | rq->vda_rsp_data->mgt_data.data.part_info.part_no | 0-127 |
| PARAM_VALUE | 1 | rq->vrq | 4096-ptr_max |
| PARAM_VALUE | 1 | rq->vrq->scsi.chain_offset | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.flags | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.function | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.reserved | 0 |
| PARAM_VALUE | 1 | rq->vrq->scsi.sense_len | 252 |
| PARAM_VALUE | 1 | rq->vrq_md | 4096-ptr_max |
| PARAM_VALUE | 2 | length | 328 |
| PARAM_VALUE | 3 | sub_func | 0 |
| BUF_SIZE | 0 | a->firmware.header_buff | (-1),2176 |
| BUF_SIZE | 0 | a->fm_api_sgc.cur_offset | (-1),1-s32max |
| BUF_SIZE | 0 | a->fw_event_q | (-1)-s32max |
| BUF_SIZE | 0 | a->host | (-1),4,168,192,2080,4520-s32max |
| BUF_SIZE | 0 | a->pcid | (-1),1-s32max |
| BUF_SIZE | 0 | a->save_offset | (-1),1-s32max |
| BUF_SIZE | 1 | rq | (-1),176 |
| BUF_SIZE | 1 | rq | (-1),176 |
| BUF_SIZE | 1 | rq->interrupt_cx | (-1),1-s32max |
| BUF_SIZE | 1 | rq->sense_buf | (-1),1-s32max |
| DATA_SOURCE | 0 | a | $0 |
| DATA_SOURCE | 1 | rq | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | a->pcid->current_state | 0[c] |
| NO_OVERFLOW_SIMPLE | 0 | a->firmware.header_buff_phys | |
| NO_OVERFLOW_SIMPLE | 0 | a->firmware.orig_len | |
| NO_OVERFLOW_SIMPLE | 0 | a->firmware.phys | |
| NO_OVERFLOW_SIMPLE | 0 | a->fs_api_buffer_size | |
| NO_OVERFLOW_SIMPLE | 0 | a->fw_rev | |
| NO_OVERFLOW_SIMPLE | 0 | a->general_req.vrq_md->esas2r_param | |
| NO_OVERFLOW_SIMPLE | 0 | a->inbound_list_md.esas2r_param | |
| NO_OVERFLOW_SIMPLE | 0 | a->inbound_list_md.phys_addr | |
| NO_OVERFLOW_SIMPLE | 0 | a->outbound_list_md.esas2r_param | |
| NO_OVERFLOW_SIMPLE | 0 | a->outbound_list_md.phys_addr | |
| NO_OVERFLOW_SIMPLE | 0 | a->pcid->dev.cma_area->available_count | |
| NO_OVERFLOW_SIMPLE | 0 | a->pcid->msix_base | |
| NO_OVERFLOW_SIMPLE | 0 | a->ppfs_api_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | a->ppvda_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | a->uncached_phys | |
| NO_OVERFLOW_SIMPLE | 0 | a->uncached_size | |
| UNITS | 2 | length | unit_byte |
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | 0 | &a->fm_api_mutex | |
| HALF_LOCKED2 | 0 | &a->fs_api_mutex | |
| HALF_LOCKED2 | 0 | &a->mem_lock | |
| HALF_LOCKED2 | 0 | &a->nvram_semaphore |