Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/android/binder.c binder_cleanup_ref_olocked() -> _binder_node_inner_unlock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | line | 1203 |
| PREEMPT_ADD | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | &proc->outer_lock | ||
| LOCK2 | 0 | &node->lock | |
| TYPE_LOCK | (struct binder_node)->lock | ||
| TYPE_LOCK | (struct binder_proc)->outer_lock |
drivers/android/binder.c binder_dec_node() -> _binder_node_inner_unlock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | line | 938 |
| DATA_SOURCE | 0 | node | $0 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | 0 | &node->lock | |
| HALF_LOCKED2 | &proc->outer_lock | ||
| TYPE_LOCK | (struct binder_node)->lock |
drivers/android/binder.c binder_dec_node_tmpref() -> _binder_node_inner_unlock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->tmp_refs | 0-s32max |
| PARAM_VALUE | 1 | line | 1009 |
| BUF_SIZE | 0 | node | (-1),200 |
| BUF_SIZE | 0 | node | (-1),200 |
| CAPPED_DATA | 0 | node | 1 |
| DATA_SOURCE | 0 | node | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | node->accept_fds | 0-1 |
| USER_DATA | 0 | node->cookie | 0-u64max |
| USER_DATA | 0 | node->min_priority | 0-255[c] |
| USER_DATA | 0 | node->ptr | 0-u64max |
| USER_DATA | 0 | node->txn_security_ctx | 0-1 |
| UNITS | 0 | node | unit_byte |
| LOCK2 | 0 | &node->lock | |
| HALF_LOCKED2 | &m->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | _T->lock | ||
| TYPE_LOCK | (struct binder_node)->lock |
drivers/android/binder.c binder_free_buf() -> _binder_node_inner_unlock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | line | 4123 |
| CAPPED_DATA | 0 | node->proc | 1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| LOCK2 | 0 | &node->lock | |
| TYPE_LOCK | (struct binder_node)->lock |
drivers/android/binder.c binder_get_node_refs_for_txn() -> _binder_node_inner_unlock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | line | 2982 |
| CAPPED_DATA | 0 | node | 1 |
| DATA_SOURCE | 0 | node | $0 |
| PREEMPT_ADD | |||
| NOCHECK_CALL | |||
| LOCK2 | 0 | &node->lock | |
| HALF_LOCKED2 | &context->context_mgr_node_lock | ||
| HALF_LOCKED2 | &proc->outer_lock | ||
| TYPE_LOCK | (struct binder_node)->lock |
drivers/android/binder.c binder_inc_node() -> _binder_node_inner_unlock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | line | 867 |
| BUF_SIZE | 0 | node | (-1),200 |
| BUF_SIZE | 0 | node | (-1),200 |
| CAPPED_DATA | 0 | node | 1 |
| DATA_SOURCE | 0 | node | $0 |
| PREEMPT_ADD | |||
| NOCHECK_CALL | |||
| LOCK2 | &proc->outer_lock | ||
| LOCK2 | 0 | &node->lock | |
| TYPE_LOCK | (struct binder_node)->lock | ||
| TYPE_LOCK | (struct binder_proc)->outer_lock |
drivers/android/binder.c binder_thread_write() -> _binder_node_inner_unlock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->pending_strong_ref | 0 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | line | 4263 |
| CAPPED_DATA | 0 | node->cookie | 1 |
| CAPPED_DATA | 0 | node->ptr | 1 |
| DATA_SOURCE | 0 | node | r binder_get_node |
| NOCHECK_CALL | |||
| USER_DATA | 0 | node->ptr | 0-u64max[c] |
| LOCK2 | 0 | &node->lock | |
| TYPE_LOCK | (struct binder_node)->lock |
drivers/android/binder.c binder_thread_write() -> _binder_node_inner_unlock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->pending_weak_ref | 0 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | line | 4273 |
| CAPPED_DATA | 0 | node->cookie | 1 |
| CAPPED_DATA | 0 | node->ptr | 1 |
| DATA_SOURCE | 0 | node | r binder_get_node |
| NOCHECK_CALL | |||
| USER_DATA | 0 | node->ptr | 0-u64max[c] |
| LOCK2 | 0 | &node->lock | |
| TYPE_LOCK | (struct binder_node)->lock |
drivers/android/binder.c binder_thread_write() -> _binder_node_inner_unlock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->pending_weak_ref | 0 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | line | 4288 |
| CAPPED_DATA | 0 | node->cookie | 1 |
| CAPPED_DATA | 0 | node->ptr | 1 |
| DATA_SOURCE | 0 | node | r binder_get_node |
| NOCHECK_CALL | |||
| USER_DATA | 0 | node->ptr | 0-u64max[c] |
| LOCK2 | 0 | &node->lock | |
| TYPE_LOCK | (struct binder_node)->lock |
drivers/android/binder.c print_next_binder_node_ilocked() -> _binder_node_inner_unlock()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->refs.first | 0,4096-ptr_max |
| PARAM_VALUE | 1 | line | 6627 |
| CAPPED_DATA | 0 | node->proc | 1 |
| DATA_SOURCE | 0 | node | $2 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| UNITS | 0 | node | unit_byte |
| LOCK2 | &m->lock | ||
| LOCK2 | 0 | &node->lock | |
| TYPE_LOCK | (struct binder_node)->lock | ||
| TYPE_LOCK | (struct seq_file)->lock |