Documented in 1 files:
Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 5 files:
- drivers/bus/mhi/host/main.c, line 1177
- drivers/net/mhi_net.c
- drivers/net/wwan/mhi_wwan_ctrl.c
- drivers/net/wwan/mhi_wwan_mbim.c
- net/qrtr/mhi.c, line 71
Smatch caller information:
net/qrtr/mhi.c qcom_mhi_qrtr_send() -> mhi_queue_skb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | dir | 1 |
| PARAM_VALUE | 2 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 2 | skb->data_len | 0-1 |
| PARAM_VALUE | 2 | skb->hdr_len | 0 |
| PARAM_VALUE | 2 | skb->head_frag | 0 |
| PARAM_VALUE | 2 | skb->nohdr | 0 |
| PARAM_VALUE | 2 | skb->pp_recycle | 0 |
| PARAM_VALUE | 4 | mflags | 2 |
| BUF_SIZE | 2 | skb | 0-s32max |
| BUF_SIZE | 2 | skb | 0-s32max |
| CAPPED_DATA | 2 | skb | 1 |
| DATA_SOURCE | 2 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 3 | len | unit_byte |
| LOCK2 | &node->ep_lock | ||
| HALF_LOCKED2 | global &qrtr_node_lock | ||
| HALF_LOCKED2 | sk | ||
| TYPE_LOCK | (struct qrtr_node)->ep_lock |
drivers/net/wwan/mhi_wwan_ctrl.c mhi_wwan_ctrl_refill_work() -> mhi_queue_skb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | mhi_dev->mhi_cntrl->cntrl_dev->cma_area->nranges | s32min-s32max |
| PARAM_VALUE | 0 | mhi_dev->mhi_cntrl->cntrl_dev->power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 1 | dir | 2 |
| PARAM_VALUE | 2 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | skb->destructor | 6244498661133668352 |
| PARAM_VALUE | 4 | mflags | 2 |
| BUF_SIZE | 2 | skb | 0-s32max |
| BUF_SIZE | 2 | skb | 0-s32max |
| DATA_SOURCE | 2 | skb | r alloc_skb |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &port->ops_lock |
drivers/net/wwan/mhi_wwan_ctrl.c mhi_wwan_ctrl_tx() -> mhi_queue_skb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | dir | 1 |
| PARAM_VALUE | 2 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | mflags | 2 |
| BUF_SIZE | 2 | skb | 0-s32max |
| BUF_SIZE | 2 | skb | 0-s32max |
| CAPPED_DATA | 2 | skb | 1 |
| CAPPED_DATA | 2 | skb->len | 1 |
| CAPPED_DATA | 3 | len | 1 |
| DATA_SOURCE | 2 | skb | $1 |
| PREEMPT_ADD | <- disables preempt | ||
| UNITS | 3 | len | unit_byte |
| LOCK2 | &mhiwwan->tx_lock | ||
| LOCK2 | &port->ops_lock | ||
| LOCK2 | bh | ||
| HALF_LOCKED2 | &gdev->rwsem | ||
| HALF_LOCKED2 | &gdev->write_mutex | ||
| TYPE_LOCK | (struct mhi_wwan_dev)->tx_lock | ||
| TYPE_LOCK | (struct wwan_port)->ops_lock |
drivers/net/mhi_net.c mhi_ndo_xmit() -> mhi_queue_skb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | dir | 1 |
| PARAM_VALUE | 2 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 2 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 2 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 4 | mflags | 2 |
| BUF_SIZE | 2 | skb | (-1)-s32max |
| BUF_SIZE | 2 | skb | (-1)-s32max |
| CAPPED_DATA | 2 | skb | 1 |
| DATA_SOURCE | 2 | skb | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 2 | skb->csum_offset | 0-u16max |
| HOST_DATA | 2 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 2 | skb->len | 0-u32max[c] |
| HOST_DATA | 2 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 2 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 2 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 2 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 2 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 2 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 2 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 2 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 2 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 2 | *skb->data | 0-255 |
| HOST_DATA | 3 | len | 0-u32max[c] |
| NO_OVERFLOW_SIMPLE | 2 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | skb->end | |
| NO_OVERFLOW_SIMPLE | 2 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 2 | skb->len | |
| NO_OVERFLOW_SIMPLE | 2 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 2 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 2 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 2 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 2 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 3 | len | |
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &ndev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read |
drivers/net/mhi_net.c mhi_net_rx_refill_work() -> mhi_queue_skb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | mhi_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | mhi_dev->mhi_cntrl->cntrl_dev->cma_area->available_count | 0-s64max |
| PARAM_VALUE | 0 | mhi_dev->mhi_cntrl->cntrl_dev->cma_area->nranges | s32min-s32max |
| PARAM_VALUE | 0 | mhi_dev->mhi_cntrl->cntrl_dev->power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 1 | dir | 2 |
| PARAM_VALUE | 2 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | mflags | 2 |
| BUF_SIZE | 2 | skb | (-1)-s32max |
| BUF_SIZE | 2 | skb | (-1)-s32max |
| DATA_SOURCE | 2 | skb | r netdev_alloc_skb |
| RX_PATH | |||
| UNITS | 3 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock |
drivers/net/wwan/mhi_wwan_mbim.c mhi_mbim_ndo_xmit() -> mhi_queue_skb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | dir | 1 |
| PARAM_VALUE | 2 | skb | 4096-ptr_max |
| PARAM_VALUE | 2 | skb->cloned | 0 |
| PARAM_VALUE | 2 | skb->dev->ethtool_ops->get_link_ext_state | 0-9223372036854775807 |
| PARAM_VALUE | 2 | skb->dev->ethtool_ops->get_mm_stats | 0-9223372036854775807 |
| PARAM_VALUE | 2 | skb->dev->ip6_ptr->dead | s32min-s32max |
| PARAM_VALUE | 2 | skb->dev->ip6_ptr->mc_gq_running | 0-255 |
| PARAM_VALUE | 2 | skb->dev->ip6_ptr->mc_maxdelay | 0-s64max |
| PARAM_VALUE | 2 | skb->dev->ip6_ptr->mc_qri | 0-s64max |
| PARAM_VALUE | 2 | skb->dev->ip6_ptr->mc_qrv | 0-255 |
| PARAM_VALUE | 2 | skb->dev->ip6_ptr->ra_mtu | 0-4294967295 |
| PARAM_VALUE | 2 | skb->dev->linkwatch_dev_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 2 | skb->dev->linkwatch_dev_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 2 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 2 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 2 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 2 | skb->hdr_len | 0 |
| PARAM_VALUE | 2 | skb->head | 1-u64max |
| PARAM_VALUE | 2 | skb->head_frag | 0 |
| PARAM_VALUE | 2 | skb->nohdr | 0 |
| PARAM_VALUE | 2 | skb->pp_recycle | 0 |
| PARAM_VALUE | 4 | mflags | 2 |
| BUF_SIZE | 2 | skb | (-1)-s32max |
| BUF_SIZE | 2 | skb | (-1)-s32max |
| DATA_SOURCE | 2 | skb | $0 [m] |
| PARAM_COMPARE | 2 | skb | == $2 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 2 | skb->csum_offset | 0-u16max |
| HOST_DATA | 2 | skb->data_len | 0-2147483648[c] |
| HOST_DATA | 2 | skb->len | 0-u32max[c] |
| HOST_DATA | 2 | skb->next->csum_offset | 0-u16max |
| HOST_DATA | 2 | skb->next->data_len | 0-u32max[c] |
| HOST_DATA | 2 | skb->next->len | 1-u32max[c] |
| HOST_DATA | 2 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 2 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 2 | skb->prev->len | 0-u32max[c] |
| HOST_DATA | 2 | skb->prev->truesize | 0-u32max |
| HOST_DATA | 2 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | skb->prev->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 2 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 2 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 2 | *skb->data | 0-255 |
| HOST_DATA | 3 | len | 0-u32max[c] |
| NO_OVERFLOW_SIMPLE | 2 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->proto_down | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 2 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 2 | skb->end | |
| NO_OVERFLOW_SIMPLE | 2 | skb->extensions | |
| NO_OVERFLOW_SIMPLE | 2 | skb->len | |
| NO_OVERFLOW_SIMPLE | 2 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 2 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 2 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 2 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 2 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 2 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 2 | skb->truesize | |
| NO_OVERFLOW_SIMPLE | 3 | len | |
| UNITS | 3 | len | unit_byte |
| LOCK2 | &mbim->tx_lock | ||
| LOCK2 | flags | ||
| HALF_LOCKED2 | &ndev->tx_global_lock | ||
| HALF_LOCKED2 | &txq->_xmit_lock | ||
| HALF_LOCKED2 | bh | ||
| HALF_LOCKED2 | flags | ||
| HALF_LOCKED2 | rcu_read | ||
| TYPE_LOCK | (struct mhi_mbim_context)->tx_lock |
drivers/net/wwan/mhi_wwan_mbim.c mhi_net_rx_refill_work() -> mhi_queue_skb()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | mhi_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | mhi_dev->mhi_cntrl->cntrl_dev->cma_area->available_count | 0-s64max |
| PARAM_VALUE | 0 | mhi_dev->mhi_cntrl->cntrl_dev->cma_area->nranges | s32min-s32max |
| PARAM_VALUE | 0 | mhi_dev->mhi_cntrl->cntrl_dev->power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 1 | dir | 2 |
| PARAM_VALUE | 2 | skb | 4096-ptr_max |
| PARAM_VALUE | 4 | mflags | 2 |
| BUF_SIZE | 2 | skb | 0-s32max |
| BUF_SIZE | 2 | skb | 0-s32max |
| DATA_SOURCE | 2 | skb | r alloc_skb |
| RX_PATH | |||
| HALF_LOCKED2 | &pool->lock |