drivers/android/binder.c

1543  * binder_free_txn_fixups() - free unprocessed fd fixups
1548  * fd fixups and fput the file structs. It is safe to
1805  * binder_validate_fixup() - validates pointer/fd fixups happen in order.
1889  * @fd:                   fd to close
1923  * @fd:		file-descriptor to close
1928 static void binder_deferred_fd_close(int fd)
1936 	twcb->file = file_close_fd(fd);
2030 			 * delivered, the new fd was never allocated so
2053 				 * The fd fixups have not been applied so no
2096 				u32 fd;
2099 					fd_index * sizeof(fd);
2102 						&proc->alloc, &fd, buffer,
2103 						offset, sizeof(fd));
2106 					binder_deferred_fd_close(fd);
2266 static int binder_translate_fd(u32 fd, binder_size_t fd_offset,
2283 		binder_user_error("%d:%d got %s with fd, %d, but target does not allow fds\n",
2286 				  fd);
2291 	file = fget(fd);
2293 		binder_user_error("%d:%d got transaction with invalid fd, %d\n",
2294 				  proc->pid, thread->pid, fd);
2306 	 * of the fd in the target needs to be done from a
2317 	trace_binder_transaction_fd_send(t, fd, fixup->offset);
2627 		u32 fd;
2628 		binder_size_t offset = fda_offset + fdi * sizeof(fd);
2629 		binder_size_t sender_uoffset = fdi * sizeof(fd);
2631 		ret = copy_from_user(&fd, sender_ufda_base + sender_uoffset, sizeof(fd));
2633 			ret = binder_translate_fd(fd, offset, t, thread,
3424 				(uintptr_t)&fp->fd - (uintptr_t)fp;
3425 			int ret = binder_translate_fd(fp->fd, fd_offset, t,
3434 				binder_txn_error("%d:%d translate fd failed\n",
3505 				binder_txn_error("%d:%d translate fd array failed\n",
4332  * binder_apply_fd_fixups() - finish fd translation
4334  * @t:	binder transaction with list of fd fixups
4341  * If we fail to allocate an fd, skip the install and release
4351 		int fd = get_unused_fd_flags(O_CLOEXEC);
4353 		if (fd < 0) {
4355 				     "failed fd fixup txn %d fd %d\n",
4356 				     t->debug_id, fd);
4361 			     "fd fixup txn %d fd %d\n",
4362 			     t->debug_id, fd);
4363 		trace_binder_transaction_fd_recv(t, fd, fixup->offset);
4364 		fixup->target_fd = fd;
4366 						fixup->offset, &fd,
4691 			binder_cleanup_transaction(t, "fd fixups failed",
4695 				     "%d:%d %stransaction %d fd fixups failed %d/%d, line %d\n",