2079 	unsigned long buffer_offset;  in binder_validate_ptr()  local
2084 	buffer_offset = start_offset + sizeof(binder_size_t) * index;  in binder_validate_ptr()
2086 					  b, buffer_offset,  in binder_validate_ptr()
2151 		unsigned long buffer_offset;  in binder_validate_fixup()  local
2167 		buffer_offset = objects_start_offset +  in binder_validate_fixup()
2171 						  b, buffer_offset,  in binder_validate_fixup()
2244 	binder_size_t off_start_offset, buffer_offset, off_end_offset;  in binder_transaction_buffer_release()  local
2258 	for (buffer_offset = off_start_offset; buffer_offset < off_end_offset;  in binder_transaction_buffer_release()
2259 	     buffer_offset += sizeof(binder_size_t)) {  in binder_transaction_buffer_release()
2266 						   buffer, buffer_offset,  in binder_transaction_buffer_release()
2351 			num_valid = (buffer_offset - off_start_offset) /  in binder_transaction_buffer_release()
2667 	binder_size_t buffer_offset;  in binder_fixup_parent()  local
2698 	buffer_offset = bp->parent_offset +  in binder_fixup_parent()
2700 	if (binder_alloc_copy_to_buffer(&target_proc->alloc, b, buffer_offset,  in binder_fixup_parent()
2823 	binder_size_t buffer_offset = 0;  in binder_transaction()  local
3196 	buffer_offset = off_start_offset;  in binder_transaction()
3202 	for (buffer_offset = off_start_offset; buffer_offset < off_end_offset;  in binder_transaction()
3203 	     buffer_offset += sizeof(binder_size_t)) {  in binder_transaction()
3212 						  buffer_offset,  in binder_transaction()
3296 			size_t num_valid = (buffer_offset - off_start_offset) /  in binder_transaction()
3370 			num_valid = (buffer_offset - off_start_offset) /  in binder_transaction()
3468 					  buffer_offset, true);  in binder_transaction()