1861 		last_min_offset = last_bbo->parent_offset + sizeof(uintptr_t);  in binder_validate_fixup()
2067 			    fda->parent_offset > parent->length - fd_buf_size) {  in binder_transaction_buffer_release()
2082 			    fda->parent_offset;  in binder_transaction_buffer_release()
2587 	    fda->parent_offset > parent->length - fd_buf_size) {  in binder_translate_fd_array()
2601 		fda->parent_offset;  in binder_translate_fd_array()
2603 				fda->parent_offset;  in binder_translate_fd_array()
2645 	binder_size_t parent_offset;  in binder_fixup_parent()  local
2651 				     off_start_offset, &parent_offset,  in binder_fixup_parent()
2660 				   parent_offset, bp->parent_offset,  in binder_fixup_parent()
2669 	    bp->parent_offset > parent->length - sizeof(binder_uintptr_t)) {  in binder_fixup_parent()
2675 	buffer_offset = bp->parent_offset +  in binder_fixup_parent()
3432 			binder_size_t parent_offset;  in binder_transaction()  local
3443 						    &parent_offset,  in binder_transaction()
3455 						   parent_offset,  in binder_transaction()
3456 						   fda->parent_offset,  in binder_transaction()
3472 						  parent_offset, &user_object);  in binder_transaction()
3500 			last_fixup_obj_off = parent_offset;  in binder_transaction()
3502 				fda->parent_offset + sizeof(u32) * fda->num_fds;  in binder_transaction()