Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/mac80211/iface.c ieee80211_iface_process_skb() -> ieee80211_process_addba_request()

Type Parameter Key Value
PARAM_VALUE 0 local 4096-ptr_max
PARAM_VALUE 0 local->in_reconfig 0
PARAM_VALUE 0 local->quiescing 0
PARAM_VALUE 0 local->suspended 0
PARAM_VALUE 1 sta 4096-ptr_max
PARAM_VALUE 1 sta->sdata 4096-ptr_max
PARAM_VALUE 2 mgmt 4096-ptr_max
PARAM_VALUE 2 mgmt->u.action.action_code 0,128
PARAM_VALUE 2 mgmt->u.action.category 3
PARAM_VALUE 3 len 0-s32max,18446744071562067968-u64max
BUF_SIZE 2 mgmt 1-s32max
BUF_SIZE 2 mgmt 1-s32max
CAPPED_DATA 1 sta->sdata 1
DATA_SOURCE 0 local $0
DATA_SOURCE 1 sta r sta_info_get_bss
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 2 mgmt->duration 0-u16max[u]
USER_DATA 2 mgmt->frame_control 0-u16max[u]
USER_DATA 2 mgmt->seq_ctrl 0-u16max[u]
USER_DATA 2 mgmt->u.action.action_code 0,128[u]
USER_DATA 2 mgmt->u.action.addba_req.capab 0-u16max[u]
USER_DATA 2 mgmt->u.action.addba_req.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.addba_req.start_seq_num 0-u16max[u]
USER_DATA 2 mgmt->u.action.addba_req.timeout 0-u16max[u]
USER_DATA 2 mgmt->u.action.addba_resp.capab 0-u16max[u]
USER_DATA 2 mgmt->u.action.addba_resp.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.addba_resp.status 0-u16max[u]
USER_DATA 2 mgmt->u.action.addba_resp.timeout 0-u16max[u]
USER_DATA 2 mgmt->u.action.delba.params 0-u16max[u]
USER_DATA 2 mgmt->u.action.delba.reason_code 0-u16max[u]
USER_DATA 2 mgmt->u.action.eml_omn.control 0-255[u]
USER_DATA 2 mgmt->u.action.eml_omn.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.ext_chan_switch.data.count 0-255[u]
USER_DATA 2 mgmt->u.action.ext_chan_switch.data.mode 0-255[u]
USER_DATA 2 mgmt->u.action.ext_chan_switch.data.new_ch_num 0-255[u]
USER_DATA 2 mgmt->u.action.ext_chan_switch.data.new_operating_class 0-255[u]
USER_DATA 2 mgmt->u.action.ftm.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.ftm.follow_up 0-255[u]
USER_DATA 2 mgmt->u.action.ftm.toa_error 0-u16max[u]
USER_DATA 2 mgmt->u.action.ftm.tod_error 0-u16max[u]
USER_DATA 2 mgmt->u.action.ht_notify_cw.chanwidth 0-255[u]
USER_DATA 2 mgmt->u.action.ht_smps.smps_control 0-255[u]
USER_DATA 2 mgmt->u.action.measurement.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.measurement.element_id 0-255[u]
USER_DATA 2 mgmt->u.action.measurement.length 0-255[u]
USER_DATA 2 mgmt->u.action.measurement.msr_elem.mode 0-255[u]
USER_DATA 2 mgmt->u.action.measurement.msr_elem.token 0-255[u]
USER_DATA 2 mgmt->u.action.measurement.msr_elem.type 0-255[u]
USER_DATA 2 mgmt->u.action.ml_reconf_req.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.ml_reconf_resp.count 0-255[u]
USER_DATA 2 mgmt->u.action.ml_reconf_resp.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.tdls_discover_resp.capability 0-u16max[u]
USER_DATA 2 mgmt->u.action.tdls_discover_resp.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.tpc_report.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.tpc_report.tpc.link_margin 0-255[u]
USER_DATA 2 mgmt->u.action.tpc_report.tpc.tx_power 0-255[u]
USER_DATA 2 mgmt->u.action.tpc_report.tpc_elem_id 0-255[u]
USER_DATA 2 mgmt->u.action.tpc_report.tpc_elem_length 0-255[u]
USER_DATA 2 mgmt->u.action.ttlm_req.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.ttlm_res.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.ttlm_res.status_code 0-u16max[u]
USER_DATA 2 mgmt->u.action.uhr_link_reconf_notif.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.uhr_link_reconf_notif.type 0-255[u]
USER_DATA 2 mgmt->u.action.uhr_link_reconf_req.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.uhr_link_reconf_req.type 0-255[u]
USER_DATA 2 mgmt->u.action.uhr_link_reconf_resp.count 0-255[u]
USER_DATA 2 mgmt->u.action.uhr_link_reconf_resp.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.uhr_link_reconf_resp.type 0-255[u]
USER_DATA 2 mgmt->u.action.vht_opmode_notif.operating_mode 0-255[u]
USER_DATA 2 mgmt->u.action.wme_action.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.wme_action.status_code 0-255[u]
USER_DATA 2 mgmt->u.action.wnm_timing_msr.dialog_token 0-255[u]
USER_DATA 2 mgmt->u.action.wnm_timing_msr.follow_up 0-255[u]
USER_DATA 2 mgmt->u.action.wnm_timing_msr.max_toa_error 0-255[u]
USER_DATA 2 mgmt->u.action.wnm_timing_msr.max_tod_error 0-255[u]
USER_DATA 2 mgmt->u.action.wnm_timing_msr.toa 0-u32max[u]
USER_DATA 2 mgmt->u.action.wnm_timing_msr.tod 0-u32max[u]
USER_DATA 2 mgmt->u.assoc_req.capab_info 0-u16max[u]
USER_DATA 2 mgmt->u.assoc_req.listen_interval 0-u16max[u]
USER_DATA 2 mgmt->u.assoc_resp.aid 0-u16max[u]
USER_DATA 2 mgmt->u.assoc_resp.capab_info 0-u16max[u]
USER_DATA 2 mgmt->u.assoc_resp.status_code 0-u16max[u]
USER_DATA 2 mgmt->u.auth.auth_alg 0-u16max[u]
USER_DATA 2 mgmt->u.auth.auth_transaction 0-u16max[u]
USER_DATA 2 mgmt->u.auth.status_code 0-u16max[u]
USER_DATA 2 mgmt->u.beacon.beacon_int 0-u16max[u]
USER_DATA 2 mgmt->u.beacon.capab_info 0-u16max[u]
USER_DATA 2 mgmt->u.beacon.timestamp 0-u64max[u]
USER_DATA 2 mgmt->u.deauth.reason_code 0-u16max[u]
USER_DATA 2 mgmt->u.disassoc.reason_code 0-u16max[u]
USER_DATA 2 mgmt->u.probe_resp.beacon_int 0-u16max[u]
USER_DATA 2 mgmt->u.probe_resp.capab_info 0-u16max[u]
USER_DATA 2 mgmt->u.probe_resp.timestamp 0-u64max[u]
USER_DATA 2 mgmt->u.reassoc_req.capab_info 0-u16max[u]
USER_DATA 2 mgmt->u.reassoc_req.listen_interval 0-u16max[u]
USER_DATA 2 mgmt->u.reassoc_resp.aid 0-u16max[u]
USER_DATA 2 mgmt->u.reassoc_resp.capab_info 0-u16max[u]
USER_DATA 2 mgmt->u.reassoc_resp.status_code 0-u16max[u]
USER_DATA 2 mgmt->u.s1g_assoc_resp.capab_info 0-u16max[u]
USER_DATA 2 mgmt->u.s1g_assoc_resp.status_code 0-u16max[u]
USER_DATA 2 mgmt->u.s1g_reassoc_resp.capab_info 0-u16max[u]
USER_DATA 2 mgmt->u.s1g_reassoc_resp.status_code 0-u16max[u]
UNITS 2 mgmt unit_byte
UNITS 3 len unit_byte
USER_PTR 2 mgmt
HALF_LOCKED2 &rdev->wiphy.mtx