Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/bluetooth/l2cap_core.c l2cap_rx_state_srej_sent() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev.kobj->release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev.kobj.release->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev.kobj.release.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->monitor_timer->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.timer.entry->pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_list->list | u16max |
| PARAM_VALUE | 0 | chan->srej_list.head | u16max |
| PARAM_VALUE | 0 | chan->srej_list.tail | u16max |
| PARAM_VALUE | 0 | chan->srej_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.next->prev | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.prev->next | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.qlen | 0 |
| PARAM_VALUE | 0 | chan->tx_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev->next | 4096-7971830146572820479,7971830146572820481-ptr_max |
| PARAM_VALUE | 1 | control | 6560596258286551040 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 0 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| LOCK2 | &conn->lock | ||
| LOCK2 | &pool->lock | ||
| LOCK2 | 0 | &chan->lock | |
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_send_ack() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->rx_state | 0 |
| PARAM_VALUE | 1 | control | 1531597783973216256 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 2 |
| BUF_SIZE | 0 | chan->data | (-1)-s32max |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | chan->last_acked_seq | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->tail | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| HALF_LOCKED2 | &conn->lock | ||
| HALF_LOCKED2 | 0 | &chan->lock |
net/bluetooth/l2cap_core.c l2cap_send_ack() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 1 | control | 1531597783973216256 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 0 |
| BUF_SIZE | 0 | chan->data | (-1)-s32max |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->tail | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| HALF_LOCKED2 | &conn->lock | ||
| HALF_LOCKED2 | 0 | &chan->lock |
net/bluetooth/l2cap_core.c l2cap_send_i_or_rr_or_rnr() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 1 | control | 6130960230487093248 |
| PARAM_VALUE | 1 | control->final | 1 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 2 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_send_i_or_rr_or_rnr() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 1 | control | 6130960230487093248 |
| PARAM_VALUE | 1 | control->final | 1 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 0 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_send_rr_or_rnr() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 1 | control | 8967355799493443584 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 0,2 |
| BUF_SIZE | 0 | chan->data | (-1)-s32max |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->tail | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| HALF_LOCKED2 | &conn->lock | ||
| HALF_LOCKED2 | 0 | &chan->lock |
net/bluetooth/l2cap_core.c l2cap_send_srej() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev->kobj.release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev.kobj->release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->monitor_timer->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->srej_list->list | 32768,u16max |
| PARAM_VALUE | 0 | chan->srej_q.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->srej_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.prev->next | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev->next | 4096-7971830146572820479,7971830146572820481-ptr_max |
| PARAM_VALUE | 1 | control | 1913477858743730176 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 3 |
| CAPPED_DATA | 0 | chan | 1 |
| CAPPED_DATA | 0 | &chan->srej_q | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_send_srej_list() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->conn->hchan->data_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hchan->data_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hchan->data_q.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev->kobj.release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev.kobj->release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->monitor_timer->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->srej_list->list | 32768,u16max |
| PARAM_VALUE | 0 | chan->srej_list.head | 0-s16max,32769-u16max |
| PARAM_VALUE | 0 | chan->srej_list.list | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_list.tail | u16max |
| PARAM_VALUE | 0 | chan->srej_q.lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->srej_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.next->prev | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.prev->next | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.qlen | 0 |
| PARAM_VALUE | 0 | chan->tx_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev->next | 4096-7971830146572820479,7971830146572820481-ptr_max |
| PARAM_VALUE | 1 | control | 7283614465553563648 |
| PARAM_VALUE | 1 | control->final | 1 |
| PARAM_VALUE | 1 | control->reqseq | 0-s16max,32769-65534 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 3 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_send_srej_tail() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->ack_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev->kobj.release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->conn->hcon->dev.kobj->release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | chan->lock.first_waiter | 0,4096-ptr_max |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->next | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.first_waiter->list.prev->prev | 5159360019465732096 |
| PARAM_VALUE | 0 | chan->lock.osq.tail.counter | 0-s32max |
| PARAM_VALUE | 0 | chan->mode | 3 |
| PARAM_VALUE | 0 | chan->monitor_timer->timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->monitor_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->ops | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->next | 1-u64max |
| PARAM_VALUE | 0 | chan->retrans_timer.work.entry.prev->prev | 1-u64max |
| PARAM_VALUE | 0 | chan->srej_list->list | u16max |
| PARAM_VALUE | 0 | chan->srej_list.head | u16max |
| PARAM_VALUE | 0 | chan->srej_q.next | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.next->prev | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->srej_q.prev->next | 2011684551238094848 |
| PARAM_VALUE | 0 | chan->srej_q.qlen | 0 |
| PARAM_VALUE | 0 | chan->tx_q.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_q.prev->next | 4096-7971830146572820479,7971830146572820481-ptr_max |
| PARAM_VALUE | 1 | control | 6792447061421711360 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 3 |
| CAPPED_DATA | 0 | chan | 1 |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->conn->hchan->data_q.prev->next->len | |
| LOCK2 | &conn->lock | ||
| LOCK2 | 0 | &chan->lock | |
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_chan)->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/l2cap_core.c l2cap_tx_state_wait_f() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_state | 1 |
| PARAM_VALUE | 1 | control | 3424381792225669120 |
| PARAM_VALUE | 1 | control->poll | 1 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 0 |
| BUF_SIZE | 0 | chan->data | (-1)-s32max |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->tail | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->tail | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| HALF_LOCKED2 | &conn->lock | ||
| HALF_LOCKED2 | sk | ||
| HALF_LOCKED2 | 0 | &chan->lock |
net/bluetooth/l2cap_core.c l2cap_tx_state_xmit() -> l2cap_send_sframe()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | chan | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->ops->alloc_skb | 697403281612550144,1428439502886932480,3829141406643666944,4747775035852767232 |
| PARAM_VALUE | 0 | chan->ops->close | 213534670060187648,5426308600317853696,8941342193426427904 |
| PARAM_VALUE | 0 | chan->ops->defer | 1471107293441404928,3353376515601281024,8564691276438745088 |
| PARAM_VALUE | 0 | chan->ops->filter | 0,5601450832164487168 |
| PARAM_VALUE | 0 | chan->ops->get_peer_pid | 0,7806658739735814144 |
| PARAM_VALUE | 0 | chan->ops->get_sndtimeo | 2697548582813421568,4173136885396430848,8824681775271051264 |
| PARAM_VALUE | 0 | chan->ops->name | 367564300844425216,3621607505566339072,3827038824283914240,9192042632466305024 |
| PARAM_VALUE | 0 | chan->ops->new_connection | 0,101309089589129216,1349125343832133632,7594089158128291840,9116300513561088000 |
| PARAM_VALUE | 0 | chan->ops->ready | 1936570842419531776,3141042949788332032,4413953799751630848,8863630754790494208 |
| PARAM_VALUE | 0 | chan->ops->recv | 2187815225111711744,7374705446746943488,8578246076673925120,8652859653051080704 |
| PARAM_VALUE | 0 | chan->ops->resume | 233276029245161472,4654052775929847808,5170076218034978816,5602426340623007744 |
| PARAM_VALUE | 0 | chan->ops->set_shutdown | 3641466375809654784,4929020601093369856,8570201482808676352 |
| PARAM_VALUE | 0 | chan->ops->state_change | 3997558339430535168,8693889062415364096,8999691986912878592 |
| PARAM_VALUE | 0 | chan->ops->suspend | 2882397264801574912,4450364550360055808,7055267220821704704 |
| PARAM_VALUE | 0 | chan->ops->teardown | 4096-ptr_max |
| PARAM_VALUE | 0 | chan->tx_state | 0 |
| PARAM_VALUE | 1 | control | 7010572216720183296 |
| PARAM_VALUE | 1 | control->poll | 1 |
| PARAM_VALUE | 1 | control->sframe | 1 |
| PARAM_VALUE | 1 | control->super | 0 |
| BUF_SIZE | 0 | chan->data | (-1)-s32max |
| DATA_SOURCE | 0 | chan | $0 |
| MEM_ZERO | 1 | control | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu->tail | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | chan->sdu_last_frag->tail | |
| USER_PTR | 0 | chan->tx_send_head->data | |
| HALF_LOCKED2 | &conn->lock | ||
| HALF_LOCKED2 | sk | ||
| HALF_LOCKED2 | 0 | &chan->lock |