1961 		last_min_offset = last_bbo->parent_offset + sizeof(uintptr_t);  in binder_validate_fixup()
2166 			    fda->parent_offset > parent->length - fd_buf_size) {  in binder_transaction_buffer_release()
2181 			    fda->parent_offset;  in binder_transaction_buffer_release()
2673 	    fda->parent_offset > parent->length - fd_buf_size) {  in binder_translate_fd_array()
2687 		fda->parent_offset;  in binder_translate_fd_array()
2689 				fda->parent_offset;  in binder_translate_fd_array()
2731 	binder_size_t parent_offset;  in binder_fixup_parent()  local
2737 				     off_start_offset, &parent_offset,  in binder_fixup_parent()
2746 				   parent_offset, bp->parent_offset,  in binder_fixup_parent()
2755 	    bp->parent_offset > parent->length - sizeof(binder_uintptr_t)) {  in binder_fixup_parent()
2761 	buffer_offset = bp->parent_offset +  in binder_fixup_parent()
3491 			binder_size_t parent_offset;  in binder_transaction()  local
3502 						    &parent_offset,  in binder_transaction()
3514 						   parent_offset,  in binder_transaction()
3515 						   fda->parent_offset,  in binder_transaction()
3531 						  parent_offset, &user_object);  in binder_transaction()
3557 			last_fixup_obj_off = parent_offset;  in binder_transaction()
3559 				fda->parent_offset + sizeof(u32) * fda->num_fds;  in binder_transaction()