Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/bluetooth/hci_event.c hci_cmd_complete_evt() -> hci_req_cmd_complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->cmd_cnt.counter | 1 |
| PARAM_VALUE | 0 | hdev->dev_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.owner | (-1) |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.raw_lock.val.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->usage.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | hdev->lock.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->ncmd_timer.timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->recv_event | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_rcu.func | 1-u64max |
| PARAM_VALUE | 0 | hdev->req_skb | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->rx_q.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 3 | req_complete | 1704672087470391296 |
| PARAM_VALUE | 4 | req_complete_skb | 6910600631775309824 |
| BUF_SIZE | 0 | hdev->recv_event | (-1),240 |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 3 | req_complete | $5 |
| DATA_SOURCE | 4 | req_complete_skb | $6 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_DATA | 2 | status | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->prev->end | |
| USER_PTR | 0 | hdev->recv_event->data | |
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hci_event.c hci_cmd_status_evt() -> hci_req_cmd_complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->cmd_cnt.counter | 1 |
| PARAM_VALUE | 0 | hdev->dev_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.owner | (-1) |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.raw_lock.val.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->usage.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | hdev->lock.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->ncmd_timer.timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->recv_event | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_rcu.func | 1-u64max |
| PARAM_VALUE | 0 | hdev->req_skb | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->rx_q.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 3 | req_complete | 1704672087470391296 |
| PARAM_VALUE | 4 | req_complete_skb | 6910600631775309824 |
| BUF_SIZE | 0 | hdev->recv_event | (-1),240 |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 3 | req_complete | $5 |
| DATA_SOURCE | 4 | req_complete_skb | $6 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->prev->end | |
| USER_PTR | 0 | hdev->recv_event->data | |
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hci_event.c hci_event_packet() -> hci_req_cmd_complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->dev_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.owner | (-1) |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.raw_lock.val.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->usage.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | hdev->lock.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->recv_event | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_callback_lock.owner | (-1) |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_callback_lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_prot_creator->owner->refcnt.counter | 0-s32max |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_rcu.func | 1-u64max |
| PARAM_VALUE | 0 | hdev->req_skb | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->rx_q.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 2 | status | 0 |
| PARAM_VALUE | 3 | req_complete | 1704672087470391296 |
| PARAM_VALUE | 3 | *req_complete | 0 |
| PARAM_VALUE | 3 | *(*req_complete) | 0 |
| PARAM_VALUE | 4 | req_complete_skb | 6910600631775309824 |
| PARAM_VALUE | 4 | *req_complete_skb | 0 |
| PARAM_VALUE | 4 | *(*req_complete_skb) | 0 |
| BUF_SIZE | 0 | hdev->recv_event | (-1),240 |
| CAPPED_DATA | 0 | hdev | 1 |
| CAPPED_DATA | 0 | &hdev->lock | 1 |
| DATA_SOURCE | 0 | hdev | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_PTR | 0 | hdev->recv_event->data | |
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hci_event.c hci_le_meta_evt() -> hci_req_cmd_complete()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | hdev | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->dev_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.owner | (-1) |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.owner_cpu | 4294967295 |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->blocked_lock.raw_lock.val.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->lock.first_waiter->task->usage.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | hdev->lock.wait_lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | hdev->recv_event | 0,4096-ptr_max |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_bpf_storage->owner_refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | hdev->recv_event->sk->sk_rcu.func | 1-u64max |
| PARAM_VALUE | 0 | hdev->req_skb | 4096-ptr_max |
| PARAM_VALUE | 0 | hdev->rx_q.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 2 | status | 0 |
| PARAM_VALUE | 3 | req_complete | 1704672087470391296 |
| PARAM_VALUE | 4 | req_complete_skb | 6910600631775309824 |
| BUF_SIZE | 0 | hdev->recv_event | (-1),240 |
| DATA_SOURCE | 0 | hdev | $0 |
| DATA_SOURCE | 3 | req_complete | $5 |
| DATA_SOURCE | 4 | req_complete_skb | $6 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | hdev->cmd_q.next->prev->end | |
| USER_PTR | 0 | hdev->recv_event->data | |
| HALF_LOCKED2 | &pool->lock |