Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/android/binder.c binder_cleanup_transaction() -> binder_free_transaction()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | t | 4096-ptr_max |
| PARAM_VALUE | 0 | t->buffer | 4096-ptr_max |
| DATA_SOURCE | 0 | t | $0 |
| STR_LEN | 0 | t | 13,15-16,19 |
| STR_LEN | 0 | t | 13,15-16,19 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
drivers/android/binder.c binder_send_failed_reply() -> binder_free_transaction()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | t | 4096-ptr_max |
| PARAM_VALUE | 0 | t->from | 0 |
| CAPPED_DATA | 0 | t | 1 |
| DATA_SOURCE | 0 | t | $0 [m] |
| STR_LEN | 0 | t | (-1),13,15-16,19 |
| STR_LEN | 0 | t | (-1),13,15-16,19 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &t->lock |
drivers/android/binder.c binder_send_failed_reply() -> binder_free_transaction()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | t | 4096-ptr_max |
| PARAM_VALUE | 0 | t->from | 0 |
| DATA_SOURCE | 0 | t | $0 [m] |
| STR_LEN | 0 | t | (-1),13,15-16,19 |
| STR_LEN | 0 | t | (-1),13,15-16,19 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &t->lock |
drivers/android/binder.c binder_thread_read() -> binder_free_transaction()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | t | 4096-ptr_max |
| PARAM_VALUE | 0 | t->buffer | 4096-ptr_max |
| PARAM_VALUE | 0 | t->buffer->allow_user_free | 1 |
| PARAM_VALUE | 0 | t->buffer->target_node | 0,4096-ptr_max |
| PARAM_VALUE | 0 | t->from | 0,4096-ptr_max |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |