Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

drivers/scsi/sg.c sg_build_reserve() -> sg_remove_scat()

Type Parameter Key Value
PARAM_VALUE 0 sfp 4096-ptr_max
PARAM_VALUE 0 sfp->f_mutex.dep_map->name 0-255
PARAM_VALUE 0 sfp->f_mutex.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 sfp->f_mutex.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 sfp->f_mutex.osq.tail.counter 0-s32max
PARAM_VALUE 0 sfp->parentdp 4096-ptr_max
PARAM_VALUE 1 schp 4096-ptr_max
BUF_SIZE 0 sfp s32min-(-2),1-s32max
BUF_SIZE 0 sfp s32min-(-2),1-s32max
BUF_SIZE 1 schp 32
DATA_SOURCE 0 sfp $0
PARAM_COMPARE 0 &sfp->reserve == $1
NOSPEC 1 schp->bufflen
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 1 schp->bufflen 0,4096-2147483136[c]
HALF_LOCKED2 &sdp->open_rel_lock
HALF_LOCKED2 0 &sfp->f_mutex

drivers/scsi/sg.c sg_finish_rem_req() -> sg_remove_scat()

Type Parameter Key Value
PARAM_VALUE 1 schp 4096-ptr_max
BUF_SIZE 1 schp 32
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 1 schp->bufflen 0,4096-2147483136[c]
USER_DATA 1 schp->cmd_opcode 0-255

drivers/scsi/sg.c sg_ioctl_common() -> sg_remove_scat()

Type Parameter Key Value
PARAM_VALUE 0 sfp 4096-ptr_max
PARAM_VALUE 0 sfp->f_mutex.dep_map->name 0-255
PARAM_VALUE 0 sfp->f_mutex.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 sfp->f_mutex.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 sfp->f_mutex.osq.tail.counter 0-s32max
PARAM_VALUE 0 sfp->f_mutex.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 sfp->f_mutex.wait_lock.owner (-1)
PARAM_VALUE 0 sfp->f_mutex.wait_lock.owner_cpu u32max
PARAM_VALUE 0 sfp->mmap_called 0
PARAM_VALUE 0 sfp->parentdp 1-u64max
PARAM_VALUE 0 sfp->res_in_use 0
PARAM_VALUE 1 schp 4096-ptr_max
BUF_SIZE 0 sfp s32min-(-2),1-s32max
BUF_SIZE 0 sfp s32min-(-2),1-s32max
CAPPED_DATA 0 &sfp->f_mutex 1
DATA_SOURCE 0 sfp $2
NOCHECK_CALL
LOCK2 0 &sfp->f_mutex
TYPE_LOCK (struct sg_fd)->f_mutex

drivers/scsi/sg.c sg_remove_sfp_usercontext() -> sg_remove_scat()

Type Parameter Key Value
PARAM_VALUE 0 sfp 4096-ptr_max
PARAM_VALUE 0 sfp->parentdp 4096-ptr_max
PARAM_VALUE 0 sfp->reserve.bufflen 1-u32max
PARAM_VALUE 0 sfp->reserve.k_use_sg 0-u16max
PARAM_VALUE 0 sfp->rq_list_lock.dep_map->name 0-255
PARAM_VALUE 0 sfp->rq_list_lock.owner (-1)
PARAM_VALUE 0 sfp->rq_list_lock.owner_cpu u32max
PARAM_VALUE 0 sfp->rq_list_lock.raw_lock.wlocked 0
PARAM_VALUE 1 schp 4096-ptr_max
PARAM_VALUE 1 schp->bufflen 1-u32max
CAPPED_DATA 0 &sfp->rq_list 1
FUZZY_MAX 0 sfp->reserve.bufflen 1
NOCHECK_CALL
HALF_LOCKED2 &pool->lock