tL2C_FCRB::p_rx_sdu field

osi_free(p_fcrb->p_rx_sdu);

l2c_fcr.c:236

p_fcrb->p_rx_sdu = NULL;

l2c_fcr.c:237

p_ccb->local_cid, p_ccb->fcrb.next_seq_expected, tx_seq, p_ccb->fcrb.p_rx_sdu);

l2c_fcr.c:1270

if (p_ccb->fcrb.p_rx_sdu != NULL) {

l2c_fcr.c:1273

osi_free(p_ccb->fcrb.p_rx_sdu);

l2c_fcr.c:1274

p_ccb->fcrb.p_rx_sdu = NULL;

l2c_fcr.c:1275

if (p_ccb->fcrb.p_rx_sdu != NULL) {

l2c_fcr.c:1283

osi_free(p_ccb->fcrb.p_rx_sdu);

l2c_fcr.c:1284

p_ccb->fcrb.p_rx_sdu = NULL;

l2c_fcr.c:1285

if (p_fcrb->p_rx_sdu != NULL) {

l2c_fcr.c:1312

p_fcrb->rx_sdu_len, p_fcrb->p_rx_sdu->len);

l2c_fcr.c:1314

if (p_fcrb->p_rx_sdu == NULL) {

l2c_fcr.c:1324

} else if ((p_fcrb->p_rx_sdu = (BT_HDR *)osi_malloc(L2CAP_MAX_BUF_SIZE)) == NULL) {

l2c_fcr.c:1343

p_fcrb->p_rx_sdu->offset = 4; /* this is the minimal offset required by OBX to process incoming packets */

l2c_fcr.c:1347

p_fcrb->p_rx_sdu->len = 0;

l2c_fcr.c:1348

if ((p_fcrb->p_rx_sdu->len + p_buf->len) > p_fcrb->rx_sdu_len) {

l2c_fcr.c:1353

sar_type, p_fcrb->p_rx_sdu->len, p_buf->len, p_fcrb->rx_sdu_len);

l2c_fcr.c:1355

} else if ( (sar_type == L2CAP_FCR_END_SDU) && ((p_fcrb->p_rx_sdu->len + p_buf->len) != p_fcrb->rx_sdu_len) ) {

l2c_fcr.c:1357

p_fcrb->p_rx_sdu->len, p_buf->len, p_fcrb->rx_sdu_len);

l2c_fcr.c:1359

memcpy (((UINT8 *) (p_fcrb->p_rx_sdu + 1)) + p_fcrb->p_rx_sdu->offset + p_fcrb->p_rx_sdu->len, p, p_buf->len);

l2c_fcr.c:1362

p_fcrb->p_rx_sdu->len += p_buf->len;

l2c_fcr.c:1364

p_buf = p_fcrb->p_rx_sdu;

l2c_fcr.c:1370

p_fcrb->p_rx_sdu = NULL;

l2c_fcr.c:1371

Call Tree

All items filtered out

Data Use

tL2C_FCRB::p_rx_sdu is written by 3 functions and is read by 3 functions:

tL2C_FCRB::p_rx_sdu