3407 	uint64_t           refs;  in IOUserServerUEXTTrap()  local
3431 	refs    = message->objectRefs;  in IOUserServerUEXTTrap()
3432 	if ((refs > 2) || !refs) {  in IOUserServerUEXTTrap()
3440 	descs = (typeof(descs))(p - refs * sizeof(*descs));  in IOUserServerUEXTTrap()
3441 	mach  = (typeof(mach))(p - refs * sizeof(*descs) - sizeof(*mach));  in IOUserServerUEXTTrap()
3444 …mach->msgh.msgh_size = (mach_msg_size_t) (sizeof(IORPCMessageMach) + refs * sizeof(*descs) + inSiz…  in IOUserServerUEXTTrap()
3445 	mach->msgh_body.msgh_descriptor_count = ((mach_msg_size_t) refs);  in IOUserServerUEXTTrap()
3456 		if (refs > maxObjectCount) {  in IOUserServerUEXTTrap()
3459 		if (refs < 2) {  in IOUserServerUEXTTrap()
3460 			DKLOG("invalid refs count %qd in message id 0x%qx\n", refs, message->msgid);  in IOUserServerUEXTTrap()
3471 		if (refs > 1) {  in IOUserServerUEXTTrap()
3740 	uint64_t           refs;  in copyOutObjects()  local
3753 	refs           = message->objectRefs;  in copyOutObjects()
3757 	if (refs > mach->msgh_body.msgh_descriptor_count) {  in copyOutObjects()
3760 	if (refs > maxObjectCount) {  in copyOutObjects()
3765 	for (idx = 0; idx < refs; idx++) {  in copyOutObjects()
3847 	if (idx >= refs) {  in copyOutObjects()
3888 	uint64_t           refs;  in copyInObjects()  local
3898 	refs           = message->objectRefs;  in copyInObjects()
3902 	if (refs > mach->msgh_body.msgh_descriptor_count) {  in copyInObjects()
3905 	if (refs > maxObjectCount) {  in copyInObjects()
3909 	for (idx = 0; idx < refs; idx++) {  in copyInObjects()
3915 		bool isObjectPort = idx < refs;  in copyInObjects()
3973 	if (idx >= refs) {  in copyInObjects()
3989 	uint64_t    refs, idx;  in consumeObjects()  local
3992 	refs   = message->objectRefs;  in consumeObjects()
3994 	if (refs > mach->msgh_body.msgh_descriptor_count) {  in consumeObjects()
3997 	if (refs > maxObjectCount) {  in consumeObjects()
4001 	for (idx = 0; idx < refs; idx++) {  in consumeObjects()