Lines Matching refs:fda
2122 struct binder_fd_array_object *fda; in binder_transaction_buffer_release() local
2140 fda = to_binder_fd_array_object(hdr); in binder_transaction_buffer_release()
2142 fda->parent, in binder_transaction_buffer_release()
2151 fd_buf_size = sizeof(u32) * fda->num_fds; in binder_transaction_buffer_release()
2152 if (fda->num_fds >= SIZE_MAX / sizeof(u32)) { in binder_transaction_buffer_release()
2154 debug_id, (u64)fda->num_fds); in binder_transaction_buffer_release()
2158 fda->parent_offset > parent->length - fd_buf_size) { in binder_transaction_buffer_release()
2161 debug_id, (u64)fda->num_fds); in binder_transaction_buffer_release()
2172 fda->parent_offset; in binder_transaction_buffer_release()
2173 for (fd_index = 0; fd_index < fda->num_fds; in binder_transaction_buffer_release()
2653 struct binder_fd_array_object *fda, in binder_translate_fd_array() argument
2667 if (fda->num_fds == 0) in binder_translate_fd_array()
2670 fd_buf_size = sizeof(u32) * fda->num_fds; in binder_translate_fd_array()
2671 if (fda->num_fds >= SIZE_MAX / sizeof(u32)) { in binder_translate_fd_array()
2673 proc->pid, thread->pid, (u64)fda->num_fds); in binder_translate_fd_array()
2677 fda->parent_offset > parent->length - fd_buf_size) { in binder_translate_fd_array()
2680 proc->pid, thread->pid, (u64)fda->num_fds); in binder_translate_fd_array()
2691 fda->parent_offset; in binder_translate_fd_array()
2693 fda->parent_offset; in binder_translate_fd_array()
2701 ret = binder_add_fixup(pf_head, fda_offset, 0, fda->num_fds * sizeof(u32)); in binder_translate_fd_array()
2705 for (fdi = 0; fdi < fda->num_fds; fdi++) { in binder_translate_fd_array()
3527 struct binder_fd_array_object *fda = in binder_transaction() local
3533 &ptr_object, fda->parent, in binder_transaction()
3548 fda->parent_offset, in binder_transaction()
3575 ret = binder_translate_fd_array(&pf_head, fda, in binder_transaction()
3583 fda, sizeof(*fda)); in binder_transaction()
3594 fda->parent_offset + sizeof(u32) * fda->num_fds; in binder_transaction()