Lines Matching refs:fda
1951 struct binder_fd_array_object *fda; in binder_transaction_buffer_release() local
1969 fda = to_binder_fd_array_object(hdr); in binder_transaction_buffer_release()
1971 fda->parent, in binder_transaction_buffer_release()
1980 fd_buf_size = sizeof(u32) * fda->num_fds; in binder_transaction_buffer_release()
1981 if (fda->num_fds >= SIZE_MAX / sizeof(u32)) { in binder_transaction_buffer_release()
1983 debug_id, (u64)fda->num_fds); in binder_transaction_buffer_release()
1987 fda->parent_offset > parent->length - fd_buf_size) { in binder_transaction_buffer_release()
1990 debug_id, (u64)fda->num_fds); in binder_transaction_buffer_release()
2002 fda->parent_offset; in binder_transaction_buffer_release()
2003 for (fd_index = 0; fd_index < fda->num_fds; in binder_transaction_buffer_release()
2223 static int binder_translate_fd_array(struct binder_fd_array_object *fda, in binder_translate_fd_array() argument
2234 fd_buf_size = sizeof(u32) * fda->num_fds; in binder_translate_fd_array()
2235 if (fda->num_fds >= SIZE_MAX / sizeof(u32)) { in binder_translate_fd_array()
2237 proc->pid, thread->pid, (u64)fda->num_fds); in binder_translate_fd_array()
2241 fda->parent_offset > parent->length - fd_buf_size) { in binder_translate_fd_array()
2244 proc->pid, thread->pid, (u64)fda->num_fds); in binder_translate_fd_array()
2255 fda->parent_offset; in binder_translate_fd_array()
2261 for (fdi = 0; fdi < fda->num_fds; fdi++) { in binder_translate_fd_array()
2926 struct binder_fd_array_object *fda = in binder_transaction() local
2932 &ptr_object, fda->parent, in binder_transaction()
2947 fda->parent_offset, in binder_transaction()
2957 ret = binder_translate_fd_array(fda, parent, t, thread, in binder_transaction()
2967 fda->parent_offset + sizeof(u32) * fda->num_fds; in binder_transaction()