Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/bluetooth/hci_sock.c hci_sock_recvmsg() -> hci_sock_cmsg()

Type Parameter Key Value
PARAM_VALUE 0 sk 4096-ptr_max
PARAM_VALUE 0 sk->__sk_common.skc_state 0-8,10-255
PARAM_VALUE 0 sk->channel 0
PARAM_VALUE 0 sk->sk_receive_queue.next->sk->ns_tracker->alloc_stack_handle 0-4294967295
PARAM_VALUE 0 sk->sk_receive_queue.next->sk->ns_tracker->dead 0-1
PARAM_VALUE 0 sk->sk_receive_queue.next->sk->ns_tracker->free_stack_handle 0-4294967295
PARAM_VALUE 2 skb 4096-ptr_max
BUF_SIZE 1 msg->msg_control (-1)-0,16-17,24
BUF_SIZE 1 msg->msg_name (-1)-0,12,128
BUF_SIZE 2 skb (-1),1-s32max
BUF_SIZE 2 skb (-1),1-s32max
DATA_SOURCE 1 msg $1
DATA_SOURCE 2 skb r skb_recv_datagram
NOSPEC 1 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 1 msg->msg_control 4096-ptr_max[c][u]
USER_DATA 1 msg->msg_control_user 4096-ptr_max[c][u]
USER_DATA 1 msg->msg_controllen 0-u64max
USER_DATA 1 msg->msg_flags 0-u32max[c]
USER_DATA 1 msg->msg_iter.count 0-u64max
USER_DATA 1 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 1 *msg->msg_name s64min-s64max
NO_OVERFLOW_SIMPLE 0 sk->sk_backlog.len
UNITS 0 sk unit_byte
HALF_LOCKED2 &vq->mutex
HALF_LOCKED2 sk