Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 32 files:
- drivers/bluetooth/bfusb.c, line 338
- drivers/bluetooth/bpa10x.c
- drivers/bluetooth/btintel.c
- drivers/bluetooth/btintel_pcie.c
- drivers/bluetooth/btmrvl_sdio.c
- drivers/bluetooth/btmtk.c
- drivers/bluetooth/btmtk.h, line 307
- drivers/bluetooth/btmtksdio.c
- drivers/bluetooth/btmtkuart.c
- drivers/bluetooth/btnxpuart.c
- drivers/bluetooth/btqca.c, line 550
- drivers/bluetooth/btqcomsmd.c, line 42
- drivers/bluetooth/btrsi.c, line 96
- drivers/bluetooth/btsdio.c, line 151
- drivers/bluetooth/btusb.c
- drivers/bluetooth/hci_ag6xx.c
- drivers/bluetooth/hci_aml.c
- drivers/bluetooth/hci_ath.c
- drivers/bluetooth/hci_bcm.c
- drivers/bluetooth/hci_bcm4377.c, line 692
- drivers/bluetooth/hci_bcsp.c
- drivers/bluetooth/hci_h4.c
- drivers/bluetooth/hci_h5.c, line 419
- drivers/bluetooth/hci_intel.c
- drivers/bluetooth/hci_ll.c
- drivers/bluetooth/hci_mrvl.c
- drivers/bluetooth/hci_nokia.c
- drivers/bluetooth/hci_qca.c
- drivers/bluetooth/hci_vhci.c, line 530
- drivers/bluetooth/virtio_bt.c, line 238
- net/bluetooth/hci_core.c
- net/bluetooth/hci_drv.c
Smatch caller information:
drivers/bluetooth/hci_qca.c qca_recv_acl_data() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/hci_qca.c qca_recv_event() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/hci_vhci.c vhci_get_user() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 1-u64max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btmtkuart.c btmtkuart_recv_event() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btqca.c qca_inject_cmd_complete_event() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->dev.devres_head.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->dev.devres_head.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->dev.devres_head.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->dev.driver_data | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->quirk_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->req_result | 0 |
| PARAM_VALUE | 0 | hdev->req_rsp | 0 |
| PARAM_VALUE | 0 | hdev->req_rsp->_nfct | 0 |
| PARAM_VALUE | 0 | hdev->req_rsp->_skb_refdst | 0 |
| PARAM_VALUE | 0 | hdev->req_rsp->active_extensions | 0 |
| PARAM_VALUE | 0 | hdev->req_rsp->destructor | 0 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk | 0 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->__sk_common.skc_net.net->notrefcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->__sk_common.skc_net.net->notrefcnt_tracker.quarantine.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->__sk_common.skc_net.net->refcnt_tracker.dead | 1 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->sk_callback_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->sk_callback_lock.raw_lock.cnts.counter | 0-s32max |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->sk_rcu.func | 1-u64max |
| PARAM_VALUE | 0 | hdev->req_status | 0-1 |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| CAPPED_DATA | 0 | hdev | 1 |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btqcomsmd.c btqcomsmd_recv() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &channel->recv_lock | ||
| HALF_LOCKED2 | &ept->cb_lock |
drivers/bluetooth/btusb.c btusb_recv_acl_qca() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->hdr_len | 0 |
| PARAM_VALUE | 1 | skb->head_frag | 0 |
| PARAM_VALUE | 1 | skb->nohdr | 0 |
| PARAM_VALUE | 1 | skb->pp_recycle | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &data->rxlock | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | flags |
drivers/bluetooth/btusb.c btusb_recv_event_realtek() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &data->rxlock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btusb_data)->rxlock |
drivers/bluetooth/btusb.c btusb_recv_evt_qca() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->hdr_len | 0 |
| PARAM_VALUE | 1 | skb->head_frag | 0 |
| PARAM_VALUE | 1 | skb->nohdr | 0 |
| PARAM_VALUE | 1 | skb->pp_recycle | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &data->rxlock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btusb_data)->rxlock |
drivers/bluetooth/btusb.c btusb_recv_isoc() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &data->rxlock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btusb_data)->rxlock |
drivers/bluetooth/btusb.c inject_cmd_complete() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->debugfs->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | hdev->debugfs->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | hdev->hci_drv->specific_handler_count | 0,2 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_workqueue->flush_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->req_workqueue->work_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->workqueue->flags | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->workqueue->flush_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->workqueue->nr_drainers | s32min-s32max |
| PARAM_VALUE | 0 | hdev->workqueue->work_color | s32min-s32max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 0 | hdev | (-1),1-u16max |
| BUF_SIZE | 0 | hdev | (-1),1-u16max |
| BUF_SIZE | 0 | hdev->sent_cmd | (-1),240 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| CAPPED_DATA | 0 | hdev | 1 |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| STR_LEN | 0 | hdev | (-1),23,63 |
| STR_LEN | 0 | hdev | (-1),23,63 |
| TASK_NOT_RUNNING | |||
| USER_PTR | 0 | hdev->sent_cmd->data | |
| HALF_LOCKED2 | 0 | &hdev->req_lock |
drivers/bluetooth/hci_intel.c inject_cmd_complete() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/hci_intel.c intel_recv_event() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hci_drv.c hci_drv_cmd_complete() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->debugfs->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | hdev->debugfs->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | hdev->dev.iommu_group->owner_cnt | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->dev.kobj.release.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | hdev->dev.kobj.release.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->dev.kobj.release.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->dev.parent->kobj.release.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | hdev->dev.parent->kobj.release.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->dev.parent->kobj.release.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->hci_drv | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->hci_drv->common_handlers | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->hci_drv->specific_handler_count | 0,2 |
| PARAM_VALUE | 0 | hdev->hci_drv->specific_handlers | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->interleave_scan.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | hdev->interleave_scan.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->interleave_scan.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_workqueue->flush_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->req_workqueue->work_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->workqueue->flags | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->workqueue->flush_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->workqueue->nr_drainers | s32min-s32max |
| PARAM_VALUE | 0 | hdev->workqueue->work_color | s32min-s32max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 0 | hdev | (-1),1-u16max |
| BUF_SIZE | 0 | hdev | (-1),1-u16max |
| BUF_SIZE | 0 | hdev->sent_cmd | (-1)-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| CAPPED_DATA | 0 | hdev->hci_drv->specific_handler_count | 1 |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| STR_LEN | 0 | hdev | (-1),23,63 |
| STR_LEN | 0 | hdev | (-1),23,63 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_PTR | 0 | hdev->sent_cmd->data | |
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | 0 | &hdev->req_lock |
net/bluetooth/hci_drv.c hci_drv_cmd_status() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->debugfs->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | hdev->debugfs->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | hdev->dev.iommu_group->owner_cnt | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->dev.kobj.release.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | hdev->dev.kobj.release.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->dev.kobj.release.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->dev.parent->kobj.release.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | hdev->dev.parent->kobj.release.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->dev.parent->kobj.release.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->hci_drv | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->hci_drv->common_handlers | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->hci_drv->specific_handler_count | 0,2 |
| PARAM_VALUE | 0 | hdev->hci_drv->specific_handlers | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->interleave_scan.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | hdev->interleave_scan.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->interleave_scan.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_workqueue->flush_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->req_workqueue->work_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->workqueue->flags | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->workqueue->flush_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->workqueue->nr_drainers | s32min-s32max |
| PARAM_VALUE | 0 | hdev->workqueue->work_color | s32min-s32max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 0 | hdev | (-1),1-u16max |
| BUF_SIZE | 0 | hdev | (-1),1-u16max |
| BUF_SIZE | 0 | hdev->sent_cmd | (-1)-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| CAPPED_DATA | 0 | hdev | 1 |
| CAPPED_DATA | 0 | hdev->hci_drv->specific_handler_count | 1 |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| STR_LEN | 0 | hdev | (-1),23,63 |
| STR_LEN | 0 | hdev | (-1),23,63 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_PTR | 0 | hdev->sent_cmd->data | |
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | 0 | &hdev->req_lock |
drivers/bluetooth/btintel.c btintel_diagnostics() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data->evt | 255 |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH |
drivers/bluetooth/btintel.c btintel_recv_event() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &data->rxlock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btusb_data)->rxlock |
drivers/bluetooth/virtio_bt.c virtbt_rx_handle() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| PARAM_VALUE | 1 | skb->len | 2-u32max |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| HOST_DATA | 1 | skb->_nfct | 0-u64max |
| HOST_DATA | 1 | skb->_sk_redir | 0-u64max |
| HOST_DATA | 1 | skb->_skb_refdst | 0-u64max |
| HOST_DATA | 1 | skb->active_extensions | 0-255 |
| HOST_DATA | 1 | skb->alloc_cpu | 0-u16max |
| HOST_DATA | 1 | skb->cloned | 0-1 |
| HOST_DATA | 1 | skb->csum | 0-u32max |
| HOST_DATA | 1 | skb->csum_complete_sw | 0-1 |
| HOST_DATA | 1 | skb->csum_level | 0-3 |
| HOST_DATA | 1 | skb->csum_not_inet | 0-1 |
| HOST_DATA | 1 | skb->csum_offset | 0-u16max |
| HOST_DATA | 1 | skb->csum_start | 0-u16max |
| HOST_DATA | 1 | skb->csum_valid | 0-1 |
| HOST_DATA | 1 | skb->data_len | 0 |
| HOST_DATA | 1 | skb->decrypted | 0-1 |
| HOST_DATA | 1 | skb->dev_scratch | 0-u64max |
| HOST_DATA | 1 | skb->dst_pending_confirm | 0-1 |
| HOST_DATA | 1 | skb->encap_hdr_csum | 0-1 |
| HOST_DATA | 1 | skb->encapsulation | 0-1 |
| HOST_DATA | 1 | skb->end | 0-u32max |
| HOST_DATA | 1 | skb->fclone | 0-3 |
| HOST_DATA | 1 | skb->from_ingress | 0-1 |
| HOST_DATA | 1 | skb->hash | 0-u32max |
| HOST_DATA | 1 | skb->hdr_len | 0-u16max |
| HOST_DATA | 1 | skb->head_frag | 0-1 |
| HOST_DATA | 1 | skb->ignore_df | 0-1 |
| HOST_DATA | 1 | skb->inner_ipproto | 0-255 |
| HOST_DATA | 1 | skb->inner_mac_header | 0-u16max |
| HOST_DATA | 1 | skb->inner_network_header | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol | 0-u16max |
| HOST_DATA | 1 | skb->inner_protocol_type | 0-1 |
| HOST_DATA | 1 | skb->inner_transport_header | 0-u16max |
| HOST_DATA | 1 | skb->ip_summed | 0-3 |
| HOST_DATA | 1 | skb->ipvs_property | 0-1 |
| HOST_DATA | 1 | skb->l4_hash | 0-1 |
| HOST_DATA | 1 | skb->mac_header | 0-u16max |
| HOST_DATA | 1 | skb->mac_len | 0-u16max |
| HOST_DATA | 1 | skb->mark | 0-u32max |
| HOST_DATA | 1 | skb->napi_id | 0-u32max |
| HOST_DATA | 1 | skb->ndisc_nodetype | 0-3 |
| HOST_DATA | 1 | skb->network_header | 0-u16max |
| HOST_DATA | 1 | skb->nf_skip_egress | 0-1 |
| HOST_DATA | 1 | skb->nf_trace | 0-1 |
| HOST_DATA | 1 | skb->no_fcs | 0-1 |
| HOST_DATA | 1 | skb->nohdr | 0-1 |
| HOST_DATA | 1 | skb->offload_fwd_mark | 0-1 |
| HOST_DATA | 1 | skb->offload_l3_fwd_mark | 0-1 |
| HOST_DATA | 1 | skb->ooo_okay | 0-1 |
| HOST_DATA | 1 | skb->peeked | 0-1 |
| HOST_DATA | 1 | skb->pfmemalloc | 0-1 |
| HOST_DATA | 1 | skb->pkt_type | 0-7 |
| HOST_DATA | 1 | skb->pp_recycle | 0-1 |
| HOST_DATA | 1 | skb->priority | 0-u32max |
| HOST_DATA | 1 | skb->protocol | 0-u16max |
| HOST_DATA | 1 | skb->queue_mapping | 0-u16max |
| HOST_DATA | 1 | skb->redirected | 0-1 |
| HOST_DATA | 1 | skb->remcsum_offload | 0-1 |
| HOST_DATA | 1 | skb->reserved_tailroom | 0-u32max |
| HOST_DATA | 1 | skb->secmark | 0-u32max |
| HOST_DATA | 1 | skb->sender_cpu | 0-u32max |
| HOST_DATA | 1 | skb->skb_iif | s32min-s32max |
| HOST_DATA | 1 | skb->skb_mstamp_ns | 0-u64max |
| HOST_DATA | 1 | skb->slow_gro | 0-1 |
| HOST_DATA | 1 | skb->sw_hash | 0-1 |
| HOST_DATA | 1 | skb->tc_at_ingress | 0-1 |
| HOST_DATA | 1 | skb->tc_depth | 0-3 |
| HOST_DATA | 1 | skb->tc_index | 0-u16max |
| HOST_DATA | 1 | skb->tc_skip_classify | 0-1 |
| HOST_DATA | 1 | skb->transport_header | 0-u16max |
| HOST_DATA | 1 | skb->truesize | 0-u32max |
| HOST_DATA | 1 | skb->tstamp | s64min-s64max |
| HOST_DATA | 1 | skb->tstamp_type | 0-3 |
| HOST_DATA | 1 | skb->unreadable | 0-1 |
| HOST_DATA | 1 | skb->vlan_all | 0-u32max |
| HOST_DATA | 1 | skb->vlan_proto | 0-u16max |
| HOST_DATA | 1 | skb->vlan_tci | 0-u16max |
| HOST_DATA | 1 | skb->wifi_acked | 0-1 |
| HOST_DATA | 1 | skb->wifi_acked_valid | 0-1 |
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btintel_pcie.c btintel_pcie_inject_cmd_complete() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->debugfs->d_inode->i_rwsem.first_waiter->handoff_set | 0-1 |
| PARAM_VALUE | 0 | hdev->debugfs->d_inode->i_rwsem.first_waiter->type | 0-1 |
| PARAM_VALUE | 0 | hdev->hci_drv->specific_handler_count | 0,2 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->req_rsp->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->req_skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->req_workqueue->flush_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->req_workqueue->work_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->sent_cmd->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->workqueue->flags | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->workqueue->flush_color | s32min-s32max |
| PARAM_VALUE | 0 | hdev->workqueue->nr_drainers | s32min-s32max |
| PARAM_VALUE | 0 | hdev->workqueue->work_color | s32min-s32max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 0 | hdev | (-1),1-u16max |
| BUF_SIZE | 0 | hdev | (-1),1-u16max |
| BUF_SIZE | 0 | hdev->sent_cmd | (-1),240 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| CAPPED_DATA | 0 | hdev | 1 |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| STR_LEN | 0 | hdev | (-1),23,63 |
| STR_LEN | 0 | hdev | (-1),23,63 |
| TASK_NOT_RUNNING | |||
| USER_PTR | 0 | hdev->sent_cmd->data | |
| HALF_LOCKED2 | 0 | &hdev->req_lock |
drivers/bluetooth/btintel_pcie.c btintel_pcie_recv_event() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 1 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| BUF_SIZE | 1 | skb | (-1),1-u16max |
| BUF_SIZE | 1 | skb | (-1),1-u16max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| LOCK2 | &data->hci_rx_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btintel_pcie_data)->hci_rx_lock |
drivers/bluetooth/btintel_pcie.c btintel_pcie_recv_frame() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $1 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| LOCK2 | &data->hci_rx_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btintel_pcie_data)->hci_rx_lock |
drivers/bluetooth/btmtksdio.c btmtksdio_recv_acl() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btmtksdio.c btmtksdio_recv_event() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hci_core.c __hci_reset_dev() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 0,4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | hdev->stat.byte_tx | |
| HALF_LOCKED2 | &qca->hci_memdump_lock | ||
| HALF_LOCKED2 | 0 | &hdev->req_lock |
drivers/bluetooth/hci_bcm4377.c bcm4377_handle_event() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &ring->lock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &desc->request_mutex | ||
| HALF_LOCKED2 | _T->lock | ||
| HALF_LOCKED2 | flags | ||
| TYPE_LOCK | (struct bcm4377_transfer_ring)->lock |
drivers/bluetooth/btmtk.c btmtk_recv_event() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &data->rxlock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btusb_data)->rxlock |
drivers/bluetooth/btmtk.c btmtk_recv_isopkt() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->suspended | 0 |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 0 | hdev | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | hdev | s32min-(-1),1-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | hdev->stat.byte_rx | |
| UNITS | 0 | hdev | unit_byte |
| LOCK2 | &btmtk_data->isorxlock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btmtk_data)->isorxlock |
drivers/bluetooth/btmtk.c btmtk_usb_recv_acl() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &data->rxlock | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | flags |
drivers/bluetooth/btmtk.c btmtk_usb_wmt_recv() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| BUF_SIZE | 0 | hdev | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | hdev | s32min-(-1),1-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | hdev->stat.byte_rx | |
| UNITS | 0 | hdev | unit_byte |
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btnxpuart.c nxp_recv_acl_pkt() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btrsi.c rsi_hci_recv_pkt() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | r dev_alloc_skb |
| RX_PATH | |||
| HALF_LOCKED2 | &common->rx_lock |
drivers/bluetooth/btmrvl_sdio.c btmrvl_sdio_card_to_host() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| NOCHECK_CALL |
drivers/bluetooth/btmrvl_sdio.c btmrvl_sdio_card_to_host() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| NOCHECK_CALL |
drivers/bluetooth/hci_h5.c h5_complete_rx_pkt() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| RX_PATH | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &buf->lock | ||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/hci_nokia.c nokia_recv_radio() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/bfusb.c bfusb_recv_block() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0-1 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | hdev->stat.byte_rx | |
| USER_PTR | 1 | skb->data | |
| LOCK2 | &data->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct bfusb_data)->lock |
drivers/bluetooth/hci_bcsp.c bcsp_complete_rx_pkt() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| CAPPED_DATA | 1 | skb->head | 1 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &buf->lock | ||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/hci_bcsp.c bcsp_complete_rx_pkt() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| RX_PATH | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &buf->lock | ||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btsdio.c btsdio_rx_packet() -> hci_recv_frame()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| RX_PATH | |||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btmtksdio.c btmtksdio_rx_packet() -> (struct h4_recv_pkt)->recv()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | 0-s32max |
| BUF_SIZE | 1 | skb | 0-s32max |
| DATA_SOURCE | 1 | skb | r bt_skb_alloc |
| RX_PATH | |||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/hci_h4.c h4_recv_buf() -> (struct h4_recv_pkt)->recv()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| PARAM_VALUE | 1 | skb->len | 0-5,9,63 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| CAPPED_DATA | 1 | skb->len | 1 |
| DATA_SOURCE | 1 | skb | $1 [m] |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &buf->lock | ||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/hci_h4.c h4_recv_buf() -> (struct h4_recv_pkt)->recv()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 1 | skb | $1 [m] |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &buf->lock | ||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btusb.c btusb_recv_event() -> (struct btusb_data)->recv_event()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &data->rxlock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btusb_data)->rxlock |
drivers/bluetooth/btusb.c btusb_recv_acl() -> (struct btusb_data)->recv_acl()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->data_len | 0 |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| BUF_SIZE | 1 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 1 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &data->rxlock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btusb_data)->rxlock |
drivers/bluetooth/btusb.c btusb_rx_work() -> (struct btusb_data)->recv_acl()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | skb->next | 0 |
| PARAM_VALUE | 1 | skb->prev | 0 |
| DATA_SOURCE | 1 | skb | r skb_dequeue |
| CONTAINER | 0 | *(-2072+0) | $(-1) |
| RX_PATH | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &pool->lock |