Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 4 files:
- drivers/usb/storage/ene_ub6250.c, line 519
- drivers/usb/storage/freecom.c
- drivers/usb/storage/sddr09.c, line 1729
- drivers/usb/storage/transport.c
Smatch caller information:
drivers/usb/storage/sddr09.c sddr09_transport() -> usb_stor_bulk_srb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr->bRequest | 0-2,8,10,64-65,128,130,134,150,152,154 |
| PARAM_VALUE | 0 | us->cr->bRequestType | 2,32-33,64-65,160,192-193 |
| PARAM_VALUE | 0 | us->current_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->complete | 3979899265946660864 |
| PARAM_VALUE | 0 | us->current_urb->context | 0,5570596329219252224 |
| PARAM_VALUE | 0 | us->current_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj->release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->page_type | 0-4294967295 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer_length | 0-u16max |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| PARAM_VALUE | 2 | srb | 4096-ptr_max |
| PARAM_VALUE | 2 | srb->cmd_len | 12-u16max |
| PARAM_VALUE | 2 | srb->cmnd | 4096-ptr_max |
| PARAM_VALUE | 2 | srb->sc_data_direction | 1-2 |
| PARAM_VALUE | 2 | srb->sdb.length | 1-u32max |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| CAPPED_DATA | 0 | us->current_urb | 1 |
| DATA_SOURCE | 0 | us | $1 |
| DATA_SOURCE | 2 | srb | $0 |
| FUZZY_MAX | 2 | srb->cmd_len | 12 |
| FUZZY_MAX | 2 | srb->sc_data_direction | 2 |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.urbs | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->num_mapped_sgs | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->setup_dma | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->sg->length | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_buffer_length | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_dma | |
| NO_OVERFLOW_SIMPLE | 0 | us->pusb_dev->bos | |
| NO_OVERFLOW_SIMPLE | 2 | srb->sdb.table.sgl->length | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |
drivers/usb/storage/transport.c usb_stor_Bulk_transport() -> usb_stor_bulk_srb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr->bRequest | 1 |
| PARAM_VALUE | 0 | us->cr->bRequestType | 2 |
| PARAM_VALUE | 0 | us->cr->wIndex | 0-15,128-143 |
| PARAM_VALUE | 0 | us->cr->wLength | 0 |
| PARAM_VALUE | 0 | us->cr->wValue | 0 |
| PARAM_VALUE | 0 | us->current_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->complete | 3979899265946660864 |
| PARAM_VALUE | 0 | us->current_urb->context | 0,5570596329219252224 |
| PARAM_VALUE | 0 | us->current_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj.release->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | us->iobuf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->iobuf->Flags | 0,128 |
| PARAM_VALUE | 0 | us->iobuf->Signature | 1128420181 |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| PARAM_VALUE | 2 | srb | 4096-ptr_max |
| PARAM_VALUE | 2 | srb->device | 4096-ptr_max |
| PARAM_VALUE | 2 | srb->sdb.length | 1-u32max |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us->protocol_name | (-1),17,36 |
| BUF_SIZE | 0 | us->transport_name | (-1),7-8,11-12,14-15,18,20,25,28 |
| BUF_SIZE | 2 | srb | (-1),392 |
| BUF_SIZE | 2 | srb | (-1),392 |
| BUF_SIZE | 2 | srb->device | (-1),4232 |
| DATA_SOURCE | 0 | us | $1 |
| DATA_SOURCE | 2 | srb | $0 |
| FUZZY_MAX | 0 | us->iobuf->Flags | 128 |
| STR_LEN | 0 | us->protocol_name | (-1),16,35 |
| STR_LEN | 0 | us->transport_name | (-1),6-7,10-11,13-14,17,19,24,27 |
| HARD_MAX | 0 | us->iobuf->Flags | 128 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.urbs | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->num_mapped_sgs | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->setup_dma | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->sg->length | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_buffer_length | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_dma | |
| NO_OVERFLOW_SIMPLE | 0 | us->pusb_dev->bos | |
| NO_OVERFLOW_SIMPLE | 2 | srb->sdb.table.sgl->length | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |
drivers/usb/storage/transport.c usb_stor_CB_transport() -> usb_stor_bulk_srb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr->bRequest | 0-2,8,10,64-65,128,130,134,150,152,154 |
| PARAM_VALUE | 0 | us->cr->bRequestType | 2,32-33,64-65,160,192-193 |
| PARAM_VALUE | 0 | us->current_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->complete | 3979899265946660864 |
| PARAM_VALUE | 0 | us->current_urb->context | 0,5570596329219252224 |
| PARAM_VALUE | 0 | us->current_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj.release->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer_length | 0-u16max |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| PARAM_VALUE | 2 | srb | 4096-ptr_max |
| PARAM_VALUE | 2 | srb->cmd_len | 0-u16max |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| DATA_SOURCE | 0 | us | $1 |
| DATA_SOURCE | 2 | srb | $0 |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.urbs | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->num_mapped_sgs | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->setup_dma | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->sg->length | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_buffer_length | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_dma | |
| NO_OVERFLOW_SIMPLE | 0 | us->pusb_dev->bos | |
| NO_OVERFLOW_SIMPLE | 2 | srb->sdb.table.sgl->length | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |
drivers/usb/storage/ene_ub6250.c ene_send_scsi_cmd() -> usb_stor_bulk_srb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr->bRequest | 1 |
| PARAM_VALUE | 0 | us->cr->bRequestType | 2 |
| PARAM_VALUE | 0 | us->cr->wIndex | 0-15,128-143 |
| PARAM_VALUE | 0 | us->cr->wLength | 0 |
| PARAM_VALUE | 0 | us->cr->wValue | 0 |
| PARAM_VALUE | 0 | us->current_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->complete | 3979899265946660864 |
| PARAM_VALUE | 0 | us->current_urb->context | 0,5570596329219252224 |
| PARAM_VALUE | 0 | us->current_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj.release->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->extra | 4096-ptr_max |
| PARAM_VALUE | 0 | us->iobuf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->iobuf->DataTransferLength | 0-130560 |
| PARAM_VALUE | 0 | us->iobuf->Flags | 0,128 |
| PARAM_VALUE | 0 | us->iobuf->Length | 0 |
| PARAM_VALUE | 0 | us->iobuf->Lun | 0 |
| PARAM_VALUE | 0 | us->iobuf->Signature | 1128420181 |
| PARAM_VALUE | 0 | us->iobuf->Tag | 0 |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| CAPPED_DATA | 0 | us->extra | 1 |
| CAPPED_DATA | 0 | us->extra->BIN_FLAG | 1 |
| CAPPED_DATA | 0 | us->pusb_dev | 1 |
| DATA_SOURCE | 0 | us | $0 |
| STR_LEN | 0 | us->transport_name | (-1) |
| HARD_MAX | 0 | us->iobuf->Flags | 128 |
| RX_PATH | |||
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |
drivers/usb/storage/freecom.c freecom_readdata() -> usb_stor_bulk_srb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr->bRequest | 1 |
| PARAM_VALUE | 0 | us->cr->bRequestType | 2 |
| PARAM_VALUE | 0 | us->cr->wIndex | 0-15,128-143 |
| PARAM_VALUE | 0 | us->cr->wLength | 0 |
| PARAM_VALUE | 0 | us->cr->wValue | 0 |
| PARAM_VALUE | 0 | us->current_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->complete | 3979899265946660864 |
| PARAM_VALUE | 0 | us->current_urb->context | 0,5570596329219252224 |
| PARAM_VALUE | 0 | us->current_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj->release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj.release->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->ep->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->ep->urb_list.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | us->iobuf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->iobuf->Count | 1-u32max |
| PARAM_VALUE | 0 | us->iobuf->Status | 8-255 |
| PARAM_VALUE | 0 | us->iobuf->Timeout | 0 |
| PARAM_VALUE | 0 | us->iobuf->Type | 129 |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->srb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->srb->sc_data_direction | 2 |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| PARAM_VALUE | 2 | srb | 4096-ptr_max |
| PARAM_VALUE | 2 | srb->cmnd | 4096-ptr_max |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| CAPPED_DATA | 0 | us->current_urb | 1 |
| DATA_SOURCE | 0 | us | $1 |
| DATA_SOURCE | 1 | pipe | $2 |
| DATA_SOURCE | 2 | srb | $0 |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| NO_OVERFLOW_SIMPLE | 2 | srb->sdb.table.sgl->length | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |
drivers/usb/storage/freecom.c freecom_writedata() -> usb_stor_bulk_srb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr->bRequest | 1 |
| PARAM_VALUE | 0 | us->cr->bRequestType | 2 |
| PARAM_VALUE | 0 | us->cr->wIndex | 0-15,128-143 |
| PARAM_VALUE | 0 | us->cr->wLength | 0 |
| PARAM_VALUE | 0 | us->cr->wValue | 0 |
| PARAM_VALUE | 0 | us->current_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->complete | 3979899265946660864 |
| PARAM_VALUE | 0 | us->current_urb->context | 0,5570596329219252224 |
| PARAM_VALUE | 0 | us->current_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj->release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj.release->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->ep->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->ep->urb_list.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | us->iobuf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->iobuf->Count | 1-u32max |
| PARAM_VALUE | 0 | us->iobuf->Timeout | 0 |
| PARAM_VALUE | 0 | us->iobuf->Type | 1 |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->srb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->srb->sc_data_direction | 1 |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| PARAM_VALUE | 2 | srb | 4096-ptr_max |
| PARAM_VALUE | 2 | srb->cmnd | 4096-ptr_max |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| CAPPED_DATA | 0 | us->current_urb | 1 |
| DATA_SOURCE | 0 | us | $1 |
| DATA_SOURCE | 1 | pipe | $3 |
| DATA_SOURCE | 2 | srb | $0 |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| NO_OVERFLOW_SIMPLE | 2 | srb->sdb.table.sgl->length | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |