1571 	struct binder_proc *target_proc = t->to_proc;  in binder_free_transaction()  local
1573 	if (target_proc) {  in binder_free_transaction()
1574 		binder_inner_proc_lock(target_proc);  in binder_free_transaction()
1575 		target_proc->outstanding_txns--;  in binder_free_transaction()
1576 		if (target_proc->outstanding_txns < 0)  in binder_free_transaction()
1578 				__func__, target_proc->outstanding_txns);  in binder_free_transaction()
1579 		if (!target_proc->outstanding_txns && target_proc->is_frozen)  in binder_free_transaction()
1580 			wake_up_interruptible_all(&target_proc->freeze_wait);  in binder_free_transaction()
1583 		binder_inner_proc_unlock(target_proc);  in binder_free_transaction()
2135 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_binder()  local
2153 	if (security_binder_transfer_binder(proc->cred, target_proc->cred)) {  in binder_translate_binder()
2158 	ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_binder()
2187 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_handle()  local
2199 	if (security_binder_transfer_binder(proc->cred, target_proc->cred)) {  in binder_translate_handle()
2205 	if (node->proc == target_proc) {  in binder_translate_handle()
2233 		ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_handle()
2261 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_fd()  local
2287 	ret = security_binder_transfer_file(proc->cred, target_proc->cred, file);  in binder_translate_fd()
2642 	struct binder_proc *target_proc = t->to_proc;  in binder_fixup_parent()  local
2650 	parent = binder_validate_ptr(target_proc, b, &object, bp->parent,  in binder_fixup_parent()
2659 	if (!binder_validate_fixup(target_proc, b, off_start_offset,  in binder_fixup_parent()
2910 	struct binder_proc *target_proc = NULL;  in binder_transaction()  local
3001 		target_proc = target_thread->proc;  in binder_transaction()
3002 		target_proc->tmp_ref++;  in binder_transaction()
3020 						ref->node, &target_proc,  in binder_transaction()
3033 						target_node, &target_proc,  in binder_transaction()
3038 			if (target_node && target_proc->pid == proc->pid) {  in binder_transaction()
3058 		if (WARN_ON(proc == target_proc)) {  in binder_transaction()
3067 						target_proc->cred) < 0) {  in binder_transaction()
3122 				if (from && from->proc == target_proc) {  in binder_transaction()
3136 	e->to_proc = target_proc->pid;  in binder_transaction()
3170 			     target_proc->pid, target_thread->pid,  in binder_transaction()
3179 			     target_proc->pid, target_node->debug_id,  in binder_transaction()
3192 	t->to_proc = target_proc;  in binder_transaction()
3226 	t->buffer = binder_alloc_new_buf(&target_proc->alloc, tr->data_size,  in binder_transaction()
3254 		err = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3271 				&target_proc->alloc,  in binder_transaction()
3316 		if (binder_alloc_copy_from_buffer(&target_proc->alloc,  in binder_transaction()
3336 					&target_proc->alloc,  in binder_transaction()
3347 		object_size = binder_get_object(target_proc, user_buffer,  in binder_transaction()
3377 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3396 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3418 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3440 				binder_validate_ptr(target_proc, t->buffer,  in binder_transaction()
3453 			if (!binder_validate_fixup(target_proc, t->buffer,  in binder_transaction()
3488 				ret = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3543 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3568 				&target_proc->alloc,  in binder_transaction()
3580 	ret = binder_do_deferred_txn_copies(&target_proc->alloc, t->buffer,  in binder_transaction()
3598 		binder_inner_proc_lock(target_proc);  in binder_transaction()
3601 			binder_inner_proc_unlock(target_proc);  in binder_transaction()
3607 		target_proc->outstanding_txns++;  in binder_transaction()
3608 		binder_inner_proc_unlock(target_proc);  in binder_transaction()
3627 				target_proc, target_thread);  in binder_transaction()
3637 		return_error = binder_proc_transaction(t, target_proc, NULL);  in binder_transaction()
3652 	binder_proc_dec_tmpref(target_proc);  in binder_transaction()
3676 	binder_transaction_buffer_release(target_proc, NULL, t->buffer,  in binder_transaction()
3682 	binder_alloc_free_buf(&target_proc->alloc, t->buffer);  in binder_transaction()
3710 		     target_proc ? target_proc->pid : 0,  in binder_transaction()
3718 	if (target_proc)  in binder_transaction()
3719 		binder_proc_dec_tmpref(target_proc);  in binder_transaction()
5235 			       struct binder_proc *target_proc)  in binder_ioctl_freeze()  argument
5240 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5241 		target_proc->sync_recv = false;  in binder_ioctl_freeze()
5242 		target_proc->async_recv = false;  in binder_ioctl_freeze()
5243 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
5244 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5253 	binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5254 	target_proc->sync_recv = false;  in binder_ioctl_freeze()
5255 	target_proc->async_recv = false;  in binder_ioctl_freeze()
5256 	target_proc->is_frozen = true;  in binder_ioctl_freeze()
5257 	binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5261 			target_proc->freeze_wait,  in binder_ioctl_freeze()
5262 			(!target_proc->outstanding_txns),  in binder_ioctl_freeze()
5267 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5268 		if (binder_txns_pending_ilocked(target_proc))  in binder_ioctl_freeze()
5270 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5274 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5275 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
5276 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5285 	struct binder_proc *target_proc;  in binder_ioctl_get_freezer_info()  local
5293 	hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl_get_freezer_info()
5294 		if (target_proc->pid == info->pid) {  in binder_ioctl_get_freezer_info()
5296 			binder_inner_proc_lock(target_proc);  in binder_ioctl_get_freezer_info()
5297 			txns_pending = binder_txns_pending_ilocked(target_proc);  in binder_ioctl_get_freezer_info()
5298 			info->sync_recv |= target_proc->sync_recv |  in binder_ioctl_get_freezer_info()
5300 			info->async_recv |= target_proc->async_recv;  in binder_ioctl_get_freezer_info()
5301 			binder_inner_proc_unlock(target_proc);  in binder_ioctl_get_freezer_info()
5443 		struct binder_proc **target_procs = NULL, *target_proc;  in binder_ioctl()  local
5454 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
5455 			if (target_proc->pid == info.pid)  in binder_ioctl()
5475 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
5476 			if (target_proc->pid != info.pid)  in binder_ioctl()
5479 			binder_inner_proc_lock(target_proc);  in binder_ioctl()
5480 			target_proc->tmp_ref++;  in binder_ioctl()
5481 			binder_inner_proc_unlock(target_proc);  in binder_ioctl()
5483 			target_procs[i++] = target_proc;  in binder_ioctl()