1666 	struct binder_proc *target_proc = t->to_proc;  in binder_free_transaction()  local
1668 	if (target_proc) {  in binder_free_transaction()
1669 		binder_inner_proc_lock(target_proc);  in binder_free_transaction()
1670 		target_proc->outstanding_txns--;  in binder_free_transaction()
1671 		if (target_proc->outstanding_txns < 0)  in binder_free_transaction()
1673 				__func__, target_proc->outstanding_txns);  in binder_free_transaction()
1674 		if (!target_proc->outstanding_txns && target_proc->is_frozen)  in binder_free_transaction()
1675 			wake_up_interruptible_all(&target_proc->freeze_wait);  in binder_free_transaction()
1678 		binder_inner_proc_unlock(target_proc);  in binder_free_transaction()
2231 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_binder()  local
2249 	if (security_binder_transfer_binder(proc->cred, target_proc->cred)) {  in binder_translate_binder()
2254 	ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_binder()
2283 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_handle()  local
2295 	if (security_binder_transfer_binder(proc->cred, target_proc->cred)) {  in binder_translate_handle()
2301 	if (node->proc == target_proc) {  in binder_translate_handle()
2329 		ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_handle()
2357 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_fd()  local
2383 	ret = security_binder_transfer_file(proc->cred, target_proc->cred, file);  in binder_translate_fd()
2738 	struct binder_proc *target_proc = t->to_proc;  in binder_fixup_parent()  local
2746 	parent = binder_validate_ptr(target_proc, b, &object, bp->parent,  in binder_fixup_parent()
2755 	if (!binder_validate_fixup(target_proc, b, off_start_offset,  in binder_fixup_parent()
3007 	struct binder_proc *target_proc = NULL;  in binder_transaction()  local
3097 		target_proc = target_thread->proc;  in binder_transaction()
3098 		target_proc->tmp_ref++;  in binder_transaction()
3116 						ref->node, &target_proc,  in binder_transaction()
3129 						target_node, &target_proc,  in binder_transaction()
3134 			if (target_node && target_proc->pid == proc->pid) {  in binder_transaction()
3154 		if (WARN_ON(proc == target_proc)) {  in binder_transaction()
3163 						target_proc->cred) < 0) {  in binder_transaction()
3218 				if (from && from->proc == target_proc) {  in binder_transaction()
3232 	e->to_proc = target_proc->pid;  in binder_transaction()
3266 			     target_proc->pid, target_thread->pid,  in binder_transaction()
3275 			     target_proc->pid, target_node->debug_id,  in binder_transaction()
3288 	t->to_proc = target_proc;  in binder_transaction()
3322 	t->buffer = binder_alloc_new_buf(&target_proc->alloc, tr->data_size,  in binder_transaction()
3350 		err = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3367 				&target_proc->alloc,  in binder_transaction()
3412 		if (binder_alloc_copy_from_buffer(&target_proc->alloc,  in binder_transaction()
3433 					&target_proc->alloc,  in binder_transaction()
3444 		object_size = binder_get_object(target_proc, user_buffer,  in binder_transaction()
3474 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3493 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3515 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3537 				binder_validate_ptr(target_proc, t->buffer,  in binder_transaction()
3550 			if (!binder_validate_fixup(target_proc, t->buffer,  in binder_transaction()
3585 				ret = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3639 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3664 				&target_proc->alloc,  in binder_transaction()
3676 	ret = binder_do_deferred_txn_copies(&target_proc->alloc, t->buffer,  in binder_transaction()
3694 		binder_inner_proc_lock(target_proc);  in binder_transaction()
3697 			binder_inner_proc_unlock(target_proc);  in binder_transaction()
3703 		target_proc->outstanding_txns++;  in binder_transaction()
3704 		binder_inner_proc_unlock(target_proc);  in binder_transaction()
3723 				target_proc, target_thread);  in binder_transaction()
3733 		return_error = binder_proc_transaction(t, target_proc, NULL);  in binder_transaction()
3748 	binder_proc_dec_tmpref(target_proc);  in binder_transaction()
3772 	binder_transaction_buffer_release(target_proc, NULL, t->buffer,  in binder_transaction()
3778 	binder_alloc_free_buf(&target_proc->alloc, t->buffer);  in binder_transaction()
3806 		     target_proc ? target_proc->pid : 0,  in binder_transaction()
3814 	if (target_proc)  in binder_transaction()
3815 		binder_proc_dec_tmpref(target_proc);  in binder_transaction()
5618 			       struct binder_proc *target_proc)  in binder_ioctl_freeze()  argument
5623 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5624 		target_proc->sync_recv = false;  in binder_ioctl_freeze()
5625 		target_proc->async_recv = false;  in binder_ioctl_freeze()
5626 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
5627 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5628 		binder_add_freeze_work(target_proc, false);  in binder_ioctl_freeze()
5637 	binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5638 	target_proc->sync_recv = false;  in binder_ioctl_freeze()
5639 	target_proc->async_recv = false;  in binder_ioctl_freeze()
5640 	target_proc->is_frozen = true;  in binder_ioctl_freeze()
5641 	binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5645 			target_proc->freeze_wait,  in binder_ioctl_freeze()
5646 			(!target_proc->outstanding_txns),  in binder_ioctl_freeze()
5651 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5652 		if (binder_txns_pending_ilocked(target_proc))  in binder_ioctl_freeze()
5654 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5658 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5659 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
5660 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5662 		binder_add_freeze_work(target_proc, true);  in binder_ioctl_freeze()
5671 	struct binder_proc *target_proc;  in binder_ioctl_get_freezer_info()  local
5679 	hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl_get_freezer_info()
5680 		if (target_proc->pid == info->pid) {  in binder_ioctl_get_freezer_info()
5682 			binder_inner_proc_lock(target_proc);  in binder_ioctl_get_freezer_info()
5683 			txns_pending = binder_txns_pending_ilocked(target_proc);  in binder_ioctl_get_freezer_info()
5684 			info->sync_recv |= target_proc->sync_recv |  in binder_ioctl_get_freezer_info()
5686 			info->async_recv |= target_proc->async_recv;  in binder_ioctl_get_freezer_info()
5687 			binder_inner_proc_unlock(target_proc);  in binder_ioctl_get_freezer_info()
5829 		struct binder_proc **target_procs = NULL, *target_proc;  in binder_ioctl()  local
5840 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
5841 			if (target_proc->pid == info.pid)  in binder_ioctl()
5861 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
5862 			if (target_proc->pid != info.pid)  in binder_ioctl()
5865 			binder_inner_proc_lock(target_proc);  in binder_ioctl()
5866 			target_proc->tmp_ref++;  in binder_ioctl()
5867 			binder_inner_proc_unlock(target_proc);  in binder_ioctl()
5869 			target_procs[i++] = target_proc;  in binder_ioctl()