Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

net/bluetooth/hidp/core.c hidp_session_run() -> hidp_recv_ctrl_frame()

Type Parameter Key Value
PARAM_VALUE 0 session 4096-ptr_max
PARAM_VALUE 0 session->ctrl_sock 4096-ptr_max
PARAM_VALUE 0 session->ctrl_sock->sk 4096-ptr_max
PARAM_VALUE 0 session->ctrl_sock->sk->__sk_common.skc_state 1
PARAM_VALUE 0 session->ctrl_sock->sk->sk_receive_queue.lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 session->hid->driver_input_lock.first_waiter->up 0-1
PARAM_VALUE 0 session->intr_sock 4096-ptr_max
PARAM_VALUE 0 session->intr_sock->sk 4096-ptr_max
PARAM_VALUE 0 session->intr_sock->sk->__sk_common.skc_state 1
PARAM_VALUE 0 session->intr_sock->sk->sk_receive_queue.lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 session->intr_transmit.lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 session->state_queue.lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 session->timer.entry->pprev 4096-ptr_max
PARAM_VALUE 0 *session->intr_sock->sk->sk_backlog.head->dev->name 0-255
PARAM_VALUE 1 skb 4096-ptr_max
PARAM_VALUE 1 skb->data_len 0-1
PARAM_VALUE 1 skb->destructor 0
PARAM_VALUE 1 skb->next 0
PARAM_VALUE 1 skb->prev 0
PARAM_VALUE 1 skb->sk 0
BUF_SIZE 0 session 128
BUF_SIZE 0 session 128
CAPPED_DATA 0 &session->intr_transmit 1
DATA_SOURCE 0 session $0
DATA_SOURCE 1 skb r skb_dequeue
NOCHECK_CALL
NO_OVERFLOW_SIMPLE 0 session->ctrl_transmit.next->end
NO_OVERFLOW_SIMPLE 0 session->ctrl_transmit.next->len
NO_OVERFLOW_SIMPLE 0 session->ctrl_transmit.next->prev->end
NO_OVERFLOW_SIMPLE 0 session->ctrl_transmit.next->prev->len
NO_OVERFLOW_SIMPLE 0 session->ctrl_transmit.next->prev->tail
NO_OVERFLOW_SIMPLE 0 session->ctrl_transmit.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 session->ctrl_transmit.next->tail
NO_OVERFLOW_SIMPLE 0 session->ctrl_transmit.next->truesize
NO_OVERFLOW_SIMPLE 0 session->intr_transmit.next->end
NO_OVERFLOW_SIMPLE 0 session->intr_transmit.next->len
NO_OVERFLOW_SIMPLE 0 session->intr_transmit.next->prev->end
NO_OVERFLOW_SIMPLE 0 session->intr_transmit.next->prev->len
NO_OVERFLOW_SIMPLE 0 session->intr_transmit.next->prev->tail
NO_OVERFLOW_SIMPLE 0 session->intr_transmit.next->prev->truesize
NO_OVERFLOW_SIMPLE 0 session->intr_transmit.next->tail
NO_OVERFLOW_SIMPLE 0 session->intr_transmit.next->truesize