1505 	struct binder_proc *target_proc = t->to_proc;  in binder_free_transaction()  local
1507 	if (target_proc) {  in binder_free_transaction()
1508 		binder_inner_proc_lock(target_proc);  in binder_free_transaction()
1509 		target_proc->outstanding_txns--;  in binder_free_transaction()
1510 		if (target_proc->outstanding_txns < 0)  in binder_free_transaction()
1512 				__func__, target_proc->outstanding_txns);  in binder_free_transaction()
1513 		if (!target_proc->outstanding_txns && target_proc->is_frozen)  in binder_free_transaction()
1514 			wake_up_interruptible_all(&target_proc->freeze_wait);  in binder_free_transaction()
1517 		binder_inner_proc_unlock(target_proc);  in binder_free_transaction()
2041 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_binder()  local
2059 	if (security_binder_transfer_binder(proc->tsk, target_proc->tsk)) {  in binder_translate_binder()
2064 	ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_binder()
2093 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_handle()  local
2105 	if (security_binder_transfer_binder(proc->tsk, target_proc->tsk)) {  in binder_translate_handle()
2111 	if (node->proc == target_proc) {  in binder_translate_handle()
2139 		ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_handle()
2167 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_fd()  local
2193 	ret = security_binder_transfer_file(proc->tsk, target_proc->tsk, file);  in binder_translate_fd()
2233 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_fd_array()  local
2267 		ret = binder_alloc_copy_from_buffer(&target_proc->alloc,  in binder_translate_fd_array()
2290 	struct binder_proc *target_proc = t->to_proc;  in binder_fixup_parent()  local
2298 	parent = binder_validate_ptr(target_proc, b, &object, bp->parent,  in binder_fixup_parent()
2307 	if (!binder_validate_fixup(target_proc, b, off_start_offset,  in binder_fixup_parent()
2325 	if (binder_alloc_copy_to_buffer(&target_proc->alloc, b, buffer_offset,  in binder_fixup_parent()
2459 	struct binder_proc *target_proc = NULL;  in binder_transaction()  local
2537 		target_proc = target_thread->proc;  in binder_transaction()
2538 		target_proc->tmp_ref++;  in binder_transaction()
2556 						ref->node, &target_proc,  in binder_transaction()
2569 						target_node, &target_proc,  in binder_transaction()
2574 			if (target_node && target_proc->pid == proc->pid) {  in binder_transaction()
2592 		if (WARN_ON(proc == target_proc)) {  in binder_transaction()
2599 						target_proc->tsk) < 0) {  in binder_transaction()
2652 				if (from && from->proc == target_proc) {  in binder_transaction()
2666 	e->to_proc = target_proc->pid;  in binder_transaction()
2695 			     target_proc->pid, target_thread->pid,  in binder_transaction()
2704 			     target_proc->pid, target_node->debug_id,  in binder_transaction()
2715 	t->to_proc = target_proc;  in binder_transaction()
2755 	t->buffer = binder_alloc_new_buf(&target_proc->alloc, tr->data_size,  in binder_transaction()
2777 		err = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
2794 				&target_proc->alloc,  in binder_transaction()
2807 				&target_proc->alloc,  in binder_transaction()
2851 		if (binder_alloc_copy_from_buffer(&target_proc->alloc,  in binder_transaction()
2861 		object_size = binder_get_object(target_proc, t->buffer,  in binder_transaction()
2886 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
2903 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
2923 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
2941 				binder_validate_ptr(target_proc, t->buffer,  in binder_transaction()
2954 			if (!binder_validate_fixup(target_proc, t->buffer,  in binder_transaction()
2994 						&target_proc->alloc,  in binder_transaction()
3020 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3049 		binder_inner_proc_lock(target_proc);  in binder_transaction()
3052 			binder_inner_proc_unlock(target_proc);  in binder_transaction()
3058 		target_proc->outstanding_txns++;  in binder_transaction()
3059 		binder_inner_proc_unlock(target_proc);  in binder_transaction()
3078 				target_proc, target_thread);  in binder_transaction()
3089 		return_error = binder_proc_transaction(t, target_proc, NULL);  in binder_transaction()
3095 	binder_proc_dec_tmpref(target_proc);  in binder_transaction()
3116 	binder_transaction_buffer_release(target_proc, NULL, t->buffer,  in binder_transaction()
3122 	binder_alloc_free_buf(&target_proc->alloc, t->buffer);  in binder_transaction()
3143 	if (target_proc)  in binder_transaction()
3144 		binder_proc_dec_tmpref(target_proc);  in binder_transaction()
4678 			       struct binder_proc *target_proc)  in binder_ioctl_freeze()  argument
4683 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
4684 		target_proc->sync_recv = false;  in binder_ioctl_freeze()
4685 		target_proc->async_recv = false;  in binder_ioctl_freeze()
4686 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
4687 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
4696 	binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
4697 	target_proc->sync_recv = false;  in binder_ioctl_freeze()
4698 	target_proc->async_recv = false;  in binder_ioctl_freeze()
4699 	target_proc->is_frozen = true;  in binder_ioctl_freeze()
4700 	binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
4704 			target_proc->freeze_wait,  in binder_ioctl_freeze()
4705 			(!target_proc->outstanding_txns),  in binder_ioctl_freeze()
4710 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
4711 		if (binder_txns_pending_ilocked(target_proc))  in binder_ioctl_freeze()
4713 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
4717 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
4718 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
4719 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
4728 	struct binder_proc *target_proc;  in binder_ioctl_get_freezer_info()  local
4736 	hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl_get_freezer_info()
4737 		if (target_proc->pid == info->pid) {  in binder_ioctl_get_freezer_info()
4739 			binder_inner_proc_lock(target_proc);  in binder_ioctl_get_freezer_info()
4740 			txns_pending = binder_txns_pending_ilocked(target_proc);  in binder_ioctl_get_freezer_info()
4741 			info->sync_recv |= target_proc->sync_recv |  in binder_ioctl_get_freezer_info()
4743 			info->async_recv |= target_proc->async_recv;  in binder_ioctl_get_freezer_info()
4744 			binder_inner_proc_unlock(target_proc);  in binder_ioctl_get_freezer_info()
4875 		struct binder_proc **target_procs = NULL, *target_proc;  in binder_ioctl()  local
4886 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
4887 			if (target_proc->pid == info.pid)  in binder_ioctl()
4907 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
4908 			if (target_proc->pid != info.pid)  in binder_ioctl()
4911 			binder_inner_proc_lock(target_proc);  in binder_ioctl()
4912 			target_proc->tmp_ref++;  in binder_ioctl()
4913 			binder_inner_proc_unlock(target_proc);  in binder_ioctl()
4915 			target_procs[i++] = target_proc;  in binder_ioctl()