Defined in 2 files as a function:
- drivers/media/v4l2-core/v4l2-subdev.c, line 199 (as a function)
- net/can/isotp.c, line 411 (as a function)
Referenced in 2 files:
Smatch caller information:
net/can/isotp.c isotp_rcv_cf() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| PARAM_VALUE | 0 | sd->opt.flags | 16-u32max |
| PARAM_VALUE | 1 | pad | 4096-ptr_max |
| PARAM_VALUE | 1 | pad->data | 4096-ptr_max |
| PARAM_VALUE | 2 | start_index | 2-255 |
| BUF_SIZE | 0 | sd | 1-s32max |
| BUF_SIZE | 0 | sd | 1-s32max |
| BUF_SIZE | 1 | pad | 1-s32max |
| BUF_SIZE | 1 | pad | 1-s32max |
| CAPPED_DATA | 0 | sd->rx.len | 1 |
| CAPPED_DATA | 0 | sd->rx.ll_dl | 1 |
| CAPPED_DATA | 0 | sd->rxtimer.base | 1 |
| CAPPED_DATA | 0 | &sd->rxtimer | 1 |
| CAPPED_DATA | 1 | pad->len | 1 |
| CAPPED_DATA | 2 | start_index | 1 |
| DATA_SOURCE | 0 | sd | $0 |
| DATA_SOURCE | 1 | pad | $1 |
| PARAM_COMPARE | 0 | sd->rx.idx | >= $0->rx.len |
| PARAM_COMPARE | 0 | &sd->rxtimer | != $0->rxtimer.base->running |
| PARAM_COMPARE | 1 | pad->len | <= $0->rx.ll_dl |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | pad->__res0 | 0-255[u] |
| USER_DATA | 1 | pad->__res1 | 0-255[u] |
| USER_DATA | 1 | pad->can_id | 0-u32max[u] |
| USER_DATA | 1 | pad->flags | 0-255[u] |
| USER_DATA | 1 | pad->len | 0-255[c] |
| UNITS | 1 | pad | unit_byte |
| UNITS | 2 | start_index | unit_byte |
| USER_PTR | 1 | pad | |
| LOCK2 | &so->rx_lock | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct isotp_sock)->rx_lock |
net/can/isotp.c isotp_rcv_fc() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| PARAM_VALUE | 0 | sd->opt.flags | 16-u32max |
| PARAM_VALUE | 1 | pad | 4096-ptr_max |
| PARAM_VALUE | 1 | pad->data | 4096-ptr_max |
| PARAM_VALUE | 1 | pad->len | 3-255 |
| PARAM_VALUE | 2 | start_index | 3-4 |
| BUF_SIZE | 0 | sd | 1-s32max |
| BUF_SIZE | 0 | sd | 1-s32max |
| BUF_SIZE | 1 | pad | 1-s32max |
| BUF_SIZE | 1 | pad | 1-s32max |
| CAPPED_DATA | 0 | sd->ll.mtu | 1 |
| CAPPED_DATA | 0 | sd->txtimer.base | 1 |
| CAPPED_DATA | 0 | &sd->txtimer | 1 |
| DATA_SOURCE | 0 | sd | $0 |
| DATA_SOURCE | 1 | pad | $1 |
| PARAM_COMPARE | 0 | &sd->txtimer | != $0->txtimer.base->running |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | pad->__res0 | 0-255[u] |
| USER_DATA | 1 | pad->__res1 | 0-255[u] |
| USER_DATA | 1 | pad->can_id | 0-u32max[u] |
| USER_DATA | 1 | pad->flags | 0-255[u] |
| USER_DATA | 1 | pad->len | 3-255[u] |
| UNITS | 1 | pad | unit_byte |
| USER_PTR | 1 | pad | |
| LOCK2 | rcu_read | ||
| LOCK2 | 0 | &sd->rx_lock | |
| TYPE_LOCK | (struct isotp_sock)->rx_lock |
net/can/isotp.c isotp_rcv_sf() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| PARAM_VALUE | 0 | sd->opt.flags | 16-u32max |
| PARAM_VALUE | 1 | pad | 4096-ptr_max |
| PARAM_VALUE | 1 | pad->data | 4096-ptr_max |
| PARAM_VALUE | 2 | start_index | 2-257 |
| BUF_SIZE | 0 | sd | 1-s32max |
| BUF_SIZE | 0 | sd | 1-s32max |
| BUF_SIZE | 1 | pad | 1-s32max |
| BUF_SIZE | 1 | pad | 1-s32max |
| CAPPED_DATA | 0 | sd->rxtimer.base | 1 |
| CAPPED_DATA | 0 | &sd->rxtimer | 1 |
| DATA_SOURCE | 0 | sd | $0 |
| DATA_SOURCE | 1 | pad | $1 |
| PARAM_COMPARE | 0 | &sd->rxtimer | != $0->rxtimer.base->running |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 1 | pad->__res0 | 0-255[u] |
| USER_DATA | 1 | pad->__res1 | 0-255[u] |
| USER_DATA | 1 | pad->can_id | 0-u32max[u] |
| USER_DATA | 1 | pad->flags | 0-255[u] |
| USER_DATA | 1 | pad->len | 0-255[u] |
| USER_DATA | 2 | start_index | 2-257[c] |
| UNITS | 1 | pad | unit_byte |
| UNITS | 2 | start_index | unit_byte |
| USER_PTR | 1 | pad | |
| LOCK2 | &so->rx_lock | ||
| LOCK2 | rcu_read | ||
| TYPE_LOCK | (struct isotp_sock)->rx_lock |
drivers/media/v4l2-core/v4l2-subdev.c call_dv_timings_cap() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sd | $0 |
| UNITS | 1 | pad | unit_array_size |
| HALF_LOCKED2 | lock |
drivers/media/v4l2-core/v4l2-subdev.c call_enum_dv_timings() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sd | $0 |
| HALF_LOCKED2 | lock |
drivers/media/v4l2-core/v4l2-subdev.c call_enum_frame_interval() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sd | $0 |
| HALF_LOCKED2 | 0 | sd->active_state->lock |
drivers/media/v4l2-core/v4l2-subdev.c call_enum_frame_size() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sd | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | sd->entity.num_pads | |
| HALF_LOCKED2 | global &list_lock | ||
| HALF_LOCKED2 | 0 | sd->active_state->lock |
drivers/media/v4l2-core/v4l2-subdev.c call_enum_mbus_code() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sd | $0 |
| STR_LEN | 0 | sd->name | (-1),51 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | sd->entity.num_pads | |
| UNITS | 1 | pad | unit_array_size |
| HALF_LOCKED2 | &pcdev->mlock | ||
| HALF_LOCKED2 | global &list_lock | ||
| HALF_LOCKED2 | 0 | sd->active_state->lock |
drivers/media/v4l2-core/v4l2-subdev.c call_g_dv_timings() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| PARAM_VALUE | 1 | pad | 0 |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sd | $0 |
| DATA_SOURCE | 1 | pad | $1 |
drivers/media/v4l2-core/v4l2-subdev.c call_get_mbus_config() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| DATA_SOURCE | 0 | sd | $0 |
| DATA_SOURCE | 1 | pad | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &csi2->lock |
drivers/media/v4l2-core/v4l2-subdev.c call_query_dv_timings() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| PARAM_VALUE | 1 | pad | 0 |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sd | $0 |
| DATA_SOURCE | 1 | pad | $1 |
drivers/media/v4l2-core/v4l2-subdev.c call_s_dv_timings() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| PARAM_VALUE | 1 | pad | 0 |
| DATA_SOURCE | 0 | sd | $0 |
| DATA_SOURCE | 1 | pad | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING |
drivers/media/v4l2-core/v4l2-subdev.c check_edid() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sd | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | pad | unit_array_size |
drivers/media/v4l2-core/v4l2-subdev.c check_format() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| DATA_SOURCE | 0 | sd | $0 |
| STR_LEN | 0 | sd | (-1),15-17,26-27,31-44 |
| STR_LEN | 0 | sd | (-1),15-17,26-27,31-44 |
| STR_LEN | 0 | sd->entity.name | (-1),7 |
| STR_LEN | 0 | sd->name | (-1),51 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | sd->entity.num_pads | |
| NO_OVERFLOW_SIMPLE | 1 | pad | |
| UNITS | 1 | pad | unit_array_size |
| HALF_LOCKED2 | &dev->mutex | ||
| HALF_LOCKED2 | _T->lock | ||
| HALF_LOCKED2 | 0 | sd->active_state->lock |
drivers/media/v4l2-core/v4l2-subdev.c check_frame_interval() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sd | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | state->lock |
drivers/media/v4l2-core/v4l2-subdev.c check_selection() -> check_pad()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | sd | 4096-ptr_max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| BUF_SIZE | 0 | sd | s32min-(-1),1-s32max |
| DATA_SOURCE | 0 | sd | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | pad | unit_array_size |
| HALF_LOCKED2 | global &list_lock | ||
| HALF_LOCKED2 | 0 | sd->active_state->lock |