Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/bluetooth/hidp/core.c hidp_session_run() -> hidp_process_transmit()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | session | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock->sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 0 | session->hid->driver_input_lock.first_waiter->up | 0-1 |
| PARAM_VALUE | 0 | session->intr_sock | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_sock->sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 0 | session->intr_sock->sk->sk_receive_queue.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->state_queue.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->terminate.counter | 0 |
| PARAM_VALUE | 0 | session->timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | transmit | 4096-ptr_max |
| PARAM_VALUE | 2 | sock | 4096-ptr_max |
| PARAM_VALUE | 2 | sock->sk | 4096-ptr_max |
| PARAM_VALUE | 2 | sock->sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 2 | sock->sk->sk_receive_queue.lock.rlock.dep_map->name | 0-255 |
| BUF_SIZE | 0 | session | 128 |
| BUF_SIZE | 0 | session | 128 |
| DATA_SOURCE | 0 | session | $0 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->len | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->len | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->truesize |
net/bluetooth/hidp/core.c hidp_session_run() -> hidp_process_transmit()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | session | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock->sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 0 | session->ctrl_sock->sk->sk_receive_queue.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->hid->driver_input_lock.first_waiter->up | 0-1 |
| PARAM_VALUE | 0 | session->intr_sock | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_sock->sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 0 | session->intr_sock->sk->sk_receive_queue.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->intr_transmit.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->state_queue.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | *session->intr_sock->sk->sk_backlog.head->dev->name | 0-255 |
| PARAM_VALUE | 1 | transmit | 4096-ptr_max |
| PARAM_VALUE | 2 | sock | 4096-ptr_max |
| PARAM_VALUE | 2 | sock->sk | 4096-ptr_max |
| PARAM_VALUE | 2 | sock->sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 2 | sock->sk->sk_receive_queue.lock.rlock.dep_map->name | 0-255 |
| BUF_SIZE | 0 | session | 128 |
| BUF_SIZE | 0 | session | 128 |
| CAPPED_DATA | 0 | &session->intr_transmit | 1 |
| DATA_SOURCE | 0 | session | $0 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->len | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | session->ctrl_transmit.next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->end | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->len | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | session->intr_transmit.next->truesize |