arch/alpha/kernel/osf_sys.c

1181

if (copy_from_user(&txc, txc_p, offsetof(struct timex32, time)) ||

arch/alpha/kernel/osf_sys.c

1182

copy_from_user(&txc.tick, &txc_p->tick, sizeof(struct timex32) -

arch/alpha/kernel/osf_sys.c

460

if (copy_from_user(&tmp, args, sizeof(tmp)))

arch/alpha/kernel/osf_sys.c

475

if (copy_from_user(&tmp, args, sizeof(tmp)))

arch/alpha/kernel/osf_sys.c

489

if (copy_from_user(&tmp, args, sizeof(tmp)))

arch/alpha/kernel/osf_sys.c

937

if (copy_from_user(&tv, i, sizeof(struct timeval32)))

arch/alpha/kernel/osf_sys.c

997

if (copy_from_user(&ktz, tz, sizeof(*tz)))

arch/alpha/kernel/ptrace.c

331

if (copy_from_user(&iov, uiov, sizeof(iov))) {

arch/alpha/kernel/ptrace.c

349

if (copy_from_user(regs, iov.iov_base, len)) {

arch/alpha/kernel/signal.c

103

if (copy_from_user(&new_ka.sa, act, sizeof(*act)))

arch/alpha/kernel/srm_env.c

105

if (copy_from_user(buf, buffer, count))

arch/alpha/kernel/termios.c

10

if (copy_from_user(&v, termio, sizeof(struct termio)))

arch/arc/kernel/disasm.c

37

bytes_not_copied = copy_from_user(ins_buf,

arch/arm/common/bL_switcher_dummy_if.c

30

if (copy_from_user(val, buf, 3))

arch/arm/kernel/ptrace.c

315

return copy_from_user(&thread->fpstate.iwmmxt, ufp, IWMMXT_SIZE)

arch/arm/kernel/sys_oabi-compat.c

204

if (copy_from_user(&user, (struct oabi_flock64 __user *)arg,

arch/arm/kernel/sys_oabi-compat.c

290

copy_from_user(&user, event, sizeof(user)))

arch/arm/kernel/sys_oabi-compat.c

358

err |= copy_from_user(&osb, tsops, sizeof(osb));

arch/arm/kernel/sys_oabi-compat.c

493

if (copy_from_user(a, args, 3 * sizeof(long)) == 0)

arch/arm/kernel/sys_oabi-compat.c

497

if (copy_from_user(a, args, 3 * sizeof(long)) == 0)

arch/arm/kernel/sys_oabi-compat.c

501

if (copy_from_user(a, args, 6 * sizeof(long)) == 0)

arch/arm/kernel/sys_oabi-compat.c

506

if (copy_from_user(a, args, 3 * sizeof(long)) == 0)

arch/arm64/include/asm/gcs.h

142

ret = copy_from_user(&load, addr, sizeof(load));

arch/arm64/kernel/ptrace.c

1858

ret = copy_from_user(&reg, ubuf, sizeof(reg));

arch/arm64/kernel/signal.c

1101

ret = copy_from_user(&cap, (unsigned long __user *)gcspr_el0,

arch/arm64/kernel/signal32.c

64

if (copy_from_user(&s32, uset, sizeof(*uset)))

arch/arm64/kvm/arm.c

1850

if (copy_from_user(&init, argp, sizeof(init)))

arch/arm64/kvm/arm.c

1865

if (copy_from_user(&reg, argp, sizeof(reg)))

arch/arm64/kvm/arm.c

1896

if (copy_from_user(&reg_list, user_list, sizeof(reg_list)))

arch/arm64/kvm/arm.c

1910

if (copy_from_user(&attr, argp, sizeof(attr)))

arch/arm64/kvm/arm.c

1917

if (copy_from_user(&attr, argp, sizeof(attr)))

arch/arm64/kvm/arm.c

1924

if (copy_from_user(&attr, argp, sizeof(attr)))

arch/arm64/kvm/arm.c

1949

if (copy_from_user(&events, argp, sizeof(events)))

arch/arm64/kvm/arm.c

2038

if (copy_from_user(&dev_addr, argp, sizeof(dev_addr)))

arch/arm64/kvm/arm.c

2055

if (copy_from_user(&copy_tags, argp, sizeof(copy_tags)))

arch/arm64/kvm/arm.c

2062

if (copy_from_user(&offset, argp, sizeof(offset)))

arch/arm64/kvm/arm.c

2067

if (copy_from_user(&attr, argp, sizeof(attr)))

arch/arm64/kvm/arm.c

2073

if (copy_from_user(&attr, argp, sizeof(attr)))

arch/arm64/kvm/arm.c

2081

if (copy_from_user(&range, argp, sizeof(range)))

arch/arm64/kvm/guest.c

237

if (copy_from_user(valp, uaddr, KVM_REG_SIZE(reg->id))) {

arch/arm64/kvm/guest.c

351

if (copy_from_user(vqs, (const void __user *)reg->addr, sizeof(vqs)))

arch/arm64/kvm/guest.c

529

if (copy_from_user((void *)vcpu->arch.sve_state + region.koffset, uptr,

arch/arm64/kvm/hypercalls.c

179

if (copy_from_user(&filter, uaddr, sizeof(filter)))

arch/arm64/kvm/hypercalls.c

573

if (copy_from_user(&val, uaddr, KVM_REG_SIZE(reg->id)))

arch/arm64/kvm/pmu-emul.c

1170

if (copy_from_user(&filter, uaddr, sizeof(filter)))

arch/arm64/kvm/vgic/vgic-its.c

2752

if (copy_from_user(&addr, uaddr, sizeof(addr)))

arch/hexagon/kernel/signal.c

70

err |= copy_from_user(&regs->r00, &sc->sc_regs.r0,

arch/loongarch/kernel/machine_kexec.c

63

if (copy_from_user(head, kimage->segment[i].buf, strlen(bootloader)))

arch/loongarch/kernel/machine_kexec.c

66

if (!copy_from_user(cmdline_ptr, kimage->segment[i].buf, COMMAND_LINE_SIZE))

arch/loongarch/kvm/intc/dmsintc.c

109

if (copy_from_user(&val, data, sizeof(s->msg_addr_size)))

arch/loongarch/kvm/intc/dmsintc.c

95

if (copy_from_user(&val, data, sizeof(s->msg_addr_base)))

arch/loongarch/kvm/intc/eiointc.c

423

if (copy_from_user(&val, data, 4))

arch/loongarch/kvm/intc/eiointc.c

600

if (copy_from_user(&data, (void __user *)attr->addr, 4))

arch/loongarch/kvm/intc/eiointc.c

605

if (copy_from_user(&data, (void __user *)attr->addr, 4))

arch/loongarch/kvm/intc/pch_pic.c

349

if (copy_from_user(buf, data, len))

arch/loongarch/kvm/intc/pch_pic.c

389

if (copy_from_user(&addr, uaddr, sizeof(addr)))

arch/loongarch/kvm/vcpu.c

1260

if (copy_from_user(&reg, argp, sizeof(reg)))

arch/loongarch/kvm/vcpu.c

1273

if (copy_from_user(&cap, argp, sizeof(cap)))

arch/loongarch/kvm/vcpu.c

1280

if (copy_from_user(&attr, argp, sizeof(attr)))

arch/loongarch/kvm/vcpu.c

1287

if (copy_from_user(&attr, argp, sizeof(attr)))

arch/loongarch/kvm/vcpu.c

1294

if (copy_from_user(&attr, argp, sizeof(attr)))

arch/loongarch/kvm/vcpu.c

1494

if (copy_from_user(&irq, argp, sizeof(irq)))

arch/loongarch/kvm/vm.c

189

if (copy_from_user(&attr, argp, sizeof(attr)))

arch/m68k/bvme6000/rtc.c

80

if (copy_from_user(&rtc_tm, argp, sizeof(struct rtc_time)))

arch/m68k/kernel/ptrace.c

258

if (copy_from_user(&child->thread.fp, datap,

arch/m68k/kernel/signal.c

657

if (extra && copy_from_user(buf, fp, extra))

arch/m68k/kernel/signal.c

690

if (copy_from_user(&context, usc, sizeof(context)))

arch/m68k/kernel/time.c

123

if (copy_from_user(&pll, argp, sizeof(pll)))

arch/mips/kernel/machine_kexec.c

71

if (copy_from_user(&fdt, kimage->segment[i].buf, sizeof(fdt)))

arch/mips/kernel/mips-mt-fpaff.c

80

if (copy_from_user(new_mask, user_mask_ptr, len)) {

arch/mips/kernel/rtlx.c

307

failed = copy_from_user(rt->rt_buffer + rt->rt_write, buffer, fl);

arch/mips/kernel/rtlx.c

313

failed = copy_from_user(rt->rt_buffer, buffer + fl, count - fl);

arch/mips/kernel/vpe.c

857

count -= copy_from_user(v->pbuffer + v->len, buffer, count);

arch/mips/kvm/mips.c

782

return copy_from_user(vs, uaddr, 16) ? -EFAULT : 0;

arch/mips/kvm/mips.c

907

if (copy_from_user(&irq, argp, sizeof(irq)))

arch/mips/kvm/mips.c

933

if (copy_from_user(&reg, argp, sizeof(reg)))

arch/mips/kvm/mips.c

947

if (copy_from_user(&reg_list, user_list, sizeof(reg_list)))

arch/mips/kvm/mips.c

963

if (copy_from_user(&cap, argp, sizeof(cap)))

arch/parisc/kernel/perf.c

309

if (copy_from_user(&image_type, buf, sizeof(uint32_t)))

arch/powerpc/kernel/ptrace/ptrace.c

97

if (copy_from_user(&bp_info, datavp,

arch/powerpc/kernel/rtas-proc.c

266

if (copy_from_user(buf, p, count))

arch/powerpc/kernel/rtas-proc.c

318

if (copy_from_user(progress_led, buf, count)) { /* save the string */

arch/powerpc/kernel/rtas.c

1865

if (copy_from_user(&args, uargs, 3 * sizeof(u32)) != 0)

arch/powerpc/kernel/rtas.c

1881

if (copy_from_user(args.args, uargs->args,

arch/powerpc/kernel/rtas_flash.c

352

if(copy_from_user(p, buffer, count)) {

arch/powerpc/kernel/rtas_flash.c

410

if (copy_from_user (stkbuf, buf, count))

arch/powerpc/kernel/rtas_flash.c

507

if (copy_from_user(args_buf->buf + *off, buf, count))

arch/powerpc/kernel/signal_32.c

1205

if (copy_from_user(&op, dbg + i, sizeof(op)))

arch/powerpc/kernel/signal_32.c

1315

if (copy_from_user(&sigctx, sc, sizeof(sigctx)))

arch/powerpc/kvm/book3s_32_mmu.c

209

if(copy_from_user(pteg, (void __user *)ptegp, sizeof(pteg))) {

arch/powerpc/kvm/book3s_64_mmu.c

251

if(copy_from_user(pteg, (void __user *)ptegp, sizeof(pteg))) {

arch/powerpc/kvm/book3s_hv.c

6177

if (copy_from_user(&ghf, argp, sizeof(ghf)))

arch/powerpc/kvm/book3s_hv.c

6187

if (copy_from_user(&rhpt, argp, sizeof(rhpt)))

arch/powerpc/kvm/book3s_hv.c

6198

if (copy_from_user(&rhpt, argp, sizeof(rhpt)))

arch/powerpc/kvm/book3s_pr_papr.c

179

if (copy_from_user(pte, (void __user *)pteg, sizeof(pte))) {

arch/powerpc/kvm/book3s_pr_papr.c

226

if (copy_from_user(pte, (void __user *)pteg, sizeof(pte)))

arch/powerpc/kvm/book3s_pr_papr.c

51

if (copy_from_user(pteg, (void __user *)pteg_addr, sizeof(pteg)))

arch/powerpc/kvm/book3s_pr_papr.c

98

if (copy_from_user(pte, (void __user *)pteg, sizeof(pte)))

arch/powerpc/kvm/book3s_rtas.c

203

if (copy_from_user(&args, argp, sizeof(args)))

arch/powerpc/kvm/book3s_xive_native.c

585

if (copy_from_user(&kvm_eq, ubufp, sizeof(kvm_eq)))

arch/powerpc/kvm/e500_mmu.c

747

if (copy_from_user(&params, (void __user *)(uintptr_t)cfg->params,

arch/powerpc/kvm/mpic.c

1463

if (copy_from_user(&base, (u64 __user *)(long)attr->addr, sizeof(u64)))

arch/powerpc/kvm/powerpc.c

1742

if (copy_from_user(&val, (char __user *)(unsigned long)reg->addr, size))

arch/powerpc/kvm/powerpc.c

1915

if (copy_from_user(&cfg, user_ptr, sizeof(cfg)))

arch/powerpc/kvm/powerpc.c

2033

if (copy_from_user(&irq, argp, sizeof(irq)))

arch/powerpc/kvm/powerpc.c

2052

if (copy_from_user(&cap, argp, sizeof(cap)))

arch/powerpc/kvm/powerpc.c

2065

if (copy_from_user(&reg, argp, sizeof(reg)))

arch/powerpc/kvm/powerpc.c

2078

if (copy_from_user(&dirty, argp, sizeof(dirty)))

arch/powerpc/kvm/powerpc.c

2379

if (copy_from_user(&create_tce_64, argp, sizeof(create_tce_64)))

arch/powerpc/kvm/powerpc.c

2393

if (copy_from_user(&create_tce, argp, sizeof(create_tce)))

arch/powerpc/kvm/powerpc.c

2431

if (copy_from_user(&cfg, argp, sizeof(cfg)))

arch/powerpc/math-emu/lfd.c

12

if (copy_from_user(frD, ea, sizeof(double)))

arch/powerpc/math-emu/lfs.c

23

if (copy_from_user(&f, ea, sizeof(float)))

arch/powerpc/platforms/book3s/vas-api.c

296

rc = copy_from_user(&uattr, uptr, sizeof(uattr));

arch/powerpc/platforms/cell/spufs/file.c

1005

if (copy_from_user(&data, buf, 4))

arch/powerpc/platforms/cell/spufs/file.c

1138

if (copy_from_user(&data, buf, 4))

arch/powerpc/platforms/cell/spufs/file.c

121

if (copy_from_user(attr->set_buf, buf, size))

arch/powerpc/platforms/cell/spufs/file.c

1620

if (copy_from_user(&cmd, buffer, sizeof cmd))

arch/powerpc/platforms/powernv/opal-prd.c

236

rc = copy_from_user(&hdr, buf, sizeof(hdr));

arch/powerpc/platforms/powernv/opal-prd.c

288

rc = copy_from_user(&scom, (void __user *)param, sizeof(scom));

arch/powerpc/platforms/powernv/opal-prd.c

304

rc = copy_from_user(&scom, (void __user *)param, sizeof(scom));

arch/powerpc/platforms/pseries/lpar.c

512

if (copy_from_user(buf, p, count))

arch/powerpc/platforms/pseries/lpar.c

609

if (copy_from_user(buf, p, count))

arch/powerpc/platforms/pseries/lparcfg.c

705

if (copy_from_user(kbuf, buf, count))

arch/powerpc/platforms/pseries/papr-hvpipe.c

302

if (!copy_from_user(rtas_work_area_raw_buf(work_buf), buf, size)) {

arch/powerpc/platforms/pseries/papr-indices.c

283

if (copy_from_user(kbuf, ubuf, sizeof(*kbuf)))

arch/powerpc/platforms/pseries/papr-phy-attest.c

232

if (copy_from_user(&params->cmd, ulc,

arch/powerpc/platforms/pseries/papr-sysparm.c

231

if (len > 0 && copy_from_user(kern_spbuf->val, user_iob->data, len)) {

arch/powerpc/platforms/pseries/papr-vpd.c

218

if (copy_from_user(&klc, ulc, sizeof(klc)))

arch/riscv/kernel/machine_kexec.c

49

else if (copy_from_user(&fdt, image->segment[i].buf, sizeof(fdt)))

arch/riscv/kernel/signal.c

142

return copy_from_user(current->thread.vstate.datap, datap, riscv_v_vsize);

arch/riscv/kernel/sys_hwprobe.c

402

ret = copy_from_user(&cpus, cpus_user, cpusetsize);

arch/riscv/kernel/sys_hwprobe.c

454

ret = copy_from_user(&cpus, cpus_user, cpusetsize);

arch/riscv/kernel/sys_hwprobe.c

469

ret = copy_from_user(&pair, &pairs[i], sizeof(pair));

arch/riscv/kernel/traps_misaligned.c

315

if (copy_from_user(&val, (u8 __user *)addr, len))

arch/riscv/kvm/aia_device.c

310

if (copy_from_user(&nr, uaddr, sizeof(nr)))

arch/riscv/kvm/aia_device.c

320

if (copy_from_user(&addr, uaddr, sizeof(addr)))

arch/riscv/kvm/aia_device.c

345

if (copy_from_user(&nr, uaddr, sizeof(nr)))

arch/riscv/kvm/aia_device.c

354

if (copy_from_user(&v, uaddr, sizeof(v)))

arch/riscv/kvm/aia_device.c

377

if (copy_from_user(&nr, uaddr, sizeof(nr)))

arch/riscv/kvm/aia_device.c

391

if (copy_from_user(&addr, uaddr, sizeof(addr)))

arch/riscv/kvm/aia_device.c

410

if (copy_from_user(&nr, uaddr, sizeof(nr)))

arch/riscv/kvm/aia_device.c

424

if (copy_from_user(&v, uaddr, sizeof(v)))

arch/riscv/kvm/vcpu.c

258

if (copy_from_user(&irq, argp, sizeof(irq)))

arch/riscv/kvm/vcpu.c

283

if (copy_from_user(&reg, argp, sizeof(reg)))

arch/riscv/kvm/vcpu.c

298

if (copy_from_user(&reg_list, user_list, sizeof(reg_list)))

arch/riscv/kvm/vcpu_fp.c

171

if (copy_from_user(reg_val, uaddr, KVM_REG_SIZE(reg->id)))

arch/riscv/kvm/vcpu_onereg.c

242

if (copy_from_user(&reg_val, uaddr, KVM_REG_SIZE(reg->id)))

arch/riscv/kvm/vcpu_onereg.c

403

if (copy_from_user(&reg_val, uaddr, KVM_REG_SIZE(reg->id)))

arch/riscv/kvm/vcpu_onereg.c

582

if (copy_from_user(&reg_val, uaddr, KVM_REG_SIZE(reg->id)))

arch/riscv/kvm/vcpu_onereg.c

96

if (copy_from_user(&reg_val, uaddr, KVM_REG_SIZE(reg->id)))

arch/riscv/kvm/vcpu_sbi.c

343

if (copy_from_user(&reg_val, uaddr, KVM_REG_SIZE(reg->id)))

arch/riscv/kvm/vcpu_sbi.c

499

if (copy_from_user(reg_val, uaddr, KVM_REG_SIZE(reg->id)))

arch/riscv/kvm/vcpu_timer.c

218

if (copy_from_user(&reg_val, uaddr, KVM_REG_SIZE(reg->id)))

arch/riscv/kvm/vcpu_vector.c

202

if (copy_from_user(&reg_val, uaddr, reg_size))

arch/riscv/kvm/vcpu_vector.c

214

if (copy_from_user(reg_addr, uaddr, reg_size))

arch/s390/hypfs/hypfs_sprp.c

82

if (copy_from_user(diag304, user_area, sizeof(*diag304)))

arch/s390/hypfs/hypfs_sprp.c

92

if (copy_from_user(data, udata, PAGE_SIZE))

arch/s390/include/asm/idals.h

326

left = copy_from_user(vaddr, from, IDA_BLOCK_SIZE);

arch/s390/include/asm/idals.h

333

return copy_from_user(vaddr, from, count);

arch/s390/kernel/debug.c

1696

if (copy_from_user(input_buf, user_buf, 1)) {

arch/s390/kernel/dis.c

494

if (copy_from_user(dst, (char __user *)src, len))

arch/s390/kernel/guarded_storage.c

63

if (copy_from_user(gs_cb, u_gs_cb, sizeof(*gs_cb)))

arch/s390/kernel/perf_cpum_cf.c

1609

if (copy_from_user(&start, ustart, sizeof(start)))

arch/s390/kernel/perf_cpum_cf.c

1628

if (copy_from_user(&preq->mask, umask, len)) {

arch/s390/kernel/ptrace.c

445

if (copy_from_user(&parea, (void __force __user *) addr,

arch/s390/kvm/interrupt.c

2369

if (copy_from_user(target, source, size))

arch/s390/kvm/interrupt.c

2425

if (copy_from_user(&adapter_info,

arch/s390/kvm/interrupt.c

2655

if (copy_from_user(&req, (void __user *)attr->addr, sizeof(req)))

arch/s390/kvm/interrupt.c

2701

if (copy_from_user(&schid, (void __user *) attr->addr, sizeof(schid)))

arch/s390/kvm/interrupt.c

2724

if (copy_from_user(&req, (void __user *)attr->addr, sizeof(req)))

arch/s390/kvm/interrupt.c

2823

if (copy_from_user(&ais, (void __user *)attr->addr, sizeof(ais)))

arch/s390/kvm/interrupt.c

3199

if (copy_from_user((void *) buf, irqstate, len)) {

arch/s390/kvm/kvm-s390.c

1338

if (copy_from_user(&gtod, (void __user *)attr->addr, sizeof(gtod)))

arch/s390/kvm/kvm-s390.c

1355

if (copy_from_user(&gtod_high, (void __user *)attr->addr,

arch/s390/kvm/kvm-s390.c

1370

if (copy_from_user(&gtod.tod, (void __user *)attr->addr,

arch/s390/kvm/kvm-s390.c

1514

if (!copy_from_user(proc, (void __user *)attr->addr,

arch/s390/kvm/kvm-s390.c

1549

if (copy_from_user(&data, (void __user *)attr->addr, sizeof(data)))

arch/s390/kvm/kvm-s390.c

1579

if (copy_from_user(&kvm->arch.model.subfuncs, (void __user *)attr->addr,

arch/s390/kvm/kvm-s390.c

2237

r = copy_from_user(keys, (uint8_t __user *)args->skeydata_addr,

arch/s390/kvm/kvm-s390.c

2373

r = copy_from_user(bits, (void __user *)args->values, args->count);

arch/s390/kvm/kvm-s390.c

2674

if (copy_from_user(&parms, argp, sizeof(parms)))

arch/s390/kvm/kvm-s390.c

2688

if (!copy_from_user(hdr, (void __user *)parms.origin,

arch/s390/kvm/kvm-s390.c

2704

if (copy_from_user(&unp, argp, sizeof(unp)))

arch/s390/kvm/kvm-s390.c

2758

if (copy_from_user(&info, argp, sizeof(info.header)))

arch/s390/kvm/kvm-s390.c

2792

if (copy_from_user(&dmp, argp, sizeof(dmp)))

arch/s390/kvm/kvm-s390.c

2854

if (acc_mode == GACC_STORE && copy_from_user(tmpbuf, uaddr, mop->size))

arch/s390/kvm/kvm-s390.c

2885

if (copy_from_user(&new, uaddr, mop->size))

arch/s390/kvm/kvm-s390.c

2887

if (copy_from_user(&old, old_addr, mop->size))

arch/s390/kvm/kvm-s390.c

2938

if (copy_from_user(&s390int, argp, sizeof(s390int)))

arch/s390/kvm/kvm-s390.c

2956

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

arch/s390/kvm/kvm-s390.c

2963

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

arch/s390/kvm/kvm-s390.c

2970

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

arch/s390/kvm/kvm-s390.c

2979

if (copy_from_user(&args, argp,

arch/s390/kvm/kvm-s390.c

2989

if (copy_from_user(&args, argp,

arch/s390/kvm/kvm-s390.c

2999

if (copy_from_user(&args, argp, sizeof(args)))

arch/s390/kvm/kvm-s390.c

3015

if (copy_from_user(&args, argp, sizeof(args)))

arch/s390/kvm/kvm-s390.c

3032

if (copy_from_user(&args, argp, sizeof(args))) {

arch/s390/kvm/kvm-s390.c

3051

if (copy_from_user(&mem_op, argp, sizeof(mem_op)) == 0)

arch/s390/kvm/kvm-s390.c

3062

if (copy_from_user(&kop, argp, sizeof(kop))) {

arch/s390/kvm/kvm-s390.c

3089

if (copy_from_user(&args, argp, sizeof(args))) {

arch/s390/kvm/kvm-s390.c

5353

if (copy_from_user(sida_addr, uaddr, mop->size))

arch/s390/kvm/kvm-s390.c

5393

if (copy_from_user(tmpbuf, uaddr, mop->size))

arch/s390/kvm/kvm-s390.c

5441

if (copy_from_user(&s390irq, argp, sizeof(s390irq)))

arch/s390/kvm/kvm-s390.c

5450

if (copy_from_user(&s390int, argp, sizeof(s390int)))

arch/s390/kvm/kvm-s390.c

5486

if (copy_from_user(&dmp, (__u8 __user *)cmd->data, sizeof(dmp)))

arch/s390/kvm/kvm-s390.c

5538

if (copy_from_user(&psw, argp, sizeof(psw)))

arch/s390/kvm/kvm-s390.c

5581

if (copy_from_user(&reg, argp, sizeof(reg)))

arch/s390/kvm/kvm-s390.c

5594

if (copy_from_user(&ucas, argp, sizeof(ucas)))

arch/s390/kvm/kvm-s390.c

5612

if (copy_from_user(&ucas, argp, sizeof(ucas)))

arch/s390/kvm/kvm-s390.c

5649

if (copy_from_user(&cap, argp, sizeof(cap)))

arch/s390/kvm/kvm-s390.c

5657

if (copy_from_user(&mem_op, argp, sizeof(mem_op)) == 0)

arch/s390/kvm/kvm-s390.c

5667

if (copy_from_user(&irq_state, argp, sizeof(irq_state)))

arch/s390/kvm/kvm-s390.c

5685

if (copy_from_user(&irq_state, argp, sizeof(irq_state)))

arch/s390/kvm/kvm-s390.c

5705

if (copy_from_user(&cmd, argp, sizeof(cmd)))

arch/s390/pci/pci_clp.c

594

if (copy_from_user(lpcb, uptr, PAGE_SIZE) != 0)

arch/s390/pci/pci_clp.c

653

if (copy_from_user(&req, argp, sizeof(req)))

arch/s390/pci/pci_mmio.c

167

if (copy_from_user(buf, user_buffer, length))

arch/sh/boards/mach-landisk/gio.c

62

if (copy_from_user(&data, (int *)arg, sizeof(int))) {

arch/sh/kernel/traps_32.c

291

if (copy_from_user(&instruction, addr, sizeof(instruction))) {

arch/sh/kernel/traps_32.c

509

if (copy_from_user(&instruction, (insn_size_t __user *)(regs->pc & ~1),

arch/sh/kernel/traps_32.c

75

copy_from_user,

arch/sparc/kernel/process_64.c

113

if (copy_from_user (&r_w, rw, sizeof(r_w))) {

arch/sparc/kernel/process_64.c

143

if (copy_from_user (&r_w, rw, sizeof(r_w))) {

arch/sparc/kernel/ptrace_32.c

55

if (copy_from_user(uregs, (void __user *)reg_window, size))

arch/sparc/kernel/ptrace_64.c

164

if (copy_from_user(kbuf, (void __user *) uaddr, len))

arch/sparc/kernel/signal32.c

161

err |= copy_from_user(&seta.sig[1], &sf->extramask,

arch/sparc/kernel/signal_64.c

117

err |= copy_from_user(fpregs,

arch/sparc/kernel/signal_64.c

121

err |= copy_from_user(fpregs+16,

arch/sparc/kernel/signal_64.c

292

err |= copy_from_user(regs->u_regs, sf->regs.u_regs, sizeof(regs->u_regs));

arch/sparc/kernel/sigutil_32.c

114

err |= copy_from_user(&t->reg_window[i],

arch/sparc/kernel/sigutil_64.c

48

err |= copy_from_user(fpregs, &fpu->si_float_regs[0],

arch/sparc/kernel/sigutil_64.c

51

err |= copy_from_user(fpregs+16, &fpu->si_float_regs[32],

arch/sparc/kernel/sigutil_64.c

88

err |= copy_from_user(&t->reg_window[i],

arch/sparc/kernel/sys_sparc_32.c

192

if (copy_from_user(&new_ka.sa, act, sizeof(*act)))

arch/sparc/kernel/sys_sparc_64.c

578

if (copy_from_user(&txc, txc_p, sizeof(txc)))

arch/sparc/kernel/sys_sparc_64.c

611

if (copy_from_user(&txc, txc_p, sizeof(txc)))

arch/sparc/kernel/sys_sparc_64.c

706

if (copy_from_user(&new_ka.sa, act, sizeof(*act)))

arch/sparc/kernel/termios.c

42

err |= copy_from_user(k->c_cc, u->c_cc, NCCS);

arch/sparc/kernel/termios.c

86

err |= copy_from_user(k->c_cc, u->c_cc, NCCS);

arch/sparc/kernel/traps_64.c

2143

if (!copy_from_user(&insn, (void __user *)regs->tpc, 4)) {

arch/sparc/kernel/traps_64.c

2441

if (copy_from_user(buf, pc - 3, sizeof(buf)))

arch/um/drivers/ubd_kern.c

1352

if(copy_from_user(&volume, (char __user *) arg, sizeof(volume)))

arch/um/kernel/exitcode.c

47

if (copy_from_user(buf, buffer, size))

arch/um/kernel/process.c

255

return copy_from_user(to, from, size);

arch/x86/kernel/cpu/mce/dev-mcelog.c

302

if (copy_from_user(&m, ubuf, usize))

arch/x86/kernel/cpu/mce/inject.c

373

if (copy_from_user(&buf, ubuf, cnt))

arch/x86/kernel/cpu/mtrr/if.c

174

if (copy_from_user(&sentry, arg, sizeof(sentry)))

arch/x86/kernel/cpu/mtrr/if.c

179

if (copy_from_user(&gentry, arg, sizeof(gentry)))

arch/x86/kernel/cpu/sgx/ioctl.c

1042

if (copy_from_user(&params, arg, sizeof(params)))

arch/x86/kernel/cpu/sgx/ioctl.c

1189

if (copy_from_user(&params, arg, sizeof(params)))

arch/x86/kernel/cpu/sgx/ioctl.c

164

if (copy_from_user(&create_arg, arg, sizeof(create_arg)))

arch/x86/kernel/cpu/sgx/ioctl.c

171

if (copy_from_user(secs, (void __user *)create_arg.src, PAGE_SIZE))

arch/x86/kernel/cpu/sgx/ioctl.c

426

if (copy_from_user(&add_arg, arg, sizeof(add_arg)))

arch/x86/kernel/cpu/sgx/ioctl.c

435

if (copy_from_user(&secinfo, (void __user *)add_arg.secinfo,

arch/x86/kernel/cpu/sgx/ioctl.c

584

if (copy_from_user(&init_arg, arg, sizeof(init_arg)))

arch/x86/kernel/cpu/sgx/ioctl.c

599

if (copy_from_user(sigstruct, (void __user *)init_arg.sigstruct,

arch/x86/kernel/cpu/sgx/ioctl.c

641

if (copy_from_user(&params, arg, sizeof(params)))

arch/x86/kernel/cpu/sgx/ioctl.c

833

if (copy_from_user(&params, arg, sizeof(params)))

arch/x86/kernel/fpu/regset.c

164

if (copy_from_user(tmpbuf, ubuf, count)) {

arch/x86/kernel/fpu/xstate.c

1282

if (copy_from_user(dst, ubuf + offset, size))

arch/x86/kernel/ldt.c

591

if (copy_from_user(&ldt_info, ptr, sizeof(ldt_info)))

arch/x86/kernel/msr.c

130

if (copy_from_user(&data, tmp, 8)) {

arch/x86/kernel/msr.c

161

if (copy_from_user(&regs, uregs, sizeof(regs))) {

arch/x86/kernel/msr.c

177

if (copy_from_user(&regs, uregs, sizeof(regs))) {

arch/x86/kernel/signal_32.c

115

if (unlikely(copy_from_user(&sc, usc, sizeof(sc))))

arch/x86/kernel/signal_64.c

59

if (copy_from_user(&sc, usc, offsetof(struct sigcontext, reserved1)))

arch/x86/kernel/sys_ia32.c

228

if (copy_from_user(&a, arg, sizeof(a)))

arch/x86/kernel/tls.c

122

if (copy_from_user(&info, u_info, sizeof(info)))

arch/x86/kernel/uprobes.c

1770

if (copy_from_user(&orig_ret_vaddr, (void __user *)regs->sp, rasize))

arch/x86/kernel/uprobes.c

388

err = copy_from_user(&args, (void __user *)regs->sp, sizeof(args));

arch/x86/kernel/uprobes.c

815

err = copy_from_user(&args, (void __user *)regs->sp, sizeof(args));

arch/x86/kernel/vm86_32.c

242

if (copy_from_user(&v, user_vm86,

arch/x86/kernel/vm86_32.c

276

if (copy_from_user(&vm86->int_revectored,

arch/x86/kernel/vm86_32.c

280

if (copy_from_user(&vm86->int21_revectored,

arch/x86/kernel/vm86_32.c

285

if (copy_from_user(&vm86->vm86plus, &user_vm86->vm86plus,

arch/x86/kvm/cpuid.c

1968

if (copy_from_user(pad, entries[i].padding, sizeof(pad)))

arch/x86/kvm/pmu.c

1251

if (copy_from_user(&tmp, user_filter, sizeof(tmp)))

arch/x86/kvm/pmu.c

1275

if (copy_from_user(filter->events, user_filter->events,

arch/x86/kvm/svm/sev.c

1155

if (copy_from_user(&params, measure, sizeof(params)))

arch/x86/kvm/svm/sev.c

1335

if (copy_from_user(buf + (dst & 15), (void __user *)src, len))

arch/x86/kvm/svm/sev.c

1354

if (copy_from_user(&debug, u64_to_user_ptr(argp->data), sizeof(debug)))

arch/x86/kvm/svm/sev.c

1433

if (copy_from_user(&params, u64_to_user_ptr(argp->data), sizeof(params)))

arch/x86/kvm/svm/sev.c

1507

if (copy_from_user(&params, u64_to_user_ptr(argp->data), sizeof(params)))

arch/x86/kvm/svm/sev.c

1586

if (copy_from_user(&params, u64_to_user_ptr(argp->data),

arch/x86/kvm/svm/sev.c

1697

if (copy_from_user(&params, u64_to_user_ptr(argp->data),

arch/x86/kvm/svm/sev.c

1803

if (copy_from_user(&params, u64_to_user_ptr(argp->data),

arch/x86/kvm/svm/sev.c

1874

if (copy_from_user(&params, u64_to_user_ptr(argp->data),

arch/x86/kvm/svm/sev.c

2263

if (copy_from_user(&params, u64_to_user_ptr(argp->data), sizeof(params)))

arch/x86/kvm/svm/sev.c

2412

if (copy_from_user(&params, u64_to_user_ptr(argp->data), sizeof(params)))

arch/x86/kvm/svm/sev.c

2553

if (copy_from_user(&params, u64_to_user_ptr(argp->data), sizeof(params)))

arch/x86/kvm/svm/sev.c

2636

if (copy_from_user(&sev_cmd, argp, sizeof(struct kvm_sev_cmd)))

arch/x86/kvm/svm/sev.c

614

if (copy_from_user(&data, u64_to_user_ptr(argp->data), sizeof(data)))

arch/x86/kvm/svm/sev.c

663

if (copy_from_user(&params, u64_to_user_ptr(argp->data), sizeof(params)))

arch/x86/kvm/svm/sev.c

910

if (copy_from_user(&params, u64_to_user_ptr(argp->data), sizeof(params)))

arch/x86/kvm/vmx/nested.c

7019

if (copy_from_user(vmcs12, user_vmx_nested_state->vmcs12, sizeof(*vmcs12)))

arch/x86/kvm/vmx/nested.c

7047

if (copy_from_user(shadow_vmcs12,

arch/x86/kvm/vmx/tdx.c

2899

if (copy_from_user(cmd, argp, sizeof(*cmd)))

arch/x86/kvm/vmx/tdx.c

3084

if (copy_from_user(td_cpuid, output, sizeof(*output))) {

arch/x86/kvm/vmx/tdx.c

3241

if (copy_from_user(&region, u64_to_user_ptr(cmd->data), sizeof(region)))

arch/x86/kvm/x86.c

4687

if (copy_from_user(&msrs, user_msrs, sizeof(msrs)))

arch/x86/kvm/x86.c

4743

if (copy_from_user(&cpuid, cpuid_arg, sizeof(cpuid)))

arch/x86/kvm/x86.c

5035

if (copy_from_user(&msr_list, user_msr_list, sizeof(msr_list)))

arch/x86/kvm/x86.c

5061

if (copy_from_user(&cpuid, cpuid_arg, sizeof(cpuid)))

arch/x86/kvm/x86.c

5088

if (copy_from_user(&msr_list, user_msr_list, sizeof(msr_list)))

arch/x86/kvm/x86.c

5115

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

arch/x86/kvm/x86.c

5123

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

arch/x86/kvm/x86.c

5987

if (copy_from_user(&attr, argp, sizeof(attr)))

arch/x86/kvm/x86.c

6128

if (copy_from_user(&one_reg, argp, sizeof(one_reg)))

arch/x86/kvm/x86.c

6242

if (copy_from_user(&irq, argp, sizeof(irq)))

arch/x86/kvm/x86.c

6260

if (copy_from_user(&cpuid, cpuid_arg, sizeof(cpuid)))

arch/x86/kvm/x86.c

6270

if (copy_from_user(&cpuid, cpuid_arg, sizeof(cpuid)))

arch/x86/kvm/x86.c

6281

if (copy_from_user(&cpuid, cpuid_arg, sizeof(cpuid)))

arch/x86/kvm/x86.c

6316

if (copy_from_user(&tac, argp, sizeof(tac)))

arch/x86/kvm/x86.c

6335

if (copy_from_user(&va, argp, sizeof(va)))

arch/x86/kvm/x86.c

6346

if (copy_from_user(&mcg_cap, argp, sizeof(mcg_cap)))

arch/x86/kvm/x86.c

6355

if (copy_from_user(&mce, argp, sizeof(mce)))

arch/x86/kvm/x86.c

6375

if (copy_from_user(&events, argp, sizeof(struct kvm_vcpu_events)))

arch/x86/kvm/x86.c

6401

if (copy_from_user(&dbgregs, argp,

arch/x86/kvm/x86.c

6522

if (copy_from_user(&cap, argp, sizeof(cap)))

arch/x86/kvm/x86.c

6566

if (copy_from_user(&kvm_state, user_kvm_nested_state, sizeof(kvm_state)))

arch/x86/kvm/x86.c

6599

if (copy_from_user(&xva, argp, sizeof(xva)))

arch/x86/kvm/x86.c

6610

if (copy_from_user(&xva, argp, sizeof(xva)))

arch/x86/kvm/x86.c

7134

if (copy_from_user(&filter_compat, user_msr_filter,

arch/x86/kvm/x86.c

7205

if (copy_from_user(&data, argp, sizeof(data)))

arch/x86/kvm/x86.c

7289

if (copy_from_user(&ident_addr, argp, sizeof(ident_addr)))

arch/x86/kvm/x86.c

7349

if (copy_from_user(&u.pit_config, argp,

arch/x86/kvm/x86.c

7411

if (copy_from_user(&u.ps, argp, sizeof(struct kvm_pit_state)))

arch/x86/kvm/x86.c

7427

if (copy_from_user(&u.ps, argp, sizeof(u.ps)))

arch/x86/kvm/x86.c

7453

if (copy_from_user(&u.ps2, argp, sizeof(u.ps2)))

arch/x86/kvm/x86.c

7467

if (copy_from_user(&control, argp, sizeof(control)))

arch/x86/kvm/x86.c

7492

if (copy_from_user(&xhc, argp, sizeof(xhc)))

arch/x86/kvm/x86.c

7501

if (copy_from_user(&xha, argp, sizeof(xha)))

arch/x86/kvm/x86.c

7512

if (copy_from_user(&xha, argp, sizeof(xha)))

arch/x86/kvm/x86.c

7521

if (copy_from_user(&uxe, argp, sizeof(uxe)))

arch/x86/kvm/x86.c

7569

if (copy_from_user(&region, argp, sizeof(region)))

arch/x86/kvm/x86.c

7583

if (copy_from_user(&region, argp, sizeof(region)))

arch/x86/kvm/x86.c

7598

if (copy_from_user(&hvevfd, argp, sizeof(hvevfd)))

arch/x86/kvm/x86.c

7611

if (copy_from_user(&filter, user_msr_filter, sizeof(filter)))

arch/x86/lib/insn-eval.c

1515

not_copied = copy_from_user(buf, (void __user *)ip, MAX_INSN_SIZE);

arch/x86/mm/pkeys.c

147

if (copy_from_user(buf, user_buf, len))

arch/x86/um/ptrace.c

157

if (copy_from_user(&buf, ubuf, sizeof(buf)))

arch/x86/um/signal.c

347

if (copy_from_user(&set.sig[0], &sc->oldmask, sizeof(set.sig[0])) ||

arch/x86/um/signal.c

348

copy_from_user(&set.sig[1], frame->extramask, sig_size))

arch/x86/um/signal.c

43

err = copy_from_user(&sc, from, sizeof(sc));

arch/x86/um/signal.c

455

if (copy_from_user(&set, &uc->uc_sigmask, sizeof(set)))

arch/x86/um/signal.c

91

err = copy_from_user(regs->regs.fp, from_fp64, host_fp_size);

arch/x86/um/tls_32.c

217

if (copy_from_user(&info, (void __user *) tls, sizeof(info)))

arch/x86/um/tls_32.c

275

if (copy_from_user(&info, user_desc, sizeof(info)))

arch/x86/um/tls_32.c

309

if (copy_from_user(&info, user_desc, sizeof(info)))

arch/xtensa/kernel/ptrace.c

462

if (copy_from_user(user_data, datap, sizeof(user_data)))

arch/xtensa/kernel/traps.c

185

if (copy_from_user(buf, (void __user *)(regs->pc & -16), sizeof(buf)) == 0) {

arch/xtensa/kernel/traps.c

327

if (copy_from_user(buf, (void __user *)regs->pc + 2, 5))

block/blk-crypto.c

451

if (copy_from_user(&arg, argp, sizeof(arg)))

block/blk-crypto.c

460

if (copy_from_user(raw_key, u64_to_user_ptr(arg.raw_key_ptr),

block/blk-crypto.c

494

if (copy_from_user(&arg, argp, sizeof(arg)))

block/blk-crypto.c

529

if (copy_from_user(&arg, argp, sizeof(arg)))

block/blk-crypto.c

538

if (copy_from_user(lt_key, u64_to_user_ptr(arg.lt_key_ptr),

block/blk-mq-debugfs.c

137

if (copy_from_user(opbuf, buf, count))

block/blk-zoned.c

387

if (copy_from_user(&rep, argp, sizeof(struct blk_zone_report)))

block/blk-zoned.c

468

if (copy_from_user(&zrange, argp, sizeof(struct blk_zone_range)))

block/bsg.c

65

if (copy_from_user(&hdr, uarg, sizeof(hdr)))

block/ioctl.c

130

if (copy_from_user(range, (void __user *)arg, sizeof(range)))

block/ioctl.c

187

if (copy_from_user(range, argp, sizeof(range)))

block/ioctl.c

220

if (copy_from_user(range, (void __user *)arg, sizeof(range)))

block/ioctl.c

30

if (copy_from_user(&p, upart, sizeof(struct blkpg_partition)))

block/ioctl.c

351

if (copy_from_user(&reg, arg, sizeof(reg)))

block/ioctl.c

369

if (copy_from_user(&rsv, arg, sizeof(rsv)))

block/ioctl.c

387

if (copy_from_user(&rsv, arg, sizeof(rsv)))

block/ioctl.c

405

if (copy_from_user(&p, arg, sizeof(p)))

block/ioctl.c

423

if (copy_from_user(&c, arg, sizeof(c)))

block/ioctl.c

447

if (copy_from_user(&read_keys, arg, sizeof(read_keys)))

block/sed-opal.c

1449

if (copy_from_user(dst, src + off, len)) {

drivers/accel/amdxdna/aie2_pci.c

1137

if (copy_from_user(&power_state, u64_to_user_ptr(args->buffer),

drivers/accel/amdxdna/aie2_pci.c

1163

if (copy_from_user(&state, u64_to_user_ptr(args->buffer), sizeof(state)))

drivers/accel/amdxdna/aie2_pci.c

647

if (copy_from_user(&status, u64_to_user_ptr(args->buffer), buf_sz)) {

drivers/accel/amdxdna/aie2_pci.c

948

if (copy_from_user(header, u64_to_user_ptr(args->buffer), sizeof(*header))) {

drivers/accel/amdxdna/amdxdna_ctx.c

236

if (copy_from_user(&hwctx->qos, u64_to_user_ptr(args->qos_p), sizeof(hwctx->qos))) {

drivers/accel/amdxdna/amdxdna_ctx.c

370

if (copy_from_user(buf, u64_to_user_ptr(val), buf_size)) {

drivers/accel/amdxdna/amdxdna_ctx.c

716

ret = copy_from_user(arg_bo_hdls, u64_to_user_ptr(args->args),

drivers/accel/amdxdna/amdxdna_debugfs.c

54

if (copy_from_user(kbuf, buf, count))

drivers/accel/amdxdna/amdxdna_gem.c

1345

if (copy_from_user(&tmp, buf, min_sz))

drivers/accel/amdxdna/amdxdna_gem.c

813

if (copy_from_user(&va_tbl, u64_to_user_ptr(args->vaddr), sizeof(va_tbl))) {

drivers/accel/amdxdna/amdxdna_ubuf.c

106

if (copy_from_user(va_ent, va_entries, sizeof(*va_ent) * num_entries)) {

drivers/accel/ethosu/ethosu_job.c

504

if (copy_from_user(jobs,

drivers/accel/habanalabs/common/command_submission.c

1433

if (copy_from_user(*cs_chunk_array, chunks, size_to_copy)) {

drivers/accel/habanalabs/common/command_submission.c

1916

if (copy_from_user(signal_seq_arr,

drivers/accel/habanalabs/common/command_submission.c

2486

if (copy_from_user(cores, engine_cores_arr, num_engine_cores * sizeof(u32))) {

drivers/accel/habanalabs/common/command_submission.c

2528

if (copy_from_user(engines, engines_arr, num_engines * sizeof(u32))) {

drivers/accel/habanalabs/common/command_submission.c

3047

if (copy_from_user(cs_seq_arr, seq_arr, size_to_copy)) {

drivers/accel/habanalabs/common/command_submission.c

3540

if (copy_from_user(&completion_value, u64_to_user_ptr(user_address), 8)) {

drivers/accel/habanalabs/common/command_submission.c

3575

if (copy_from_user(&completion_value, u64_to_user_ptr(user_address), 8)) {

drivers/accel/habanalabs/common/debugfs.c

489

if (copy_from_user(kbuf, buf, count))

drivers/accel/habanalabs/common/debugfs.c

551

if (copy_from_user(kbuf, buf, count))

drivers/accel/habanalabs/common/debugfs.c

646

if (copy_from_user(kbuf, buf, count))

drivers/accel/habanalabs/common/debugfs.c

777

if (copy_from_user(kbuf, buf, count))

drivers/accel/habanalabs/common/habanalabs_ioctl.c

1274

if (copy_from_user(kdata, (void __user *)arg, usize)) {

drivers/accel/habanalabs/common/habanalabs_ioctl.c

219

if (copy_from_user(input, u64_to_user_ptr(args->input_ptr),

drivers/accel/habanalabs/common/habanalabs_ioctl.c

984

if (need_input_buff && copy_from_user(fw_buff, buff, size)) {

drivers/accel/ivpu/ivpu_job.c

872

ret = copy_from_user(buf_handles, buffers_ptr, buffer_count * sizeof(u32));

drivers/accel/qaic/qaic_control.c

1334

if (copy_from_user(msg->data, user_data, user_msg->len)) {

drivers/accel/rocket/rocket_job.c

618

if (copy_from_user(&jobs[i],

drivers/accel/rocket/rocket_job.c

83

if (copy_from_user(&task,

drivers/accessibility/speakup/devsynth.c

27

if (copy_from_user(buf, ptr, bytes))

drivers/accessibility/speakup/devsynth.c

57

if (copy_from_user(buf, ptr, bytes))

drivers/acpi/acpi_dbg.c

656

if (copy_from_user(p, buf, n)) {

drivers/acpi/apei/einj-core.c

894

if (copy_from_user(einj_buf, buf, count))

drivers/acpi/apei/erst-dbg.c

177

if (copy_from_user(erst_dbg_buf, ubuf, usize)) {

drivers/acpi/apei/erst-dbg.c

63

if (copy_from_user(&record_id, (void __user *)arg,

drivers/acpi/pfr_telemetry.c

254

if (copy_from_user(&info, p, sizeof(info)))

drivers/acpi/pfr_update.c

440

if (copy_from_user(&rev, p, sizeof(rev)))

drivers/acpi/proc.c

99

if (copy_from_user(strbuf, buffer, count))

drivers/android/binder.c

1813

if (copy_from_user(object, u + offset, read_size))

drivers/android/binder.c

2728

ret = copy_from_user(&fd, sender_ufda_base + sender_uoffset, sizeof(fd));

drivers/android/binder.c

4337

if (copy_from_user(&tr, ptr, sizeof(tr)))

drivers/android/binder.c

4348

if (copy_from_user(&tr, ptr, sizeof(tr)))

drivers/android/binder.c

4572

if (copy_from_user(&handle_cookie, ptr, sizeof(handle_cookie)))

drivers/android/binder.c

4585

if (copy_from_user(&handle_cookie, ptr, sizeof(handle_cookie)))

drivers/android/binder.c

5477

if (copy_from_user(&bwr, ubuf, sizeof(bwr)))

drivers/android/binder.c

5816

if (copy_from_user(&max_threads, ubuf,

drivers/android/binder.c

5829

if (copy_from_user(&fbo, ubuf, sizeof(fbo))) {

drivers/android/binder.c

5862

if (copy_from_user(&info, ubuf, sizeof(info))) {

drivers/android/binder.c

5881

if (copy_from_user(&info, ubuf, sizeof(info))) {

drivers/android/binder.c

5903

if (copy_from_user(&info, ubuf, sizeof(info))) {

drivers/android/binder.c

5958

if (copy_from_user(&info, ubuf, sizeof(info))) {

drivers/android/binder.c

5976

if (copy_from_user(&enable, ubuf, sizeof(enable))) {

drivers/android/binder/rust_binderfs.c

227

ret = copy_from_user(&device_req, device, sizeof(device_req));

drivers/android/binder_alloc.c

1349

ret = copy_from_user(kptr, from, size);

drivers/android/binderfs.c

235

ret = copy_from_user(&device_req, device, sizeof(device_req));

drivers/ata/libata-scsi.c

478

if (copy_from_user(args, arg, sizeof(args)))

drivers/ata/libata-scsi.c

585

if (copy_from_user(args, arg, sizeof(args)))

drivers/base/regmap/regmap-debugfs.c

314

if (copy_from_user(buf, user_buf, buf_size))

drivers/block/aoe/aoechr.c

101

if (copy_from_user(buf, str, size))

drivers/block/aoe/aoedev.c

329

if (copy_from_user(buf, str, cnt))

drivers/block/aoe/aoenet.c

104

if (copy_from_user(aoe_iflist, user_str, size)) {

drivers/block/ataflop.c

1643

if (copy_from_user(&setprm, argp, sizeof(setprm)))

drivers/block/ataflop.c

1750

if (copy_from_user(&fmt_desc, argp, sizeof(fmt_desc)))

drivers/block/floppy.c

2960

return copy_from_user(address, param, size) ? -EFAULT : 0;

drivers/block/floppy.c

3669

if (copy_from_user(&v, arg, offsetof(struct floppy_struct, name)))

drivers/block/floppy.c

3710

if (copy_from_user(&v, arg, sizeof(struct compat_floppy_drive_params)))

drivers/block/loop.c

1351

if (copy_from_user(&info, arg, sizeof (struct loop_info)))

drivers/block/loop.c

1362

if (copy_from_user(&info64, arg, sizeof (struct loop_info64)))

drivers/block/loop.c

1531

if (copy_from_user(&config, argp, sizeof(config)))

drivers/block/loop.c

1597

if (copy_from_user(&info, arg, sizeof(info)))

drivers/block/mtip32xx/mtip32xx.c

1958

if (copy_from_user(drive_command,

drivers/block/mtip32xx/mtip32xx.c

1982

if (copy_from_user(drive_command,

drivers/block/mtip32xx/mtip32xx.c

2003

if (copy_from_user(&req_task, (void __user *) arg,

drivers/block/mtip32xx/mtip32xx.c

3106

if (copy_from_user(&req_task, (void __user *) arg,

drivers/block/ublk_drv.c

3637

} else if (copy_from_user(iter->buf, iter->uaddr + iter->done,

drivers/block/ublk_drv.c

4663

if (copy_from_user(&info, argp, sizeof(info)))

drivers/block/ublk_drv.c

5004

if (copy_from_user(&ph, argp, sizeof(ph)))

drivers/block/ublk_drv.c

5034

if (copy_from_user(&ph, argp, sizeof(ph)))

drivers/block/ublk_drv.c

5050

} else if (copy_from_user(&ub->params, argp, ph.len)) {

drivers/block/ublk_drv.c

5422

if (copy_from_user(&buf_reg, argp,

drivers/bluetooth/hci_vhci.c

337

if (copy_from_user(&dump_data, user_buf, count))

drivers/bus/fsl-mc/fsl-mc-uapi.c

458

error = copy_from_user(&mc_cmd, (void __user *)arg, sizeof(mc_cmd));

drivers/bus/mhi/host/debugfs.c

259

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/cdrom/cdrom.c

2262

if (copy_from_user(&info, argp, sizeof(info)))

drivers/cdrom/cdrom.c

2376

if (copy_from_user(&tmp_info, info, sizeof(tmp_info)) != 0)

drivers/cdrom/cdrom.c

2607

if (copy_from_user(&q, argp, sizeof(q)))

drivers/cdrom/cdrom.c

2637

if (copy_from_user(&header, argp, sizeof(header)))

drivers/cdrom/cdrom.c

2675

if (copy_from_user(&entry, argp, sizeof(entry)))

drivers/cdrom/cdrom.c

2692

if (copy_from_user(&msf, argp, sizeof(msf)))

drivers/cdrom/cdrom.c

2707

if (copy_from_user(&ti, argp, sizeof(ti)))

drivers/cdrom/cdrom.c

2724

if (copy_from_user(&volume, argp, sizeof(volume)))

drivers/cdrom/cdrom.c

2967

if (copy_from_user(&msf, (struct cdrom_msf __user *)arg, sizeof(msf)))

drivers/cdrom/cdrom.c

3021

if (copy_from_user(&ra32, arg, sizeof(ra32)))

drivers/cdrom/cdrom.c

3033

if (copy_from_user(&ra, (struct cdrom_read_audio __user *)arg,

drivers/cdrom/cdrom.c

3060

if (copy_from_user(&q, (struct cdrom_subchnl __user *)arg, sizeof(q)))

drivers/cdrom/cdrom.c

3086

if (copy_from_user(&msf, (struct cdrom_msf __user *)arg, sizeof(msf)))

drivers/cdrom/cdrom.c

3106

if (copy_from_user(&blk, (struct cdrom_blk __user *)arg, sizeof(blk)))

drivers/cdrom/cdrom.c

3132

if (copy_from_user(&volctrl, (struct cdrom_volctrl __user *)arg,

drivers/cdrom/cdrom.c

3256

if (copy_from_user(&ai, (dvd_authinfo __user *)arg, sizeof(ai)))

drivers/char/adi.c

145

if (copy_from_user(ver_buf, &buf[bytes_written],

drivers/char/ds1620.c

259

if (copy_from_user(&therm, uarg.therm, sizeof(therm)))

drivers/char/ipmi/bt-bmc.c

278

if (copy_from_user(&kbuffer, buf, nwritten)) {

drivers/char/ipmi/ipmb_dev_int.c

147

if (copy_from_user(&msg, buf, count))

drivers/char/ipmi/ipmi_devintf.c

149

if (copy_from_user(&addr, req->addr, req->addr_len))

drivers/char/ipmi/ipmi_devintf.c

172

if (copy_from_user(msg.data,

drivers/char/ipmi/ipmi_devintf.c

307

if (copy_from_user(&req, arg, sizeof(req))) {

drivers/char/ipmi/ipmi_devintf.c

325

if (copy_from_user(&req, arg, sizeof(req))) {

drivers/char/ipmi/ipmi_devintf.c

342

if (copy_from_user(&rsp, arg, sizeof(rsp)))

drivers/char/ipmi/ipmi_devintf.c

354

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

368

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

382

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

396

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

410

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

424

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

455

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

486

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

498

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

518

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

531

if (copy_from_user(&val, arg, sizeof(val))) {

drivers/char/ipmi/ipmi_devintf.c

551

if (copy_from_user(&parms, arg, sizeof(parms))) {

drivers/char/ipmi/ipmi_devintf.c

599

if (copy_from_user(&mode, arg, sizeof(mode))) {

drivers/char/ipmi/ipmi_devintf.c

729

if (copy_from_user(&r32, compat_ptr(arg), sizeof(r32)))

drivers/char/ipmi/ipmi_devintf.c

747

if (copy_from_user(&sp32, compat_ptr(arg), sizeof(sp32)))

drivers/char/ipmi/ipmi_devintf.c

761

if (copy_from_user(&recv32, compat_ptr(arg), sizeof(recv32)))

drivers/char/ipmi/ipmi_watchdog.c

644

i = copy_from_user(&val, argp, sizeof(int));

drivers/char/ipmi/ipmi_watchdog.c

657

i = copy_from_user(&val, argp, sizeof(int));

drivers/char/ipmi/ipmi_watchdog.c

673

i = copy_from_user(&val, argp, sizeof(int));

drivers/char/ipmi/kcs_bmc_cdev_ipmi.c

394

if (copy_from_user(priv->kbuffer, buf, count)) {

drivers/char/ipmi/ssif_bmc.c

189

if (copy_from_user(&msg, buf, count))

drivers/char/lp.c

327

if (copy_from_user(kbuf, buf, copy_size)) {

drivers/char/lp.c

394

if (copy_from_user(kbuf, buf, copy_size)) {

drivers/char/lp.c

704

if (copy_from_user(karg, arg, sizeof(karg)))

drivers/char/lp.c

714

if (copy_from_user(karg, arg, sizeof(karg)))

drivers/char/mem.c

220

copied = copy_from_user(ptr, buf, sz);

drivers/char/nvram.c

295

if (copy_from_user(&part, (void __user *)arg,

drivers/char/ppdev.c

225

if (copy_from_user(kbuffer, buf + bytes_written, n)) {

drivers/char/ppdev.c

431

if (copy_from_user(&mode, argp, sizeof(mode)))

drivers/char/ppdev.c

461

if (copy_from_user(&phase, argp, sizeof(phase)))

drivers/char/ppdev.c

502

if (copy_from_user(&uflags, argp, sizeof(uflags)))

drivers/char/ppdev.c

559

if (copy_from_user(&reg, argp, sizeof(reg)))

drivers/char/ppdev.c

565

if (copy_from_user(&reg, argp, sizeof(reg)))

drivers/char/ppdev.c

571

if (copy_from_user(&mask, argp,

drivers/char/ppdev.c

574

if (copy_from_user(&reg, 1 + (unsigned char __user *) arg,

drivers/char/ppdev.c

581

if (copy_from_user(&mode, argp, sizeof(mode)))

drivers/char/ppdev.c

590

if (copy_from_user(&mode, argp, sizeof(mode)))

drivers/char/ppdev.c

605

if (copy_from_user(&reg, argp, sizeof(reg)))

drivers/char/ppdev.c

622

if (copy_from_user(time32, argp, sizeof(time32)))

drivers/char/ppdev.c

631

if (copy_from_user(time64, argp, sizeof(time64)))

drivers/char/ps3flash.c

208

if (copy_from_user(dst, userbuf, n)) {

drivers/char/sonypi.c

1012

if (copy_from_user(&val8, argp, sizeof(val8))) {

drivers/char/sonypi.c

1028

if (copy_from_user(&val8, argp, sizeof(val8))) {

drivers/char/sonypi.c

958

if (copy_from_user(&val8, argp, sizeof(val8))) {

drivers/char/toshiba.c

254

if (copy_from_user(&regs, argp, sizeof(SMMRegisters)))

drivers/char/tpm/tpm-dev-common.c

191

if (copy_from_user(priv->data_buffer, buf, size)) {

drivers/char/tpm/tpm_vtpm_proxy.c

149

if (copy_from_user(proxy_dev->buffer, buf, count)) {

drivers/char/tpm/tpm_vtpm_proxy.c

638

if (copy_from_user(&vtpm_new_dev, vtpm_new_dev_p,

drivers/char/virtio_console.c

823

ret = copy_from_user(buf->buf, ubuf, count);

drivers/char/xilinx_hwicap/xilinx_hwicap.c

478

if (copy_from_user(

drivers/char/xilinx_hwicap/xilinx_hwicap.c

487

if (copy_from_user(kbuf, buf + written, len)) {

drivers/char/xilinx_hwicap/xilinx_hwicap.c

511

if (!copy_from_user(drvdata->write_buffer,

drivers/char/xillybus/xillybus_core.c

1321

if (copy_from_user(

drivers/char/xillybus/xillyusb.c

348

if (copy_from_user(dst, (const void __user *)src, n))

drivers/comedi/comedi_fops.c

1198

if (copy_from_user(&bi, arg, sizeof(bi)))

drivers/comedi/comedi_fops.c

1690

if (copy_from_user(data, insns[i].data,

drivers/comedi/comedi_fops.c

1777

if (copy_from_user(data,

drivers/comedi/comedi_fops.c

2344

if (copy_from_user(&it, (void __user *)arg, sizeof(it)))

drivers/comedi/comedi_fops.c

2353

if (copy_from_user(&it, (void __user *)arg, sizeof(it)))

drivers/comedi/comedi_fops.c

2372

if (copy_from_user(&cmd, (void __user *)arg, sizeof(cmd))) {

drivers/comedi/comedi_fops.c

2385

if (copy_from_user(&cmd, (void __user *)arg, sizeof(cmd))) {

drivers/comedi/comedi_fops.c

2398

if (copy_from_user(&insnlist, (void __user *)arg,

drivers/comedi/comedi_fops.c

2419

if (copy_from_user(&insn, (void __user *)arg, sizeof(insn)))

drivers/comedi/comedi_fops.c

2690

uncopied = copy_from_user(buf_page_list[page].virt_addr +

drivers/comedi/comedi_fops.c

3130

if (copy_from_user(&chaninfo32, compat_ptr(arg), sizeof(chaninfo32)))

drivers/comedi/comedi_fops.c

3159

if (copy_from_user(&rangeinfo32, compat_ptr(arg), sizeof(rangeinfo32)))

drivers/comedi/comedi_fops.c

3182

if (copy_from_user(&v32, cmd32, sizeof(v32)))

drivers/comedi/comedi_fops.c

3299

if (copy_from_user(&v32, insn32, sizeof(v32)))

drivers/comedi/comedi_fops.c

3321

if (copy_from_user(&insnlist32, compat_ptr(arg), sizeof(insnlist32)))

drivers/comedi/comedi_fops.c

914

if (copy_from_user(&it, arg, sizeof(it)))

drivers/comedi/comedi_fops.c

955

if (copy_from_user(&bc, arg, sizeof(bc)))

drivers/counter/counter-chrdev.c

276

if (copy_from_user(&watch, uwatch, sizeof(watch)))

drivers/crypto/ccp/dbc.c

146

if (copy_from_user(dbc_dev->payload, argp, sizeof(struct dbc_user_nonce)))

drivers/crypto/ccp/dbc.c

157

if (copy_from_user(dbc_dev->payload, argp, sizeof(struct dbc_user_setuid)))

drivers/crypto/ccp/dbc.c

169

if (copy_from_user(dbc_dev->payload, argp, sizeof(struct dbc_user_param)))

drivers/crypto/ccp/sev-dev.c

1820

if (copy_from_user(&input, (void __user *)argp->data, sizeof(input)))

drivers/crypto/ccp/sev-dev.c

2123

if (copy_from_user(&input, (void __user *)argp->data, sizeof(input)))

drivers/crypto/ccp/sev-dev.c

2176

if (copy_from_user(&input, (void __user *)argp->data, sizeof(input)))

drivers/crypto/ccp/sev-dev.c

2280

if (copy_from_user(&input, (void __user *)argp->data, sizeof(input)))

drivers/crypto/ccp/sev-dev.c

2470

if (copy_from_user(&config, (void __user *)argp->data, sizeof(config)))

drivers/crypto/ccp/sev-dev.c

2492

if (copy_from_user(&input, u64_to_user_ptr(argp->data), sizeof(input)))

drivers/crypto/ccp/sev-dev.c

2524

if (copy_from_user(&input, argp, sizeof(struct sev_issue_cmd)))

drivers/crypto/ccp/sfs.c

152

if (copy_from_user(payload_name, sfs_update_package->payload_name,

drivers/crypto/hisilicon/qm.c

2733

if (copy_from_user(&qp_ctx, (void __user *)arg,

drivers/crypto/hisilicon/qm.c

2749

if (copy_from_user(&qp_info, (void __user *)arg,

drivers/crypto/intel/qat/qat_common/adf_heartbeat_dbgfs.c

170

if (copy_from_user(buf, user_buf, count))

drivers/cxl/core/mbox.c

647

if (copy_from_user(&send, s, sizeof(send)))

drivers/dma-buf/dma-buf.c

445

if (copy_from_user(&arg, user_data, sizeof(arg)))

drivers/dma-buf/dma-buf.c

502

if (copy_from_user(&arg, user_data, sizeof(arg)))

drivers/dma-buf/dma-buf.c

552

if (copy_from_user(&sync, (void __user *) arg, sizeof(sync)))

drivers/dma-buf/dma-heap.c

166

if (copy_from_user(kdata, (void __user *)arg, in_size) != 0) {

drivers/dma-buf/sw_sync.c

359

if (copy_from_user(&data, (void __user *)arg, sizeof(data))) {

drivers/dma-buf/sw_sync.c

397

if (copy_from_user(&value, (void __user *)arg, sizeof(value)))

drivers/dma-buf/sw_sync.c

418

if (copy_from_user(&data, (void __user *)arg, sizeof(data)))

drivers/dma-buf/sync_file.c

224

if (copy_from_user(&data, (void __user *)arg, sizeof(data))) {

drivers/dma-buf/sync_file.c

306

if (copy_from_user(&info, (void __user *)arg, sizeof(info)))

drivers/dma-buf/sync_file.c

371

if (copy_from_user(&ts, (void __user *)arg, sizeof(ts)))

drivers/dma-buf/udmabuf.c

455

if (copy_from_user(&create, (void __user *)arg,

drivers/dma-buf/udmabuf.c

475

if (copy_from_user(&head, (void __user *)arg, sizeof(head)))

drivers/dma/idxd/cdev.c

435

rc = copy_from_user(&descriptor, udesc, sizeof(descriptor));

drivers/edac/versal_edac.c

860

if (copy_from_user(buf, data, len))

drivers/edac/zynqmp_edac.c

308

if (copy_from_user(buf, data, len))

drivers/firewire/core-cdev.c

1201

if (copy_from_user

drivers/firewire/core-cdev.c

1836

if (copy_from_user(&buffer, arg, _IOC_SIZE(cmd)))

drivers/firewire/core-cdev.c

685

if (request->data && copy_from_user(payload, u64_to_uptr(request->data), request->length)) {

drivers/firewire/core-cdev.c

917

if (copy_from_user(r->data, u64_to_uptr(a->data), a->length)) {

drivers/firewire/core-cdev.c

963

if (copy_from_user(r->data, u64_to_uptr(a->data),

drivers/firmware/efi/capsule-loader.c

205

if (copy_from_user(kbuff, buff, write_byte)) {

drivers/firmware/efi/test/efi_test.c

153

if (copy_from_user(&getvariable, getvariable_user,

drivers/firmware/efi/test/efi_test.c

160

if (copy_from_user(&vendor_guid, getvariable.vendor_guid,

drivers/firmware/efi/test/efi_test.c

241

if (copy_from_user(&setvariable, setvariable_user, sizeof(setvariable)))

drivers/firmware/efi/test/efi_test.c

243

if (copy_from_user(&vendor_guid, setvariable.vendor_guid,

drivers/firmware/efi/test/efi_test.c

286

if (copy_from_user(&gettime, gettime_user, sizeof(gettime)))

drivers/firmware/efi/test/efi_test.c

323

if (copy_from_user(&settime, settime_user, sizeof(settime)))

drivers/firmware/efi/test/efi_test.c

325

if (copy_from_user(&efi_time, settime.time,

drivers/firmware/efi/test/efi_test.c

345

if (copy_from_user(&getwakeuptime, getwakeuptime_user,

drivers/firmware/efi/test/efi_test.c

387

if (copy_from_user(&setwakeuptime, setwakeuptime_user,

drivers/firmware/efi/test/efi_test.c

393

if (copy_from_user(&efi_time, setwakeuptime.time,

drivers/firmware/efi/test/efi_test.c

420

if (copy_from_user(&getnextvariablename, getnextvariablename_user,

drivers/firmware/efi/test/efi_test.c

432

if (copy_from_user(&vendor_guid,

drivers/firmware/efi/test/efi_test.c

518

if (copy_from_user(&getnexthighmonocount,

drivers/firmware/efi/test/efi_test.c

546

if (copy_from_user(&resetsystem, resetsystem_user,

drivers/firmware/efi/test/efi_test.c

572

if (copy_from_user(&queryvariableinfo, queryvariableinfo_user,

drivers/firmware/efi/test/efi_test.c

611

if (copy_from_user(&qcaps, qcaps_user, sizeof(qcaps)))

drivers/firmware/efi/test/efi_test.c

632

if (copy_from_user(&capsules[i], c,

drivers/firmware/tegra/bpmp-debugfs.c

668

if (copy_from_user(datavirt, buf, count)) {

drivers/fpga/dfl-afu-main.c

662

if (copy_from_user(&info, arg, minsz))

drivers/fpga/dfl-afu-main.c

691

if (copy_from_user(&rinfo, arg, minsz))

drivers/fpga/dfl-afu-main.c

720

if (copy_from_user(&map, arg, minsz))

drivers/fpga/dfl-afu-main.c

754

if (copy_from_user(&unmap, arg, minsz))

drivers/fpga/dfl-fme-pr.c

109

if (copy_from_user(buf,

drivers/fpga/dfl-fme-pr.c

83

if (copy_from_user(&port_pr, argp, minsz))

drivers/fpga/dfl.c

1994

if (copy_from_user(&hdr, (void __user *)arg, sizeof(hdr)))

drivers/fsi/fsi-core.c

772

rc = copy_from_user(&data, buf + total_len, write_len);

drivers/fsi/fsi-occ.c

162

if (copy_from_user(&cmd[1], buf, len)) {

drivers/fsi/fsi-sbefifo.c

896

if (copy_from_user(user->pending_cmd, buf, len)) {

drivers/fsi/fsi-scom.c

352

rc = copy_from_user(&val, buf, len);

drivers/fsi/fsi-scom.c

409

if (copy_from_user(&acc, argp, sizeof(struct scom_access)))

drivers/fsi/fsi-scom.c

428

if (copy_from_user(&acc, argp, sizeof(struct scom_access)))

drivers/fsi/i2cr-scom.c

64

ret = copy_from_user(&data, buf, len);

drivers/fwctl/main.c

120

if (copy_from_user(inbuf, u64_to_user_ptr(cmd->in), cmd->in_len))

drivers/gnss/core.c

151

if (copy_from_user(gdev->write_buf, buf, n)) {

drivers/gpib/common/gpib_os.c

1000

fault = copy_from_user(board->buffer, userbuf, (board->buffer_length < remain) ?

drivers/gpib/common/gpib_os.c

1051

fault = copy_from_user(&write_cmd, (void __user *)arg, sizeof(write_cmd));

drivers/gpib/common/gpib_os.c

1086

fault = copy_from_user(board->buffer, userbuf, (board->buffer_length < remain) ?

drivers/gpib/common/gpib_os.c

1127

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1247

retval = copy_from_user(&open_dev_cmd, (void __user *)arg, sizeof(open_dev_cmd));

drivers/gpib/common/gpib_os.c

1300

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1334

retval = copy_from_user(&serial_cmd, (void __user *)arg, sizeof(serial_cmd));

drivers/gpib/common/gpib_os.c

1357

retval = copy_from_user(&wait_cmd, (void __user *)arg, sizeof(wait_cmd));

drivers/gpib/common/gpib_os.c

1417

retval = copy_from_user(&online_cmd, (void __user *)arg, sizeof(online_cmd));

drivers/gpib/common/gpib_os.c

1427

retval = copy_from_user(board->config.init_data, init_data,

drivers/gpib/common/gpib_os.c

1455

retval = copy_from_user(&enable, (void __user *)arg, sizeof(enable));

drivers/gpib/common/gpib_os.c

1467

retval = copy_from_user(&synchronous, (void __user *)arg, sizeof(synchronous));

drivers/gpib/common/gpib_os.c

1497

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1533

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1566

retval = copy_from_user(&eos_cmd, (void __user *)arg, sizeof(eos_cmd));

drivers/gpib/common/gpib_os.c

1578

retval = copy_from_user(&status_byte, (void __user *)arg, sizeof(status_byte));

drivers/gpib/common/gpib_os.c

1590

retval = copy_from_user(&request_service2_cmd, (void __user *)arg,

drivers/gpib/common/gpib_os.c

1607

retval = copy_from_user(&base_addr, (void __user *)arg, sizeof(base_addr));

drivers/gpib/common/gpib_os.c

1626

retval = copy_from_user(&irq, (void __user *)arg, sizeof(irq));

drivers/gpib/common/gpib_os.c

1643

retval = copy_from_user(&dma_channel, (void __user *)arg, sizeof(dma_channel));

drivers/gpib/common/gpib_os.c

1659

retval = copy_from_user(&enable, (void __user *)arg, sizeof(enable));

drivers/gpib/common/gpib_os.c

1695

retval = copy_from_user(&lock_mutex, (void __user *)arg, sizeof(lock_mutex));

drivers/gpib/common/gpib_os.c

1735

retval = copy_from_user(&timeout, (void __user *)arg, sizeof(timeout));

drivers/gpib/common/gpib_os.c

1750

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1776

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1843

retval = copy_from_user(&usec_duration, (void __user *)arg, sizeof(usec_duration));

drivers/gpib/common/gpib_os.c

1858

retval = copy_from_user(&selection, (void __user *)arg, sizeof(selection));

drivers/gpib/common/gpib_os.c

1880

retval = copy_from_user(selection, (void __user *)arg,

drivers/gpib/common/gpib_os.c

2028

retval = copy_from_user(&request_control, (void __user *)arg, sizeof(request_control));

drivers/gpib/common/gpib_os.c

2044

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

823

retval = copy_from_user(&cmd, (void __user *)arg,

drivers/gpib/common/gpib_os.c

876

retval = copy_from_user(&read_cmd, (void __user *)arg, sizeof(read_cmd));

drivers/gpib/common/gpib_os.c

960

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c

1818

if (copy_from_user(buf, user_buffer, count)) {

drivers/gpio/gpiolib-cdev.c

1272

if (copy_from_user(&lv, ip, sizeof(lv)))

drivers/gpio/gpiolib-cdev.c

1342

if (copy_from_user(&lv, ip, sizeof(lv)))

drivers/gpio/gpiolib-cdev.c

1398

if (copy_from_user(&lc, ip, sizeof(lc)))

drivers/gpio/gpiolib-cdev.c

1613

if (copy_from_user(&ulr, ip, sizeof(ulr)))

drivers/gpio/gpiolib-cdev.c

171

if (copy_from_user(&gcnf, ip, sizeof(gcnf)))

drivers/gpio/gpiolib-cdev.c

2018

if (copy_from_user(&eventreq, ip, sizeof(eventreq)))

drivers/gpio/gpiolib-cdev.c

2313

if (copy_from_user(&lineinfo, ip, sizeof(lineinfo)))

drivers/gpio/gpiolib-cdev.c

2348

if (copy_from_user(&lineinfo, ip, sizeof(lineinfo)))

drivers/gpio/gpiolib-cdev.c

2381

if (copy_from_user(&offset, ip, sizeof(offset)))

drivers/gpio/gpiolib-cdev.c

244

if (copy_from_user(&ghd, ip, sizeof(ghd)))

drivers/gpio/gpiolib-cdev.c

310

if (copy_from_user(&handlereq, ip, sizeof(handlereq)))

drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c

210

if (copy_from_user(&info[i], uptr, bytes)) {

drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c

194

if (copy_from_user(&user_chunk, chunk_ptr,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

332

r = copy_from_user(&rd->id, (struct amdgpu_debugfs_regs2_iocdata_v2 *)data,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

338

r = copy_from_user(&v1_data, (struct amdgpu_debugfs_regs2_iocdata *)data,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

489

if (copy_from_user(&rd->id,

drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c

159

ret = copy_from_user((void *)&ta_type, &buf[copy_pos], sizeof(uint32_t));

drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c

165

ret = copy_from_user((void *)&ta_bin_len, &buf[copy_pos], sizeof(uint32_t));

drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c

257

ret = copy_from_user((void *)&ta_type, &buf[copy_pos], sizeof(uint32_t));

drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c

263

ret = copy_from_user((void *)&ta_id, &buf[copy_pos], sizeof(uint32_t));

drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c

306

ret = copy_from_user((void *)&ta_type, &buf[copy_pos], sizeof(uint32_t));

drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c

311

ret = copy_from_user((void *)&ta_id, &buf[copy_pos], sizeof(uint32_t));

drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c

316

ret = copy_from_user((void *)&cmd_id, &buf[copy_pos], sizeof(uint32_t));

drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c

321

ret = copy_from_user((void *)&shared_buf_len, &buf[copy_pos], sizeof(uint32_t));

drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c

368

if (copy_from_user(str, buf, s))

drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c

441

if (copy_from_user(data, buf, sizeof(*data)))

drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c

2903

r = copy_from_user(ptr + off, buf, bytes);

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2294

ret = copy_from_user(&process_priv,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2590

ret = copy_from_user(bo_buckets, (void __user *)args->bos,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2604

ret = copy_from_user(bo_privs, (void __user *)args->priv_data + *priv_offset,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

3646

if (copy_from_user(kdata, (void __user *)arg, usize) != 0) {

drivers/gpu/drm/amd/amdkfd/kfd_debugfs.c

66

if (copy_from_user(tmp, user_buf, size)) {

drivers/gpu/drm/amd/amdkfd/kfd_events.c

1002

if (copy_from_user(&event_data, &events[i],

drivers/gpu/drm/amd/amdkfd/kfd_events.c

482

ret = copy_from_user(ev_priv, user_priv_ptr + *priv_data_offset, sizeof(*ev_priv));

drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c

1005

ret = copy_from_user(q_data, user_priv_ptr + *priv_data_offset, sizeof(*q_data));

drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c

1042

ret = copy_from_user(q_extra_data, user_priv_ptr + *priv_data_offset, q_extra_data_size);

drivers/gpu/drm/amd/amdkfd/kfd_smi_events.c

134

if (copy_from_user(&events, user, sizeof(events)))

drivers/gpu/drm/amd/amdkfd/kfd_svm.c

4162

ret = copy_from_user(&criu_svm_md->data, user_priv_ptr + *priv_data_offset,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

1355

r = copy_from_user(data, buf, write_size);

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

95

if (copy_from_user(wr_buf_ptr, buf, wr_buf_size)) {

drivers/gpu/drm/armada/armada_gem.c

373

if (copy_from_user(dobj->addr + args->offset, ptr, args->size)) {

drivers/gpu/drm/drm_atomic_uapi.c

1726

if (copy_from_user(&prop_value,

drivers/gpu/drm/drm_color_mgmt.c

389

if (copy_from_user(r_base, (void __user *)(unsigned long)crtc_lut->red, size)) {

drivers/gpu/drm/drm_color_mgmt.c

395

if (copy_from_user(g_base, (void __user *)(unsigned long)crtc_lut->green, size)) {

drivers/gpu/drm/drm_color_mgmt.c

401

if (copy_from_user(b_base, (void __user *)(unsigned long)crtc_lut->blue, size)) {

drivers/gpu/drm/drm_debugfs.c

529

if (copy_from_user(buf, ubuf, len))

drivers/gpu/drm/drm_framebuffer.c

756

ret = copy_from_user(clips, clips_ptr,

drivers/gpu/drm/drm_ioc32.c

140

if (copy_from_user(&uq32, (void __user *)arg, sizeof(uq32)))

drivers/gpu/drm/drm_ioc32.c

184

if (copy_from_user(&c32, argp, sizeof(c32)))

drivers/gpu/drm/drm_ioc32.c

269

if (copy_from_user(&req32, argp, sizeof(req32)))

drivers/gpu/drm/drm_ioc32.c

311

if (copy_from_user(&req64, argp,

drivers/gpu/drm/drm_ioc32.c

315

if (copy_from_user(&req64.modifier, &argp->modifier,

drivers/gpu/drm/drm_ioc32.c

99

if (copy_from_user(&v32, (void __user *)arg, sizeof(v32)))

drivers/gpu/drm/drm_ioctl.c

906

if (copy_from_user(kdata, (void __user *)arg, in_size) != 0) {

drivers/gpu/drm/drm_property.c

867

if (copy_from_user(blob->data,

drivers/gpu/drm/drm_syncobj.c

1061

} else if (copy_from_user(points, user_points,

drivers/gpu/drm/drm_syncobj.c

1278

if (copy_from_user(handles, user_handles,

drivers/gpu/drm/drm_syncobj.c

1616

} else if (copy_from_user(points, u64_to_user_ptr(args->points),

drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c

478

ret = copy_from_user(bos, u64_to_user_ptr(args->bos),

drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c

485

ret = copy_from_user(relocs, u64_to_user_ptr(args->relocs),

drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c

492

ret = copy_from_user(pmrs, u64_to_user_ptr(args->pmrs),

drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c

499

ret = copy_from_user(stream, u64_to_user_ptr(args->stream),

drivers/gpu/drm/exynos/exynos_drm_g2d.c

1240

if (copy_from_user(cmdlist->data + cmdlist->last,

drivers/gpu/drm/exynos/exynos_drm_g2d.c

1259

if (copy_from_user(cmdlist->data + cmdlist->last,

drivers/gpu/drm/exynos/exynos_drm_g2d.c

734

if (copy_from_user(&g2d_userptr, (void __user *)handle,

drivers/gpu/drm/exynos/exynos_drm_ipp.c

334

if (copy_from_user((void *)task + map[i].offset, params,

drivers/gpu/drm/exynos/exynos_drm_vidi.c

271

if (copy_from_user(&hdr, edid_userptr, sizeof(hdr)))

drivers/gpu/drm/exynos/exynos_drm_vidi.c

280

if (copy_from_user(edid_buf, edid_userptr, size)) {

drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_debugfs.c

29

if (copy_from_user(buf, user_buf, count))

drivers/gpu/drm/i915/display/intel_hotplug.c

1210

if (copy_from_user(tmp, ubuf, len))

drivers/gpu/drm/i915/display/intel_hotplug.c

1291

if (copy_from_user(tmp, ubuf, len))

drivers/gpu/drm/i915/display/intel_wm.c

297

if (copy_from_user(tmp, ubuf, len))

drivers/gpu/drm/i915/gem/i915_gem_context.c

2028

if (copy_from_user(&user_sseu, u64_to_user_ptr(args->value),

drivers/gpu/drm/i915/gem/i915_gem_context.c

2133

if (copy_from_user(&user, u64_to_user_ptr(args->value), sizeof(user)))

drivers/gpu/drm/i915/gem/i915_gem_context.c

2277

if (copy_from_user(&local, ext, sizeof(local)))

drivers/gpu/drm/i915/gem/i915_gem_context.c

2492

if (copy_from_user(&user_sseu, u64_to_user_ptr(args->value),

drivers/gpu/drm/i915/gem/i915_gem_context.c

452

if (copy_from_user(&ci, &ext->engines[n], sizeof(ci))) {

drivers/gpu/drm/i915/gem/i915_gem_context.c

538

if (copy_from_user(&ci, &ext->master, sizeof(ci)))

drivers/gpu/drm/i915/gem/i915_gem_context.c

562

if (copy_from_user(&ci, &ext->engines[n], sizeof(ci)))

drivers/gpu/drm/i915/gem/i915_gem_context.c

660

if (copy_from_user(&ci, &ext->engines[n], sizeof(ci))) {

drivers/gpu/drm/i915/gem/i915_gem_context.c

771

if (copy_from_user(&ci, &user->engines[n], sizeof(ci))) {

drivers/gpu/drm/i915/gem/i915_gem_context.c

835

if (copy_from_user(&user_sseu, u64_to_user_ptr(args->value),

drivers/gpu/drm/i915/gem/i915_gem_create.c

307

if (copy_from_user(&region, uregions, sizeof(region)))

drivers/gpu/drm/i915/gem/i915_gem_create.c

372

if (copy_from_user(&ext, base, sizeof(ext)))

drivers/gpu/drm/i915/gem/i915_gem_create.c

383

if (copy_from_user(&ext, base, sizeof(ext)))

drivers/gpu/drm/i915/gem/i915_gem_create.c

411

if (copy_from_user(&ext, base, sizeof(ext)))

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

3053

if (copy_from_user(&timeline_fences, ext, sizeof(timeline_fences)))

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

3591

if (copy_from_user(exec2_list,

drivers/gpu/drm/i915/gem/i915_gem_phys.c

171

if (copy_from_user(vaddr, user_data, args->size))

drivers/gpu/drm/i915/gvt/kvmgt.c

1272

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/gpu/drm/i915/gvt/kvmgt.c

1292

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/gpu/drm/i915/gvt/kvmgt.c

1326

if (copy_from_user(&hdr, (void __user *)arg, minsz))

drivers/gpu/drm/i915/gvt/kvmgt.c

1366

if (copy_from_user(&dmabuf, (void __user *)arg, minsz))

drivers/gpu/drm/i915/gvt/kvmgt.c

956

if (copy_from_user(&val, buf, sizeof(val)))

drivers/gpu/drm/i915/gvt/kvmgt.c

968

if (copy_from_user(&val, buf, sizeof(val)))

drivers/gpu/drm/i915/gvt/kvmgt.c

980

if (copy_from_user(&val, buf, sizeof(val)))

drivers/gpu/drm/i915/gvt/kvmgt.c

992

if (copy_from_user(&val, buf, sizeof(val)))

drivers/gpu/drm/i915/i915_gem.c

528

unwritten = copy_from_user((void __force *)vaddr + offset,

drivers/gpu/drm/i915/i915_ioc32.c

53

if (copy_from_user(&req32, (void __user *)arg, sizeof(req32)))

drivers/gpu/drm/i915/i915_perf.c

4101

if (copy_from_user(&user_sseu,

drivers/gpu/drm/i915/i915_query.c

27

if (copy_from_user(query_hdr, u64_to_user_ptr(query_item->data_ptr),

drivers/gpu/drm/i915/i915_query.c

274

if (copy_from_user(uuid, user_query_config_ptr->uuid,

drivers/gpu/drm/i915/i915_query.c

296

if (copy_from_user(&user_config, user_config_ptr, sizeof(user_config))) {

drivers/gpu/drm/i915/i915_query.c

615

if (copy_from_user(&item, user_item_ptr, sizeof(item)))

drivers/gpu/drm/imagination/pvr_drv.c

1210

if (copy_from_user(out_alloc, u64_to_user_ptr(in->array),

drivers/gpu/drm/lima/lima_drv.c

130

if (copy_from_user(bos, u64_to_user_ptr(args->bos), size)) {

drivers/gpu/drm/lima/lima_drv.c

142

if (copy_from_user(task->frame, u64_to_user_ptr(args->frame), args->frame_size)) {

drivers/gpu/drm/loongson/lsdc_crtc.c

646

if (copy_from_user(buf, ubuf, len))

drivers/gpu/drm/mediatek/mtk_dpi.c

947

if (copy_from_user(buf, ubuf, len))

drivers/gpu/drm/msm/msm_drv.c

619

if (copy_from_user(msm_obj->name, u64_to_user_ptr(args->value),

drivers/gpu/drm/msm/msm_gem_submit.c

146

if (copy_from_user(&submit_bo, userptr, sizeof(submit_bo))) {

drivers/gpu/drm/msm/msm_gem_submit.c

207

ret = copy_from_user(&submit_cmd, userptr, sizeof(submit_cmd));

drivers/gpu/drm/msm/msm_gem_submit.c

263

ret = copy_from_user(submit->cmd[i].relocs, userptr, sz);

drivers/gpu/drm/msm/msm_gem_vma.c

1076

if (copy_from_user(&op, userptr, sizeof(op))) {

drivers/gpu/drm/msm/msm_perfcntr.c

462

if (copy_from_user(&g, userptr, sz))

drivers/gpu/drm/msm/msm_perfcntr.c

513

if (copy_from_user(perfcntrs->groups[idx]->countables, userptr, sz))

drivers/gpu/drm/msm/msm_syncobj.c

105

if (copy_from_user(&syncobj_desc,

drivers/gpu/drm/msm/msm_syncobj.c

30

if (copy_from_user(&syncobj_desc,

drivers/gpu/drm/nouveau/nouveau_abi16.c

884

if (copy_from_user(ioctl, user, size))

drivers/gpu/drm/nouveau/nouveau_debugfs.c

158

if (copy_from_user(buf, ubuf, len))

drivers/gpu/drm/panfrost/panfrost_drv.c

267

if (copy_from_user(handles,

drivers/gpu/drm/panfrost/panfrost_drv.c

608

if (copy_from_user(ops, (void __user *)(uintptr_t)args->ops,

drivers/gpu/drm/panthor/panthor_drv.c

115

if (copy_from_user(out_alloc, u64_to_user_ptr(in->array),

drivers/gpu/drm/qxl/qxl_ioctl.c

208

if (copy_from_user(&reloc, u + i, sizeof(reloc))) {

drivers/gpu/drm/qxl/qxl_ioctl.c

284

if (copy_from_user(&user_cmd, commands + cmd_num,

drivers/gpu/drm/radeon/radeon_cs.c

293

if (copy_from_user(p->chunks_array, chunk_array_ptr,

drivers/gpu/drm/radeon/radeon_cs.c

309

if (copy_from_user(&user_chunk, chunk_ptr,

drivers/gpu/drm/radeon/radeon_cs.c

352

if (copy_from_user(p->chunks[i].kdata, cdata, size)) {

drivers/gpu/drm/radeon/radeon_cs.c

640

if (copy_from_user(parser->const_ib.ptr,

drivers/gpu/drm/radeon/radeon_cs.c

663

else if (copy_from_user(parser->ib.ptr, ib_chunk->user_ptr, ib_chunk->length_dw * 4))

drivers/gpu/drm/radeon/radeon_kms.c

262

if (copy_from_user(value, value_ptr, sizeof(uint32_t))) {

drivers/gpu/drm/radeon/radeon_kms.c

319

if (copy_from_user(value, value_ptr, sizeof(uint32_t))) {

drivers/gpu/drm/radeon/radeon_kms.c

331

if (copy_from_user(value, value_ptr, sizeof(uint32_t))) {

drivers/gpu/drm/radeon/radeon_kms.c

467

if (copy_from_user(value, value_ptr, sizeof(uint32_t))) {

drivers/gpu/drm/radeon/radeon_kms.c

592

if (copy_from_user(value, value_ptr, sizeof(uint32_t))) {

drivers/gpu/drm/tegra/drm.c

230

if (copy_from_user(&cmdbuf, user_cmdbufs, sizeof(cmdbuf))) {

drivers/gpu/drm/tegra/drm.c

304

if (copy_from_user(&syncpt, user_syncpt, sizeof(syncpt))) {

drivers/gpu/drm/tegra/submit.c

213

if (copy_from_user(bo->gather_data, u64_to_user_ptr(args->gather_data_ptr), copy_len)) {

drivers/gpu/drm/v3d/v3d_submit.c

208

if (copy_from_user(&in, handle++, sizeof(in))) {

drivers/gpu/drm/v3d/v3d_submit.c

382

if (copy_from_user(&out, post_deps++, sizeof(out))) {

drivers/gpu/drm/v3d/v3d_submit.c

425

if (copy_from_user(&multisync, ext, sizeof(multisync)))

drivers/gpu/drm/v3d/v3d_submit.c

483

if (copy_from_user(&indirect_csd, ext, sizeof(indirect_csd)))

drivers/gpu/drm/v3d/v3d_submit.c

521

if (copy_from_user(&timestamp, ext, sizeof(timestamp)))

drivers/gpu/drm/v3d/v3d_submit.c

582

if (copy_from_user(&reset, ext, sizeof(reset)))

drivers/gpu/drm/v3d/v3d_submit.c

635

if (copy_from_user(&copy, ext, sizeof(copy)))

drivers/gpu/drm/v3d/v3d_submit.c

763

if (copy_from_user(&reset, ext, sizeof(reset)))

drivers/gpu/drm/v3d/v3d_submit.c

800

if (copy_from_user(&copy, ext, sizeof(copy)))

drivers/gpu/drm/v3d/v3d_submit.c

853

if (copy_from_user(&ext, user_ext, sizeof(ext))) {

drivers/gpu/drm/vc4/vc4_bo.c

877

if (copy_from_user(bo->base.vaddr,

drivers/gpu/drm/vc4/vc4_gem.c

782

if (copy_from_user(bin,

drivers/gpu/drm/vc4/vc4_gem.c

789

if (copy_from_user(exec->shader_rec_u,

drivers/gpu/drm/vc4/vc4_gem.c

796

if (copy_from_user(exec->uniforms_u,

drivers/gpu/drm/virtio/virtgpu_submit.c

119

if (copy_from_user(&syncobj_desc,

drivers/gpu/drm/virtio/virtgpu_submit.c

209

if (copy_from_user(&syncobj_desc,

drivers/gpu/drm/virtio/virtgpu_submit.c

313

if (copy_from_user(bo_handles, u64_to_user_ptr(exbuf->bo_handles),

drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c

4048

ret = copy_from_user(kernel_commands, user_commands, command_size);

drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c

4147

ret = copy_from_user(sw_context->cmd_bounce, user_commands,

drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c

206

ret = copy_from_user(clips, clips_ptr, num_clips * sizeof(*clips));

drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c

283

ret = copy_from_user(clips, clips_ptr, num_clips * sizeof(*clips));

drivers/gpu/drm/vmwgfx/vmwgfx_kms.c

1430

ret = copy_from_user(rects, user_rects, rects_size);

drivers/gpu/drm/xe/xe_bo.c

3291

err = copy_from_user(&ext, address, sizeof(ext));

drivers/gpu/drm/xe/xe_bo.c

3328

err = copy_from_user(&ext, address, sizeof(ext));

drivers/gpu/drm/xe/xe_eu_stall.c

314

err = copy_from_user(&ext, address, sizeof(ext));

drivers/gpu/drm/xe/xe_eu_stall.c

344

err = copy_from_user(&ext, address, sizeof(ext));

drivers/gpu/drm/xe/xe_exec.c

196

err = copy_from_user(addresses, addresses_user,

drivers/gpu/drm/xe/xe_exec_queue.c

1092

err = copy_from_user(&ext, address, sizeof(ext));

drivers/gpu/drm/xe/xe_exec_queue.c

1140

err = copy_from_user(&ext, address, sizeof(ext));

drivers/gpu/drm/xe/xe_exec_queue.c

1286

err = copy_from_user(eci, user_eci,

drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c

759

if (copy_from_user(tmp, buf, count)) {

drivers/gpu/drm/xe/xe_oa.c

1371

err = copy_from_user(&ext, address, sizeof(ext));

drivers/gpu/drm/xe/xe_oa.c

1408

err = copy_from_user(&ext, address, sizeof(ext));

drivers/gpu/drm/xe/xe_oa.c

2373

err = copy_from_user(&param, u64_to_user_ptr(data), sizeof(param));

drivers/gpu/drm/xe/xe_query.c

137

if (copy_from_user(&resp, query_ptr, size))

drivers/gpu/drm/xe/xe_query.c

584

if (copy_from_user(&resp, query_ptr, size))

drivers/gpu/drm/xe/xe_sriov_packet.c

284

if (copy_from_user((void *)&data->hdr + offset, buf, len))

drivers/gpu/drm/xe/xe_sriov_packet.c

304

if (copy_from_user(data->vaddr + (data->hdr.size - data->remaining), buf, len))

drivers/gpu/drm/xe/xe_sync.c

127

if (copy_from_user(&sync_in, sync_user, sizeof(*sync_user)))

drivers/gpu/drm/xe/xe_vm.c

3633

err = copy_from_user(*bind_ops, bind_user,

drivers/gpu/drm/xe/xe_vm.c

4580

if (!copy_from_user(snap->snap[i].data, userptr, snap->snap[i].len))

drivers/gpu/drm/xe/xe_wait_user_fence.c

23

err = copy_from_user(&rvalue, u64_to_user_ptr(addr), sizeof(rvalue));

drivers/gpu/vga/vga_switcheroo.c

788

if (copy_from_user(usercmd, ubuf, cnt))

drivers/hid/hid-picolcd_debugfs.c

132

if (copy_from_user(raw_data+3, u, min((u8)20, raw_data[2])))

drivers/hid/hid-picolcd_debugfs.c

274

if (copy_from_user(raw_data+len_off+1, u, raw_data[len_off])) {

drivers/hid/hid-picolcd_debugfs.c

44

if (copy_from_user(buf, user_buf, cnt))

drivers/hid/hid-wiimote-debug.c

138

if (copy_from_user(buf, u, len))

drivers/hid/hidraw.c

237

if (copy_from_user(&report_number, buffer, 1)) {

drivers/hid/uhid.c

442

if (copy_from_user(compat, buffer,

drivers/hid/uhid.c

473

if (copy_from_user(event, buffer, min(len, sizeof(*event))))

drivers/hid/uhid.c

482

if (copy_from_user(event, buffer, min(len, sizeof(*event))))

drivers/hid/uhid.c

560

if (copy_from_user(&ev->u.create2.rd_data, orig.rd_data, orig.rd_size))

drivers/hid/usbhid/hiddev.c

442

if (copy_from_user(uref_multi, user_arg,

drivers/hid/usbhid/hiddev.c

446

if (copy_from_user(uref, user_arg, sizeof(*uref)))

drivers/hid/usbhid/hiddev.c

695

if (copy_from_user(&rinfo, user_arg, sizeof(rinfo))) {

drivers/hid/usbhid/hiddev.c

714

if (copy_from_user(&rinfo, user_arg, sizeof(rinfo))) {

drivers/hid/usbhid/hiddev.c

733

if (copy_from_user(&rinfo, user_arg, sizeof(rinfo))) {

drivers/hid/usbhid/hiddev.c

749

if (copy_from_user(&finfo, user_arg, sizeof(finfo))) {

drivers/hid/usbhid/hiddev.c

801

if (copy_from_user(&cinfo, user_arg, sizeof(cinfo))) {

drivers/hsi/clients/cmt_speech.c

1218

if (copy_from_user(&state, (void __user *)arg, sizeof(state))) {

drivers/hsi/clients/cmt_speech.c

1243

if (copy_from_user(&buf_cfg, (void __user *)arg,

drivers/hsi/clients/hsi_char.c

491

if (copy_from_user(sg_virt(msg->sgt.sgl), (void __user *)buf, len)) {

drivers/hsi/clients/hsi_char.c

538

if (copy_from_user(&state, (void __user *)arg, sizeof(state)))

drivers/hsi/clients/hsi_char.c

555

if (copy_from_user(&rxc, (void __user *)arg, sizeof(rxc)))

drivers/hsi/clients/hsi_char.c

564

if (copy_from_user(&txc, (void __user *)arg, sizeof(txc)))

drivers/hv/mshv_root_main.c

1079

if (copy_from_user(&args, arg, sizeof(args)))

drivers/hv/mshv_root_main.c

1469

if (copy_from_user(&mem, user_mem, sizeof(mem)))

drivers/hv/mshv_root_main.c

1491

if (copy_from_user(&args, user_args, sizeof(args)))

drivers/hv/mshv_root_main.c

1503

if (copy_from_user(&args, user_args, sizeof(args)))

drivers/hv/mshv_root_main.c

1521

if (copy_from_user(&args, user_args, sizeof(args)))

drivers/hv/mshv_root_main.c

1601

if (copy_from_user(&args, user_args, sizeof(args)))

drivers/hv/mshv_root_main.c

185

if (copy_from_user(&args, user_args, sizeof(args)))

drivers/hv/mshv_root_main.c

1960

if (copy_from_user(&args, user_arg,

drivers/hv/mshv_root_main.c

1973

if (copy_from_user(&args, user_arg, sizeof(args)))

drivers/hv/mshv_root_main.c

219

if (copy_from_user(input_pg, (void __user *)args.in_ptr,

drivers/hv/mshv_root_main.c

803

if (copy_from_user(&args, user_args, sizeof(args)))

drivers/hv/mshv_root_main.c

881

if (copy_from_user(&vp_state, (__user void *)args.buf_ptr, data_sz))

drivers/hv/mshv_vtl_main.c

1007

if (copy_from_user(&mask, arg, sizeof(mask)))

drivers/hv/mshv_vtl_main.c

1093

if (copy_from_user(&hvcall_setup, hvcall_setup_user,

drivers/hv/mshv_vtl_main.c

1100

if (copy_from_user(&fd->allow_bitmap,

drivers/hv/mshv_vtl_main.c

1124

if (copy_from_user(&hvcall, hvcall_user, sizeof(struct mshv_vtl_hvcall)))

drivers/hv/mshv_vtl_main.c

1157

if (copy_from_user(in, (void __user *)hvcall.input_ptr, hvcall.input_size)) {

drivers/hv/mshv_vtl_main.c

147

if (copy_from_user(&arg, user_arg, sizeof(arg)))

drivers/hv/mshv_vtl_main.c

388

if (copy_from_user(&vtl0_mem, arg, sizeof(vtl0_mem)))

drivers/hv/mshv_vtl_main.c

472

if (copy_from_user(&input, user_input, sizeof(input)))

drivers/hv/mshv_vtl_main.c

719

if (copy_from_user(&args, user_args, sizeof(args)))

drivers/hv/mshv_vtl_main.c

726

if (copy_from_user(&reg, (void __user *)args.regs_ptr,

drivers/hv/mshv_vtl_main.c

751

if (copy_from_user(&args, user_args, sizeof(args)))

drivers/hv/mshv_vtl_main.c

758

if (copy_from_user(&reg, (void __user *)args.regs_ptr, sizeof(reg)))

drivers/hv/mshv_vtl_main.c

945

if (copy_from_user(&message, arg, sizeof(message)))

drivers/hv/mshv_vtl_main.c

949

if (copy_from_user(payload, (void __user *)message.payload_ptr,

drivers/hv/mshv_vtl_main.c

963

if (copy_from_user(&signal_event, arg, sizeof(signal_event)))

drivers/hv/mshv_vtl_main.c

978

if (copy_from_user(&set_eventfd, arg, sizeof(set_eventfd)))

drivers/hwmon/dell-smm-hwmon.c

596

if (copy_from_user(&val, argp, sizeof(int)))

drivers/hwmon/dell-smm-hwmon.c

606

if (copy_from_user(&val, argp, sizeof(int)))

drivers/hwmon/dell-smm-hwmon.c

619

if (copy_from_user(&val, argp, sizeof(int)))

drivers/hwmon/dell-smm-hwmon.c

625

if (copy_from_user(&speed, argp + 1, sizeof(int)))

drivers/hwtracing/stm/core.c

652

err = copy_from_user(kbuf, buf, count);

drivers/hwtracing/stm/core.c

747

if (copy_from_user(&size, arg, sizeof(size)))

drivers/hwtracing/stm/core.c

761

if (copy_from_user(id, arg, size)) {

drivers/hwtracing/stm/core.c

828

if (copy_from_user(&options, (u64 __user *)arg, sizeof(u64)))

drivers/i2c/i2c-dev.c

379

if (copy_from_user(&temp, data, datasize))

drivers/i2c/i2c-dev.c

447

if (copy_from_user(&rdwr_arg,

drivers/i2c/i2c-dev.c

474

if (copy_from_user(&data_arg,

drivers/i2c/i2c-dev.c

545

if (copy_from_user(&rdwr_arg,

drivers/i2c/i2c-dev.c

563

if (copy_from_user(&umsg, p + i, sizeof(umsg))) {

drivers/i2c/i2c-dev.c

581

if (copy_from_user(&data32,

drivers/iio/buffer/industrialio-buffer-dma.c

583

ret = copy_from_user(addr, user_buffer, n);

drivers/iio/industrialio-buffer.c

1698

if (copy_from_user(&fd, user_fd, sizeof(fd)))

drivers/iio/industrialio-buffer.c

1798

if (copy_from_user(&dmabuf_fd, user_req, sizeof(dmabuf_fd)))

drivers/iio/industrialio-buffer.c

1860

if (copy_from_user(&iio_dmabuf, iio_dmabuf_req, sizeof(iio_dmabuf)))

drivers/iio/industrialio-buffer.c

2048

if (copy_from_user(&idx, ival, sizeof(idx)))

drivers/infiniband/core/ucma.c

1070

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1131

if (copy_from_user(&cmd, inbuf, in_size))

drivers/infiniband/core/ucma.c

1161

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1192

if (copy_from_user(&cmd, inbuf, in_size))

drivers/infiniband/core/ucma.c

1233

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1266

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1293

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1455

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1488

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1596

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1618

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1639

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1690

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1758

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

1843

if (copy_from_user(&hdr, buf, sizeof(hdr)))

drivers/infiniband/core/ucma.c

389

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

458

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

608

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

638

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

663

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

689

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

716

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

744

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

766

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/ucma.c

857

if (copy_from_user(&cmd, inbuf, sizeof(cmd)))

drivers/infiniband/core/user_mad.c

448

copy_from_user(msg->mad + IB_MGMT_RMPP_HDR, buf + IB_MGMT_RMPP_HDR,

drivers/infiniband/core/user_mad.c

455

if (copy_from_user(ib_get_rmpp_segment(msg, seg), buf,

drivers/infiniband/core/user_mad.c

528

if (copy_from_user(&packet->mad, buf, hdr_size(file))) {

drivers/infiniband/core/user_mad.c

540

if (copy_from_user(packet->mad.data, buf, IB_MGMT_RMPP_HDR)) {

drivers/infiniband/core/user_mad.c

615

if (copy_from_user(packet->msg->mad + copy_offset,

drivers/infiniband/core/user_mad.c

714

if (copy_from_user(&ureq, arg, sizeof ureq)) {

drivers/infiniband/core/user_mad.c

815

if (copy_from_user(&ureq, arg, sizeof(ureq))) {

drivers/infiniband/core/uverbs_cmd.c

128

if (copy_from_user(req, attrs->ucore.inbuf, req_len))

drivers/infiniband/core/uverbs_cmd.c

142

if (copy_from_user(val, iter->cur, len))

drivers/infiniband/core/uverbs_cmd.c

2065

if (copy_from_user(user_wr, wqes + i * cmd.wqe_size,

drivers/infiniband/core/uverbs_cmd.c

2173

if (copy_from_user(next->sg_list, sgls + sg_ind,

drivers/infiniband/core/uverbs_cmd.c

2248

if (copy_from_user(user_wr, wqes + i * wqe_size,

drivers/infiniband/core/uverbs_cmd.c

2287

if (copy_from_user(next->sg_list, sgls + sg_ind,

drivers/infiniband/core/uverbs_ioctl.c

112

ret = copy_from_user(idr_vals, u64_to_user_ptr(uattr->data),

drivers/infiniband/core/uverbs_ioctl.c

210

if (copy_from_user(p, u64_to_user_ptr(uattr->data),

drivers/infiniband/core/uverbs_ioctl.c

355

if (copy_from_user(pbundle->uattrs, pbundle->user_attrs, uattrs_size))

drivers/infiniband/core/uverbs_ioctl.c

543

err = copy_from_user(&hdr, user_hdr, sizeof(hdr));

drivers/infiniband/core/uverbs_main.c

533

if (copy_from_user(&hdr, buf, sizeof(hdr)))

drivers/infiniband/core/uverbs_main.c

543

if (copy_from_user(&ex_hdr, buf + sizeof(hdr), sizeof(ex_hdr)))

drivers/infiniband/hw/bnxt_re/debugfs.c

318

if (copy_from_user(buf, buffer, count))

drivers/infiniband/hw/bnxt_re/debugfs.c

384

if (copy_from_user(lbuf, buf, count))

drivers/infiniband/hw/hfi1/fault.c

102

if (copy_from_user(data, buf, copy)) {

drivers/infiniband/hw/hfi1/file_ops.c

1340

if (copy_from_user(&tinfo, (void __user *)arg, (sizeof(tinfo))))

drivers/infiniband/hw/hfi1/file_ops.c

1386

if (copy_from_user(&tinfo, (void __user *)arg, (sizeof(tinfo))))

drivers/infiniband/hw/hfi1/file_ops.c

1422

if (copy_from_user(&tinfo, (void __user *)arg, (sizeof(tinfo))))

drivers/infiniband/hw/hfi1/file_ops.c

788

if (copy_from_user(&uinfo, (void __user *)arg, sizeof(uinfo)))

drivers/infiniband/hw/hfi1/user_sdma.c

303

ret = copy_from_user(&info, iovec[idx].iov_base, sizeof(info));

drivers/infiniband/hw/hfi1/user_sdma.c

389

ret = copy_from_user(&req->hdr, iovec[idx].iov_base + sizeof(info),

drivers/infiniband/hw/hns/hns_roce_debugfs.c

36

if (copy_from_user(buf, buffer, count))

drivers/infiniband/hw/mlx5/cong.c

383

if (copy_from_user(lbuf, buf, count))

drivers/infiniband/hw/mlx5/counters.c

1079

if (copy_from_user(desc_data,

drivers/infiniband/hw/ocrdma/ocrdma_stats.c

647

if (copy_from_user(tmp_str, buffer, count))

drivers/infiniband/sw/siw/siw_qp_tx.c

70

if (copy_from_user(paddr, u64_to_user_ptr(sge->laddr),

drivers/input/evdev.c

1099

if (copy_from_user(&mask, p, sizeof(mask)))

drivers/input/evdev.c

1111

if (copy_from_user(&mask, p, sizeof(mask)))

drivers/input/evdev.c

1121

if (copy_from_user(&i, p, sizeof(unsigned int)))

drivers/input/evdev.c

1227

if (copy_from_user(&abs, p, min_t(size_t,

drivers/input/evdev.c

675

if (copy_from_user((compat_long_t *) bits +

drivers/input/evdev.c

691

if (copy_from_user(bits, p, len))

drivers/input/evdev.c

727

return copy_from_user(bits, p, len) ? -EFAULT : len;

drivers/input/evdev.c

757

return copy_from_user(bits, p, len) ? -EFAULT : len;

drivers/input/evdev.c

810

if (copy_from_user(ke.scancode, p, sizeof(unsigned int)))

drivers/input/evdev.c

828

if (copy_from_user(&ke, p, sizeof(ke)))

drivers/input/evdev.c

849

if (copy_from_user(ke.scancode, p, sizeof(unsigned int)))

drivers/input/evdev.c

862

if (copy_from_user(&ke, p, sizeof(ke)))

drivers/input/input-compat.c

125

if (copy_from_user(event, buffer, sizeof(struct input_event)))

drivers/input/input-compat.c

146

if (copy_from_user(effect, buffer, sizeof(struct ff_effect)))

drivers/input/input-compat.c

21

if (copy_from_user(&compat_event, buffer,

drivers/input/input-compat.c

32

if (copy_from_user(event, buffer, sizeof(struct input_event)))

drivers/input/input-compat.c

79

if (copy_from_user(compat_effect, buffer,

drivers/input/input-compat.c

91

if (copy_from_user(effect, buffer, sizeof(struct ff_effect)))

drivers/input/joydev.c

522

return copy_from_user(&joydev->glue.JS_CORR, argp,

drivers/input/joydev.c

545

if (copy_from_user(joydev->corr, argp,

drivers/input/joydev.c

628

retval = copy_from_user(&ds32, argp,

drivers/input/joydev.c

692

retval = copy_from_user(&joydev->glue, argp,

drivers/input/misc/da7280.c

559

if (copy_from_user(data, effect->u.periodic.custom_data,

drivers/input/misc/da7280.c

585

if (copy_from_user(data, effect->u.periodic.custom_data,

drivers/input/misc/da7280.c

616

if (copy_from_user(data, effect->u.periodic.custom_data,

drivers/input/misc/uinput.c

1032

if (copy_from_user(&ff_erase, p, sizeof(ff_erase))) {

drivers/input/misc/uinput.c

1069

if (copy_from_user(&ff_erase, p, sizeof(ff_erase))) {

drivers/input/misc/uinput.c

491

if (copy_from_user(&setup, arg, sizeof(setup)))

drivers/input/misc/uinput.c

523

if (copy_from_user(&setup, arg, size))

drivers/input/misc/uinput.c

831

if (copy_from_user(&ff_up_compat, buffer,

drivers/input/misc/uinput.c

843

if (copy_from_user(ff_up, buffer,

drivers/input/misc/uinput.c

865

if (copy_from_user(ff_up, buffer, sizeof(struct uinput_ff_upload)))

drivers/input/serio/userio.c

268

if (copy_from_user(&cmd, buffer, sizeof(cmd)))

drivers/iommu/intel/debugfs.c

699

if (copy_from_user(&buf, ubuf, cnt))

drivers/iommu/iommufd/eventq.c

198

if (copy_from_user(&response, buf + done, response_size)) {

drivers/iommu/iommufd/ioas.c

126

if (copy_from_user(&range, ranges + i, sizeof(range)))

drivers/iommu/iommufd/pages.c

2400

if (copy_from_user(data, pages->uptr + start_byte, length))

drivers/iommu/iommufd/selftest.c

1653

if (copy_from_user(tmp, ubuf, length)) {

drivers/iommu/iommufd/selftest.c

1716

if (copy_from_user(tmp, uptr, DIV_ROUND_UP(max, BITS_PER_BYTE))) {

drivers/iommu/iommufd/vfio_compat.c

170

if (copy_from_user(&map, arg, minsz))

drivers/iommu/iommufd/vfio_compat.c

213

if (copy_from_user(&unmap, arg, minsz))

drivers/iommu/iommufd/vfio_compat.c

452

if (copy_from_user(&info, arg, minsz))

drivers/leds/uleds.c

97

if (copy_from_user(&udev->user_dev, buffer,

drivers/macintosh/adb.c

796

if (copy_from_user(req->data, buf, count))

drivers/macintosh/smu.c

1120

else if (copy_from_user(&hdr, buf, sizeof(hdr)))

drivers/macintosh/smu.c

1149

if (copy_from_user(pp->buffer, buf + sizeof(hdr), hdr.data_len)) {

drivers/macintosh/via-pmu.c

931

if (copy_from_user(tmp, buffer, count))

drivers/mailbox/mailbox-test.c

123

ret = copy_from_user(tdev->message, userbuf, count);

drivers/mailbox/mailbox-test.c

73

if (copy_from_user(tdev->signal, userbuf, count)) {

drivers/md/dm-ioctl.c

2050

if (copy_from_user(kernel_params->version, user->version, sizeof(kernel_params->version)))

drivers/md/dm-ioctl.c

2097

if (copy_from_user((char *)param_kernel + sizeof(param_kernel->version),

drivers/md/dm-ioctl.c

2138

if (copy_from_user(&dmi->data, (char __user *)user + minimum_data_size,

drivers/md/md.c

7435

if (copy_from_user(&info, arg, sizeof(info)))

drivers/md/md.c

8296

else if (copy_from_user(&info, argp, sizeof(info)))

drivers/md/md.c

8432

if (copy_from_user(&info, argp, sizeof(info)))

drivers/md/md.c

8473

if (copy_from_user(&info, argp, sizeof(info)))

drivers/media/cec/core/cec-api.c

129

if (copy_from_user(&phys_addr, parg, sizeof(phys_addr)))

drivers/media/cec/core/cec-api.c

175

if (copy_from_user(&log_addrs, parg, sizeof(log_addrs)))

drivers/media/cec/core/cec-api.c

219

if (copy_from_user(&msg, parg, sizeof(msg)))

drivers/media/cec/core/cec-api.c

296

if (copy_from_user(&msg, parg, sizeof(msg)))

drivers/media/cec/core/cec-api.c

377

if (copy_from_user(&mode, parg, sizeof(mode)))

drivers/media/common/videobuf2/videobuf2-core.c

3087

ret = copy_from_user(buf->vaddr + buf->pos, data, count);

drivers/media/dvb-core/dmxdev.c

1001

if (copy_from_user(dfil->secheader - dfil->todo, buf, result))

drivers/media/dvb-core/dvb_ca_en50221.c

1471

if (copy_from_user(&slot, buf, 1))

drivers/media/dvb-core/dvb_ca_en50221.c

1473

if (copy_from_user(&connection_id, buf + 1, 1))

drivers/media/dvb-core/dvb_ca_en50221.c

1499

status = copy_from_user(fragbuf + 2, buf + fragpos, fraglen);

drivers/media/dvb-core/dvb_frontend.c

2154

if (copy_from_user(&prop, compat_ptr(arg), sizeof(prop)))

drivers/media/dvb-core/dvb_frontend.c

2186

if (copy_from_user(&prop, compat_ptr(arg), sizeof(prop)))

drivers/media/dvb-core/dvb_ringbuffer.c

218

status = copy_from_user(rbuf->data+rbuf->pwrite, buf, split);

drivers/media/dvb-core/dvb_ringbuffer.c

230

status = copy_from_user(rbuf->data+rbuf->pwrite, buf, todo);

drivers/media/dvb-core/dvbdev.c

990

if (copy_from_user(parg, (void __user *)arg, _IOC_SIZE(cmd)))

drivers/media/mc/mc-device.c

386

copy_from_user(karg, uarg, _IOC_SIZE(cmd)))

drivers/media/pci/bt8xx/dst_ca.c

294

if (copy_from_user(p_ca_message, arg, sizeof (struct ca_msg)))

drivers/media/pci/bt8xx/dst_ca.c

462

if (copy_from_user(p_ca_message, arg, sizeof (struct ca_msg))) {

drivers/media/pci/ddbridge/ddbridge-core.c

619

if (copy_from_user(output->dma->vbuf[output->dma->cbuf] +

drivers/media/pci/ivtv/ivtv-queue.c

17

if (copy_from_user(buf->buf + buf->bytesused, src, copybytes)) {

drivers/media/pci/ivtv/ivtv-vbi.c

160

if (copy_from_user(&d, sliced + i,

drivers/media/pci/ivtv/ivtvfb.c

416

if (copy_from_user(dst, buf, lead))

drivers/media/pci/ivtv/ivtvfb.c

433

if (tail && copy_from_user(dst, buf, tail))

drivers/media/pci/ivtv/ivtvfb.c

435

} else if (copy_from_user(dst, buf, count)) {

drivers/media/pci/ivtv/ivtvfb.c

486

if (copy_from_user(&args, (void __user *)arg, sizeof(args)))

drivers/media/platform/ti/am437x/am437x-vpfe.c

360

x = copy_from_user(&raw_params, params, sizeof(raw_params));

drivers/media/platform/ti/omap3isp/ispccdc.c

427

if (copy_from_user(&req->config, config->lsc_cfg,

drivers/media/platform/ti/omap3isp/ispccdc.c

452

if (copy_from_user(req->table.addr, config->lsc,

drivers/media/platform/ti/omap3isp/ispccdc.c

684

if (copy_from_user(&ccdc->clamp, ccdc_struct->bclamp,

drivers/media/platform/ti/omap3isp/ispccdc.c

695

if (copy_from_user(&ccdc->blcomp, ccdc_struct->blcomp,

drivers/media/platform/ti/omap3isp/ispccdc.c

718

if (copy_from_user(&fpc, ccdc_struct->fpc, sizeof(fpc)))

drivers/media/platform/ti/omap3isp/ispccdc.c

734

if (copy_from_user(fpc_new.addr,

drivers/media/platform/ti/omap3isp/isppreview.c

896

if (copy_from_user(to, from, size)) {

drivers/media/rc/imon.c

1063

if (copy_from_user(ictx->usb_tx_buf, buf, 8)) {

drivers/media/rc/imon.c

981

if (copy_from_user(ictx->tx.data_buf, buf, n_bytes)) {

drivers/media/rc/lirc_dev.c

252

if (copy_from_user(&scan, buf, sizeof(scan))) {

drivers/media/test-drivers/vivid/vivid-radio-tx.c

77

if (copy_from_user(&rds, buf + i, sizeof(rds))) {

drivers/media/usb/uvc/uvc_ctrl.c

3146

copy_from_user(data, xqry->data, size)) {

drivers/media/usb/uvc/uvc_v4l2.c

101

if (copy_from_user((char *)map->menu_names[i],

drivers/media/usb/uvc/uvc_v4l2.c

1096

if (copy_from_user(p, up, sizeof(*p)))

drivers/media/usb/uvc/uvc_v4l2.c

1134

if (copy_from_user(&v, up, sizeof(v)))

drivers/media/usb/uvc/uvc_v4l2.c

79

if (copy_from_user((u32 *)&map->menu_mapping[i],

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

1074

if (copy_from_user(ec64, ec32, sizeof(*ec32)))

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

1090

if (copy_from_user(mbuf, user_ptr, array_size))

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

144

return copy_from_user(&p64->fmt.pix, &p32->fmt.pix,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

148

return copy_from_user(&p64->fmt.pix_mp, &p32->fmt.pix_mp,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

155

return copy_from_user(&p64->fmt.vbi, &p32->fmt.vbi,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

159

return copy_from_user(&p64->fmt.sliced, &p32->fmt.sliced,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

163

return copy_from_user(&p64->fmt.sdr, &p32->fmt.sdr,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

167

return copy_from_user(&p64->fmt.meta, &p32->fmt.meta,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

177

if (copy_from_user(p64, p32,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

180

if (copy_from_user(&p64->flags, &p32->flags, sizeof(p32->flags)))

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

182

if (copy_from_user(&p64->max_num_buffers, &p32->max_num_buffers,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

341

if (copy_from_user(&plane32, p32, sizeof(plane32)))

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

405

if (copy_from_user(&vb32, arg, sizeof(vb32)))

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

451

if (copy_from_user(&vb32, arg, sizeof(vb32)))

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

56

if (copy_from_user(&w32, p32, sizeof(w32)))

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

600

copy_from_user(&p64->fmt, &p32->fmt, sizeof(p64->fmt)))

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

638

if (copy_from_user(p64, p32, sizeof(*p32)))

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

703

if (copy_from_user(&ec32, p32, sizeof(ec32)))

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

820

if (copy_from_user(p64, p32, offsetof(struct v4l2_edid32, edid)) ||

drivers/media/v4l2-core/v4l2-ctrls-api.c

139

if (copy_from_user(ctrl->p_new.p, c->ptr, c->size))

drivers/media/v4l2-core/v4l2-ctrls-api.c

159

ret = copy_from_user(ctrl->p_new.p_char, c->string, size) ? -EFAULT : 0;

drivers/media/v4l2-core/v4l2-ioctl.c

3301

if (copy_from_user(parg, (void __user *)arg, n))

drivers/media/v4l2-core/v4l2-ioctl.c

3317

if (copy_from_user(&vb32, arg, sizeof(vb32)))

drivers/media/v4l2-core/v4l2-ioctl.c

3467

err = copy_from_user(array_buf, user_ptr, array_size) ?

drivers/message/fusion/mptctl.c

1376

if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_targetinfo))) {

drivers/message/fusion/mptctl.c

1478

if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_test))) {

drivers/message/fusion/mptctl.c

1528

if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_eventquery))) {

drivers/message/fusion/mptctl.c

1558

if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_eventenable))) {

drivers/message/fusion/mptctl.c

1598

if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_eventreport))) {

drivers/message/fusion/mptctl.c

1644

if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_replace_fw))) {

drivers/message/fusion/mptctl.c

1670

if (copy_from_user(ioc->cached_fw, uarg->newImage, newFwSize)) {

drivers/message/fusion/mptctl.c

1704

if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_command))) {

drivers/message/fusion/mptctl.c

1800

if (copy_from_user(mf, mfPtr, karg.dataSgeOffset * 4)) {

drivers/message/fusion/mptctl.c

2121

if (copy_from_user(bufOut.kptr,

drivers/message/fusion/mptctl.c

2344

if (copy_from_user(&karg, uarg, sizeof(hp_host_info_t))) {

drivers/message/fusion/mptctl.c

2568

if (copy_from_user(&karg, uarg, sizeof(hp_target_info_t))) {

drivers/message/fusion/mptctl.c

2723

if (copy_from_user(&kfw32, (char __user *)arg, sizeof(kfw32)))

drivers/message/fusion/mptctl.c

2763

if (copy_from_user(&karg32, (char __user *)arg, sizeof(karg32)))

drivers/message/fusion/mptctl.c

628

if (copy_from_user(&khdr, uhdr, sizeof(khdr))) {

drivers/message/fusion/mptctl.c

709

if (copy_from_user(&krinfo, urinfo, sizeof(struct mpt_ioctl_diag_reset))) {

drivers/message/fusion/mptctl.c

751

if (copy_from_user(&kfwdl, ufwdl, sizeof(struct mpt_fw_xfer))) {

drivers/message/fusion/mptctl.c

904

if (copy_from_user(bl->kptr, ufwbuf+fw_bytes_copied, bl->len)) {

drivers/mfd/aat2870-core.c

283

if (copy_from_user(buf, user_buf, buf_size)) {

drivers/misc/amd-sbi/rmi-core.c

474

if (copy_from_user(&msg, arg, sizeof(struct apml_reg_xfer_msg)))

drivers/misc/amd-sbi/rmi-core.c

500

if (copy_from_user(&msg, arg, sizeof(struct apml_mbox_msg)))

drivers/misc/amd-sbi/rmi-core.c

519

if (copy_from_user(&msg, arg, sizeof(struct apml_cpuid_msg)))

drivers/misc/amd-sbi/rmi-core.c

538

if (copy_from_user(&msg, arg, sizeof(struct apml_mcamsr_msg)))

drivers/misc/bcm-vk/bcm_vk_dev.c

1147

if (copy_from_user(&reset, arg, sizeof(struct vk_reset)))

drivers/misc/bcm-vk/bcm_vk_dev.c

956

if (copy_from_user(&image, arg, sizeof(image)))

drivers/misc/bcm-vk/bcm_vk_msg.c

1114

if (copy_from_user(&entry->to_v_msg[0], buf, count)) {

drivers/misc/fastrpc.c

1131

if (copy_from_user(dst, (void __user *)src,

drivers/misc/fastrpc.c

1358

if (copy_from_user(&init, argp, sizeof(init))) {

drivers/misc/fastrpc.c

1484

if (copy_from_user(&init, argp, sizeof(init))) {

drivers/misc/fastrpc.c

1695

if (copy_from_user(&bp, argp, sizeof(bp)))

drivers/misc/fastrpc.c

1756

if (copy_from_user(&inv, argp, sizeof(inv)))

drivers/misc/fastrpc.c

1766

if (copy_from_user(args, (void __user *)(uintptr_t)inv.args,

drivers/misc/fastrpc.c

1851

if (copy_from_user(&cap, argp, sizeof(cap)))

drivers/misc/fastrpc.c

1909

if (copy_from_user(&req, argp, sizeof(req)))

drivers/misc/fastrpc.c

1942

if (copy_from_user(&req, argp, sizeof(req)))

drivers/misc/fastrpc.c

2080

if (copy_from_user(&req, argp, sizeof(req)))

drivers/misc/fastrpc.c

2099

if (copy_from_user(&req, argp, sizeof(req)))

drivers/misc/genwqe/card_dev.c

1022

if (copy_from_user(cmd, (void __user *)arg, sizeof(*cmd))) {

drivers/misc/genwqe/card_dev.c

1159

if (copy_from_user(&load, (void __user *)arg,

drivers/misc/genwqe/card_dev.c

1180

if (copy_from_user(&load, (void __user *)arg, sizeof(load)))

drivers/misc/genwqe/card_dev.c

1195

if (copy_from_user(&m, (void __user *)arg, sizeof(m)))

drivers/misc/genwqe/card_dev.c

1204

if (copy_from_user(&m, (void __user *)arg, sizeof(m)))

drivers/misc/genwqe/card_dev.c

554

rc = copy_from_user(xbuf, buf, tocopy);

drivers/misc/genwqe/card_utils.c

333

if (copy_from_user(sgl->fpage + sgl->fpage_offs,

drivers/misc/genwqe/card_utils.c

346

if (copy_from_user(sgl->lpage, user_addr + user_size -

drivers/misc/hpilo.c

505

err = copy_from_user(pkt, buf, len);

drivers/misc/ibmasm/ibmasmfs.c

319

if (copy_from_user(cmd->buffer, ubuff, count)) {

drivers/misc/ibmvmc.c

1115

bytes -= copy_from_user(buf, p, bytes);

drivers/misc/ibmvmc.c

1238

bytes = copy_from_user(hmc->hmc_id, new_hmc_id, HMC_ID_LEN);

drivers/misc/lkdtm/core.c

242

if (copy_from_user(buf, user_buf, count)) {

drivers/misc/lkdtm/core.c

319

if (copy_from_user(buf, user_buf, count)) {

drivers/misc/lkdtm/usercopy.c

112

if (copy_from_user(good_stack, (void __user *)user_addr,

drivers/misc/lkdtm/usercopy.c

119

if (copy_from_user(bad_stack, (void __user *)user_addr,

drivers/misc/lkdtm/usercopy.c

177

if (copy_from_user(test_kern_addr, test_user_addr, size / 2)) {

drivers/misc/lkdtm/usercopy.c

183

if (copy_from_user(test_kern_addr, test_user_addr, size)) {

drivers/misc/lkdtm/usercopy.c

254

if (copy_from_user(buf + offset, user_addr, size)) {

drivers/misc/lkdtm/usercopy.c

260

if (copy_from_user(buf + offset - 1, user_addr, size)) {

drivers/misc/mei/main.c

387

rets = copy_from_user(cb->buf.data, ubuf, length);

drivers/misc/mei/main.c

697

if (copy_from_user(&conn, (char __user *)data, sizeof(conn))) {

drivers/misc/mei/main.c

728

if (copy_from_user(&conn_vtag, (char __user *)data,

drivers/misc/mei/main.c

768

if (copy_from_user(&notify_req,

drivers/misc/mrvl_cn10k_dpi.c

489

if (copy_from_user(&cfg, arg, sizeof(struct dpi_mps_mrrs_cfg)))

drivers/misc/mrvl_cn10k_dpi.c

525

if (copy_from_user(&cfg, arg, sizeof(struct dpi_engine_cfg)))

drivers/misc/nsm.c

159

if (copy_from_user(req->data, u64_to_user_ptr(raw->request.addr),

drivers/misc/nsm.c

369

if (copy_from_user(&raw, argp, _IOC_SIZE(cmd)))

drivers/misc/ntsync.c

1039

if (copy_from_user(&args, argp, sizeof(args)))

drivers/misc/ntsync.c

417

if (copy_from_user(&args, argp, sizeof(args)))

drivers/misc/ntsync.c

466

if (copy_from_user(&args, argp, sizeof(args)))

drivers/misc/ntsync.c

739

if (copy_from_user(&args, argp, sizeof(args)))

drivers/misc/ntsync.c

763

if (copy_from_user(&args, argp, sizeof(args)))

drivers/misc/ntsync.c

787

if (copy_from_user(&args, argp, sizeof(args)))

drivers/misc/ntsync.c

885

if (copy_from_user(fds, u64_to_user_ptr(args->objs), size))

drivers/misc/ntsync.c

956

if (copy_from_user(&args, argp, sizeof(args)))

drivers/misc/ocxl/file.c

239

rc = copy_from_user(&irq_offset, (u64 __user *) args,

drivers/misc/ocxl/file.c

248

rc = copy_from_user(&irq_fd, (u64 __user *) args,

drivers/misc/ocxl/file.c

79

if (copy_from_user(&arg, uarg, sizeof(arg)))

drivers/misc/pci_endpoint_test.c

715

ret = copy_from_user(&param, (void __user *)arg, sizeof(param));

drivers/misc/pci_endpoint_test.c

848

ret = copy_from_user(&param, (void __user *)arg, sizeof(param));

drivers/misc/pci_endpoint_test.c

945

ret = copy_from_user(&param, (void __user *)arg, sizeof(param));

drivers/misc/phantom.c

101

if (copy_from_user(&r, argp, sizeof(r)))

drivers/misc/phantom.c

132

if (copy_from_user(&rs, argp, sizeof(rs)))

drivers/misc/phantom.c

150

if (copy_from_user(&r, argp, sizeof(r)))

drivers/misc/phantom.c

165

if (copy_from_user(&rs, argp, sizeof(rs)))

drivers/misc/sgi-gru/grufault.c

699

if (copy_from_user(&excdet, (void __user *)arg, sizeof(excdet)))

drivers/misc/sgi-gru/grufault.c

773

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grufault.c

803

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grufault.c

828

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grufault.c

861

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grufile.c

128

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grukdump.c

183

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/tps6594-pfsm.c

192

if (copy_from_user(&state_opt, argp, sizeof(state_opt)))

drivers/misc/tps6594-pfsm.c

211

if (copy_from_user(&state_opt, argp, sizeof(state_opt)))

drivers/misc/vmw_vmci/vmci_host.c

304

if (copy_from_user(&init_block, uptr, sizeof(init_block))) {

drivers/misc/vmw_vmci/vmci_host.c

373

if (copy_from_user(&send_info, uptr, sizeof(send_info)))

drivers/misc/vmw_vmci/vmci_host.c

429

if (copy_from_user(&recv_info, uptr, sizeof(recv_info)))

drivers/misc/vmw_vmci/vmci_host.c

464

if (copy_from_user(&alloc_info, uptr, sizeof(alloc_info)))

drivers/misc/vmw_vmci/vmci_host.c

486

if (copy_from_user(&alloc_info, uptr, sizeof(alloc_info)))

drivers/misc/vmw_vmci/vmci_host.c

534

if (copy_from_user(&set_va_info, uptr, sizeof(set_va_info)))

drivers/misc/vmw_vmci/vmci_host.c

577

if (copy_from_user(&page_file_info, uptr, sizeof(*info)))

drivers/misc/vmw_vmci/vmci_host.c

648

if (copy_from_user(&detach_info, uptr, sizeof(detach_info)))

drivers/misc/vmw_vmci/vmci_host.c

675

if (copy_from_user(&ar_info, uptr, sizeof(ar_info)))

drivers/misc/vmw_vmci/vmci_host.c

698

if (copy_from_user(&ar_info, uptr, sizeof(ar_info)))

drivers/misc/vmw_vmci/vmci_host.c

722

if (copy_from_user(&get_info, uptr, sizeof(get_info)))

drivers/misc/vmw_vmci/vmci_host.c

754

if (copy_from_user(&set_info, uptr, sizeof(set_info)))

drivers/misc/vmw_vmci/vmci_host.c

792

if (copy_from_user(&notify_info, uptr, sizeof(notify_info)))

drivers/misc/vmw_vmci/vmci_host.c

825

if (copy_from_user(&info, uptr, sizeof(info)))

drivers/misc/vmw_vmci/vmci_host.c

879

if (copy_from_user(&info, uptr, sizeof(info)))

drivers/misc/xilinx_sdfec.c

389

err = copy_from_user(&irq, arg, sizeof(irq));

drivers/misc/xilinx_sdfec.c

415

err = copy_from_user(&turbo, arg, sizeof(turbo));

drivers/mmc/core/block.c

431

if (copy_from_user(&idata->ic, user, sizeof(idata->ic))) {

drivers/mmc/core/block.c

729

if (copy_from_user(&num_of_cmds, &user->num_of_cmds,

drivers/most/most_cdev.c

210

left = copy_from_user(mbo->virt_address + c->mbo_offs, buf, to_copy);

drivers/mtd/mtdchar.c

1005

if (copy_from_user(&buf, argp, sizeof(buf)))

drivers/mtd/mtdchar.c

1032

if (copy_from_user(&einfo, argp, sizeof(einfo)))

drivers/mtd/mtdchar.c

1043

if (copy_from_user(&einfo, argp, sizeof(einfo)))

drivers/mtd/mtdchar.c

1054

if (copy_from_user(&einfo, argp, sizeof(einfo)))

drivers/mtd/mtdchar.c

1082

if (copy_from_user(&offs, argp, sizeof(loff_t)))

drivers/mtd/mtdchar.c

1091

if (copy_from_user(&offs, argp, sizeof(loff_t)))

drivers/mtd/mtdchar.c

1099

if (copy_from_user(&mode, argp, sizeof(int)))

drivers/mtd/mtdchar.c

1148

if (copy_from_user(&oinfo, argp, sizeof(oinfo)))

drivers/mtd/mtdchar.c

1215

if (copy_from_user(&a, blk_arg, sizeof(a)))

drivers/mtd/mtdchar.c

1280

if (copy_from_user(&buf, argp, sizeof(buf)))

drivers/mtd/mtdchar.c

1295

if (copy_from_user(&buf, argp, sizeof(buf)))

drivers/mtd/mtdchar.c

1311

if (copy_from_user(&compat_arg, uarg, sizeof(compat_arg))) {

drivers/mtd/mtdchar.c

247

if (copy_from_user(kbuf, buf, len)) {

drivers/mtd/mtdchar.c

549

if (copy_from_user(&p, arg->data, sizeof(p)))

drivers/mtd/mtdchar.c

604

if (copy_from_user(&req, argp, sizeof(req)))

drivers/mtd/mtdchar.c

668

if (copy_from_user(datbuf, usr_data, ops.len) ||

drivers/mtd/mtdchar.c

669

copy_from_user(oobbuf, usr_oob, ops.ooblen)) {

drivers/mtd/mtdchar.c

704

if (copy_from_user(&req, argp, sizeof(req)))

drivers/mtd/mtdchar.c

933

if (copy_from_user(&einfo64, argp,

drivers/mtd/mtdchar.c

943

if (copy_from_user(&einfo32, argp,

drivers/mtd/mtdchar.c

964

if (copy_from_user(&buf, argp, sizeof(buf)))

drivers/mtd/mtdchar.c

978

if (copy_from_user(&buf, argp, sizeof(buf)))

drivers/mtd/mtdchar.c

991

if (copy_from_user(&buf, argp, sizeof(buf)))

drivers/mtd/ubi/cdev.c

1016

err = copy_from_user(req, argp, sizeof(struct ubi_rnvol_req));

drivers/mtd/ubi/cdev.c

1090

err = copy_from_user(&req, argp, sizeof(struct ubi_attach_req));

drivers/mtd/ubi/cdev.c

297

err = copy_from_user(tbuf, buf, len);

drivers/mtd/ubi/cdev.c

398

err = copy_from_user(&bytes, argp, sizeof(int64_t));

drivers/mtd/ubi/cdev.c

433

err = copy_from_user(&req, argp,

drivers/mtd/ubi/cdev.c

498

err = copy_from_user(&req, argp, sizeof(struct ubi_map_req));

drivers/mtd/ubi/cdev.c

540

err = copy_from_user(&req, argp,

drivers/mtd/ubi/cdev.c

840

if (copy_from_user(&req, ureq, sizeof(struct ubi_ecinfo_req)))

drivers/mtd/ubi/cdev.c

917

err = copy_from_user(&req, argp, sizeof(struct ubi_mkvol_req));

drivers/mtd/ubi/cdev.c

978

err = copy_from_user(&req, argp, sizeof(struct ubi_rsvol_req));

drivers/mtd/ubi/debug.c

412

if (copy_from_user(buf, user_buf, buf_size)) {

drivers/mtd/ubi/upd.c

296

err = copy_from_user(vol->upd_buf + offs, buf, len);

drivers/mtd/ubi/upd.c

331

err = copy_from_user(vol->upd_buf, buf, len);

drivers/mtd/ubi/upd.c

394

err = copy_from_user(vol->upd_buf + vol->upd_received, buf, count);

drivers/net/bonding/bond_main.c

4603

if (copy_from_user(&k_binfo, u_binfo, sizeof(ifbond)))

drivers/net/bonding/bond_main.c

4614

if (copy_from_user(&k_sinfo, u_sinfo, sizeof(ifslave)))

drivers/net/bonding/bond_main.c

5803

if (copy_from_user(&cfg, ifr->ifr_data, sizeof(cfg)))

drivers/net/eql.c

418

if (copy_from_user(&srq, srqp, sizeof (slaving_request_t)))

drivers/net/eql.c

461

if (copy_from_user(&srq, srqp, sizeof (slaving_request_t)))

drivers/net/eql.c

490

if (copy_from_user(&sc, scp, sizeof (slave_config_t)))

drivers/net/eql.c

523

if (copy_from_user(&sc, scp, sizeof (slave_config_t)))

drivers/net/eql.c

571

if (copy_from_user(&mc, mcp, sizeof (master_config_t)))

drivers/net/ethernet/broadcom/bnxt/bnxt_coredump.c

261

if (len && !copy_from_user(record->commandline,

drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c

2145

if (copy_from_user(&cmd, useraddr, sizeof(cmd)))

drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c

2158

if (copy_from_user(&t, useraddr, sizeof(t)))

drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c

2258

if (copy_from_user(&t, useraddr, sizeof(t)))

drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c

2307

if (copy_from_user(&edata, useraddr, sizeof(edata)))

drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c

2349

if (copy_from_user(&t, useraddr, sizeof(t)))

drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c

2374

if (copy_from_user(&m, useraddr, sizeof(m)))

drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c

2417

if (copy_from_user(&m, useraddr, sizeof(m)))

drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c

2454

if (copy_from_user(&t, useraddr, sizeof(t)))

drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c

2508

if (copy_from_user(&t, useraddr, sizeof(t)))

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

1292

if (copy_from_user(s, buf, count))

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

1435

if (copy_from_user(s, buf, count)) {

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

2207

if (copy_from_user(s, buf, count))

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

672

if (copy_from_user(s, buf, size))

drivers/net/ethernet/intel/i40e/i40e_debugfs.c

1614

bytes_not_copied = copy_from_user(cmd_buf, buffer, count);

drivers/net/ethernet/intel/i40e/i40e_debugfs.c

731

bytes_not_copied = copy_from_user(cmd_buf, buffer, count);

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

1345

bytes_not_copied = copy_from_user(cmd_buf, buffer, *count);

drivers/net/ethernet/mellanox/mlx5/core/cmd.c

1351

if (copy_from_user(lbuf, buf, sizeof(lbuf) - 1))

drivers/net/ethernet/mellanox/mlx5/core/cmd.c

1602

if (copy_from_user(outlen_str, buf, count))

drivers/net/ethernet/tehuti/tehuti.c

651

error = copy_from_user(data, udata, sizeof(data));

drivers/net/fddi/skfp/skfddi.c

968

if (copy_from_user(&ioc, data, sizeof(struct s_skfp_ioctl)))

drivers/net/ieee802154/ca8210.c

2464

ret = copy_from_user(command, in_buf, len);

drivers/net/netdevsim/dev.c

257

ret = copy_from_user(buf, data, count);

drivers/net/netdevsim/fib.c

1382

if (copy_from_user(buf, user_buf, size))

drivers/net/netdevsim/netdev.c

872

if (copy_from_user(buf, data, count))

drivers/net/phy/phy.c

409

if (copy_from_user(&cfg, ifr->ifr_data, sizeof(cfg)))

drivers/net/ppp/ppp_async.c

448

if (copy_from_user(accm, argp, sizeof(accm)))

drivers/net/ppp/ppp_generic.c

1023

if (copy_from_user(&data32, argp, sizeof(data32))) {

drivers/net/ppp/ppp_generic.c

3056

if (copy_from_user(ccp_option, data->ptr, data->length))

drivers/net/ppp/ppp_generic.c

525

if (copy_from_user(skb_put(skb, count), buf, count)) {

drivers/net/ppp/ppp_generic.c

606

if (copy_from_user(&uprog, p, sizeof(struct sock_fprog)))

drivers/net/ppp/ppp_generic.c

625

if (copy_from_user(&uprog32, p, sizeof(struct sock_fprog32)))

drivers/net/ppp/ppp_generic.c

847

if (copy_from_user(&data, argp, sizeof(data)))

drivers/net/ppp/ppp_generic.c

911

if (copy_from_user(&npi, argp, sizeof(npi)))

drivers/net/ppp/ppp_synctty.c

440

if (copy_from_user(accm, argp, sizeof(accm)))

drivers/net/tap.c

1013

if (copy_from_user(&ss, &ifr->ifr_hwaddr, sizeof(ifr->ifr_hwaddr)))

drivers/net/tun.c

2993

if (copy_from_user(&fd, data, sizeof(fd)))

drivers/net/tun.c

3064

if (copy_from_user(&ifr, argp, ifreq_len))

drivers/net/tun.c

3109

if (copy_from_user(&ifindex, argp, sizeof(ifindex)))

drivers/net/tun.c

3258

if (copy_from_user(&sndbuf, argp, sizeof(sndbuf))) {

drivers/net/tun.c

3277

if (copy_from_user(&tun->fprog, argp, sizeof(tun->fprog)))

drivers/net/tun.c

3312

if (copy_from_user(&carrier, argp, sizeof(carrier)))

drivers/net/tun.c

822

if (copy_from_user(&uf, arg, sizeof(uf)))

drivers/net/wan/c101.c

253

if (copy_from_user(&new_line, line, size))

drivers/net/wan/farsync.c

1789

if (copy_from_user(&sync, ifs->ifs_ifsu.sync, sizeof(sync)))

drivers/net/wan/farsync.c

1941

if (copy_from_user(&wrthdr, data, sizeof(struct fstioc_write)))

drivers/net/wan/farsync.c

2006

if (copy_from_user(&info, data, sizeof(info)))

drivers/net/wan/fsl_qmc_hdlc.c

560

if (copy_from_user(&te1, ifs->ifs_ifsu.te1, sizeof(te1)))

drivers/net/wan/hdlc_cisco.c

337

if (copy_from_user(&new_settings, cisco_s, size))

drivers/net/wan/hdlc_fr.c

1213

if (copy_from_user(&new_settings, fr_s, size))

drivers/net/wan/hdlc_fr.c

1261

if (copy_from_user(&pvc, ifs->ifs_ifsu.fr_pvc,

drivers/net/wan/hdlc_raw.c

64

if (copy_from_user(&new_settings, raw_s, size))

drivers/net/wan/hdlc_raw_eth.c

80

if (copy_from_user(&new_settings, raw_s, size))

drivers/net/wan/hdlc_x25.c

314

if (copy_from_user(&new_settings, x25_s, size))

drivers/net/wan/ixp4xx_hss.c

1335

if (copy_from_user(&new_line, line, size))

drivers/net/wan/n2.c

264

if (copy_from_user(&new_line, line, size))

drivers/net/wan/pc300too.c

228

if (copy_from_user(&new_line, line, size))

drivers/net/wan/pci200syn.c

205

if (copy_from_user(&new_line, line, size))

drivers/net/wan/wanxl.c

374

if (copy_from_user(&line, ifs->ifs_ifsu.sync,

drivers/net/wireless/ath/ath10k/debug.c

834

ret = copy_from_user(buf, user_buf, count);

drivers/net/wireless/ath/ath10k/spectral.c

311

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath11k/spectral.c

308

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath12k/debugfs_htt_stats.c

6200

if (copy_from_user(buf, user_buf, count))

drivers/net/wireless/ath/ath5k/debug.c

231

if (copy_from_user(buf, userbuf, count))

drivers/net/wireless/ath/ath5k/debug.c

333

if (copy_from_user(buf, userbuf, count))

drivers/net/wireless/ath/ath5k/debug.c

438

if (copy_from_user(buf, userbuf, count))

drivers/net/wireless/ath/ath5k/debug.c

611

if (copy_from_user(buf, userbuf, count))

drivers/net/wireless/ath/ath5k/debug.c

760

if (copy_from_user(buf, userbuf, count))

drivers/net/wireless/ath/ath5k/debug.c

858

if (copy_from_user(buf, userbuf, count))

drivers/net/wireless/ath/ath6kl/debug.c

1091

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath6kl/debug.c

1243

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath6kl/debug.c

1275

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath6kl/debug.c

1411

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath6kl/debug.c

1588

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath6kl/debug.c

1633

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath6kl/debug.c

1673

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath6kl/debug.c

1728

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath9k/common-spectral.c

803

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/ath9k/debug.c

1219

if (copy_from_user(buf, user_buf, len))

drivers/net/wireless/ath/carl9170/debug.c

138

if (copy_from_user(buf, userbuf, count)) {

drivers/net/wireless/ath/wcn36xx/debug.c

113

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/ath/wcn36xx/debug.c

64

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/broadcom/b43/debugfs.c

585

if (copy_from_user(buf, userbuf, count)) {

drivers/net/wireless/broadcom/b43legacy/debugfs.c

287

if (copy_from_user(buf, userbuf, count)) {

drivers/net/wireless/intel/ipw2x00/libipw_module.c

230

if (copy_from_user(buf, buffer, len))

drivers/net/wireless/intel/iwlegacy/4965-rs.c

2538

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlegacy/debug.c

1120

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlegacy/debug.c

1210

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlegacy/debug.c

1280

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlegacy/debug.c

251

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlegacy/debug.c

374

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlegacy/debug.c

726

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlegacy/debug.c

772

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

152

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1815

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1860

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1931

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1972

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2032

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2127

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2164

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2202

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2252

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

418

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

499

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

551

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/dvm/rs.c

3048

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/fw/debugfs.c

83

if (copy_from_user(buf, user_buf, buf_size)) \

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1590

if (copy_from_user(buf, user_buf, buf_size)) \

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

2052

if (copy_from_user((void *)cmd->data, user_buf, data_size)) {

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.h

23

if (copy_from_user(buf, user_buf, buf_size)) \

drivers/net/wireless/intel/iwlwifi/mvm/rs.c

3741

if (copy_from_user(buf, user_buf, buf_size))

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

3242

if (copy_from_user(buf, user_buf, count))

drivers/net/wireless/mediatek/mt76/mt7615/debugfs.c

486

if (copy_from_user(buf, userbuf, count))

drivers/net/wireless/mediatek/mt76/mt7915/debugfs.c

1089

if (copy_from_user(buf, user_buf, count))

drivers/net/wireless/mediatek/mt76/mt7915/debugfs.c

1418

if (copy_from_user(buf, user_buf, count))

drivers/net/wireless/mediatek/mt76/mt7915/debugfs.c

62

if (copy_from_user(buf, user_buf, count))

drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c

1013

if (copy_from_user(buf, user_buf, count))

drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c

62

if (copy_from_user(buf, user_buf, count))

drivers/net/wireless/ralink/rt2x00/rt2x00debug.c

463

if (copy_from_user(line, buf, length)) \

drivers/net/wireless/realtek/rtlwifi/debug.c

281

if (copy_from_user(tmp, buffer, tmp_len))

drivers/net/wireless/realtek/rtlwifi/debug.c

332

if (copy_from_user(tmp, buffer, tmp_len))

drivers/net/wireless/realtek/rtlwifi/debug.c

378

if (copy_from_user(tmp, buffer, tmp_len))

drivers/net/wireless/realtek/rtw88/debug.c

242

if (copy_from_user(tmp, buffer, tmp_len))

drivers/net/wireless/realtek/rtw89/debug.c

221

if (copy_from_user(buf, userbuf, count))

drivers/net/wireless/st/cw1200/debug.c

343

if (copy_from_user(buf, user_buf, 1))

drivers/net/wireless/virtual/mac80211_hwsim_main.c

1132

if (copy_from_user(buf, user_buf, count))

drivers/net/wireless/virtual/mac80211_hwsim_main.c

1186

if (copy_from_user(buf, ubuf, len))

drivers/net/wwan/wwan_core.c

1006

if (copy_from_user(&port->at_data.termios, (void __user *)arg,

drivers/net/wwan/wwan_core.c

1021

if (copy_from_user(&mdmbits, (int __user *)arg, sizeof(int))) {

drivers/net/wwan/wwan_core.c

928

if (copy_from_user(skb_put(skb, frag_len), buf + count - remain, frag_len)) {

drivers/net/wwan/wwan_core.c

991

if (copy_from_user(&port->at_data.termios, (void __user *)arg,

drivers/nfc/virtual_ncidev.c

124

if (copy_from_user(skb_put(skb, count), buf, count)) {

drivers/ntb/test/ntb_tool.c

782

ret = copy_from_user(buf, ubuf, size);

drivers/ntb/test/ntb_tool.c

934

if (copy_from_user(buf, ubuf, buf_size))

drivers/nvdimm/bus.c

1056

if (copy_from_user(&pkg, p, sizeof(pkg)))

drivers/nvdimm/bus.c

1112

if (copy && copy_from_user(&in_env[in_len], p + in_len, copy))

drivers/nvdimm/bus.c

1143

if (copy && copy_from_user(&out_env[out_len],

drivers/nvdimm/bus.c

1161

if (copy_from_user(buf, p, buf_len))

drivers/nvme/host/ioctl.c

212

if (copy_from_user(&io, uio, sizeof(io)))

drivers/nvme/host/ioctl.c

290

if (copy_from_user(&cmd, ucmd, sizeof(cmd)))

drivers/nvme/host/ioctl.c

337

if (copy_from_user(&cmd, ucmd, sizeof(cmd)))

drivers/nvme/target/debugfs.c

108

if (copy_from_user(reset, buf, count))

drivers/pci/pcie/aer_inject.c

499

if (copy_from_user(&einj, ubuf, usize))

drivers/pci/pcie/ptm.c

299

ret = copy_from_user(buf, ubuf, count);

drivers/pci/switch/switchtec.c

1079

if (copy_from_user(&ctl, uctl, sizeof(ctl)))

drivers/pci/switch/switchtec.c

1125

if (copy_from_user(&p, up, sizeof(p)))

drivers/pci/switch/switchtec.c

1170

if (copy_from_user(&p, up, sizeof(p)))

drivers/pci/switch/switchtec.c

529

rc = copy_from_user(&stuser->cmd, data, sizeof(stuser->cmd));

drivers/pci/switch/switchtec.c

542

rc = copy_from_user(&stuser->data, data, size - sizeof(stuser->cmd));

drivers/pci/switch/switchtec.c

867

if (copy_from_user(&info, uinfo, sizeof(info)))

drivers/pci/vgaarb.c

1152

if (copy_from_user(kbuf, buf, count))

drivers/platform/chrome/cros_ec_chardev.c

326

if (copy_from_user(&u_cmd, arg, sizeof(u_cmd)))

drivers/platform/chrome/cros_ec_chardev.c

338

if (copy_from_user(s_cmd, arg, sizeof(*s_cmd) + u_cmd.outsize)) {

drivers/platform/chrome/cros_ec_chardev.c

372

if (copy_from_user(&s_mem, arg, sizeof(s_mem)))

drivers/platform/chrome/wilco_ec/telemetry.c

274

if (copy_from_user(&sess_data->request, buf, count))

drivers/platform/raspberrypi/vchiq-interface/vchiq_debugfs.c

66

if (copy_from_user(&firstchar, buffer, 1))

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

1038

if (copy_from_user(&args32, argp, sizeof(args32)))

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

1072

if (copy_from_user(&args32, argp, sizeof(args32)))

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

1105

if (copy_from_user(&args32, arg, sizeof(args32)))

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

1135

if (copy_from_user(&args32, arg, sizeof(args32)))

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

648

if (copy_from_user(&args, argp, sizeof(args))) {

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

725

if (copy_from_user(&args, (const void __user *)arg,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

737

if (copy_from_user(elements, args.elements,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

758

if (copy_from_user(&args, argp, sizeof(args))) {

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

772

if (copy_from_user(&args, argp, sizeof(args))) {

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

784

if (copy_from_user(&args, (const void __user *)arg,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

803

if (copy_from_user(&args, (const void __user *)arg,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

823

if (copy_from_user(&args, (const void __user *)arg,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

92

if (copy_from_user(dest + total_bytes_copied,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

920

if (copy_from_user(&args32, ptrargs32, sizeof(args32)))

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

973

if (copy_from_user(&args32, arg, sizeof(args32)))

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

994

if (copy_from_user(&element32, args.elements,

drivers/platform/surface/surface_aggregator_cdev.c

314

if (copy_from_user((void *)spec.payload, plddata, spec.length)) {

drivers/platform/x86/amd/pmf/tee-if.c

387

if (copy_from_user(new_policy_buf, buf, length)) {

drivers/platform/x86/apple-gmux.c

705

if (copy_from_user(&data, userbuf, 1))

drivers/platform/x86/apple-gmux.c

712

if (copy_from_user(&data, userbuf, 4))

drivers/platform/x86/dell/dell-smbios-wmi.c

145

if (copy_from_user(priv->buf, arg, priv->req_buf_size))

drivers/platform/x86/intel/pmc/core.c

1157

if (copy_from_user(buf, userbuf, count))

drivers/platform/x86/intel/speed_select_if/isst_if_common.c

535

if (copy_from_user(&cmd_count, argp, sizeof(cmd_count)))

drivers/platform/x86/intel/speed_select_if/isst_if_common.c

556

if (copy_from_user(cmd_ptr, ptr, cb->cmd_size)) {

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1096

if (copy_from_user(&perf_level, argp, sizeof(perf_level)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1198

if (copy_from_user(&perf_level_fabric, argp, sizeof(perf_level_fabric)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1257

if (copy_from_user(&cpumask, argp, sizeof(cpumask)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1299

if (copy_from_user(&base_freq, argp, sizeof(base_freq)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1338

if (copy_from_user(&cpumask, argp, sizeof(cpumask)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1366

if (copy_from_user(&tpmi_inst, argp, sizeof(tpmi_inst)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1430

if (copy_from_user(&turbo_freq, argp, sizeof(turbo_freq)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

607

if (copy_from_user(&core_power, argp, sizeof(core_power)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

657

if (copy_from_user(&clos_param, argp, sizeof(clos_param)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

713

if (copy_from_user(&assoc_cmds, argp, sizeof(assoc_cmds)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

729

if (copy_from_user(&clos_assoc, ptr, sizeof(clos_assoc)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

862

if (copy_from_user(&perf_level, argp, sizeof(perf_level)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

928

if (copy_from_user(&perf_level, argp, sizeof(perf_level)))

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

988

if (copy_from_user(&perf_feature, argp, sizeof(perf_feature)))

drivers/platform/x86/intel_scu_ipcutil.c

87

if (copy_from_user(&data, argp, sizeof(struct scu_ipc_data)))

drivers/platform/x86/sony-laptop.c

3990

if (copy_from_user(&val8, argp, sizeof(val8))) {

drivers/platform/x86/sony-laptop.c

4051

if (copy_from_user(&val8, argp, sizeof(val8))) {

drivers/platform/x86/sony-laptop.c

4067

if (copy_from_user(&val8, argp, sizeof(val8))) {

drivers/platform/x86/toshiba_acpi.c

1496

if (copy_from_user(cmd, buf, len))

drivers/platform/x86/toshiba_acpi.c

1677

if (copy_from_user(cmd, buf, len))

drivers/platform/x86/toshiba_acpi.c

1748

if (copy_from_user(cmd, buf, len))

drivers/platform/x86/toshiba_acpi.c

2626

if (copy_from_user(&regs, argp, sizeof(SMMRegisters)))

drivers/platform/x86/toshiba_acpi.c

2635

if (copy_from_user(&regs, argp, sizeof(SMMRegisters)))

drivers/pnp/pnpbios/proc.c

199

if (copy_from_user(node->data, buf, count)) {

drivers/pps/pps.c

129

err = copy_from_user(&params, uarg, sizeof(struct pps_kparams));

drivers/pps/pps.c

187

err = copy_from_user(&fdata, uarg, sizeof(struct pps_fdata));

drivers/pps/pps.c

223

if (copy_from_user(&bind_args, uarg,

drivers/pps/pps.c

272

err = copy_from_user(&compat, uarg, sizeof(struct pps_fdata_compat));

drivers/ptp/ptp_chardev.c

207

if (copy_from_user(&req.extts, arg, sizeof(req.extts)))

drivers/ptp/ptp_chardev.c

253

if (copy_from_user(perout, arg, sizeof(*perout)))

drivers/ptp/ptp_chardev.c

451

if (copy_from_user(&pd, arg, sizeof(pd)))

drivers/ptp/ptp_chardev.c

472

if (copy_from_user(&pd, arg, sizeof(pd)))

drivers/ptp/ptp_chardev.c

496

if (copy_from_user(&channel, arg, sizeof(channel)))

drivers/pwm/core.c

2267

ret = copy_from_user(&cwf,

drivers/pwm/core.c

2308

ret = copy_from_user(&cwf,

drivers/pwm/core.c

2344

ret = copy_from_user(&cwf,

drivers/rapidio/devices/rio_mport_cdev.c

1002

if (unlikely(copy_from_user(&w_param, arg, sizeof(w_param))))

drivers/rapidio/devices/rio_mport_cdev.c

1104

if (unlikely(copy_from_user(&map, arg, sizeof(map))))

drivers/rapidio/devices/rio_mport_cdev.c

1131

if (copy_from_user(&handle, arg, sizeof(handle)))

drivers/rapidio/devices/rio_mport_cdev.c

1274

if (unlikely(copy_from_user(&map, arg, sizeof(map))))

drivers/rapidio/devices/rio_mport_cdev.c

1318

if (copy_from_user(&handle, arg, sizeof(handle)))

drivers/rapidio/devices/rio_mport_cdev.c

1420

if (copy_from_user(&filter, arg, sizeof(filter)))

drivers/rapidio/devices/rio_mport_cdev.c

1465

if (copy_from_user(&filter, arg, sizeof(filter)))

drivers/rapidio/devices/rio_mport_cdev.c

1539

if (copy_from_user(&filter, arg, sizeof(filter)))

drivers/rapidio/devices/rio_mport_cdev.c

1597

if (copy_from_user(&filter, arg, sizeof(filter)))

drivers/rapidio/devices/rio_mport_cdev.c

1673

if (copy_from_user(&dev_info, arg, sizeof(dev_info)))

drivers/rapidio/devices/rio_mport_cdev.c

1810

if (copy_from_user(&dev_info, arg, sizeof(dev_info)))

drivers/rapidio/devices/rio_mport_cdev.c

2297

if (copy_from_user(&event, buf, sizeof(event)))

drivers/rapidio/devices/rio_mport_cdev.c

250

if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))

drivers/rapidio/devices/rio_mport_cdev.c

295

if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))

drivers/rapidio/devices/rio_mport_cdev.c

308

if (unlikely(copy_from_user(buffer,

drivers/rapidio/devices/rio_mport_cdev.c

415

if (unlikely(copy_from_user(&map, arg, sizeof(map))))

drivers/rapidio/devices/rio_mport_cdev.c

451

if (copy_from_user(&handle, arg, sizeof(handle)))

drivers/rapidio/devices/rio_mport_cdev.c

482

if (copy_from_user(&hdid, arg, sizeof(hdid)))

drivers/rapidio/devices/rio_mport_cdev.c

504

if (copy_from_user(&comptag, arg, sizeof(comptag)))

drivers/rapidio/devices/rio_mport_cdev.c

951

if (unlikely(copy_from_user(&transaction, arg, sizeof(transaction))))

drivers/rapidio/devices/rio_mport_cdev.c

966

if (unlikely(copy_from_user(transfer,

drivers/rapidio/rio_cm.c

1570

if (copy_from_user(&info, arg, sizeof(info)))

drivers/rapidio/rio_cm.c

1624

if (copy_from_user(&entries, arg, sizeof(entries)))

drivers/rapidio/rio_cm.c

1717

if (copy_from_user(&chan, arg, sizeof(chan)))

drivers/rapidio/rio_cm.c

1751

if (copy_from_user(&param, arg, sizeof(param)))

drivers/rapidio/rio_cm.c

1784

if (copy_from_user(&chan, arg, sizeof(chan)))

drivers/rapidio/rio_cm.c

1838

if (copy_from_user(&msg, arg, sizeof(msg)))

drivers/rapidio/rio_cm.c

1865

if (copy_from_user(&msg, arg, sizeof(msg)))

drivers/remoteproc/remoteproc_cdev.c

30

ret = copy_from_user(cmd, buf, len);

drivers/remoteproc/remoteproc_cdev.c

56

if (copy_from_user(&param, argp, sizeof(s32)))

drivers/remoteproc/remoteproc_debugfs.c

219

ret = copy_from_user(buf, user_buf, count);

drivers/remoteproc/remoteproc_debugfs.c

82

ret = copy_from_user(buf, user_buf, count);

drivers/rpmsg/rpmsg_ctrl.c

84

if (copy_from_user(&eptinfo, argp, sizeof(eptinfo)))

drivers/rtc/dev.c

280

if (copy_from_user(&alarm.time, uarg, sizeof(tm)))

drivers/rtc/dev.c

343

if (copy_from_user(&tm, uarg, sizeof(tm)))

drivers/rtc/dev.c

381

if (copy_from_user(&alarm, uarg, sizeof(alarm)))

drivers/rtc/dev.c

397

if (copy_from_user(&param, uarg, sizeof(param))) {

drivers/rtc/dev.c

434

if (copy_from_user(&param, uarg, sizeof(param))) {

drivers/rtc/rtc-m41t80.c

787

if (copy_from_user(&rv, (int __user *)arg, sizeof(int)))

drivers/s390/block/dasd.c

902

if (copy_from_user(buffer, user_buf, user_len) != 0) {

drivers/s390/block/dasd_eckd.c

5210

if (copy_from_user(&usrparm, argp, sizeof(usrparm)))

drivers/s390/block/dasd_eckd.c

5363

if (copy_from_user(&attrib, argp, sizeof(struct attrib_data_t)))

drivers/s390/block/dasd_eckd.c

5392

if (copy_from_user(&usrparm, argp, sizeof(usrparm)))

drivers/s390/block/dasd_eckd.c

5412

if (copy_from_user(psf_data,

drivers/s390/block/dasd_ioctl.c

268

if (copy_from_user(&fdata, argp, sizeof(struct format_data_t))) {

drivers/s390/block/dasd_ioctl.c

306

if (copy_from_user(&cdata, argp, sizeof(cdata))) {

drivers/s390/block/dasd_ioctl.c

364

if (copy_from_user(&rdata, argp, sizeof(rdata))) {

drivers/s390/block/dasd_ioctl.c

394

if (copy_from_user(&data, argp, sizeof(struct dasd_copypair_swap_data_t))) {

drivers/s390/char/hmcdrv_ftp.c

268

if (!copy_from_user(ftp.buf, buf, ftp.len))

drivers/s390/char/keyboard.c

367

if (copy_from_user(&tmp, user_kbe, sizeof(struct kbentry)))

drivers/s390/char/keyboard.c

547

if (copy_from_user(&diacr, a->kbdiacr + i, sizeof(struct kbdiacr)))

drivers/s390/char/keyboard.c

566

if (copy_from_user(kbd->accent_table, a->kbdiacruc,

drivers/s390/char/monwriter.c

236

if (copy_from_user(to, data + written, len)) {

drivers/s390/char/monwriter.c

255

if (copy_from_user(to, data + written, len)) {

drivers/s390/char/sclp_ctl.c

58

if (copy_from_user(&ctl_sccb, user_area, sizeof(ctl_sccb)))

drivers/s390/char/sclp_ctl.c

66

copy_from_user(sccb, u64_to_uptr(ctl_sccb.sccb), PAGE_SIZE);

drivers/s390/char/tape_char.c

341

if (copy_from_user(&op, data, sizeof(op)) != 0)

drivers/s390/char/uvdevice.c

135

if (copy_from_user(uvio_attest, user_arg_buf, sizeof(*uvio_attest)))

drivers/s390/char/uvdevice.c

289

if (copy_from_user(asrcb, user_buf_arg, uv_ioctl->argument_len))

drivers/s390/char/uvdevice.c

487

if (copy_from_user(ioctl, argp, sizeof(*ioctl)))

drivers/s390/char/uvdevice.c

92

if (copy_from_user(arcb, user_buf_arcb, uvio_attest->arcb_len))

drivers/s390/char/vmur.c

242

if (copy_from_user(kbuf, ubuf, reclen)) {

drivers/s390/char/zcore.c

186

if (copy_from_user(&value, buf, 1))

drivers/s390/cio/chsc_sch.c

304

if (copy_from_user(chsc_area, user_area, PAGE_SIZE)) {

drivers/s390/cio/chsc_sch.c

348

if (copy_from_user(on_close_chsc_area, user_area, PAGE_SIZE)) {

drivers/s390/cio/chsc_sch.c

398

if (copy_from_user(chsc_area, user_area, PAGE_SIZE)) {

drivers/s390/cio/chsc_sch.c

449

if (copy_from_user(cd, user_cd, sizeof(*cd))) {

drivers/s390/cio/chsc_sch.c

511

if (copy_from_user(cd, user_cd, sizeof(*cd))) {

drivers/s390/cio/chsc_sch.c

574

if (copy_from_user(cud, user_cud, sizeof(*cud))) {

drivers/s390/cio/chsc_sch.c

636

if (copy_from_user(ci, user_ci, sizeof(*ci))) {

drivers/s390/cio/chsc_sch.c

707

if (copy_from_user(ccl, user_ccl, sizeof(*ccl))) {

drivers/s390/cio/chsc_sch.c

764

if (copy_from_user(chpd, user_chpd, sizeof(*chpd))) {

drivers/s390/cio/chsc_sch.c

807

if (copy_from_user(dcal, user_dcal, sizeof(*dcal))) {

drivers/s390/cio/vfio_ccw_async.c

52

if (copy_from_user((void *)region + pos, buf, count)) {

drivers/s390/cio/vfio_ccw_ops.c

268

if (copy_from_user((void *)region + pos, buf, count)) {

drivers/s390/cio/vfio_ccw_ops.c

506

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/s390/cio/vfio_ccw_ops.c

524

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/s390/cio/vfio_ccw_ops.c

547

if (copy_from_user(&hdr, (void __user *)arg, minsz))

drivers/s390/crypto/pkey_api.c

123

if (copy_from_user(&kcs, ucs, sizeof(kcs)))

drivers/s390/crypto/pkey_api.c

148

if (copy_from_user(&ksp, usp, sizeof(ksp)))

drivers/s390/crypto/pkey_api.c

176

if (copy_from_user(&kcp, ucp, sizeof(kcp)))

drivers/s390/crypto/pkey_api.c

222

if (copy_from_user(&kfc, ufc, sizeof(kfc)))

drivers/s390/crypto/pkey_api.c

258

if (copy_from_user(&ksp, usp, sizeof(ksp)))

drivers/s390/crypto/pkey_api.c

282

if (copy_from_user(&kvk, uvk, sizeof(kvk)))

drivers/s390/crypto/pkey_api.c

310

if (copy_from_user(&kgp, ugp, sizeof(kgp)))

drivers/s390/crypto/pkey_api.c

333

if (copy_from_user(&kvp, uvp, sizeof(kvp)))

drivers/s390/crypto/pkey_api.c

372

if (copy_from_user(&ktp, utp, sizeof(ktp)))

drivers/s390/crypto/pkey_api.c

399

if (copy_from_user(&kgs, ugs, sizeof(kgs)))

drivers/s390/crypto/pkey_api.c

451

if (copy_from_user(&kcs, ucs, sizeof(kcs)))

drivers/s390/crypto/pkey_api.c

509

if (copy_from_user(&kvk, uvk, sizeof(kvk)))

drivers/s390/crypto/pkey_api.c

534

if (copy_from_user(&ktp, utp, sizeof(ktp)))

drivers/s390/crypto/pkey_api.c

566

if (copy_from_user(&kak, uak, sizeof(kak)))

drivers/s390/crypto/pkey_api.c

615

if (copy_from_user(&kat, uat, sizeof(kat)))

drivers/s390/crypto/pkey_api.c

660

if (copy_from_user(&ktp, utp, sizeof(ktp)))

drivers/s390/crypto/pkey_api.c

99

if (copy_from_user(&kgs, ugs, sizeof(kgs)))

drivers/s390/crypto/vfio_ap_ops.c

2108

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/s390/crypto/vfio_ap_ops.c

2128

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/s390/crypto/vfio_ap_ops.c

2158

if (copy_from_user(irq_set, (void __user *)arg, minsz))

drivers/s390/crypto/zcrypt_api.c

1064

if (copy_from_user(targets, xcrb->targets,

drivers/s390/crypto/zcrypt_api.c

1486

if (copy_from_user(&mex, umex, sizeof(mex)))

drivers/s390/crypto/zcrypt_api.c

1515

if (copy_from_user(&crt, ucrt, sizeof(crt)))

drivers/s390/crypto/zcrypt_api.c

1545

if (copy_from_user(&xcrb, uxcrb, sizeof(xcrb)))

drivers/s390/crypto/zcrypt_api.c

1576

if (copy_from_user(&xcrb, uxcrb, sizeof(xcrb)))

drivers/s390/crypto/zcrypt_api.h

183

return copy_from_user(to, from, n);

drivers/s390/crypto/zcrypt_cca_key.h

131

if (copy_from_user(ptr, mex->b_key, mex->inputdatalength))

drivers/s390/crypto/zcrypt_cca_key.h

135

if (copy_from_user(ptr, mex->n_modulus, mex->inputdatalength))

drivers/s390/crypto/zcrypt_cca_key.h

212

if (copy_from_user(key->key_parts, crt->np_prime, long_len) ||

drivers/s390/crypto/zcrypt_cca_key.h

213

copy_from_user(key->key_parts + long_len,

drivers/s390/crypto/zcrypt_cca_key.h

215

copy_from_user(key->key_parts + long_len + short_len,

drivers/s390/crypto/zcrypt_cca_key.h

217

copy_from_user(key->key_parts + 2 * long_len + short_len,

drivers/s390/crypto/zcrypt_cca_key.h

219

copy_from_user(key->key_parts + 2 * long_len + 2 * short_len,

drivers/s390/crypto/zcrypt_msgtype50.c

240

if (copy_from_user(mod, mex->n_modulus, mod_len) ||

drivers/s390/crypto/zcrypt_msgtype50.c

241

copy_from_user(exp, mex->b_key, mod_len) ||

drivers/s390/crypto/zcrypt_msgtype50.c

242

copy_from_user(inp, mex->inputdata, mod_len))

drivers/s390/crypto/zcrypt_msgtype50.c

324

if (copy_from_user(p, crt->np_prime + MSGTYPE_ADJUSTMENT, short_len) ||

drivers/s390/crypto/zcrypt_msgtype50.c

325

copy_from_user(q, crt->nq_prime, short_len) ||

drivers/s390/crypto/zcrypt_msgtype50.c

326

copy_from_user(dp, crt->bp_key + MSGTYPE_ADJUSTMENT, short_len) ||

drivers/s390/crypto/zcrypt_msgtype50.c

327

copy_from_user(dq, crt->bq_key, short_len) ||

drivers/s390/crypto/zcrypt_msgtype50.c

328

copy_from_user(u, crt->u_mult_inv + MSGTYPE_ADJUSTMENT, short_len) ||

drivers/s390/crypto/zcrypt_msgtype50.c

329

copy_from_user(inp, crt->inputdata, mod_len))

drivers/s390/crypto/zcrypt_msgtype6.c

219

if (copy_from_user(msg->text, mex->inputdata, mex->inputdatalength))

drivers/s390/crypto/zcrypt_msgtype6.c

289

if (copy_from_user(msg->text, crt->inputdata, crt->inputdatalength))

drivers/s390/net/qeth_core_main.c

4717

if (copy_from_user(&__ipa_cmd(iob)->data.setadapterparms.data.snmp,

drivers/s390/net/qeth_core_main.c

4785

if (copy_from_user(&oat_data, udata, sizeof(oat_data)))

drivers/s390/net/qeth_l3_main.c

1414

if (copy_from_user(&qinfo, udata, 6)) {

drivers/s390/net/qeth_l3_main.c

1545

if (copy_from_user(&arp_entry, data, sizeof(arp_entry)))

drivers/sbus/char/openprom.c

393

if (copy_from_user(&op, argp, sizeof(op)))

drivers/sbus/char/openprom.c

425

if (copy_from_user(&op, argp, sizeof(op)))

drivers/sbus/char/openprom.c

470

if (copy_from_user(&op, argp, sizeof(op)))

drivers/sbus/char/openprom.c

502

if (copy_from_user(&nd, argp, sizeof(phandle)))

drivers/sbus/char/openprom.c

82

if (copy_from_user(&(*opp_p)->oprom_array,

drivers/sbus/char/oradax.c

585

if (copy_from_user(&hdr, buf, sizeof(hdr)))

drivers/sbus/char/oradax.c

875

if (copy_from_user(ctx->ccb_buf, buf, count)) {

drivers/scsi/3w-9xxx.c

667

if (copy_from_user(&driver_command, argp, sizeof(TW_Ioctl_Driver_Command)))

drivers/scsi/3w-9xxx.c

691

if (copy_from_user(tw_ioctl, argp, sizeof(TW_Ioctl_Buf_Apache) + driver_command.buffer_length))

drivers/scsi/3w-sas.c

738

if (copy_from_user(&driver_command, argp, sizeof(TW_Ioctl_Driver_Command)))

drivers/scsi/3w-sas.c

760

if (copy_from_user(tw_ioctl, argp, driver_command.buffer_length + sizeof(TW_Ioctl_Buf_Apache)))

drivers/scsi/3w-xxxx.c

902

if (copy_from_user(&data_buffer_length, argp, sizeof(unsigned int)))

drivers/scsi/3w-xxxx.c

924

if (copy_from_user(tw_ioctl, argp, data_buffer_length + sizeof(TW_New_Ioctl)))

drivers/scsi/aacraid/aachba.c

3265

if (copy_from_user(&qd, arg, sizeof (struct aac_query_disk)))

drivers/scsi/aacraid/aachba.c

3307

if (copy_from_user(&dd, arg, sizeof (struct aac_delete_disk)))

drivers/scsi/aacraid/aachba.c

3332

if (copy_from_user(&dd, arg, sizeof (struct aac_delete_disk)))

drivers/scsi/aacraid/commctrl.c

104

if (copy_from_user(kfib, arg, size)) {

drivers/scsi/aacraid/commctrl.c

1050

if (copy_from_user((void *)&reset, arg, sizeof(struct aac_reset_iop)))

drivers/scsi/aacraid/commctrl.c

256

if (copy_from_user(&cf, arg, sizeof(struct compat_fib_ioctl)))

drivers/scsi/aacraid/commctrl.c

263

if (copy_from_user(&f, arg, sizeof(struct fib_ioctl)))

drivers/scsi/aacraid/commctrl.c

520

if(copy_from_user(&fibsize, &user_srb->count,sizeof(u32))){

drivers/scsi/aacraid/commctrl.c

67

if (copy_from_user((void *)kfib, arg, sizeof(struct aac_fibhdr))) {

drivers/scsi/aacraid/commctrl.c

685

if (copy_from_user(p, sg_user[i],

drivers/scsi/aacraid/commctrl.c

746

if (copy_from_user(p, sg_user[i],

drivers/scsi/aacraid/commctrl.c

801

if (copy_from_user(p, sg_user[i],

drivers/scsi/aacraid/commctrl.c

858

if (copy_from_user(p, sg_user[i],

drivers/scsi/aacraid/commctrl.c

899

if (copy_from_user(p, sg_user[i],

drivers/scsi/bfa/bfad_bsg.c

3405

if (copy_from_user((uint8_t *)bsg_fcpt,

drivers/scsi/ch.c

693

if (copy_from_user(&pos, argp, sizeof (pos)))

drivers/scsi/ch.c

712

if (copy_from_user(&mv, argp, sizeof (mv)))

drivers/scsi/ch.c

734

if (copy_from_user(&mv, argp, sizeof (mv)))

drivers/scsi/ch.c

759

if (copy_from_user(&ces, argp, sizeof (ces)))

drivers/scsi/ch.c

771

if (copy_from_user(&ces32, argp, sizeof(ces32)))

drivers/scsi/ch.c

788

if (copy_from_user(&cge, argp, sizeof (cge)))

drivers/scsi/ch.c

870

if (copy_from_user(&csv, argp, sizeof(csv)))

drivers/scsi/fnic/fnic_debugfs.c

152

if (copy_from_user(&buf, ubuf, cnt))

drivers/scsi/fnic/fnic_debugfs.c

509

if (copy_from_user(&buf, ubuf, cnt))

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4003

if (copy_from_user(buf, user_buf, count))

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4074

if (copy_from_user(kbuf, buf, count))

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4149

if (copy_from_user(kbuf, buf, count))

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4281

if (copy_from_user(kbuf, buf, count))

drivers/scsi/hpsa.c

6273

if (copy_from_user(&arg64, arg32, offsetof(IOCTL_Command_struct, buf)))

drivers/scsi/hpsa.c

6303

if (copy_from_user(&arg64, arg32,

drivers/scsi/hpsa.c

6637

if (copy_from_user(&iocommand, argp, sizeof(iocommand)))

drivers/scsi/hpsa.c

6651

if (copy_from_user(&ioc, argp, sizeof(ioc)))

drivers/scsi/lpfc/lpfc_debugfs.c

2171

if (copy_from_user(mybuf, buf, bsize))

drivers/scsi/lpfc/lpfc_debugfs.c

2450

if (copy_from_user(dstbuf, buf, size))

drivers/scsi/lpfc/lpfc_debugfs.c

2651

if (copy_from_user(mybuf, buf, nbytes))

drivers/scsi/lpfc/lpfc_debugfs.c

2732

if (copy_from_user(mybuf, buf, nbytes))

drivers/scsi/lpfc/lpfc_debugfs.c

2811

if (copy_from_user(mybuf, buf, (nbytes >= sizeof(mybuf)) ?

drivers/scsi/lpfc/lpfc_debugfs.c

2870

if (copy_from_user(mybuf, buf, nbytes))

drivers/scsi/lpfc/lpfc_debugfs.c

2998

if (copy_from_user(mybuf, buf, nbytes))

drivers/scsi/lpfc/lpfc_debugfs.c

3104

if (copy_from_user(mybuf, buf, nbytes))

drivers/scsi/lpfc/lpfc_debugfs.c

3185

if (copy_from_user(mybuf, buf, bsize))

drivers/scsi/megaraid.c

3042

if( copy_from_user(&num_ldrv, &ustats->num_ldrv, sizeof(int)) )

drivers/scsi/megaraid.c

3156

if( copy_from_user(pthru, upthru,

drivers/scsi/megaraid.c

3204

if( copy_from_user(data, (char __user *)(unsigned long) uxferaddr,

drivers/scsi/megaraid.c

3285

if( copy_from_user(data, (char __user *)(unsigned long) uxferaddr,

drivers/scsi/megaraid.c

3387

if( copy_from_user(signature, arg, 7) )

drivers/scsi/megaraid.c

3400

if( copy_from_user(uioc, arg, sizeof(nitioctl_t)) )

drivers/scsi/megaraid.c

3411

if( copy_from_user(&uioc_mimd, arg, sizeof(struct uioctl_t)) )

drivers/scsi/megaraid.c

3509

if( copy_from_user(signature, arg, 7) )

drivers/scsi/megaraid/megaraid_mm.c

125

if (copy_from_user(signature, argp, EXT_IOCTL_SIGN_SZ)) {

drivers/scsi/megaraid/megaraid_mm.c

243

if (copy_from_user(&mimd, umimd, sizeof(mimd_t))) {

drivers/scsi/megaraid/megaraid_mm.c

300

if (copy_from_user(&kmimd, umimd, sizeof(mimd_t)))

drivers/scsi/megaraid/megaraid_mm.c

364

if (copy_from_user(&mimd, umimd, sizeof(mimd_t)))

drivers/scsi/megaraid/megaraid_mm.c

459

if (copy_from_user(kioc->buf_vaddr, kioc->user_data,

drivers/scsi/megaraid/megaraid_mm.c

478

if (copy_from_user(pthru32, kioc->user_pthru,

drivers/scsi/megaraid/megaraid_mm.c

487

if (copy_from_user(kioc->buf_vaddr, kioc->user_data,

drivers/scsi/megaraid/megaraid_mm.c

817

if (copy_from_user(&kmimd, mimd, sizeof(mimd_t)))

drivers/scsi/megaraid/megaraid_sas_base.c

8366

if (copy_from_user(kbuff_arr[i], ioc->sgl[i].iov_base,

drivers/scsi/megaraid/megaraid_sas_base.c

8502

if (copy_from_user(ioc, arg, size))

drivers/scsi/megaraid/megaraid_sas_base.c

8591

if (copy_from_user(&aen, (void __user *)arg, sizeof(aen)))

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1285

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1316

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1356

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1399

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1538

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1993

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2026

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2109

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2306

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2396

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2570

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2682

if (copy_from_user(&karg32, (char __user *)arg, sizeof(karg32))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2725

if (copy_from_user(&ioctl_header, (char __user *)arg,

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2776

if (copy_from_user(&karg, arg, sizeof(karg))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

749

if (copy_from_user(mpi_request, mf, karg.data_sge_offset*4)) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

804

if (copy_from_user(data_out, karg.data_out_buf_ptr,

drivers/scsi/pmcraid.c

3440

if (copy_from_user(hdr, arg, sizeof(struct pmcraid_ioctl_header))) {

drivers/scsi/scsi_bsg.c

147

if (copy_from_user(scmd->cmnd, uptr64(cmd->request), cmd->request_len)) {

drivers/scsi/scsi_bsg.c

215

if (copy_from_user(scmd->cmnd, uptr64(hdr->request), scmd->cmd_len))

drivers/scsi/scsi_devinfo.c

696

if (copy_from_user(buffer, buf, length)) {

drivers/scsi/scsi_ioctl.c

374

if (copy_from_user(scmd->cmnd, hdr->cmdp, hdr->cmd_len))

drivers/scsi/scsi_ioctl.c

569

if (copy_from_user(scmd->cmnd, sic->data, cmdlen))

drivers/scsi/scsi_ioctl.c

572

if (in_len && copy_from_user(buffer, sic->data + cmdlen, in_len))

drivers/scsi/scsi_ioctl.c

685

if (copy_from_user(&hdr32, argp, sizeof(hdr32)))

drivers/scsi/scsi_ioctl.c

717

if (copy_from_user(hdr, argp, sizeof(*hdr)))

drivers/scsi/scsi_ioctl.c

746

if (copy_from_user(&cgc32, arg, sizeof(cgc32)))

drivers/scsi/scsi_ioctl.c

763

if (copy_from_user(cgc, arg, sizeof(*cgc)))

drivers/scsi/scsi_proc.c

420

if (copy_from_user(buffer, buf, length))

drivers/scsi/scsi_proc.c

80

if (copy_from_user(page, buf, count))

drivers/scsi/sg.c

625

if (copy_from_user(&old_hdr, buf, SZ_SG_HEADER))

drivers/scsi/sg.c

685

if (copy_from_user(cmnd, buf, cmd_size)) {

drivers/scsi/sg.c

761

if (copy_from_user(cmnd, hp->cmdp, hp->cmd_len)) {

drivers/scsi/smartpqi/smartpqi_init.c

6799

if (copy_from_user(&iocommand, arg, sizeof(iocommand)))

drivers/scsi/snic/snic_debugfs.c

117

if (copy_from_user(&buf, ubuf, cnt))

drivers/scsi/st.c

1733

(copy_from_user(&i, buf, 1) != 0 ||

drivers/scsi/st.c

1734

copy_from_user(&i, buf + count - 1, 1) != 0)) {

drivers/scsi/st.c

2185

if (copy_from_user(&i, buf, 1) != 0 ||

drivers/scsi/st.c

2187

copy_from_user(&i, buf + count - 1, 1) != 0 ||

drivers/scsi/st.c

3645

i = copy_from_user(&mtc, p, sizeof(struct mtop));

drivers/scsi/st.c

4102

res = copy_from_user(page_address(page) + offset, ubp, cnt);

drivers/soc/aspeed/aspeed-lpc-ctrl.c

81

if (copy_from_user(&map, p, sizeof(map)))

drivers/soc/aspeed/aspeed-p2a-ctrl.c

180

if (copy_from_user(&map, arg, sizeof(map)))

drivers/soc/qcom/rmtfs_mem.c

112

if (copy_from_user(rmtfs_mem->base + *f_pos, buf, count))

drivers/spi/spidev.c

192

missing = copy_from_user(spidev->tx_buffer, buf, count);

drivers/spi/spidev.c

268

if (copy_from_user(tx_buf, (const u8 __user *)

drivers/staging/greybus/fw-management.c

418

if (copy_from_user(&backend_fw_info, buf,

drivers/staging/greybus/fw-management.c

433

if (copy_from_user(&intf_load, buf, sizeof(intf_load)))

drivers/staging/greybus/fw-management.c

456

if (copy_from_user(&backend_update, buf,

drivers/staging/greybus/raw.c

137

if (copy_from_user(&request->data[0], data, len)) {

drivers/staging/media/atomisp/pci/atomisp_cmd.c

1498

ret = copy_from_user(tab->coordinates_x[i],

drivers/staging/media/atomisp/pci/atomisp_cmd.c

1509

ret = copy_from_user(tab->coordinates_y[i],

drivers/staging/media/atomisp/pci/atomisp_cmd.c

2034

return copy_from_user(to, (void __user *)from, n);

drivers/staging/media/atomisp/pci/atomisp_cmd.c

3339

if (copy_from_user(tmp_buf, (void __user __force *)arg->base,

drivers/staging/media/atomisp/pci/atomisp_cmd.c

4489

ret = copy_from_user(shading_table->data[i],

drivers/staging/media/atomisp/pci/atomisp_compat_css20.c

2638

if (copy_from_user(asd->params.css_param.dvs2_coeff->hor_coefs.odd_real,

drivers/staging/media/atomisp/pci/atomisp_compat_css20.c

2641

if (copy_from_user(asd->params.css_param.dvs2_coeff->hor_coefs.odd_imag,

drivers/staging/media/atomisp/pci/atomisp_compat_css20.c

2644

if (copy_from_user(asd->params.css_param.dvs2_coeff->hor_coefs.even_real,

drivers/staging/media/atomisp/pci/atomisp_compat_css20.c

2647

if (copy_from_user(asd->params.css_param.dvs2_coeff->hor_coefs.even_imag,

drivers/staging/media/atomisp/pci/atomisp_compat_css20.c

2651

if (copy_from_user(asd->params.css_param.dvs2_coeff->ver_coefs.odd_real,

drivers/staging/media/atomisp/pci/atomisp_compat_css20.c

2654

if (copy_from_user(asd->params.css_param.dvs2_coeff->ver_coefs.odd_imag,

drivers/staging/media/atomisp/pci/atomisp_compat_css20.c

2657

if (copy_from_user(asd->params.css_param.dvs2_coeff->ver_coefs.even_real,

drivers/staging/media/atomisp/pci/atomisp_compat_css20.c

2660

if (copy_from_user(asd->params.css_param.dvs2_coeff->ver_coefs.even_imag,

drivers/staging/media/av7110/av7110_av.c

481

if (copy_from_user(kb, buf, TS_SIZE))

drivers/staging/media/av7110/av7110_av.c

518

if (copy_from_user(av7110->kbuf[type], buf, n))

drivers/staging/media/av7110/av7110_av.c

582

if (copy_from_user(av7110->kbuf[type], buf, n))

drivers/staging/media/av7110/av7110_ca.c

152

if (copy_from_user(page, buf, count))

drivers/staging/media/av7110/av7110_hw.c

826

if (copy_from_user(av7110->bmpbuf + 1024 + i * dx, data + i * inc, dx)) {

drivers/staging/media/av7110/av7110_v4l.c

622

if (copy_from_user(&d, data, count))

drivers/staging/vme_user/vme_user.c

147

if (copy_from_user(image[minor].kern_buf, buf, (unsigned long)count))

drivers/staging/vme_user/vme_user.c

194

if (copy_from_user(image_ptr, buf, (unsigned long)count))

drivers/staging/vme_user/vme_user.c

331

copied = copy_from_user(&irq_req, argp,

drivers/staging/vme_user/vme_user.c

373

copied = copy_from_user(&master, argp, sizeof(master));

drivers/staging/vme_user/vme_user.c

413

copied = copy_from_user(&slave, argp, sizeof(slave));

drivers/tee/qcomtee/core.c

428

else if (copy_from_user(msgptr, u[i].b.uaddr, u[i].b.size))

drivers/tee/qcomtee/user_obj.c

527

if (copy_from_user(u[i].b.addr, params[i].u.ubuf.uaddr,

drivers/tee/tee_core.c

262

if (copy_from_user(&data, udata, sizeof(data)))

drivers/tee/tee_core.c

298

if (copy_from_user(&data, udata, sizeof(data)))

drivers/tee/tee_core.c

333

if (copy_from_user(&data, udata, sizeof(data)))

drivers/tee/tee_core.c

442

if (copy_from_user(&ip, uparams + n, sizeof(ip)))

drivers/tee/tee_core.c

561

if (copy_from_user(&buf, ubuf, sizeof(buf)))

drivers/tee/tee_core.c

569

if (copy_from_user(&arg, uarg, sizeof(arg)))

drivers/tee/tee_core.c

628

if (copy_from_user(&buf, ubuf, sizeof(buf)))

drivers/tee/tee_core.c

636

if (copy_from_user(&arg, uarg, sizeof(arg)))

drivers/tee/tee_core.c

680

if (copy_from_user(&buf, ubuf, sizeof(buf)))

drivers/tee/tee_core.c

688

if (copy_from_user(&arg, uarg, sizeof(arg)))

drivers/tee/tee_core.c

726

if (copy_from_user(&arg, uarg, sizeof(arg)))

drivers/tee/tee_core.c

742

if (copy_from_user(&arg, uarg, sizeof(arg)))

drivers/tee/tee_core.c

818

if (copy_from_user(&buf, ubuf, sizeof(buf)))

drivers/tee/tee_core.c

871

if (copy_from_user(&ip, uparams + n, sizeof(ip)))

drivers/tee/tee_core.c

937

if (copy_from_user(&buf, ubuf, sizeof(buf)))

drivers/thermal/intel/int340x_thermal/platform_temperature_control.c

235

if (copy_from_user(buf, data, len))

drivers/thermal/testing/command.c

190

if (copy_from_user(buf, user_buf, count))

drivers/thunderbolt/debugfs.c

144

if (copy_from_user(buf, user_buf, nbytes)) {

drivers/tty/ipwireless/network.c

213

if (copy_from_user(accm, (void __user *) arg, sizeof(accm)))

drivers/tty/n_gsm.c

3844

if (copy_from_user(&c, (void __user *)arg, sizeof(c)))

drivers/tty/n_gsm.c

3856

if (copy_from_user(&ce, (void __user *)arg, sizeof(ce)))

drivers/tty/n_gsm.c

3860

if (copy_from_user(&dc, (void __user *)arg, sizeof(dc)))

drivers/tty/n_gsm.c

3876

if (copy_from_user(&dc, (void __user *)arg, sizeof(dc)))

drivers/tty/n_gsm.c

4492

if (copy_from_user(&nc, (void __user *)arg, sizeof(nc)))

drivers/tty/n_gsm.c

4510

if (copy_from_user(&dc, (void __user *)arg, sizeof(dc)))

drivers/tty/n_gsm.c

4519

if (copy_from_user(&dc, (void __user *)arg, sizeof(dc)))

drivers/tty/serial/serial_core.c

1462

if (copy_from_user(&rs485, rs485_user, sizeof(*rs485_user)))

drivers/tty/serial/serial_core.c

1523

if (copy_from_user(&iso7816, iso7816_user, sizeof(*iso7816_user)))

drivers/tty/tty_io.c

2363

if (copy_from_user(&tmp_ws, arg, sizeof(*arg)))

drivers/tty/tty_io.c

2633

if (copy_from_user(&v, ss, sizeof(*ss)))

drivers/tty/tty_io.c

2839

if (copy_from_user(&v32, ss, sizeof(*ss)))

drivers/tty/tty_ioctl.c

365

if (copy_from_user(&v, termio, sizeof(struct termio)))

drivers/tty/tty_ioctl.c

398

return copy_from_user(k, u, sizeof(struct termios2));

drivers/tty/tty_ioctl.c

408

return copy_from_user(k, u, sizeof(struct termios));

drivers/tty/tty_ioctl.c

421

return copy_from_user(k, u, sizeof(struct termios));

drivers/tty/tty_ioctl.c

635

if (copy_from_user(&tmp, sgttyb, sizeof(tmp)))

drivers/tty/tty_ioctl.c

672

if (copy_from_user(&tmp, tchars, sizeof(tmp)))

drivers/tty/tty_ioctl.c

708

if (copy_from_user(&tmp, ltchars, sizeof(tmp)))

drivers/tty/vt/consolemap.c

390

if (copy_from_user(inbuf, arg, sizeof(inbuf)))

drivers/tty/vt/keyboard.c

1933

if (copy_from_user(&tmp, user_kbkc, sizeof(struct kbkeycode)))

drivers/tty/vt/keyboard.c

2042

if (copy_from_user(&kbe, user_kbe, sizeof(struct kbentry)))

drivers/tty/vt/selection.c

127

if (copy_from_user(tmplut, lut, sizeof(inwordLut)))

drivers/tty/vt/selection.c

191

if (copy_from_user(&v, sel, sizeof(*sel)))

drivers/tty/vt/vc_screen.c

633

ret = copy_from_user(con_buf, buf, this_round);

drivers/tty/vt/vt.c

4840

if (copy_from_user(colormap, arg, sizeof(colormap)))

drivers/tty/vt/vt_ioctl.c

1014

if (copy_from_user(op, fontop, sizeof(struct compat_console_font_op)))

drivers/tty/vt/vt_ioctl.c

1040

if (copy_from_user(&tmp, user_ud, sizeof tmp))

drivers/tty/vt/vt_ioctl.c

193

if (copy_from_user(&vw.event, event, sizeof(struct vt_event)))

drivers/tty/vt/vt_ioctl.c

365

if (copy_from_user(&kbrep, up, sizeof(struct kbd_repeat)))

drivers/tty/vt/vt_ioctl.c

468

if (copy_from_user(&op, up, sizeof(op)))

drivers/tty/vt/vt_ioctl.c

492

if (copy_from_user(&tmp, user_ud, sizeof tmp))

drivers/tty/vt/vt_ioctl.c

595

if (copy_from_user(&vsa, sa, sizeof(vsa)))

drivers/tty/vt/vt_ioctl.c

667

if (copy_from_user(&v, cs, sizeof(struct vt_consize)))

drivers/tty/vt/vt_ioctl.c

760

if (copy_from_user(&tmp, up, sizeof(struct vt_mode)))

drivers/ufs/core/ufs-debugfs.c

170

if (copy_from_user(val_str, buf, count))

drivers/ufs/core/ufs-debugfs.c

415

if (copy_from_user(kbuf, buf, count))

drivers/uio/uio.c

646

if (copy_from_user(&irq_on, buf, count))

drivers/usb/chipidea/debug.c

84

if (copy_from_user(buf, ubuf, count))

drivers/usb/class/usblp.c

774

if (copy_from_user(writeurb->transfer_buffer,

drivers/usb/class/usbtmc.c

1071

if (copy_from_user(&msg, arg, sizeof(struct usbtmc_message)))

drivers/usb/class/usbtmc.c

1204

if (copy_from_user(buffer, user_buffer + done, this_part)) {

drivers/usb/class/usbtmc.c

1282

if (copy_from_user(&msg, arg, sizeof(struct usbtmc_message)))

drivers/usb/class/usbtmc.c

1607

if (copy_from_user(&buffer[USBTMC_HEADER_SIZE], buf, transfersize)) {

drivers/usb/class/usbtmc.c

1943

if (copy_from_user(&request, arg, sizeof(struct usbtmc_ctrlrequest)))

drivers/usb/class/usbtmc.c

1960

if (copy_from_user(buffer, request.data,

drivers/usb/class/usbtmc.c

2039

if (copy_from_user(&eom_enable, arg, sizeof(eom_enable)))

drivers/usb/class/usbtmc.c

2058

if (copy_from_user(&termc, arg, sizeof(termc)))

drivers/usb/class/usbtmc.c

674

rv = copy_from_user(&val, arg, sizeof(val));

drivers/usb/core/devio.c

1238

if (copy_from_user(tbuf, ctrl->data, wLength)) {

drivers/usb/core/devio.c

1278

if (copy_from_user(&ctrl, arg, sizeof(ctrl)))

drivers/usb/core/devio.c

1353

if (copy_from_user(tbuf, bulk->data, len1)) {

drivers/usb/core/devio.c

1377

if (copy_from_user(&bulk, arg, sizeof(bulk)))

drivers/usb/core/devio.c

1443

if (copy_from_user(&gd, arg, sizeof(gd)))

drivers/usb/core/devio.c

1534

if (copy_from_user(&setintf, arg, sizeof(setintf)))

drivers/usb/core/devio.c

1676

if (copy_from_user(dr, uurb->buffer, 8)) {

drivers/usb/core/devio.c

1828

if (copy_from_user(buf, uurb->buffer, u)) {

drivers/usb/core/devio.c

1850

if (copy_from_user(as->urb->transfer_buffer,

drivers/usb/core/devio.c

1996

if (copy_from_user(&uurb, arg, sizeof(uurb)))

drivers/usb/core/devio.c

2143

if (copy_from_user(&ctrl, p32, sizeof(*p32) - sizeof(compat_caddr_t)) ||

drivers/usb/core/devio.c

2169

if (copy_from_user(&ds, arg, sizeof(ds)))

drivers/usb/core/devio.c

2180

if (copy_from_user(&urb32, uurb, sizeof(*uurb)))

drivers/usb/core/devio.c

2288

if (copy_from_user(&ds, arg, sizeof(ds)))

drivers/usb/core/devio.c

2339

if (copy_from_user(buf, ctl->data, size)) {

drivers/usb/core/devio.c

2400

if (copy_from_user(&ctrl, arg, sizeof(ctrl)))

drivers/usb/core/devio.c

2411

if (copy_from_user(&ioc32, compat_ptr(arg), sizeof(ioc32)))

drivers/usb/core/devio.c

2467

if (copy_from_user(&dc, arg, sizeof(dc)))

drivers/usb/core/devio.c

2540

if (copy_from_user(&data, arg, sizeof(data)))

drivers/usb/dwc2/debugfs.c

36

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/dwc3/debugfs.c

374

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/dwc3/debugfs.c

441

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/dwc3/debugfs.c

529

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/dwc3/debugfs.c

619

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/gadget/function/f_fs.c

1768

if (copy_from_user(&fd, (void __user *)value, sizeof(fd)))

drivers/usb/gadget/function/f_fs.c

1777

if (copy_from_user(&fd, (void __user *)value, sizeof(fd)))

drivers/usb/gadget/function/f_fs.c

1786

if (copy_from_user(&req, (void __user *)value, sizeof(req)))

drivers/usb/gadget/function/f_hid.c

493

status = copy_from_user(req->buf, buffer, count);

drivers/usb/gadget/function/f_hid.c

657

if (copy_from_user(&entry->report_data, buffer,

drivers/usb/gadget/function/f_hid.c

671

if (copy_from_user(&ptr->report_data, buffer,

drivers/usb/gadget/function/f_printer.c

667

if (copy_from_user(req->buf, buf, size)) {

drivers/usb/gadget/legacy/inode.c

1145

if (copy_from_user (dev->req->buf, buf, len))

drivers/usb/gadget/legacy/inode.c

1822

if (copy_from_user (&tag, buf, 4))

drivers/usb/gadget/legacy/raw_gadget.c

490

if (copy_from_user(&arg, (void __user *)value, sizeof(arg)))

drivers/usb/gadget/legacy/raw_gadget.c

622

if (copy_from_user(&arg, (void __user *)value, sizeof(arg)))

drivers/usb/gadget/legacy/raw_gadget.c

665

if (copy_from_user(io, ptr, sizeof(*io)))

drivers/usb/gadget/udc/renesas_usb3.c

2621

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/host/xhci-debugfs.c

353

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/misc/adutux.c

579

if (copy_from_user(dev->interrupt_out_buffer, buffer, bytes_to_write) != 0) {

drivers/usb/misc/iowarrior.c

455

if (copy_from_user(buf, user_buffer, count)) {

drivers/usb/misc/iowarrior.c

528

io_res = copy_from_user(buffer, user_buffer,

drivers/usb/misc/ldusb.c

565

if (copy_from_user(dev->interrupt_out_buffer, buffer, bytes_to_write)) {

drivers/usb/misc/legousbtower.c

619

if (copy_from_user(dev->interrupt_out_buffer, buffer, bytes_to_write)) {

drivers/usb/misc/sisusbvga/sisusbvga.c

2723

if (copy_from_user(&y, (void __user *)arg, sizeof(y)))

drivers/usb/misc/sisusbvga/sisusbvga.c

361

if (copy_from_user(buffer, userbuffer, passsize))

drivers/usb/misc/sisusbvga/sisusbvga.c

796

if (copy_from_user(&buf, userbuffer, 3))

drivers/usb/misc/usblcd.c

256

if (copy_from_user(buf, user_buffer, count)) {

drivers/usb/misc/yurex.c

454

if (copy_from_user(buffer, user_buffer, count)) {

drivers/usb/mon/mon_bin.c

1072

if (copy_from_user(&getb, (void __user *)arg,

drivers/usb/mon/mon_bin.c

1091

if (copy_from_user(&mfetch, uptr, sizeof(mfetch)))

drivers/usb/mon/mon_bin.c

1151

if (copy_from_user(&getb, (void __user *)arg,

drivers/usb/mon/mon_bin.c

1170

if (copy_from_user(&mfetch, uptr, sizeof(mfetch)))

drivers/usb/mtu3/mtu3_debugfs.c

306

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/mtu3/mtu3_debugfs.c

428

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/mtu3/mtu3_debugfs.c

476

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/musb/musb_debugfs.c

171

if (copy_from_user(buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/musb/musb_debugfs.c

269

if (copy_from_user(&buf, ubuf, min_t(size_t, sizeof(buf) - 1, count)))

drivers/usb/serial/xr_serial.c

870

if (copy_from_user(&rs485, argp, sizeof(rs485)))

drivers/usb/usb-skeleton.c

416

if (copy_from_user(buf, user_buffer, writesize)) {

drivers/vdpa/vdpa_user/vduse_dev.c

1388

if (copy_from_user(&entry, argp, _IOC_SIZE(cmd)))

drivers/vdpa/vdpa_user/vduse_dev.c

1427

if (copy_from_user(&config, argp, size))

drivers/vdpa/vdpa_user/vduse_dev.c

1437

if (copy_from_user(dev->config + config.offset, argp + size,

drivers/vdpa/vdpa_user/vduse_dev.c

1452

if (copy_from_user(&config, argp, sizeof(config)))

drivers/vdpa/vdpa_user/vduse_dev.c

1486

if (copy_from_user(&vq_info, argp, sizeof(vq_info)))

drivers/vdpa/vdpa_user/vduse_dev.c

1526

if (copy_from_user(&eventfd, argp, sizeof(eventfd)))

drivers/vdpa/vdpa_user/vduse_dev.c

1558

if (copy_from_user(&umem, argp, sizeof(umem)))

drivers/vdpa/vdpa_user/vduse_dev.c

1580

if (copy_from_user(&umem, argp, sizeof(umem)))

drivers/vdpa/vdpa_user/vduse_dev.c

1603

if (copy_from_user(&info, argp, sizeof(info)))

drivers/vdpa/vdpa_user/vduse_dev.c

1688

if (copy_from_user(&entry, argp, _IOC_SIZE(cmd)))

drivers/vdpa/vdpa_user/vduse_dev.c

1715

if (copy_from_user(&vq_info, argp,

drivers/vdpa/vdpa_user/vduse_dev.c

2313

if (copy_from_user(&config, argp, size))

drivers/vdpa/vdpa_user/vduse_dev.c

2337

if (copy_from_user(name, argp, VDUSE_NAME_MAX))

drivers/vfio/cdx/main.c

103

if (copy_from_user(&ops, arg, minsz))

drivers/vfio/cdx/main.c

134

if (copy_from_user(&info, arg, minsz))

drivers/vfio/cdx/main.c

174

if (copy_from_user(&info, arg, minsz))

drivers/vfio/cdx/main.c

202

if (copy_from_user(&hdr, arg, minsz))

drivers/vfio/device_cdev.c

204

if (copy_from_user(&attach, arg, minsz))

drivers/vfio/device_cdev.c

223

if (copy_from_user((void *)&attach + minsz,

drivers/vfio/device_cdev.c

262

if (copy_from_user(&detach, arg, minsz))

drivers/vfio/device_cdev.c

281

if (copy_from_user((void *)&detach + minsz,

drivers/vfio/device_cdev.c

77

if (copy_from_user(&uuid, u64_to_user_ptr(bind->token_uuid_ptr),

drivers/vfio/fsl-mc/vfio_fsl_mc.c

153

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/fsl-mc/vfio_fsl_mc.c

175

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/fsl-mc/vfio_fsl_mc.c

200

if (copy_from_user(&hdr, (void __user *)arg, minsz))

drivers/vfio/fsl-mc/vfio_fsl_mc.c

342

if (copy_from_user(&data, buf, 64))

drivers/vfio/group.c

331

if (copy_from_user(&status, arg, minsz))

drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c

773

ret = copy_from_user(vf_data + *pos, buf, len);

drivers/vfio/pci/ism/main.c

143

if (copy_from_user(data, buf, count)) {

drivers/vfio/pci/mlx5/main.c

722

ret = copy_from_user(to_buff + page_offset, *buf, page_len);

drivers/vfio/pci/mlx5/main.c

832

ret = copy_from_user(to_buff + vhca_buf->length, *buf, copy_len);

drivers/vfio/pci/nvgrace-gpu/main.c

696

if (copy_from_user((void *)&memregion->bar_val + register_offset,

drivers/vfio/pci/nvgrace-gpu/main.c

911

if (copy_from_user((u8 *)nvdev->usemem.memaddr + pos,

drivers/vfio/pci/pds/lm.c

314

err = copy_from_user(to_buff + page_offset, buf, page_len);

drivers/vfio/pci/qat/main.c

318

ret = copy_from_user(mig_dev->state + *offs, buf, len);

drivers/vfio/pci/vfio_pci_config.c

1956

if (copy_from_user(&val, buf, count))

drivers/vfio/pci/vfio_pci_core.c

1078

if (copy_from_user(&info, arg, minsz))

drivers/vfio/pci/vfio_pci_core.c

1248

if (copy_from_user(&info, arg, minsz))

drivers/vfio/pci/vfio_pci_core.c

1288

if (copy_from_user(&hdr, arg, minsz))

drivers/vfio/pci/vfio_pci_core.c

1357

if (copy_from_user(&hdr, arg, minsz))

drivers/vfio/pci/vfio_pci_core.c

1452

if (copy_from_user(group_fds, arg->group_fds,

drivers/vfio/pci/vfio_pci_core.c

1507

if (copy_from_user(&hdr, arg, minsz))

drivers/vfio/pci/vfio_pci_core.c

1537

if (copy_from_user(&ioeventfd, arg, minsz))

drivers/vfio/pci/vfio_pci_core.c

1601

if (copy_from_user(&uuid, arg, sizeof(uuid)))

drivers/vfio/pci/vfio_pci_core.c

426

if (copy_from_user(&entry, arg, sizeof(entry)))

drivers/vfio/pci/vfio_pci_dmabuf.c

240

if (copy_from_user(&get_dma_buf, arg, sizeof(get_dma_buf)))

drivers/vfio/pci/vfio_pci_rdwr.c

103

if (copy_from_user(&val, buf, sizeof(val))) \

drivers/vfio/pci/virtio/legacy_io.c

105

if (copy_from_user(&queue_notify, buf, count)) {

drivers/vfio/pci/virtio/legacy_io.c

154

if (copy_from_user((void *)&val16 + register_offset, buf + copy_offset,

drivers/vfio/pci/virtio/legacy_io.c

243

if (copy_from_user((void *)&virtvdev->pci_cmd + register_offset,

drivers/vfio/pci/virtio/legacy_io.c

253

if (copy_from_user((void *)&virtvdev->pci_base_addr_0 + register_offset,

drivers/vfio/pci/virtio/legacy_io.c

52

if (copy_from_user(bar0_buf + pos, buf, count))

drivers/vfio/pci/virtio/migrate.c

773

ret = copy_from_user(to_buff + page_offset, *buf, page_len);

drivers/vfio/pci/virtio/migrate.c

869

ret = copy_from_user(to_buff + vhca_buf->length, *buf, copy_len);

drivers/vfio/platform/vfio_platform_common.c

306

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/platform/vfio_platform_common.c

326

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/platform/vfio_platform_common.c

349

if (copy_from_user(&hdr, (void __user *)arg, minsz))

drivers/vfio/platform/vfio_platform_common.c

490

if (copy_from_user(&val, buf, 4))

drivers/vfio/platform/vfio_platform_common.c

498

if (copy_from_user(&val, buf, 2))

drivers/vfio/platform/vfio_platform_common.c

506

if (copy_from_user(&val, buf, 1))

drivers/vfio/vfio_iommu_spapr_tce.c

1029

if (copy_from_user(&param, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

1058

if (copy_from_user(&param, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

1122

if (copy_from_user(&create, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

1163

if (copy_from_user(&remove, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

789

if (copy_from_user(&op, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

818

if (copy_from_user(&op, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

875

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

916

if (copy_from_user(&param, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

983

if (copy_from_user(&param, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_type1.c

1292

if (copy_from_user(&leftover,

drivers/vfio/vfio_iommu_type1.c

2846

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_type1.c

2905

if (copy_from_user(&map, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_type1.c

2927

if (copy_from_user(&unmap, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_type1.c

2944

if (copy_from_user(&bitmap,

drivers/vfio/vfio_iommu_type1.c

2982

if (copy_from_user(&dirty, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_type1.c

3022

if (copy_from_user(&range, (void __user *)(arg + minsz),

drivers/vfio/vfio_iommu_type1.c

3189

*copied = copy_from_user(data, (void __user *)vaddr,

drivers/vfio/vfio_main.c

1109

if (copy_from_user(&control, arg, minsz))

drivers/vfio/vfio_main.c

1125

if (copy_from_user(&range, &ranges[i], sizeof(range))) {

drivers/vfio/vfio_main.c

1216

if (copy_from_user(&report, arg, minsz))

drivers/vfio/vfio_main.c

1245

if (copy_from_user(&feature, arg, minsz))

drivers/vfio/vfio_main.c

1311

if (copy_from_user(&info, arg, minsz))

drivers/vfio/vfio_main.c

927

if (copy_from_user(&mig, arg, minsz))

drivers/vhost/net.c

1752

if (copy_from_user(&backend, argp, sizeof backend))

drivers/vhost/net.c

1761

if (copy_from_user(&features, featurep, sizeof features))

drivers/vhost/net.c

1769

if (copy_from_user(&count, featurep, sizeof(count)))

drivers/vhost/net.c

1784

if (copy_from_user(&count, featurep, sizeof(count)))

drivers/vhost/net.c

1790

if (copy_from_user(all_features, argp, copied * sizeof(u64)))

drivers/vhost/net.c

1798

if (copy_from_user(&features, featurep + 1 + i,

drivers/vhost/net.c

1816

if (copy_from_user(&features, featurep, sizeof(features)))

drivers/vhost/scsi.c

2378

if (copy_from_user(&backend, argp, sizeof backend))

drivers/vhost/scsi.c

2385

if (copy_from_user(&backend, argp, sizeof backend))

drivers/vhost/scsi.c

2415

if (copy_from_user(&features, featurep, sizeof features))

drivers/vhost/test.c

329

if (copy_from_user(&test, argp, sizeof test))

drivers/vhost/test.c

333

if (copy_from_user(&backend, argp, sizeof backend))

drivers/vhost/test.c

342

if (copy_from_user(&features, featurep, sizeof features))

drivers/vhost/vdpa.c

310

if (copy_from_user(&status, statusp, sizeof(status)))

drivers/vhost/vdpa.c

363

if (copy_from_user(&config, c, size))

drivers/vhost/vdpa.c

390

if (copy_from_user(&config, c, size))

drivers/vhost/vdpa.c

479

if (copy_from_user(&features, featurep, sizeof(features)))

drivers/vhost/vdpa.c

528

if (copy_from_user(&fd, argp, sizeof(fd)))

drivers/vhost/vdpa.c

656

if (copy_from_user(&s, argp, sizeof(s)))

drivers/vhost/vdpa.c

681

if (copy_from_user(&s, argp, sizeof(s)))

drivers/vhost/vdpa.c

787

if (copy_from_user(&features, featurep, sizeof(features)))

drivers/vhost/vhost.c

1045

if (copy_from_user(&state, argp, sizeof(state)))

drivers/vhost/vhost.c

1062

if (copy_from_user(&ring_worker, argp, sizeof(ring_worker))) {

drivers/vhost/vhost.c

1978

if (copy_from_user(&mem, m, size))

drivers/vhost/vhost.c

1989

if (copy_from_user(newmem->regions, m->regions,

drivers/vhost/vhost.c

2047

if (copy_from_user(&s, argp, sizeof s))

drivers/vhost/vhost.c

2063

if (copy_from_user(&a, argp, sizeof a))

drivers/vhost/vhost.c

2163

if (copy_from_user(&s, argp, sizeof s)) {

drivers/vhost/vhost.c

2191

if (copy_from_user(&f, argp, sizeof f)) {

drivers/vhost/vhost.c

2207

if (copy_from_user(&f, argp, sizeof f)) {

drivers/vhost/vhost.c

2220

if (copy_from_user(&f, argp, sizeof f)) {

drivers/vhost/vhost.c

2238

if (copy_from_user(&s, argp, sizeof(s))) {

drivers/vhost/vhost.c

2363

if (copy_from_user(&p, argp, sizeof p)) {

drivers/vhost/vhost.c

83

if (copy_from_user(&s, argp, sizeof(s)))

drivers/vhost/vringh.c

615

return copy_from_user(dst, (__force void __user *)src, len) ?

drivers/vhost/vringh.c

631

return copy_from_user(dst, (__force void __user *)src, len) ?

drivers/vhost/vsock.c

901

if (copy_from_user(&guest_cid, argp, sizeof(guest_cid)))

drivers/vhost/vsock.c

905

if (copy_from_user(&start, argp, sizeof(start)))

drivers/vhost/vsock.c

917

if (copy_from_user(&features, argp, sizeof(features)))

drivers/vhost/vsock.c

926

if (copy_from_user(&features, argp, sizeof(features)))

drivers/video/fbdev/amifb.c

3408

if (copy_from_user(&crsr.var, argp, sizeof(crsr.var)))

drivers/video/fbdev/amifb.c

3422

if (copy_from_user(&crsr.state, argp, sizeof(crsr.state)))

drivers/video/fbdev/atafb.c

2585

if (copy_from_user(&current_par, (void *)arg,

drivers/video/fbdev/aty/atyfb_base.c

1889

if (copy_from_user(&clk, (struct atyclk __user *) arg,

drivers/video/fbdev/au1200fb.c

1432

if (copy_from_user(&iodata, (void __user *) arg, sizeof(iodata)))

drivers/video/fbdev/cobalt_lcdfb.c

194

if (copy_from_user(dst, buf, count))

drivers/video/fbdev/core/fb_chrdev.c

104

if (copy_from_user(&cmap, argp, sizeof(cmap)))

drivers/video/fbdev/core/fb_chrdev.c

109

if (copy_from_user(&cmap, argp, sizeof(cmap)))

drivers/video/fbdev/core/fb_chrdev.c

117

if (copy_from_user(&var, argp, sizeof(var)))

drivers/video/fbdev/core/fb_chrdev.c

200

if (copy_from_user(&cmap32, compat_ptr(arg), sizeof(cmap32)))

drivers/video/fbdev/core/fb_chrdev.c

82

if (copy_from_user(&var, argp, sizeof(var)))

drivers/video/fbdev/core/fb_io_fops.c

120

trailing = copy_from_user(src, buf, c);

drivers/video/fbdev/core/fb_sys_fops.c

103

c = copy_from_user(dst, buf, count);

drivers/video/fbdev/core/fbcmap.c

281

if (copy_from_user(umap.red, cmap->red, size) ||

drivers/video/fbdev/core/fbcmap.c

282

copy_from_user(umap.green, cmap->green, size) ||

drivers/video/fbdev/core/fbcmap.c

283

copy_from_user(umap.blue, cmap->blue, size) ||

drivers/video/fbdev/core/fbcmap.c

284

(cmap->transp && copy_from_user(umap.transp, cmap->transp, size))) {

drivers/video/fbdev/core/fbcon.c

3096

if (copy_from_user(&con2fb, argp, sizeof(con2fb)))

drivers/video/fbdev/core/fbcon.c

3120

if (copy_from_user(&con2fb, argp, sizeof(con2fb)))

drivers/video/fbdev/fsl-diu-fb.c

1292

if (copy_from_user(&pix_fmt, buf, sizeof(pix_fmt)))

drivers/video/fbdev/fsl-diu-fb.c

1307

if (copy_from_user(&aoi_d, buf, sizeof(aoi_d)))

drivers/video/fbdev/fsl-diu-fb.c

1327

if (copy_from_user(&global_alpha, buf, sizeof(global_alpha)))

drivers/video/fbdev/fsl-diu-fb.c

1335

if (copy_from_user(&ck, buf, sizeof(ck)))

drivers/video/fbdev/fsl-diu-fb.c

1364

if (copy_from_user(data->gamma, buf, sizeof(data->gamma)))

drivers/video/fbdev/imsttfb.c

1276

if (copy_from_user(reg, argp, 8) || reg[0] > (0x1000 - sizeof(reg[0])) / sizeof(reg[0]))

drivers/video/fbdev/imsttfb.c

1281

if (copy_from_user(reg, argp, 4) || reg[0] > (0x1000 - sizeof(reg[0])) / sizeof(reg[0]))

drivers/video/fbdev/imsttfb.c

1288

if (copy_from_user(reg, argp, 8) || reg[0] > (0x1000 - sizeof(reg[0])) / sizeof(reg[0]))

drivers/video/fbdev/imsttfb.c

1293

if (copy_from_user(reg, argp, 4) || reg[0] > (0x1000 - sizeof(reg[0])) / sizeof(reg[0]))

drivers/video/fbdev/imsttfb.c

1300

if (copy_from_user(idx, argp, 2))

drivers/video/fbdev/imsttfb.c

1307

if (copy_from_user(idx, argp, 1))

drivers/video/fbdev/kyro/fbdev.c

599

if (copy_from_user(&ol_create, argp, sizeof(overlay_create)))

drivers/video/fbdev/kyro/fbdev.c

610

if (copy_from_user(&ol_viewport_set, argp,

drivers/video/fbdev/matrox/matroxfb_base.c

1109

if (copy_from_user(&qctrl, argp, sizeof(qctrl)))

drivers/video/fbdev/matrox/matroxfb_base.c

1131

if (copy_from_user(&ctrl, argp, sizeof(ctrl)))

drivers/video/fbdev/matrox/matroxfb_base.c

1153

if (copy_from_user(&ctrl, argp, sizeof(ctrl)))

drivers/video/fbdev/matrox/matroxfb_base.c

916

if (copy_from_user(&mom, argp, sizeof(mom)))

drivers/video/fbdev/matrox/matroxfb_base.c

966

if (copy_from_user(&mom, argp, sizeof(mom)))

drivers/video/fbdev/matrox/matroxfb_base.c

991

if (copy_from_user(&tmp, argp, sizeof(tmp)))

drivers/video/fbdev/mb862xx/mb862xxfbdrv.c

320

if (copy_from_user(l1_cfg, argp, sizeof(*l1_cfg)))

drivers/video/fbdev/omap/omapfb_main.c

1096

if (copy_from_user(&p.update_window, (void __user *)arg,

drivers/video/fbdev/omap/omapfb_main.c

1110

if (copy_from_user(&p.update_window, (void __user *)arg,

drivers/video/fbdev/omap/omapfb_main.c

1117

if (copy_from_user(&p.plane_info, (void __user *)arg,

drivers/video/fbdev/omap/omapfb_main.c

1131

if (copy_from_user(&p.mem_info, (void __user *)arg,

drivers/video/fbdev/omap/omapfb_main.c

1145

if (copy_from_user(&p.color_key, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

618

if (copy_from_user(&p.uwnd_o,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

636

if (copy_from_user(&p.uwnd, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

648

if (copy_from_user(&p.plane_info, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

667

if (copy_from_user(&p.mem_info, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

703

if (copy_from_user(&p.ovl_colormode, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

736

if (copy_from_user(&p.color_key, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

826

if (copy_from_user(&p.memory_read, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

856

if (copy_from_user(&p.tearsync_info, (void __user *)arg,

drivers/video/fbdev/ps3fb.c

814

if (copy_from_user(&val, argp, sizeof(val)))

drivers/video/fbdev/ps3fb.c

873

if (copy_from_user(&val, argp, sizeof(val)))

drivers/video/fbdev/pxa3xx-gcu.c

412

ret = copy_from_user(buffer->ptr, buff, words * 4);

drivers/video/fbdev/sbuslib.c

223

if (copy_from_user(&c, compat_ptr(arg), sizeof(c)))

drivers/video/fbdev/sbuslib.c

262

if (copy_from_user(&c, compat_ptr(arg), sizeof(c)))

drivers/video/fbdev/sis/sis_main.c

1673

if(copy_from_user(&sismemreq, (void __user *)arg, sizeof(sismemreq)))

drivers/video/fbdev/sis/sis_main.c

1810

if(copy_from_user(&ivideo->sisfb_command, (void __user *)arg,

drivers/video/fbdev/sm712fb.c

1135

if (copy_from_user(src, buf, c)) {

drivers/video/fbdev/smscufx.c

962

if (copy_from_user(area, (u8 __user *)arg, sizeof(*area)))

drivers/video/fbdev/sstfb.c

755

if (copy_from_user(&val, (void __user *)arg, sizeof(val)))

drivers/video/fbdev/udlfb.c

857

if (copy_from_user(&area, (void __user *)arg,

drivers/video/fbdev/via/viafbdev.c

1138

if (copy_from_user(&buf[0], buffer, length))

drivers/video/fbdev/via/viafbdev.c

1208

if (copy_from_user(&buf[0], buffer, length))

drivers/video/fbdev/via/viafbdev.c

1362

if (copy_from_user(&buf[0], buffer, length))

drivers/video/fbdev/via/viafbdev.c

1468

if (copy_from_user(&buf[0], buffer, count))

drivers/video/fbdev/via/viafbdev.c

417

if (copy_from_user(&gpu32, argp, sizeof(gpu32)))

drivers/video/fbdev/via/viafbdev.c

480

if (copy_from_user(&gpu32, argp, sizeof(gpu32)))

drivers/video/fbdev/via/viafbdev.c

490

if (copy_from_user(&gpu32, argp, sizeof(gpu32)))

drivers/video/fbdev/via/viafbdev.c

610

if (copy_from_user(&u.panel_pos_size_para, argp,

drivers/video/fbdev/via/viafbdev.c

619

if (copy_from_user(&u.panel_pos_size_para, argp,

drivers/video/fbdev/via/viafbdev.c

629

if (copy_from_user(&u.panel_pos_size_para, argp,

drivers/video/fbdev/via/viafbdev.c

638

if (copy_from_user(&u.panel_pos_size_para, argp,

drivers/video/fbdev/via/viafbdev.c

648

if (copy_from_user(&u.panel_pos_size_para, argp,

drivers/video/fbdev/via/viafbdev.c

653

if (copy_from_user(&u.panel_pos_size_para, argp,

drivers/virt/acrn/hsm.c

220

if (copy_from_user(&memmap, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

227

if (copy_from_user(&memmap, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

383

if (copy_from_user(&notify, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

396

if (copy_from_user(&cstate_cmd, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

403

if (copy_from_user(&ioeventfd, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

413

if (copy_from_user(&irqfd, (void __user *)ioctl_param,

drivers/virt/coco/sev-guest/sev-guest.c

142

if (copy_from_user(derived_key_req, (void __user *)arg->req_data,

drivers/virt/coco/sev-guest/sev-guest.c

295

if (copy_from_user(&input, argp, sizeof(input)))

drivers/virt/coco/sev-guest/sev-guest.c

82

if (copy_from_user(report_req, (void __user *)arg->req_data, sizeof(*report_req)))

drivers/virt/fsl_hypervisor.c

105

if (copy_from_user(&param, p, sizeof(struct fsl_hv_ioctl_start)))

drivers/virt/fsl_hypervisor.c

127

if (copy_from_user(&param, p, sizeof(struct fsl_hv_ioctl_stop)))

drivers/virt/fsl_hypervisor.c

165

if (copy_from_user(&param, p, sizeof(struct fsl_hv_ioctl_memcpy)))

drivers/virt/fsl_hypervisor.c

320

if (copy_from_user(&param, p, sizeof(struct fsl_hv_ioctl_doorbell)))

drivers/virt/fsl_hypervisor.c

341

if (copy_from_user(&param, p, sizeof(struct fsl_hv_ioctl_prop)))

drivers/virt/fsl_hypervisor.c

370

if (copy_from_user(propval, upropval, param.proplen)) {

drivers/virt/fsl_hypervisor.c

60

if (copy_from_user(&param, p, sizeof(struct fsl_hv_ioctl_restart)))

drivers/virt/fsl_hypervisor.c

82

if (copy_from_user(&param, p, sizeof(struct fsl_hv_ioctl_status)))

drivers/virt/nitro_enclaves/ne_misc_dev.c

1151

if (copy_from_user(&vcpu_id, (void __user *)arg, sizeof(vcpu_id)))

drivers/virt/nitro_enclaves/ne_misc_dev.c

1219

if (copy_from_user(&image_load_info, (void __user *)arg, sizeof(image_load_info)))

drivers/virt/nitro_enclaves/ne_misc_dev.c

1256

if (copy_from_user(&mem_region, (void __user *)arg, sizeof(mem_region)))

drivers/virt/nitro_enclaves/ne_misc_dev.c

1293

if (copy_from_user(&enclave_start_info, (void __user *)arg,

drivers/virt/vboxguest/vboxguest_linux.c

115

if (copy_from_user(&hdr, (void *)arg, sizeof(hdr)))

drivers/virt/vboxguest/vboxguest_linux.c

148

if (copy_from_user(buf + sizeof(hdr), (void *)arg + sizeof(hdr),

drivers/virt/vboxguest/vboxguest_utils.c

228

ret = copy_from_user(bounce_buf, (void __user *)buf, len);

drivers/watchdog/cpwd.c

437

if (copy_from_user(&setopt, argp, sizeof(unsigned int)))

drivers/watchdog/eurotechwdt.c

278

if (copy_from_user(&time, p, sizeof(int)))

drivers/watchdog/rc32434_wdt.c

212

if (copy_from_user(&value, argp, sizeof(int)))

drivers/watchdog/rc32434_wdt.c

229

if (copy_from_user(&new_timeout, argp, sizeof(int)))

drivers/watchdog/rdc321x_wdt.c

169

if (copy_from_user(&value, argp, sizeof(int)))

drivers/watchdog/riowd.c

117

if (copy_from_user(&options, argp, sizeof(options)))

drivers/xen/evtchn.c

293

if (copy_from_user(kbuf, buf, count) != 0)

drivers/xen/evtchn.c

455

if (copy_from_user(&bind, uarg, sizeof(bind)))

drivers/xen/evtchn.c

476

if (copy_from_user(&bind, uarg, sizeof(bind)))

drivers/xen/evtchn.c

506

if (copy_from_user(&bind, uarg, sizeof(bind)))

drivers/xen/evtchn.c

527

if (copy_from_user(&unbind, uarg, sizeof(unbind)))

drivers/xen/evtchn.c

550

if (copy_from_user(&bind, uarg, sizeof(bind)))

drivers/xen/evtchn.c

567

if (copy_from_user(&notify, uarg, sizeof(notify)))

drivers/xen/evtchn.c

600

if (copy_from_user(&ierd, uarg, sizeof(ierd)))

drivers/xen/gntalloc.c

279

if (copy_from_user(&op, arg, sizeof(op))) {

drivers/xen/gntalloc.c

350

if (copy_from_user(&op, arg, sizeof(op))) {

drivers/xen/gntalloc.c

389

if (copy_from_user(&op, arg, sizeof(op)))

drivers/xen/gntdev-dmabuf.c

733

if (copy_from_user(&op, u, sizeof(op)) != 0)

drivers/xen/gntdev-dmabuf.c

743

if (copy_from_user(refs, u->refs, sizeof(*refs) * op.count) != 0) {

drivers/xen/gntdev-dmabuf.c

766

if (copy_from_user(&op, u, sizeof(op)) != 0)

drivers/xen/gntdev-dmabuf.c

780

if (copy_from_user(&op, u, sizeof(op)) != 0)

drivers/xen/gntdev-dmabuf.c

809

if (copy_from_user(&op, u, sizeof(op)) != 0)

drivers/xen/gntdev.c

653

if (copy_from_user(&op, u, sizeof(op)) != 0)

drivers/xen/gntdev.c

664

if (copy_from_user(map->grants, &u->refs,

drivers/xen/gntdev.c

692

if (copy_from_user(&op, u, sizeof(op)) != 0)

drivers/xen/gntdev.c

716

if (copy_from_user(&op, u, sizeof(op)) != 0)

drivers/xen/gntdev.c

749

if (copy_from_user(&op, u, sizeof(op)))

drivers/xen/gntdev.c

968

if (copy_from_user(&copy, u, sizeof(copy)))

drivers/xen/gntdev.c

988

if (copy_from_user(&seg, &copy.segments[i], sizeof(seg))) {

drivers/xen/privcmd.c

105

if (copy_from_user(&hypercall, udata, sizeof(hypercall)))

drivers/xen/privcmd.c

1090

if (copy_from_user(&irqfd, udata, sizeof(irqfd)))

drivers/xen/privcmd.c

1465

if (copy_from_user(&ioeventfd, udata, sizeof(ioeventfd)))

drivers/xen/privcmd.c

162

if (copy_from_user(pagedata + pageidx, data, size))

drivers/xen/privcmd.c

292

if (copy_from_user(&mmapcmd, udata, sizeof(mmapcmd)))

drivers/xen/privcmd.c

484

if (copy_from_user(&m, udata, sizeof(struct privcmd_mmapbatch)))

drivers/xen/privcmd.c

492

if (copy_from_user(&m, udata, sizeof(struct privcmd_mmapbatch_v2)))

drivers/xen/privcmd.c

658

if (copy_from_user(&kdata, udata, sizeof(kdata)))

drivers/xen/privcmd.c

675

if (copy_from_user(kbufs, kdata.ubufs,

drivers/xen/privcmd.c

737

if (copy_from_user(&dom, udata, sizeof(dom)))

drivers/xen/privcmd.c

760

if (copy_from_user(&kdata, udata, sizeof(kdata)))

drivers/xen/privcmd.c

869

if (copy_from_user(&kdata, udata, sizeof(kdata)))

drivers/xen/privcmd.c

991

if (copy_from_user(dm_op, u64_to_user_ptr(irqfd->dm_op), irqfd->size)) {

drivers/xen/xenbus/xenbus_dev_frontend.c

588

ret = copy_from_user(u->u.buffer + u->len, ubuf, len);

fs/aio.c

2083

if (unlikely(copy_from_user(&iocb, user_iocb, sizeof(iocb))))

fs/aio.c

2345

if (usig && copy_from_user(&ksig, usig, sizeof(ksig)))

fs/aio.c

2380

if (usig && copy_from_user(&ksig, usig, sizeof(ksig)))

fs/aio.c

2447

if (usig && copy_from_user(&ksig, usig, sizeof(ksig)))

fs/aio.c

2482

if (usig && copy_from_user(&ksig, usig, sizeof(ksig)))

fs/autofs/dev-ioctl.c

86

if (copy_from_user(&tmp, in, AUTOFS_DEV_IOCTL_SIZE))

fs/binfmt_elf.c

1533

if (copy_from_user(&psinfo->pr_psargs,

fs/binfmt_elf_fdpic.c

1351

if (copy_from_user(&psinfo->pr_psargs,

fs/binfmt_misc.c

372

if (copy_from_user(buf, buffer, count))

fs/binfmt_misc.c

560

if (copy_from_user(s, buffer, count))

fs/btrfs/ioctl.c

1317

if (copy_from_user(&flags, arg, sizeof(flags))) {

fs/btrfs/ioctl.c

1607

if (copy_from_user(&sk, &uargs->key, sizeof(sk)))

fs/btrfs/ioctl.c

1639

if (copy_from_user(&args, uarg, sizeof(args)))

fs/btrfs/ioctl.c

2478

if (copy_from_user(&range, argp, sizeof(range))) {

fs/btrfs/ioctl.c

2803

if (copy_from_user(&objectid, argp, sizeof(objectid))) {

fs/btrfs/ioctl.c

2899

if (copy_from_user(&space_args,

fs/btrfs/ioctl.c

3053

if (copy_from_user(&transid, argp, sizeof(transid)))

fs/btrfs/ioctl.c

4066

if (copy_from_user(label, arg, sizeof(label)))

fs/btrfs/ioctl.c

4207

if (copy_from_user(flags, arg, sizeof(flags)))

fs/btrfs/ioctl.c

4273

ret = copy_from_user(&args32, argp, sizeof(args32));

fs/btrfs/ioctl.c

4328

if (copy_from_user(&args32, argp, copy_end)) {

fs/btrfs/ioctl.c

4341

if (copy_from_user(&args, argp, copy_end)) {

fs/btrfs/ioctl.c

4435

if (copy_from_user(&args32, argp, sizeof(args32))) {

fs/btrfs/ioctl.c

4453

if (copy_from_user(&args, argp, sizeof(args))) {

fs/btrfs/ioctl.c

4739

if (copy_from_user(&args32, sqe_addr, copy_end)) {

fs/btrfs/ioctl.c

4750

if (copy_from_user(&data->args, sqe_addr, copy_end)) {

fs/btrfs/ioctl.c

483

if (copy_from_user(&range, arg, sizeof(range)))

fs/btrfs/ioctl.c

4874

if (copy_from_user(&args32, sqe_addr, sizeof(args32))) {

fs/btrfs/ioctl.c

4894

if (copy_from_user(&data->args, sqe_addr, sizeof(data->args))) {

fs/btrfs/ioctl.c

4996

if (copy_from_user(&args, argp, sizeof(args)))

fs/btrfs/ioctl.c

5227

if (copy_from_user(&args, argp, sizeof(args)))

fs/btrfs/send.c

8108

ret = copy_from_user(clone_sources_tmp, arg->clone_sources,

fs/ceph/debugfs.c

468

if (copy && copy_from_user(reason, buf, copy))

fs/ceph/ioctl.c

152

if (copy_from_user(&l, arg, sizeof(l)))

fs/ceph/ioctl.c

201

if (copy_from_user(&dl, arg, sizeof(dl)))

fs/ceph/ioctl.c

78

if (copy_from_user(&l, arg, sizeof(l)))

fs/coda/pioctl.c

61

if (copy_from_user(&data, (void __user *)user_data, sizeof(data)))

fs/coda/psdev.c

107

if (copy_from_user(&hdr, buf, 2 * sizeof(u_int32_t)))

fs/coda/psdev.c

172

if (copy_from_user(req->uc_data, buf, nbytes)) {

fs/coda/upcall.c

511

if (copy_from_user((char *)inp + (long)inp->coda_ioctl.data,

fs/coredump.c

1767

if (copy_from_user(elfmag, (void __user *)m->start, SELFMAG) ||

fs/crypto/keyring.c

1050

if (copy_from_user(&arg, uarg, sizeof(arg)))

fs/crypto/keyring.c

1175

if (copy_from_user(&arg, uarg, sizeof(arg)))

fs/crypto/keyring.c

737

if (copy_from_user(&arg, uarg, sizeof(arg)))

fs/crypto/keyring.c

777

if (copy_from_user(secret.bytes, uarg->raw, secret.size))

fs/crypto/policy.c

533

if (copy_from_user(&policy, arg, size))

fs/crypto/policy.c

608

if (copy_from_user(&arg, uarg, sizeof(arg.policy_size)))

fs/debugfs/file.c

1083

if (copy_from_user(new + pos, user_buf, count))

fs/dlm/debug_fs.c

512

if (copy_from_user(buf, user_buf,

fs/dlm/debug_fs.c

637

if (copy_from_user(buf, user_buf,

fs/dlm/debug_fs.c

716

if (copy_from_user(buf, user_buf, count)) {

fs/dlm/plock.c

530

if (copy_from_user(&info, u, sizeof(info)))

fs/ecryptfs/miscdev.c

378

if (copy_from_user(packet_size_peek, &buf[PKT_LEN_OFFSET],

fs/efivarfs/file.c

29

if (copy_from_user(&attributes, userbuf, sizeof(attributes)))

fs/eventfd.c

256

if (copy_from_user(&ucnt, buf, sizeof(ucnt)))

fs/eventpoll.c

2754

copy_from_user(&epds, event, sizeof(struct epoll_event)))

fs/eventpoll.c

739

if (copy_from_user(&epoll_params, uarg, sizeof(epoll_params)))

fs/exec.c

526

if (copy_from_user(kaddr+offset, str, bytes_to_copy)) {

fs/exfat/file.c

529

if (copy_from_user(&range, (struct fstrim_range __user *)arg, sizeof(range)))

fs/exfat/file.c

588

if (copy_from_user(label, (char __user *)arg, FSLABEL_MAX))

fs/ext4/ioctl.c

1052

if (copy_from_user(&fiemap, ufiemap, sizeof(fiemap)))

fs/ext4/ioctl.c

1079

if (copy_from_user(&flags, (__u32 __user *)arg,

fs/ext4/ioctl.c

1132

if (copy_from_user(new_label, user_label, EXT4_LABEL_MAX + 1))

fs/ext4/ioctl.c

1180

if (copy_from_user(&fsuuid, ufsuuid, sizeof(fsuuid)))

fs/ext4/ioctl.c

1226

if (copy_from_user(&fsuuid, ufsuuid, sizeof(fsuuid)))

fs/ext4/ioctl.c

1232

if (copy_from_user(uuid, &ufsuuid->fsu_uuid[0], UUID_SIZE))

fs/ext4/ioctl.c

1403

if (copy_from_user(&params, in, sizeof(params)))

fs/ext4/ioctl.c

1647

if (copy_from_user(&me,

fs/ext4/ioctl.c

1679

if (copy_from_user(&input, (struct ext4_new_group_input __user *)arg,

fs/ext4/ioctl.c

1740

if (copy_from_user(&n_blocks_count, (__u64 __user *)arg,

fs/ext4/ioctl.c

1793

if (copy_from_user(&range, (struct fstrim_range __user *)arg,

fs/ext4/ioctl.c

903

if (copy_from_user(&head, arg, sizeof(struct fsmap_head)))

fs/f2fs/file.c

2629

if (copy_from_user(&range, (struct fstrim_range __user *)arg,

fs/f2fs/file.c

2871

if (copy_from_user(&range, (struct f2fs_gc_range __user *)arg,

fs/f2fs/file.c

3086

if (copy_from_user(&range, (struct f2fs_defragment __user *)arg,

fs/f2fs/file.c

3286

if (copy_from_user(&range, (struct f2fs_move_range __user *)arg,

fs/f2fs/file.c

3316

if (copy_from_user(&range, (struct f2fs_flush_device __user *)arg,

fs/f2fs/file.c

3686

if (copy_from_user(&block_count, (void __user *)arg,

fs/f2fs/file.c

4211

if (copy_from_user(&range, (struct f2fs_sectrim_range __user *)arg,

fs/f2fs/file.c

4399

if (copy_from_user(&option, (struct f2fs_comp_option __user *)arg,

fs/fat/file.c

142

if (copy_from_user(&range, user_range, sizeof(range)))

fs/fcntl.c

224

ret = copy_from_user(&owner, owner_p, sizeof(owner));

fs/fcntl.c

378

if (copy_from_user(&hint, argp, sizeof(hint)))

fs/fcntl.c

484

if (copy_from_user(&flock, argp, sizeof(flock)))

fs/fcntl.c

498

if (copy_from_user(&flock, argp, sizeof(flock)))

fs/fcntl.c

555

if (copy_from_user(&deleg, argp, sizeof(deleg)))

fs/fcntl.c

562

if (copy_from_user(&deleg, argp, sizeof(deleg)))

fs/fcntl.c

632

if (copy_from_user(&flock, argp, sizeof(flock)))

fs/fcntl.c

643

if (copy_from_user(&flock, argp, sizeof(flock)))

fs/fcntl.c

668

if (copy_from_user(&fl, ufl, sizeof(struct compat_flock)))

fs/fcntl.c

678

if (copy_from_user(&fl, ufl, sizeof(struct compat_flock64)))

fs/fhandle.c

359

if (copy_from_user(&f_handle, ufh, sizeof(struct file_handle)))

fs/fhandle.c

389

if (copy_from_user(&handle->f_handle,

fs/fhandle.c

43

if (copy_from_user(&f_handle, ufh, sizeof(struct file_handle)))

fs/file_attr.c

163

if (copy_from_user(&xfa, ufa, sizeof(xfa)))

fs/fuse/dev.c

2310

if (copy_from_user(&map, argp, sizeof(map)))

fs/fuse/dev_uring.c

638

if (copy_from_user(header, ring, header_size)) {

fs/fuse/ioctl.c

130

if (copy_from_user(&digest_size, &uarg->digest_size, sizeof(digest_size)))

fs/fuse/ioctl.c

148

if (copy_from_user(&enable, uarg, sizeof(enable)))

fs/gfs2/rgrp.c

1410

if (copy_from_user(&r, argp, sizeof(r)))

fs/hpfs/super.c

215

if (copy_from_user(&range, (struct fstrim_range __user *)arg, sizeof(range)))

fs/ioctl.c

209

if (copy_from_user(&fiemap, ufiemap, sizeof(fiemap)))

fs/ioctl.c

255

if (copy_from_user(&args, argp, sizeof(args)))

fs/ioctl.c

273

if (copy_from_user(&sr, argp, sizeof(sr)))

fs/ioctl.c

302

if (copy_from_user(&sr, argp, sizeof(sr)))

fs/jfs/ioctl.c

124

if (copy_from_user(&range, (struct fstrim_range __user *)arg,

fs/libfs.c

1190

res = copy_from_user(to + pos, from, count);

fs/libfs.c

1278

if (copy_from_user(ar->data, buf, size))

fs/libfs.c

1402

if (copy_from_user(attr->set_buf, buf, size))

fs/namespace.c

4043

left = copy_from_user(copy, data, PAGE_SIZE);

fs/nfs/blocklayout/rpc_pipefs.c

120

if (copy_from_user(&nn->bl_mount_reply, src, mlen) != 0)

fs/nfs/fs_context.c

1413

if (copy_from_user(sap, data->host_addr, data->host_addrlen))

fs/nfs/fs_context.c

1424

if (copy_from_user(&pseudoflavor, data->auth_flavours,

fs/nfs/nfs4idmap.c

679

if (copy_from_user(&im, src, mlen) != 0) {

fs/nfsd/nfs4recover.c

784

if (copy_from_user(&xid, &hdr->cm_xid, sizeof(xid)) != 0) {

fs/nfsd/nfs4recover.c

821

if (copy_from_user(&cup->cu_u.cu_msg_v2, src, mlen) != 0)

fs/nilfs2/ioctl.c

1006

if (copy_from_user(&newsize, argp, sizeof(newsize)))

fs/nilfs2/ioctl.c

1040

if (copy_from_user(&range, argp, sizeof(range)))

fs/nilfs2/ioctl.c

1082

if (copy_from_user(range, argp, sizeof(__u64[2])))

fs/nilfs2/ioctl.c

1141

if (copy_from_user(&argv, argp, sizeof(argv)))

fs/nilfs2/ioctl.c

1194

if (copy_from_user(&argv, argp, sizeof(argv)))

fs/nilfs2/ioctl.c

1286

if (copy_from_user(label, argp, NILFS_MAX_VOLUME_NAME + 1)) {

fs/nilfs2/ioctl.c

211

if (copy_from_user(&cpmode, argp, sizeof(cpmode)))

fs/nilfs2/ioctl.c

263

if (copy_from_user(&cno, argp, sizeof(cno)))

fs/nilfs2/ioctl.c

502

if (copy_from_user(&argv, argp, sizeof(argv)))

fs/nilfs2/ioctl.c

84

copy_from_user(buf, base + argv->v_size * i,

fs/nilfs2/ioctl.c

858

if (copy_from_user(argv, argp, sizeof(argv)))

fs/notify/fanotify/fanotify_user.c

1073

if (copy_from_user(&response, buf, sizeof(response)))

fs/notify/fanotify/fanotify_user.c

384

if (copy_from_user(friar, info, sizeof(*friar)))

fs/ntfs/file.c

788

if (copy_from_user(&range, user_range, sizeof(range)))

fs/ntfs3/file.c

186

if (copy_from_user(user, buf, FSLABEL_MAX))

fs/ntfs3/file.c

77

if (copy_from_user(&range, user_range, sizeof(range)))

fs/ntfs3/super.c

534

if (copy_from_user(label, buffer, ret)) {

fs/ocfs2/dlmfs/dlmfs.c

258

bytes_left = copy_from_user(lvb_buf, buf, count);

fs/ocfs2/ioctl.c

35

copy_from_user(&(a), (b), sizeof(a))

fs/ocfs2/ioctl.c

867

if (copy_from_user(&sr, (int __user *) arg, sizeof(sr)))

fs/ocfs2/ioctl.c

897

if (copy_from_user(&input, (int __user *) arg, sizeof(input)))

fs/ocfs2/ioctl.c

914

if (copy_from_user(&args, argp, sizeof(args)))

fs/ocfs2/ioctl.c

926

if (copy_from_user(&info, argp, sizeof(struct ocfs2_info)))

fs/ocfs2/ioctl.c

943

if (copy_from_user(&range, argp, sizeof(range)))

fs/ocfs2/ioctl.c

983

if (copy_from_user(&args, argp, sizeof(args)))

fs/ocfs2/ioctl.c

990

if (copy_from_user(&info, argp, sizeof(struct ocfs2_info)))

fs/ocfs2/move_extents.c

1026

if (copy_from_user(&range, argp, sizeof(range))) {

fs/ocfs2/stack_user.c

248

if (copy_from_user(target, buf, target_len))

fs/orangefs/devorangefs-req.c

619

ret = copy_from_user(&user_desc,

fs/orangefs/devorangefs-req.c

739

if (copy_from_user(&d32, (void __user *)args, sizeof(d32)))

fs/orangefs/orangefs-debugfs.c

1009

ret = copy_from_user(&mask_info,

fs/orangefs/orangefs-debugfs.c

932

ret = copy_from_user(&mask2_info,

fs/orangefs/orangefs-debugfs.c

955

ret = copy_from_user(&client_debug_array_string,

fs/pidfs.c

384

if (copy_from_user(&mask, &uinfo->mask, sizeof(mask)))

fs/proc/base.c

1208

if (copy_from_user(buffer, buf, count)) {

fs/proc/base.c

1267

if (copy_from_user(buffer, buf, count)) {

fs/proc/base.c

1414

if (copy_from_user(buffer, buf, count))

fs/proc/base.c

1559

if (copy_from_user(buffer, buf, count))

fs/proc/base.c

1712

if (copy_from_user(buffer, buf, count > maxlen ? maxlen : count))

fs/proc/base.c

907

if (write && copy_from_user(page, buf, this_len)) {

fs/proc/task_mmu.c

1868

if (copy_from_user(buffer, buf, count))

fs/proc/task_mmu.c

3100

if (copy_from_user(arg, (void __user *)uarg, sizeof(*arg)))

fs/proc/task_mmu.c

696

if (copy_from_user(&usize, (void __user *)uarg, sizeof(usize)))

fs/pstore/ram_core.c

284

int ret = unlikely(copy_from_user(buffer->data + start, s, count)) ?

fs/quota/quota.c

152

if (copy_from_user(&info, addr, sizeof(info)))

fs/quota/quota.c

297

if (copy_from_user(&idq, compat_dqblk, sizeof(*compat_dqblk)) ||

fs/quota/quota.c

301

if (copy_from_user(&idq, addr, sizeof(idq)))

fs/quota/quota.c

317

if (copy_from_user(&flags, addr, sizeof(flags)))

fs/quota/quota.c

328

if (copy_from_user(&flags, addr, sizeof(flags)))

fs/quota/quota.c

506

if (copy_from_user(&fqs, addr, 1)) /* Just read qs_version */

fs/quota/quota.c

631

if (copy_from_user(&fdq, addr, sizeof(fdq)))

fs/quota/quota.c

759

if (copy_from_user(&flags, addr, sizeof(flags)))

fs/read_write.c

1424

if (unlikely(copy_from_user(&pos, offset, sizeof(loff_t))))

fs/read_write.c

1463

if (unlikely(copy_from_user(&pos, offset, sizeof(loff_t))))

fs/read_write.c

1666

if (copy_from_user(&pos_in, off_in, sizeof(loff_t)))

fs/read_write.c

1673

if (copy_from_user(&pos_out, off_out, sizeof(loff_t)))

fs/resctrl/pseudo_lock.c

759

if (copy_from_user(buf, user_buf, buf_size))

fs/select.c

1265

if (copy_from_user(&tv, tvp, sizeof(tv)))

fs/select.c

1298

if (copy_from_user(&a, arg, sizeof(a)))

fs/select.c

391

return copy_from_user(fdset, ufdset, nr) ? -EFAULT : 0;

fs/select.c

708

if (copy_from_user(&tv, tvp, sizeof(tv)))

fs/select.c

839

if (copy_from_user(&a, arg, sizeof(a)))

fs/select.c

998

if (copy_from_user(walk->entries, ufds + nfds-todo,

fs/signalfd.c

306

if (copy_from_user(&mask, user_mask, sizeof(mask)))

fs/signalfd.c

318

if (copy_from_user(&mask, user_mask, sizeof(mask)))

fs/smb/client/cifs_debug.c

1186

if (copy_from_user(flags_string, buffer, count))

fs/smb/client/ioctl.c

360

if (copy_from_user(&out, in, sizeof(out))) {

fs/smb/client/smb2ops.c

1621

if (copy_from_user(&qi, arg, sizeof(struct smb_query_info))) {

fs/smb/client/smb2ops.c

2362

if (copy_from_user(&snapshot_in, ioc_buf,

fs/smb/client/smb2ops.c

2433

if (copy_from_user(&notify, ioc_buf, sizeof(struct smb3_notify_info))) {

fs/smb/client/smb2ops.c

2438

if (copy_from_user(&notify, ioc_buf, sizeof(struct smb3_notify))) {

fs/splice.c

1421

if (copy_from_user(&offset, off_out, sizeof(loff_t)))

fs/splice.c

1426

if (copy_from_user(&offset, off_in, sizeof(loff_t)))

fs/timerfd.c

390

if (copy_from_user(&ticks, (u64 __user *)arg, sizeof(ticks)))

fs/ubifs/debug.c

2750

if (copy_from_user(buf, u, buf_size))

fs/utimes.c

175

if (copy_from_user(&times, utimes, sizeof(times)))

fs/verity/enable.c

200

copy_from_user(desc->salt, u64_to_user_ptr(arg->salt_ptr),

fs/verity/enable.c

209

copy_from_user(desc->signature, u64_to_user_ptr(arg->sig_ptr),

fs/verity/enable.c

332

if (copy_from_user(&arg, uarg, sizeof(arg)))

fs/verity/read_metadata.c

177

if (copy_from_user(&arg, uarg, sizeof(arg)))

fs/xfs/scrub/scrub.c

811

if (copy_from_user(&scrub, arg, sizeof(scrub)))

fs/xfs/scrub/scrub.c

914

if (copy_from_user(&head, uhead, sizeof(head)))

fs/xfs/xfs_discard.c

844

if (copy_from_user(&range, urange, sizeof(range)))

fs/xfs/xfs_exchrange.c

803

if (copy_from_user(&args, argp, sizeof(args)))

fs/xfs/xfs_exchrange.c

897

if (copy_from_user(&args, argp, sizeof(args)))

fs/xfs/xfs_fsmap.c

1313

if (copy_from_user(&head, arg, sizeof(struct fsmap_head)))

fs/xfs/xfs_handle.c

216

if (copy_from_user(&handle, uhandle, hlen))

fs/xfs/xfs_handle.c

310

if (copy_from_user(&olen, hreq->ohandlen, sizeof(__u32))) {

fs/xfs/xfs_handle.c

427

if (copy_from_user(&context.cursor, ucursor, sizeof(context.cursor)))

fs/xfs/xfs_handle.c

479

if (copy_from_user(&al_hreq, p, sizeof(al_hreq)))

fs/xfs/xfs_handle.c

617

if (copy_from_user(&am_hreq, arg, sizeof(xfs_fsop_attrmulti_handlereq_t)))

fs/xfs/xfs_handle.c

862

if (copy_from_user(kreq, ureq, sizeof(*kreq)))

fs/xfs/xfs_handle.c

892

if (copy_from_user(kreq, ureq, sizeof(*kreq)))

fs/xfs/xfs_healthmon.c

1086

if (copy_from_user(&hmo, arg, sizeof(hmo)))

fs/xfs/xfs_healthmon.c

1110

if (copy_from_user(&hms, arg, sizeof(hms)))

fs/xfs/xfs_healthmon.c

1190

if (copy_from_user(&hmo, arg, sizeof(hmo)))

fs/xfs/xfs_ioctl.c

105

if (copy_from_user(&bulkreq, arg, sizeof(struct xfs_fsop_bulkreq)))

fs/xfs/xfs_ioctl.c

1057

if (copy_from_user(label, newlabel, XFSLABEL_MAX + 1))

fs/xfs/xfs_ioctl.c

108

if (copy_from_user(&lastino, bulkreq.lastip, sizeof(__s64)))

fs/xfs/xfs_ioctl.c

1163

if (copy_from_user(&fsop, arg, sizeof(fsop)))

fs/xfs/xfs_ioctl.c

1317

if (copy_from_user(&hreq, arg, sizeof(hreq)))

fs/xfs/xfs_ioctl.c

1324

if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))

fs/xfs/xfs_ioctl.c

1332

if (copy_from_user(&hreq, arg, sizeof(xfs_fsop_handlereq_t)))

fs/xfs/xfs_ioctl.c

1345

if (copy_from_user(&sxp, arg, sizeof(xfs_swapext_t)))

fs/xfs/xfs_ioctl.c

1365

if (copy_from_user(&in, arg, sizeof(in)))

fs/xfs/xfs_ioctl.c

1379

if (copy_from_user(&in, arg, sizeof(in)))

fs/xfs/xfs_ioctl.c

1393

if (copy_from_user(&in, arg, sizeof(in)))

fs/xfs/xfs_ioctl.c

1422

if (copy_from_user(&in, arg, sizeof(in)))

fs/xfs/xfs_ioctl.c

1444

if (copy_from_user(&eofb, arg, sizeof(eofb)))

fs/xfs/xfs_ioctl.c

283

if (copy_from_user(&hdr, &arg->hdr, sizeof(hdr)))

fs/xfs/xfs_ioctl.c

333

if (copy_from_user(&hdr, &arg->hdr, sizeof(hdr)))

fs/xfs/xfs_ioctl.c

391

if (copy_from_user(&ageo, arg, sizeof(ageo)))

fs/xfs/xfs_ioctl.c

441

if (copy_from_user(&rgeo, arg, sizeof(rgeo)))

fs/xfs/xfs_ioctl.c

931

if (copy_from_user(&bmx, arg, recsize))

fs/xfs/xfs_ioctl32.c

258

if (copy_from_user(&lastino, bulkreq.lastip, sizeof(__s64)))

fs/xfs/xfs_ioctl32.c

318

if (copy_from_user(&hreq32, arg32, sizeof(compat_xfs_fsop_handlereq_t)))

fs/xfs/xfs_ioctl32.c

352

if (copy_from_user(&al_hreq, p, sizeof(al_hreq)))

fs/xfs/xfs_ioctl32.c

379

if (copy_from_user(&am_hreq, arg,

fs/xfs/xfs_ioctl32.c

471

if (copy_from_user(&sxp, sxu,

fs/xfs/xfs_verify_media.c

418

if (copy_from_user(&me, arg, sizeof(me)))

include/asm-generic/flat.h

11

return copy_from_user(addr, rp, 4) ? -EFAULT : 0;

include/linux/bpfptr.h

53

return copy_from_user(dst, src.user + offset, size);

include/linux/iommu.h

574

if (copy_from_user(kdst, user_array->uptr,

include/linux/sockptr.h

48

return copy_from_user(dst, src.user + offset, size);

include/linux/uaccess.h

412

if (copy_from_user(dst, src, size))

include/linux/vfio.h

311

if (copy_from_user(info, (void __user *)arg, minsz))

include/net/checksum.h

31

if (copy_from_user(dst, src, len))

include/rdma/ib_verbs.h

3206

return copy_from_user(dest, udata->inbuf, len) ? -EFAULT : 0;

include/rdma/uverbs_ioctl.h

836

else if (copy_from_user(to, u64_to_user_ptr(attr->ptr_attr.data),

include/rdma/uverbs_ioctl.h

858

else if (copy_from_user(to, u64_to_user_ptr(attr->ptr_attr.data),

include/uapi/linux/bpf.h

6081

FN(copy_from_user, 148, ##ctx) \

io_uring/bpf_filter.c

319

if (copy_from_user(reg, arg, sizeof(*reg)))

io_uring/cancel.c

281

if (copy_from_user(&sc, arg, sizeof(sc)))

io_uring/epoll.c

44

if (copy_from_user(&epoll->event, ev, sizeof(*ev)))

io_uring/eventfd.c

132

if (copy_from_user(&fd, fds, sizeof(*fds)))

io_uring/filetable.c

149

if (copy_from_user(&range, arg, sizeof(range)))

io_uring/io_uring.c

2482

if (copy_from_user(&arg, argp, sizeof(arg)))

io_uring/io_uring.c

2541

if (copy_from_user(&arg, uarg, sizeof(arg)))

io_uring/io_uring.c

3112

if (copy_from_user(&config.p, params, sizeof(config.p)))

io_uring/kbuf.c

641

if (copy_from_user(&reg, arg, sizeof(reg)))

io_uring/kbuf.c

723

if (copy_from_user(&reg, arg, sizeof(reg)))

io_uring/kbuf.c

746

if (copy_from_user(&buf_status, arg, sizeof(buf_status)))

io_uring/mock_file.c

234

if (copy_from_user(&mc, uarg, uarg_size))

io_uring/mock_file.c

292

if (copy_from_user(&mp, uarg, uarg_size))

io_uring/mock_file.c

51

if (copy_from_user(tmp_buf, ubuf, len))

io_uring/napi.c

315

if (copy_from_user(&napi, arg, sizeof(napi)))

io_uring/net.c

248

if (copy_from_user(msg, sr->umsg_compat, sizeof(*msg)))

io_uring/net.c

264

if (copy_from_user(&tmp_iov, uiov, sizeof(tmp_iov)))

io_uring/net.c

335

if (copy_from_user(&tmp_iov, uiov, sizeof(tmp_iov)))

io_uring/query.c

77

if (copy_from_user(&hdr, uhdr, sizeof(hdr)))

io_uring/query.c

89

if (copy_from_user(data, udata, hdr.size))

io_uring/register.c

221

if (copy_from_user(&tres, arg, sizeof(tres)))

io_uring/register.c

335

ret = copy_from_user(new_mask, arg, len);

io_uring/register.c

362

if (copy_from_user(new_count, arg, sizeof(new_count)))

io_uring/register.c

448

if (copy_from_user(&reg, arg, sizeof(reg)))

io_uring/register.c

514

if (copy_from_user(p, arg, sizeof(*p)))

io_uring/register.c

714

if (copy_from_user(&reg, reg_uptr, sizeof(reg)))

io_uring/register.c

717

if (copy_from_user(&rd, rd_uptr, sizeof(rd)))

io_uring/register.c

986

if (copy_from_user(&sqe, arg, sizeof(sqe)))

io_uring/rsrc.c

1414

if (copy_from_user(&buf, arg, sizeof(buf)))

io_uring/rsrc.c

316

if ((tags && copy_from_user(&tag, &tags[done], sizeof(tag))) ||

io_uring/rsrc.c

317

copy_from_user(&fd, &fds[done], sizeof(fd))) {

io_uring/rsrc.c

393

if (tags && copy_from_user(&tag, &tags[done], sizeof(tag))) {

io_uring/rsrc.c

448

if (copy_from_user(&up, arg, sizeof(struct io_uring_rsrc_update)))

io_uring/rsrc.c

462

if (copy_from_user(&up, arg, sizeof(up)))

io_uring/rsrc.c

479

if (copy_from_user(&rr, arg, size))

io_uring/rsrc.c

640

if (tags && copy_from_user(&tag, &tags[i], sizeof(tag)))

io_uring/rsrc.c

642

if (fds && copy_from_user(&fd, &fds[i], sizeof(fd)))

io_uring/rsrc.c

989

if (copy_from_user(&tag, &tags[i], sizeof(tag))) {

io_uring/rw.c

239

if (copy_from_user(&pi_attr, u64_to_user_ptr(attr_ptr),

io_uring/rw.c

58

if (copy_from_user(&iov, uiov, sizeof(iov)))

io_uring/rw.c

77

if (copy_from_user(&iov, uiov, sizeof(*uiov)))

io_uring/tctx.c

339

if (copy_from_user(&reg, &arg[i], sizeof(reg))) {

io_uring/tctx.c

391

if (copy_from_user(&reg, &arg[i], sizeof(reg))) {

io_uring/zcrx.c

1436

if (copy_from_user(&ctrl, arg, sizeof(ctrl)))

io_uring/zcrx.c

907

if (copy_from_user(&reg, arg, sizeof(reg)))

io_uring/zcrx.c

915

if (copy_from_user(&rd, u64_to_user_ptr(reg.region_ptr), sizeof(rd)))

io_uring/zcrx.c

928

if (copy_from_user(&area, u64_to_user_ptr(reg.area_ptr), sizeof(area)))

io_uring/zcrx.c

932

if (reg.event_desc && copy_from_user(&notif, u64_to_user_ptr(reg.event_desc),

ipc/compat.c

42

if (copy_from_user(&v, from, sizeof(v)))

ipc/compat.c

54

if (copy_from_user(&v, from, sizeof(v)))

ipc/mqueue.c

1295

if (copy_from_user(nc->data,

ipc/mqueue.c

1380

if (copy_from_user(&n, u_notification, sizeof(struct sigevent)))

ipc/mqueue.c

1437

if (copy_from_user(new, u_mqstat, sizeof(struct mq_attr)))

ipc/mqueue.c

1467

if (copy_from_user(&v, uattr, sizeof(*uattr)))

ipc/mqueue.c

934

if (u_attr && copy_from_user(&attr, u_attr, sizeof(struct mq_attr)))

ipc/msg.c

370

if (copy_from_user(out, buf, sizeof(*out)))

ipc/msg.c

377

if (copy_from_user(&tbuf_old, buf, sizeof(tbuf_old)))

ipc/msgutil.c

104

if (copy_from_user(msg + 1, src, alen))

ipc/msgutil.c

111

if (copy_from_user(seg + 1, src, alen))

ipc/sem.c

1493

if (copy_from_user(sem_io, p, nsems*sizeof(ushort))) {

ipc/sem.c

1575

if (copy_from_user(out, buf, sizeof(*out)))

ipc/sem.c

1582

if (copy_from_user(&tbuf_old, buf, sizeof(tbuf_old)))

ipc/sem.c

2242

if (copy_from_user(sops, tsops, nsops * sizeof(*tsops))) {

ipc/shm.c

885

if (copy_from_user(out, buf, sizeof(*out)))

ipc/shm.c

892

if (copy_from_user(&tbuf_old, buf, sizeof(tbuf_old)))

ipc/syscall.c

170

if (copy_from_user(&ipck, uptr, sizeof(ipck)))

ipc/syscall.c

63

if (copy_from_user(&tmp,

kernel/bpf/btf.c

8379

if (copy_from_user(&info, uinfo, info_copy))

kernel/bpf/hashtab.c

1816

if (ubatch && copy_from_user(&batch, ubatch, sizeof(batch)))

kernel/bpf/hashtab.c

3293

if (ubatch && copy_from_user(cursor, ubatch, key_size)) {

kernel/bpf/helpers.c

662

int ret = copy_from_user(dst, user_ptr, size);

kernel/bpf/log.c

203

if (copy_from_user(lbuf, log->ubuf + start, nn))

kernel/bpf/log.c

205

if (copy_from_user(rbuf, log->ubuf + end - nn, nn))

kernel/bpf/syscall.c

1817

if (copy_from_user(value, uvalue, value_size))

kernel/bpf/syscall.c

2036

if (copy_from_user(key, keys + cp * map->key_size,

kernel/bpf/syscall.c

2098

if (copy_from_user(key, keys + cp * map->key_size,

kernel/bpf/syscall.c

2100

copy_from_user(value, values + cp * value_size, value_size))

kernel/bpf/syscall.c

2157

if (ubatch && copy_from_user(buf_prevkey, ubatch, map->key_size))

kernel/bpf/syscall.c

5175

if (copy_from_user(&info, uinfo, info_len))

kernel/bpf/syscall.c

5461

if (copy_from_user(&info, uinfo, info_len))

kernel/bpf/syscall.c

5547

if (copy_from_user(&info, uinfo, info_len))

kernel/capability.c

240

if (copy_from_user(&kdata, data, copybytes))

kernel/compat.c

254

if (copy_from_user(&v, compat, sizeof(compat_sigset_t)))

kernel/compat.c

266

if (copy_from_user(set, compat, sizeof(compat_sigset_t)))

kernel/dma/debug.c

782

if (copy_from_user(buf, userbuf, len))

kernel/dma/map_benchmark.c

398

if (copy_from_user(&map->bparam, argp, sizeof(map->bparam)))

kernel/entry/syscall_user_dispatch.c

169

if (copy_from_user(&cfg, data, sizeof(cfg)))

kernel/events/core.c

6624

if (copy_from_user(&value, (u64 __user *)arg, sizeof(value)))

kernel/fork.c

2951

copy_from_user(kset_tid, u64_to_user_ptr(args.set_tid),

kernel/futex/syscalls.c

234

if (copy_from_user(&aux, &uwaitv[i], sizeof(aux)))

kernel/irq/debugfs.c

197

if (copy_from_user(buf, user_buf, size))

kernel/kcmp.c

106

if (copy_from_user(&slot, uslot, sizeof(slot)))

kernel/kcsan/debugfs.c

227

if (copy_from_user(kbuf, buf, read_len))

kernel/kexec.c

292

result = copy_from_user(&in, &segments[i], sizeof(in));

kernel/kexec_core.c

770

result = copy_from_user(ptr, buf, uchunk);

kernel/kexec_core.c

846

result = copy_from_user(ptr, buf, uchunk);

kernel/kexec_core.c

913

result = copy_from_user(ptr, buf, uchunk);

kernel/module/main.c

2457

if (copy_from_user(dst, usrc, n) != 0)

kernel/power/qos.c

389

if (copy_from_user(&value, buf, sizeof(s32)))

kernel/power/qos.c

484

if (copy_from_user(&value, buf, sizeof(s32)))

kernel/power/user.c

228

if (copy_from_user(&swap_area, argp, sizeof(swap_area)))

kernel/power/user.c

235

if (copy_from_user(&swap_area, argp, sizeof(swap_area)))

kernel/profile.c

199

if (copy_from_user(&multiplier, buf, sizeof(int)))

kernel/ptrace.c

1137

if (copy_from_user(&info, datavp, sizeof(info)))

kernel/ptrace.c

1235

if (copy_from_user(&new_set, datavp, sizeof(sigset_t))) {

kernel/ptrace.c

668

if (copy_from_user(buf, src, this_len))

kernel/ptrace.c

744

ret = copy_from_user(&arg, (void __user *) addr,

kernel/sched/debug.c

139

if (copy_from_user(buf, ubuf, cnt))

kernel/sched/debug.c

266

if (copy_from_user(buf, ubuf, cnt))

kernel/sched/psi.c

1552

if (copy_from_user(buf, user_buf, buf_size))

kernel/sched/syscalls.c

1251

return copy_from_user(new_mask, user_mask_ptr, len) ? -EFAULT : 0;

kernel/sched/syscalls.c

859

if (copy_from_user(&lparam, param, sizeof(struct sched_param)))

kernel/seccomp.c

1632

if (copy_from_user(&resp, buf, sizeof(resp)))

kernel/seccomp.c

1679

if (copy_from_user(&id, buf, sizeof(id)))

kernel/seccomp.c

2066

if (copy_from_user(&action, uaction, sizeof(action)))

kernel/seccomp.c

2268

if (copy_from_user(&kmd.filter_off, data, sizeof(kmd.filter_off)))

kernel/seccomp.c

730

if (copy_from_user(&fprog32, user_filter, sizeof(fprog32)))

kernel/seccomp.c

736

if (copy_from_user(&fprog, user_filter, sizeof(fprog)))

kernel/signal.c

3290

if (copy_from_user(&kmask, umask, sizeof(sigset_t)))

kernel/signal.c

3341

if (copy_from_user(&new_set, nset, sizeof(sigset_t)))

kernel/signal.c

3533

if (copy_from_user(&buf, expansion, SI_EXPANSION_SIZE))

kernel/signal.c

3546

if (copy_from_user(to, from, sizeof(struct kernel_siginfo)))

kernel/signal.c

3554

if (copy_from_user(to, from, sizeof(struct kernel_siginfo)))

kernel/signal.c

3730

if (copy_from_user(&from, ufrom, sizeof(struct compat_siginfo)))

kernel/signal.c

3742

if (copy_from_user(&from, ufrom, sizeof(struct compat_siginfo)))

kernel/signal.c

3828

if (copy_from_user(&these, uthese, sizeof(these)))

kernel/signal.c

3860

if (copy_from_user(&these, uthese, sizeof(these)))

kernel/signal.c

4460

if (uss && copy_from_user(&new, uss, sizeof(stack_t)))

kernel/signal.c

4473

if (copy_from_user(&new, uss, sizeof(stack_t)))

kernel/signal.c

4499

if (copy_from_user(&uss32, uss_ptr, sizeof(compat_stack_t)))

kernel/signal.c

4600

if (copy_from_user(&new_set, nset, sizeof(*nset)))

kernel/signal.c

4651

if (act && copy_from_user(&new_sa.sa, act, sizeof(new_sa.sa)))

kernel/signal.c

4870

if (copy_from_user(&newset, unewset, sizeof(newset)))

kernel/sys.c

1430

if (!copy_from_user(tmp, name, len)) {

kernel/sys.c

1484

if (!copy_from_user(tmp, name, len)) {

kernel/sys.c

1583

if (copy_from_user(&r32, rlim, sizeof(struct compat_rlimit)))

kernel/sys.c

1744

if (copy_from_user(&new64, new_rlim, sizeof(new64)))

kernel/sys.c

1798

if (copy_from_user(&new_rlim, rlim, sizeof(*rlim)))

kernel/sys.c

2077

if (copy_from_user(&prctl_map, addr, sizeof(prctl_map)))

kernel/sys.c

2093

if (copy_from_user(user_auxv,

kernel/sys.c

2182

if (copy_from_user(user_auxv, (const void __user *)addr, len))

kernel/time/itimer.c

336

if (copy_from_user(&v, i, sizeof(struct __kernel_old_itimerval)))

kernel/time/itimer.c

382

if (copy_from_user(&v32, i, sizeof(struct old_itimerval32)))

kernel/time/posix-timers.c

1178

if (copy_from_user(&ktx, utx, sizeof(ktx)))

kernel/time/posix-timers.c

481

if (copy_from_user(&req_id, created_timer_id, sizeof(req_id)))

kernel/time/posix-timers.c

581

if (copy_from_user(&event, timer_event_spec, sizeof (event)))

kernel/time/test_udelay.c

110

if (copy_from_user(lbuf, buf, count))

kernel/time/time.c

216

if (copy_from_user(&new_tz, tz, sizeof(*tz)))

kernel/time/time.c

260

if (copy_from_user(&new_tz, tz, sizeof(*tz)))

kernel/time/time.c

278

if (copy_from_user(&txc, txc_p, sizeof(struct __kernel_timex)))

kernel/time/time.c

291

if (copy_from_user(&tx32, utp, sizeof(struct old_timex32)))

kernel/time/time.c

873

ret = copy_from_user(&kts, uts, sizeof(kts));

kernel/time/time.c

916

ret = copy_from_user(&ts, cts, sizeof(ts));

kernel/time/time.c

948

return copy_from_user(ts, uts, sizeof(*ts)) ? -EFAULT : 0;

kernel/trace/blktrace.c

772

ret = copy_from_user(&buts, arg, sizeof(buts));

kernel/trace/blktrace.c

814

if (copy_from_user(&buts2, arg, sizeof(buts2)))

kernel/trace/blktrace.c

850

if (copy_from_user(&cbuts, arg, sizeof(cbuts)))

kernel/trace/bpf_trace.c

2050

if (copy_from_user(&query, uquery, sizeof(query)))

kernel/trace/bpf_trace.c

2837

if (copy_from_user(cookies, ucookies, size)) {

kernel/trace/bpf_trace.c

2844

if (copy_from_user(addrs, uaddrs, size)) {

kernel/trace/bpf_trace.c

3559

ret = copy_from_user(dst, (const void __user *)unsafe_src, size);

kernel/trace/bpf_trace.c

3810

if (copy_from_user(ids, uids, cnt * sizeof(*ids))) {

kernel/trace/bpf_trace.c

3822

if (copy_from_user(cookies, ucookies, cnt * sizeof(*cookies))) {

kernel/trace/trace.c

4145

if (copy_from_user(buf, ubuf, cnt))

kernel/trace/trace.c

5124

if (copy_from_user(buf, ubuf, cnt))

kernel/trace/trace.c

6503

if (copy_from_user(buf, ubuf, cnt))

kernel/trace/trace.c

9536

if (copy_from_user(kbuf, buffer + done, size))

kernel/trace/trace_hwlat.c

687

if (copy_from_user(buf, ubuf, cnt))

kernel/trace/trace_osnoise.c

2262

if (copy_from_user(buf, ubuf, cnt))

kernel/trace/trace_uprobe.c

119

if (copy_from_user(&ret, (void __force __user *) addr, sizeof(ret)))

kernel/trace/trace_uprobe.c

133

return copy_from_user(dest, vaddr, size) ? -EFAULT : 0;

kernel/user_namespace.c

1241

if (copy_from_user(kbuf, buf, count))

kernel/watch_queue.c

335

if (copy_from_user(&filter, _filter, sizeof(filter)) != 0)

lib/kfifo.c

206

ret = copy_from_user(fifo->data + off, from, l);

lib/kfifo.c

210

ret = copy_from_user(fifo->data, from + l, len - l);

lib/kstrtox.c

412

if (copy_from_user(buf, s, count))

lib/kstrtox.c

426

if (copy_from_user(buf, s, count)) \

lib/test_hmm.c

1526

if (copy_from_user(&cmd, uarg, sizeof(cmd)))

lib/test_hmm.c

532

if (copy_from_user(bounce.ptr, u64_to_user_ptr(cmd->ptr),

lib/tests/usercopy_kunit.c

187

KUNIT_EXPECT_EQ_MSG(test, 0, copy_from_user(kmem, usermem, PAGE_SIZE),

lib/tests/usercopy_kunit.c

237

KUNIT_EXPECT_NE_MSG(test, copy_from_user(kmem, (char __user *)(kmem + PAGE_SIZE),

lib/tests/usercopy_kunit.c

252

KUNIT_EXPECT_NE_MSG(test, copy_from_user(bad_usermem, (char __user *)kmem,

lib/xz/xz_dec_test.c

124

if (copy_from_user(buffer_in, buf, buffers.in_size))

mm/filemap.c

4759

if (copy_from_user(&csr, cstat_range,

mm/gup_test.c

239

if (copy_from_user(&args, (void __user *)arg, sizeof(args)))

mm/gup_test.c

301

if (copy_from_user(&user_addr, (void __user *)arg, sizeof(user_addr)))

mm/gup_test.c

365

if (copy_from_user(&gup, (void __user *)arg, sizeof(gup)))

mm/huge_memory.c

4813

if (copy_from_user(input_buf, buf, min_t(size_t, count, MAX_INPUT_BUF_SZ)))

mm/kasan/kasan_test_c.c

2181

unused = copy_from_user(kmem, usermem, size + 1));

mm/memory.c

7500

rc = copy_from_user(kaddr, usr_src + i * PAGE_SIZE, PAGE_SIZE);

mm/mempolicy.c

1645

ret = copy_from_user(mask, nmask,

mm/migrate.c

2526

if (copy_from_user(chunk_pages, pages + chunk_offset,

mm/mmap.c

634

if (copy_from_user(&a, arg, sizeof(a)))

mm/nommu.c

1292

if (copy_from_user(&a, arg, sizeof(a)))

mm/shrinker_debug.c

115

if (copy_from_user(kbuf, buf, read_len))

mm/userfaultfd.c

3591

if (copy_from_user(&uffdio_register, user_uffdio_register,

mm/userfaultfd.c

3761

if (copy_from_user(&uffdio_unregister, buf, sizeof(uffdio_unregister)))

mm/userfaultfd.c

3893

if (copy_from_user(&uffdio_wake, buf, sizeof(uffdio_wake)))

mm/userfaultfd.c

3935

if (copy_from_user(&uffdio_copy, user_uffdio_copy,

mm/userfaultfd.c

3994

if (copy_from_user(&uffdio_zeropage, user_uffdio_zeropage,

mm/userfaultfd.c

4044

if (copy_from_user(&uffdio_wp, user_uffdio_wp,

mm/userfaultfd.c

4100

if (copy_from_user(&uffdio_continue, user_uffdio_continue,

mm/userfaultfd.c

4160

if (copy_from_user(&uffdio_poison, user_uffdio_poison,

mm/userfaultfd.c

4232

if (copy_from_user(&uffdio_move, user_uffdio_move,

mm/userfaultfd.c

4294

if (copy_from_user(&uffdio_api, buf, sizeof(uffdio_api)))

mm/userfaultfd.c

452

ret = copy_from_user(kaddr, (const void __user *) src_addr,

mm/userfaultfd.c

540

err = copy_from_user(kaddr, (const void __user *) src_addr, PAGE_SIZE);

mm/util.c

225

if (copy_from_user(p, src, len)) {

mm/util.c

251

if (copy_from_user(p, src, len)) {

mm/util.c

307

if (copy_from_user(p, src, len)) {

mm/vmscan.c

5679

if (copy_from_user(buf, src, len)) {

net/6lowpan/debugfs.c

135

if (copy_from_user(&buf, user_buf, min_t(size_t, sizeof(buf) - 1,

net/8021q/vlan.c

512

if (copy_from_user(&args, arg, sizeof(struct vlan_ioctl_args)))

net/atm/br2684.c

364

if (copy_from_user(&fs, arg, sizeof fs))

net/atm/br2684.c

538

if (copy_from_user(&be, arg, sizeof be))

net/atm/br2684.c

672

if (copy_from_user(&ni, arg, sizeof ni))

net/atm/pppoatm.c

394

if (copy_from_user(&be, arg, sizeof be))

net/atm/resources.c

268

if (copy_from_user(esi, buf, ESI_LEN)) {

net/bluetooth/6lowpan.c

1121

if (copy_from_user(buf, user_buffer, buf_size))

net/bluetooth/af_bluetooth.c

649

if (copy_from_user(&ethcmd, useraddr, sizeof(ethcmd)))

net/bluetooth/bnep/sock.c

112

if (copy_from_user(&ci, argp, sizeof(ci)))

net/bluetooth/bnep/sock.c

67

if (copy_from_user(&ca, argp, sizeof(ca)))

net/bluetooth/bnep/sock.c

93

if (copy_from_user(&cd, argp, sizeof(cd)))

net/bluetooth/bnep/sock.c

99

if (copy_from_user(&cl, argp, sizeof(cl)))

net/bluetooth/hci_conn.c

2770

if (copy_from_user(&req, arg, sizeof(req)))

net/bluetooth/hci_conn.c

2822

if (copy_from_user(&req, arg, sizeof(req)))

net/bluetooth/hci_conn.c

2848

if (copy_from_user(&req, arg, sizeof(req)))

net/bluetooth/hci_core.c

331

if (copy_from_user(&ir, ptr, sizeof(ir)))

net/bluetooth/hci_core.c

647

if (copy_from_user(&dr, arg, sizeof(dr)))

net/bluetooth/hci_core.c

800

if (copy_from_user(&di, arg, sizeof(di)))

net/bluetooth/hci_debugfs.c

1168

if (copy_from_user(buf, user_buf, buf_size))

net/bluetooth/hci_sock.c

971

if (copy_from_user(&bdaddr, arg, sizeof(bdaddr)))

net/bluetooth/hci_sock.c

988

if (copy_from_user(&bdaddr, arg, sizeof(bdaddr)))

net/bluetooth/hidp/sock.c

110

if (copy_from_user(&ci, argp, sizeof(ci)))

net/bluetooth/hidp/sock.c

178

if (copy_from_user(&ca32, (void __user *) arg, sizeof(ca32)))

net/bluetooth/hidp/sock.c

64

if (copy_from_user(&ca, argp, sizeof(ca)))

net/bluetooth/hidp/sock.c

91

if (copy_from_user(&cd, argp, sizeof(cd)))

net/bluetooth/hidp/sock.c

97

if (copy_from_user(&cl, argp, sizeof(cl)))

net/bluetooth/rfcomm/tty.c

394

if (copy_from_user(&req, arg, sizeof(req)))

net/bluetooth/rfcomm/tty.c

439

if (copy_from_user(&req, arg, sizeof(req)))

net/bluetooth/rfcomm/tty.c

550

if (copy_from_user(&di, arg, sizeof(di)))

net/bpf/bpf_dummy_struct_ops.c

44

if (copy_from_user(args->args, ctx_in, size_in))

net/bpf/bpf_dummy_struct_ops.c

49

if (u_state && copy_from_user(&args->state, u_state,

net/bpf/test_run.c

1149

if (copy_from_user(page_address(page), data_in + copied,

net/bpf/test_run.c

1448

if (copy_from_user(page_address(page), data_in + size,

net/bpf/test_run.c

677

if (copy_from_user(data + headroom, data_in, user_size)) {

net/bpf/test_run.c

877

if (copy_from_user(data, data_in, size)) {

net/bridge/br_ioctl.c

119

ret = copy_from_user(cargs, data, nr_args * sizeof(*cargs));

net/bridge/br_ioctl.c

128

ret = copy_from_user(args, data, nr_args * sizeof(*args));

net/bridge/br_ioctl.c

382

if (copy_from_user(buf, argp, IFNAMSIZ))

net/bridge/br_ioctl.c

435

if (copy_from_user(buf, uarg, IFNAMSIZ)) {

net/bridge/netfilter/ebtables.c

1150

if (copy_from_user(

net/bridge/netfilter/ebtables.c

1408

if (copy_from_user(tmp, counters,

net/bridge/netfilter/ebtables.c

1574

if (copy_from_user(&tmp, user, sizeof(tmp)))

net/bridge/netfilter/ebtables.c

1882

if (copy_from_user(&tmp, user, sizeof(tmp)))

net/bridge/netfilter/ebtables.c

2323

if (copy_from_user(

net/bridge/netfilter/ebtables.c

2426

if (copy_from_user(&tmp, user, sizeof(tmp)))

net/bridge/netfilter/ebtables.c

2507

if (copy_from_user(&tmp, user, sizeof(tmp)))

net/compat.c

184

if (copy_from_user(&cmsg, ucmsg, sizeof(cmsg)))

net/compat.c

195

if (copy_from_user(CMSG_DATA(kcmsg),

net/compat.c

435

if (copy_from_user(a, args, len))

net/compat.c

90

if (copy_from_user(&msg, umsg, sizeof(*umsg)))

net/core/dev_ioctl.c

399

if (copy_from_user(&cfg, ifr->ifr_data, sizeof(cfg)))

net/core/dev_ioctl.c

51

if (copy_from_user(&ifc32, uifc, sizeof(struct compat_ifconf)))

net/core/dev_ioctl.c

60

if (copy_from_user(&ifc, uifc, sizeof(struct ifconf)))

net/core/filter.c

1441

if (copy_from_user(fp->insns, fprog->filter, fsize)) {

net/core/filter.c

1519

if (copy_from_user(prog->insns, fprog->filter, fsize)) {

net/core/pktgen.c

1019

if (copy_from_user(name, &user_buffer[i], len))

net/core/pktgen.c

1332

if (copy_from_user(f, &user_buffer[i], len))

net/core/pktgen.c

1372

if (copy_from_user(f, &user_buffer[i], len))

net/core/pktgen.c

1420

if (copy_from_user(buf, &user_buffer[i], len))

net/core/pktgen.c

1440

if (copy_from_user(buf, &user_buffer[i], len))

net/core/pktgen.c

1462

if (copy_from_user(buf, &user_buffer[i], len))

net/core/pktgen.c

1485

if (copy_from_user(buf, &user_buffer[i], len))

net/core/pktgen.c

1507

if (copy_from_user(buf, &user_buffer[i], len))

net/core/pktgen.c

1528

if (copy_from_user(buf, &user_buffer[i], len))

net/core/pktgen.c

1549

if (copy_from_user(buf, &user_buffer[i], len))

net/core/pktgen.c

1569

if (copy_from_user(buf, &user_buffer[i], len))

net/core/pktgen.c

1590

if (copy_from_user(valstr, &user_buffer[i], len))

net/core/pktgen.c

1608

if (copy_from_user(valstr, &user_buffer[i], len))

net/core/pktgen.c

1945

if (copy_from_user(name, &user_buffer[i], len))

net/core/pktgen.c

1977

if (copy_from_user(f, &user_buffer[i], len))

net/core/pktgen.c

533

if (copy_from_user(data, buf, max))

net/core/sock.c

4496

if (copy_from_user(karg, arg, size))

net/ethtool/ioctl.c

1293

if (copy_from_user(indir, useraddr, array_size(size, sizeof(indir[0]))))

net/ethtool/ioctl.c

130

if (copy_from_user(&cmd, useraddr, sizeof(cmd)))

net/ethtool/ioctl.c

1328

if (copy_from_user(&user_size,

net/ethtool/ioctl.c

137

if (copy_from_user(features, useraddr, sizeof(features)))

net/ethtool/ioctl.c

1381

if (copy_from_user(&user_size,

net/ethtool/ioctl.c

1455

if (copy_from_user(&rxfh, useraddr, sizeof(rxfh)))

net/ethtool/ioctl.c

1565

if (copy_from_user(&rxfh, useraddr, sizeof(rxfh)))

net/ethtool/ioctl.c

1652

if (copy_from_user(rxfh_dev.key,

net/ethtool/ioctl.c

1787

if (copy_from_user(&regs, useraddr, sizeof(regs)))

net/ethtool/ioctl.c

1830

if (copy_from_user(&reset, useraddr, sizeof(reset)))

net/ethtool/ioctl.c

1870

if (copy_from_user(&wol, useraddr, sizeof(wol)))

net/ethtool/ioctl.c

1955

if (copy_from_user(&eee, useraddr, sizeof(eee)))

net/ethtool/ioctl.c

1998

if (copy_from_user(&eeprom, useraddr, sizeof(eeprom)))

net/ethtool/ioctl.c

2067

if (copy_from_user(&eeprom, useraddr, sizeof(eeprom)))

net/ethtool/ioctl.c

2086

if (copy_from_user(data, userbuf, eeprom.len)) {

net/ethtool/ioctl.c

2192

if (copy_from_user(&coalesce, useraddr, sizeof(coalesce)))

net/ethtool/ioctl.c

2230

if (copy_from_user(&ringparam, useraddr, sizeof(ringparam)))

net/ethtool/ioctl.c

2274

if (copy_from_user(&channels, useraddr, sizeof(channels)))

net/ethtool/ioctl.c

2341

if (copy_from_user(&pauseparam, useraddr, sizeof(pauseparam)))

net/ethtool/ioctl.c

2365

if (copy_from_user(&test, useraddr, sizeof(test)))

net/ethtool/ioctl.c

2396

if (copy_from_user(&gstrings, useraddr, sizeof(gstrings)))

net/ethtool/ioctl.c

2469

if (copy_from_user(&id, useraddr, sizeof(id)))

net/ethtool/ioctl.c

2536

if (copy_from_user(&stats, useraddr, sizeof(stats)))

net/ethtool/ioctl.c

2641

if (copy_from_user(&stats, useraddr, sizeof(stats)))

net/ethtool/ioctl.c

2673

if (copy_from_user(&epaddr, useraddr, sizeof(epaddr)))

net/ethtool/ioctl.c

271

if (copy_from_user(&edata, useraddr, sizeof(edata)))

net/ethtool/ioctl.c

2711

if (copy_from_user(&edata, useraddr, sizeof(edata)))

net/ethtool/ioctl.c

2726

if (copy_from_user(&edata, useraddr, sizeof(edata)))

net/ethtool/ioctl.c

2751

if (copy_from_user(&dump, useraddr, sizeof(dump)))

net/ethtool/ioctl.c

2767

if (copy_from_user(&dump, useraddr, sizeof(dump)))

net/ethtool/ioctl.c

2791

if (copy_from_user(&dump, useraddr, sizeof(dump)))

net/ethtool/ioctl.c

2891

if (copy_from_user(&modinfo, useraddr, sizeof(modinfo)))

net/ethtool/ioctl.c

2971

if (copy_from_user(&tuna, useraddr, sizeof(tuna)))

net/ethtool/ioctl.c

3002

if (copy_from_user(&tuna, useraddr, sizeof(tuna)))

net/ethtool/ioctl.c

3080

if (copy_from_user(&coalesce, useraddr, sizeof(coalesce))) {

net/ethtool/ioctl.c

3115

if (copy_from_user(&per_queue_opt, useraddr, sizeof(per_queue_opt)))

net/ethtool/ioctl.c

3170

if (copy_from_user(&tuna, useraddr, sizeof(tuna)))

net/ethtool/ioctl.c

3209

if (copy_from_user(&tuna, useraddr, sizeof(tuna)))

net/ethtool/ioctl.c

3257

if (copy_from_user(&fecparam, useraddr, sizeof(fecparam)))

net/ethtool/ioctl.c

3282

if (copy_from_user(&sub_cmd, useraddr + sizeof(ethcmd), sizeof(sub_cmd)))

net/ethtool/ioctl.c

3652

if (copy_from_user(&ethcmd, useraddr, sizeof(ethcmd)))

net/ethtool/ioctl.c

3661

if (copy_from_user(&state->efl, useraddr, sizeof(state->efl))) {

net/ethtool/ioctl.c

478

if (copy_from_user(&link_usettings, from, sizeof(link_usettings)))

net/ethtool/ioctl.c

552

if (copy_from_user(&link_ksettings.base, useraddr,

net/ethtool/ioctl.c

610

if (copy_from_user(&link_ksettings.base, useraddr,

net/ethtool/ioctl.c

716

if (copy_from_user(&cmd, useraddr, sizeof(cmd)))

net/ethtool/ioctl.c

803

if (copy_from_user(&info, useraddr, sizeof(info)))

net/ethtool/ioctl.c

874

if (copy_from_user(&crxnfc, useraddr, min(size, sizeof(crxnfc))))

net/ethtool/ioctl.c

903

if (copy_from_user(rxnfc, useraddr, size))

net/ipv4/af_inet.c

1029

if (copy_from_user(&rt.rt_dst, &ur->rt_dst,

net/ipv4/af_inet.c

977

if (copy_from_user(&rt, p, sizeof(struct rtentry)))

net/ipv4/arp.c

1278

err = copy_from_user(&r, arg, sizeof(struct arpreq));

net/ipv4/fib_frontend.c

542

if (copy_from_user(devname, rt->rt_dev, IFNAMSIZ-1))

net/ipv4/ip_tunnel.c

1005

if (copy_from_user(&p, data, sizeof(p)))

net/ipv4/ipmr.c

1765

if (copy_from_user(&vr, arg, sizeof(vr)))

net/ipv4/ipmr.c

1786

if (copy_from_user(&sr, arg, sizeof(sr)))

net/ipv4/netfilter/arp_tables.c

1392

if (copy_from_user(&get, uptr, sizeof(get)) != 0)

net/ipv4/netfilter/arp_tables.c

1484

if (copy_from_user(&rev, user, sizeof(rev)) != 0) {

net/ipv4/netfilter/arp_tables.c

810

if (copy_from_user(name, user, sizeof(name)) != 0)

net/ipv4/netfilter/arp_tables.c

865

if (copy_from_user(&get, uptr, sizeof(get)) != 0)

net/ipv4/netfilter/ip_tables.c

1010

if (copy_from_user(&get, uptr, sizeof(get)) != 0)

net/ipv4/netfilter/ip_tables.c

1586

if (copy_from_user(&get, uptr, sizeof(get)) != 0)

net/ipv4/netfilter/ip_tables.c

1681

if (copy_from_user(&rev, user, sizeof(rev)) != 0) {

net/ipv4/netfilter/ip_tables.c

953

if (copy_from_user(name, user, sizeof(name)) != 0)

net/ipv6/addrconf.c

3005

if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))

net/ipv6/addrconf.c

3173

if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))

net/ipv6/addrconf.c

3200

if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))

net/ipv6/af_inet6.c

559

if (copy_from_user(&rtmsg, argp, sizeof(rtmsg)))

net/ipv6/af_inet6.c

600

if (copy_from_user(&rt.rtmsg_dst, &ur->rtmsg_dst,

net/ipv6/ip6_gre.c

1270

if (copy_from_user(&p, data, sizeof(p))) {

net/ipv6/ip6_gre.c

1292

if (copy_from_user(&p, data, sizeof(p)))

net/ipv6/ip6_gre.c

1342

if (copy_from_user(&p, data, sizeof(p)))

net/ipv6/ip6_tunnel.c

1668

if (copy_from_user(&p, data, sizeof(p))) {

net/ipv6/ip6_tunnel.c

1689

if (copy_from_user(&p, data, sizeof(p)))

net/ipv6/ip6_tunnel.c

1727

if (copy_from_user(&p, data, sizeof(p)))

net/ipv6/ip6_vti.c

813

if (copy_from_user(&p, data, sizeof(p))) {

net/ipv6/ip6_vti.c

834

if (copy_from_user(&p, data, sizeof(p)))

net/ipv6/ip6_vti.c

875

if (copy_from_user(&p, data, sizeof(p)))

net/ipv6/ip6mr.c

2026

if (copy_from_user(&vr, arg, sizeof(vr)))

net/ipv6/ip6mr.c

2047

if (copy_from_user(&sr, arg, sizeof(sr)))

net/ipv6/netfilter/ip6_tables.c

1026

if (copy_from_user(&get, uptr, sizeof(get)) != 0)

net/ipv6/netfilter/ip6_tables.c

1595

if (copy_from_user(&get, uptr, sizeof(get)) != 0)

net/ipv6/netfilter/ip6_tables.c

1690

if (copy_from_user(&rev, user, sizeof(rev)) != 0) {

net/ipv6/netfilter/ip6_tables.c

969

if (copy_from_user(name, user, sizeof(name)) != 0)

net/ipv6/sit.c

1229

if (copy_from_user(&ip6rd, data, sizeof(ip6rd)))

net/ipv6/sit.c

317

if (copy_from_user(&kprl, a, sizeof(kprl)))

net/ipv6/sit.c

470

if (copy_from_user(&prl, data, sizeof(prl)))

net/kcm/kcmsock.c

1559

if (copy_from_user(&info, (void __user *)arg, sizeof(info)))

net/kcm/kcmsock.c

1569

if (copy_from_user(&info, (void __user *)arg, sizeof(info)))

net/l2tp/l2tp_ppp.c

1108

if (copy_from_user(&stats, (void __user *)arg,

net/mac80211/debugfs.c

124

if (copy_from_user(buf, user_buf, count))

net/mac80211/debugfs.c

179

if (copy_from_user(buf, user_buf, count))

net/mac80211/debugfs.c

268

if (copy_from_user(buf, user_buf, count))

net/mac80211/debugfs.c

511

if (copy_from_user(buf, user_buf, count))

net/mac80211/debugfs_sta.c

286

if (copy_from_user(buf, userbuf, count))

net/mctp/af_mctp.c

451

rc = copy_from_user(ptr, (void __user *)arg, size);

net/mptcp/sockopt.c

1100

if (copy_from_user(sfd, optval, copylen))

net/mptcp/sockopt.c

1279

if (copy_from_user(mfi, optval, MIN_FULL_INFO_OPTLEN_SIZE))

net/netfilter/ipset/ip_set_core.c

2267

if (copy_from_user(data, user, *len) != 0) {

net/netfilter/ipvs/ip_vs_ctl.c

3755

if (copy_from_user(arg, user, copylen) != 0)

net/netfilter/xt_recent.c

574

if (copy_from_user(buf, input, size) != 0)

net/rds/rdma.c

576

if (copy_from_user(vec, local_vec, args->nr_local *

net/rfkill/core.c

1302

if (copy_from_user(&ev, buf, count))

net/sctp/socket.c

1403

if (copy_from_user(&param32, optval, sizeof(param32)))

net/sctp/socket.c

1414

if (copy_from_user(&param, optval, sizeof(param)))

net/sctp/socket.c

5502

if (copy_from_user(&status, optval, len)) {

net/sctp/socket.c

5580

if (copy_from_user(&pinfo, optval, len)) {

net/sctp/socket.c

5791

if (copy_from_user(&peeloff, optval, len))

net/sctp/socket.c

5825

if (copy_from_user(&peeloff, optval, len))

net/sctp/socket.c

5999

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

6136

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

6144

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

6229

if (copy_from_user(&getaddrs, optval, sizeof(struct sctp_getaddrs)))

net/sctp/socket.c

6329

if (copy_from_user(&getaddrs, optval, sizeof(struct sctp_getaddrs)))

net/sctp/socket.c

6428

if (copy_from_user(&prim, optval, len))

net/sctp/socket.c

6510

if (copy_from_user(&info, optval, len))

net/sctp/socket.c

6556

if (copy_from_user(&info, optval, len))

net/sctp/socket.c

6634

if (copy_from_user(&rtoinfo, optval, len))

net/sctp/socket.c

6692

if (copy_from_user(&assocparams, optval, len))

net/sctp/socket.c

6780

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

6841

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

6936

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

7007

if (copy_from_user(&val, optval, len))

net/sctp/socket.c

7045

if (copy_from_user(&val, optval, sizeof(val)))

net/sctp/socket.c

7090

if (copy_from_user(&val, optval, sizeof(val)))

net/sctp/socket.c

7251

if (copy_from_user(&val, optval, len))

net/sctp/socket.c

7311

if (copy_from_user(&sas, optval, len))

net/sctp/socket.c

7409

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

7448

if (copy_from_user(&info, optval, len))

net/sctp/socket.c

7493

if (copy_from_user(&params, optval, len)) {

net/sctp/socket.c

7553

if (copy_from_user(&params, optval, len)) {

net/sctp/socket.c

7617

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

7656

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

7695

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

7734

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

7776

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

7832

if (copy_from_user(&param, optval, len))

net/sctp/socket.c

7870

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

7909

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

7948

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

7987

if (copy_from_user(&params, optval, len))

net/sctp/socket.c

8024

if (copy_from_user(&encap, optval, len))

net/sctp/socket.c

8084

if (copy_from_user(&params, optval, len))

net/socket.c

255

if (copy_from_user(kaddr, uaddr, ulen))

net/socket.c

2614

if (copy_from_user(&msg, umsg, sizeof(*umsg)))

net/socket.c

2661

if (copy_from_user(ctl_buf, msg_sys->msg_control_user, ctl_len))

net/socket.c

3189

if (copy_from_user(a, args, len))

net/socket.c

3433

if (copy_from_user(ifr32, arg, sizeof(*ifr32)))

net/socket.c

3442

if (copy_from_user(ifr, arg, sizeof(*ifr)))

net/sunrpc/auth_gss/auth_gss.c

745

if (copy_from_user(buf, src, mlen))

net/sunrpc/auth_gss/svcauth_gss.c

1412

if (copy_from_user(tbuf, buf, count))

net/sunrpc/cache.c

1516

if (copy_from_user(tbuf, buf, count))

net/sunrpc/cache.c

920

if (copy_from_user(kaddr, buf, count))

net/tipc/socket.c

3312

if (copy_from_user(&lnr, argp, sizeof(lnr)))

net/tipc/socket.c

3323

if (copy_from_user(&nr, argp, sizeof(nr)))

net/wireless/debugfs.c

292

if (copy_from_user(buf, userbuf, count))

net/wireless/wext-core.c

1069

if (copy_from_user(&iwr, arg, sizeof(iwr)))

net/wireless/wext-core.c

1129

if (copy_from_user(&iwr, argp, sizeof(struct iwreq)))

net/wireless/wext-core.c

765

err = copy_from_user(essid, iwp->pointer, len);

net/wireless/wext-core.c

831

if (copy_from_user(extra, iwp->pointer,

net/wireless/wext-priv.c

160

if (copy_from_user(extra, iwp->pointer, extra_size)) {

net/x25/af_x25.c

1447

if (copy_from_user(&facilities, argp, sizeof(facilities)))

net/x25/af_x25.c

1500

if (copy_from_user(&dtefacs, argp, sizeof(dtefacs)))

net/x25/af_x25.c

1531

if (copy_from_user(&calluserdata, argp, sizeof(calluserdata)))

net/x25/af_x25.c

1554

if (copy_from_user(&causediag, argp, sizeof(causediag)))

net/x25/af_x25.c

1571

if (copy_from_user(&sub_addr, argp,

net/x25/af_x25.c

1635

if (copy_from_user(&x25_subscr, x25_subscr32, sizeof(*x25_subscr32)))

net/x25/x25_link.c

364

if (copy_from_user(&x25_subscr, arg, sizeof(x25_subscr)))

net/x25/x25_route.c

170

if (copy_from_user(&rt, arg, sizeof(rt)))

rust/helpers/uaccess.c

8

return copy_from_user(to, from, n);

samples/qmi/qmi_sample_client.c

389

if (copy_from_user(req->data, user_buf, req->data_len)) {

samples/vfio-mdev/mbochs.c

1203

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mbochs.c

1225

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mbochs.c

1249

if (copy_from_user(&plane, (void __user *)arg, minsz))

samples/vfio-mdev/mbochs.c

680

if (copy_from_user(&val, buf, sizeof(val)))

samples/vfio-mdev/mbochs.c

692

if (copy_from_user(&val, buf, sizeof(val)))

samples/vfio-mdev/mbochs.c

704

if (copy_from_user(&val, buf, sizeof(val)))

samples/vfio-mdev/mdpy.c

376

if (copy_from_user(&val, buf, sizeof(val)))

samples/vfio-mdev/mdpy.c

388

if (copy_from_user(&val, buf, sizeof(val)))

samples/vfio-mdev/mdpy.c

400

if (copy_from_user(&val, buf, sizeof(val)))

samples/vfio-mdev/mdpy.c

533

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mdpy.c

557

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mdpy.c

581

if (copy_from_user(&plane, (void __user *)arg, minsz))

samples/vfio-mdev/mtty.c

1044

if (copy_from_user((void *)&migf->data + *pos, buf, len)) {

samples/vfio-mdev/mtty.c

1489

if (copy_from_user(&val, buf, sizeof(val)))

samples/vfio-mdev/mtty.c

1501

if (copy_from_user(&val, buf, sizeof(val)))

samples/vfio-mdev/mtty.c

1513

if (copy_from_user(&val, buf, sizeof(val)))

samples/vfio-mdev/mtty.c

1802

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mtty.c

1826

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mtty.c

1850

if (copy_from_user(&hdr, (void __user *)arg, minsz))

security/apparmor/apparmorfs.c

476

if (copy_from_user(data->data, userbuf, copy_size)) {

security/apparmor/apparmorfs.c

957

if (copy_from_user(t->data, buf, size)) {

security/integrity/ima/ima_fs.c

353

if (copy_from_user(req, buf, datalen) != 0)

security/keys/compat_dh.c

26

if (copy_from_user(&compat_kdfcopy, kdf, sizeof(compat_kdfcopy)) != 0)

security/keys/dh.c

144

if (copy_from_user(&pcopy, params, sizeof(pcopy)) != 0) {

security/keys/dh.c

271

if (copy_from_user(outbuf + req->dst_len, kdfcopy->otherinfo,

security/keys/dh.c

309

if (copy_from_user(&kdfcopy, kdf, sizeof(kdfcopy)) != 0)

security/keys/keyctl.c

121

if (copy_from_user(payload, _payload, plen) != 0)

security/keys/keyctl.c

346

if (copy_from_user(payload, _payload, plen) != 0)

security/keys/keyctl_pkey.c

125

if (copy_from_user(&uparams, _params, sizeof(uparams)) != 0)

security/landlock/syscalls.c

356

res = copy_from_user(&path_beneath_attr, rule_attr,

security/landlock/syscalls.c

398

res = copy_from_user(&net_port_attr, rule_attr, sizeof(net_port_attr));

security/loadpin/loadpin.c

383

if (copy_from_user(&fd, uarg, sizeof(fd)))

security/security.c

3755

if (copy_from_user(&lctx, uctx, sizeof(lctx)))

security/selinux/selinuxfs.c

562

if (copy_from_user(data, buf, count) != 0) {

security/smack/smackfs.c

1610

if (copy_from_user(temp, buf, count) != 0)

security/smack/smackfs.c

1676

if (copy_from_user(temp, buf, count) != 0)

security/smack/smackfs.c

1754

if (copy_from_user(temp, buf, count) != 0)

security/smack/smackfs.c

2191

if (copy_from_user(temp, buf, count) != 0)

security/smack/smackfs.c

2850

if (copy_from_user(temp, buf, count) != 0)

sound/core/compress_offload.c

1238

retval = copy_from_user(&seqno, (__u64 __user *)arg, sizeof(seqno));

sound/core/compress_offload.c

309

if (copy_from_user(dstn, buf, count))

sound/core/compress_offload.c

313

if (copy_from_user(dstn, buf, copy))

sound/core/compress_offload.c

315

if (copy_from_user(runtime->buffer, buf + copy, count - copy))

sound/core/compress_offload.c

722

if (copy_from_user(&metadata, (void __user *)arg, sizeof(metadata)))

sound/core/compress_offload.c

747

if (copy_from_user(&metadata, (void __user *)arg, sizeof(metadata)))

sound/core/control.c

1186

if (copy_from_user(&info, _info, sizeof(info)))

sound/core/control.c

1427

if (copy_from_user(&id, _id, sizeof(id)))

sound/core/control.c

1448

if (copy_from_user(&id, _id, sizeof(id)))

sound/core/control.c

1825

if (copy_from_user(&info, _info, sizeof(info)))

sound/core/control.c

1843

if (copy_from_user(&id, _id, sizeof(id)))

sound/core/control.c

1939

if (copy_from_user(&header, buf, sizeof(header)))

sound/core/control.c

935

if (copy_from_user(&list, _list, sizeof(list)))

sound/core/control_compat.c

219

if (copy_from_user(&data->id, &data32->id, sizeof(data->id)))

sound/core/control_compat.c

244

if (copy_from_user(data->value.bytes.data, valuep, size))

sound/core/control_compat.c

30

if (copy_from_user(&data, data32, 4 * sizeof(u32)))

sound/core/control_compat.c

389

if (copy_from_user(&data->id, &data32->id, sizeof(data->id)) ||

sound/core/control_compat.c

390

copy_from_user(&data->type, &data32->type, 3 * sizeof(u32)))

sound/core/control_compat.c

403

if (copy_from_user(&data->value.integer64,

sound/core/control_compat.c

409

if (copy_from_user(&data->value.enumerated,

sound/core/control_compat.c

91

if (copy_from_user(&data->id, &data32->id, sizeof(data->id)))

sound/core/hwdep.c

230

if (copy_from_user(&info, _info, sizeof(info)))

sound/core/hwdep_compat.c

25

if (copy_from_user(&info, src, 4 + 64) ||

sound/core/info.c

326

if (copy_from_user(buf->buffer + pos, buffer, count))

sound/core/oss/pcm_oss.c

1375

if (copy_from_user(runtime->oss.buffer, (const char __force __user *)buf, bytes))

sound/core/oss/pcm_oss.c

1422

if (copy_from_user(runtime->oss.buffer + runtime->oss.buffer_used, buf, tmp)) {

sound/core/pcm_compat.c

251

if (copy_from_user(data, data32, sizeof(*data32)))

sound/core/pcm_compat.c

495

if (copy_from_user(sync_cp, &(_sync_ptr->c.control), sizeof(*sync_cp)))

sound/core/pcm_native.c

1038

if (copy_from_user(&params, _params, sizeof(params)))

sound/core/pcm_native.c

1230

if (copy_from_user(&info, _info, sizeof(info)))

sound/core/pcm_native.c

3329

if (copy_from_user(&xferi, _xferi, sizeof(xferi)))

sound/core/pcm_native.c

3354

if (copy_from_user(&xfern, _xfern, sizeof(xfern)))

sound/core/rawmidi.c

1560

if (copy_from_user(runtime->buffer + appl_ptr,

sound/core/rawmidi.c

823

if (copy_from_user(&status32, argp,

sound/core/rawmidi.c

864

if (copy_from_user(&status, argp, sizeof(struct snd_rawmidi_status64)))

sound/core/rawmidi.c

926

if (copy_from_user(&params, argp, sizeof(struct snd_rawmidi_params)))

sound/core/seq/oss/seq_oss_ioctl.c

22

if (copy_from_user(&info, arg, sizeof(info)))

sound/core/seq/oss/seq_oss_ioctl.c

35

if (copy_from_user(&info, arg, sizeof(info)))

sound/core/seq/oss/seq_oss_ioctl.c

49

if (copy_from_user(ev, arg, 8))

sound/core/seq/oss/seq_oss_rw.c

120

if (copy_from_user(rec.c + SHORT_EVENT_SIZE,

sound/core/seq/oss/seq_oss_rw.c

94

if (copy_from_user(&rec, buf, SHORT_EVENT_SIZE)) {

sound/core/seq/seq_clientmgr.c

1024

if (copy_from_user(ev, buf, len)) {

sound/core/seq/seq_clientmgr.c

1032

if (copy_from_user((char *)ev + len, buf + len,

sound/core/seq/seq_clientmgr.c

2275

if (copy_from_user(&buf, (const void __user *)arg, size))

sound/core/seq/seq_compat.c

41

if (copy_from_user(data, data32, sizeof(*data32)) ||

sound/core/seq/seq_memory.c

163

if (copy_from_user(buf,

sound/core/seq/seq_memory.c

404

if (copy_from_user(&tmp->event, (char __force __user *)buf, size)) {

sound/core/seq/seq_memory.c

90

if (copy_from_user(buf, curptr, size))

sound/core/timer.c

1696

if (copy_from_user(&id, _tid, sizeof(id)))

sound/core/timer.c

1764

if (copy_from_user(&gparams, _gparams, sizeof(gparams)))

sound/core/timer.c

1776

if (copy_from_user(&gstatus, _gstatus, sizeof(gstatus)))

sound/core/timer.c

1816

if (copy_from_user(&tselect, _tselect, sizeof(tselect))) {

sound/core/timer.c

1891

if (copy_from_user(&params, _params, sizeof(params)))

sound/core/timer_compat.c

39

if (copy_from_user(&gparams.tid, &user->tid, sizeof(gparams.tid)) ||

sound/drivers/opl3/opl3_oss.c

199

if (copy_from_user(&sbi, buf, sizeof(sbi)))

sound/drivers/opl3/opl3_synth.c

116

if (copy_from_user(&note, argp, sizeof(struct snd_dm_fm_note)))

sound/drivers/opl3/opl3_synth.c

127

if (copy_from_user(&voice, argp, sizeof(struct snd_dm_fm_voice)))

sound/drivers/opl3/opl3_synth.c

138

if (copy_from_user(&params, argp, sizeof(struct snd_dm_fm_params)))

sound/drivers/opl3/opl3_synth.c

192

if (copy_from_user(&inst, buf, sizeof(inst)))

sound/drivers/opl4/opl4_proc.c

66

if (copy_from_user(buf, _buf, count)) {

sound/drivers/pcmtest.c

662

if (copy_from_user(patt_buf->buf + *off, u_buff, to_write))

sound/isa/gus/gus_dram.c

21

if (copy_from_user(buffer, _buffer, size1))

sound/isa/sb/emu8000.c

646

if (len < (long)sizeof(rec) || copy_from_user(&rec, buf, sizeof(rec)))

sound/isa/sb/emu8000.c

774

if (len < (long)sizeof(rec) || copy_from_user(&rec, buf, sizeof(rec)))

sound/isa/sb/sb16_csp.c

230

if (copy_from_user(&start_info, (void __user *) arg, sizeof(start_info)))

sound/isa/sb/sb16_csp.c

306

if (copy_from_user(&info, mcode, sizeof(info)))

sound/isa/sb/sb16_csp.c

310

if (copy_from_user(&file_h, data_ptr, sizeof(file_h)))

sound/isa/sb/sb16_csp.c

320

if (copy_from_user(&item_type, data_ptr, sizeof(item_type)))

sound/isa/sb/sb16_csp.c

329

if (copy_from_user(&item_h, data_ptr, sizeof(item_h)))

sound/isa/sb/sb16_csp.c

335

if (copy_from_user(&item_type, data_ptr, sizeof(item_type)))

sound/isa/sb/sb16_csp.c

339

if (copy_from_user(&funcdesc_h, data_ptr + sizeof(item_type), sizeof(funcdesc_h)))

sound/isa/sb/sb16_csp.c

360

if (copy_from_user(&code_h, data_ptr, sizeof(code_h)))

sound/isa/sb/sb16_csp.c

374

if (copy_from_user(&code_h, data_ptr, sizeof(code_h)))

sound/isa/wavefront/wavefront_fx.c

173

if (copy_from_user (&r, (void __user *)arg, sizeof (wavefront_fx_info)))

sound/isa/wavefront/wavefront_synth.c

1388

if (copy_from_user (header, addr, sizeof(wavefront_patch_info) -

sound/isa/wavefront/wavefront_synth.c

1406

if (copy_from_user (&header->hdr.s, header->hdrptr,

sound/isa/wavefront/wavefront_synth.c

1417

if (copy_from_user (&header->hdr.s, header->hdrptr,

sound/isa/wavefront/wavefront_synth.c

1428

if (copy_from_user (&header->hdr.a, header->hdrptr,

sound/isa/wavefront/wavefront_synth.c

1438

if (copy_from_user (&header->hdr.d, header->hdrptr,

sound/isa/wavefront/wavefront_synth.c

1448

if (copy_from_user (&header->hdr.p, header->hdrptr,

sound/isa/wavefront/wavefront_synth.c

1458

if (copy_from_user (&header->hdr.pr, header->hdrptr,

sound/oss/dmasound/dmasound_atari.c

191

if (copy_from_user(p, userPtr, count))

sound/oss/dmasound/dmasound_atari.c

257

if (copy_from_user(p, userPtr, count))

sound/oss/dmasound/dmasound_paula.c

166

if (copy_from_user(p, userPtr, count))

sound/oss/dmasound/dmasound_q40.c

110

if (copy_from_user(p,userPtr,count))

sound/oss/dmasound/dmasound_q40.c

71

if (copy_from_user(p,userPtr,count))

sound/oss/dmasound/dmasound_q40.c

91

if (copy_from_user(p,userPtr,count))

sound/pci/asihpi/hpioctl.c

134

uncopied_bytes = copy_from_user(hm, puhm, msg_size);

sound/pci/asihpi/hpioctl.c

257

copy_from_user(pa->p_buffer, ptr, size);

sound/pci/emu10k1/emufx.c

687

else if (copy_from_user(data, _tlv, sizeof(data)))

sound/pci/emu10k1/emufx.c

697

} else if (copy_from_user(tlv + 2, _tlv + 2, data[1])) {

sound/pci/emu10k1/emufx.c

717

else if (copy_from_user(dst, &_src[idx], sizeof(*src)))

sound/pci/emu10k1/emufx.c

726

else if (copy_from_user(dst, &_octl[idx], sizeof(*octl)))

sound/pci/emu10k1/emufx.c

756

else if (copy_from_user(ret, _id, sizeof(*ret)))

sound/pci/emu10k1/memory.c

637

if (copy_from_user(ptr, data, temp))

sound/pci/rme9652/hdsp.c

4797

if (copy_from_user(&firmware, argp, sizeof(firmware)))

sound/pci/rme9652/hdsp.c

4810

if (copy_from_user(hdsp->fw_uploaded, firmware_data,

sound/pci/rme9652/hdspm.c

6275

if (copy_from_user(&mixer, argp, sizeof(mixer)))

sound/soc/qcom/qdsp6/q6apm-dai.c

954

if (copy_from_user(dstn, buf, count))

sound/soc/qcom/qdsp6/q6apm-dai.c

958

if (copy_from_user(dstn, buf, copy))

sound/soc/qcom/qdsp6/q6apm-dai.c

960

if (copy_from_user(prtd->dma_buffer.area, buf + copy, count - copy))

sound/soc/qcom/qdsp6/q6asm-dai.c

1091

if (copy_from_user(dstn, buf, count))

sound/soc/qcom/qdsp6/q6asm-dai.c

1095

if (copy_from_user(dstn, buf, copy))

sound/soc/qcom/qdsp6/q6asm-dai.c

1097

if (copy_from_user(prtd->dma_buffer.area, buf + copy,

sound/soc/sof/compress.c

327

ret = copy_from_user(ptr, buf, count);

sound/soc/sof/compress.c

329

ret = copy_from_user(ptr, buf, n);

sound/soc/sof/compress.c

330

ret += copy_from_user(rtd->dma_area, buf + n, count - n);

sound/soc/sof/ipc3-control.c

390

if (copy_from_user(&header, tlvd, sizeof(struct snd_ctl_tlv)))

sound/soc/sof/ipc3-control.c

430

if (copy_from_user(cdata->data, tlvd->tlv, header.length)) {

sound/soc/sof/ipc4-control.c

639

if (copy_from_user(&header, tlvd, sizeof(struct snd_ctl_tlv)))

sound/soc/sof/ipc4-control.c

667

if (copy_from_user(&abi_hdr, tlvd->tlv, sizeof(abi_hdr)))

sound/soc/sof/ipc4-control.c

692

if (copy_from_user(data, tlvd->tlv, header.length)) {

sound/soc/sof/sof-client-ipc-flood-test.c

171

if (copy_from_user(string, buffer, count)) {

sound/soc/sof/sof-client-ipc-msg-injector.c

196

if (copy_from_user(&ipc4_msg->header_u64, buffer,

sound/soc/sof/sof-client-ipc-msg-injector.c

205

if (copy_from_user(ipc4_msg->data_ptr,

sound/soc/sprd/sprd-pcm-compress.c

553

if (copy_from_user(dst, buf, data_count))

sound/soc/sprd/sprd-pcm-compress.c

566

if (copy_from_user(dst, buf, avail_bytes))

sound/soc/sprd/sprd-pcm-compress.c

582

if (copy_from_user(dst, buf, data_count))

sound/soc/sprd/sprd-pcm-compress.c

589

if (copy_from_user(dst, buf, avail_bytes))

sound/soc/sprd/sprd-pcm-compress.c

592

if (copy_from_user(stream->compr_buffer.area, buf + avail_bytes,

sound/synth/emux/emux_hwdep.c

25

if (copy_from_user(&patch, arg, sizeof(patch)))

sound/synth/emux/emux_hwdep.c

57

if (copy_from_user(&info, arg, sizeof(info)))

sound/synth/emux/emux_oss.c

213

if (copy_from_user(&patch, buf, sizeof(patch)))

sound/synth/emux/soundfont.c

195

if (copy_from_user(&parm, data, sizeof(parm)))

sound/synth/emux/soundfont.c

383

if (copy_from_user(&map, data, sizeof(map)))

sound/synth/emux/soundfont.c

492

if (copy_from_user((char*)&hdr, data, sizeof(hdr)))

sound/synth/emux/soundfont.c

532

if (copy_from_user(&tmpzone.v, data, sizeof(tmpzone.v))) {

sound/synth/emux/soundfont.c

692

if (copy_from_user(&sample_info, data, sizeof(sample_info)))

sound/synth/emux/soundfont.c

952

if (copy_from_user(&patch, data, sizeof(patch)))

sound/synth/emux/soundfont.c

97

if (copy_from_user(&patch, data, sizeof(patch)))

sound/usb/fcp.c

475

if (copy_from_user(&init, arg, sizeof(init)))

sound/usb/fcp.c

560

if (copy_from_user(&cmd, arg, sizeof(cmd)))

sound/usb/fcp.c

583

if (copy_from_user(data, arg->data, cmd.req_size))

sound/usb/fcp.c

625

if (copy_from_user(&map, arg, sizeof(map)))

sound/usb/fcp.c

697

if (copy_from_user(&labels, arg, sizeof(labels)))

sound/usb/fcp.c

736

if (copy_from_user(&tlv_data[2], arg->labels, labels.labels_size)) {

sound/usb/mixer_scarlett2.c

9660

if (copy_from_user(req->data, buf, count))

sound/usb/usx2y/us122l.c

321

if (copy_from_user(&cfg, (void __user *)arg, sizeof(cfg)))

sound/virtio/virtio_kctl.c

330

if (copy_from_user(tlv, utlv, size)) {

tools/include/uapi/linux/bpf.h

6081

FN(copy_from_user, 148, ##ctx) \

virt/kvm/kvm_main.c

2373

if (copy_from_user(dirty_bitmap_buffer, log->dirty_bitmap, n))

virt/kvm/kvm_main.c

4552

if (copy_from_user(&mp_state, argp, sizeof(mp_state)))

virt/kvm/kvm_main.c

4561

if (copy_from_user(&tr, argp, sizeof(tr)))

virt/kvm/kvm_main.c

4576

if (copy_from_user(&dbg, argp, sizeof(dbg)))

virt/kvm/kvm_main.c

4589

if (copy_from_user(&kvm_sigmask, argp,

virt/kvm/kvm_main.c

4596

if (copy_from_user(&sigset, sigmask_arg->sigset,

virt/kvm/kvm_main.c

4637

if (copy_from_user(&range, argp, sizeof(range)))

virt/kvm/kvm_main.c

4675

if (copy_from_user(&kvm_sigmask, argp,

virt/kvm/kvm_main.c

4719

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

virt/kvm/kvm_main.c

5165

if (copy_from_user(&cap, argp, sizeof(cap)))

virt/kvm/kvm_main.c

5194

if (copy_from_user(&mem, argp, size))

virt/kvm/kvm_main.c

5209

if (copy_from_user(&log, argp, sizeof(log)))

virt/kvm/kvm_main.c

5219

if (copy_from_user(&log, argp, sizeof(log)))

virt/kvm/kvm_main.c

5230

if (copy_from_user(&zone, argp, sizeof(zone)))

virt/kvm/kvm_main.c

5239

if (copy_from_user(&zone, argp, sizeof(zone)))

virt/kvm/kvm_main.c

5249

if (copy_from_user(&data, argp, sizeof(data)))

virt/kvm/kvm_main.c

5258

if (copy_from_user(&data, argp, sizeof(data)))

virt/kvm/kvm_main.c

5268

if (copy_from_user(&msi, argp, sizeof(msi)))

virt/kvm/kvm_main.c

5280

if (copy_from_user(&irq_event, argp, sizeof(irq_event)))

virt/kvm/kvm_main.c

5305

if (copy_from_user(&routing, argp, sizeof(routing)))

virt/kvm/kvm_main.c

5334

if (copy_from_user(&attrs, argp, sizeof(attrs)))

virt/kvm/kvm_main.c

5345

if (copy_from_user(&cd, argp, sizeof(cd)))

virt/kvm/kvm_main.c

5373

if (copy_from_user(&guest_memfd, argp, sizeof(guest_memfd)))

virt/kvm/kvm_main.c

5432

if (copy_from_user(&compat_log, (void __user *)arg,

virt/kvm/kvm_main.c

5449

if (copy_from_user(&compat_log, (void __user *)arg,

virt/kvm/vfio.c

218

if (copy_from_user(&param, arg, sizeof(struct kvm_vfio_spapr_tce)))