Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/android/binder.c binder_dec_node() -> binder_free_node()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->dead_node->next->pprev | 1-u64max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc->nodes.rb_node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->refs.first | 0 |
| PARAM_VALUE | 0 | node->tmp_refs | 0 |
| PARAM_VALUE | 0 | node->work.entry.next | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.prev->prev | 4096-ptr_max |
| DATA_SOURCE | 0 | node | $0 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &proc->outer_lock |
drivers/android/binder.c binder_dec_node_tmpref() -> binder_free_node()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->dead_node->next->pprev | 1-u64max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc->nodes.rb_node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->refs.first | 0 |
| PARAM_VALUE | 0 | node->tmp_refs | 0 |
| PARAM_VALUE | 0 | node->work.entry.next | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.prev->prev | 4096-ptr_max |
| BUF_SIZE | 0 | node | (-1),200 |
| BUF_SIZE | 0 | node | (-1),200 |
| CAPPED_DATA | 0 | node | 1 |
| DATA_SOURCE | 0 | node | $0 |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | node->accept_fds | 0-1 |
| USER_DATA | 0 | node->cookie | 0-u64max |
| USER_DATA | 0 | node->min_priority | 0-255[c] |
| USER_DATA | 0 | node->ptr | 0-u64max |
| USER_DATA | 0 | node->txn_security_ctx | 0-1 |
| UNITS | 0 | node | unit_byte |
| HALF_LOCKED2 | &m->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | _T->lock |
drivers/android/binder.c binder_free_ref() -> binder_free_node()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc->nodes.rb_node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.next | 4096-ptr_max |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |
drivers/android/binder.c binder_node_release() -> binder_free_node()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 4096-ptr_max |
| PARAM_VALUE | 0 | node->proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->rb_node.rb_left | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->rb_node.rb_right | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->refs.first | 0 |
| PARAM_VALUE | 0 | node->tmp_refs | 1 |
| PARAM_VALUE | 0 | node->work.entry.next | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.next->next | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.next->prev | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.prev->next | 4096-ptr_max |
| PARAM_VALUE | 0 | node->work.entry.prev->prev | 4096-ptr_max |
| DATA_SOURCE | 0 | node | $0 |
| NOCHECK_CALL | |||
| HALF_LOCKED2 | &pool->lock |
drivers/android/binder.c binder_thread_read() -> binder_free_node()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | node | 4096-ptr_max |
| PARAM_VALUE | 0 | node->has_strong_ref | 0 |
| PARAM_VALUE | 0 | node->has_weak_ref | 0 |
| PARAM_VALUE | 0 | node->internal_strong_refs | 0 |
| PARAM_VALUE | 0 | node->local_strong_refs | 0 |
| PARAM_VALUE | 0 | node->local_weak_refs | 0 |
| PARAM_VALUE | 0 | node->lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | node->proc | 4096-ptr_max |
| PARAM_VALUE | 0 | node->rb_node.rb_left | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->rb_node.rb_right | 0,4096-ptr_max |
| PARAM_VALUE | 0 | node->refs.first | 0 |
| PARAM_VALUE | 0 | node->tmp_refs | 0 |
| CAPPED_DATA | 0 | node->proc | 1 |
| CAPPED_DATA | 0 | &node->rb_node | 1 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL |