Documented in 1 files:
Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/android/binder.c binder_inc_ref_for_node() -> binder_inc_ref_olocked()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ref | 4096-ptr_max |
| PARAM_VALUE | 0 | ref->node | 4096-ptr_max |
| PARAM_VALUE | 2 | target_list | 0,4096-ptr_max |
| BUF_SIZE | 0 | ref | 112,u64max |
| BUF_SIZE | 0 | ref | 112,u64max |
| BUF_SIZE | 0 | ref->node | (-1),200 |
| DATA_SOURCE | 1 | strong | $2 |
| DATA_SOURCE | 2 | target_list | $3 |
| PREEMPT_ADD | <- disables preempt | ||
| USER_DATA | 1 | strong | 0[c] |
| LOCK2 | &proc->outer_lock | ||
| HALF_LOCKED2 | &context->context_mgr_node_lock | ||
| TYPE_LOCK | (struct binder_proc)->outer_lock |
drivers/android/binder.c binder_update_ref_for_handle() -> binder_inc_ref_olocked()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | ref | 4096-ptr_max |
| PARAM_VALUE | 2 | target_list | 0 |
| CAPPED_DATA | 0 | ref->data.desc | 1 |
| DATA_SOURCE | 0 | ref | r binder_get_ref_olocked |
| DATA_SOURCE | 1 | strong | $3 |
| PREEMPT_ADD | <- disables preempt | ||
| USER_DATA | 0 | ref->data.desc | 0-u32max[c] |
| USER_DATA | 1 | strong | 0[c] |
| LOCK2 | &proc->outer_lock | ||
| TYPE_LOCK | (struct binder_proc)->outer_lock |