2147 	unsigned long buffer_offset;  in binder_validate_ptr()  local
2152 	buffer_offset = start_offset + sizeof(binder_size_t) * index;  in binder_validate_ptr()
2154 					  b, buffer_offset,  in binder_validate_ptr()
2219 		unsigned long buffer_offset;  in binder_validate_fixup()  local
2236 		buffer_offset = objects_start_offset +  in binder_validate_fixup()
2240 						  b, buffer_offset,  in binder_validate_fixup()
2314 	binder_size_t off_start_offset, buffer_offset;  in binder_transaction_buffer_release()  local
2327 	for (buffer_offset = off_start_offset; buffer_offset < off_end_offset;  in binder_transaction_buffer_release()
2328 	     buffer_offset += sizeof(binder_size_t)) {  in binder_transaction_buffer_release()
2335 						   buffer, buffer_offset,  in binder_transaction_buffer_release()
2419 			num_valid = (buffer_offset - off_start_offset) /  in binder_transaction_buffer_release()
3015 	binder_size_t buffer_offset;  in binder_fixup_parent()  local
3046 	buffer_offset = bp->parent_offset +  in binder_fixup_parent()
3048 	return binder_add_fixup(pf_head, buffer_offset, bp->buffer, 0);  in binder_fixup_parent()
3164 	binder_size_t buffer_offset = 0;  in binder_transaction()  local
3545 	buffer_offset = off_start_offset;  in binder_transaction()
3551 	for (buffer_offset = off_start_offset; buffer_offset < off_end_offset;  in binder_transaction()
3552 	     buffer_offset += sizeof(binder_size_t)) {  in binder_transaction()
3562 						  buffer_offset,  in binder_transaction()
3672 			size_t num_valid = (buffer_offset - off_start_offset) /  in binder_transaction()
3765 			num_valid = (buffer_offset - off_start_offset) /  in binder_transaction()
3898 					  buffer_offset, true);  in binder_transaction()