Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/android/binder_alloc.c binder_delete_free_buffer() -> binder_buffer_prev()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | buffer | 4096-ptr_max |
| DATA_SOURCE | 0 | buffer | $1 |
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | buffer->async_transaction | 0-1 |
| USER_DATA | 0 | buffer->data_size | 0-u64max[c] |
| USER_DATA | 0 | buffer->extra_buffers_size | 0-u64max[c] |
| USER_DATA | 0 | buffer->offsets_size | 0-u64max[c] |
| USER_DATA | 0 | buffer->user_data | 1-s32max[c] |
| LOCK2 | &alloc->mutex | ||
| TYPE_LOCK | (struct binder_alloc)->mutex |
drivers/android/binder_alloc.c binder_free_buf_locked() -> binder_buffer_prev()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | buffer | 4096-ptr_max |
| CAPPED_DATA | 0 | buffer->user_data | 1 |
| CAPPED_DATA | 0 | &buffer->rb_node | 1 |
| DATA_SOURCE | 0 | buffer | $1 |
| TASK_NOT_RUNNING | |||
| USER_DATA | 0 | buffer->async_transaction | 0-1 |
| USER_DATA | 0 | buffer->data_size | 0-u64max[c] |
| USER_DATA | 0 | buffer->extra_buffers_size | 0-u64max[c] |
| USER_DATA | 0 | buffer->offsets_size | 0-u64max[c] |
| USER_DATA | 0 | buffer->user_data | 0-s32max[c] |
| LOCK2 | &alloc->mutex | ||
| TYPE_LOCK | (struct binder_alloc)->mutex |