Defined in 1 files as a function:
Referenced in 7 files:
- drivers/scsi/3w-9xxx.c, line 1848
- drivers/scsi/aacraid/aachba.c
- drivers/scsi/ips.c, line 3421
- drivers/scsi/mpi3mr/mpi3mr_os.c, line 5068
- drivers/scsi/ps3rom.c
- drivers/scsi/scsi_debug.c
- drivers/scsi/stex.c, line 496
Smatch caller information:
drivers/scsi/scsi_debug.c fetch_to_dev_buffer() -> scsi_sg_copy_to_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | cmd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->device | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->flags | 0-s32max |
| PARAM_VALUE | 0 | cmd->resid_len | 0 |
| PARAM_VALUE | 0 | cmd->sc_data_direction | 1 |
| PARAM_VALUE | 0 | cmd->sdb.length | 1-u32max |
| PARAM_VALUE | 0 | cmd->submitter | 0-1 |
| PARAM_VALUE | 0 | *cmd->cmnd | 0-255 |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| BUF_SIZE | 1 | buf | (-1),64-s32max |
| DATA_SOURCE | 0 | cmd | $0 |
| DATA_SOURCE | 1 | buf | $1 |
| DATA_SOURCE | 2 | buflen | $2 |
| HARD_MAX | 0 | cmd->submitter | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &sdev->state_mutex |
drivers/scsi/scsi_debug.c resp_unmap() -> scsi_sg_copy_to_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | cmd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->device | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->flags | 0-s32max |
| PARAM_VALUE | 0 | cmd->resid_len | 0 |
| PARAM_VALUE | 0 | cmd->sdb.length | 0-255 |
| PARAM_VALUE | 0 | cmd->submitter | 0-1 |
| PARAM_VALUE | 0 | *cmd->cmnd | 0-255 |
| PARAM_VALUE | 1 | buf | 16,4096-ptr_max |
| PARAM_VALUE | 2 | buflen | 0-255 |
| BUF_SIZE | 1 | buf | 0-u32max |
| DATA_SOURCE | 0 | cmd | $0 |
| DATA_SOURCE | 1 | buf | r _kzalloc_noprof |
| HARD_MAX | 0 | cmd->submitter | 1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| BYTE_COUNT | 1 | ==buf2 | 8050 |
| HALF_LOCKED2 | &sdev->state_mutex |
drivers/scsi/ips.c ips_scmd_buf_read() -> scsi_sg_copy_to_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | cmd | 4096-ptr_max |
| PARAM_VALUE | 1 | buf | 1-u64max |
| PARAM_VALUE | 2 | buflen | s32min-(-1),37,240-s32max |
| BUF_SIZE | 1 | buf | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | buf | s32min-(-2),1-s32max |
| CAPPED_DATA | 2 | buflen | 1 |
| DATA_SOURCE | 0 | cmd | $0 |
| DATA_SOURCE | 1 | buf | $1 |
| DATA_SOURCE | 2 | buflen | $2 |
| BIT_INFO | 2 | buflen | 0x0,0x7fffffff |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| NO_OVERFLOW_SIMPLE | 2 | buflen | |
| UNITS | 2 | buflen | unit_byte |
| LOCK2 | flags |
drivers/scsi/3w-9xxx.c twa_scsiop_execute_scsi() -> scsi_sg_copy_to_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | cmd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->device | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->sc_data_direction | 0-1 |
| PARAM_VALUE | 0 | cmd->sdb.length | 0-511 |
| PARAM_VALUE | 0 | cmd->sdb.table.nents | 1-u32max |
| PARAM_VALUE | 2 | buflen | 512 |
| FUZZY_MAX | 0 | cmd->sc_data_direction | 1 |
| PREEMPT_ADD | |||
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | irq_flags | ||
| LOCK2 | shost->host_lock | ||
| HALF_LOCKED2 | &sdev->state_mutex |
drivers/scsi/aacraid/aachba.c aac_expose_phy_device() -> scsi_sg_copy_to_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | cmd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->device | 1-u64max |
| PARAM_VALUE | 0 | cmd->sense_buffer | 4096-ptr_max |
| PARAM_VALUE | 1 | buf | 2108885767553826816 |
| PARAM_VALUE | 2 | buflen | 1 |
| BUF_SIZE | 0 | cmd | 416 |
| BUF_SIZE | 0 | cmd | 416 |
| DATA_SOURCE | 0 | cmd | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 2 | buflen | unit_byte |
| HALF_LOCKED2 | &desc->request_mutex | ||
| HALF_LOCKED2 | _T->lock | ||
| HALF_LOCKED2 | flags |
drivers/scsi/aacraid/aachba.c get_container_name_callback() -> scsi_sg_copy_to_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | cmd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->device | 1-u64max |
| PARAM_VALUE | 1 | buf | 8048258687936487424 |
| PARAM_VALUE | 2 | buflen | 36 |
| BUF_SIZE | 0 | cmd | 416 |
| BUF_SIZE | 0 | cmd | 416 |
| BUF_SIZE | 1 | buf | 36 |
| DATA_SOURCE | 0 | cmd | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 2 | buflen | unit_byte |
| HALF_LOCKED2 | &desc->request_mutex | ||
| HALF_LOCKED2 | _T->lock | ||
| HALF_LOCKED2 | flags |
drivers/scsi/stex.c stex_controller_info() -> scsi_sg_copy_to_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | cmd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->cmnd | 4096-ptr_max |
| PARAM_VALUE | 2 | buflen | 116 |
| PREEMPT_ADD | |||
| NOCHECK_CALL | |||
| UNITS | 1 | buf | unit_byte |
| UNITS | 2 | buflen | unit_byte |
| LOCK2 | flags | ||
| HALF_LOCKED2 | hba->host->host_lock | ||
| HALF_LOCKED2 | host->host_lock |
drivers/scsi/mpi3mr/mpi3mr_os.c mpi3mr_check_return_unmap() -> scsi_sg_copy_to_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | cmd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->cmnd | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->device | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->device->host | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->device->hostdata | 4096-ptr_max |
| PARAM_VALUE | 0 | cmd->flags | 0-s32max |
| PARAM_VALUE | 0 | cmd->resid_len | 0 |
| PARAM_VALUE | 0 | cmd->sdb.length | 24-255 |
| PARAM_VALUE | 0 | cmd->submitter | 0-1 |
| PARAM_VALUE | 0 | *cmd->cmnd | 0-255 |
| PARAM_VALUE | 1 | buf | 4096-ptr_max |
| PARAM_VALUE | 2 | buflen | 24-255 |
| BUF_SIZE | 1 | buf | 0-u32max |
| DATA_SOURCE | 0 | cmd | $1 |
| DATA_SOURCE | 1 | buf | r _kzalloc_noprof |
| HARD_MAX | 0 | cmd->submitter | 1 |
| MEM_ZERO | 0 | cmd->sense_buffer | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| BYTE_COUNT | 1 | ==buf2 | 8050 |
| HALF_LOCKED2 | &sdev->state_mutex |