1661 	struct binder_proc *target_proc = t->to_proc;  in binder_free_transaction()  local
1663 	if (target_proc) {  in binder_free_transaction()
1664 		binder_inner_proc_lock(target_proc);  in binder_free_transaction()
1665 		target_proc->outstanding_txns--;  in binder_free_transaction()
1666 		if (target_proc->outstanding_txns < 0)  in binder_free_transaction()
1668 				__func__, target_proc->outstanding_txns);  in binder_free_transaction()
1669 		if (!target_proc->outstanding_txns && target_proc->is_frozen)  in binder_free_transaction()
1670 			wake_up_interruptible_all(&target_proc->freeze_wait);  in binder_free_transaction()
1673 		binder_inner_proc_unlock(target_proc);  in binder_free_transaction()
2226 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_binder()  local
2244 	if (security_binder_transfer_binder(proc->cred, target_proc->cred)) {  in binder_translate_binder()
2249 	ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_binder()
2278 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_handle()  local
2290 	if (security_binder_transfer_binder(proc->cred, target_proc->cred)) {  in binder_translate_handle()
2296 	if (node->proc == target_proc) {  in binder_translate_handle()
2324 		ret = binder_inc_ref_for_node(target_proc, node,  in binder_translate_handle()
2352 	struct binder_proc *target_proc = t->to_proc;  in binder_translate_fd()  local
2378 	ret = security_binder_transfer_file(proc->cred, target_proc->cred, file);  in binder_translate_fd()
2733 	struct binder_proc *target_proc = t->to_proc;  in binder_fixup_parent()  local
2741 	parent = binder_validate_ptr(target_proc, b, &object, bp->parent,  in binder_fixup_parent()
2750 	if (!binder_validate_fixup(target_proc, b, off_start_offset,  in binder_fixup_parent()
3069 	struct binder_proc *target_proc = NULL;  in binder_transaction()  local
3185 		target_proc = target_thread->proc;  in binder_transaction()
3186 		target_proc->tmp_ref++;  in binder_transaction()
3204 						ref->node, &target_proc,  in binder_transaction()
3217 						target_node, &target_proc,  in binder_transaction()
3222 			if (target_node && target_proc->pid == proc->pid) {  in binder_transaction()
3240 		if (WARN_ON(proc == target_proc)) {  in binder_transaction()
3249 						target_proc->cred) < 0) {  in binder_transaction()
3304 				if (from && from->proc == target_proc) {  in binder_transaction()
3317 	t->to_proc = target_proc;  in binder_transaction()
3321 	e->to_proc = target_proc->pid;  in binder_transaction()
3338 			     target_proc->pid, target_thread->pid,  in binder_transaction()
3345 			     target_proc->pid, target_node->debug_id,  in binder_transaction()
3377 	t->buffer = binder_alloc_new_buf(&target_proc->alloc, tr->data_size,  in binder_transaction()
3405 		err = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3422 				&target_proc->alloc,  in binder_transaction()
3467 		if (binder_alloc_copy_from_buffer(&target_proc->alloc,  in binder_transaction()
3488 					&target_proc->alloc,  in binder_transaction()
3499 		object_size = binder_get_object(target_proc, user_buffer,  in binder_transaction()
3529 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3548 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3570 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3592 				binder_validate_ptr(target_proc, t->buffer,  in binder_transaction()
3605 			if (!binder_validate_fixup(target_proc, t->buffer,  in binder_transaction()
3640 				ret = binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3694 			    binder_alloc_copy_to_buffer(&target_proc->alloc,  in binder_transaction()
3719 				&target_proc->alloc,  in binder_transaction()
3731 	ret = binder_do_deferred_txn_copies(&target_proc->alloc, t->buffer,  in binder_transaction()
3751 		binder_inner_proc_lock(target_proc);  in binder_transaction()
3754 			binder_inner_proc_unlock(target_proc);  in binder_transaction()
3760 		target_proc->outstanding_txns++;  in binder_transaction()
3761 		binder_inner_proc_unlock(target_proc);  in binder_transaction()
3779 				target_proc, target_thread);  in binder_transaction()
3797 		return_error = binder_proc_transaction(t, target_proc, NULL);  in binder_transaction()
3815 	binder_proc_dec_tmpref(target_proc);  in binder_transaction()
3840 	binder_transaction_buffer_release(target_proc, NULL, t->buffer,  in binder_transaction()
3846 	binder_alloc_free_buf(&target_proc->alloc, t->buffer);  in binder_transaction()
3876 		     target_proc ? target_proc->pid : 0,  in binder_transaction()
3884 	if (target_proc)  in binder_transaction()
3885 		binder_proc_dec_tmpref(target_proc);  in binder_transaction()
5677 			       struct binder_proc *target_proc)  in binder_ioctl_freeze()  argument
5682 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5683 		target_proc->sync_recv = false;  in binder_ioctl_freeze()
5684 		target_proc->async_recv = false;  in binder_ioctl_freeze()
5685 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
5686 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5687 		binder_add_freeze_work(target_proc, false);  in binder_ioctl_freeze()
5696 	binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5697 	target_proc->sync_recv = false;  in binder_ioctl_freeze()
5698 	target_proc->async_recv = false;  in binder_ioctl_freeze()
5699 	target_proc->is_frozen = true;  in binder_ioctl_freeze()
5700 	binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5704 			target_proc->freeze_wait,  in binder_ioctl_freeze()
5705 			(!target_proc->outstanding_txns),  in binder_ioctl_freeze()
5710 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5711 		if (binder_txns_pending_ilocked(target_proc))  in binder_ioctl_freeze()
5713 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5717 		binder_inner_proc_lock(target_proc);  in binder_ioctl_freeze()
5718 		target_proc->is_frozen = false;  in binder_ioctl_freeze()
5719 		binder_inner_proc_unlock(target_proc);  in binder_ioctl_freeze()
5721 		binder_add_freeze_work(target_proc, true);  in binder_ioctl_freeze()
5730 	struct binder_proc *target_proc;  in binder_ioctl_get_freezer_info()  local
5738 	hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl_get_freezer_info()
5739 		if (target_proc->pid == info->pid) {  in binder_ioctl_get_freezer_info()
5741 			binder_inner_proc_lock(target_proc);  in binder_ioctl_get_freezer_info()
5742 			txns_pending = binder_txns_pending_ilocked(target_proc);  in binder_ioctl_get_freezer_info()
5743 			info->sync_recv |= target_proc->sync_recv |  in binder_ioctl_get_freezer_info()
5745 			info->async_recv |= target_proc->async_recv;  in binder_ioctl_get_freezer_info()
5746 			binder_inner_proc_unlock(target_proc);  in binder_ioctl_get_freezer_info()
5883 		struct binder_proc **target_procs = NULL, *target_proc;  in binder_ioctl()  local
5894 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
5895 			if (target_proc->pid == info.pid)  in binder_ioctl()
5914 		hlist_for_each_entry(target_proc, &binder_procs, proc_node) {  in binder_ioctl()
5915 			if (target_proc->pid != info.pid)  in binder_ioctl()
5918 			binder_inner_proc_lock(target_proc);  in binder_ioctl()
5919 			target_proc->tmp_ref++;  in binder_ioctl()
5920 			binder_inner_proc_unlock(target_proc);  in binder_ioctl()
5922 			target_procs[i++] = target_proc;  in binder_ioctl()