Lines Matching refs:object_offset
1863 binder_size_t object_offset; in binder_validate_ptr() local
1870 if (binder_alloc_copy_from_buffer(&proc->alloc, &object_offset, in binder_validate_ptr()
1872 sizeof(object_offset))) in binder_validate_ptr()
1874 object_size = binder_get_object(proc, NULL, b, object_offset, object); in binder_validate_ptr()
1878 *object_offsetp = object_offset; in binder_validate_ptr()
2051 binder_size_t object_offset; in binder_transaction_buffer_release() local
2053 if (!binder_alloc_copy_from_buffer(&proc->alloc, &object_offset, in binder_transaction_buffer_release()
2055 sizeof(object_offset))) in binder_transaction_buffer_release()
2057 object_offset, &object); in binder_transaction_buffer_release()
2060 debug_id, (u64)object_offset, buffer->data_size); in binder_transaction_buffer_release()
3404 binder_size_t object_offset; in binder_transaction() local
3408 &object_offset, in binder_transaction()
3411 sizeof(object_offset))) { in binder_transaction()
3424 copy_size = object_offset - user_offset; in binder_transaction()
3425 if (copy_size && (user_offset > object_offset || in binder_transaction()
3426 object_offset > tr->data_size || in binder_transaction()
3440 t->buffer, object_offset, &object); in binder_transaction()
3441 if (object_size == 0 || object_offset < off_min) { in binder_transaction()
3444 (u64)object_offset, in binder_transaction()
3456 user_offset = object_offset + object_size; in binder_transaction()
3459 off_min = object_offset + object_size; in binder_transaction()
3471 object_offset, in binder_transaction()
3490 object_offset, in binder_transaction()
3503 binder_size_t fd_offset = object_offset + in binder_transaction()
3512 object_offset, in binder_transaction()
3582 object_offset, in binder_transaction()
3636 object_offset, in binder_transaction()
3645 last_fixup_obj_off = object_offset; in binder_transaction()