1953 		last_min_offset = last_bbo->parent_offset + sizeof(uintptr_t);  in binder_validate_fixup()
2159 			    fda->parent_offset > parent->length - fd_buf_size) {  in binder_transaction_buffer_release()
2173 				fda->parent_offset;  in binder_transaction_buffer_release()
2678 	    fda->parent_offset > parent->length - fd_buf_size) {  in binder_translate_fd_array()
2692 		fda->parent_offset;  in binder_translate_fd_array()
2694 				fda->parent_offset;  in binder_translate_fd_array()
2736 	binder_size_t parent_offset;  in binder_fixup_parent()  local
2742 				     off_start_offset, &parent_offset,  in binder_fixup_parent()
2751 				   parent_offset, bp->parent_offset,  in binder_fixup_parent()
2760 	    bp->parent_offset > parent->length - sizeof(binder_uintptr_t)) {  in binder_fixup_parent()
2767 	buffer_offset = bp->parent_offset + parent->buffer - b->user_data;  in binder_fixup_parent()
3580 			binder_size_t parent_offset;  in binder_transaction()  local
3591 						    &parent_offset,  in binder_transaction()
3603 						   parent_offset,  in binder_transaction()
3604 						   fda->parent_offset,  in binder_transaction()
3620 						  parent_offset, &user_object);  in binder_transaction()
3648 			last_fixup_obj_off = parent_offset;  in binder_transaction()
3650 				fda->parent_offset + sizeof(u32) * fda->num_fds;  in binder_transaction()