Lines Matching refs:num_fds

2070 			fd_buf_size = sizeof(u32) * fda->num_fds;  in binder_transaction_buffer_release()
2071 			if (fda->num_fds >= SIZE_MAX / sizeof(u32)) {  in binder_transaction_buffer_release()
2073 				       debug_id, (u64)fda->num_fds);  in binder_transaction_buffer_release()
2080 				       debug_id, (u64)fda->num_fds);  in binder_transaction_buffer_release()
2093 			for (fd_index = 0; fd_index < fda->num_fds;  in binder_transaction_buffer_release()
2587 	if (fda->num_fds == 0)  in binder_translate_fd_array()
2590 	fd_buf_size = sizeof(u32) * fda->num_fds;  in binder_translate_fd_array()
2591 	if (fda->num_fds >= SIZE_MAX / sizeof(u32)) {  in binder_translate_fd_array()
2593 				  proc->pid, thread->pid, (u64)fda->num_fds);  in binder_translate_fd_array()
2600 				  proc->pid, thread->pid, (u64)fda->num_fds);  in binder_translate_fd_array()
2621 	ret = binder_add_fixup(pf_head, fda_offset, 0, fda->num_fds * sizeof(u32));  in binder_translate_fd_array()
2625 	for (fdi = 0; fdi < fda->num_fds; fdi++) {  in binder_translate_fd_array()
3513 				fda->parent_offset + sizeof(u32) * fda->num_fds;  in binder_transaction()