1958 		last_min_offset = last_bbo->parent_offset + sizeof(uintptr_t);  in binder_validate_fixup()
2164 			    fda->parent_offset > parent->length - fd_buf_size) {  in binder_transaction_buffer_release()
2178 				fda->parent_offset;  in binder_transaction_buffer_release()
2683 	    fda->parent_offset > parent->length - fd_buf_size) {  in binder_translate_fd_array()
2697 		fda->parent_offset;  in binder_translate_fd_array()
2699 				fda->parent_offset;  in binder_translate_fd_array()
2741 	binder_size_t parent_offset;  in binder_fixup_parent()  local
2747 				     off_start_offset, &parent_offset,  in binder_fixup_parent()
2756 				   parent_offset, bp->parent_offset,  in binder_fixup_parent()
2765 	    bp->parent_offset > parent->length - sizeof(binder_uintptr_t)) {  in binder_fixup_parent()
2772 	buffer_offset = bp->parent_offset + parent->buffer - b->user_data;  in binder_fixup_parent()
3529 			binder_size_t parent_offset;  in binder_transaction()  local
3540 						    &parent_offset,  in binder_transaction()
3552 						   parent_offset,  in binder_transaction()
3553 						   fda->parent_offset,  in binder_transaction()
3569 						  parent_offset, &user_object);  in binder_transaction()
3597 			last_fixup_obj_off = parent_offset;  in binder_transaction()
3599 				fda->parent_offset + sizeof(u32) * fda->num_fds;  in binder_transaction()