arch/powerpc/platforms/pseries/reconfig.c

369

kbuf = memdup_user_nul(buf, count);

arch/s390/kernel/debug.c

1417

buffer = memdup_user_nul(user_buf, user_len);

arch/sparc/kernel/led.c

76

buf = memdup_user_nul(buffer, count);

arch/um/drivers/mconsole_kern.c

774

buf = memdup_user_nul(buffer, count);

arch/xtensa/platforms/iss/simdisk.c

241

tmp = memdup_user_nul(buf, count);

drivers/block/ublk_drv.c

5208

dev_path = memdup_user_nul(argp, header->dev_path_len);

drivers/block/zloop.c

1406

buf = memdup_user_nul(ubuf, count);

drivers/crypto/hisilicon/debugfs.c

538

cmd_buf = memdup_user_nul(buffer, count);

drivers/firmware/xilinx/zynqmp-debug.c

338

kern_buff = memdup_user_nul(ptr, len);

drivers/gpu/drm/drm_debugfs_crc.c

140

source = memdup_user_nul(ubuf, len);

drivers/gpu/drm/drm_ioctl.c

578

new_name = memdup_user_nul(user_ptr, len);

drivers/gpu/drm/drm_mipi_dbi.c

1390

buf = memdup_user_nul(ubuf, count);

drivers/gpu/drm/i915/display/intel_dp_link_training.c

1774

kbuf = memdup_user_nul(ubuf, len);

drivers/gpu/drm/i915/display/intel_dp_link_training.c

1872

kbuf = memdup_user_nul(ubuf, len);

drivers/gpu/drm/i915/display/intel_dp_test.c

566

input_buffer = memdup_user_nul(ubuf, len);

drivers/gpu/drm/i915/display/intel_link_bw.c

406

kbuf = memdup_user_nul(ubuf, len);

drivers/gpu/drm/msm/adreno/adreno_gpu.c

475

str = memdup_user_nul(u64_to_user_ptr(value), len);

drivers/gpu/drm/msm/dp/dp_debug.c

141

input_buffer = memdup_user_nul(ubuf, len);

drivers/infiniband/hw/hfi1/debugfs.c

536

buff = memdup_user_nul(buf, count);

drivers/iommu/amd/debugfs.c

153

srcid_ptr = memdup_user_nul(ubuf, cnt);

drivers/media/cec/core/cec-core.c

184

buf = memdup_user_nul(ubuf, min_t(size_t, PAGE_SIZE, count));

drivers/misc/eeprom/idt_89hpesx.c

911

buf = memdup_user_nul(ubuf, count);

drivers/misc/ibmasm/ibmasmfs.c

528

buff = memdup_user_nul(ubuff, count);

drivers/net/ethernet/brocade/bna/bnad_debugfs.c

315

kern_buf = memdup_user_nul(buf, nbytes);

drivers/net/ethernet/brocade/bna/bnad_debugfs.c

375

kern_buf = memdup_user_nul(buf, nbytes);

drivers/net/ethernet/intel/libie/fwlog.c

429

cmd_buf = memdup_user_nul(buf, count);

drivers/net/ethernet/intel/libie/fwlog.c

520

cmd_buf = memdup_user_nul(buf, count);

drivers/net/ethernet/intel/libie/fwlog.c

601

cmd_buf = memdup_user_nul(buf, count);

drivers/net/ethernet/intel/libie/fwlog.c

699

cmd_buf = memdup_user_nul(buf, count);

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

1045

cmd_buf = memdup_user_nul(buffer, count);

drivers/net/netdevsim/health.c

154

break_msg = memdup_user_nul(data, count);

drivers/net/wireless/ath/wil6210/debugfs.c

701

char *kbuf = memdup_user_nul(buf, len);

drivers/net/wireless/marvell/libertas/debugfs.c

129

buf = memdup_user_nul(user_buf, min(count, len - 1));

drivers/net/wireless/marvell/libertas/debugfs.c

282

buf = memdup_user_nul(userbuf, min(count, len - 1));

drivers/net/wireless/marvell/libertas/debugfs.c

464

buf = memdup_user_nul(userbuf, min(count, len - 1));

drivers/net/wireless/marvell/libertas/debugfs.c

483

buf = memdup_user_nul(userbuf, min(count, len - 1));

drivers/net/wireless/marvell/libertas/debugfs.c

535

buf = memdup_user_nul(userbuf, min(count, len - 1));

drivers/net/wireless/marvell/libertas/debugfs.c

555

buf = memdup_user_nul(userbuf, min(count, len - 1));

drivers/net/wireless/marvell/libertas/debugfs.c

607

buf = memdup_user_nul(userbuf, min(count, len - 1));

drivers/net/wireless/marvell/libertas/debugfs.c

626

buf = memdup_user_nul(userbuf, min(count, len - 1));

drivers/net/wireless/marvell/libertas/debugfs.c

65

buf = memdup_user_nul(user_buf, min(count, len - 1));

drivers/net/wireless/marvell/libertas/debugfs.c

867

pdata = memdup_user_nul(buf, cnt);

drivers/net/wireless/marvell/mwifiex/debugfs.c

424

buf = memdup_user_nul(ubuf, min(count, (size_t)(PAGE_SIZE - 1)));

drivers/net/wireless/marvell/mwifiex/debugfs.c

543

buf = memdup_user_nul(ubuf, min(count, (size_t)(PAGE_SIZE - 1)));

drivers/net/wireless/marvell/mwifiex/debugfs.c

614

buf = memdup_user_nul(ubuf, min(count, (size_t)(PAGE_SIZE - 1)));

drivers/net/wireless/marvell/mwifiex/debugfs.c

687

buf = memdup_user_nul(ubuf, min(count, (size_t)(PAGE_SIZE - 1)));

drivers/net/wireless/marvell/mwifiex/debugfs.c

770

buf = memdup_user_nul(ubuf, min(count, (size_t)(PAGE_SIZE - 1)));

drivers/ntb/test/ntb_tool.c

373

buf = memdup_user_nul(ubuf, size);

drivers/nvme/host/fabrics.c

1396

buf = memdup_user_nul(ubuf, count);

drivers/pci/controller/dwc/pcie-designware-debugfs.c

262

kern_buf = memdup_user_nul(buf, count);

drivers/pinctrl/pinmux.c

726

buf = memdup_user_nul(user_buf, len);

drivers/platform/x86/lenovo/thinkpad_acpi.c

935

kernbuf = memdup_user_nul(userbuf, count);

drivers/platform/x86/toshiba_acpi.c

1567

cmd = memdup_user_nul(buf, count);

drivers/s390/char/hmcdrv_dev.c

252

pdata = memdup_user_nul(ubuf, len);

drivers/s390/char/vmcp.c

162

cmd = memdup_user_nul(buff, count);

drivers/s390/cio/cio_inject.c

97

buffer = memdup_user_nul(buf, lbuf);

drivers/sbus/char/openprom.c

379

return memdup_user_nul(user, len);

drivers/scsi/bfa/bfad_debugfs.c

253

kern_buf = memdup_user_nul(buf, nbytes);

drivers/scsi/bfa/bfad_debugfs.c

320

kern_buf = memdup_user_nul(buf, nbytes);

drivers/scsi/qedf/qedf_debugfs.c

173

kern_buf = memdup_user_nul(buffer, count);

drivers/scsi/qla2xxx/qla_dfs.c

506

buf = memdup_user_nul(buffer, count);

drivers/scsi/qla2xxx/qla_dfs.c

668

buf = memdup_user_nul(buffer, count);

drivers/scsi/scsi_debug.c

1160

buf = memdup_user_nul(ubuf, count);

drivers/soc/mediatek/mtk-svs.c

798

buf = (char *)memdup_user_nul(buffer, count);

drivers/staging/greybus/camera.c

1118

kbuf = memdup_user_nul(buf, len);

fs/cachefiles/daemon.c

299

data = memdup_user_nul(_data, datalen);

fs/dlm/user.c

531

kbuf = memdup_user_nul(buf, count);

fs/fsopen.c

430

param.blob = memdup_user_nul(_value, aux);

fs/orangefs/orangefs-debugfs.c

446

buf = memdup_user_nul(ubuf, count - 1);

fs/proc/base.c

1650

kbuf = memdup_user_nul(buf, count);

fs/proc/generic.c

837

buf = memdup_user_nul(ubuf, size);

include/linux/string.h

20

extern void *memdup_user_nul(const void __user *, size_t);

kernel/fail_function.c

248

buf = memdup_user_nul(buffer, count);

kernel/trace/blktrace.c

597

msg = memdup_user_nul(buffer, count);

kernel/trace/trace_events.c

2244

buf = memdup_user_nul(ubuf, cnt);

kernel/trace/trace_events.c

2397

buf = memdup_user_nul(ubuf, cnt);

kernel/trace/trace_events_inject.c

296

buf = memdup_user_nul(ubuf, cnt);

kernel/trace/trace_events_trigger.c

401

buf = memdup_user_nul(ubuf, cnt);

kernel/trace/trace_osnoise.c

2329

buf = memdup_user_nul(ubuf, count);

kernel/user_namespace.c

951

kbuf = memdup_user_nul(buf, count);

lib/bitmap-str.c

31

buf = memdup_user_nul(ubuf, ulen);

lib/bitmap-str.c

422

buf = memdup_user_nul(ubuf, ulen);

lib/dynamic_debug.c

1017

tmpbuf = memdup_user_nul(ubuf, len);

lib/string_helpers.c

179

buf = memdup_user_nul(from, count);

mm/util.c

315

EXPORT_SYMBOL(memdup_user_nul);

security/integrity/evm/evm_secfs.c

209

xattr->name = memdup_user_nul(buf, count);

security/integrity/ima/ima_fs.c

346

data = memdup_user_nul(buf, datalen);

security/ipe/fs.c

148

copy = memdup_user_nul(data, len);

security/lockdown/lockdown.c

128

state = memdup_user_nul(buf, n);

security/safesetid/securityfs.c

156

p = buf = memdup_user_nul(ubuf, len);

security/selinux/selinuxfs.c

1283

page = memdup_user_nul(buf, count);

security/selinux/selinuxfs.c

1338

page = memdup_user_nul(buf, count);

security/selinux/selinuxfs.c

1464

page = memdup_user_nul(buf, count);

security/selinux/selinuxfs.c

151

page = memdup_user_nul(buf, count);

security/selinux/selinuxfs.c

286

page = memdup_user_nul(buf, count);

security/selinux/selinuxfs.c

709

page = memdup_user_nul(buf, count);

security/selinux/selinuxfs.c

763

req = memdup_user_nul(buf, count);

security/smack/smackfs.c

1182

data = memdup_user_nul(buf, count);

security/smack/smackfs.c

1440

data = memdup_user_nul(buf, count);

security/smack/smackfs.c

1847

data = memdup_user_nul(buf, count);

security/smack/smackfs.c

2021

data = memdup_user_nul(buf, count);

security/smack/smackfs.c

2111

data = memdup_user_nul(buf, count);

security/smack/smackfs.c

2673

data = memdup_user_nul(buf, count);

security/smack/smackfs.c

2773

data = memdup_user_nul(buf, count);

security/smack/smackfs.c

477

data = memdup_user_nul(buf, count);

security/smack/smackfs.c

863

data = memdup_user_nul(buf, count);

security/tomoyo/securityfs_if.c

49

data = memdup_user_nul(buf, count);

sound/soc/sof/ipc3-dtrace.c

203

string = memdup_user_nul(from, count);

sound/soc/sof/ipc4-mtrace.c

340

buf = memdup_user_nul(from, count);