2166 		last_min_offset = last_bbo->parent_offset + sizeof(uintptr_t);  in binder_validate_fixup()
2371 			    fda->parent_offset > parent->length - fd_buf_size) {  in binder_transaction_buffer_release()
2386 			    fda->parent_offset;  in binder_transaction_buffer_release()
2617 	    fda->parent_offset > parent->length - fd_buf_size) {  in binder_translate_fd_array()
2631 		fda->parent_offset;  in binder_translate_fd_array()
2668 	binder_size_t parent_offset;  in binder_fixup_parent()  local
2674 				     off_start_offset, &parent_offset,  in binder_fixup_parent()
2683 				   parent_offset, bp->parent_offset,  in binder_fixup_parent()
2692 	    bp->parent_offset > parent->length - sizeof(binder_uintptr_t)) {  in binder_fixup_parent()
2698 	buffer_offset = bp->parent_offset +  in binder_fixup_parent()
3293 			binder_size_t parent_offset;  in binder_transaction()  local
3302 						    &parent_offset,  in binder_transaction()
3314 						   parent_offset,  in binder_transaction()
3315 						   fda->parent_offset,  in binder_transaction()
3333 			last_fixup_obj_off = parent_offset;  in binder_transaction()
3335 				fda->parent_offset + sizeof(u32) * fda->num_fds;  in binder_transaction()