Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

drivers/android/binder.c binder_dec_node() -> binder_free_node()

Type Parameter Key Value
PARAM_VALUE 0 node 4096-ptr_max
PARAM_VALUE 0 node->dead_node->next->pprev 1-u64max
PARAM_VALUE 0 node->lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 node->proc 0,4096-ptr_max
PARAM_VALUE 0 node->proc->inner_lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 node->proc->nodes.rb_node 4096-ptr_max
PARAM_VALUE 0 node->refs.first 0
PARAM_VALUE 0 node->tmp_refs 0
PARAM_VALUE 0 node->work.entry.next 4096-ptr_max
PARAM_VALUE 0 node->work.entry.next->next 4096-ptr_max
PARAM_VALUE 0 node->work.entry.next->prev 4096-ptr_max
PARAM_VALUE 0 node->work.entry.prev 4096-ptr_max
PARAM_VALUE 0 node->work.entry.prev->next 4096-ptr_max
PARAM_VALUE 0 node->work.entry.prev->prev 4096-ptr_max
DATA_SOURCE 0 node $0
TASK_NOT_RUNNING
NOCHECK_CALL
HALF_LOCKED2 &proc->outer_lock

drivers/android/binder.c binder_dec_node_tmpref() -> binder_free_node()

Type Parameter Key Value
PARAM_VALUE 0 node 4096-ptr_max
PARAM_VALUE 0 node->dead_node->next->pprev 1-u64max
PARAM_VALUE 0 node->lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 node->proc 0,4096-ptr_max
PARAM_VALUE 0 node->proc->inner_lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 node->proc->nodes.rb_node 4096-ptr_max
PARAM_VALUE 0 node->refs.first 0
PARAM_VALUE 0 node->tmp_refs 0
PARAM_VALUE 0 node->work.entry.next 4096-ptr_max
PARAM_VALUE 0 node->work.entry.next->next 4096-ptr_max
PARAM_VALUE 0 node->work.entry.next->prev 4096-ptr_max
PARAM_VALUE 0 node->work.entry.prev 4096-ptr_max
PARAM_VALUE 0 node->work.entry.prev->next 4096-ptr_max
PARAM_VALUE 0 node->work.entry.prev->prev 4096-ptr_max
BUF_SIZE 0 node (-1),200
BUF_SIZE 0 node (-1),200
CAPPED_DATA 0 node 1
DATA_SOURCE 0 node $0
RX_PATH
TASK_NOT_RUNNING
NOCHECK_CALL
USER_DATA 0 node->accept_fds 0-1
USER_DATA 0 node->cookie 0-u64max
USER_DATA 0 node->min_priority 0-255[c]
USER_DATA 0 node->ptr 0-u64max
USER_DATA 0 node->txn_security_ctx 0-1
UNITS 0 node unit_byte
HALF_LOCKED2 &m->lock
HALF_LOCKED2 &pool->lock
HALF_LOCKED2 _T->lock

drivers/android/binder.c binder_free_ref() -> binder_free_node()

Type Parameter Key Value
PARAM_VALUE 0 node 4096-ptr_max
PARAM_VALUE 0 node->lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 node->proc->inner_lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 node->proc->nodes.rb_node 4096-ptr_max
PARAM_VALUE 0 node->work.entry.next 4096-ptr_max
TASK_NOT_RUNNING
NOCHECK_CALL

drivers/android/binder.c binder_node_release() -> binder_free_node()

Type Parameter Key Value
PARAM_VALUE 0 node 4096-ptr_max
PARAM_VALUE 0 node->lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 node->proc 4096-ptr_max
PARAM_VALUE 0 node->proc->inner_lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 node->rb_node.rb_left 0,4096-ptr_max
PARAM_VALUE 0 node->rb_node.rb_right 0,4096-ptr_max
PARAM_VALUE 0 node->refs.first 0
PARAM_VALUE 0 node->tmp_refs 1
PARAM_VALUE 0 node->work.entry.next 4096-ptr_max
PARAM_VALUE 0 node->work.entry.next->next 4096-ptr_max
PARAM_VALUE 0 node->work.entry.next->prev 4096-ptr_max
PARAM_VALUE 0 node->work.entry.prev 4096-ptr_max
PARAM_VALUE 0 node->work.entry.prev->next 4096-ptr_max
PARAM_VALUE 0 node->work.entry.prev->prev 4096-ptr_max
DATA_SOURCE 0 node $0
NOCHECK_CALL
HALF_LOCKED2 &pool->lock

drivers/android/binder.c binder_thread_read() -> binder_free_node()

Type Parameter Key Value
PARAM_VALUE 0 node 4096-ptr_max
PARAM_VALUE 0 node->has_strong_ref 0
PARAM_VALUE 0 node->has_weak_ref 0
PARAM_VALUE 0 node->internal_strong_refs 0
PARAM_VALUE 0 node->local_strong_refs 0
PARAM_VALUE 0 node->local_weak_refs 0
PARAM_VALUE 0 node->lock.rlock.dep_map->name 0-255
PARAM_VALUE 0 node->proc 4096-ptr_max
PARAM_VALUE 0 node->rb_node.rb_left 0,4096-ptr_max
PARAM_VALUE 0 node->rb_node.rb_right 0,4096-ptr_max
PARAM_VALUE 0 node->refs.first 0
PARAM_VALUE 0 node->tmp_refs 0
CAPPED_DATA 0 node->proc 1
CAPPED_DATA 0 &node->rb_node 1
TASK_NOT_RUNNING
NOCHECK_CALL