Open Menu /

Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

drivers/android/binder.c binder_transaction() -> binder_translate_fd()

Type Parameter Key Value
PARAM_VALUE 2 t 4096-ptr_max
PARAM_VALUE 2 t->buffer 4096-ptr_max
PARAM_VALUE 2 t->buffer->allow_user_free 0
PARAM_VALUE 2 t->buffer->data_size 24-u64max
PARAM_VALUE 2 t->buffer->free 0
PARAM_VALUE 2 t->buffer->rb_node.__rb_parent_color 1
PARAM_VALUE 2 t->buffer->rb_node.rb_left 4096-ptr_max
PARAM_VALUE 2 t->buffer->rb_node.rb_right 4096-ptr_max
PARAM_VALUE 2 t->buffer->target_node 0,4096-ptr_max
PARAM_VALUE 2 t->buffer->target_node->proc 4096-ptr_max
PARAM_VALUE 2 t->buffer->transaction 4096-ptr_max
PARAM_VALUE 2 t->buffer->transaction->buffer 4096-ptr_max
PARAM_VALUE 2 t->buffer->transaction->fd_fixups.next 4096-ptr_max
PARAM_VALUE 2 t->buffer->transaction->fd_fixups.prev 4096-ptr_max
PARAM_VALUE 2 t->buffer->transaction->priority s32min-s32max
PARAM_VALUE 2 t->buffer->transaction->to_proc 4096-ptr_max
PARAM_VALUE 2 t->buffer->transaction->work.type 1
PARAM_VALUE 2 t->fd_fixups.next 4096-ptr_max
PARAM_VALUE 2 t->fd_fixups.next->next 4096-ptr_max
PARAM_VALUE 2 t->fd_fixups.prev 4096-ptr_max
PARAM_VALUE 2 t->fd_fixups.prev->next 4096-ptr_max
PARAM_VALUE 2 t->fd_fixups.prev->prev 4096-ptr_max
PARAM_VALUE 2 t->priority s32min-s32max
PARAM_VALUE 2 t->to_proc 4096-ptr_max
PARAM_VALUE 2 t->to_thread 0,4096-ptr_max
PARAM_VALUE 2 t->to_thread->proc 4096-ptr_max
PARAM_VALUE 2 t->work.type 1
PARAM_VALUE 3 thread 4096-ptr_max
PARAM_VALUE 3 thread->return_error.cmd 29185
PARAM_VALUE 4 in_reply_to 0,4096-ptr_max
PARAM_VALUE 4 in_reply_to->from 4096-ptr_max
PARAM_VALUE 4 in_reply_to->to_thread 4096-ptr_max
BUF_SIZE 2 t 232
BUF_SIZE 2 t->buffer->transaction 232
BUF_SIZE 2 t->from (-1),520
BUF_SIZE 3 thread (-1),520
BUF_SIZE 3 thread (-1),520
CAPPED_DATA 2 t->buffer->data_size 1
CAPPED_DATA 2 t->buffer->extra_buffers_size 1
CAPPED_DATA 2 t->buffer->offsets_size 1
CAPPED_DATA 2 t->to_proc 1
CAPPED_DATA 3 thread 1
CAPPED_DATA 4 in_reply_to 1
DATA_SOURCE 2 t r _kzalloc_noprof
DATA_SOURCE 3 thread $1
NOSPEC 2 t->buffer->data_size
USER_DATA 2 t->buffer->async_transaction 0-1
USER_DATA 2 t->buffer->clear_on_free 0-1
USER_DATA 2 t->buffer->data_size 24-u64max[c]
USER_DATA 2 t->buffer->extra_buffers_size 0-u64max[c]
USER_DATA 2 t->buffer->offsets_size 0-u64max[c]
USER_DATA 2 t->buffer->transaction->code 0-u32max
USER_DATA 2 t->buffer->transaction->flags 0-u32max
USER_DATA 2 t->buffer->transaction->is_async 0-1
USER_DATA 2 t->buffer->transaction->security_ctx 0-u64max[c]
USER_DATA 2 t->code 0-u32max
USER_DATA 2 t->flags 0-u32max
USER_DATA 2 t->is_async 0-1
USER_DATA 2 t->security_ctx 0-u64max[c]
UNITS 1 fd_offset unit_byte
UNITS 3 thread unit_byte

drivers/android/binder.c binder_translate_fd_array() -> binder_translate_fd()

Type Parameter Key Value
PARAM_VALUE 2 t 4096-ptr_max
PARAM_VALUE 2 t->buffer 4096-ptr_max
PARAM_VALUE 3 thread 4096-ptr_max
DATA_SOURCE 2 t $5
DATA_SOURCE 3 thread $6
DATA_SOURCE 4 in_reply_to $7
USER_DATA 0 fd 0-u32max
UNITS 1 fd_offset unit_byte