Lines Matching refs:fda
2077 struct binder_fd_array_object *fda;
2095 fda = to_binder_fd_array_object(hdr);
2097 fda->parent,
2106 fd_buf_size = sizeof(u32) * fda->num_fds;
2107 if (fda->num_fds >= SIZE_MAX / sizeof(u32)) {
2109 debug_id, (u64)fda->num_fds);
2113 fda->parent_offset > parent->length - fd_buf_size) {
2116 debug_id, (u64)fda->num_fds);
2128 fda->parent_offset;
2129 for (fd_index = 0; fd_index < fda->num_fds;
2609 struct binder_fd_array_object *fda,
2623 if (fda->num_fds == 0)
2626 fd_buf_size = sizeof(u32) * fda->num_fds;
2627 if (fda->num_fds >= SIZE_MAX / sizeof(u32)) {
2629 proc->pid, thread->pid, (u64)fda->num_fds);
2633 fda->parent_offset > parent->length - fd_buf_size) {
2636 proc->pid, thread->pid, (u64)fda->num_fds);
2647 fda->parent_offset;
2649 fda->parent_offset;
2657 ret = binder_add_fixup(pf_head, fda_offset, 0, fda->num_fds * sizeof(u32));
2661 for (fdi = 0; fdi < fda->num_fds; fdi++) {
3493 struct binder_fd_array_object *fda =
3499 &ptr_object, fda->parent,
3514 fda->parent_offset,
3541 ret = binder_translate_fd_array(&pf_head, fda,
3549 fda, sizeof(*fda));
3560 fda->parent_offset + sizeof(u32) * fda->num_fds;