Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 4 files:
- net/bluetooth/6lowpan.c, line 455
- net/bluetooth/l2cap_core.c, line 2698
- net/bluetooth/l2cap_sock.c, line 1180
- net/bluetooth/smp.c, line 589
Smatch caller information:
net/bluetooth/6lowpan.c send_pkt() -> l2cap_chan_send()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->data | 4096-ptr_max |
| PARAM_VALUE | 1 | msg | 6434101343521206272 |
| PARAM_VALUE | 3 | sockc | 0 |
| BUF_SIZE | 0 | chan->data | (-1)-s32max |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | msg | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 2 | len | 0-u32max[c] |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 2 | len | |
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | &netdev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
net/bluetooth/l2cap_sock.c l2cap_sock_sendmsg() -> l2cap_chan_send()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 1 | msg | 4096-ptr_max |
| PARAM_VALUE | 3 | sockc | 5569145794011197440 |
| BUF_SIZE | 1 | msg->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 1 | msg->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 1 | msg->msg_ubuf | (-1),16 |
| DATA_SOURCE | 1 | msg | $1 |
| DATA_SOURCE | 2 | len | $2 |
| BIT_INFO | 1 | msg->msg_flags | 0x0,0xfffffffe |
| NOSPEC | 1 | msg->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | msg->msg_controllen | 0-s32max[c] |
| USER_DATA | 1 | msg->msg_flags | 0-u32max[c] |
| USER_DATA | 1 | msg->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 1 | msg->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 1 | msg->msg_namelen | 0-128 |
| USER_DATA | 1 | *msg->msg_name | s64min-s64max |
| USER_DATA | 2 | len | 0-u64max |
| USER_DATA | 3 | sockc->transmit_time | 0-9223372036854775807 |
| USER_PTR | 1 | msg->msg_control | |
| USER_PTR | 1 | msg->msg_name | |
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &vq->mutex | ||
| HALF_LOCKED2 | sk | ||
| TYPE_LOCK | (struct l2cap_chan)->lock |
net/bluetooth/smp.c smp_send_cmd() -> l2cap_chan_send()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 1-u64max |
| PARAM_VALUE | 1 | msg | 6836443660059926528 |
| PARAM_VALUE | 2 | len | 2,7-8,11,17,65 |
| PARAM_VALUE | 3 | sockc | 0 |
| MEM_ZERO | 1 | msg | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 2 | len | unit_byte |
| HALF_LOCKED2 | &chan->lock | ||
| HALF_LOCKED2 | &conn->lock |