Lines Matching refs:num_fds
2060 fd_buf_size = sizeof(u32) * fda->num_fds; in binder_transaction_buffer_release()
2061 if (fda->num_fds >= SIZE_MAX / sizeof(u32)) { in binder_transaction_buffer_release()
2063 debug_id, (u64)fda->num_fds); in binder_transaction_buffer_release()
2070 debug_id, (u64)fda->num_fds); in binder_transaction_buffer_release()
2083 for (fd_index = 0; fd_index < fda->num_fds; in binder_transaction_buffer_release()
2562 if (fda->num_fds == 0) in binder_translate_fd_array()
2565 fd_buf_size = sizeof(u32) * fda->num_fds; in binder_translate_fd_array()
2566 if (fda->num_fds >= SIZE_MAX / sizeof(u32)) { in binder_translate_fd_array()
2568 proc->pid, thread->pid, (u64)fda->num_fds); in binder_translate_fd_array()
2575 proc->pid, thread->pid, (u64)fda->num_fds); in binder_translate_fd_array()
2596 ret = binder_add_fixup(pf_head, fda_offset, 0, fda->num_fds * sizeof(u32)); in binder_translate_fd_array()
2600 for (fdi = 0; fdi < fda->num_fds; fdi++) { in binder_translate_fd_array()
3475 fda->parent_offset + sizeof(u32) * fda->num_fds; in binder_transaction()