Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c brcmf_usb_dl_cmd() -> brcmf_usb_ioctl_resp_wait()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | devinfo | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_completed | 0 |
| PARAM_VALUE | 0 | devinfo->ctl_read.bRequest | 0,2-3,5,8 |
| PARAM_VALUE | 0 | devinfo->ctl_read.bRequestType | 193 |
| PARAM_VALUE | 0 | devinfo->ctl_read.wLength | 8,24 |
| PARAM_VALUE | 0 | devinfo->ctl_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->complete | 7684605092715425792 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->context | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->dev->state | 4-u32max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->hcpriv | 0,4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->interval | s32min-32768 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->num_mapped_sgs | 0-s32max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->pipe | 0,128-u32max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->status | (-4095)-0 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer_length | 8,24 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->usbdev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->usbdev->bus->sysdev->iommu->attach_deferred | 0-1 |
| PARAM_VALUE | 0 | devinfo->usbdev->state | 4-u32max |
| BUF_SIZE | 0 | devinfo->dev | (-1),1616 |
| BUF_SIZE | 0 | devinfo->image | (-1),1-s32max |
| BUF_SIZE | 0 | devinfo->settings | (-1),104 |
| CAPPED_DATA | 0 | devinfo->ctl_urb | 1 |
| CAPPED_DATA | 0 | devinfo->ctl_urb->transfer_buffer_length | 1 |
| DATA_SOURCE | 0 | devinfo | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | devinfo->bulk_urb->num_mapped_sgs | |
| NO_OVERFLOW_SIMPLE | 0 | devinfo->bulk_urb->transfer_buffer_length | |
| NO_OVERFLOW_SIMPLE | 0 | devinfo->ctl_urb->num_mapped_sgs | |
| NO_OVERFLOW_SIMPLE | 0 | devinfo->ctl_urb->transfer_buffer_length | |
| NO_OVERFLOW_SIMPLE | 0 | devinfo->settings->country_codes->table_size | |
| NO_OVERFLOW_SIMPLE | 0 | devinfo->tx_freecount |
drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c brcmf_usb_dl_send_bulk() -> brcmf_usb_ioctl_resp_wait()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | devinfo | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bulk_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->actual_length | 0-s32max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->complete | 7684605092715425792 |
| PARAM_VALUE | 0 | devinfo->bulk_urb->context | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->dev->state | 4-u32max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->ep | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->ep->urb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->ep->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->ep->urb_list.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->hcpriv | 0,4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->interval | s32min-32768 |
| PARAM_VALUE | 0 | devinfo->bulk_urb->num_mapped_sgs | 0-s32max |
| PARAM_VALUE | 0 | devinfo->bulk_urb->status | (-4095)-0 |
| PARAM_VALUE | 0 | devinfo->bulk_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | devinfo->bulk_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | devinfo->bulk_urb->transfer_buffer_length | 0-1500 |
| PARAM_VALUE | 0 | devinfo->bulk_urb->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bus_pub.devid | s32min-41250,41252-57004,57006-s32max |
| PARAM_VALUE | 0 | devinfo->ctl_completed | 0 |
| PARAM_VALUE | 0 | devinfo->ctl_read.bRequest | 0,3 |
| PARAM_VALUE | 0 | devinfo->ctl_read.bRequestType | 193 |
| PARAM_VALUE | 0 | devinfo->ctl_read.wLength | 8,24 |
| PARAM_VALUE | 0 | devinfo->ctl_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->complete | 7684605092715425792 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->context | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->hcpriv | 0,4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->interval | s32min-32768 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->num_mapped_sgs | 0-s32max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->pipe | 0,128-u32max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->status | (-4095)-0 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer->_refcount.counter | s32min-s32max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer->page_type | 0-4294967295 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer_length | 8 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->urb_list.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->urb_list.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->urb_list.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->image | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->usbdev->bus->sysdev->iommu->attach_deferred | 0-1 |
| PARAM_VALUE | 0 | devinfo->usbdev->state | 4-u32max |
| BUF_SIZE | 0 | devinfo->image | 1-s32max |
| CAPPED_DATA | 0 | devinfo->bulk_urb | 1 |
| CAPPED_DATA | 0 | devinfo->bulk_urb->transfer_buffer_length | 1 |
| CAPPED_DATA | 0 | devinfo->ctl_urb | 1 |
| DATA_SOURCE | 0 | devinfo | $0 |
| FUZZY_MAX | 0 | devinfo->ctl_read.bRequest | 3 |
| HARD_MAX | 0 | devinfo->ctl_read.bRequest | 3 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | devinfo->bulk_urb->num_mapped_sgs | |
| NO_OVERFLOW_SIMPLE | 0 | devinfo->bulk_urb->transfer_buffer_length | |
| NO_OVERFLOW_SIMPLE | 0 | devinfo->ctl_urb->num_mapped_sgs | |
| NO_OVERFLOW_SIMPLE | 0 | devinfo->ctl_urb->transfer_buffer_length | |
| HALF_LOCKED2 | &pool->lock |
drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c brcmf_usb_rx_ctlpkt() -> brcmf_usb_ioctl_resp_wait()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | devinfo | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bus_pub.state | 3 |
| PARAM_VALUE | 0 | devinfo->ctl_completed | 0 |
| PARAM_VALUE | 0 | devinfo->ctl_read.bRequest | 1 |
| PARAM_VALUE | 0 | devinfo->ctl_read.bRequestType | 161 |
| PARAM_VALUE | 0 | devinfo->ctl_read.wLength | 16-8208 |
| PARAM_VALUE | 0 | devinfo->ctl_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->actual_length | 0-s32max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->complete | 8471022682578112512 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->context | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->hcpriv | 0,4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->interval | s32min-32768 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->num_mapped_sgs | 0-s32max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->status | (-4095)-0 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer_length | 16-8208 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->usbdev->state | 4-u32max |
| CAPPED_DATA | 0 | devinfo->ctl_urb | 1 |
| DATA_SOURCE | 0 | devinfo | r brcmf_usb_get_businfo |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | devinfo->ctl_read.wLength | 17-8208[c][u] |
| USER_DATA | 0 | devinfo->ctl_urb->transfer_buffer_length | 17-8208[c][u] |
| NO_OVERFLOW_SIMPLE | 0 | devinfo->ctl_urb->num_mapped_sgs | |
| HALF_LOCKED2 | &drvr->proto_block | ||
| HALF_LOCKED2 | &ifp->drvr->proto_block | ||
| TYPE_LOCK | (struct brcmf_pub)->proto_block |
drivers/net/wireless/broadcom/brcm80211/brcmfmac/usb.c brcmf_usb_tx_ctlpkt() -> brcmf_usb_ioctl_resp_wait()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | devinfo | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->bus_pub.state | 3 |
| PARAM_VALUE | 0 | devinfo->ctl_completed | 0 |
| PARAM_VALUE | 0 | devinfo->ctl_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->actual_length | 0-s32max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->complete | 8349462448698486784 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->context | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->ep->urb_list.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->hcpriv | 0,4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->interval | s32min-32768 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->num_mapped_sgs | 0-s32max |
| PARAM_VALUE | 0 | devinfo->ctl_urb->status | (-4095)-0 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->transfer_buffer_length | 16-1518 |
| PARAM_VALUE | 0 | devinfo->ctl_urb->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | devinfo->ctl_urb_actual_length | 0 |
| PARAM_VALUE | 0 | devinfo->ctl_urb_status | 0 |
| PARAM_VALUE | 0 | devinfo->ctl_write.wLength | 16-1518 |
| PARAM_VALUE | 0 | devinfo->usbdev->state | 4-u32max |
| CAPPED_DATA | 0 | devinfo->ctl_urb | 1 |
| DATA_SOURCE | 0 | devinfo | r brcmf_usb_get_businfo |
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | devinfo->ctl_urb->transfer_buffer_length | 17-1518[c][u] |
| USER_DATA | 0 | devinfo->ctl_write.wLength | 17-1518[c][u] |
| NO_OVERFLOW_SIMPLE | 0 | devinfo->ctl_urb->num_mapped_sgs | |
| HALF_LOCKED2 | &drvr->proto_block | ||
| HALF_LOCKED2 | &ifp->drvr->proto_block | ||
| TYPE_LOCK | (struct brcmf_pub)->proto_block |