Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/bluetooth/l2cap_core.c l2cap_chan_close() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->chan_timer.timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->chan_type | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->state | 1,7 |
| PARAM_VALUE | 1 | err | 0,2,110-111 |
| DATA_SOURCE | 0 | chan | $0 |
| DATA_SOURCE | 1 | err | $1 |
| FUZZY_MAX | 1 | err | 111 |
| BIT_INFO | 1 | err | 0x0,0x6f |
| HARD_MAX | 1 | err | 111 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &attr->mutex | ||
| HALF_LOCKED2 | &conn->lock | ||
| HALF_LOCKED2 | &hdev->lock | ||
| HALF_LOCKED2 | global &hci_cb_list_lock | ||
| HALF_LOCKED2 | global &listen_chan->lock | ||
| HALF_LOCKED2 | global &set_lock | ||
| HALF_LOCKED2 | 0 | &chan->lock |
net/bluetooth/l2cap_core.c l2cap_config_req() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->kref.refcount.refs.counter | (-1073741824),0-s32max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->state | 1,6-7 |
| PARAM_VALUE | 1 | err | 104 |
| DATA_SOURCE | 0 | chan | r l2cap_get_chan_by_scid |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_config_req() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->buffer_seq | 0 |
| PARAM_VALUE | 0 | chan->conf_len | 0 |
| PARAM_VALUE | 0 | chan->expected_ack_seq | 0 |
| PARAM_VALUE | 0 | chan->expected_tx_seq | 0 |
| PARAM_VALUE | 0 | chan->fcs | 0-1 |
| PARAM_VALUE | 0 | chan->frames_sent | 0 |
| PARAM_VALUE | 0 | chan->ident | 1-255 |
| PARAM_VALUE | 0 | chan->kref.refcount.refs.counter | (-1073741824),0-s32max |
| PARAM_VALUE | 0 | chan->last_acked_seq | 0 |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->next_tx_seq | 0 |
| PARAM_VALUE | 0 | chan->omtu | 48-u16max |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->remote_tx_win | 0-255 |
| PARAM_VALUE | 0 | chan->rx_state | 0 |
| PARAM_VALUE | 0 | chan->sdu | 0 |
| PARAM_VALUE | 0 | chan->sdu_last_frag | 0 |
| PARAM_VALUE | 0 | chan->sdu_len | 0 |
| PARAM_VALUE | 0 | chan->srej_list->list | 0-u16max |
| PARAM_VALUE | 0 | chan->srej_list.list | 0,16,4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.qlen | 0 |
| PARAM_VALUE | 0 | chan->state | 6-7 |
| PARAM_VALUE | 0 | chan->tx_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.qlen | 0 |
| PARAM_VALUE | 0 | chan->tx_state | 0 |
| PARAM_VALUE | 0 | chan->unacked_frames | 0 |
| PARAM_VALUE | 1 | err | 12 |
| DATA_SOURCE | 0 | chan | r l2cap_get_chan_by_scid |
| BIT_INFO | 0 | chan->state | 0x6,0x7 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | chan->ident | 1-255[u] |
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_config_rsp() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->fcs | 0 |
| PARAM_VALUE | 0 | chan->kref.refcount.refs.counter | (-1073741824),0-s32max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 1 | err | 104 |
| DATA_SOURCE | 0 | chan | r l2cap_get_chan_by_scid |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_config_rsp() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->kref.refcount.refs.counter | (-1073741824),0-s32max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->num_conf_rsp | 0-2 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 1 | err | 104 |
| DATA_SOURCE | 0 | chan | r l2cap_get_chan_by_scid |
| FUZZY_MAX | 0 | chan->num_conf_rsp | 2 |
| HARD_MAX | 0 | chan->num_conf_rsp | 2 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_config_rsp() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->fcs | 0 |
| PARAM_VALUE | 0 | chan->kref.refcount.refs.counter | (-1073741824),0-s32max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->num_conf_rsp | 0-2 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 1 | err | 104 |
| DATA_SOURCE | 0 | chan | r l2cap_get_chan_by_scid |
| FUZZY_MAX | 0 | chan->num_conf_rsp | 2 |
| HARD_MAX | 0 | chan->num_conf_rsp | 2 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_config_rsp() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->chan_timer.timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->data->__sk_common.skc_state | 0-255 |
| PARAM_VALUE | 0 | chan->data->sk_err | 2,12,70,103-104,110-111 |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->num_conf_rsp | 3-255 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->state_change | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 1 | err | 104 |
| DATA_SOURCE | 0 | chan | r l2cap_get_chan_by_scid |
| FUZZY_MAX | 0 | chan->num_conf_rsp | 3 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_config_rsp() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->buffer_seq | 0 |
| PARAM_VALUE | 0 | chan->expected_ack_seq | 0 |
| PARAM_VALUE | 0 | chan->expected_tx_seq | 0 |
| PARAM_VALUE | 0 | chan->fcs | 0-1 |
| PARAM_VALUE | 0 | chan->frames_sent | 0 |
| PARAM_VALUE | 0 | chan->kref.refcount.refs.counter | (-1073741824),0-s32max |
| PARAM_VALUE | 0 | chan->last_acked_seq | 0 |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->next_tx_seq | 0 |
| PARAM_VALUE | 0 | chan->num_conf_rsp | 0-2 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_state | 0 |
| PARAM_VALUE | 0 | chan->sdu | 0 |
| PARAM_VALUE | 0 | chan->sdu_last_frag | 0 |
| PARAM_VALUE | 0 | chan->sdu_len | 0 |
| PARAM_VALUE | 0 | chan->srej_list->list | 0-u16max |
| PARAM_VALUE | 0 | chan->srej_list.list | 0,16,4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.qlen | 0 |
| PARAM_VALUE | 0 | chan->tx_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.qlen | 0 |
| PARAM_VALUE | 0 | chan->tx_state | 0 |
| PARAM_VALUE | 0 | chan->unacked_frames | 0 |
| PARAM_VALUE | 1 | err | 12 |
| DATA_SOURCE | 0 | chan | r l2cap_get_chan_by_scid |
| FUZZY_MAX | 0 | chan->num_conf_rsp | 2 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_data_rcv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3-4 |
| PARAM_VALUE | 0 | chan->mps | 0-65534 |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->mps | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_data_rcv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->conn->hchan->data_q.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev->kobj.release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev.kobj->release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev.kobj.release->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->mtu | 0-u16max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->monitor_timer->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->sdu | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->sdu->_nfct | 0 |
| PARAM_VALUE | 0 | chan->sdu->_skb_refdst | 0 |
| PARAM_VALUE | 0 | chan->sdu->active_extensions | 0 |
| PARAM_VALUE | 0 | chan->sdu->data | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->sdu->destructor | 0 |
| PARAM_VALUE | 0 | chan->sdu->sk | 0 |
| PARAM_VALUE | 0 | chan->sdu->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | chan->sdu->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | chan->sdu->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | chan->sdu_last_frag | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->sdu_last_frag->data | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->sdu_last_frag->len | 0-65534 |
| PARAM_VALUE | 0 | chan->sdu_last_frag->next | 0 |
| PARAM_VALUE | 0 | chan->srej_list->list | 32768,u16max |
| PARAM_VALUE | 0 | chan->srej_list.head | u16max |
| PARAM_VALUE | 0 | chan->srej_list.tail | u16max |
| PARAM_VALUE | 0 | chan->srej_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.next->prev | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.prev->next | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.qlen | 0 |
| PARAM_VALUE | 0 | chan->tx_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev->next | 4096-7971830146572820479,7971830146572820481-ptr_max |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->len | |
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_data_rcv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_data_rcv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->conn->hchan->data_q.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev.kobj.release->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->mtu | 0-u16max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->monitor_timer->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->sdu->data | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->sdu->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | chan->sdu->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | chan->sdu->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | chan->sdu_last_frag | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->sdu_last_frag->data | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->sdu_last_frag->len | 0-65534 |
| PARAM_VALUE | 0 | chan->sdu_last_frag->next | 0 |
| PARAM_VALUE | 0 | chan->srej_list->list | 32768,u16max |
| PARAM_VALUE | 0 | chan->srej_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.next->prev | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.prev->next | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev->next | 4096-7971830146572820479,7971830146572820481-ptr_max |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->len | |
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_ecred_data_rcv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 128-129 |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_credits | 0 |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_ecred_data_rcv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->imtu | 0-65534 |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 128-129 |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_credits | 1-u16max |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->imtu | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| CONSTRAINT | 0 | chan->imtu | <49 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_ecred_data_rcv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 128-129 |
| PARAM_VALUE | 0 | chan->mps | 0-65534 |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_credits | 1-u16max |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->mps | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| PARAM_COMPARE | 0 | chan->imtu | > $0->mps |
| CONSTRAINT | 0 | chan->mps | <49 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_ecred_data_rcv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->imtu | 0-65534 |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 128-129 |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->sdu | 0 |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->imtu | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_ecred_data_rcv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 128-129 |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->sdu | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->sdu_len | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_ecred_recv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 128-129 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_avail | s64min-(-2),0-s64max |
| PARAM_VALUE | 0 | chan->sdu | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->sdu->len | 0-u16max |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->len | |
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_ertm_resend() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev->kobj.release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->max_tx | 1-254 |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->monitor_timer->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_list.head | 0-s16max,32769-u16max |
| PARAM_VALUE | 0 | chan->retrans_list.list | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->srej_list->list | u16max |
| PARAM_VALUE | 0 | chan->srej_list.head | u16max |
| PARAM_VALUE | 0 | chan->srej_list.tail | u16max |
| PARAM_VALUE | 0 | chan->srej_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.next->prev | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.prev->next | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.qlen | 0 |
| PARAM_VALUE | 0 | chan->tx_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev->next | 4096-7971830146572820479,7971830146572820481-ptr_max |
| PARAM_VALUE | 0 | *chan->conn->hcon->dev.kobj.release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->max_tx | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->len | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_handle_rej() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_state | 0-1 |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->next_tx_seq | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| HARD_MAX | 0 | chan->rx_state | 1 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_PTR | 0 | chan->tx_send_head->data | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_handle_rej() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->max_tx | 1-255 |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_state | 0-1 |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 0 | chan->tx_q.next | 4096-ptr_max |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->max_tx | 1 |
| CAPPED_DATA | 0 | &chan->tx_q | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| HARD_MAX | 0 | chan->rx_state | 1 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_PTR | 0 | chan->tx_send_head->data | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_handle_srej() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_state | 0-1 |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->next_tx_seq | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| HARD_MAX | 0 | chan->rx_state | 1 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_PTR | 0 | chan->tx_send_head->data | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_handle_srej() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->max_tx | 1-255 |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_state | 0-1 |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 0 | chan->tx_q.next | 4096-ptr_max |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->max_tx | 1 |
| CAPPED_DATA | 0 | &chan->tx_q | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| HARD_MAX | 0 | chan->rx_state | 1 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_PTR | 0 | chan->tx_send_head->data | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_le_credits() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->kref.refcount.refs.counter | (-1073741824),0-s32max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 1 | err | 104 |
| DATA_SOURCE | 0 | chan | r l2cap_get_chan_by_dcid |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_rx() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->expected_ack_seq | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_rx_state_recv() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_state | 0 |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_rx_state_srej_sent() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_state | 1 |
| PARAM_VALUE | 0 | chan->state | 1 |
| PARAM_VALUE | 1 | err | 104 |
| CAPPED_DATA | 0 | chan->expected_ack_seq | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| LOCK2 | 0 | &chan->lock | |
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_tx_state_wait_f() -> l2cap_send_disconn_req()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->max_tx | 1-255 |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retry_count | 1-255 |
| PARAM_VALUE | 0 | chan->tx_state | 1 |
| PARAM_VALUE | 1 | err | 103 |
| BUF_SIZE | 0 | chan->data | (-1)-s32max |
| CAPPED_DATA | 0 | chan->max_tx | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| PARAM_COMPARE | 0 | chan->max_tx | <= $0->retry_count |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->tail | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->tail | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| HALF_LOCKED2 | &conn->lock | ||
| HALF_LOCKED2 | sk | ||
| HALF_LOCKED2 | 0 | &chan->lock |