Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/bluetooth/smp.c fixup_sc_false_positive() -> tk_request()

Type Parameter Key Value
PARAM_VALUE 0 conn 4096-ptr_max
PARAM_VALUE 0 conn->hcon 4096-ptr_max
PARAM_VALUE 1 remote_oob 0
PARAM_VALUE 2 auth 0-63
CAPPED_DATA 2 auth 1
RX_PATH
LOCK2 &conn->lock
HALF_LOCKED2 &chan->lock
HALF_LOCKED2 &pool->lock
TYPE_LOCK (struct l2cap_conn)->lock

net/bluetooth/smp.c smp_cmd_pairing_req() -> tk_request()

Type Parameter Key Value
PARAM_VALUE 0 conn 4096-ptr_max
PARAM_VALUE 0 conn->hcon 4096-ptr_max
PARAM_VALUE 0 conn->hcon->hdev 4096-ptr_max
PARAM_VALUE 0 conn->hcon->hdev->dev_flags 4096-ptr_max
PARAM_VALUE 0 conn->hcon->hdev->smp_data 4096-ptr_max
PARAM_VALUE 0 conn->hcon->pending_sec_level 2-255
PARAM_VALUE 0 conn->hcon->type 0,2-255
PARAM_VALUE 0 conn->smp 4096-ptr_max
PARAM_VALUE 0 conn->smp->ack_timer.work.entry.next->next 1-u64max
PARAM_VALUE 0 conn->smp->ack_timer.work.entry.next->prev 4096-ptr_max
PARAM_VALUE 0 conn->smp->ack_timer.work.entry.prev->next 1-u64max
PARAM_VALUE 0 conn->smp->ack_timer.work.entry.prev->prev 1-u64max
PARAM_VALUE 0 conn->smp->conn->hchan->data_q.next 4096-ptr_max
PARAM_VALUE 0 conn->smp->conn->hchan->data_q.prev 4096-ptr_max
PARAM_VALUE 0 conn->smp->conn->hchan->data_q.prev->next->next 4096-ptr_max
PARAM_VALUE 0 conn->smp->conn->hcon->dev->kobj.release.timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 conn->smp->data 4096-ptr_max
PARAM_VALUE 0 conn->smp->data->enc_key_size 7-255
PARAM_VALUE 0 conn->smp->data->remote_key_dist 0-15
PARAM_VALUE 0 conn->smp->data->security_timer.cpu s32min-s32max
PARAM_VALUE 0 conn->smp->data->security_timer.work.lockdep_map->name 0-255
PARAM_VALUE 0 conn->smp->lock->first_waiter->task->blocked_lock.owner (-4611686018427387904)-4611686018427387903
PARAM_VALUE 0 conn->smp->lock.first_waiter->task->blocked_lock.dep_map->name 0-255
PARAM_VALUE 0 conn->smp->lock.first_waiter->task->blocked_lock.owner (-1)
PARAM_VALUE 0 conn->smp->lock.first_waiter->task->blocked_lock.owner_cpu 4294967295
PARAM_VALUE 0 conn->smp->lock.first_waiter->task->blocked_lock.raw_lock.val.counter s32min-s32max
PARAM_VALUE 0 conn->smp->lock.first_waiter->task->usage.refs.counter s32min-s32max
PARAM_VALUE 0 conn->smp->monitor_timer->timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 conn->smp->monitor_timer.work.entry.next->next 1-u64max
PARAM_VALUE 0 conn->smp->monitor_timer.work.entry.next->prev 4096-ptr_max
PARAM_VALUE 0 conn->smp->monitor_timer.work.entry.prev->next 1-u64max
PARAM_VALUE 0 conn->smp->monitor_timer.work.entry.prev->prev 1-u64max
PARAM_VALUE 0 conn->smp->retrans_timer.work.entry.next->next 1-u64max
PARAM_VALUE 0 conn->smp->retrans_timer.work.entry.next->prev 4096-ptr_max
PARAM_VALUE 0 conn->smp->retrans_timer.work.entry.prev->next 1-u64max
PARAM_VALUE 0 conn->smp->retrans_timer.work.entry.prev->prev 1-u64max
PARAM_VALUE 0 conn->smp->srej_list->list u16max
PARAM_VALUE 0 conn->smp->srej_q.next->prev 2011684551238094848
PARAM_VALUE 0 conn->smp->srej_q.prev->next 2011684551238094848
PARAM_VALUE 0 conn->smp->tx_q.prev->next 4096-7971830146572820479,7971830146572820481-ptr_max
PARAM_VALUE 0 *conn->smp->conn->hcon->dev.kobj.release.timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 *conn->smp->data->pcnf 0-255
PARAM_VALUE 0 *conn->smp->data->rr 0-255
PARAM_VALUE 1 remote_oob 0
PARAM_VALUE 2 auth 0-67
CAPPED_DATA 0 conn->hcon->pending_sec_level 1
CAPPED_DATA 0 conn->smp 1
DATA_SOURCE 0 conn $0
FUZZY_MAX 0 conn->hcon->pending_sec_level 3
BIT_INFO 2 auth 0x0,0x3f
RX_PATH
USER_DATA 0 conn->smp->data->remote_key_dist 0-15[c]
USER_DATA 2 auth 0-67[c]
USER_DATA 4 remote_io 0-255[u]
LOCK2 &conn->lock
HALF_LOCKED2 &chan->lock
HALF_LOCKED2 &pool->lock
TYPE_LOCK (struct l2cap_conn)->lock

net/bluetooth/smp.c smp_cmd_pairing_rsp() -> tk_request()

Type Parameter Key Value
PARAM_VALUE 0 conn 4096-ptr_max
PARAM_VALUE 0 conn->hcon 4096-ptr_max
PARAM_VALUE 0 conn->hcon->hdev 4096-ptr_max
PARAM_VALUE 0 conn->hcon->hdev->dev_flags 4096-ptr_max
PARAM_VALUE 0 conn->hcon->hdev->smp_data 4096-ptr_max
PARAM_VALUE 0 conn->hcon->pending_sec_level 0-3
PARAM_VALUE 0 conn->hcon->type 0,2-255
PARAM_VALUE 0 conn->smp 4096-ptr_max
PARAM_VALUE 0 conn->smp->data->enc_key_size 7-255
PARAM_VALUE 1 remote_oob 0
DATA_SOURCE 0 conn $0
FUZZY_MAX 0 conn->hcon->pending_sec_level 3
RX_PATH
USER_DATA 2 auth 0-255[c]
USER_DATA 4 remote_io 0-255[u]
LOCK2 &conn->lock
HALF_LOCKED2 &chan->lock
HALF_LOCKED2 &pool->lock
TYPE_LOCK (struct l2cap_conn)->lock