Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/bluetooth/rfcomm/core.c __rfcomm_dlc_open() -> rfcomm_send_pn()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | s | 4096-ptr_max |
| PARAM_VALUE | 0 | s->dlcs.next | 4096-ptr_max |
| PARAM_VALUE | 0 | s->dlcs.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | s->dlcs.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock->sk->chan | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock->sk->chan->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock->sk->chan->conn->hcon | 4096-ptr_max |
| PARAM_VALUE | 0 | s->state | 1 |
| PARAM_VALUE | 0 | s->timer.entry.pprev | 0 |
| PARAM_VALUE | 0 | s->timer.flags | 0-4194302 |
| PARAM_VALUE | 0 | s->timer.function | 0 |
| PARAM_VALUE | 1 | cr | 1 |
| PARAM_VALUE | 2 | d | 4096-ptr_max |
| PARAM_VALUE | 2 | d->cfc | 0-4294967294 |
| PARAM_VALUE | 2 | d->dlci | 0-63 |
| PARAM_VALUE | 2 | d->flags | 0 |
| PARAM_VALUE | 2 | d->list.next | 4096-ptr_max |
| PARAM_VALUE | 2 | d->list.prev | 4096-ptr_max |
| PARAM_VALUE | 2 | d->mscex | 0 |
| PARAM_VALUE | 2 | d->out | 1 |
| PARAM_VALUE | 2 | d->priority | 7 |
| PARAM_VALUE | 2 | d->rx_credits | 7 |
| PARAM_VALUE | 2 | d->sec_level | 1 |
| PARAM_VALUE | 2 | d->session | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->dlcs.next | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock->sk | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock->sk->chan | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock->sk->chan->conn | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock->sk->chan->conn->hcon | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock->sk->chan->conn->hcon->l2cap_data->smp->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 2 | d->session->sock->sk->chan->conn->hcon->l2cap_data->smp->lock.osq.tail.counter | s32min-s32max |
| PARAM_VALUE | 2 | d->session->sock->sk->chan->conn->hcon->pending_sec_level | 0-255 |
| PARAM_VALUE | 2 | d->session->timer.entry.pprev | 0 |
| PARAM_VALUE | 2 | d->session->timer.flags | 0-4194302 |
| PARAM_VALUE | 2 | d->session->timer.function | 0 |
| PARAM_VALUE | 2 | d->state | 7 |
| PARAM_VALUE | 2 | d->v24_sig | 140 |
| DATA_SOURCE | 0 | s | r rfcomm_session_get |
| DATA_SOURCE | 2 | d | $0 |
| FUZZY_MAX | 2 | d->cfc | 0 |
| BIT_INFO | 2 | d->addr | 0x1,0xffffffffffffffff |
| BIT_INFO | 2 | d->cfc | 0x0,0x7fffffff |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | global &rfcomm_mutex | ||
| HALF_LOCKED2 | _T->lock |
net/bluetooth/rfcomm/core.c rfcomm_process_connect() -> rfcomm_send_pn()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | s | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock->sk->__sk_common.skc_net.net->ipv4.fib_main->tb_data | 0-s64max |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->state | 1 |
| PARAM_VALUE | 1 | cr | 1 |
| PARAM_VALUE | 2 | d | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock->sk | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock->sk->chan | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock->sk->chan->conn | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock->sk->chan->conn->hcon | 4096-ptr_max |
| PARAM_VALUE | 2 | d->state | 7 |
| CAPPED_DATA | 0 | &s->dlcs | 1 |
| CAPPED_DATA | 2 | &d->list | 1 |
| DATA_SOURCE | 0 | s | $0 |
| NOCHECK_CALL | |||
| LOCK2 | global &rfcomm_mutex |
net/bluetooth/rfcomm/core.c rfcomm_process_dlcs() -> rfcomm_send_pn()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | s | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | *s->sock->sk->sk_backlog.head->dev->name | 0-255 |
| PARAM_VALUE | 1 | cr | 1 |
| PARAM_VALUE | 2 | d | 4096-ptr_max |
| PARAM_VALUE | 2 | d->out | 1-255 |
| CAPPED_DATA | 0 | &s->dlcs | 1 |
| CAPPED_DATA | 2 | d | 1 |
| CAPPED_DATA | 2 | &d->list | 1 |
| DATA_SOURCE | 0 | s | $0 |
| NOCHECK_CALL | |||
| LOCK2 | global &rfcomm_mutex |
net/bluetooth/rfcomm/core.c rfcomm_recv_pn() -> rfcomm_send_pn()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | s | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock->sk->__sk_common.skc_net.net->ipv4.fib_main->tb_data | 0-s64max |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | s->sock->sk->sk_memcg->id.id | 0-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 1 | cr | 0 |
| PARAM_VALUE | 2 | d | 4096-ptr_max |
| PARAM_VALUE | 2 | d->cfc | 0,40 |
| PARAM_VALUE | 2 | d->dlci | 1-255 |
| PARAM_VALUE | 2 | d->mtu | 0-u16max |
| PARAM_VALUE | 2 | d->session | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->cfc | s32min-(-2),0-s32max |
| PARAM_VALUE | 2 | d->tx_credits | 0-255 |
| CAPPED_DATA | 2 | d->dlci | 1 |
| DATA_SOURCE | 0 | s | $0 |
| DATA_SOURCE | 2 | d | r rfcomm_dlc_get |
| NOCHECK_CALL | |||
| LOCK2 | global &rfcomm_mutex |
net/bluetooth/rfcomm/core.c rfcomm_recv_pn() -> rfcomm_send_pn()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | s | 4096-ptr_max |
| PARAM_VALUE | 0 | s->cfc | s32min-(-2),0-s32max |
| PARAM_VALUE | 0 | s->dlcs.next | 4096-ptr_max |
| PARAM_VALUE | 0 | s->dlcs.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | s->dlcs.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | s->sock->sk->__sk_common.skc_net.net->ipv4.fib_main->tb_data | 0-s64max |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | s->sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | s->sock->sk->sk_memcg->id.id | 0-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | s->sock->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | s->timer.entry.pprev | 0 |
| PARAM_VALUE | 0 | s->timer.flags | 0-4194302 |
| PARAM_VALUE | 0 | s->timer.function | 0 |
| PARAM_VALUE | 1 | cr | 0 |
| PARAM_VALUE | 2 | d | 4096-ptr_max |
| PARAM_VALUE | 2 | d->cfc | 0,40 |
| PARAM_VALUE | 2 | d->data_ready | 2187918740173778944 |
| PARAM_VALUE | 2 | d->defer_setup | 0-1 |
| PARAM_VALUE | 2 | d->dlci | 1-255 |
| PARAM_VALUE | 2 | d->flags | 0 |
| PARAM_VALUE | 2 | d->list.next | 4096-ptr_max |
| PARAM_VALUE | 2 | d->list.prev | 4096-ptr_max |
| PARAM_VALUE | 2 | d->lock.first_waiter | 0 |
| PARAM_VALUE | 2 | d->lock.osq.tail.counter | 0 |
| PARAM_VALUE | 2 | d->lock.owner.counter | 0 |
| PARAM_VALUE | 2 | d->mscex | 0 |
| PARAM_VALUE | 2 | d->mtu | 0-u16max |
| PARAM_VALUE | 2 | d->role_switch | 0-1 |
| PARAM_VALUE | 2 | d->rx_credits | 7 |
| PARAM_VALUE | 2 | d->sec_level | 0-3 |
| PARAM_VALUE | 2 | d->session | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->cfc | s32min-(-2),0-s32max |
| PARAM_VALUE | 2 | d->session->dlcs.next | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->sock | 4096-ptr_max |
| PARAM_VALUE | 2 | d->session->timer.entry.pprev | 0 |
| PARAM_VALUE | 2 | d->session->timer.flags | 0-4194302 |
| PARAM_VALUE | 2 | d->session->timer.function | 0 |
| PARAM_VALUE | 2 | d->state | 2 |
| PARAM_VALUE | 2 | d->state_change | 2997066878740008960 |
| PARAM_VALUE | 2 | d->timer.entry.pprev | 0 |
| PARAM_VALUE | 2 | d->timer.flags | 0-4194302 |
| PARAM_VALUE | 2 | d->tx_credits | 0-255 |
| PARAM_VALUE | 2 | d->tx_queue.qlen | 0 |
| PARAM_VALUE | 2 | d->v24_sig | 140 |
| CAPPED_DATA | 2 | d->dlci | 1 |
| DATA_SOURCE | 0 | s | $0 |
| BIT_INFO | 2 | d->addr | 0x1,0xffffffffffffffff |
| NOCHECK_CALL | |||
| LOCK2 | global &rfcomm_mutex |