Defined in 1 files as a function:

Referenced in 1 files:

Smatch caller information:

drivers/android/binder_alloc.c binder_alloc_new_buf() -> binder_install_buffer_pages()

Type Parameter Key Value
PARAM_VALUE 0 alloc 4096-ptr_max
PARAM_VALUE 0 alloc->allocated_buffers.rb_node 4096-ptr_max
PARAM_VALUE 0 alloc->free_async_space 1-9223372036854775799
PARAM_VALUE 0 alloc->free_buffers.rb_node 4096-ptr_max
PARAM_VALUE 0 alloc->mapped 1
PARAM_VALUE 0 alloc->mm->mmap_lock.first_waiter->handoff_set 0-1
PARAM_VALUE 0 alloc->mm->mmap_lock.first_waiter->type 0-1
PARAM_VALUE 0 alloc->mutex.dep_map->name 0-255
PARAM_VALUE 0 alloc->mutex.first_waiter 0,4096-ptr_max
PARAM_VALUE 0 alloc->mutex.first_waiter->list.prev->next 5159360019465732096
PARAM_VALUE 0 alloc->mutex.first_waiter->task->blocked_lock.dep_map->name 0-255
PARAM_VALUE 0 alloc->mutex.first_waiter->task->blocked_lock.owner (-1)
PARAM_VALUE 0 alloc->mutex.first_waiter->task->blocked_lock.owner_cpu 4294967295
PARAM_VALUE 0 alloc->mutex.first_waiter->task->blocked_lock.raw_lock.val.counter s32min-s32max
PARAM_VALUE 0 alloc->mutex.first_waiter->task->usage.refs.counter s32min-s32max
PARAM_VALUE 0 alloc->mutex.osq.tail.counter 0-s32max
PARAM_VALUE 0 alloc->mutex.wait_lock.dep_map->name 0-255
PARAM_VALUE 0 alloc->pages_high 1-u64max
PARAM_VALUE 1 buffer 4096-ptr_max
PARAM_VALUE 1 buffer->allow_user_free 0
PARAM_VALUE 1 buffer->free 0
PARAM_VALUE 1 buffer->rb_node.__rb_parent_color 1
PARAM_VALUE 1 buffer->rb_node.rb_left 4096-ptr_max
PARAM_VALUE 1 buffer->rb_node.rb_right 4096-ptr_max
PARAM_VALUE 2 size 8-u64max
CAPPED_DATA 0 &alloc->mutex 1
CAPPED_DATA 1 buffer->data_size 1
CAPPED_DATA 1 buffer->extra_buffers_size 1
CAPPED_DATA 1 buffer->offsets_size 1
CAPPED_DATA 2 size 1
CAPPED_DATA 2 size 1
DATA_SOURCE 0 alloc $0
DATA_SOURCE 1 buffer r binder_alloc_new_buf_locked
DATA_SOURCE 2 size r sanitized_size
USER_DATA 0 alloc->free_async_space 1-9223372036854775798[c][u]
USER_DATA 1 buffer->async_transaction 0-1
USER_DATA 1 buffer->data_size 0-u64max[c]
USER_DATA 1 buffer->extra_buffers_size 0-u64max[c]
USER_DATA 1 buffer->offsets_size 0-u64max[c]
USER_DATA 2 size 9-u64max[c]
UNITS 2 size unit_byte