Defined in 1 files as a member:
Defined in 1 files as a function:
Referenced in 47 files:
- arch/parisc/kernel/relocate_kernel.S, line 149
- arch/riscv/kvm/vcpu_pmu.c
- arch/x86/platform/olpc/olpc_dt.c
- drivers/accel/habanalabs/common/memory.c
- drivers/edac/altera_edac.c
- drivers/gpu/drm/qxl/qxl_display.c
- drivers/gpu/drm/vboxvideo/vbox_mode.c
- drivers/hv/mshv_vtl_main.c
- drivers/hwmon/w83793.c
- drivers/infiniband/hw/bnxt_re/ib_verbs.c
- drivers/infiniband/hw/bnxt_re/qplib_sp.c
- drivers/infiniband/hw/bnxt_re/uapi.c
- drivers/iommu/arm/arm-smmu/qcom_iommu.c
- drivers/media/dvb-frontends/dib0070.c
- drivers/media/dvb-frontends/dib0090.c
- drivers/media/pci/bt8xx/bttv-driver.c
- drivers/media/pci/cx18/cx18-driver.c
- drivers/media/radio/radio-raremono.c
- drivers/media/usb/uvc/uvc_ctrl.c
- drivers/misc/vmw_vmci/vmci_doorbell.c
- drivers/net/ethernet/freescale/dpaa2/dpaa2-ethtool.c
- drivers/net/ethernet/intel/i40e/i40e_dcb.c
- drivers/net/ethernet/marvell/octeontx2/af/rvu.c
- drivers/net/ethernet/marvell/octeontx2/af/rvu_nix.c
- drivers/net/ethernet/marvell/octeontx2/af/rvu_npa.c
- drivers/net/ethernet/marvell/octeontx2/nic/cn10k_ipsec.c
- drivers/net/ethernet/mellanox/mlx4/main.c
- drivers/net/ethernet/mellanox/mlx5/core/steering/sws/dr_send.c
- drivers/net/ethernet/qlogic/qlcnic/qlcnic_minidump.c
- drivers/net/ethernet/ti/icssm/icssm_prueth.c
- drivers/perf/riscv_pmu_sbi.c
- drivers/remoteproc/stm32_rproc.c
- drivers/scsi/aacraid/commsup.c
- drivers/scsi/be2iscsi/be_main.c
- drivers/scsi/elx/libefc_sli/sli4.c
- drivers/scsi/ibmvscsi_tgt/libsrp.c
- drivers/scsi/lpfc/lpfc_sli.c
- drivers/scsi/mpt3sas/mpt3sas_config.c
- drivers/soc/tegra/pmc.c
- drivers/thermal/thermal_core.c
- drivers/thermal/thermal_hwmon.c
- drivers/usb/gadget/function/uvc_configfs.c
- drivers/usb/isp1760/isp1760-hcd.c, line 1095
- drivers/video/fbdev/grvga.c
- lib/test_hmm.c
- tools/testing/selftests/bpf/cgroup_helpers.c
- tools/testing/selftests/bpf/xdp_hw_metadata.c
Smatch caller information:
drivers/usb/isp1760/isp1760-hcd.c collect_qtds() -> free_mem()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hcd | 4096-ptr_max |
| PARAM_VALUE | 1 | qtd | 4096-ptr_max |
| PARAM_VALUE | 1 | qtd->payload_addr | 1-u32max |
| BUF_SIZE | 0 | hcd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | hcd | s32min-(-1),1-s32max |
| CAPPED_DATA | 1 | &qtd->qtd_list | 1 |
| DATA_SOURCE | 0 | hcd | $0 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &priv->lock | ||
| HALF_LOCKED2 | spinflags | ||
| TYPE_LOCK | (struct isp1760_hcd)->lock |