Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/bluetooth/l2cap_core.c l2cap_chan_send() -> l2cap_create_basic_pdu()

Type Parameter Key Value
PARAM_VALUE 0 chan 4096-ptr_max
PARAM_VALUE 0 chan->chan_type 0-1,3-255
PARAM_VALUE 0 chan->mode 0
PARAM_VALUE 1 msg 4096-ptr_max
PARAM_VALUE 2 len 0-u16max
BUF_SIZE 0 chan->data (-1)-s32max
BUF_SIZE 1 msg->msg_control (-1)-0,16,24,36-s32max
BUF_SIZE 1 msg->msg_name (-1)-0,12,28,128
BUF_SIZE 1 msg->msg_ubuf (-1),16
CAPPED_DATA 2 len 1
CAPPED_DATA 2 len 1
DATA_SOURCE 0 chan $0
DATA_SOURCE 1 msg $1
DATA_SOURCE 2 len $2
PARAM_COMPARE 0 chan->omtu >= $2
PARAM_COMPARE 2 len <= $0->omtu
NOSPEC 1 msg->msg_controllen
NOSPEC 1 msg->msg_iter.count
RX_PATH
TASK_NOT_RUNNING
HOST_DATA 2 len 0-u16max[c]
USER_DATA 1 msg->msg_controllen 0-s32max[c]
USER_DATA 1 msg->msg_flags 0-u32max[c]
USER_DATA 1 msg->msg_iter.count 1-18446744073709551614
USER_DATA 1 msg->msg_iter.iov_offset 0-u64max[c]
USER_DATA 1 msg->msg_namelen 0-128
USER_DATA 1 *msg->msg_name s64min-s64max
USER_DATA 2 len 0-u16max[c]
UNITS 2 len unit_byte
USER_PTR 1 msg->msg_control
USER_PTR 1 msg->msg_name
HALF_LOCKED2 0 &chan->lock