Defined in 1 files as a prototype:

Defined in 1 files as a function:

Referenced in 4 files:

Smatch caller information:

drivers/usb/storage/sddr09.c sddr09_transport() -> usb_stor_bulk_srb()

Type Parameter Key Value
PARAM_VALUE 0 us 4096-ptr_max
PARAM_VALUE 0 us->cr 4096-ptr_max
PARAM_VALUE 0 us->cr->bRequest 0-2,8,10,64-65,128,130,134,150,152,154
PARAM_VALUE 0 us->cr->bRequestType 2,32-33,64-65,160,192-193
PARAM_VALUE 0 us->current_urb 4096-ptr_max
PARAM_VALUE 0 us->current_urb->complete 3979899265946660864
PARAM_VALUE 0 us->current_urb->context 0,5570596329219252224
PARAM_VALUE 0 us->current_urb->dev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->dev->dev.kobj->release.timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->transfer_buffer->page_type 0-4294967295
PARAM_VALUE 0 us->current_urb->transfer_buffer_length 0-u16max
PARAM_VALUE 0 us->pusb_dev 4096-ptr_max
PARAM_VALUE 0 us->pusb_dev->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 us->pusb_intf->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 *us->pusb_dev->toggle 0-4294967295
PARAM_VALUE 2 srb 4096-ptr_max
PARAM_VALUE 2 srb->cmd_len 12-u16max
PARAM_VALUE 2 srb->cmnd 4096-ptr_max
PARAM_VALUE 2 srb->sc_data_direction 1-2
PARAM_VALUE 2 srb->sdb.length 1-u32max
BUF_SIZE 0 us (-1),64,128,280,1024
BUF_SIZE 0 us (-1),64,128,280,1024
CAPPED_DATA 0 us->current_urb 1
DATA_SOURCE 0 us $1
DATA_SOURCE 2 srb $0
FUZZY_MAX 2 srb->cmd_len 12
FUZZY_MAX 2 srb->sc_data_direction 2
NO_OVERFLOW_SIMPLE 0 us->current_sg.count
NO_OVERFLOW_SIMPLE 0 us->current_sg.entries
NO_OVERFLOW_SIMPLE 0 us->current_sg.urbs
NO_OVERFLOW_SIMPLE 0 us->current_urb->num_mapped_sgs
NO_OVERFLOW_SIMPLE 0 us->current_urb->setup_dma
NO_OVERFLOW_SIMPLE 0 us->current_urb->sg->length
NO_OVERFLOW_SIMPLE 0 us->current_urb->transfer_buffer
NO_OVERFLOW_SIMPLE 0 us->current_urb->transfer_buffer_length
NO_OVERFLOW_SIMPLE 0 us->current_urb->transfer_dma
NO_OVERFLOW_SIMPLE 0 us->pusb_dev->bos
NO_OVERFLOW_SIMPLE 2 srb->sdb.table.sgl->length
HALF_LOCKED2 0 &us->dev_mutex

drivers/usb/storage/transport.c usb_stor_Bulk_transport() -> usb_stor_bulk_srb()

Type Parameter Key Value
PARAM_VALUE 0 us 4096-ptr_max
PARAM_VALUE 0 us->cr->bRequest 1
PARAM_VALUE 0 us->cr->bRequestType 2
PARAM_VALUE 0 us->cr->wIndex 0-15,128-143
PARAM_VALUE 0 us->cr->wLength 0
PARAM_VALUE 0 us->cr->wValue 0
PARAM_VALUE 0 us->current_urb 4096-ptr_max
PARAM_VALUE 0 us->current_urb->complete 3979899265946660864
PARAM_VALUE 0 us->current_urb->context 0,5570596329219252224
PARAM_VALUE 0 us->current_urb->dev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->dev->dev.kobj.release->timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->transfer_buffer->bDeviceProtocol 1
PARAM_VALUE 0 us->current_urb->transfer_buffer->bmAttributes 0-255
PARAM_VALUE 0 us->iobuf 4096-ptr_max
PARAM_VALUE 0 us->iobuf->Flags 0,128
PARAM_VALUE 0 us->iobuf->Signature 1128420181
PARAM_VALUE 0 us->pusb_dev 4096-ptr_max
PARAM_VALUE 0 us->pusb_dev->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 us->pusb_intf->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 *us->pusb_dev->toggle 0-4294967295
PARAM_VALUE 2 srb 4096-ptr_max
PARAM_VALUE 2 srb->device 4096-ptr_max
PARAM_VALUE 2 srb->sdb.length 1-u32max
BUF_SIZE 0 us (-1),64,128,280,1024
BUF_SIZE 0 us (-1),64,128,280,1024
BUF_SIZE 0 us->protocol_name (-1),17,36
BUF_SIZE 0 us->transport_name (-1),7-8,11-12,14-15,18,20,25,28
BUF_SIZE 2 srb (-1),392
BUF_SIZE 2 srb (-1),392
BUF_SIZE 2 srb->device (-1),4232
DATA_SOURCE 0 us $1
DATA_SOURCE 2 srb $0
FUZZY_MAX 0 us->iobuf->Flags 128
STR_LEN 0 us->protocol_name (-1),16,35
STR_LEN 0 us->transport_name (-1),6-7,10-11,13-14,17,19,24,27
HARD_MAX 0 us->iobuf->Flags 128
RX_PATH
TASK_NOT_RUNNING
NO_OVERFLOW_SIMPLE 0 us->current_sg.count
NO_OVERFLOW_SIMPLE 0 us->current_sg.entries
NO_OVERFLOW_SIMPLE 0 us->current_sg.urbs
NO_OVERFLOW_SIMPLE 0 us->current_urb->num_mapped_sgs
NO_OVERFLOW_SIMPLE 0 us->current_urb->setup_dma
NO_OVERFLOW_SIMPLE 0 us->current_urb->sg->length
NO_OVERFLOW_SIMPLE 0 us->current_urb->transfer_buffer
NO_OVERFLOW_SIMPLE 0 us->current_urb->transfer_buffer_length
NO_OVERFLOW_SIMPLE 0 us->current_urb->transfer_dma
NO_OVERFLOW_SIMPLE 0 us->pusb_dev->bos
NO_OVERFLOW_SIMPLE 2 srb->sdb.table.sgl->length
HALF_LOCKED2 0 &us->dev_mutex

drivers/usb/storage/transport.c usb_stor_CB_transport() -> usb_stor_bulk_srb()

Type Parameter Key Value
PARAM_VALUE 0 us 4096-ptr_max
PARAM_VALUE 0 us->cr 4096-ptr_max
PARAM_VALUE 0 us->cr->bRequest 0-2,8,10,64-65,128,130,134,150,152,154
PARAM_VALUE 0 us->cr->bRequestType 2,32-33,64-65,160,192-193
PARAM_VALUE 0 us->current_urb 4096-ptr_max
PARAM_VALUE 0 us->current_urb->complete 3979899265946660864
PARAM_VALUE 0 us->current_urb->context 0,5570596329219252224
PARAM_VALUE 0 us->current_urb->dev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->dev->dev.kobj.release->timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->transfer_buffer->bDeviceProtocol 1
PARAM_VALUE 0 us->current_urb->transfer_buffer->bmAttributes 0-255
PARAM_VALUE 0 us->current_urb->transfer_buffer_length 0-u16max
PARAM_VALUE 0 us->pusb_dev 4096-ptr_max
PARAM_VALUE 0 us->pusb_dev->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 us->pusb_intf->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 *us->pusb_dev->toggle 0-4294967295
PARAM_VALUE 2 srb 4096-ptr_max
PARAM_VALUE 2 srb->cmd_len 0-u16max
BUF_SIZE 0 us (-1),64,128,280,1024
BUF_SIZE 0 us (-1),64,128,280,1024
DATA_SOURCE 0 us $1
DATA_SOURCE 2 srb $0
NO_OVERFLOW_SIMPLE 0 us->current_sg.count
NO_OVERFLOW_SIMPLE 0 us->current_sg.entries
NO_OVERFLOW_SIMPLE 0 us->current_sg.urbs
NO_OVERFLOW_SIMPLE 0 us->current_urb->num_mapped_sgs
NO_OVERFLOW_SIMPLE 0 us->current_urb->setup_dma
NO_OVERFLOW_SIMPLE 0 us->current_urb->sg->length
NO_OVERFLOW_SIMPLE 0 us->current_urb->transfer_buffer
NO_OVERFLOW_SIMPLE 0 us->current_urb->transfer_buffer_length
NO_OVERFLOW_SIMPLE 0 us->current_urb->transfer_dma
NO_OVERFLOW_SIMPLE 0 us->pusb_dev->bos
NO_OVERFLOW_SIMPLE 2 srb->sdb.table.sgl->length
HALF_LOCKED2 0 &us->dev_mutex

drivers/usb/storage/ene_ub6250.c ene_send_scsi_cmd() -> usb_stor_bulk_srb()

Type Parameter Key Value
PARAM_VALUE 0 us 4096-ptr_max
PARAM_VALUE 0 us->cr->bRequest 1
PARAM_VALUE 0 us->cr->bRequestType 2
PARAM_VALUE 0 us->cr->wIndex 0-15,128-143
PARAM_VALUE 0 us->cr->wLength 0
PARAM_VALUE 0 us->cr->wValue 0
PARAM_VALUE 0 us->current_urb 4096-ptr_max
PARAM_VALUE 0 us->current_urb->complete 3979899265946660864
PARAM_VALUE 0 us->current_urb->context 0,5570596329219252224
PARAM_VALUE 0 us->current_urb->dev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->dev->dev.kobj.release->timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 us->extra 4096-ptr_max
PARAM_VALUE 0 us->iobuf 4096-ptr_max
PARAM_VALUE 0 us->iobuf->DataTransferLength 0-130560
PARAM_VALUE 0 us->iobuf->Flags 0,128
PARAM_VALUE 0 us->iobuf->Length 0
PARAM_VALUE 0 us->iobuf->Lun 0
PARAM_VALUE 0 us->iobuf->Signature 1128420181
PARAM_VALUE 0 us->iobuf->Tag 0
PARAM_VALUE 0 us->pusb_dev 4096-ptr_max
PARAM_VALUE 0 us->pusb_dev->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 us->pusb_intf->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 *us->pusb_dev->toggle 0-4294967295
BUF_SIZE 0 us (-1),64,128,280,1024
BUF_SIZE 0 us (-1),64,128,280,1024
CAPPED_DATA 0 us->extra 1
CAPPED_DATA 0 us->extra->BIN_FLAG 1
CAPPED_DATA 0 us->pusb_dev 1
DATA_SOURCE 0 us $0
STR_LEN 0 us->transport_name (-1)
HARD_MAX 0 us->iobuf->Flags 128
RX_PATH
NO_OVERFLOW_SIMPLE 0 us->current_sg.count
NO_OVERFLOW_SIMPLE 0 us->current_sg.entries
HALF_LOCKED2 0 &us->dev_mutex

drivers/usb/storage/freecom.c freecom_readdata() -> usb_stor_bulk_srb()

Type Parameter Key Value
PARAM_VALUE 0 us 4096-ptr_max
PARAM_VALUE 0 us->cr->bRequest 1
PARAM_VALUE 0 us->cr->bRequestType 2
PARAM_VALUE 0 us->cr->wIndex 0-15,128-143
PARAM_VALUE 0 us->cr->wLength 0
PARAM_VALUE 0 us->cr->wValue 0
PARAM_VALUE 0 us->current_urb 4096-ptr_max
PARAM_VALUE 0 us->current_urb->complete 3979899265946660864
PARAM_VALUE 0 us->current_urb->context 0,5570596329219252224
PARAM_VALUE 0 us->current_urb->dev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->dev->dev.kobj->release.timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->dev->dev.kobj.release->timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->ep->urb_list.prev->next 4096-ptr_max
PARAM_VALUE 0 us->current_urb->ep->urb_list.prev->next->next 4096-ptr_max
PARAM_VALUE 0 us->current_urb->transfer_buffer->bDeviceProtocol 1
PARAM_VALUE 0 us->current_urb->transfer_buffer->bmAttributes 0-255
PARAM_VALUE 0 us->iobuf 4096-ptr_max
PARAM_VALUE 0 us->iobuf->Count 1-u32max
PARAM_VALUE 0 us->iobuf->Status 8-255
PARAM_VALUE 0 us->iobuf->Timeout 0
PARAM_VALUE 0 us->iobuf->Type 129
PARAM_VALUE 0 us->pusb_dev 4096-ptr_max
PARAM_VALUE 0 us->pusb_dev->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 us->pusb_intf->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 us->srb 4096-ptr_max
PARAM_VALUE 0 us->srb->sc_data_direction 2
PARAM_VALUE 0 *us->pusb_dev->toggle 0-4294967295
PARAM_VALUE 2 srb 4096-ptr_max
PARAM_VALUE 2 srb->cmnd 4096-ptr_max
BUF_SIZE 0 us (-1),64,128,280,1024
BUF_SIZE 0 us (-1),64,128,280,1024
CAPPED_DATA 0 us->current_urb 1
DATA_SOURCE 0 us $1
DATA_SOURCE 1 pipe $2
DATA_SOURCE 2 srb $0
NO_OVERFLOW_SIMPLE 0 us->current_sg.count
NO_OVERFLOW_SIMPLE 0 us->current_sg.entries
NO_OVERFLOW_SIMPLE 2 srb->sdb.table.sgl->length
HALF_LOCKED2 0 &us->dev_mutex

drivers/usb/storage/freecom.c freecom_writedata() -> usb_stor_bulk_srb()

Type Parameter Key Value
PARAM_VALUE 0 us 4096-ptr_max
PARAM_VALUE 0 us->cr->bRequest 1
PARAM_VALUE 0 us->cr->bRequestType 2
PARAM_VALUE 0 us->cr->wIndex 0-15,128-143
PARAM_VALUE 0 us->cr->wLength 0
PARAM_VALUE 0 us->cr->wValue 0
PARAM_VALUE 0 us->current_urb 4096-ptr_max
PARAM_VALUE 0 us->current_urb->complete 3979899265946660864
PARAM_VALUE 0 us->current_urb->context 0,5570596329219252224
PARAM_VALUE 0 us->current_urb->dev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->dev->dev.kobj->release.timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->dev->dev.kobj.release->timer->entry.pprev 4096-ptr_max
PARAM_VALUE 0 us->current_urb->ep->urb_list.prev->next 4096-ptr_max
PARAM_VALUE 0 us->current_urb->ep->urb_list.prev->next->next 4096-ptr_max
PARAM_VALUE 0 us->current_urb->transfer_buffer->bDeviceProtocol 1
PARAM_VALUE 0 us->current_urb->transfer_buffer->bmAttributes 0-255
PARAM_VALUE 0 us->iobuf 4096-ptr_max
PARAM_VALUE 0 us->iobuf->Count 1-u32max
PARAM_VALUE 0 us->iobuf->Timeout 0
PARAM_VALUE 0 us->iobuf->Type 1
PARAM_VALUE 0 us->pusb_dev 4096-ptr_max
PARAM_VALUE 0 us->pusb_dev->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 us->pusb_intf->dev.power.wakeirq->status 0-4294967295
PARAM_VALUE 0 us->srb 4096-ptr_max
PARAM_VALUE 0 us->srb->sc_data_direction 1
PARAM_VALUE 0 *us->pusb_dev->toggle 0-4294967295
PARAM_VALUE 2 srb 4096-ptr_max
PARAM_VALUE 2 srb->cmnd 4096-ptr_max
BUF_SIZE 0 us (-1),64,128,280,1024
BUF_SIZE 0 us (-1),64,128,280,1024
CAPPED_DATA 0 us->current_urb 1
DATA_SOURCE 0 us $1
DATA_SOURCE 1 pipe $3
DATA_SOURCE 2 srb $0
NO_OVERFLOW_SIMPLE 0 us->current_sg.count
NO_OVERFLOW_SIMPLE 0 us->current_sg.entries
NO_OVERFLOW_SIMPLE 2 srb->sdb.table.sgl->length
HALF_LOCKED2 0 &us->dev_mutex