Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 8 files:
- drivers/bluetooth/hci_ldisc.c, line 852
- drivers/net/ppp/ppp_async.c, line 310
- drivers/net/ppp/ppp_synctty.c, line 302
- drivers/tty/n_gsm.c, line 3889
- drivers/tty/n_hdlc.c, line 617
- drivers/tty/n_tty.c, line 2496
- drivers/tty/tty_ioctl.c, line 985
- net/nfc/nci/uart.c, line 339
Smatch caller information:
drivers/net/ppp/ppp_synctty.c ppp_synctty_ioctl() -> n_tty_ioctl_helper()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | tty | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->disc_data | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->disc_data->refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | tty->ldisc | 1-u64max |
| PARAM_VALUE | 0 | tty->ldisc_sem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->chars_in_buffer | 0,4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->compat_ioctl | 0,1607379221601308672,5008286898947497984,6364353445524312064 |
| PARAM_VALUE | 0 | tty->ops->ioctl | 0,4096-ptr_max |
| PARAM_VALUE | 1 | cmd | 21515 |
| CAPPED_DATA | 0 | tty | 1 |
| DATA_SOURCE | 0 | tty | $0 |
| DATA_SOURCE | 1 | cmd | $1 |
| DATA_SOURCE | 2 | arg | $2 |
| USER_DATA | 1 | cmd | 21515 |
| USER_DATA | 2 | arg | 0,3-u64max |
| LOCK2 | 0 | &tty->ldisc_sem | |
| TYPE_LOCK | (struct tty_struct)->ldisc_sem |
drivers/bluetooth/hci_ldisc.c hci_uart_tty_ioctl() -> n_tty_ioctl_helper()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | tty | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->disc_data | 1-u64max |
| PARAM_VALUE | 0 | tty->ldisc | 1-u64max |
| PARAM_VALUE | 0 | tty->ldisc_sem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->chars_in_buffer | 0,4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->compat_ioctl | 0,1607379221601308672,5008286898947497984,6364353445524312064 |
| PARAM_VALUE | 0 | tty->ops->ioctl | 0,4096-ptr_max |
| PARAM_VALUE | 1 | cmd | 0-1074025927,1074025929-1074025930,1074025932-2147767752,2147767755,2147767757-u32max |
| CAPPED_DATA | 0 | tty | 1 |
| DATA_SOURCE | 0 | tty | $0 |
| DATA_SOURCE | 1 | cmd | $1 |
| DATA_SOURCE | 2 | arg | $2 |
| USER_DATA | 1 | cmd | 0-21512,21514-21515,21519,21521,21529-21532,21536-21537,21542,2 |
| USER_DATA | 2 | arg | 0-u64max |
| LOCK2 | 0 | &tty->ldisc_sem | |
| TYPE_LOCK | (struct tty_struct)->ldisc_sem |
drivers/tty/n_gsm.c gsmld_ioctl() -> n_tty_ioctl_helper()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | tty | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc | 1-u64max |
| PARAM_VALUE | 0 | tty->ldisc_sem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->chars_in_buffer | 0,4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->compat_ioctl | 0,1607379221601308672,5008286898947497984,6364353445524312064 |
| PARAM_VALUE | 0 | tty->ops->ioctl | 0,4096-ptr_max |
| PARAM_VALUE | 1 | cmd | 0-1075857157,1075857159-1077430023,1077430025-1078740736,1078740738-2147763971,2147763973-2149598980,2149598982-2152482559,2152482561-3224913670,3224913672-u32max |
| CAPPED_DATA | 0 | tty | 1 |
| DATA_SOURCE | 0 | tty | $0 |
| DATA_SOURCE | 1 | cmd | $1 |
| DATA_SOURCE | 2 | arg | $2 |
| USER_DATA | 1 | cmd | 0-21512,21514-21515,21519,21521,21529-21532,21536-21537,21542 |
| USER_DATA | 2 | arg | 0-u64max |
| LOCK2 | 0 | &tty->ldisc_sem | |
| TYPE_LOCK | (struct tty_struct)->ldisc_sem |
drivers/tty/n_hdlc.c n_hdlc_tty_ioctl() -> n_tty_ioctl_helper()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | tty | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->disc_data->tx_buf_list.count | s32min-s32max |
| PARAM_VALUE | 0 | tty->disc_data->tx_free_buf_list.count | s32min-s32max |
| PARAM_VALUE | 0 | tty->ldisc | 1-u64max |
| PARAM_VALUE | 0 | tty->ldisc_sem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->chars_in_buffer | 0,4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->compat_ioctl | 0,1607379221601308672,5008286898947497984,6364353445524312064 |
| PARAM_VALUE | 0 | tty->ops->ioctl | 0,4096-ptr_max |
| PARAM_VALUE | 1 | cmd | 0-21520,21522-21530,21532-u32max |
| CAPPED_DATA | 0 | tty | 1 |
| DATA_SOURCE | 0 | tty | $0 |
| DATA_SOURCE | 1 | cmd | $1 |
| DATA_SOURCE | 2 | arg | $2 |
| USER_DATA | 1 | cmd | 0-21512,21514-21515,21519,21529-21530,21532,21536-21537,21542 |
| USER_DATA | 2 | arg | 0-u64max |
| LOCK2 | 0 | &tty->ldisc_sem | |
| TYPE_LOCK | (struct tty_struct)->ldisc_sem |
net/nfc/nci/uart.c nci_uart_tty_ioctl() -> n_tty_ioctl_helper()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | tty | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc | 1-u64max |
| PARAM_VALUE | 0 | tty->ldisc_sem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->chars_in_buffer | 0,4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->compat_ioctl | 0,1607379221601308672,5008286898947497984,6364353445524312064 |
| PARAM_VALUE | 0 | tty->ops->ioctl | 0,4096-ptr_max |
| PARAM_VALUE | 1 | cmd | 0-1074287871,1074287873-u32max |
| CAPPED_DATA | 0 | tty | 1 |
| DATA_SOURCE | 0 | tty | $0 |
| DATA_SOURCE | 1 | cmd | $1 |
| DATA_SOURCE | 2 | arg | $2 |
| USER_DATA | 1 | cmd | 0-21512,21514-21515,21519,21521,21529-21532,21536-21537,21542,2 |
| USER_DATA | 2 | arg | 0-u64max |
| LOCK2 | 0 | &tty->ldisc_sem | |
| TYPE_LOCK | (struct tty_struct)->ldisc_sem |
drivers/tty/n_tty.c n_tty_ioctl() -> n_tty_ioctl_helper()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | tty | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc | 1-u64max |
| PARAM_VALUE | 0 | tty->ldisc_sem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->chars_in_buffer | 0,4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->compat_ioctl | 0,1607379221601308672,5008286898947497984,6364353445524312064 |
| PARAM_VALUE | 0 | tty->ops->ioctl | 0,4096-ptr_max |
| PARAM_VALUE | 1 | cmd | 0-21520,21522-21530,21532-u32max |
| CAPPED_DATA | 0 | tty | 1 |
| DATA_SOURCE | 0 | tty | $0 |
| DATA_SOURCE | 1 | cmd | $1 |
| DATA_SOURCE | 2 | arg | $2 |
| USER_DATA | 1 | cmd | 0-21512,21514-21515,21519,21529-21530,21532,21536-21537,21542 |
| USER_DATA | 2 | arg | 0-u64max |
| LOCK2 | 0 | &tty->ldisc_sem | |
| TYPE_LOCK | (struct tty_struct)->ldisc_sem |
drivers/net/ppp/ppp_async.c ppp_asynctty_ioctl() -> n_tty_ioctl_helper()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | tty | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->disc_data | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->disc_data->refcnt.refs.counter | s32min-s32max |
| PARAM_VALUE | 0 | tty->ldisc | 1-u64max |
| PARAM_VALUE | 0 | tty->ldisc_sem.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ldisc_sem.read_wait.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->chars_in_buffer | 0,4096-ptr_max |
| PARAM_VALUE | 0 | tty->ops->compat_ioctl | 0,1607379221601308672,5008286898947497984,6364353445524312064 |
| PARAM_VALUE | 0 | tty->ops->ioctl | 0,4096-ptr_max |
| PARAM_VALUE | 1 | cmd | 21515 |
| CAPPED_DATA | 0 | tty | 1 |
| DATA_SOURCE | 0 | tty | $0 |
| DATA_SOURCE | 1 | cmd | $1 |
| DATA_SOURCE | 2 | arg | $2 |
| USER_DATA | 1 | cmd | 21515 |
| USER_DATA | 2 | arg | 0,3-u64max |
| LOCK2 | 0 | &tty->ldisc_sem | |
| TYPE_LOCK | (struct tty_struct)->ldisc_sem |