Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
drivers/android/binder.c binder_free_buf() -> binder_release_entire_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | proc | 4096-ptr_max |
| PARAM_VALUE | 0 | proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 1 | thread | 4096-ptr_max |
| PARAM_VALUE | 2 | buffer | 4096-ptr_max |
| PARAM_VALUE | 2 | buffer->transaction | 0 |
| BUF_SIZE | 0 | proc | s32min-(-2),1-s32max |
| BUF_SIZE | 0 | proc | s32min-(-2),1-s32max |
| BUF_SIZE | 1 | thread | (-1),520 |
| BUF_SIZE | 1 | thread | (-1),520 |
| CAPPED_DATA | 0 | proc | 1 |
| DATA_SOURCE | 0 | proc | $0 |
| DATA_SOURCE | 1 | thread | $1 |
| DATA_SOURCE | 2 | buffer | $2 |
| DATA_SOURCE | 3 | is_failure | $3 |
| TASK_NOT_RUNNING | |||
| NOCHECK_CALL | |||
| USER_DATA | 2 | buffer->user_data | 0-u64max[c] |
| UNITS | 0 | proc | unit_byte |
drivers/android/binder.c binder_proc_transaction() -> binder_release_entire_buffer()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | proc | 4096-ptr_max |
| PARAM_VALUE | 0 | proc->inner_lock.rlock.dep_map->name | 0-255 |
| PARAM_VALUE | 0 | proc->is_dead | 0 |
| PARAM_VALUE | 0 | proc->is_frozen | 1 |
| PARAM_VALUE | 1 | thread | 0 |
| PARAM_VALUE | 2 | buffer | 4096-ptr_max |
| PARAM_VALUE | 2 | buffer->transaction | 0 |
| PARAM_VALUE | 3 | is_failure | 0 |
| CAPPED_DATA | 2 | buffer->pid | 1 |
| DATA_SOURCE | 0 | proc | $1 |
| NOCHECK_CALL |