1922 	struct binder_proc *target_proc = t->to_proc;  in binder_free_transaction()  local
1924 	if (target_proc) {  in binder_free_transaction()
1925 		binder_inner_proc_lock(target_proc);  in binder_free_transaction()
1928 		binder_inner_proc_unlock(target_proc);  in binder_free_transaction()
2442 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_binder()  local
2460 	if (security_binder_transfer_binder(proc->tsk, target_proc->tsk)) {  in binder_translate_binder()
2465 	ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_binder()
2494 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_handle()  local
2506 	if (security_binder_transfer_binder(proc->tsk, target_proc->tsk)) {  in binder_translate_handle()
2512 	if (node->proc == target_proc) {  in binder_translate_handle()
2540 		ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_handle()
2568 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_fd()  local
2594 	ret = security_binder_transfer_file(proc->tsk, target_proc->tsk, file);  in binder_translate_fd()
2634 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_fd_array()  local
2668 		ret = binder_alloc_copy_from_buffer(&target_proc->alloc,  in binder_translate_fd_array()
2691 	struct binder_proc *target_proc = t->to_proc;  in binder_fixup_parent()  local
2699 	parent = binder_validate_ptr(target_proc, b, &object, bp->parent,  in binder_fixup_parent()
2708 	if (!binder_validate_fixup(target_proc, b, off_start_offset,  in binder_fixup_parent()
2726 	if (binder_alloc_copy_to_buffer(&target_proc->alloc, b, buffer_offset,  in binder_fixup_parent()
2854 	struct binder_proc *target_proc = NULL;  in binder_transaction()  local
2932 		target_proc = target_thread->proc;  in binder_transaction()
2933 		target_proc->tmp_ref++;  in binder_transaction()
2951 						ref->node, &target_proc,  in binder_transaction()
2964 						target_node, &target_proc,  in binder_transaction()
2969 			if (target_node && target_proc->pid == proc->pid) {  in binder_transaction()
2988 						target_proc->tsk) < 0) {  in binder_transaction()
3041 				if (from && from->proc == target_proc) {  in binder_transaction()
3055 	e->to_proc = target_proc->pid;  in binder_transaction()
3084 			     target_proc->pid, target_thread->pid,  in binder_transaction()
3093 			     target_proc->pid, target_node->debug_id,  in binder_transaction()
3104 	t->to_proc = target_proc;  in binder_transaction()
3135 	t->buffer = binder_alloc_new_buf(&target_proc->alloc, tr->data_size,  in binder_transaction()
3157 		err = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3173 				&target_proc->alloc,  in binder_transaction()
3186 				&target_proc->alloc,  in binder_transaction()
3230 		if (binder_alloc_copy_from_buffer(&target_proc->alloc,  in binder_transaction()
3240 		object_size = binder_get_object(target_proc, t->buffer,  in binder_transaction()
3265 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3282 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3302 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3320 				binder_validate_ptr(target_proc, t->buffer,  in binder_transaction()
3333 			if (!binder_validate_fixup(target_proc, t->buffer,  in binder_transaction()
3373 						&target_proc->alloc,  in binder_transaction()
3399 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3425 		binder_inner_proc_lock(target_proc);  in binder_transaction()
3427 			binder_inner_proc_unlock(target_proc);  in binder_transaction()
3433 		binder_inner_proc_unlock(target_proc);  in binder_transaction()
3451 		if (!binder_proc_transaction(t, target_proc, target_thread)) {  in binder_transaction()
3461 		if (!binder_proc_transaction(t, target_proc, NULL))  in binder_transaction()
3466 	binder_proc_dec_tmpref(target_proc);  in binder_transaction()
3488 	binder_transaction_buffer_release(target_proc, t->buffer,  in binder_transaction()
3494 	binder_alloc_free_buf(&target_proc->alloc, t->buffer);  in binder_transaction()
3513 	if (target_proc)  in binder_transaction()
3514 		binder_proc_dec_tmpref(target_proc);  in binder_transaction()