Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/bluetooth/hidp/core.c hidp_idle_timeout() -> hidp_session_terminate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | session | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock->sk->sk_err | 49 |
| PARAM_VALUE | 0 | session->intr_sock | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_sock->sk->sk_err | 49 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
net/bluetooth/hidp/core.c hidp_process_hid_control() -> hidp_session_terminate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | session | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock->sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 0 | session->ctrl_sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | session->ctrl_sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | session->ctrl_sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | session->ctrl_sock->sk->sk_receive_queue.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->ctrl_transmit.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->ctrl_transmit.next | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_transmit.next->prev | 2011684551238094848 |
| PARAM_VALUE | 0 | session->ctrl_transmit.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_transmit.prev->next | 2011684551238094848 |
| PARAM_VALUE | 0 | session->ctrl_transmit.qlen | 0 |
| PARAM_VALUE | 0 | session->hid->driver_input_lock.first_waiter->up | 0-1 |
| PARAM_VALUE | 0 | session->input->mt->slot | s32min-s32max |
| PARAM_VALUE | 0 | session->intr_sock | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_sock->sk->__sk_common.skc_u16hashes | 0-u32max |
| PARAM_VALUE | 0 | session->intr_sock->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | session->intr_sock->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | session->intr_sock->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | session->intr_sock->sk->sk_receive_queue.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->intr_transmit.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->intr_transmit.next | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_transmit.next->prev | 2011684551238094848 |
| PARAM_VALUE | 0 | session->intr_transmit.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_transmit.prev->next | 2011684551238094848 |
| PARAM_VALUE | 0 | session->intr_transmit.qlen | 0 |
| PARAM_VALUE | 0 | session->state_queue.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | *session->intr_sock->sk->sk_backlog.head->dev->name | 0-255 |
| BUF_SIZE | 0 | session | 128 |
| BUF_SIZE | 0 | session | 128 |
| CAPPED_DATA | 0 | &session->ctrl_transmit | 1 |
| CAPPED_DATA | 0 | &session->intr_transmit | 1 |
| DATA_SOURCE | 0 | session | $0 |
| NOCHECK_CALL |
net/bluetooth/hidp/core.c hidp_process_transmit() -> hidp_session_terminate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | session | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | session->ctrl_sock->sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 0 | session->hid->driver_input_lock.first_waiter->up | 0-1 |
| PARAM_VALUE | 0 | session->intr_sock | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_sock->sk | 4096-ptr_max |
| PARAM_VALUE | 0 | session->intr_sock->sk->__sk_common.skc_state | 1 |
| PARAM_VALUE | 0 | session->intr_sock->sk->sk_receive_queue.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->state_queue.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | session->timer.entry->pprev | 4096-ptr_max |
| BUF_SIZE | 0 | session | 128 |
| BUF_SIZE | 0 | session | 128 |
| DATA_SOURCE | 0 | session | $0 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | session->report_return->end | |
| NO_OVERFLOW_SIMPLE | 0 | session->report_return->len |
net/bluetooth/hidp/core.c hidp_session_dev_work() -> hidp_session_terminate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | session | 4096-ptr_max |
| PARAM_VALUE | 0 | session->hid->country | 0-255 |
| PARAM_VALUE | 0 | session->hid->dev_rdesc | 0 |
| PARAM_VALUE | 0 | session->hid->driver_data->bundle->dev.power.deferred_resume | 0-1 |
| PARAM_VALUE | 0 | session->hid->driver_data->bundle->dev.power.idle_notification | 0-1 |
| PARAM_VALUE | 0 | session->hid->driver_data->bundle->dev.power.request | 0-4 |
| PARAM_VALUE | 0 | session->hid->driver_data->bundle->dev.power.request_pending | 0-1 |
| PARAM_VALUE | 0 | session->hid->driver_data->bundle->dev.power.runtime_error | s32min-(-17),(-15)-(-14),(-12),(-10)-s32max |
| PARAM_VALUE | 0 | session->hid->driver_data->bundle->dev.power.runtime_status | s32min-s32max |
| PARAM_VALUE | 0 | session->hid->driver_data->bundle->dev.power.timer_autosuspends | 0-1 |
| PARAM_VALUE | 0 | session->hid->driver_data->bundle->dev.power.usage_count.counter | s32min-s32max |
| PARAM_VALUE | 0 | session->hid->driver_data->bundle->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | session->hid->driver_data->hdev->version | 273 |
| PARAM_VALUE | 0 | session->hid->driver_data->rd_size | 0-4294967295 |
| PARAM_VALUE | 0 | session->hid->version | 0-u16max |
| PARAM_VALUE | 0 | session->input->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | session->input->poller->poll_interval | 0-4294967295 |
| PARAM_VALUE | 0 | session->input->poller->poll_interval_max | 0-4294967295 |
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | session->input->max_vals | |
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hidp/core.c hidp_session_remove() -> hidp_session_terminate()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | session | 4096-ptr_max |
| PARAM_VALUE | 0 | session->conn | 0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| LOCK2 | global &hidp_session_sem | ||
| HALF_LOCKED2 | global &hci_cb_list_lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |