Documented in 1 files:

Defined in 1 files as a function:

Referenced in 4 files:

Smatch caller information:

net/wireless/scan.c cfg80211_defrag_mle() -> for_each_element_completed()

Type Parameter Key Value
NOSPEC 2 datalen
NOSPEC 2 datalen
RX_PATH
TASK_NOT_RUNNING
USER_DATA 2 datalen 0-764,18446744073709551363-u64max
UNITS 0 element unit_byte
UNITS 1 data unit_byte
UNITS 2 datalen unit_byte
HALF_LOCKED2 global &rtnl_mutex

net/wireless/nl80211.c validate_beacon_head() -> for_each_element_completed()

Type Parameter Key Value
PARAM_VALUE 2 datalen 1-65516
RX_PATH
TASK_NOT_RUNNING
USER_DATA 2 datalen 1-65516[c]
UNITS 0 element unit_byte
UNITS 2 datalen unit_byte

net/wireless/nl80211.c validate_ie_attr() -> for_each_element_completed()

Type Parameter Key Value
PARAM_VALUE 2 datalen 0-65531
CAPPED_DATA 2 datalen 1
DATA_SOURCE 1 data r nla_data
DATA_SOURCE 2 datalen r nla_len
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 element->datalen 0-255[u]
USER_DATA 0 element->id 0-255[u]
USER_DATA 2 datalen 0-65531[c]
UNITS 0 element unit_byte
USER_PTR 0 element
USER_PTR 1 data

net/wireless/wext-sme.c cfg80211_wext_siwgenie() -> for_each_element_completed()

Type Parameter Key Value
PARAM_VALUE 0 element 0,4096-ptr_max
PARAM_VALUE 1 data 0,4096-ptr_max
PARAM_VALUE 2 datalen 1-u16max
BUF_SIZE 0 element (-1),1-s32max
BUF_SIZE 0 element (-1),1-s32max
BUF_SIZE 1 data (-1),1-s32max
CAPPED_DATA 2 datalen 1
DATA_SOURCE 1 data $3
USER_DATA 0 element->datalen 0-255[u]
USER_DATA 0 element->id 0-255[u]
UNITS 0 element unit_byte
UNITS 2 datalen unit_byte
USER_PTR 0 element
USER_PTR 1 data
LOCK2 &wdev->wiphy->mtx
LOCK2 global &rtnl_mutex
TYPE_LOCK (struct wiphy)->mtx