1772 	binder_size_t object_offset;  in binder_validate_ptr()  local
1779 	if (binder_alloc_copy_from_buffer(&proc->alloc, &object_offset,  in binder_validate_ptr()
1781 					  sizeof(object_offset)))  in binder_validate_ptr()
1783 	object_size = binder_get_object(proc, NULL, b, object_offset, object);  in binder_validate_ptr()
1787 		*object_offsetp = object_offset;  in binder_validate_ptr()
1960 		binder_size_t object_offset;  in binder_transaction_buffer_release()  local
1962 		if (!binder_alloc_copy_from_buffer(&proc->alloc, &object_offset,  in binder_transaction_buffer_release()
1964 						   sizeof(object_offset)))  in binder_transaction_buffer_release()
1966 							object_offset, &object);  in binder_transaction_buffer_release()
1969 			       debug_id, (u64)object_offset, buffer->data_size);  in binder_transaction_buffer_release()
3313 		binder_size_t object_offset;  in binder_transaction()  local
3317 						  &object_offset,  in binder_transaction()
3320 						  sizeof(object_offset))) {  in binder_transaction()
3333 		copy_size = object_offset - user_offset;  in binder_transaction()
3334 		if (copy_size && (user_offset > object_offset ||  in binder_transaction()
3348 				t->buffer, object_offset, &object);  in binder_transaction()
3349 		if (object_size == 0 || object_offset < off_min) {  in binder_transaction()
3352 					  (u64)object_offset,  in binder_transaction()
3364 		user_offset = object_offset + object_size;  in binder_transaction()
3367 		off_min = object_offset + object_size;  in binder_transaction()
3379 							object_offset,  in binder_transaction()
3398 							object_offset,  in binder_transaction()
3411 			binder_size_t fd_offset = object_offset +  in binder_transaction()
3420 							object_offset,  in binder_transaction()
3490 								  object_offset,  in binder_transaction()
3545 							object_offset,  in binder_transaction()
3554 			last_fixup_obj_off = object_offset;  in binder_transaction()