Documented in 1 files:
Defined in 1 files as a prototype:
Defined in 1 files as a function:
Referenced in 22 files:
- drivers/bluetooth/btintel.c
- drivers/bluetooth/btintel_pcie.c, line 1197
- drivers/bluetooth/btmtk.c
- drivers/bluetooth/btnxpuart.c
- drivers/bluetooth/btqca.c, line 209
- drivers/bluetooth/btrtl.c, line 1032
- drivers/bluetooth/btusb.c
- drivers/bluetooth/hci_aml.c
- drivers/net/gtp.c
- drivers/net/wireless/ath/ath12k/wmi.c, line 10327
- include/uapi/linux/bpf.h, line 6016
- net/bluetooth/bnep/core.c
- net/bluetooth/coredump.c
- net/bluetooth/hci_core.c
- net/bluetooth/hci_drv.c, line 71
- net/bluetooth/hci_event.c
- net/bluetooth/hidp/core.c
- net/bluetooth/iso.c
- net/bluetooth/msft.c
- net/bluetooth/rfcomm/core.c
- net/core/skbuff.c, line 2700
- tools/include/uapi/linux/bpf.h, line 6016
Smatch caller information:
net/bluetooth/coredump.c hci_devcd_handle_pkt_init() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->len | 4 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | $1 |
| LOCK2 | &hdev->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct hci_dev)->lock |
net/bluetooth/coredump.c hci_devcd_handle_pkt_pattern() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->len | 5 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 1 | len | 5 |
| DATA_SOURCE | 0 | skb | $1 |
| UNITS | 1 | len | unit_byte |
| LOCK2 | &hdev->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct hci_dev)->lock |
drivers/net/gtp.c gtp0_send_echo_resp() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->_nfct | 0 |
| PARAM_VALUE | 0 | skb->csum_complete_sw | 1 |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_query_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_query_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_query_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_report_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_report_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_report_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->stats.proc_dir_entry | 0,4806605944481423360 |
| PARAM_VALUE | 0 | skb->dev->linkwatch_dev_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->dev->linkwatch_dev_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->gen->s.len | 0-s32max |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->extensions | 0 |
| PARAM_VALUE | 0 | skb->next->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->next->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->next->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | *skb->dev->name | 0-255 |
| PARAM_VALUE | 1 | len | 28 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->dev->nd_net.net | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HOST_DATA | 0 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | len | unit_byte |
drivers/net/gtp.c gtp1u_send_echo_resp() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->_nfct | 0 |
| PARAM_VALUE | 0 | skb->csum_complete_sw | 1 |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_query_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_query_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_query_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_report_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_report_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->mc_report_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->dev->ip6_ptr->stats.proc_dir_entry | 0,4806605944481423360 |
| PARAM_VALUE | 0 | skb->dev->linkwatch_dev_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->dev->linkwatch_dev_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->gen->s.len | 0-s32max |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->frag_expire | 0,663510801442193408,1753052602134376448,4007388366431105024,8876081723503042560 |
| PARAM_VALUE | 0 | skb->dev->nd_net.net->ipv4.fqdir->f->qsize | 0,304,320 |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->fill_addr_option | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->parse_options | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->ndisc_ops->update | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->dev->rtnl_link_ops->maxtype | 0-6,8-10,15,18,20,22,24,34,50 |
| PARAM_VALUE | 0 | skb->extensions | 0 |
| PARAM_VALUE | 0 | skb->next->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->next->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->next->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->next->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->dfl_pwq | 0-s64max |
| PARAM_VALUE | 0 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_max_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->__sk_common.skc_net.net->xfrm.nat_keepalive_work.wq->saved_min_active | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->process_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->process_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->request_key_auth->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->request_key_auth->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->session_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->session_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->thread_keyring->user->qnbytes | s32min-s32max |
| PARAM_VALUE | 0 | skb->sk->sk_peer_cred->thread_keyring->user->qnkeys | s32min-s32max |
| PARAM_VALUE | 0 | *skb->dev->name | 0-255 |
| PARAM_VALUE | 1 | len | 20 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| CAPPED_DATA | 0 | skb->dev->nd_net.net | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HOST_DATA | 0 | skb->csum | 0-4294967040[c] |
| HOST_DATA | 0 | skb->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->csum_offset | 0-u16max |
| HOST_DATA | 0 | skb->prev->data_len | 0-u32max[c] |
| HOST_DATA | 0 | skb->prev->len | 1-u32max[c] |
| HOST_DATA | 0 | skb->prev->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->tstamp | 500000002-4294967299794967295[c] |
| HOST_DATA | 0 | skb->users.refs.counter | s32min-0,2-s32max |
| HOST_DATA | 0 | *skb->data | 0-255 |
| NO_OVERFLOW_SIMPLE | 0 | skb->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->group | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->num_tc | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_rx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->real_num_tx_queues | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.rx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->stats.tx_bytes | |
| NO_OVERFLOW_SIMPLE | 0 | skb->dev->tx_queue_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->next->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->data_len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->prev->truesize | |
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| NO_OVERFLOW_SIMPLE | 0 | skb->tail | |
| NO_OVERFLOW_SIMPLE | 0 | skb->truesize | |
| UNITS | 0 | skb | unit_byte |
| UNITS | 1 | len | unit_byte |
net/bluetooth/hidp/core.c hidp_input_report() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | $1 |
net/bluetooth/hidp/core.c hidp_input_report() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 8 |
| DATA_SOURCE | 0 | skb | $1 |
net/bluetooth/hidp/core.c hidp_input_report() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 3 |
| DATA_SOURCE | 0 | skb | $1 |
net/bluetooth/hidp/core.c hidp_recv_ctrl_frame() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | $1 |
net/bluetooth/hidp/core.c hidp_recv_intr_frame() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | $1 |
drivers/bluetooth/btqca.c qca_read_fw_board_id() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 2 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync_ev |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btusb.c acl_pkt_is_dump_qca() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| DATA_SOURCE | 0 | skb | r skb_clone |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
drivers/bluetooth/btusb.c acl_pkt_is_dump_qca() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 2 |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| DATA_SOURCE | 0 | skb | r skb_clone |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
drivers/bluetooth/btusb.c acl_pkt_is_dump_qca() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 9 |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| DATA_SOURCE | 0 | skb | r skb_clone |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
drivers/bluetooth/btusb.c btusb_setup_csr() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 9 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| LOCK2 | &hdev->req_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btusb.c evt_pkt_is_dump_qca() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 2 |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| DATA_SOURCE | 0 | skb | r skb_clone |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
drivers/bluetooth/btusb.c evt_pkt_is_dump_qca() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 9 |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| DATA_SOURCE | 0 | skb | r skb_clone |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
net/bluetooth/hci_drv.c hci_drv_process_cmd() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 0 | skb->tstamp_type | 0 |
| PARAM_VALUE | 1 | len | 4 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->sk->sk_backlog.len | |
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &hdev->req_lock | ||
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hci_event.c hci_cc_skb_pull() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| CAPPED_DATA | 1 | len | 1 |
| CAPPED_DATA | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| DATA_SOURCE | 1 | len | $3 |
| RX_PATH | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hci_event.c hci_ev_skb_pull() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 0-64770 |
| BUF_SIZE | 0 | skb | (-1),240 |
| BUF_SIZE | 0 | skb | (-1),240 |
| CAPPED_DATA | 1 | len | 1 |
| CAPPED_DATA | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| DATA_SOURCE | 1 | len | $3 |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &hdev->lock | ||
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hci_event.c hci_le_ev_skb_pull() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->hdr_len | 0 |
| PARAM_VALUE | 0 | skb->head_frag | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->nohdr | 0 |
| PARAM_VALUE | 0 | skb->pp_recycle | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| DATA_SOURCE | 0 | skb | $1 |
| DATA_SOURCE | 1 | len | $3 |
| RX_PATH | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| UNITS | 1 | len | unit_byte |
| LOCK2 | &pool->lock | ||
| HALF_LOCKED2 | &hdev->lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->len | 66-u32max |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| FUZZY_MAX | 0 | skb->len | 66 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel.c btintel_print_fseq_info() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
net/bluetooth/iso.c iso_recv() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | len | 8 |
| DATA_SOURCE | 0 | skb | $2 |
| RX_PATH | |||
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/iso.c iso_recv() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->alloc_stack_handle | 0-4294967295 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->dead | 0-1 |
| PARAM_VALUE | 0 | skb->sk->ns_tracker->free_stack_handle | 0-4294967295 |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | $2 |
| RX_PATH | |||
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btrtl.c rtl_read_chip_type() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 2 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &hdev->req_lock | ||
| HALF_LOCKED2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btintel_pcie.c btintel_pcie_recv_frame() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| PREEMPT_ADD | <- disables preempt | ||
| RX_PATH | |||
| LOCK2 | &data->hci_rx_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct btintel_pcie_data)->hci_rx_lock |
net/bluetooth/hci_core.c hci_acldata_packet() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hci_core.c hci_isodata_packet() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/hci_core.c hci_scodata_packet() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 1 | len | 3 |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btmtk.c btmtk_usb_hci_wmt_sync() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-u64max |
| PARAM_VALUE | 1 | len | 7 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btmtk.c btmtk_usb_hci_wmt_sync() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 1 | len | 2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btnxpuart.c nxp_process_fw_dump() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0 |
| PARAM_VALUE | 1 | len | 4 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btnxpuart.c nxp_recv_chip_ver_v1() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0 |
| PARAM_VALUE | 1 | len | 4 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btnxpuart.c nxp_recv_chip_ver_v3() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0 |
| PARAM_VALUE | 1 | len | 4 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btnxpuart.c nxp_recv_fw_req_v1() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0 |
| PARAM_VALUE | 1 | len | 4 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btnxpuart.c nxp_recv_fw_req_v3() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->cb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0 |
| PARAM_VALUE | 1 | len | 9 |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| BUF_SIZE | 0 | skb | (-1)-s32max |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &pool->lock |
drivers/bluetooth/btnxpuart.c nxp_set_baudrate_cmd() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | r nxp_drv_send_cmd |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| HALF_LOCKED2 | &dev->mutex | ||
| HALF_LOCKED2 | &hdev->req_lock |
drivers/bluetooth/btnxpuart.c send_ps_cmd() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | r nxp_drv_send_cmd |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/btnxpuart.c send_wakeup_method_cmd() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | r nxp_drv_send_cmd |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| LOCK2 | &hdev->req_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/hci_aml.c aml_check_bdaddr() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 7 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/hci_aml.c aml_dump_fw_version() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync_ev |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/hci_aml.c aml_send_tci_cmd() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync_ev |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| LOCK2 | &hdev->req_lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/bluetooth/hci_aml.c aml_set_bdaddr() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync_ev |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| UNITS | 1 | len | unit_byte |
| LOCK2 | &hdev->req_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
drivers/net/wireless/ath/ath12k/wmi.c ath12k_wmi_op_rx() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-4225758837808902144 |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 1 | len | 4 |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &ab->core_lock | ||
| HALF_LOCKED2 | &ag->mutex | ||
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/rfcomm/core.c rfcomm_recv_data() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | $3 |
| LOCK2 | global &rfcomm_mutex |
net/bluetooth/rfcomm/core.c rfcomm_recv_mcc() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 2 |
| DATA_SOURCE | 0 | skb | $1 |
| UNITS | 1 | len | unit_byte |
| LOCK2 | global &rfcomm_mutex |
net/bluetooth/rfcomm/core.c rfcomm_recv_msc() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 2 |
| DATA_SOURCE | 0 | skb | $2 |
| UNITS | 1 | len | unit_byte |
| LOCK2 | global &rfcomm_mutex |
net/bluetooth/rfcomm/core.c rfcomm_recv_pn() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 8 |
| DATA_SOURCE | 0 | skb | $2 |
| UNITS | 1 | len | unit_byte |
| LOCK2 | global &rfcomm_mutex |
net/bluetooth/rfcomm/core.c rfcomm_recv_rls() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 2 |
| DATA_SOURCE | 0 | skb | $2 |
| UNITS | 1 | len | unit_byte |
| LOCK2 | global &rfcomm_mutex |
net/bluetooth/rfcomm/core.c rfcomm_recv_rpn() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | $3 |
| LOCK2 | global &rfcomm_mutex |
net/bluetooth/rfcomm/core.c rfcomm_recv_rpn() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 8 |
| DATA_SOURCE | 0 | skb | $3 |
| UNITS | 1 | len | unit_byte |
| LOCK2 | global &rfcomm_mutex |
net/bluetooth/msft.c msft_add_address_filter_sync() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 1-ptr_max |
| PARAM_VALUE | 1 | len | 3 |
| DATA_SOURCE | 0 | skb | r __hci_cmd_sync |
| UNITS | 1 | len | unit_byte |
| LOCK2 | &hdev->req_lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct hci_dev)->req_lock |
net/bluetooth/msft.c msft_skb_pull() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 1 | len | 1-255 |
| DATA_SOURCE | 0 | skb | $1 |
| DATA_SOURCE | 1 | len | $3 |
| FUZZY_MAX | 1 | len | 1 |
| RX_PATH | |||
| NO_OVERFLOW_SIMPLE | 0 | skb->end | |
| NO_OVERFLOW_SIMPLE | 0 | skb->len | |
| UNITS | 1 | len | unit_byte |
| HALF_LOCKED2 | &hdev->lock | ||
| HALF_LOCKED2 | &msft->filter_lock | ||
| HALF_LOCKED2 | &pool->lock |
net/bluetooth/bnep/core.c bnep_rx_frame() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
net/bluetooth/bnep/core.c bnep_rx_frame() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
net/bluetooth/bnep/core.c bnep_rx_frame() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 1 |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |
net/bluetooth/bnep/core.c bnep_rx_frame() -> skb_pull_data()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | skb | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data | 4096-ptr_max |
| PARAM_VALUE | 0 | skb->data_len | 0-1 |
| PARAM_VALUE | 0 | skb->destructor | 0 |
| PARAM_VALUE | 0 | skb->next | 0 |
| PARAM_VALUE | 0 | skb->prev | 0 |
| PARAM_VALUE | 0 | skb->sk | 0 |
| PARAM_VALUE | 1 | len | 2 |
| DATA_SOURCE | 0 | skb | $1 |
| RX_PATH | |||
| UNITS | 1 | len | unit_byte |