634 						   binder_uintptr_t ptr)  in binder_get_node_ilocked()
662 					   binder_uintptr_t ptr)  in binder_get_node()
680 	binder_uintptr_t ptr = fp ? fp->binder : 0;  in binder_init_node_ilocked()
681 	binder_uintptr_t cookie = fp ? fp->cookie : 0;  in binder_init_node_ilocked()
2316 	if (parent->length < sizeof(binder_uintptr_t) ||  in binder_fixup_parent()
2317 	    bp->parent_offset > parent->length - sizeof(binder_uintptr_t)) {  in binder_fixup_parent()
3231 			binder_uintptr_t binder_buffer, size_t size,  in binder_thread_write()
3325 			binder_uintptr_t node_ptr;  in binder_thread_write()
3326 			binder_uintptr_t cookie;  in binder_thread_write()
3330 			if (get_user(node_ptr, (binder_uintptr_t __user *)ptr))  in binder_thread_write()
3332 			ptr += sizeof(binder_uintptr_t);  in binder_thread_write()
3333 			if (get_user(cookie, (binder_uintptr_t __user *)ptr))  in binder_thread_write()
3335 			ptr += sizeof(binder_uintptr_t);  in binder_thread_write()
3399 			binder_uintptr_t data_ptr;  in binder_thread_write()
3402 			if (get_user(data_ptr, (binder_uintptr_t __user *)ptr))  in binder_thread_write()
3404 			ptr += sizeof(binder_uintptr_t);  in binder_thread_write()
3495 			binder_uintptr_t cookie;  in binder_thread_write()
3502 			if (get_user(cookie, (binder_uintptr_t __user *)ptr))  in binder_thread_write()
3504 			ptr += sizeof(binder_uintptr_t);  in binder_thread_write()
3618 			binder_uintptr_t cookie;  in binder_thread_write()
3621 			if (get_user(cookie, (binder_uintptr_t __user *)ptr))  in binder_thread_write()
3690 			       binder_uintptr_t node_ptr,  in binder_put_node_cmd()
3691 			       binder_uintptr_t node_cookie,  in binder_put_node_cmd()
3701 	if (put_user(node_ptr, (binder_uintptr_t __user *)ptr))  in binder_put_node_cmd()
3703 	ptr += sizeof(binder_uintptr_t);  in binder_put_node_cmd()
3705 	if (put_user(node_cookie, (binder_uintptr_t __user *)ptr))  in binder_put_node_cmd()
3707 	ptr += sizeof(binder_uintptr_t);  in binder_put_node_cmd()
3817 			      binder_uintptr_t binder_buffer, size_t size,  in binder_thread_read()
3940 			binder_uintptr_t node_ptr = node->ptr;  in binder_thread_read()
3941 			binder_uintptr_t node_cookie = node->cookie;  in binder_thread_read()
4029 			binder_uintptr_t cookie;  in binder_thread_read()
4058 				     (binder_uintptr_t __user *)ptr))  in binder_thread_read()
4060 			ptr += sizeof(binder_uintptr_t);  in binder_thread_read()
4640 	binder_uintptr_t ptr = info->ptr;  in binder_ioctl_get_node_debug_info()