Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/bluetooth/hidp/core.c hidp_send_ctrl_message() -> hidp_send_message()

Type Parameter Key Value
PARAM_VALUE 0 session 4096-ptr_max
PARAM_VALUE 0 session->hid->driver_input_lock.first_waiter->up 0-1
PARAM_VALUE 2 transmit 4096-ptr_max
PARAM_VALUE 3 hdr 3-4,18,21,65-67,81-83
PARAM_VALUE 4 data 0,4096-ptr_max
PARAM_VALUE 5 size 0-16384
BUF_SIZE 0 session s32min-(-1),1-s32max
BUF_SIZE 0 session s32min-(-1),1-s32max
BUF_SIZE 4 data (-1)-s32max
BUF_SIZE 4 data (-1)-s32max
CAPPED_DATA 5 size 1
DATA_SOURCE 0 session $0
DATA_SOURCE 3 hdr $1
DATA_SOURCE 4 data $2
DATA_SOURCE 5 size $3
FUZZY_MAX 3 hdr 83
PARAM_COMPARE 4 data >= $5
BIT_INFO 3 hdr 0x0,0x57
NOSPEC 5 size
NOSPEC 5 size
HARD_MAX 3 hdr 83
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 session->waiting_report_number 0-255
USER_DATA 4 *data 0-255
USER_DATA 5 size 3-16384[c]
NO_OVERFLOW_SIMPLE 4 data->node.size
BYTE_COUNT 4 ==data5 8050
USER_PTR 4 data
HALF_LOCKED2 0 &session->report_mutex

net/bluetooth/hidp/core.c hidp_send_intr_message() -> hidp_send_message()

Type Parameter Key Value
PARAM_VALUE 0 session 4096-ptr_max
PARAM_VALUE 2 transmit 4096-ptr_max
PARAM_VALUE 3 hdr 162
PARAM_VALUE 4 data 1-u64max
PARAM_VALUE 5 size 1-16384
BUF_SIZE 0 session s32min-(-2),1-s32max
BUF_SIZE 0 session s32min-(-2),1-s32max
BUF_SIZE 4 data (-1)-s32max
BUF_SIZE 4 data (-1)-s32max
CAPPED_DATA 5 size 1
DATA_SOURCE 0 session $0
DATA_SOURCE 3 hdr $1
DATA_SOURCE 4 data $2
DATA_SOURCE 5 size $3
PARAM_COMPARE 4 data >= $5
RX_PATH
TASK_NOT_RUNNING
USER_DATA 4 *data 0-255
USER_DATA 5 size 3-16384[c]
UNITS 0 session unit_byte
BYTE_COUNT 4 ==data5 8050
USER_PTR 4 data