560         const binder_size_t* objects = otherKernelFields->mObjects;  in appendFrom()
584                 binder_size_t* objects = (binder_size_t*)realloc(kernelFields->mObjects,  in appendFrom()
589                 kernelFields->mObjects = objects;  in appendFrom()
597                 kernelFields->mObjects[idx++] = off;  in appendFrom()
761         binder_size_t offset = kernelFields->mObjects[i];  in debugReadAllStrongBinders()
785             binder_size_t offset = kernelFields->mObjects[i];  in debugReadAllFileDescriptors()
823             size_t pos = kernelFields->mObjects[i];  in hasBindersInRange()
863             size_t pos = kernelFields->mObjects[i];  in hasFileDescriptorsInRange()
1808             kernelFields->mObjects[kernelFields->mObjectsSize] = mDataPos;  in writeObject()
1826                 (binder_size_t*)realloc(kernelFields->mObjects, newSize * sizeof(binder_size_t));  in writeObject()
1828         kernelFields->mObjects = objects;  in writeObject()
1862             upperBound > kernelFields->mObjects[kernelFields->mNextObjectHint]) {  in validateReadData()
1867                 if (mDataPos < kernelFields->mObjects[nextObject] + sizeof(flat_binder_object)) {  in validateReadData()
1876                      upperBound > kernelFields->mObjects[nextObject]);  in validateReadData()
1882     binder_size_t* currObj = kernelFields->mObjects + kernelFields->mObjectsSize - 1;  in validateReadData()
1884     while (currObj > kernelFields->mObjects) {  in validateReadData()
1898     for (binder_size_t* iter0 = kernelFields->mObjects + 1;  in validateReadData()
1899          iter0 < kernelFields->mObjects + kernelFields->mObjectsSize; iter0++) {  in validateReadData()
1902         while (iter1 >= kernelFields->mObjects && *iter1 > temp) {  in validateReadData()
2625         binder_size_t* const OBJS = kernelFields->mObjects;  in readObject()
2684                     reinterpret_cast<flat_binder_object*>(mData + kernelFields->mObjects[i]);  in closeFileDescriptors()
2712         return reinterpret_cast<uintptr_t>(kernelFields->mObjects);  in ipcObjects()
2737     kernelFields->mObjects = const_cast<binder_size_t*>(objects);  in ipcSetDataReference()
2744         binder_size_t offset = kernelFields->mObjects[i];  in ipcSetDataReference()
2840             const binder_size_t* OBJS = kernelFields->mObjects;  in print()
2871     binder_size_t* const objects = kernelFields->mObjects;  in releaseObjects()
2894     binder_size_t* const objects = kernelFields->mObjects;  in acquireObjects()
2917         mOwner(mData, mDataSize, kernelFields ? kernelFields->mObjects : nullptr,  in freeDataNoInit()
2932         if (kernelFields && kernelFields->mObjects) free(kernelFields->mObjects);  in freeDataNoInit()
3009         free(kernelFields->mObjects);  in restartWrite()
3010         kernelFields->mObjects = nullptr;  in restartWrite()
3046                     if (kernelFields->mObjects[objectsSize - 1] < desired) break;  in continueWrite()
3100         if (objects && kernelFields && kernelFields->mObjects) {  in continueWrite()
3101             memcpy(objects, kernelFields->mObjects, objectsSize * sizeof(binder_size_t));  in continueWrite()
3109         mOwner(mData, mDataSize, kernelFields ? kernelFields->mObjects : nullptr,  in continueWrite()
3122             kernelFields->mObjects = objects;  in continueWrite()
3135                         reinterpret_cast<flat_binder_object*>(mData + kernelFields->mObjects[i]);  in continueWrite()
3144                 free(kernelFields->mObjects);  in continueWrite()
3145                 kernelFields->mObjects = nullptr;  in continueWrite()
3149                         (binder_size_t*)realloc(kernelFields->mObjects,  in continueWrite()
3152                     kernelFields->mObjects = objects;  in continueWrite()
3204                (kernelFields->mObjects == nullptr && kernelFields->mObjectsCapacity == 0)))) {  in continueWrite()
3206                   kernelFields ? kernelFields->mObjects : nullptr,  in continueWrite()
3301                 reinterpret_cast<const flat_binder_object*>(mData + kernelFields->mObjects[i]);  in getOpenAshmemSize()