Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

drivers/android/binder_alloc.c binder_alloc_buffer_size() -> binder_buffer_next()

Type Parameter Key Value
PARAM_VALUE 0 buffer 4096-ptr_max
BUF_SIZE 0 buffer (-1),104
BUF_SIZE 0 buffer (-1),104
BUF_SIZE 0 buffer->transaction (-1),232
DATA_SOURCE 0 buffer $1
NOSPEC 0 buffer->data_size
NOSPEC 0 buffer->user_data
RX_PATH
TASK_NOT_RUNNING
USER_DATA 0 buffer->async_transaction 0-1
USER_DATA 0 buffer->clear_on_free 0-1
USER_DATA 0 buffer->data_size 0-u64max[c]
USER_DATA 0 buffer->extra_buffers_size 0-u64max[c]
USER_DATA 0 buffer->offsets_size 0-u64max[c]
USER_DATA 0 buffer->user_data 0-u64max
UNITS 0 buffer unit_byte
HALF_LOCKED2 &alloc->mutex

drivers/android/binder_alloc.c binder_delete_free_buffer() -> binder_buffer_next()

Type Parameter Key Value
PARAM_VALUE 0 buffer 4096-ptr_max
DATA_SOURCE 0 buffer $1
TASK_NOT_RUNNING
USER_DATA 0 buffer->async_transaction 0-1
USER_DATA 0 buffer->data_size 0-u64max[c]
USER_DATA 0 buffer->extra_buffers_size 0-u64max[c]
USER_DATA 0 buffer->offsets_size 0-u64max[c]
USER_DATA 0 buffer->user_data 1-s32max[c]
LOCK2 &alloc->mutex
TYPE_LOCK (struct binder_alloc)->mutex

drivers/android/binder_alloc.c binder_free_buf_locked() -> binder_buffer_next()

Type Parameter Key Value
PARAM_VALUE 0 buffer 4096-ptr_max
CAPPED_DATA 0 buffer->user_data 1
CAPPED_DATA 0 &buffer->rb_node 1
DATA_SOURCE 0 buffer $1
TASK_NOT_RUNNING
USER_DATA 0 buffer->async_transaction 0-1
USER_DATA 0 buffer->data_size 0-u64max[c]
USER_DATA 0 buffer->extra_buffers_size 0-u64max[c]
USER_DATA 0 buffer->offsets_size 0-u64max[c]
USER_DATA 0 buffer->user_data 0-s32max[c]
LOCK2 &alloc->mutex
TYPE_LOCK (struct binder_alloc)->mutex