Lines Matching refs:object_offset
2078 binder_size_t object_offset; in binder_validate_ptr() local
2085 if (binder_alloc_copy_from_buffer(&proc->alloc, &object_offset, in binder_validate_ptr()
2087 sizeof(object_offset))) in binder_validate_ptr()
2089 object_size = binder_get_object(proc, b, object_offset, object); in binder_validate_ptr()
2093 *object_offsetp = object_offset; in binder_validate_ptr()
2263 binder_size_t object_offset; in binder_transaction_buffer_release() local
2265 if (!binder_alloc_copy_from_buffer(&proc->alloc, &object_offset, in binder_transaction_buffer_release()
2267 sizeof(object_offset))) in binder_transaction_buffer_release()
2269 object_offset, &object); in binder_transaction_buffer_release()
2272 debug_id, (u64)object_offset, buffer->data_size); in binder_transaction_buffer_release()
3207 binder_size_t object_offset; in binder_transaction() local
3210 &object_offset, in binder_transaction()
3213 sizeof(object_offset))) { in binder_transaction()
3220 object_offset, &object); in binder_transaction()
3221 if (object_size == 0 || object_offset < off_min) { in binder_transaction()
3224 (u64)object_offset, in binder_transaction()
3234 off_min = object_offset + object_size; in binder_transaction()
3246 object_offset, in binder_transaction()
3263 object_offset, in binder_transaction()
3274 binder_size_t fd_offset = object_offset + in binder_transaction()
3283 object_offset, in binder_transaction()
3380 object_offset, in binder_transaction()
3387 last_fixup_obj_off = object_offset; in binder_transaction()