1570 	struct binder_proc *target_proc = t->to_proc;  in binder_free_transaction()  local
1572 	if (target_proc) {  in binder_free_transaction()
1573 		binder_inner_proc_lock(target_proc);  in binder_free_transaction()
1574 		target_proc->outstanding_txns--;  in binder_free_transaction()
1575 		if (target_proc->outstanding_txns < 0)  in binder_free_transaction()
1577 				__func__, target_proc->outstanding_txns);  in binder_free_transaction()
1578 		if (!target_proc->outstanding_txns && target_proc->is_frozen)  in binder_free_transaction()
1579 			wake_up_interruptible_all(&target_proc->freeze_wait);  in binder_free_transaction()
1582 		binder_inner_proc_unlock(target_proc);  in binder_free_transaction()
2120 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_binder()  local
2138 	if (security_binder_transfer_binder(proc->cred, target_proc->cred)) {  in binder_translate_binder()
2143 	ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_binder()
2172 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_handle()  local
2184 	if (security_binder_transfer_binder(proc->cred, target_proc->cred)) {  in binder_translate_handle()
2190 	if (node->proc == target_proc) {  in binder_translate_handle()
2218 		ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_handle()
2246 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_fd()  local
2272 	ret = security_binder_transfer_file(proc->cred, target_proc->cred, file);  in binder_translate_fd()
2627 	struct binder_proc *target_proc = t->to_proc;  in binder_fixup_parent()  local
2635 	parent = binder_validate_ptr(target_proc, b, &object, bp->parent,  in binder_fixup_parent()
2644 	if (!binder_validate_fixup(target_proc, b, off_start_offset,  in binder_fixup_parent()
2887 	struct binder_proc *target_proc = NULL;  in binder_transaction()  local
2977 		target_proc = target_thread->proc;  in binder_transaction()
2978 		target_proc->tmp_ref++;  in binder_transaction()
2996 						ref->node, &target_proc,  in binder_transaction()
3009 						target_node, &target_proc,  in binder_transaction()
3014 			if (target_node && target_proc->pid == proc->pid) {  in binder_transaction()
3034 		if (WARN_ON(proc == target_proc)) {  in binder_transaction()
3043 						target_proc->cred) < 0) {  in binder_transaction()
3098 				if (from && from->proc == target_proc) {  in binder_transaction()
3112 	e->to_proc = target_proc->pid;  in binder_transaction()
3145 			     target_proc->pid, target_thread->pid,  in binder_transaction()
3154 			     target_proc->pid, target_node->debug_id,  in binder_transaction()
3165 	t->to_proc = target_proc;  in binder_transaction()
3199 	t->buffer = binder_alloc_new_buf(&target_proc->alloc, tr->data_size,  in binder_transaction()
3227 		err = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3244 				&target_proc->alloc,  in binder_transaction()
3289 		if (binder_alloc_copy_from_buffer(&target_proc->alloc,  in binder_transaction()
3309 					&target_proc->alloc,  in binder_transaction()
3320 		object_size = binder_get_object(target_proc, user_buffer,  in binder_transaction()
3350 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3369 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3391 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3413 				binder_validate_ptr(target_proc, t->buffer,  in binder_transaction()
3426 			if (!binder_validate_fixup(target_proc, t->buffer,  in binder_transaction()
3461 				ret = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3516 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3541 				&target_proc->alloc,  in binder_transaction()
3553 	ret = binder_do_deferred_txn_copies(&target_proc->alloc, t->buffer,  in binder_transaction()
3571 		binder_inner_proc_lock(target_proc);  in binder_transaction()
3574 			binder_inner_proc_unlock(target_proc);  in binder_transaction()
3580 		target_proc->outstanding_txns++;  in binder_transaction()
3581 		binder_inner_proc_unlock(target_proc);  in binder_transaction()
3600 				target_proc, target_thread);  in binder_transaction()
3611 		return_error = binder_proc_transaction(t, target_proc, NULL);  in binder_transaction()
3617 	binder_proc_dec_tmpref(target_proc);  in binder_transaction()
3641 	binder_transaction_buffer_release(target_proc, NULL, t->buffer,  in binder_transaction()
3647 	binder_alloc_free_buf(&target_proc->alloc, t->buffer);  in binder_transaction()
3675 		     target_proc ? target_proc->pid : 0,  in binder_transaction()
3683 	if (target_proc)  in binder_transaction()
3684 		binder_proc_dec_tmpref(target_proc);  in binder_transaction()
5201 			       struct binder_proc *target_proc)  in binder_ioctl_freeze()  argument
5206 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5207 		target_proc->sync_recv = false;  in binder_ioctl_freeze()
5208 		target_proc->async_recv = false;  in binder_ioctl_freeze()
5209 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
5210 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5219 	binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5220 	target_proc->sync_recv = false;  in binder_ioctl_freeze()
5221 	target_proc->async_recv = false;  in binder_ioctl_freeze()
5222 	target_proc->is_frozen = true;  in binder_ioctl_freeze()
5223 	binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5227 			target_proc->freeze_wait,  in binder_ioctl_freeze()
5228 			(!target_proc->outstanding_txns),  in binder_ioctl_freeze()
5233 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5234 		if (binder_txns_pending_ilocked(target_proc))  in binder_ioctl_freeze()
5236 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5240 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5241 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
5242 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5251 	struct binder_proc *target_proc;  in binder_ioctl_get_freezer_info()  local
5259 	hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl_get_freezer_info()
5260 		if (target_proc->pid == info->pid) {  in binder_ioctl_get_freezer_info()
5262 			binder_inner_proc_lock(target_proc);  in binder_ioctl_get_freezer_info()
5263 			txns_pending = binder_txns_pending_ilocked(target_proc);  in binder_ioctl_get_freezer_info()
5264 			info->sync_recv |= target_proc->sync_recv |  in binder_ioctl_get_freezer_info()
5266 			info->async_recv |= target_proc->async_recv;  in binder_ioctl_get_freezer_info()
5267 			binder_inner_proc_unlock(target_proc);  in binder_ioctl_get_freezer_info()
5414 		struct binder_proc **target_procs = NULL, *target_proc;  in binder_ioctl()  local
5425 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
5426 			if (target_proc->pid == info.pid)  in binder_ioctl()
5446 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
5447 			if (target_proc->pid != info.pid)  in binder_ioctl()
5450 			binder_inner_proc_lock(target_proc);  in binder_ioctl()
5451 			target_proc->tmp_ref++;  in binder_ioctl()
5452 			binder_inner_proc_unlock(target_proc);  in binder_ioctl()
5454 			target_procs[i++] = target_proc;  in binder_ioctl()