Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/usb/storage/sddr09.c sddr09_erase() -> sddr09_send_scsi_command()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->iobuf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 1 | command | 4096-ptr_max |
| PARAM_VALUE | 2 | command_len | 12 |
| DATA_SOURCE | 0 | us | $0 |
| MEM_ZERO | 1 | command |
drivers/usb/storage/sddr09.c sddr09_readX() -> sddr09_send_scsi_command()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->extra | 4096-ptr_max |
| PARAM_VALUE | 0 | us->iobuf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| PARAM_VALUE | 1 | command | 4096-ptr_max |
| PARAM_VALUE | 2 | command_len | 12 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| DATA_SOURCE | 0 | us | $0 |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |
drivers/usb/storage/sddr09.c sddr09_read_deviceID() -> sddr09_send_scsi_command()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr->bRequest | 0-2,8,10,64-65,128,130,134,150,152,154 |
| PARAM_VALUE | 0 | us->cr->bRequestType | 2,32-33,64-65,160,192-193 |
| PARAM_VALUE | 0 | us->current_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->complete | 3979899265946660864 |
| PARAM_VALUE | 0 | us->current_urb->context | 0,5570596329219252224 |
| PARAM_VALUE | 0 | us->current_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj.release.timer.is_hard | 0-1 |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj.release.timer.is_lazy | 0-1 |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj.release.timer.is_queued | 0-1 |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj.release.timer.is_soft | 0-1 |
| PARAM_VALUE | 0 | us->current_urb->ep->urb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->_refcount.counter | s32min-s32max |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | us->extra | 4096-ptr_max |
| PARAM_VALUE | 0 | us->iobuf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| PARAM_VALUE | 1 | command | 4096-ptr_max |
| PARAM_VALUE | 2 | command_len | 12 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| DATA_SOURCE | 0 | us | $0 |
| MEM_ZERO | 1 | command | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |
drivers/usb/storage/sddr09.c sddr09_read_status() -> sddr09_send_scsi_command()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->iobuf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 1 | command | 4096-ptr_max |
| PARAM_VALUE | 2 | command_len | 12 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| DATA_SOURCE | 0 | us | $0 |
| MEM_ZERO | 1 | command | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |
drivers/usb/storage/sddr09.c sddr09_request_sense() -> sddr09_send_scsi_command()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr->bRequest | 0-2,8,10,64-65,128,130,134,150,152,154 |
| PARAM_VALUE | 0 | us->cr->bRequestType | 2,32-33,64-65,160,192-193 |
| PARAM_VALUE | 0 | us->current_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->anchor | 0 |
| PARAM_VALUE | 0 | us->current_urb->anchor_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->anchor_list.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->anchor_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->anchor_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->anchor_list.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->complete | 3979899265946660864 |
| PARAM_VALUE | 0 | us->current_urb->context | 0,5570596329219252224 |
| PARAM_VALUE | 0 | us->current_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->dev->dev.kobj->release.timer->entry.pprev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->ep->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->ep->urb_list.prev->next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->error_count | 0 |
| PARAM_VALUE | 0 | us->current_urb->num_sgs | 0 |
| PARAM_VALUE | 0 | us->current_urb->number_of_packets | 0 |
| PARAM_VALUE | 0 | us->current_urb->sg | 0 |
| PARAM_VALUE | 0 | us->current_urb->sgt | 0 |
| PARAM_VALUE | 0 | us->current_urb->start_frame | 0 |
| PARAM_VALUE | 0 | us->current_urb->stream_id | 0 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->page_type | 0-4294967295 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer_length | 0-u16max |
| PARAM_VALUE | 0 | us->current_urb->urb_list.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->urb_list.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->urb_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->urb_list.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->extra | 4096-ptr_max |
| PARAM_VALUE | 0 | us->extra_destructor | 242684974678454272 |
| PARAM_VALUE | 0 | us->iobuf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->proto_handler | 1-u64max |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->actconfig | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->actconfig->desc.bConfigurationValue | 1 |
| PARAM_VALUE | 0 | us->pusb_dev->bus->sysdev->iommu->attach_deferred | 0-1 |
| PARAM_VALUE | 0 | us->pusb_dev->state | 0-7,9-u32max |
| PARAM_VALUE | 0 | us->pusb_intf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_intf->cur_altsetting | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_intf->cur_altsetting->desc.bNumEndpoints | 1-255 |
| PARAM_VALUE | 0 | us->recv_bulk_pipe | 0,128-u32max |
| PARAM_VALUE | 0 | us->recv_ctrl_pipe | 0,128-u32max |
| PARAM_VALUE | 0 | us->recv_intr_pipe | 0,128-u32max |
| PARAM_VALUE | 0 | us->send_bulk_pipe | 0,1073741824-u32max |
| PARAM_VALUE | 0 | us->send_ctrl_pipe | 0,2147483648-u32max |
| PARAM_VALUE | 0 | us->transport | 1-u64max |
| PARAM_VALUE | 0 | us->unusual_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->unusual_dev->initFunction | 1-u64max |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| PARAM_VALUE | 1 | command | 4096-ptr_max |
| PARAM_VALUE | 2 | command_len | 12 |
| BUF_SIZE | 0 | us->protocol_name | (-1),17,36 |
| BUF_SIZE | 0 | us->transport_name | (-1),7-8,11-12,14-15,18,20,25,28 |
| CAPPED_DATA | 0 | us->current_urb | 1 |
| CAPPED_DATA | 0 | us->pusb_dev | 1 |
| CAPPED_DATA | 0 | us->pusb_intf->cur_altsetting->desc.bNumEndpoints | 1 |
| DATA_SOURCE | 0 | us | $0 |
| STR_LEN | 0 | us->protocol_name | (-1),16,35 |
| STR_LEN | 0 | us->transport_name | (-1),6-7,10-11,13-14,17,19,24,27 |
| MEM_ZERO | 1 | command | |
| RX_PATH | |||
| TASK_NOT_RUNNING |
drivers/usb/storage/sddr09.c sddr09_transport() -> sddr09_send_scsi_command()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| PARAM_VALUE | 1 | command | 4096-ptr_max |
| PARAM_VALUE | 2 | command_len | 12 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 1 | command | 32 |
| DATA_SOURCE | 0 | us | $1 |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.urbs | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->num_mapped_sgs | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->setup_dma | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->sg->length | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_buffer | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_buffer_length | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_urb->transfer_dma | |
| NO_OVERFLOW_SIMPLE | 0 | us->pusb_dev->bos | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |
drivers/usb/storage/sddr09.c sddr09_writeX() -> sddr09_send_scsi_command()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | us | 4096-ptr_max |
| PARAM_VALUE | 0 | us->cr | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_sg->urbs | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_sg.bytes | 0 |
| PARAM_VALUE | 0 | us->current_sg.complete.done | 0-4294967293,u32max |
| PARAM_VALUE | 0 | us->current_sg.complete.wait.lock.magic | 3735899821 |
| PARAM_VALUE | 0 | us->current_sg.complete.wait.lock.owner | (-1) |
| PARAM_VALUE | 0 | us->current_sg.complete.wait.lock.owner_cpu | u32max |
| PARAM_VALUE | 0 | us->current_sg.complete.wait.task_list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_sg.complete.wait.task_list.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_sg.complete.wait.task_list.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_sg.complete.wait.task_list.prev->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_sg.dev | 0 |
| PARAM_VALUE | 0 | us->current_sg.entries | (-1) |
| PARAM_VALUE | 0 | us->current_sg.status | 0 |
| PARAM_VALUE | 0 | us->current_sg.urbs | 0 |
| PARAM_VALUE | 0 | us->current_urb | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->complete | 3979899265946660864 |
| PARAM_VALUE | 0 | us->current_urb->context | 0,5570596329219252224 |
| PARAM_VALUE | 0 | us->current_urb->dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->ep->urb_list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bDeviceProtocol | 1 |
| PARAM_VALUE | 0 | us->current_urb->transfer_buffer->bmAttributes | 0-255 |
| PARAM_VALUE | 0 | us->extra | 4096-ptr_max |
| PARAM_VALUE | 0 | us->iobuf | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev | 4096-ptr_max |
| PARAM_VALUE | 0 | us->pusb_dev->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->pusb_intf->dev.power.wakeirq->status | 0-4294967295 |
| PARAM_VALUE | 0 | us->srb | 4096-ptr_max |
| PARAM_VALUE | 0 | *us->pusb_dev->toggle | 0-4294967295 |
| PARAM_VALUE | 1 | command | 4096-ptr_max |
| PARAM_VALUE | 2 | command_len | 12 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| BUF_SIZE | 0 | us | (-1),64,128,280,1024 |
| DATA_SOURCE | 0 | us | $0 |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.count | |
| NO_OVERFLOW_SIMPLE | 0 | us->current_sg.entries | |
| HALF_LOCKED2 | 0 | &us->dev_mutex |