1673 	struct binder_proc *target_proc = t->to_proc;  in binder_free_transaction()  local
1675 	if (target_proc) {  in binder_free_transaction()
1676 		binder_inner_proc_lock(target_proc);  in binder_free_transaction()
1677 		target_proc->outstanding_txns--;  in binder_free_transaction()
1678 		if (target_proc->outstanding_txns < 0)  in binder_free_transaction()
1680 				__func__, target_proc->outstanding_txns);  in binder_free_transaction()
1681 		if (!target_proc->outstanding_txns && target_proc->is_frozen)  in binder_free_transaction()
1682 			wake_up_interruptible_all(&target_proc->freeze_wait);  in binder_free_transaction()
1685 		binder_inner_proc_unlock(target_proc);  in binder_free_transaction()
2219 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_binder()  local
2238 					    binder_get_cred(target_proc))) {  in binder_translate_binder()
2243 	ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_binder()
2272 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_handle()  local
2285 					    binder_get_cred(target_proc))) {  in binder_translate_handle()
2291 	if (node->proc == target_proc) {  in binder_translate_handle()
2319 		ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_handle()
2347 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_fd()  local
2374 					    binder_get_cred(target_proc), file);  in binder_translate_fd()
2728 	struct binder_proc *target_proc = t->to_proc;  in binder_fixup_parent()  local
2736 	parent = binder_validate_ptr(target_proc, b, &object, bp->parent,  in binder_fixup_parent()
2745 	if (!binder_validate_fixup(target_proc, b, off_start_offset,  in binder_fixup_parent()
2982 	struct binder_proc *target_proc = NULL;  in binder_transaction()  local
3065 		target_proc = target_thread->proc;  in binder_transaction()
3066 		target_proc->tmp_ref++;  in binder_transaction()
3068 		trace_android_vh_binder_reply(target_proc, proc, thread, tr);  in binder_transaction()
3085 						ref->node, &target_proc,  in binder_transaction()
3098 						target_node, &target_proc,  in binder_transaction()
3103 			if (target_node && target_proc->pid == proc->pid) {  in binder_transaction()
3121 		trace_android_vh_binder_trans(target_proc, proc, thread, tr);  in binder_transaction()
3123 					binder_get_cred(target_proc)) < 0) {  in binder_transaction()
3176 				if (from && from->proc == target_proc) {  in binder_transaction()
3190 	e->to_proc = target_proc->pid;  in binder_transaction()
3191 	trace_android_rvh_binder_transaction(target_proc, proc, thread, tr);  in binder_transaction()
3221 			     target_proc->pid, target_thread->pid,  in binder_transaction()
3230 			     target_proc->pid, target_node->debug_id,  in binder_transaction()
3241 	t->to_proc = target_proc;  in binder_transaction()
3252 		t->priority = target_proc->default_priority;  in binder_transaction()
3299 	t->buffer = binder_alloc_new_buf(&target_proc->alloc, tr->data_size,  in binder_transaction()
3321 		err = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3338 				&target_proc->alloc,  in binder_transaction()
3383 		if (binder_alloc_copy_from_buffer(&target_proc->alloc,  in binder_transaction()
3401 					&target_proc->alloc,  in binder_transaction()
3412 		object_size = binder_get_object(target_proc, user_buffer,  in binder_transaction()
3442 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3459 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3479 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3499 				binder_validate_ptr(target_proc, t->buffer,  in binder_transaction()
3512 			if (!binder_validate_fixup(target_proc, t->buffer,  in binder_transaction()
3547 				ret = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3598 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3621 				&target_proc->alloc,  in binder_transaction()
3633 	ret = binder_do_deferred_txn_copies(&target_proc->alloc, t->buffer,  in binder_transaction()
3651 		binder_inner_proc_lock(target_proc);  in binder_transaction()
3654 			binder_inner_proc_unlock(target_proc);  in binder_transaction()
3660 		target_proc->outstanding_txns++;  in binder_transaction()
3661 		binder_inner_proc_unlock(target_proc);  in binder_transaction()
3682 				target_proc, target_thread);  in binder_transaction()
3693 		return_error = binder_proc_transaction(t, target_proc, NULL);  in binder_transaction()
3699 	binder_proc_dec_tmpref(target_proc);  in binder_transaction()
3721 	binder_transaction_buffer_release(target_proc, NULL, t->buffer,  in binder_transaction()
3727 	binder_alloc_free_buf(&target_proc->alloc, t->buffer);  in binder_transaction()
3746 	if (target_proc)  in binder_transaction()
3747 		binder_proc_dec_tmpref(target_proc);  in binder_transaction()
5285 			       struct binder_proc *target_proc)  in binder_ioctl_freeze()  argument
5290 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5291 		target_proc->sync_recv = false;  in binder_ioctl_freeze()
5292 		target_proc->async_recv = false;  in binder_ioctl_freeze()
5293 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
5294 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5303 	binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5304 	target_proc->sync_recv = false;  in binder_ioctl_freeze()
5305 	target_proc->async_recv = false;  in binder_ioctl_freeze()
5306 	target_proc->is_frozen = true;  in binder_ioctl_freeze()
5307 	binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5311 			target_proc->freeze_wait,  in binder_ioctl_freeze()
5312 			(!target_proc->outstanding_txns),  in binder_ioctl_freeze()
5317 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5318 		if (binder_txns_pending_ilocked(target_proc))  in binder_ioctl_freeze()
5320 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5324 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5325 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
5326 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5335 	struct binder_proc *target_proc;  in binder_ioctl_get_freezer_info()  local
5343 	hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl_get_freezer_info()
5344 		if (target_proc->pid == info->pid) {  in binder_ioctl_get_freezer_info()
5346 			binder_inner_proc_lock(target_proc);  in binder_ioctl_get_freezer_info()
5347 			txns_pending = binder_txns_pending_ilocked(target_proc);  in binder_ioctl_get_freezer_info()
5348 			info->sync_recv |= target_proc->sync_recv |  in binder_ioctl_get_freezer_info()
5350 			info->async_recv |= target_proc->async_recv;  in binder_ioctl_get_freezer_info()
5351 			binder_inner_proc_unlock(target_proc);  in binder_ioctl_get_freezer_info()
5482 		struct binder_proc **target_procs = NULL, *target_proc;  in binder_ioctl()  local
5493 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
5494 			if (target_proc->pid == info.pid)  in binder_ioctl()
5514 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
5515 			if (target_proc->pid != info.pid)  in binder_ioctl()
5518 			binder_inner_proc_lock(target_proc);  in binder_ioctl()
5519 			target_proc->tmp_ref++;  in binder_ioctl()
5520 			binder_inner_proc_unlock(target_proc);  in binder_ioctl()
5522 			target_procs[i++] = target_proc;  in binder_ioctl()