Lines Matching defs:fda

2123 			struct binder_fd_array_object *fda;
2141 			fda = to_binder_fd_array_object(hdr);
2143 						     fda->parent,
2152 			fd_buf_size = sizeof(u32) * fda->num_fds;
2153 			if (fda->num_fds >= SIZE_MAX / sizeof(u32)) {
2155 				       debug_id, (u64)fda->num_fds);
2159 			    fda->parent_offset > parent->length - fd_buf_size) {
2162 				       debug_id, (u64)fda->num_fds);
2173 				fda->parent_offset;
2174 			for (fd_index = 0; fd_index < fda->num_fds;
2654 				     struct binder_fd_array_object *fda,
2668 	if (fda->num_fds == 0)
2671 	fd_buf_size = sizeof(u32) * fda->num_fds;
2672 	if (fda->num_fds >= SIZE_MAX / sizeof(u32)) {
2674 				  proc->pid, thread->pid, (u64)fda->num_fds);
2678 	    fda->parent_offset > parent->length - fd_buf_size) {
2681 				  proc->pid, thread->pid, (u64)fda->num_fds);
2692 		fda->parent_offset;
2694 				fda->parent_offset;
2702 	ret = binder_add_fixup(pf_head, fda_offset, 0, fda->num_fds * sizeof(u32));
2706 	for (fdi = 0; fdi < fda->num_fds; fdi++) {
3585 			struct binder_fd_array_object *fda =
3591 						    &ptr_object, fda->parent,
3606 						   fda->parent_offset,
3633 			ret = binder_translate_fd_array(&pf_head, fda,
3641 								  fda, sizeof(*fda));
3652 				fda->parent_offset + sizeof(u32) * fda->num_fds;