Symbol: size_add
arch/arm64/include/asm/kvm_pkvm.h
193
return size_add(sizeof(struct cpu_sve_state),
arch/arm64/kvm/hyp/nvhe/pkvm.c
634
return size_add(sizeof(struct pkvm_hyp_vm),
arch/arm64/kvm/pkvm.c
160
hyp_vm_sz = PAGE_ALIGN(size_add(PKVM_HYP_VM_SIZE,
arch/s390/boot/startup.c
318
return size_add(vsize, vmalloc_size);
crypto/scompress.c
206
size_add(doff, dlen) > PAGE_SIZE)
crypto/scompress.c
228
size_add(soff, slen) > PAGE_SIZE)
drivers/accel/qaic/qaic_control.c
372
if (size_add(msg_hdr_len, in_trans->hdr.len) > QAIC_MANAGE_WIRE_MSG_LENGTH)
drivers/accel/qaic/qaic_control.c
581
if (size_add(msg_hdr_len, sizeof(*out_trans) + sizeof(struct wire_addr_size_pair)) >
drivers/accel/qaic/qaic_control.c
651
if (size_add(msg_hdr_len, sizeof(*out_trans)) > QAIC_MANAGE_WIRE_MSG_LENGTH)
drivers/accel/qaic/qaic_control.c
736
if (size_add(msg_hdr_len, in_trans->hdr.len) > QAIC_MANAGE_WIRE_MSG_LENGTH)
drivers/accel/qaic/qaic_control.c
790
size_add(user_len, trans_hdr->len) > user_msg->len) {
drivers/accel/qaic/qaic_control.c
990
size_add(msg_len, hdr_len) > msg_hdr_len)
drivers/accel/qaic/qaic_debugfs.c
161
if (size_add(size, sizeof(*page)) > page->size)
drivers/accel/qaic/sahara.c
418
if (size_add(data_offset, data_len) > context->firmware->size) {
drivers/crypto/intel/qat/qat_common/qat_uclo.c
1894
size_add(uobj_chunk_num, sobj_chunk_num));
drivers/cxl/pmem.c
250
if (size_add(struct_size(cmd, in_buf, cmd->in_length), 4) > buf_len)
drivers/gpu/drm/gud/gud_pipe.c
530
size_add(GUD_PROPERTIES_MAX_NUM, GUD_CONNECTOR_PROPERTIES_MAX_NUM));
drivers/gpu/drm/msm/msm_gem_submit.c
698
(size_add(submit->cmd[i].size, submit->cmd[i].offset) > obj->size / 4)) {
drivers/i2c/i2c-mux.c
236
muxc = devm_kzalloc(dev, size_add(mux_size, sizeof_priv), GFP_KERNEL);
drivers/infiniband/core/device.c
816
size_add(rdma_end_port(device), 1));
drivers/infiniband/core/sa_query.c
2417
sa_dev = kzalloc_flex(*sa_dev, port, size_add(size_sub(e, s), 1));
drivers/infiniband/core/sysfs.c
1157
size_add(attr->gid_tbl_len, attr->pkey_tbl_len));
drivers/infiniband/core/sysfs.c
858
data = kzalloc_flex(*data, attrs, size_add(stats->num_counters, 1));
drivers/infiniband/core/sysfs.c
964
data = kzalloc_flex(*data, attrs, size_add(stats->num_counters, 1));
drivers/infiniband/core/user_mad.c
1399
umad_dev = kzalloc_flex(*umad_dev, ports, size_add(size_sub(e, s), 1));
drivers/infiniband/hw/cxgb4/device.c
1115
skb = alloc_skb(size_add(gl->tot_len,
drivers/misc/eeprom/m24lr.c
405
if (size_add(offset, count) > m24lr->sss_len)
drivers/misc/eeprom/m24lr.c
420
if (size_add(offset, count) > m24lr->sss_len)
drivers/misc/mei/platform-vsc.c
346
mei_dev = kzalloc(size_add(sizeof(*mei_dev), sizeof(*hw)), GFP_KERNEL);
drivers/misc/vmw_vmci/vmci_handle_array.c
49
size_add(array->capacity, capacity_bump));
drivers/mux/core.c
101
mux_chip = kzalloc(size_add(struct_size(mux_chip, mux, controllers),
drivers/net/dsa/realtek/rtl83xx.c
152
priv = devm_kzalloc(dev, size_add(sizeof(*priv), var->chip_data_sz),
drivers/net/ethernet/chelsio/inline_crypto/chtls/chtls_main.c
349
skb = alloc_skb(size_add(gl->tot_len,
drivers/net/ethernet/google/gve/gve_main.c
290
size_add(tx_stats_num, rx_stats_num));
drivers/net/ethernet/netronome/nfp/bpf/offload.c
459
if (size_add(pkt_size, data_size) > INT_MAX ||
drivers/net/wireless/ath/ath12k/wow.c
192
if (size_add(eth_pkt_ofs, eth_pat_len) < ETH_ALEN) {
drivers/net/wireless/ath/ath12k/wow.c
197
} else if (size_add(eth_pkt_ofs, eth_pat_len) < prot_ofs) {
drivers/net/wireless/ath/ath12k/wow.c
234
if (size_add(eth_pkt_ofs, eth_pat_len) < prot_ofs) {
drivers/net/wireless/intel/ipw2x00/ipw2200.c
1221
error = kmalloc(size_add(struct_size(error, elem, elem_len),
drivers/net/wireless/marvell/mwifiex/11n_rxreorder.c
919
if (size_add(sizeof(tlv_rxba->header), tlv_len) > tlv_buf_left) {
drivers/net/wireless/marvell/mwifiex/11n_rxreorder.c
922
size_add(sizeof(tlv_rxba->header), tlv_len),
drivers/net/wireless/marvell/mwifiex/11n_rxreorder.c
935
if (size_add(sizeof(*tlv_rxba), tlv_bitmap_len) > tlv_buf_left) {
drivers/net/wireless/marvell/mwifiex/11n_rxreorder.c
938
size_add(sizeof(*tlv_rxba), tlv_bitmap_len),
drivers/nvdimm/ramdax.c
146
if (size_add(cmd->in_offset, cmd->in_length) > LABEL_AREA_SIZE)
drivers/nvdimm/ramdax.c
163
if (size_add(cmd->in_offset, cmd->in_length) > LABEL_AREA_SIZE)
drivers/pinctrl/pinctrl-zynqmp.c
616
fgroups = devm_kcalloc(dev, size_add(func->ngroups, npins),
drivers/platform/wmi/marshalling.c
56
*length = size_add(ALIGN(*length, alignment), size);
drivers/pwm/core.c
1626
alloc_size = size_add(ALIGN(struct_size(chip, pwms, npwm), PWMCHIP_ALIGN),
drivers/remoteproc/remoteproc_core.c
483
if (size_add(rsc_size, rsc->config_len) > avail) {
drivers/scsi/libfc/fc_fcp.c
506
if (size_add(offset, len) > fsp->data_len) {
drivers/soc/qcom/mdt_loader.c
38
phend = size_add(size_mul(sizeof(struct elf32_phdr), ehdr->e_phnum), ehdr->e_phoff);
drivers/soc/qcom/mdt_loader.c
46
shend = size_add(size_mul(sizeof(struct elf32_shdr), ehdr->e_shnum), ehdr->e_shoff);
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c
124
alloc_sz = size_add(alloc_sz, array_size(n_channels, sizeof(struct ieee80211_channel)));
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c
125
alloc_sz = size_add(alloc_sz, array_size(n_bitrates, sizeof(struct ieee80211_rate)));
drivers/tee/qcomtee/shm.c
56
size = size_add(size, qcomtee_msg_offset_align(u[i].b.size));
drivers/tee/qcomtee/shm.c
63
size = size_add(size, qcomtee_msg_offset_align(u[i].b.size));
drivers/tee/tee_core.c
559
if (size_add(sizeof(arg), TEE_IOCTL_PARAM_SIZE(arg.num_params)) != buf.buf_len)
drivers/tee/tee_core.c
636
if (size_add(sizeof(arg), TEE_IOCTL_PARAM_SIZE(arg.num_params)) != buf.buf_len)
drivers/tee/tee_core.c
841
if (size_add(sizeof(*uarg), TEE_IOCTL_PARAM_SIZE(num_params)) != buf.buf_len)
drivers/tee/tee_core.c
955
if (size_add(sizeof(*uarg), TEE_IOCTL_PARAM_SIZE(num_params)) > buf.buf_len)
drivers/usb/atm/usbatm.c
1022
size_add(num_rcv_urbs, num_snd_urbs));
drivers/usb/gadget/function/f_fs.c
3073
size_add(lang_count, 1));
drivers/vhost/vhost.c
562
return size_add(struct_size(vq->avail, ring, num), event);
drivers/vhost/vhost.c
571
return size_add(struct_size(vq->used, ring, num), event);
fs/nfsd/nfs4xdr.c
145
char *p = svcxdr_tmpalloc(argp, size_add(len, 1));
fs/ntfs3/index.c
619
size_add(off, sizeof(struct NTFS_DE)) > end) {
fs/ntfs3/index.c
737
if (size_add(off, sizeof(struct NTFS_DE)) > end)
fs/ntfs3/ntfs.h
723
if (de_off >= used || size_add(de_off, sizeof(struct NTFS_DE)) > used)
fs/ntfs3/ntfs_fs.h
515
return size_add(size, 1023) & ~(size_t)1023;
fs/ntfs3/xattr.c
118
ea_p = kmalloc(size_add(size, add_bytes), GFP_NOFS);
include/linux/overflow.h
437
size_add(sizeof(*(p)), flex_array_size(p, member, count)))
io_uring/io_uring.c
2117
off = size_add(off, sq_array_size);
kernel/params.c
52
p = kmalloc(size_add(sizeof(*p), size), GFP_KERNEL);
lib/tests/overflow_kunit.c
739
check_one_size_helper(9, size_add, var++, 5);
lib/tests/overflow_kunit.c
740
check_one_size_helper(9, size_add, 4, var++);
lib/tests/overflow_kunit.c
741
check_one_size_helper(9, size_add, 9, 0);
lib/tests/overflow_kunit.c
742
check_one_size_helper(9, size_add, 0, 9);
lib/tests/overflow_kunit.c
743
check_one_size_helper(5, size_add, 2, 3);
lib/tests/overflow_kunit.c
744
check_one_size_helper(SIZE_MAX, size_add, SIZE_MAX, 1);
lib/tests/overflow_kunit.c
745
check_one_size_helper(SIZE_MAX, size_add, SIZE_MAX, 3);
lib/tests/overflow_kunit.c
746
check_one_size_helper(SIZE_MAX, size_add, SIZE_MAX, -3);
mm/damon/sysfs-schemes.c
1199
char *path = kmalloc_array(size_add(count, 1), sizeof(*path),
mm/damon/sysfs-schemes.c
546
char *path = kmalloc_array(size_add(count, 1), sizeof(*path),
net/devlink/netlink.c
52
data_size = size_add(data_size,
net/devlink/netlink.c
55
data_size = size_add(data_size,
net/devlink/netlink.c
58
flt = kzalloc(size_add(sizeof(*flt), data_size), GFP_KERNEL);
net/ethtool/common.c
891
key_off = size_add(priv_bytes, indir_bytes);
net/ethtool/common.c
892
flex_len = size_add(key_off, key_max);
net/tipc/link.c
1425
if (sz == struct_size(p, gacks, size_add(p->ugack_cnt, p->bgack_cnt))) {
net/tipc/link.c
1512
len = struct_size(ga, gacks, size_add(ga->bgack_cnt, ga->ugack_cnt));
net/tls/tls_sw.c
1561
mem = kmalloc(aead_size + struct_size(dctx, sg, size_add(n_sgin, n_sgout)),
net/wireless/nl80211.c
10545
size = size_add(size, array_size(sizeof(*request->req.ssids), n_ssids));
net/wireless/nl80211.c
10547
size = size_add(size, ie_len);
net/wireless/nl80211.c
10957
size = size_add(size, array_size(sizeof(*request->ssids), n_ssids));
net/wireless/nl80211.c
10958
size = size_add(size, array_size(sizeof(*request->match_sets),
net/wireless/nl80211.c
10960
size = size_add(size, array_size(sizeof(*request->scan_plans),
net/wireless/nl80211.c
10962
size = size_add(size, ie_len);
sound/soc/fsl/fsl_asrc_dma.c
459
pair = kzalloc(size_add(sizeof(*pair), asrc->pair_priv_size), GFP_KERNEL);
sound/soc/sof/ipc4-topology.c
1235
size_add(swidget->num_input_pins,