arch/arm64/kvm/arm.c

895

if (struct_size(data, cmpidr_to_idx, nr_entries) <= PAGE_SIZE)

arch/arm64/kvm/hyp/nvhe/trace.c

186

if ((void *)rb_desc + struct_size(rb_desc, page_va, 0) > desc_end)

arch/arm64/kvm/hyp/nvhe/trace.c

190

if ((void *)rb_desc + struct_size(rb_desc, page_va, rb_desc->nr_page_va) > desc_end)

arch/powerpc/platforms/pseries/plpks.c

209

auth = kzalloc(roundup_pow_of_two(struct_size(auth, password, maxpwsize)), GFP_KERNEL);

arch/s390/appldata/appldata_os.c

131

new_size = struct_size(os_data, os_cpu, os_data->nr_cpus);

arch/s390/appldata/appldata_os.c

166

max_size = struct_size(appldata_os_data, os_cpu, num_possible_cpus());

arch/sparc/kernel/viohs.c

485

if (send_ctrl(vio, &pkt->tag, struct_size(pkt, cookies, dr->ncookies)) < 0)

arch/um/kernel/time.c

100

len < struct_size(time_travel_shm, clients, id + 1)) {

arch/x86/events/intel/bts.c

105

bb = kzalloc_node(struct_size(bb, buf, nr_buf), GFP_KERNEL, node);

arch/x86/kernel/crash.c

183

cmem = vzalloc(struct_size(cmem, ranges, nr_ranges));

arch/x86/kernel/crash.c

347

cmem = vzalloc(struct_size(cmem, ranges, nr_ranges));

arch/x86/kvm/pmu.c

1264

size = struct_size(filter, events, tmp.nevents);

arch/x86/kvm/vmx/tdx.c

2291

if (copy_to_user(user_caps, caps, struct_size(caps, cpuid.entries,

arch/x86/kvm/vmx/tdx.c

2791

struct_size(user_data, cpuid.entries, nr_user_entries));

arch/x86/pci/irq.c

139

size = struct_size(ir, slots, ir->used);

arch/x86/pci/irq.c

146

size = struct_size(rt, slots, ir->used);

arch/x86/platform/uv/uv_time.c

150

head = kmalloc_node(struct_size(head, cpu,

block/blk-ia-ranges.c

266

iars = kzalloc_node(struct_size(iars, ia_range, nr_ia_ranges),

block/blk-iocost.c

3003

iocg = kzalloc_node(struct_size(iocg, ancestors, levels), gfp,

block/ioctl.c

453

keys_info_len = struct_size(keys_info, keys, read_keys.num_keys);

crypto/af_alg.c

618

struct_size(sgl, sg, (MAX_SGL_ENTS + 1)),

crypto/af_alg.c

729

sock_kfree_s(sk, sgl, struct_size(sgl, sg, MAX_SGL_ENTS + 1));

drivers/accel/amdxdna/aie2_ctx.c

878

total_size = struct_size(config, cu_configs, config->num_cus);

drivers/accel/amdxdna/aie2_message.c

820

*size = struct_size(npu_slot, args, npu_slot->arg_cnt);

drivers/accel/amdxdna/aie2_message.c

997

if (payload_len < struct_size(payload, data, ccnt)) {

drivers/accel/amdxdna/aie2_pci.c

937

header_sz = struct_size(header, map, elem_num);

drivers/accel/qaic/qaic_drv.c

409

qdev = devm_kzalloc(dev, struct_size(qdev, dbc, DBC_NUM), GFP_KERNEL);

drivers/acpi/apei/ghes-nvidia.c

62

min_size = struct_size(nvidia_err, regs, nvidia_err->number_regs);

drivers/acpi/nfit/core.c

912

return struct_size(flush, hint_address, flush->hint_count);

drivers/acpi/nhlt.c

238

cfg->capabilities_size == struct_size(devcfg, mics, devcfg->mics_count);

drivers/acpi/prmt.c

108

module_info_size = struct_size(tm, handlers, module_info->handler_info_count);

drivers/acpi/prmt.c

128

mmio_range_size = struct_size(tm->mmio_info, addr_ranges, *mmio_count);

drivers/ata/libahci_platform.c

501

hpriv = devres_alloc(ahci_platform_put_resources, struct_size(hpriv, phys, nports),

drivers/block/ublk_drv.c

4220

ubq = kvzalloc_node(struct_size(ubq, ios, depth), GFP_KERNEL,

drivers/block/xen-blkfront.c

1910

info->rinfo_size = struct_size(info->rinfo, shadow,

drivers/bluetooth/btintel_pcie.c

2761

rp_size = struct_size(rp, supported_commands, num_supported_commands);

drivers/char/tpm/eventlog/tpm2.c

100

event_size = struct_size(event_header, event,

drivers/char/tpm/eventlog/tpm2.c

138

size = struct_size(event_header, event,

drivers/char/tpm/eventlog/tpm2.c

54

size = struct_size(event_header, event, event_header->event_size);

drivers/char/tpm/xen-tpmfront.c

131

return struct_size(shr, extra_pages, shr->nr_extra_pages);

drivers/clk/aspeed/clk-ast2700.c

904

clk_hw_data = devm_kzalloc(dev, struct_size(clk_hw_data, hws, clk_data->nr_clks),

drivers/clk/bcm/clk-bcm2711-dvp.c

38

struct_size(dvp->data, hws, NR_CLOCKS),

drivers/clk/bcm/clk-bcm2835-aux.c

34

struct_size(onecell, hws,

drivers/clk/bcm/clk-bcm2835.c

2283

struct_size(cprman, onecell.hws, asize),

drivers/clk/bcm/clk-bcm63268-timer.c

161

hw = devm_kzalloc(&pdev->dev, struct_size(hw, data.hws, maxbit),

drivers/clk/bcm/clk-bcm63xx-gate.c

499

hw = devm_kzalloc(&pdev->dev, struct_size(hw, data.hws, maxbit),

drivers/clk/bcm/clk-raspberrypi.c

539

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws,

drivers/clk/clk-apple-nco.c

278

onecell_data = devm_kzalloc(&pdev->dev, struct_size(onecell_data, hws,

drivers/clk/clk-bm1880.c

892

clk_data = devm_kzalloc(dev, struct_size(clk_data, hw_data.hws,

drivers/clk/clk-en7523.c

970

struct_size(clk_data, hws, soc_data->num_clocks),

drivers/clk/clk-ep93xx.c

675

priv = devm_kzalloc(dev, struct_size(priv, reg, 10), GFP_KERNEL);

drivers/clk/clk-k230.c

2424

hw_data = devm_kzalloc(&pdev->dev, struct_size(hw_data, hws, K230_CLK_NUM),

drivers/clk/clk-lan966x.c

263

hw_data = devm_kzalloc(dev, struct_size(hw_data, hws, data->num_total_clks),

drivers/clk/clk-lmk04832.c

1439

lmk->clk_data = devm_kzalloc(lmk->dev, struct_size(lmk->clk_data, hws,

drivers/clk/clk-loongson2.c

376

clp = devm_kzalloc(dev, struct_size(clp, clk_data.hws, clks_num),

drivers/clk/clk-max77686.c

192

drv_data = devm_kzalloc(dev, struct_size(drv_data, max_clk_data, num_clks), GFP_KERNEL);

drivers/clk/clk-npcm8xx.c

294

npcm8xx_clk_data = devm_kzalloc(dev, struct_size(npcm8xx_clk_data, hws,

drivers/clk/clk-rp1.c

2403

clockman = devm_kzalloc(dev, struct_size(clockman, onecell.hws, asize),

drivers/clk/clk-rpmi.c

581

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, num_clocks),

drivers/clk/clk-s2mps11.c

136

struct_size(clk_data, hws, S2MPS11_CLKS_NUM),

drivers/clk/clk-scmi.c

395

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, count),

drivers/clk/clk-sp7021.c

616

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, CLK_MAX),

drivers/clk/clk-twl.c

157

struct_size(clk_data, hws, count),

drivers/clk/clk_test.c

3180

data = kunit_kzalloc(test, struct_size(data, hws, 2), GFP_KERNEL));

drivers/clk/davinci/da8xx-cfgchip.c

654

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, 2),

drivers/clk/eswin/clk.c

33

struct_size(eclk_data, clk_data.hws, nr_clks),

drivers/clk/imx/clk-imx8-acm.c

355

clk_hw_data = devm_kzalloc(&pdev->dev, struct_size(clk_hw_data, hws, IMX_ADMA_ACM_CLK_END),

drivers/clk/imx/clk-imx8mn.c

326

clk_hw_data = devm_kzalloc(dev, struct_size(clk_hw_data, hws,

drivers/clk/imx/clk-imx8mp-audiomix.c

282

struct_size(priv, clk_data.hws, IMX8MP_CLK_AUDIOMIX_END),

drivers/clk/imx/clk-imx8mp.c

568

clk_hw_data = devm_kzalloc(dev, struct_size(clk_hw_data, hws, IMX8MP_CLK_END), GFP_KERNEL);

drivers/clk/imx/clk-imx8mq.c

291

clk_hw_data = devm_kzalloc(dev, struct_size(clk_hw_data, hws, IMX8MQ_CLK_END), GFP_KERNEL);

drivers/clk/imx/clk-imx8qxp-lpcg.c

211

clk_data = devm_kzalloc(&pdev->dev, struct_size(clk_data, hws,

drivers/clk/imx/clk-imx8qxp-lpcg.c

326

clk_data = devm_kzalloc(&pdev->dev, struct_size(clk_data, hws,

drivers/clk/imx/clk-imx8ulp-sim-lpav.c

78

struct_size(data, clk_data.hws, ARRAY_SIZE(gates)),

drivers/clk/imx/clk-imx8ulp.c

152

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, IMX8ULP_CLK_CGC1_END),

drivers/clk/imx/clk-imx8ulp.c

236

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, IMX8ULP_CLK_CGC2_END),

drivers/clk/imx/clk-imx8ulp.c

319

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, IMX8ULP_CLK_PCC3_END),

drivers/clk/imx/clk-imx8ulp.c

402

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, IMX8ULP_CLK_PCC4_END),

drivers/clk/imx/clk-imx8ulp.c

457

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, IMX8ULP_CLK_PCC5_END),

drivers/clk/imx/clk-imx93.c

284

clk_hw_data = devm_kzalloc(dev, struct_size(clk_hw_data, hws,

drivers/clk/imx/clk-imx95-blk-ctl.c

386

clk_hw_data = devm_kzalloc(dev, struct_size(clk_hw_data, hws, bc->pdata->num_clks),

drivers/clk/imx/clk-imxrt1050.c

45

clk_hw_data = devm_kzalloc(dev, struct_size(clk_hw_data, hws,

drivers/clk/keystone/syscon-clk.c

148

hw_data = devm_kzalloc(dev, struct_size(hw_data, hws, num_clks),

drivers/clk/mediatek/clk-mtk.c

55

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, clk_num),

drivers/clk/microchip/clk-mpfs-ccc.c

237

clk_data = devm_kzalloc(&pdev->dev, struct_size(clk_data, hw_data.hws, MPFS_CCC_NUM_CLKS),

drivers/clk/microchip/clk-mpfs.c

519

clk_data = devm_kzalloc(dev, struct_size(clk_data, hw_data.hws, num_clks), GFP_KERNEL);

drivers/clk/mmp/clk-audio.c

355

struct_size(priv, clk_data.hws,

drivers/clk/mstar/clk-msc313-mpll.c

107

mpll->clk_data = devm_kzalloc(dev, struct_size(mpll->clk_data, hws,

drivers/clk/mvebu/ap-cpu-clk.c

281

ap_cpu_data = devm_kzalloc(dev, struct_size(ap_cpu_data, hws,

drivers/clk/mvebu/armada-37xx-periph.c

753

struct_size(driver_data->hw_data,

drivers/clk/mvebu/armada-37xx-tbg.c

92

struct_size(hw_tbg_data, hws, NUM_TBG),

drivers/clk/mvebu/cp110-system-controller.c

258

cp110_clk_data = devm_kzalloc(dev, struct_size(cp110_clk_data, hws,

drivers/clk/nuvoton/clk-ma35d1.c

470

struct_size(ma35d1_hw_data, hws, CLK_MAX_IDX),

drivers/clk/qcom/clk-cpu-8996.c

589

data = devm_kzalloc(dev, struct_size(data, hws, 2), GFP_KERNEL);

drivers/clk/qcom/clk-spmi-pmic-div.c

233

cc = devm_kzalloc(dev, struct_size(cc, clks, nclks), GFP_KERNEL);

drivers/clk/qcom/ipq-cmn-pll.c

378

hw_data = devm_kzalloc(dev, struct_size(hw_data, hws, num_clks + 1),

drivers/clk/ralink/clk-mt7621.c

520

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, count),

drivers/clk/renesas/clk-vbattb.c

107

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, num_clks), GFP_KERNEL);

drivers/clk/renesas/renesas-cpg-mssr.c

672

pd = devm_kzalloc(dev, struct_size(pd, core_pm_clks, num_core_pm_clks), GFP_KERNEL);

drivers/clk/samsung/clk-acpm.c

132

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, count),

drivers/clk/samsung/clk-exynos-audss.c

145

struct_size(clk_data, hws,

drivers/clk/samsung/clk-exynos-clkout.c

121

struct_size(clkout, data.hws, EXYNOS_CLKOUT_NR_CLKS),

drivers/clk/samsung/clk-s5pv210-audss.c

81

struct_size(clk_data, hws, AUDSS_MAX_CLKS),

drivers/clk/sifive/sifive-prci.c

570

pd = devm_kzalloc(dev, struct_size(pd, hw_clks.hws, desc->num_clks), GFP_KERNEL);

drivers/clk/socfpga/clk-agilex.c

471

clk_data = devm_kzalloc(dev, struct_size(clk_data, clk_data.hws,

drivers/clk/socfpga/clk-agilex.c

511

clk_data = devm_kzalloc(dev, struct_size(clk_data, clk_data.hws,

drivers/clk/socfpga/clk-agilex5.c

503

clk_data = devm_kzalloc(dev, struct_size(clk_data, clk_data.hws,

drivers/clk/socfpga/clk-s10.c

400

clk_data = devm_kzalloc(dev, struct_size(clk_data, clk_data.hws,

drivers/clk/sophgo/clk-sg2042-clkgen.c

1058

struct_size(clk_data, onecell_data.hws, num_clks),

drivers/clk/sophgo/clk-sg2042-pll.c

499

struct_size(clk_data, onecell_data.hws, num_clks),

drivers/clk/sophgo/clk-sg2042-rpgate.c

231

struct_size(clk_data, onecell_data.hws, num_clks),

drivers/clk/sophgo/clk-sg2044-pll.c

596

ctrl = devm_kzalloc(dev, struct_size(ctrl, data.hws, desc->num_pll), GFP_KERNEL);

drivers/clk/sophgo/clk-sg2044.c

1777

ctrl = devm_kzalloc(dev, struct_size(ctrl, data.hws, num_clks), GFP_KERNEL);

drivers/clk/spacemit/ccu_common.c

26

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, data->num),

drivers/clk/starfive/clk-starfive-jh7100-audio.c

92

priv = devm_kzalloc(&pdev->dev, struct_size(priv, reg, JH7100_AUDCLK_END), GFP_KERNEL);

drivers/clk/starfive/clk-starfive-jh7100.c

289

priv = devm_kzalloc(&pdev->dev, struct_size(priv, reg, JH7100_CLK_PLL0_OUT), GFP_KERNEL);

drivers/clk/starfive/clk-starfive-jh7110-aon.c

64

struct_size(priv, reg, JH7110_AONCLK_END),

drivers/clk/starfive/clk-starfive-jh7110-isp.c

108

struct_size(priv, reg, JH7110_ISPCLK_END),

drivers/clk/starfive/clk-starfive-jh7110-stg.c

84

priv = devm_kzalloc(&pdev->dev, struct_size(priv, reg, JH7110_STGCLK_END),

drivers/clk/starfive/clk-starfive-jh7110-sys.c

411

struct_size(priv, reg, JH7110_SYSCLK_END),

drivers/clk/starfive/clk-starfive-jh7110-vout.c

113

struct_size(priv, reg, JH7110_VOUTCLK_END),

drivers/clk/stm32/clk-stm32-core.c

33

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, max_binding), GFP_KERNEL);

drivers/clk/stm32/clk-stm32mp1.c

2218

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, max_binding),

drivers/clk/tenstorrent/atlantis-prcm.c

794

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, data->num),

drivers/clk/thead/clk-th1520-ap.c

1527

priv = devm_kzalloc(dev, struct_size(priv, hws, plat_data->nr_clks), GFP_KERNEL);

drivers/clk/uniphier/clk-uniphier-core.c

66

hw_data = devm_kzalloc(dev, struct_size(hw_data, hws, clk_num),

drivers/clk/visconti/clkc.c

194

ctx = devm_kzalloc(dev, struct_size(ctx, clk_data.hws, nr_clks), GFP_KERNEL);

drivers/clk/x86/clk-lgm.c

431

ctx = devm_kzalloc(dev, struct_size(ctx, clk_data.hws, CLK_NR_CLKS),

drivers/clk/xilinx/clk-xlnx-clock-wizard.c

1165

clk_wzrd = devm_kzalloc(&pdev->dev, struct_size(clk_wzrd, clk_data.hws, nr_outputs),

drivers/clk/xilinx/xlnx_vcu.c

535

data = devm_kzalloc(dev, struct_size(data, hws, CLK_XVCU_NUM_CLOCKS), GFP_KERNEL);

drivers/comedi/drivers/das16.c

965

struct_size(lrange, range, 1));

drivers/comedi/drivers/das16.c

999

struct_size(lrange, range, 1));

drivers/cpufreq/loongson3_cpufreq.c

259

data = devm_kzalloc(&pdev->dev, struct_size(data, table, freq_level + 1), GFP_KERNEL);

drivers/cpufreq/qcom-cpufreq-hw.c

696

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, num_domains), GFP_KERNEL);

drivers/cpufreq/qcom-cpufreq-nvmem.c

495

drv = devm_kzalloc(&pdev->dev, struct_size(drv, cpus, num_possible_cpus()),

drivers/cpufreq/tegra186-cpufreq.c

360

struct_size(data, clusters, TEGRA186_NUM_CLUSTERS),

drivers/crypto/intel/qat/qat_common/adf_cnv_dbgfs.c

196

err_stats_size = struct_size(err_stats, ae_cnv_errors, ae_count);

drivers/crypto/intel/qat/qat_common/qat_bl.c

133

sz_out = struct_size(buflout, buffers, n);

drivers/crypto/intel/qat/qat_common/qat_bl.c

68

size_t sz_out, sz = struct_size(bufl, buffers, n);

drivers/crypto/marvell/cesa/cesa.c

435

cesa = devm_kzalloc(dev, struct_size(cesa, engines, caps->nengines),

drivers/crypto/talitos.c

3419

priv = devm_kzalloc(dev, struct_size(priv, chan, num_channels), GFP_KERNEL);

drivers/cxl/acpi.c

129

cximsd = devm_kzalloc(dev, struct_size(cximsd, xormaps, nr_maps),

drivers/cxl/acpi.c

189

expected_len = struct_size(cfmws, interleave_targets, ways);

drivers/cxl/core/cdat.c

462

if (struct_size(tbl, entries, entries) != len)

drivers/cxl/core/features.c

106

hdr_size = struct_size(mbox_out, ents, 0);

drivers/cxl/core/features.c

119

alloc_size = struct_size(mbox_out, ents, max_feats);

drivers/cxl/core/features.c

123

alloc_size = struct_size(mbox_out, ents, remain_feats);

drivers/cxl/core/features.c

417

struct_size(feat_out, ents, requested);

drivers/cxl/core/features.c

424

rpc_out->size = struct_size(feat_out, ents, requested);

drivers/cxl/core/mbox.c

1009

pl_size = struct_size(payload, handles, max_handles);

drivers/cxl/core/mbox.c

1051

mbox_cmd.size_in = struct_size(payload, handles, i);

drivers/cxl/core/mbox.c

1083

.min_out = struct_size(payload, records, 0),

drivers/cxl/core/mbox.c

1451

.min_out = struct_size(po, record, 0),

drivers/cxl/core/mbox.c

999

size_t pl_size = struct_size(payload, handles, max_handles);

drivers/cxl/core/memdev.c

924

mds->fw.oneshot = struct_size(transfer, data, size) <

drivers/cxl/core/memdev.c

972

size_in = struct_size(transfer, data, cur_size);

drivers/cxl/pmem.c

216

if (struct_size(cmd, out_buf, cmd->in_length) > buf_len)

drivers/cxl/pmem.c

250

if (size_add(struct_size(cmd, in_buf, cmd->in_length), 4) > buf_len)

drivers/cxl/pmem.c

265

.size_in = struct_size(set_lsa, data, cmd->in_length),

drivers/dax/device.c

406

struct_size(pgmap, ranges, dev_dax->nr_range - 1),

drivers/dax/fsdev.c

233

pgmap_size = struct_size(pgmap, ranges, dev_dax->nr_range - 1);

drivers/devfreq/sun8i-a33-mbus.c

347

priv = devm_kzalloc(dev, struct_size(priv, freq_table, max_state), GFP_KERNEL);

drivers/dma-buf/dma-resv.c

104

size = kmalloc_size_roundup(struct_size(list, table, max_fences));

drivers/dma/apple-admac.c

817

ad = devm_kzalloc(&pdev->dev, struct_size(ad, channels, nchannels), GFP_KERNEL);

drivers/dma/arm-dma350.c

554

dmac = devm_kzalloc(dev, struct_size(dmac, channels, nchan), GFP_KERNEL);

drivers/dma/at_hdmac.c

1966

struct_size(atdma, chan, plat_dat->nr_channels),

drivers/dma/at_xdmac.c

2299

struct_size(atxdmac, chan, nr_channels),

drivers/dma/bcm-sba-raid.c

1493

struct_size(req, cmds, sba->max_cmd_per_req),

drivers/dma/dma-jz4780.c

870

jzdma = devm_kzalloc(dev, struct_size(jzdma, chan,

drivers/dma/ep93xx_dma.c

1380

edma = devm_kzalloc(dev, struct_size(edma, channels, data->num_channels),

drivers/dma/fsl-edma-main.c

717

fsl_edma = devm_kzalloc(&pdev->dev, struct_size(fsl_edma, chans, chans),

drivers/dma/hisi_dma.c

983

hdma_dev = devm_kzalloc(dev, struct_size(hdma_dev, chan, chan_num),

drivers/dma/ioat/dca.c

281

struct_size(ioatdca, req_slots, slots));

drivers/dma/loongson/loongson1-apb-dma.c

573

dma = devm_kzalloc(dev, struct_size(dma, chan, ret), GFP_KERNEL);

drivers/dma/loongson/loongson2-apb-cmc-dma.c

622

lddev = devm_kzalloc(dev, struct_size(lddev, chan, nr_chans), GFP_KERNEL);

drivers/dma/mcf-edma-main.c

172

mcf_edma = devm_kzalloc(&pdev->dev, struct_size(mcf_edma, chans, chans),

drivers/dma/milbeaut-hdmac.c

470

mdev = devm_kzalloc(dev, struct_size(mdev, channels, nr_chans),

drivers/dma/milbeaut-xdmac.c

321

mdev = devm_kzalloc(dev, struct_size(mdev, channels, nr_chans),

drivers/dma/nbpfaxi.c

1324

nbpf = devm_kzalloc(dev, struct_size(nbpf, chan, num_channels),

drivers/dma/sf-pdma/sf-pdma.c

516

pdma = devm_kzalloc(&pdev->dev, struct_size(pdma, chans, n_chans),

drivers/dma/sprd-dma.c

1138

struct_size(sdev, channels, chn_count),

drivers/dma/ste_dma40.c

3204

alloc_size = struct_size(base, phy_chans, num_phy_chans);

drivers/dma/stm32/stm32-mdma.c

1625

struct_size(dmadev, ahb_addr_masks, count),

drivers/dma/tegra186-gpc-dma.c

1433

struct_size(tdma, channels, cdata->nr_channels),

drivers/dma/tegra20-apb-dma.c

1442

size = struct_size(tdma, channels, cdata->nr_channels);

drivers/dma/tegra210-adma.c

1048

struct_size(tdma, channels, cdata->nr_channels),

drivers/dma/uniphier-mdmac.c

395

mdev = devm_kzalloc(dev, struct_size(mdev, channels, nr_chans),

drivers/dma/uniphier-xdmac.c

495

xdev = devm_kzalloc(dev, struct_size(xdev, channels, nr_chans),

drivers/firmware/efi/efi.c

797

struct_size(rsv, entry, rsv->size));

drivers/firmware/efi/libstub/efi-stub-helper.c

258

int size = struct_size(evt, tagged_event.tagged_event_data,

drivers/firmware/efi/libstub/random.c

106

struct_size(seed, bits, seed_size),

drivers/firmware/efi/libstub/random.c

172

memzero_explicit(seed, struct_size(seed, bits, seed_size));

drivers/firmware/stratix10-svc.c

1955

controller = devm_kzalloc(dev, struct_size(controller, chans, SVC_NUM_CHANNEL),

drivers/gpio/gpio-74x164.c

131

chip = devm_kzalloc(dev, struct_size(chip, buffer, nregs), GFP_KERNEL);

drivers/gpio/gpio-aggregator.c

117

lookups = krealloc(aggr->lookups, struct_size(lookups, table, *n + 2),

drivers/gpio/gpio-aggregator.c

698

fwd = devm_kzalloc(dev, struct_size(fwd, tmp, fwd_tmp_size(ngpios)), GFP_KERNEL);

drivers/gpio/gpio-ath79.c

232

struct_size(lookup, table, ATH79K_WIFI_DESCS + 1),

drivers/gpio/gpio-bcm-kona.c

594

kona_gpio = devm_kzalloc(dev, struct_size(kona_gpio, banks, ret), GFP_KERNEL);

drivers/gpio/gpio-dwapb.c

618

pdata = devm_kzalloc(dev, struct_size(pdata, properties, nports), GFP_KERNEL);

drivers/gpio/gpio-dwapb.c

744

gpio = devm_kzalloc(&pdev->dev, struct_size(gpio, ports, pdata->nports), GFP_KERNEL);

drivers/gpio/gpio-graniterapids.c

323

priv = devm_kzalloc(dev, struct_size(priv, pad_backup, num_backup_pins), GFP_KERNEL);

drivers/gpio/gpio-htc-egpio.c

274

ei = devm_kzalloc(&pdev->dev, struct_size(ei, chip, pdata->num_chips), GFP_KERNEL);

drivers/gpio/gpio-line-mux.c

59

size = struct_size(glm, gpio_mux_states, ngpio);

drivers/gpio/gpio-ljca.c

108

struct_size(packet, item, packet->num),

drivers/gpio/gpio-ljca.c

134

struct_size(packet, item, packet->num), NULL, 0);

drivers/gpio/gpio-ljca.c

263

(u8 *)packet, struct_size(packet, item, packet->num),

drivers/gpio/gpio-ljca.c

90

struct_size(packet, item, packet->num), NULL, 0);

drivers/gpio/gpio-tegra186.c

868

gpio = devm_kzalloc(&pdev->dev, struct_size(gpio, irq, err), GFP_KERNEL);

drivers/gpio/gpio-uniphier.c

369

priv = devm_kzalloc(dev, struct_size(priv, saved_vals, nregs),

drivers/gpio/gpiolib.c

5196

descs_size = struct_size(descs, desc, count);

drivers/gpio/gpiolib.c

5222

struct_size(array_info, invert_mask, 3 * bitmap_size),

drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c

1262

ip_offset += struct_size(ip, base_address_64,

drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c

1265

ip_offset += struct_size(ip, base_address,

drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c

1675

ip_offset += struct_size(ip, base_address_64, ip->num_base_address);

drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c

1677

ip_offset += struct_size(ip, base_address, ip->num_base_address);

drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c

814

ip_offset += struct_size(ip, base_address,

drivers/gpu/drm/amd/amdgpu/amdgpu_vm_pt.c

467

bp.bo_ptr_size = struct_size((*vmbo), entries, num_entries);

drivers/gpu/drm/amd/amdgpu/atombios_encoders.c

2079

record += struct_size(fake_edid_record,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

1699

size_t expected = struct_size(args, attrs, args->nattr);

drivers/gpu/drm/amd/display/dc/basics/vector.c

104

vector, ctx, size, initial_value, struct_size))

drivers/gpu/drm/amd/display/dc/basics/vector.c

115

uint32_t struct_size)

drivers/gpu/drm/amd/display/dc/basics/vector.c

122

if (dal_vector_construct(vector, ctx, capacity, struct_size))

drivers/gpu/drm/amd/display/dc/basics/vector.c

160

return vector->container + (index * vector->struct_size);

drivers/gpu/drm/amd/display/dc/basics/vector.c

172

vector->container + (index * vector->struct_size),

drivers/gpu/drm/amd/display/dc/basics/vector.c

173

vector->container + ((index + 1) * vector->struct_size),

drivers/gpu/drm/amd/display/dc/basics/vector.c

174

(size_t)(vector->count - index - 1) * vector->struct_size);

drivers/gpu/drm/amd/display/dc/basics/vector.c

194

vector->struct_size);

drivers/gpu/drm/amd/display/dc/basics/vector.c

217

insert_address = vector->container + (vector->struct_size * position);

drivers/gpu/drm/amd/display/dc/basics/vector.c

221

insert_address + vector->struct_size,

drivers/gpu/drm/amd/display/dc/basics/vector.c

223

(size_t)vector->struct_size * (vector->count - position));

drivers/gpu/drm/amd/display/dc/basics/vector.c

228

vector->struct_size);

drivers/gpu/drm/amd/display/dc/basics/vector.c

257

vector->struct_size);

drivers/gpu/drm/amd/display/dc/basics/vector.c

266

vector->struct_size);

drivers/gpu/drm/amd/display/dc/basics/vector.c

275

(size_t)vec_cloned->struct_size * vec_cloned->capacity);

drivers/gpu/drm/amd/display/dc/basics/vector.c

293

capacity, vector->struct_size, GFP_KERNEL);

drivers/gpu/drm/amd/display/dc/basics/vector.c

33

uint32_t struct_size)

drivers/gpu/drm/amd/display/dc/basics/vector.c

37

if (!struct_size || !capacity) {

drivers/gpu/drm/amd/display/dc/basics/vector.c

43

vector->container = kcalloc(capacity, struct_size, GFP_KERNEL);

drivers/gpu/drm/amd/display/dc/basics/vector.c

47

vector->struct_size = struct_size;

drivers/gpu/drm/amd/display/dc/basics/vector.c

57

uint32_t struct_size)

drivers/gpu/drm/amd/display/dc/basics/vector.c

64

if (!struct_size || !count) {

drivers/gpu/drm/amd/display/dc/basics/vector.c

70

vector->container = kcalloc(count, struct_size, GFP_KERNEL);

drivers/gpu/drm/amd/display/dc/basics/vector.c

81

vector->container + i * struct_size,

drivers/gpu/drm/amd/display/dc/basics/vector.c

83

struct_size);

drivers/gpu/drm/amd/display/dc/basics/vector.c

87

vector->struct_size = struct_size;

drivers/gpu/drm/amd/display/dc/basics/vector.c

96

uint32_t struct_size)

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

1137

struct_size(header, asSpreadSpectrum, 1)));

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

1351

record += struct_size(fake_edid_record,

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

142

struct_size(table, asObjects, 1)));

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

172

struct_size(tbl, asObjects, 1)));

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

1888

struct_size(header_include, asSpreadSpectrum, 1)));

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

1929

struct_size(header_include, asSpreadSpectrum, 1)));

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

1976

struct_size(header, asGPIO_Pin, 1)));

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

1980

if (sizeof(ATOM_COMMON_TABLE_HEADER) + struct_size(header, asGPIO_Pin, 1)

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

2166

struct_size(tbl, asObjects, 1)));

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

2766

struct_size(record, asConnInfo, 1)

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

2861

struct_size(object_table, asObjects, 1)));

drivers/gpu/drm/amd/display/dc/bios/bios_parser.c

670

struct_size(ss_table_header_include, asSpreadSpectrum, 1)));

drivers/gpu/drm/amd/display/include/vector.h

31

uint32_t struct_size;

drivers/gpu/drm/amd/display/include/vector.h

41

uint32_t struct_size);

drivers/gpu/drm/amd/display/include/vector.h

46

uint32_t struct_size);

drivers/gpu/drm/amd/display/include/vector.h

54

uint32_t struct_size);

drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c

5818

size_t state_size = struct_size(smc_state, levels,

drivers/gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c

2967

table = kzalloc(struct_size(table, entries, 4), GFP_KERNEL);

drivers/gpu/drm/gud/gud_pipe.c

529

len = struct_size(req, properties,

drivers/gpu/drm/gud/gud_pipe.c

571

len = struct_size(req, properties, num_properties);

drivers/gpu/drm/i915/display/intel_hdcp_gsc_message.c

478

cmd_size = struct_size(verify_mprime_in, streams, data->k);

drivers/gpu/drm/i915/gvt/kvmgt.c

1247

struct_size(sparse, areas, sparse->nr_areas));

drivers/gpu/drm/i915/i915_query.c

148

len = struct_size(query_ptr, engines, num_uabi_engines);

drivers/gpu/drm/mediatek/mtk_crtc.c

1053

struct_size(mtk_crtc, ddp_comp, path_len + (conn_routes ? 1 : 0)),

drivers/gpu/drm/msm/dsi/phy/dsi_phy.c

625

struct_size(phy->provided_clocks, hws, NUM_PROVIDED_CLKS),

drivers/gpu/drm/msm/msm_gem_submit.c

42

sz = struct_size(submit, bos, nr_bos) +

drivers/gpu/drm/msm/msm_perfcntr.c

422

struct_size(perfctx, reserved_counters, gpu->num_perfcntr_groups),

drivers/gpu/drm/msm/msm_perfcntr.c

652

sz = struct_size(perfcntrs, groups, gpu->num_perfcntr_groups);

drivers/gpu/drm/msm/msm_perfcntr.c

661

sz = struct_size(perfcntrs->groups[i], countables, group->num_counters);

drivers/gpu/drm/msm/msm_submitqueue.c

197

sz = struct_size(queue, _vm_bind_entity, 1);

drivers/gpu/drm/nouveau/nouveau_svm.c

936

struct_size(args, p.phys, npages), NULL);

drivers/gpu/drm/nouveau/nvif/mmu.c

114

size_t argc = struct_size(kind, data, mmu->kind_nr);

drivers/gpu/drm/nouveau/nvkm/core/ramht.c

147

if (!(ramht = *pramht = vzalloc(struct_size(ramht, data, (size >> 3)))))

drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/gsp.c

509

str_offset = struct_size(registry, entries, registry->numEntries);

drivers/gpu/drm/radeon/ni_dpm.c

2694

size_t state_size = struct_size(smc_state, levels,

drivers/gpu/drm/radeon/radeon_atombios.c

1731

record += struct_size(fake_edid_record,

drivers/gpu/drm/radeon/si_dpm.c

5222

size_t state_size = struct_size(smc_state, levels,

drivers/gpu/drm/rockchip/rockchip_drm_vop.c

2197

vop = devm_kzalloc(dev, struct_size(vop, win, vop_data->win_size),

drivers/gpu/drm/rockchip/rockchip_drm_vop2.c

2654

alloc_size = struct_size(vop2, win, vop2_data->win_size);

drivers/gpu/drm/sun4i/sun8i_tcon_top.c

140

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, CLK_NUM),

drivers/gpu/drm/tiny/appletbdrm.c

329

frames_size += struct_size((struct appletbdrm_frame *)0, buf, rect_size(&damage));

drivers/gpu/drm/tiny/appletbdrm.c

444

frame = (void *)frame + struct_size(frame, buf, buf_size);

drivers/gpu/drm/vmwgfx/vmwgfx_surface.c

2036

dirty_size = struct_size(dirty, boxes, num_subres);

drivers/greybus/svc.c

778

bufsize = struct_size(rail_names, name, rail_count);

drivers/hid/hid-hyperv.c

261

len = struct_size(pipe_msg, data, pipe_msg->size);

drivers/hid/hid-winwing.c

353

size_t data_size = struct_size(data, leds, 3);

drivers/hid/intel-ish-hid/ishtp/loader.c

459

struct_size(fragment, fragment_tbl, fragment_count),

drivers/hv/hv_common.c

296

memset(input, 0, struct_size(input, names, 1));

drivers/hwmon/gsc-hwmon.c

251

pdata = devm_kzalloc(dev, struct_size(pdata, channels, nchannels),

drivers/hwspinlock/omap_hwspinlock.c

114

bank = devm_kzalloc(&pdev->dev, struct_size(bank, lock, num_locks),

drivers/hwspinlock/sprd_hwspinlock.c

96

struct_size(sprd_hwlock, bank.lock, SPRD_HWLOCKS_NUM),

drivers/hwspinlock/stm32_hwspinlock.c

82

hw = devm_kzalloc(dev, struct_size(hw, bank.lock, STM32_MUTEX_NUM_LOCKS), GFP_KERNEL);

drivers/hwspinlock/sun6i_hwspinlock.c

157

priv->bank = devm_kzalloc(&pdev->dev, struct_size(priv->bank, lock, priv->nlocks),

drivers/i2c/busses/i2c-i801.c

1329

struct_size(lookup, table, mux_config->n_gpios + 1),

drivers/i2c/busses/i2c-ljca.c

124

struct_size(w_packet, data, 1), (u8 *)r_packet,

drivers/i2c/busses/i2c-ljca.c

154

struct_size(w_packet, data, 1), (u8 *)r_packet,

drivers/i2c/busses/i2c-ljca.c

200

struct_size(w_packet, data, len), (u8 *)r_packet,

drivers/i2c/busses/i2c-ljca.c

74

struct_size(w_packet, data, 1), NULL, 0);

drivers/i2c/busses/i2c-ljca.c

94

struct_size(w_packet, data, 1), (u8 *)r_packet,

drivers/i2c/i2c-mux.c

235

mux_size = struct_size(muxc, adapter, max_adapters);

drivers/i2c/muxes/i2c-demux-pinctrl.c

221

priv = devm_kzalloc(&pdev->dev, struct_size(priv, chan, num_chan),

drivers/i2c/muxes/i2c-mux-pinctrl.c

96

struct_size(mux, states, num_names),

drivers/i3c/master.c

1278

struct_size(defslvs, slaves,

drivers/infiniband/core/ucma.c

1053

if (copy_to_user(response, resp, struct_size(resp, recs, n)))

drivers/infiniband/core/ucma.c

971

if (copy_to_user(response, resp, struct_size(resp, path_data, i)))

drivers/infiniband/core/uverbs_ioctl.c

548

hdr.length != struct_size(&hdr, attrs, hdr.num_attrs))

drivers/infiniband/hw/hfi1/mad.c

2702

response_data_size = struct_size(rsp, vls, num_vls);

drivers/infiniband/hw/hfi1/mad.c

2968

response_data_size = struct_size(req, port.vls, num_vls);

drivers/infiniband/hw/hfi1/mad.c

3184

response_data_size = struct_size(req, port.vls, num_vls);

drivers/infiniband/hw/irdma/hw.c

578

size += struct_size(iw_qvlist, qv_info, rf->msix_count);

drivers/infiniband/hw/irdma/virtchnl.c

388

qvl_size = struct_size(qvl, qv_info, num_vectors);

drivers/infiniband/hw/irdma/virtchnl.c

429

qvl_size = struct_size(qvl, qv_info, num_vectors);

drivers/infiniband/hw/mana/main.c

309

struct_size(create_req, page_addr_list, num_pages);

drivers/infiniband/hw/mana/main.c

337

struct_size(add_req, page_addr_list, num_pages);

drivers/infiniband/hw/mana/main.c

389

struct_size(create_req, page_addr_list, num_pages_to_handle);

drivers/infiniband/hw/mana/qp.c

27

req_buf_size = struct_size(req, indir_tab, MANA_INDIRECT_TABLE_DEF_SIZE);

drivers/infiniband/hw/mlx5/devx.c

1880

async_data = kvzalloc(struct_size(async_data, hdr.out_data,

drivers/infiniband/sw/rdmavt/qp.c

1075

sz = struct_size(swq, sg_list, init_attr->cap.max_send_sge);

drivers/input/joystick/adc-joystick.c

260

joy = devm_kzalloc(dev, struct_size(joy, axes, num_chans), GFP_KERNEL);

drivers/input/keyboard/applespi.c

1498

tp_len = struct_size(tp, fingers, tp->number_of_fingers);

drivers/input/keyboard/cap11xx.c

502

struct_size(priv, keycodes, cap->num_channels),

drivers/input/keyboard/gpio_keys.c

860

ddata = devm_kzalloc(dev, struct_size(ddata, data, pdata->nbuttons),

drivers/input/keyboard/gpio_keys_polled.c

247

bdev = devm_kzalloc(dev, struct_size(bdev, data, pdata->nbuttons),

drivers/input/keyboard/samsung-keypad.c

344

struct_size(keypad, keycodes,

drivers/input/rmi4/rmi_driver.c

652

rdesc->struct_size = get_unaligned_le16(&buf[1]);

drivers/input/rmi4/rmi_driver.c

655

rdesc->struct_size = buf[0];

drivers/input/rmi4/rmi_driver.c

686

u8 *struct_buf __free(kfree) = kzalloc(rdesc->struct_size, GFP_KERNEL);

drivers/input/rmi4/rmi_driver.c

696

ret = rmi_read_block(d, addr, struct_buf, rdesc->struct_size);

drivers/input/rmi4/rmi_driver.c

706

if (offset >= rdesc->struct_size)

drivers/input/rmi4/rmi_driver.c

711

rdesc->struct_size - offset);

drivers/input/rmi4/rmi_driver.h

66

unsigned long struct_size;

drivers/input/rmi4/rmi_f12.c

406

f12 = devm_kzalloc(&fn->dev, struct_size(f12, irq_mask, irq_mask_size * 2),

drivers/interconnect/icc-clk.c

87

onecell = devm_kzalloc(dev, struct_size(onecell, nodes, 2 * num_clocks), GFP_KERNEL);

drivers/interconnect/icc-clk.c

92

qp = devm_kzalloc(dev, struct_size(qp, clocks, num_clocks), GFP_KERNEL);

drivers/interconnect/icc-kunit.c

162

path = kunit_kzalloc(test, struct_size(path, reqs, num), GFP_KERNEL);

drivers/interconnect/imx/imx.c

282

data = devm_kzalloc(dev, struct_size(data, nodes, num_nodes),

drivers/interconnect/mediatek/icc-emi.c

99

data = devm_kzalloc(dev, struct_size(data, nodes, desc->num_nodes), GFP_KERNEL);

drivers/interconnect/qcom/icc-rpm.c

504

data = devm_kzalloc(dev, struct_size(data, nodes, num_nodes),

drivers/interconnect/qcom/icc-rpmh.c

250

data = devm_kzalloc(dev, struct_size(data, nodes, num_nodes), GFP_KERNEL);

drivers/interconnect/qcom/osm-l3.c

216

data = devm_kzalloc(&pdev->dev, struct_size(data, nodes, num_nodes), GFP_KERNEL);

drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h

796

new_invs = kzalloc(struct_size(new_invs, inv, num_invs), GFP_KERNEL);

drivers/iommu/arm/arm-smmu/qcom_iommu.c

788

qcom_iommu = devm_kzalloc(dev, struct_size(qcom_iommu, ctxs, max_asid + 1),

drivers/iommu/dma-iommu.c

306

queue = vmalloc(struct_size(queue, entries, fq_size));

drivers/iommu/dma-iommu.c

321

queue = __alloc_percpu(struct_size(queue, entries, fq_size),

drivers/iommu/intel/dmar.c

143

size = struct_size(info, path, level);

drivers/iommu/iommu.c

3122

fwspec = krealloc(fwspec, struct_size(fwspec, ids, new_num),

drivers/iommu/iommufd/vfio_compat.c

396

if (avail >= struct_size(&cap_iovas, iova_ranges,

drivers/iommu/iommufd/vfio_compat.c

403

if (avail >= struct_size(&cap_iovas, iova_ranges, cap_iovas.nr_iovas) &&

drivers/iommu/iommufd/vfio_compat.c

406

return struct_size(&cap_iovas, iova_ranges, cap_iovas.nr_iovas);

drivers/irqchip/irq-imx-intmux.c

218

data = devm_kzalloc(&pdev->dev, struct_size(data, irqchip_data, channum), GFP_KERNEL);

drivers/irqchip/qcom-irq-combiner.c

237

combiner = devm_kzalloc(&pdev->dev, struct_size(combiner, regs, nregs),

drivers/leds/flash/leds-mt6360.c

799

struct_size(priv, leds, count), GFP_KERNEL);

drivers/leds/flash/leds-mt6370-flash.c

520

priv = devm_kzalloc(dev, struct_size(priv, leds, count), GFP_KERNEL);

drivers/leds/flash/leds-sy7802.c

465

chip = devm_kzalloc(dev, struct_size(chip, leds, count), GFP_KERNEL);

drivers/leds/leds-aw200xx.c

555

chip = devm_kzalloc(&client->dev, struct_size(chip, leds, count),

drivers/leds/leds-cr0014114.c

223

priv = devm_kzalloc(&spi->dev, struct_size(priv, leds, count),

drivers/leds/leds-el15203000.c

294

priv = devm_kzalloc(&spi->dev, struct_size(priv, leds, count),

drivers/leds/leds-gpio.c

155

priv = devm_kzalloc(dev, struct_size(priv, leds, count), GFP_KERNEL);

drivers/leds/leds-gpio.c

263

priv = devm_kzalloc(dev, struct_size(priv, leds, pdata->num_leds), GFP_KERNEL);

drivers/leds/leds-is31fl32xx.c

583

priv = devm_kzalloc(dev, struct_size(priv, leds, count),

drivers/leds/leds-lm3532.c

687

drvdata = devm_kzalloc(&client->dev, struct_size(drvdata, leds, count),

drivers/leds/leds-lm3697.c

308

led = devm_kzalloc(dev, struct_size(led, leds, count), GFP_KERNEL);

drivers/leds/leds-lp50xx.c

562

led = devm_kzalloc(&client->dev, struct_size(led, leds, count),

drivers/leds/leds-pca963x.c

431

chip = devm_kzalloc(dev, struct_size(chip, leds, count), GFP_KERNEL);

drivers/leds/leds-pwm.c

215

priv = devm_kzalloc(&pdev->dev, struct_size(priv, leds, count),

drivers/leds/leds-sun50i-a100.c

422

priv = devm_kzalloc(dev, struct_size(priv, leds, num_leds), GFP_KERNEL);

drivers/leds/leds-turris-omnia.c

482

leds = devm_kzalloc(dev, struct_size(leds, leds, count), GFP_KERNEL);

drivers/leds/rgb/leds-ktd202x.c

543

chip = devm_kzalloc(dev, struct_size(chip, leds, count), GFP_KERNEL);

drivers/leds/rgb/leds-lp5860-spi.c

53

lp5860 = devm_kzalloc(dev, struct_size(lp5860, leds, multi_leds),

drivers/leds/rgb/leds-mt6370-rgb.c

917

priv = devm_kzalloc(dev, struct_size(priv, leds, count), GFP_KERNEL);

drivers/leds/rgb/leds-pwm-multicolor.c

125

priv = devm_kzalloc(&pdev->dev, struct_size(priv, leds, count),

drivers/leds/rgb/leds-qcom-lpg.c

1394

led = devm_kzalloc(lpg->dev, struct_size(led, channels, num_channels), GFP_KERNEL);

drivers/leds/rgb/leds-qcom-lpg.c

1608

lpg = devm_kzalloc(&pdev->dev, struct_size(lpg, channels, data->num_channels), GFP_KERNEL);

drivers/mailbox/hi6220-mailbox.c

270

mbox = devm_kzalloc(dev, struct_size(mbox, mchan, MBOX_CHAN_MAX), GFP_KERNEL);

drivers/mailbox/rockchip-mailbox.c

176

mb = devm_kzalloc(&pdev->dev, struct_size(mb, chans, drv_data->num_chans), GFP_KERNEL);

drivers/mailbox/zynqmp-ipi-mailbox.c

920

pdata = devm_kzalloc(dev, struct_size(pdata, ipi_mboxes, num_mboxes),

drivers/md/dm-ioctl.c

1803

needed = struct_size(deps, dev, count);

drivers/md/dm-log-writes.c

681

alloc_size = struct_size(block, vecs, bio_segments(bio));

drivers/md/dm-pcache/cache.h

501

crc_size = struct_size(kset_onmedia, data, kset_onmedia->key_num) - 4;

drivers/md/dm-pcache/cache_key.c

139

kset_onmedia_size = struct_size(kset_onmedia, data, kset_onmedia->key_num);

drivers/md/dm-stats.c

294

shared_alloc_size = struct_size(s, stat_shared, n_entries);

drivers/md/dm-vdo/memory-alloc.h

45

vdo_allocate_memory(struct_size(*(PTR), FIELD, (COUNT)), \

drivers/md/dm-verity-fec.c

694

struct_size((struct dm_verity_fec_io *)0,

drivers/md/md-llbitmap.c

614

unsigned int size = struct_size(pctl, dirty, BITS_TO_LONGS(

drivers/md/raid5.c

7811

conf->ctx_size = struct_size(ctx, sectors_to_do, size);

drivers/media/common/videobuf2/frame_vector.c

162

int size = struct_size(vec, ptrs, nr_frames);

drivers/media/platform/allegro-dvt/allegro-core.c

1504

size = struct_size(msg, buffer, num_buffers);

drivers/media/platform/qcom/iris/iris_hfi_gen1_command.c

346

packet_size = struct_size(int_pkt, buffer_info, 1);

drivers/media/platform/qcom/iris/iris_hfi_gen1_command.c

63

packet_size = struct_size(pkt, data, 1) + sizeof(*hfi);

drivers/media/platform/qcom/venus/hfi_cmds.c

129

pkt->hdr.size = struct_size(pkt, data, 1) + sizeof(*hfi);

drivers/media/platform/qcom/venus/hfi_cmds.c

212

pkt->shdr.hdr.size = struct_size(pkt, buffer_info,

drivers/media/platform/qcom/venus/hfi_cmds.c

31

pkt->hdr.size = struct_size(pkt, data, 1) + sizeof(*hfi);

drivers/media/platform/qcom/venus/hfi_cmds.c

43

pkt->hdr.size = struct_size(pkt, data, 1) + sizeof(*hfi);

drivers/media/platform/qcom/venus/hfi_cmds.c

54

pkt->hdr.size = struct_size(pkt, data, 2);

drivers/media/platform/qcom/venus/hfi_cmds.c

63

pkt->hdr.size = struct_size(pkt, data, 1) + sizeof(*hfi);

drivers/media/platform/st/sti/delta/delta-mjpeg-dec.c

275

params->display_buffer_addr.struct_size =

drivers/media/platform/st/sti/delta/delta-mjpeg-fw.h

37

u32 struct_size;

drivers/media/usb/pwc/pwc-uncompress.c

44

struct_size(raw_frame, rawframe, pdev->frame_size));

drivers/memory/atmel-ebi.c

335

ebid = devm_kzalloc(ebi->dev, struct_size(ebid, configs, numcs),

drivers/mfd/arizona-spi.c

63

struct_size(lookup, table, ARRAY_SIZE(arizona_soc_gpios) + 1),

drivers/mfd/iqs62x.c

320

struct_size(fw_blk, data, len),

drivers/mfd/omap-usb-tll.c

233

tll = devm_kzalloc(dev, struct_size(tll, ch_clk, nch), GFP_KERNEL);

drivers/mfd/qcom-pm8xxx.c

550

struct_size(chip, config, data->num_irqs),

drivers/mfd/sm501.c

1104

lookup = devm_kzalloc(&pdev->dev, struct_size(lookup, table, 3),

drivers/misc/cb710/core.c

217

chip = devm_kzalloc(&pdev->dev, struct_size(chip, slot, n),

drivers/misc/eeprom/at24.c

686

at24 = devm_kzalloc(dev, struct_size(at24, client_regmaps, num_addresses),

drivers/misc/mei/hdcp/mei_hdcp.c

562

cmd_size = struct_size(verify_mprime_in, streams, data->k);

drivers/misc/mei/mei_lb.c

217

req_size = struct_size(req, payload, payload_size);

drivers/misc/mei/mei_lb.c

326

req_size = struct_size(req, payload, chunk_size);

drivers/misc/vmw_vmci/vmci_handle_array.c

48

size_t new_size = struct_size(array, entries,

drivers/mmc/host/sdhci-cadence.c

567

struct_size(priv, phy_params, nr_phy_params));

drivers/mmc/host/sdhci-pci-core.c

2106

struct_size(cd_gpio_lookup_table, table, count + 1),

drivers/mtd/nand/raw/atmel/nand-controller.c

1652

nand = devm_kzalloc(nc->dev, struct_size(nand, cs, numcs), GFP_KERNEL);

drivers/mtd/nand/raw/denali_dt.c

92

dchip = devm_kzalloc(denali->dev, struct_size(dchip, sels, nsels),

drivers/mtd/nand/raw/denali_pci.c

95

dchip = devm_kzalloc(denali->dev, struct_size(dchip, sels, nsels),

drivers/mtd/nand/raw/ingenic/ingenic_nand_drv.c

477

nfc = devm_kzalloc(dev, struct_size(nfc, cs, num_banks), GFP_KERNEL);

drivers/mtd/nand/raw/marvell_nand.c

2634

struct_size(marvell_nand, sels, nsels),

drivers/mtd/nand/raw/meson_nand.c

1401

meson_chip = devm_kzalloc(dev, struct_size(meson_chip, sels, nsels),

drivers/mtd/nand/raw/mtk_nand.c

1359

chip = devm_kzalloc(dev, struct_size(chip, sels, nsels),

drivers/mtd/nand/raw/nuvoton-ma35d1-nand-controller.c

869

nvtnand = devm_kzalloc(dev, struct_size(nvtnand, sels, nsels),

drivers/mtd/nand/raw/renesas-nand-controller.c

1220

rnand = devm_kzalloc(rnandc->dev, struct_size(rnand, sels, nsels),

drivers/mtd/nand/raw/rockchip-nand-controller.c

1137

rknand = devm_kzalloc(dev, struct_size(rknand, sels, nsels),

drivers/mtd/nand/raw/sunxi_nand.c

2342

sunxi_nand = devm_kzalloc(dev, struct_size(sunxi_nand, sels, nsels),

drivers/mux/core.c

111

mux_chip = kzalloc(size_add(struct_size(mux_chip, mux, controllers),

drivers/net/can/peak_canfd/peak_pciefd_main.c

747

pciefd = devm_kzalloc(&pdev->dev, struct_size(pciefd, can, can_count),

drivers/net/can/usb/gs_usb.c

1612

hf_size_rx = struct_size(hf, canfd_ts, 1);

drivers/net/can/usb/gs_usb.c

1614

hf_size_rx = struct_size(hf, canfd, 1);

drivers/net/can/usb/gs_usb.c

1617

hf_size_rx = struct_size(hf, classic_can_ts, 1);

drivers/net/can/usb/gs_usb.c

1619

hf_size_rx = struct_size(hf, classic_can, 1);

drivers/net/can/usb/gs_usb.c

590

minimum_length = struct_size(hf, canfd_ts, 1);

drivers/net/can/usb/gs_usb.c

600

minimum_length = struct_size(hf, classic_can_ts, 1);

drivers/net/can/usb/gs_usb.c

971

dev->hf_size_tx = struct_size(hf, canfd_quirk, 1);

drivers/net/can/usb/gs_usb.c

973

dev->hf_size_tx = struct_size(hf, canfd, 1);

drivers/net/can/usb/gs_usb.c

976

dev->hf_size_tx = struct_size(hf, classic_can_quirk, 1);

drivers/net/can/usb/gs_usb.c

978

dev->hf_size_tx = struct_size(hf, classic_can, 1);

drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c

847

netdev = alloc_candev(struct_size(priv, tx_contexts, dev->max_tx_urbs),

drivers/net/dsa/hirschmann/hellcreek.c

1942

hellcreek = devm_kzalloc(dev, struct_size(hellcreek, ports, data->num_ports), GFP_KERNEL);

drivers/net/dsa/ocelot/felix_vsc9959.c

2274

size = struct_size(sgi, entries, a->gate.num_entries);

drivers/net/ethernet/alibaba/eea/eea_adminq.c

447

size = struct_size(dev_status, q_status, q_num);

drivers/net/ethernet/chelsio/cxgb4/sge.c

2537

len = struct_size(flowc, mnemval, nparams);

drivers/net/ethernet/dec/tulip/eeprom.c

227

mtable = devm_kmalloc(&tp->pdev->dev, struct_size(mtable, mleaf, count),

drivers/net/ethernet/freescale/enetc/enetc_qos.c

1245

entries_size = struct_size(sgi, entries, entryg->gate.num_entries);

drivers/net/ethernet/freescale/enetc/enetc_qos.c

797

data_size = struct_size(sgcl_data, sgcl, sgi->num_entries);

drivers/net/ethernet/freescale/enetc/enetc_qos.c

80

data_size = struct_size(gcl_data, entry, gcl_len);

drivers/net/ethernet/freescale/enetc/enetc_vf.c

141

msg_size = struct_size(msg, mac, 1);

drivers/net/ethernet/freescale/enetc/ntmp.c

487

swcbd.size = struct_size(req, groups, count);

drivers/net/ethernet/google/gve/gve_main.c

290

priv->stats_report_len = struct_size(priv->stats_report, stats,

drivers/net/ethernet/hisilicon/hns/hns_dsaf_ppe.c

80

struct_size(ppe_common, ppe_cb, ppe_num),

drivers/net/ethernet/hisilicon/hns/hns_dsaf_rcb.c

780

struct_size(rcb_common, ring_pair_cb, ring_num),

drivers/net/ethernet/intel/iavf/iavf_main.c

5367

len = struct_size(adapter->qos_caps, cap, IAVF_MAX_QOS_TC_NUM);

drivers/net/ethernet/intel/iavf/iavf_virtchnl.c

1756

len = struct_size(qs_bw_cfg, cfg, qs_to_update);

drivers/net/ethernet/intel/iavf/iavf_virtchnl.c

2928

u16 len = struct_size(adapter->qos_caps, cap,

drivers/net/ethernet/intel/ice/ice_base.c

1007

u8 txtime_buf_len = struct_size(txtime_qg_buf, txtimeqs, 1);

drivers/net/ethernet/intel/ice/ice_base.c

1042

u8 buf_len = struct_size(qg_buf, txqs, 1);

drivers/net/ethernet/intel/ice/ice_common.c

2275

buf_len = struct_size(buf, elem, num);

drivers/net/ethernet/intel/ice/ice_common.c

2311

buf_len = struct_size(buf, elem, num);

drivers/net/ethernet/intel/ice/ice_common.c

4665

sum_size += struct_size(list, txqs, list->num_txqs);

drivers/net/ethernet/intel/ice/ice_common.c

4749

u16 item_size = struct_size(item, q_id, item->num_qs);

drivers/net/ethernet/intel/ice/ice_common.c

4854

sum_size += struct_size(list, rdma_qsets, num_qsets);

drivers/net/ethernet/intel/ice/ice_common.c

4894

size = struct_size(txtime_qg, txtimeqs, q_count);

drivers/net/ethernet/intel/ice/ice_common.c

5219

buf_size = struct_size(buf, rdma_qsets, num_qsets);

drivers/net/ethernet/intel/ice/ice_ddp.c

39

if (len < struct_size(pkg, seg_offset, 1))

drivers/net/ethernet/intel/ice/ice_ddp.c

54

if (len < struct_size(pkg, seg_offset, seg_count))

drivers/net/ethernet/intel/ice/ice_flex_pipe.c

2496

struct_size(p, es, 1) +

drivers/net/ethernet/intel/ice/ice_flex_pipe.c

2532

struct_size(p, entry, 1));

drivers/net/ethernet/intel/ice/ice_flex_pipe.c

2568

struct_size(p, value, 1));

drivers/net/ethernet/intel/ice/ice_flex_pipe.c

2603

struct_size(p, value, 1));

drivers/net/ethernet/intel/ice/ice_flex_pipe.c

345

struct_size(sect_rx, tcam, 1));

drivers/net/ethernet/intel/ice/ice_flex_pipe.c

351

struct_size(sect_tx, tcam, 1));

drivers/net/ethernet/intel/ice/ice_flex_pipe.c

464

struct_size(sect_rx, tcam, 1));

drivers/net/ethernet/intel/ice/ice_flex_pipe.c

470

struct_size(sect_tx, tcam, 1));

drivers/net/ethernet/intel/ice/ice_flex_pipe.c

542

struct_size(sect_rx, tcam, 1));

drivers/net/ethernet/intel/ice/ice_flex_pipe.c

548

struct_size(sect_tx, tcam, 1));

drivers/net/ethernet/intel/ice/ice_fw_update.c

237

length = struct_size(comp_tbl, cvs, component->version_len);

drivers/net/ethernet/intel/ice/ice_lag.c

1266

qbuf_size = struct_size(qbuf, queue_info, numq);

drivers/net/ethernet/intel/ice/ice_lag.c

1473

buf_len = struct_size(buf, elem, 1);

drivers/net/ethernet/intel/ice/ice_lag.c

2484

qbuf_size = struct_size(qbuf, queue_info, numq);

drivers/net/ethernet/intel/ice/ice_lag.c

678

qbuf_size = struct_size(qbuf, queue_info, numq);

drivers/net/ethernet/intel/ice/ice_sched.c

917

buf_size = struct_size(buf, generic, num_nodes);

drivers/net/ethernet/intel/ice/ice_switch.h

28

#define ICE_SW_RULE_VSI_LIST_SIZE(s, n) struct_size((s), vsi, (n))

drivers/net/ethernet/intel/ice/ice_switch.h

29

#define ICE_SW_RULE_RX_TX_HDR_SIZE(s, l) struct_size((s), hdr_data, (l))

drivers/net/ethernet/intel/ice/ice_switch.h

34

#define ICE_SW_RULE_LG_ACT_SIZE(s, n) struct_size((s), act, (n))

drivers/net/ethernet/intel/ice/virt/virtchnl.c

432

len = struct_size(cap_list, cap, numtc);

drivers/net/ethernet/intel/idpf/idpf_txrx.h

242

#define IDPF_GET_PTYPE_SIZE(p) struct_size((p), proto_id, (p)->proto_id_count)

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

1056

size = struct_size(rcvd_regions, mem_reg, num_regions);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

1175

xn_params.send_buf.iov_len = struct_size(rule, rule_info, rule_count);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

1177

xn_params.recv_buf.iov_len = struct_size(rule, rule_info, rule_count);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

1825

return struct_size(ctq, qinfo, num_chunks);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

2014

return struct_size(crq, qinfo, num_chunks);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

2136

return struct_size(eq, chunks.chunks, num_chunks);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

2305

return struct_size(vqvm, qv_maps, num_chunks);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

2582

buf_size = struct_size(eq, chunks.chunks, num_chunks);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

2671

size = struct_size(vc_msg, chunks.chunks,

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

2712

size = struct_size(rcvd_vec, vchunks.vchunks, num_vchunks);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

2747

buf_size = struct_size(vcs, vchunks, le16_to_cpu(vcs->num_vchunks));

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

2885

buf_size = struct_size(rl, lut, rss_data->rss_lut_size);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

2962

buf_size = struct_size(rk, key_flex, rss_data->rss_key_size);

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

4258

if (xn->reply_sz < struct_size(ma_list, mac_addr_list, num_entries))

drivers/net/ethernet/intel/idpf/idpf_virtchnl.c

4379

buf_size = struct_size(ma_list, mac_addr_list, num_entries);

drivers/net/ethernet/intel/idpf/idpf_virtchnl_ptp.c

370

size = struct_size(rcv_tx_tstamp_caps, tstamp_latches, num_latches);

drivers/net/ethernet/intel/idpf/idpf_virtchnl_ptp.c

376

size = struct_size(tstamp_caps, tx_tstamp_status, num_latches);

drivers/net/ethernet/intel/idpf/idpf_virtchnl_ptp.c

639

size = struct_size(send_tx_tstamp_msg, tstamp_latches,

drivers/net/ethernet/intel/idpf/idpf_virtchnl_ptp.c

662

msg_size = struct_size(send_tx_tstamp_msg, tstamp_latches, id);

drivers/net/ethernet/intel/igb/igb_main.c

1180

size = kmalloc_size_roundup(struct_size(q_vector, ring, ring_count));

drivers/net/ethernet/intel/igc/igc_main.c

4871

memset(q_vector, 0, struct_size(q_vector, ring, ring_count));

drivers/net/ethernet/intel/ixgbe/ixgbe_fw_update.c

183

length = struct_size(comp_tbl, cvs, component->version_len);

drivers/net/ethernet/intel/ixgbe/ixgbe_lib.c

857

q_vector = kzalloc_node(struct_size(q_vector, ring, ring_count),

drivers/net/ethernet/marvell/prestera/prestera_hw.c

1382

size = struct_size(req, actions_msg, n_act);

drivers/net/ethernet/marvell/prestera/prestera_hw.c

2315

size_t size = struct_size(resp, stats, *len);

drivers/net/ethernet/marvell/prestera/prestera_hw.c

2476

buf_size = struct_size(req, ports, ports_num);

drivers/net/ethernet/mellanox/mlx5/core/en/txrx.h

581

size_t isz = struct_size(rq->mpwqe.info, alloc_units.frag_pages, rq->mpwqe.pages_per_wqe);

drivers/net/ethernet/mellanox/mlx5/core/en_accel/ktls_tx.c

149

sz = struct_size(bulk_async, arr, n);

drivers/net/ethernet/mellanox/mlx5/core/en_main.c

348

alloc_size = array_size(wq_sz, struct_size(rq->mpwqe.info,

drivers/net/ethernet/mellanox/mlx5/core/en_main.c

845

shampo_sz = struct_size(shampo, hd_buf_pages, nentries);

drivers/net/ethernet/mellanox/mlxsw/core_linecards.c

1522

linecards = vzalloc(struct_size(linecards, linecards, slot_count));

drivers/net/ethernet/microsoft/mana/gdma_main.c

1160

req_msg_size = struct_size(req, page_addr_list, num_page);

drivers/net/ethernet/microsoft/mana/mana_en.c

1410

req_buf_size = struct_size(req, indir_tab, apc->indir_table_sz);

drivers/net/ethernet/netronome/nfp/flower/cmsg.c

220

if (msg_len < struct_size(msg, flow, flow_cnt)) {

drivers/net/ethernet/netronome/nfp/flower/cmsg.c

222

msg_len, struct_size(msg, flow, flow_cnt));

drivers/net/ethernet/netronome/nfp/flower/cmsg.c

49

skb = nfp_flower_cmsg_alloc(app, struct_size(msg, ports, num_ports),

drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c

225

if (pay_len != struct_size(payload, tun_info, count)) {

drivers/net/ethernet/netronome/nfp/flower/tunnel_conf.c

267

if (pay_len != struct_size(payload, tun_info, count)) {

drivers/net/ethernet/netronome/nfp/nfpcore/nfp_nsp.c

1081

bufsz = struct_size(buf, data, round_up(len, NSP_SFF_EEPROM_BLOCK_LEN));

drivers/net/ethernet/netronome/nfp/nfpcore/nfp_nsp.c

566

desc_sz = struct_size(desc, descs, nseg);

drivers/net/ethernet/qlogic/qed/qed_ll2.c

1248

desc_size = struct_size(p_descq, bds_set,

drivers/net/ethernet/qlogic/qed/qed_ll2.c

1607

desc_size = struct_size(p_pkt, bds_set,

drivers/net/ethernet/qualcomm/ppe/ppe.c

182

ppe_dev = devm_kzalloc(dev, struct_size(ppe_dev, icc_paths, num_icc),

drivers/net/ethernet/ti/am65-cpsw-qos.c

888

struct_size(est_new, taprio.entries, taprio->num_entries),

drivers/net/fddi/skfp/smt.c

1066

struct_size(sif, lem, ports))))

drivers/net/ipa/ipa_power.c

255

size = struct_size(power, interconnect, data->interconnect_count);

drivers/net/usb/cdc-phonet.c

359

dev = alloc_netdev(struct_size(pnd, urbs, rxq_size), ifname,

drivers/net/virtio_net.c

534

return struct_size(vi->rss_hdr, indirection_table, indir_table_size);

drivers/net/virtio_net.c

539

return struct_size(&vi->rss_trailer, hash_key_data, vi->rss_key_size);

drivers/net/wireless/ath/ath10k/coredump.c

1570

dump_tlv->tlv_len = cpu_to_le32(struct_size(ce_hdr, entries,

drivers/net/wireless/ath/ath10k/htt_rx.c

2936

rx, struct_size(rx, mpdu_ranges, num_mpdu_ranges));

drivers/net/wireless/ath/ath10k/wmi.c

6644

buf = ath10k_wmi_alloc_skb(ar, struct_size(cmd, mem_chunks.items,

drivers/net/wireless/ath/ath10k/wmi.c

6707

buf = ath10k_wmi_alloc_skb(ar, struct_size(cmd, mem_chunks.items,

drivers/net/wireless/ath/ath10k/wmi.c

6778

buf = ath10k_wmi_alloc_skb(ar, struct_size(cmd, mem_chunks.items,

drivers/net/wireless/ath/ath10k/wmi.c

6872

buf = ath10k_wmi_alloc_skb(ar, struct_size(cmd, mem_chunks.items,

drivers/net/wireless/ath/ath10k/wmi.c

7626

skb = ath10k_wmi_alloc_skb(ar, struct_size(cmd, chan_info, arg->n_channels));

drivers/net/wireless/ath/ath12k/dp_htt.c

448

if (len > (skb->len - struct_size(msg, data, 0))) {

drivers/net/wireless/ath/ath12k/dp_mon.c

420

eht_len = struct_size(eht,

drivers/net/wireless/ath/ath12k/mac.c

15351

hw = ieee80211_alloc_hw(struct_size(ah, radio, num_pdev_map),

drivers/net/wireless/ath/ath6kl/debug.c

1139

if (struct_size(tbl, info, num_entries) > len)

drivers/net/wireless/ath/ath6kl/wmi.c

1316

if (struct_size(ev, neighbor, ev->num_neighbors) > len) {

drivers/net/wireless/ath/ath6kl/wmi.c

1786

if (len < struct_size(ev, ap_list, ev->num_ap))

drivers/net/wireless/ath/ath6kl/wmi.c

1987

skb = ath6kl_wmi_get_new_buf(struct_size(sc, ch_list, num_chan));

drivers/net/wireless/ath/ath6kl/wmi.c

2043

skb = ath6kl_wmi_get_new_buf(struct_size(sc, ch_list, num_chan));

drivers/net/wireless/ath/wcn36xx/main.c

1572

hw = ieee80211_alloc_hw(struct_size(wcn, chan_survey, n_channels), &wcn36xx_ops);

drivers/net/wireless/ath/wil6210/cfg80211.c

1017

cmd, struct_size(cmd, channel_list, cmd->num_channels));

drivers/net/wireless/atmel/at76c50x-usb.c

727

total_size = struct_size(cmd_buf, data, buf_size);

drivers/net/wireless/broadcom/brcm80211/brcmfmac/common.c

115

struct_size(dload_buf, data, len));

drivers/net/wireless/broadcom/brcm80211/brcmfmac/of.c

40

cc = devm_kzalloc(dev, struct_size(cc, table, count), GFP_KERNEL);

drivers/net/wireless/broadcom/brcm80211/brcmfmac/pno.c

408

gsz = struct_size(gscan_cfg, bucket, n_buckets);

drivers/net/wireless/intel/ipw2x00/ipw2200.c

1221

error = kmalloc(size_add(struct_size(error, elem, elem_len),

drivers/net/wireless/intel/iwlwifi/dvm/calib.c

71

res->cmd_len = struct_size(cmd, data, len);

drivers/net/wireless/intel/iwlwifi/dvm/lib.c

1007

cmd.len[0] = struct_size(pattern_cmd, patterns, wowlan->n_patterns);

drivers/net/wireless/intel/iwlwifi/fw/init.c

128

size = struct_size(cmd, data, num_queues);

drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c

1860

copy_rd = kmemdup(regd, struct_size(regd, reg_rules, valid_rules),

drivers/net/wireless/intel/iwlwifi/mld/d3.c

1875

cmd.len[0] = struct_size(pattern_cmd, patterns, wowlan->n_patterns);

drivers/net/wireless/intel/iwlwifi/mld/mcc.c

29

notif_len = struct_size(resp_cp, channels, n_channels);

drivers/net/wireless/intel/iwlwifi/mld/scan.c

1917

size = struct_size(req, channels, n_channels);

drivers/net/wireless/intel/iwlwifi/mld/tx.c

1395

if (IWL_FW_CHECK(mld, struct_size(ba_res, tfd, tfd_cnt) > pkt_len,

drivers/net/wireless/intel/iwlwifi/mvm/d3.c

640

cmd.len[0] = struct_size(pattern_cmd, patterns, wowlan->n_patterns);

drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c

1708

if (pkt_len < struct_size(sb_v2, data, size))

drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c

1715

if (pkt_len < struct_size(sb_v3, data, size))

drivers/net/wireless/intel/iwlwifi/mvm/nvm.c

453

struct_size(mcc_resp_v8, channels, n_channels),

drivers/net/wireless/intel/iwlwifi/mvm/nvm.c

459

resp_len = struct_size(resp_cp, channels, n_channels);

drivers/net/wireless/intel/iwlwifi/mvm/nvm.c

487

struct_size(mcc_resp_v4, channels, n_channels),

drivers/net/wireless/intel/iwlwifi/mvm/nvm.c

493

resp_len = struct_size(resp_cp, channels, n_channels);

drivers/net/wireless/intel/iwlwifi/mvm/nvm.c

521

struct_size(mcc_resp_v3, channels, n_channels),

drivers/net/wireless/intel/iwlwifi/mvm/nvm.c

527

resp_len = struct_size(resp_cp, channels, n_channels);

drivers/net/wireless/intel/iwlwifi/mvm/tx.c

2106

struct_size(ba_res, tfd, tfd_cnt) > pkt_len,

drivers/net/wireless/marvell/mwifiex/11n.c

395

memset(chan_list, 0, struct_size(chan_list, chan_scan_param, 1));

drivers/net/wireless/marvell/mwifiex/11n.c

412

*buffer += struct_size(chan_list, chan_scan_param, 1);

drivers/net/wireless/marvell/mwifiex/11n.c

413

ret_len += struct_size(chan_list, chan_scan_param, 1);

drivers/net/wireless/quantenna/qtnfmac/commands.c

1327

payload_len = struct_size(tlv, iftype_data, tlv->n_iftype_data);

drivers/net/wireless/quantenna/qtnfmac/commands.c

206

unsigned int acl_len = struct_size(s->acl, mac_addrs,

drivers/net/wireless/quantenna/qtnfmac/commands.c

2546

size_t acl_size = struct_size(params, mac_addrs, params->n_acl_entries);

drivers/net/wireless/quantenna/qtnfmac/commands.c

347

size_t acl_size = struct_size(s->acl, mac_addrs,

drivers/net/wireless/ralink/rt2x00/rt2x00usb.c

807

hw = ieee80211_alloc_hw(struct_size(rt2x00dev, anchor, 1), ops->hw);

drivers/net/wireless/realtek/rtw89/acpi.c

179

expect_len = struct_size(ptr, country_list, ptr->country_count);

drivers/net/wireless/realtek/rtw89/coex.c

2578

n = struct_size(tbl, tbls, CXST_MAX);

drivers/net/wireless/realtek/rtw89/coex.c

2670

sz = struct_size(v7, regs, n);

drivers/net/wireless/realtek/rtw89/coex.c

2686

sz = struct_size(v1, regs, n);

drivers/net/wireless/realtek/rtw89/core.c

3704

int eht_len = struct_size(eht, user_info, 1);

drivers/net/wireless/realtek/rtw89/core.h

67

ALIGN(struct_size((struct ieee80211_radiotap_eht *)0, user_info, 1), 4) + \

drivers/net/wireless/realtek/rtw89/fw.c

10575

return struct_size(slot_h2c, roles, slot_arg->role_num);

drivers/net/wireless/realtek/rtw89/fw.c

10711

len = struct_size(h2c, infos, arg->num);

drivers/net/wireless/realtek/rtw89/fw.c

10840

len = struct_size(h2c, slots, arg->slot_num);

drivers/net/wireless/realtek/rtw89/fw.c

1377

p = devm_kzalloc(rtwdev->dev, struct_size(p, map, num_ents), GFP_KERNEL);

drivers/net/wireless/realtek/rtw89/fw.c

160

base_hdr_len = struct_size(fw_hdr, sections, info->section_num);

drivers/net/wireless/realtek/rtw89/fw.c

460

base_hdr_len = struct_size(fw_hdr, sections, info->section_num);

drivers/net/wireless/realtek/rtw89/fw.c

6512

skb_len = struct_size(h2c, elem, ch_num);

drivers/net/wireless/realtek/rtw89/fw.c

6590

skb_len = struct_size(h2c, elem, ch_num);

drivers/net/wireless/realtek/rtw89/wow.c

658

sz = struct_size(rekey_conf, key, cipher_info->len);

drivers/net/wireless/silabs/wfx/hif_tx_mib.c

103

int buf_len = struct_size(arg, ie_table, tbl_len);

drivers/net/wireless/silabs/wfx/hif_tx_mib.c

198

size_t size = struct_size(arg, tx_rate_retry_policy, 1);

drivers/net/wireless/zydas/zd1211rw/zd_usb.c

1633

if (rr->length < struct_size(regs, regs, count)) {

drivers/net/wireless/zydas/zd1211rw/zd_usb.c

1636

rr->length, struct_size(regs, regs, count));

drivers/net/wireless/zydas/zd1211rw/zd_usb.c

1892

req_len = struct_size(req, reg_writes, count);

drivers/net/wwan/t7xx/t7xx_port_ctrl_msg.c

152

if (msg_len < struct_size(port_msg, data, port_count)) {

drivers/net/wwan/t7xx/t7xx_port_ctrl_msg.c

154

struct_size(port_msg, data, port_count), msg_len);

drivers/net/wwan/t7xx/t7xx_port_proxy.c

588

struct_size(port_prox,

drivers/ntb/msi.c

45

ntb->msi = devm_kzalloc(&ntb->dev, struct_size(ntb->msi, peer_mws, peers),

drivers/ntb/test/ntb_msi_test.c

354

nm = devm_kzalloc(&ntb->dev, struct_size(nm, peers, peers), GFP_KERNEL);

drivers/nvdimm/ramdax.c

144

if (struct_size(cmd, out_buf, cmd->in_length) > buf_len)

drivers/nvdimm/ramdax.c

161

if (struct_size(cmd, in_buf, cmd->in_length) > buf_len)

drivers/nvme/common/auth.c

145

return struct_size(&key, key, key_len);

drivers/nvme/host/core.c

2345

size = struct_size(ruhs, ruhsd, S8_MAX - 1);

drivers/nvme/host/pci.c

3682

dev = kzalloc_node(struct_size(dev, descriptor_pools, nr_node_ids),

drivers/nvme/host/pr.c

241

rse_len = struct_size(rse, regctl_eds, num_keys);

drivers/nvme/host/pr.c

297

rse_len = struct_size(rse, regctl_eds, num_regs);

drivers/nvme/target/admin-cmd.c

488

return struct_size(desc, nsids, count);

drivers/pci/controller/pci-hyperv.c

3125

struct_size(bus_rel, func,

drivers/pci/controller/pci-hyperv.c

3140

struct_size(bus_rel2, func,

drivers/perf/arm-ni.c

722

ni = devm_kzalloc(&pdev->dev, struct_size(ni, cds, num_cds), GFP_KERNEL);

drivers/phy/cadence/phy-cadence-sierra.c

1383

sp = devm_kzalloc(dev, struct_size(sp, clk_data.hws,

drivers/phy/cadence/phy-cadence-torrent.c

2755

data = devm_kzalloc(dev, struct_size(data, hws, CDNS_TORRENT_OUTPUT_CLOCKS), GFP_KERNEL);

drivers/phy/mediatek/phy-mtk-xsphy.c

522

xsphy = devm_kzalloc(dev, struct_size(xsphy, phys, nphys), GFP_KERNEL);

drivers/phy/phy-can-transceiver.c

143

priv = devm_kzalloc(dev, struct_size(priv, can_transceiver_phy, num_ch), GFP_KERNEL);

drivers/phy/qualcomm/phy-qcom-edp.c

1388

data = devm_kzalloc(edp->dev, struct_size(data, hws, 2), GFP_KERNEL);

drivers/phy/qualcomm/phy-qcom-qmp-ufs.c

2084

struct_size(clk_data, hws, UFS_SYMBOL_CLOCKS),

drivers/phy/qualcomm/phy-qcom-usb-hs.c

216

uphy = devm_kzalloc(&ulpi->dev, struct_size(uphy, init_seq, (size / 2) + 1), GFP_KERNEL);

drivers/phy/samsung/phy-samsung-usb2.c

160

drv = devm_kzalloc(dev, struct_size(drv, instances, cfg->num_phys),

drivers/phy/st/phy-miphy28lp.c

1174

miphy_dev = devm_kzalloc(&pdev->dev, struct_size(miphy_dev, phys, nphys), GFP_KERNEL);

drivers/pinctrl/pinctrl-apple-gpio.c

453

pctl = devm_kzalloc(&pdev->dev, struct_size(pctl, irqgrps, nirqs),

drivers/pinctrl/pinctrl-eic7700.c

627

pc = devm_kzalloc(dev, struct_size(pc, functions, EIC7700_FUNCTIONS_COUNT), GFP_KERNEL);

drivers/pinctrl/pinctrl-mcp23s08_spi.c

167

data = devm_kzalloc(dev, struct_size(data, chip, chips), GFP_KERNEL);

drivers/pinctrl/pinctrl-tb10x.c

752

state = devm_kzalloc(dev, struct_size(state, pinfuncs,

drivers/pinctrl/samsung/pinctrl-s3c64xx.c

497

data = devm_kzalloc(dev, struct_size(data, domains, nr_domains),

drivers/pinctrl/sophgo/pinctrl-cv18xx.c

415

priv = devm_kzalloc(&pdev->dev, struct_size(priv, power_cfg, pctrl_data->npds),

drivers/pinctrl/starfive/pinctrl-starfive-jh7110.c

861

sfp = devm_kzalloc(dev, struct_size(sfp, saved_regs, num_saved_regs),

drivers/pinctrl/tegra/pinctrl-tegra.c

837

struct_size(pmx, pingroup_configs, soc_data->ngroups), GFP_KERNEL);

drivers/pinctrl/uniphier/pinctrl-uniphier-core.c

754

region = devm_kzalloc(dev, struct_size(region, vals, nregs),

drivers/platform/surface/surface_aggregator_cdev.c

119

kfifo_in(&client->buffer, (const u8 *)&event, struct_size(&event, data, 0));

drivers/platform/surface/surface_aggregator_cdev.c

98

size_t n = struct_size(&event, data, in->length);

drivers/platform/wmi/marshalling.c

101

length = struct_size(string, chars, obj->string.length + 1);

drivers/platform/x86/dell/dell-wmi-ddv.c

215

buffer_size = struct_size(buffer, raw_data, le32_to_cpu(buffer->raw_size));

drivers/platform/x86/dell/dell-wmi-ddv.c

532

cinfo = devm_kzalloc(dev, struct_size(cinfo, config, count + 1), GFP_KERNEL);

drivers/platform/x86/dell/dell-wmi-ddv.c

605

cinfo = devm_kzalloc(&wdev->dev, struct_size(cinfo, info, 4), GFP_KERNEL);

drivers/platform/x86/hp/hp-bioscfg/biosattr-interface.c

133

bios_args_size = struct_size(args, data, insize);

drivers/platform/x86/hp/hp-wmi.c

595

bios_args_size = struct_size(args, data, actual_insize);

drivers/platform/x86/intel/int3472/discrete.c

478

int3472 = devm_kzalloc(&pdev->dev, struct_size(int3472, gpios.table,

drivers/platform/x86/intel/int3472/tps68470.c

120

*clk_pdata = devm_kzalloc(dev, struct_size(*clk_pdata, consumers, n_consumers),

drivers/platform/x86/intel/int3472/tps68470.c

195

cells[0].pdata_size = struct_size(clk_pdata, consumers, n_consumers);

drivers/platform/x86/intel/pmt/crashlog.c

567

size = struct_size(priv, entry, intel_vsec_dev->num_resources);

drivers/platform/x86/intel/pmt/discovery.c

540

size = struct_size(priv, feature, ivdev->num_resources);

drivers/platform/x86/intel/pmt/telemetry.c

272

size = struct_size(feature_group, regions, count);

drivers/platform/x86/intel/pmt/telemetry.c

391

size = struct_size(priv, entry, intel_vsec_dev->num_resources);

drivers/platform/x86/lenovo/wmi-capdata.c

665

if (size < struct_size(block, data, count * 3)) {

drivers/platform/x86/lenovo/wmi-capdata.c

668

size, struct_size(block, data, count * 3));

drivers/platform/x86/lenovo/wmi-capdata.c

685

list = devm_kzalloc(&priv->wdev->dev, struct_size(list, cd_fan, count), GFP_KERNEL);

drivers/platform/x86/lenovo/wmi-capdata.c

722

list_size = struct_size(list, cd00, count);

drivers/platform/x86/lenovo/wmi-capdata.c

725

list_size = struct_size(list, cd01, count);

drivers/pmdomain/actions/owl-sps.c

111

struct_size(sps, domains, sps_info->num_domains),

drivers/pmdomain/mediatek/mtk-mfg-pmdomain.c

849

clk_data = devm_kzalloc(dev, struct_size(clk_data, hws, 2), GFP_KERNEL);

drivers/pmdomain/mediatek/mtk-pm-domains.c

1253

scpsys = devm_kzalloc(dev, struct_size(scpsys, domains, num_domains), GFP_KERNEL);

drivers/pmdomain/qcom/cpr.c

1605

struct_size(drv, fuse_corners, data->cpr_desc->num_fuse_corners),

drivers/pmdomain/rockchip/pm-domains.c

1030

struct_size(pmu, domains, pmu_info->num_domains),

drivers/pmdomain/sunxi/sun55i-pck600.c

142

pck = devm_kzalloc(dev, struct_size(pck, pds, desc->num_domains), GFP_KERNEL);

drivers/power/supply/axp20x_ac_power.c

340

struct_size(power, irqs, axp_data->num_irq_names),

drivers/power/supply/axp20x_usb_power.c

938

struct_size(power, irqs, axp_data->num_irq_names),

drivers/pwm/core.c

1601

return (void *)chip + ALIGN(struct_size(chip, pwms, chip->npwm), PWMCHIP_ALIGN);

drivers/pwm/core.c

1626

alloc_size = size_add(ALIGN(struct_size(chip, pwms, npwm), PWMCHIP_ALIGN),

drivers/pwm/pwm-dwc.c

71

ddata = devm_kzalloc(dev, struct_size(ddata, chips, info->nr), GFP_KERNEL);

drivers/pwm/pwm-jz4740.c

232

chip = devm_pwmchip_alloc(dev, info->num_pwms, struct_size(jz, clk, info->num_pwms));

drivers/pwm/pwm-mediatek.c

455

struct_size(pc, clk_pwms, soc->num_pwms));

drivers/rapidio/devices/rio_mport_cdev.c

1699

size += struct_size(rswitch, nextdev, RIO_GET_TOTAL_PORTS(swpinfo));

drivers/rapidio/rio-scan.c

342

size += struct_size(rswitch, nextdev, RIO_GET_TOTAL_PORTS(swpinfo));

drivers/regulator/da9062-regulator.c

945

regulators = devm_kzalloc(&pdev->dev, struct_size(regulators, regulator,

drivers/regulator/da9063-regulator.c

860

pdata = devm_kzalloc(&pdev->dev, struct_size(pdata, regulator_data, num), GFP_KERNEL);

drivers/regulator/da9063-regulator.c

933

regulators = devm_kzalloc(&pdev->dev, struct_size(regulators,

drivers/regulator/mc13783-regulator.c

409

struct_size(priv, regulators, num_regulators),

drivers/regulator/mc13892-regulator.c

547

struct_size(priv, regulators, num_regulators),

drivers/remoteproc/remoteproc_core.c

482

rsc_size = struct_size(rsc, vring, rsc->num_of_vrings);

drivers/remoteproc/remoteproc_elf_loader.c

305

if (struct_size(table, offset, table->num) > size) {

drivers/reset/sti/reset-syscfg.c

138

rc = devm_kzalloc(dev, struct_size(rc, channels, data->nr_channels), GFP_KERNEL);

drivers/rpmsg/qcom_glink_native.c

1041

const size_t msglen = struct_size(msg, intents, count);

drivers/rtc/rtc-ac100.c

314

struct_size(chip->clk_data, hws,

drivers/rtc/rtc-armada38x.c

493

rtc = devm_kzalloc(&pdev->dev, struct_size(rtc, val_to_freq, SAMPLE_NR),

drivers/s390/block/dasd_diag.c

546

cqr = dasd_smalloc_request(DASD_DIAG_MAGIC, 0, struct_size(dreq, bio, count),

drivers/scsi/aacraid/aachba.c

1252

fibsize = struct_size(readcmd2, sge,

drivers/scsi/aacraid/aachba.c

1383

fibsize = struct_size(writecmd2, sge,

drivers/scsi/hptiop.c

1047

req->header.size = cpu_to_le32(struct_size(req, sg_list, sg_count));

drivers/scsi/lpfc/lpfc_ct.c

3768

struct_size(rap, obj, be32_to_cpu(rap->no_of_objects));

drivers/scsi/lpfc/lpfc_ct.c

3787

struct_size(dap, obj, be32_to_cpu(dap->no_of_objects));

drivers/scsi/lpfc/lpfc_sli.c

15878

queue = kzalloc_node(struct_size(queue, q_pgs, pgcnt),

drivers/scsi/megaraid/megaraid_sas_fusion.c

1314

pd_seq_map_sz = struct_size(pd_sync, seq, MAX_PHYSICAL_DEVICES);

drivers/scsi/mpt3sas/mpt3sas_base.c

4928

sz = struct_size(sas_iounit_pg1, PhyData, num_phys);

drivers/scsi/mpt3sas/mpt3sas_scsih.c

2496

sz = struct_size(vol_pg0, PhysDisk, num_pds);

drivers/scsi/mpt3sas/mpt3sas_scsih.c

6292

sz = struct_size(sas_iounit_pg0, PhyData, ioc->sas_hba.num_phys);

drivers/scsi/mpt3sas/mpt3sas_scsih.c

6469

sz = struct_size(sas_iounit_pg0, PhyData, ioc->sas_hba.num_phys);

drivers/scsi/mpt3sas/mpt3sas_scsih.c

6901

sz = struct_size(sas_iounit_pg0, PhyData, ioc->sas_hba.num_phys);

drivers/scsi/mpt3sas/mpt3sas_scsih.c

7052

sz = struct_size(sas_iounit_pg0, PhyData, ioc->sas_hba.num_phys);

drivers/scsi/mpt3sas/mpt3sas_scsih.c

7074

sz = struct_size(sas_iounit_pg1, PhyData, ioc->sas_hba.num_phys);

drivers/scsi/mpt3sas/mpt3sas_transport.c

1791

sz = struct_size(sas_iounit_pg0, PhyData, ioc->sas_hba.num_phys);

drivers/scsi/mpt3sas/mpt3sas_transport.c

1831

sz = struct_size(sas_iounit_pg1, PhyData, ioc->sas_hba.num_phys);

drivers/scsi/mpt3sas/mpt3sas_transport.c

1941

sz = struct_size(sas_iounit_pg1, PhyData, ioc->sas_hba.num_phys);

drivers/scsi/mpt3sas/mpt3sas_warpdrive.c

144

sz = struct_size(vol_pg0, PhysDisk, num_pds);

drivers/scsi/virtio_scsi.c

932

struct_size(vscsi, req_vqs, num_queues));

drivers/soc/apple/tunable.c

41

tunable = devm_kzalloc(dev, struct_size(tunable, values, sz), GFP_KERNEL);

drivers/soc/fsl/qe/qe.c

486

calc_size = struct_size(firmware, microcode, firmware->count);

drivers/soc/qcom/smem.c

1146

smem = devm_kzalloc(&pdev->dev, struct_size(smem, regions, num_regions),

drivers/soc/qcom/wcnss_ctrl.c

231

req->hdr.len = struct_size(req, fragment, NV_FRAGMENT_SIZE);

drivers/spi/spi-ljca.c

104

struct_size(w_packet, data, w_packet->len),

drivers/spi/spi-pci1xxxx.c

819

struct_size(spi_bus, spi_int, hw_inst_cnt),

drivers/spi/spi.c

3756

struct_size(rxfer, inserted_transfers, insert)

drivers/staging/greybus/power_supply.c

523

struct_size(resp, props, props_count),

drivers/staging/media/ipu3/ipu3-css-fw.c

131

if (css->fw->size < struct_size(css->fwp, binary_header, 1) ||

drivers/staging/media/ipu3/ipu3-css-fw.c

134

if (struct_size(css->fwp, binary_header,

drivers/tee/qcomtee/async.c

120

return struct_size(msg, object_ids, msg->counts);

drivers/thermal/imx8mm_thermal.c

303

tmu = devm_kzalloc(&pdev->dev, struct_size(tmu, sensors,

drivers/thermal/qcom/tsens.c

1414

struct_size(priv, sensor, num_sensors),

drivers/tty/mxser.c

1745

brd = devm_kzalloc(&pdev->dev, struct_size(brd, ports, nports),

drivers/tty/serial/8250/8250_exar.c

1470

priv = devm_kzalloc(&pcidev->dev, struct_size(priv, line, nr_ports), GFP_KERNEL);

drivers/tty/serial/8250/8250_pci1xxxx.c

782

priv = devm_kzalloc(dev, struct_size(priv, line, nr_ports), GFP_KERNEL);

drivers/tty/serial/8250/8250_pericom.c

105

pericom = devm_kzalloc(&pdev->dev, struct_size(pericom, line, nr), GFP_KERNEL);

drivers/tty/serial/max310x.c

1324

s = devm_kzalloc(dev, struct_size(s, p, devtype->nr), GFP_KERNEL);

drivers/tty/serial/mvebu-uart.c

1386

struct_size(hw_clk_data, hws,

drivers/tty/serial/sc16is7xx.c

1567

s = devm_kzalloc(dev, struct_size(s, p, devtype->nr_uart), GFP_KERNEL);

drivers/usb/atm/usbatm.c

1021

size = struct_size(instance, urbs,

drivers/usb/misc/usb-ljca.c

591

if (ret != struct_size(desc, bank_desc, desc->bank_num))

drivers/usb/misc/usb-ljca.c

627

if (ret != struct_size(desc, info, desc->num))

drivers/usb/misc/usb-ljca.c

666

if (ret != struct_size(desc, info, desc->num))

drivers/usb/typec/mux/intel_pmc_mux.c

748

pmc = devm_kzalloc(&pdev->dev, struct_size(pmc, port, num_ports), GFP_KERNEL);

drivers/vdpa/mlx5/core/mr.c

236

cmds[i].inlen = struct_size(cmd_mem, mtt, mttcount);

drivers/vfio/pci/nvgrace-gpu/main.c

553

size = struct_size(sparse, areas, 1);

drivers/vfio/vfio_iommu_type1.c

2786

size = struct_size(cap_iovas, iova_ranges, iovas);

drivers/vhost/vhost.c

562

return size_add(struct_size(vq->avail, ring, num), event);

drivers/vhost/vhost.c

571

return size_add(struct_size(vq->used, ring, num), event);

drivers/video/fbdev/aty/aty128fb.c

247

u8 struct_size;

drivers/video/fbdev/mmp/hw/mmp_ctrl.c

473

struct_size(ctrl, path_plats, mi->path_num),

drivers/xen/privcmd.c

1246

size = struct_size(kioreq, ports, ioeventfd->vcpus);

fs/afs/addr_prefs.c

218

size = struct_size(preflist, prefs, max_prefs);

fs/afs/addr_prefs.c

399

psize = struct_size(old, prefs, max_prefs);

fs/afs/addr_prefs.c

409

memcpy(preflist, old, struct_size(preflist, prefs, old->nr));

fs/btrfs/qgroup.c

3189

if (size != struct_size(inherit, qgroups, inherit->num_qgroups))

fs/btrfs/qgroup.c

3248

struct_sz = struct_size(res, qgroups, num_qgroups);

fs/btrfs/raid-stripe-tree.c

334

const size_t item_size = struct_size(stripe_extent, strides, num_stripes);

fs/btrfs/subpage.c

96

real_size = struct_size(ret, bitmaps,

fs/ecryptfs/messaging.c

236

msg_size = struct_size(msg, data, msg->data_len);

fs/ecryptfs/miscdev.c

154

msg_size = struct_size(msg, data, data_size);

fs/erofs/zdata.c

238

size = struct_size(a, compressed_bvecs, pcs->maxpages);

fs/ext4/fast_commit.c

1138

snap = kmalloc(struct_size(snap, inode_buf, inode_len), GFP_NOFS);

fs/ext4/xattr.c

2896

struct_size(*ea_inode_array, inodes,

fs/f2fs/acl.c

313

clone = kmemdup(acl, struct_size(acl, a_entries, acl->a_count),

fs/fhandle.c

108

struct_size(handle, f_handle, handle_bytes)))

fs/ioctl.c

428

size = struct_size(same, info, count);

fs/ntfs/ea.c

199

size_t new_ea_size = ALIGN(struct_size(p_ea, ea_name, 1 + name_len + val_size), 4);

fs/ntfs/ea.c

73

actual_size = ALIGN(struct_size(p_ea, ea_name, 1 + p_ea->ea_name_length +

fs/ntfs3/fslog.c

1384

log->ra_size = struct_size(log->ra, clients, 1);

fs/ntfs3/fslog.c

392

return struct_size(lr, page_lcns, max_t(u16, 1, t16));

fs/ntfs3/fslog.c

4623

dptbl = init_rsttbl(struct_size(dp, page_lcns, t32),

fs/ntfs3/fsntfs.c

1737

return struct_size(sid, SubAuthority, sid->SubAuthorityCount);

fs/ntfs3/xattr.c

165

ea_size = ALIGN(struct_size(ef, name,

fs/ntfs3/xattr.c

27

ALIGN(struct_size(ea, name,

fs/ntfs3/xattr.c

345

add = ALIGN(struct_size(ea_all, name, 1 + name_len + val_size), 4);

fs/ntfs3/xattr.c

35

return struct_size(ea, name,

fs/ocfs2/dlm/dlmrecovery.c

1122

struct_size(mres, ml, mres->num_locks),

fs/posix_acl.c

230

clone = kmemdup(acl, struct_size(acl, a_entries, acl->a_count),

fs/smb/client/smb2ops.c

1798

struct_size(qi_rsp, Buffer, qi.input_buffer_length) >

fs/smb/client/smb2ops.c

1972

(char *)cc_req, struct_size(cc_req, Chunks, chunks),

fs/smb/server/smb2pdu.c

5486

cpu_to_le32(struct_size(file_info, FileName, conv_len));

fs/smb/server/smb2pdu.c

8474

input_count < struct_size(ci_req, Chunks, chunk_count)) {

fs/smb/server/smb_common.c

289

if (struct_size(req, Dialects, le16_to_cpu(req->DialectCount)) >

fs/udf/super.c

1434

struct_size(st, mapEntry,

fs/verity/enable.c

186

size_t desc_size = struct_size(desc, signature, arg->sig_size);

fs/xfs/libxfs/xfs_attr_sf.h

34

return struct_size(sfep, nameval, sfep->namelen + sfep->valuelen);

fs/xfs/xfs_log.c

1246

log->l_iclog_hsize = struct_size(log->l_iclog->ic_header, h_ext,

include/linux/avf/virtchnl.h

1675

(struct_size(p, member, count) + (old - 1 - struct_size(p, member, 0)))

include/linux/avf/virtchnl.h

1678

(struct_size(p, member, count - 1) + (old - struct_size(p, member, 0)))

include/linux/avf/virtchnl.h

1681

(struct_size(p, member, count) + (old - struct_size(p, member, 0)))

include/linux/habanalabs/hl_boot_if.h

794

__le16 struct_size;

include/linux/overflow.h

453

struct_size((type *)NULL, member, count)

include/linux/ring_buffer.h

271

size_t len = struct_size(desc, page_va, desc->nr_page_va);

include/linux/ring_buffer.h

287

size_mul(nr_cpus, struct_size(rbdesc, page_va, nr_pages)));

io_uring/io_uring.c

2113

off = struct_size(rings, cqes, cq_entries);

io_uring/register.c

51

size = struct_size(p, ops, nr_args);

kernel/audit.c

1540

sig_data, struct_size(sig_data, ctx,

kernel/auditfilter.c

1098

struct_size(data, buf, data->buflen));

kernel/bpf/btf.c

2284

u32 struct_size = struct_type->size;

kernel/bpf/btf.c

2305

if (struct_size < bytes_offset ||

kernel/bpf/btf.c

2306

struct_size - bytes_offset < BITS_ROUNDUP_BYTES(nr_copy_bits)) {

kernel/bpf/btf.c

2322

u32 struct_size = struct_type->size;

kernel/bpf/btf.c

2361

if (struct_size < bytes_offset ||

kernel/bpf/btf.c

2362

struct_size - bytes_offset < BITS_ROUNDUP_BYTES(nr_copy_bits)) {

kernel/bpf/btf.c

2691

u32 struct_size, struct_bits_off, bytes_offset;

kernel/bpf/btf.c

2693

struct_size = struct_type->size;

kernel/bpf/btf.c

2703

if (struct_size - bytes_offset < sizeof(void *)) {

kernel/bpf/btf.c

3016

u32 struct_size, bytes_offset;

kernel/bpf/btf.c

3028

struct_size = struct_type->size;

kernel/bpf/btf.c

3030

if (struct_size - bytes_offset < array_size) {

kernel/bpf/btf.c

3267

u32 struct_size, bytes_offset;

kernel/bpf/btf.c

3275

struct_size = struct_type->size;

kernel/bpf/btf.c

3277

if (struct_size - bytes_offset < member_type->size) {

kernel/bpf/btf.c

3294

u32 struct_size = t->size;

kernel/bpf/btf.c

3354

if (BITS_ROUNDUP_BYTES(offset) > struct_size) {

kernel/bpf/btf.c

4435

u32 struct_size, bytes_offset;

kernel/bpf/btf.c

4443

struct_size = struct_type->size;

kernel/bpf/btf.c

4445

if (struct_size - bytes_offset < member_type->size) {

kernel/bpf/btf.c

4459

u32 struct_bits_off, nr_bits, bytes_end, struct_size;

kernel/bpf/btf.c

4478

struct_size = struct_type->size;

kernel/bpf/btf.c

4480

if (struct_size < bytes_end) {

kernel/bpf/btf.c

5803

new_aof = krealloc(aof, struct_size(new_aof, ids, aof->cnt + 1),

kernel/bpf/btf.c

5830

new_aof = krealloc(aof, struct_size(new_aof, ids, aof->cnt + 1),

kernel/bpf/btf.c

5867

new_tab = krealloc(tab, struct_size(new_tab, types, tab_cnt + 1),

kernel/bpf/btf.c

8954

struct_size(set, pairs, set_cnt + add_set->cnt),

kernel/bpf/btf.c

9313

struct_size(tab, dtors, tab_cnt + add_cnt),

kernel/bpf/btf.c

9885

struct_size(tab, ops, tab->capacity * 2),

kernel/bpf/local_storage.c

167

new = bpf_map_kmalloc_node(map, struct_size(new, data, map->value_size),

kernel/bpf/reuseport_array.c

155

array = bpf_map_area_alloc(struct_size(array, ptrs, attr->max_entries), numa_node);

kernel/bpf/reuseport_array.c

339

return struct_size(array, ptrs, map->max_entries);

kernel/bpf/syscall.c

716

size = struct_size(rec, fields, rec->cnt);

kernel/bpf/syscall.c

772

size = struct_size(rec_a, fields, rec_a->cnt);

kernel/crash_dump_dm_crypt.c

30

return struct_size(keys_header, keys, total_keys);

kernel/futex/core.c

1823

fph = kvzalloc(struct_size(fph, queues, hash_slots),

kernel/irq/devres.c

271

gc = devm_kzalloc(dev, struct_size(gc, chip_types, num_ct), GFP_KERNEL);

kernel/irq/generic-chip.c

297

gc_sz = struct_size(gc, chip_types, info->num_ct);

kernel/irq/generic-chip.c

298

dgc_sz = struct_size(dgc, gc, numchips);

kernel/irq/irqdomain.c

249

domain = kzalloc_node(struct_size(domain, revmap, info->size),

kernel/irq/matrix.c

64

m->maps = __alloc_percpu(struct_size(m->maps, alloc_map, matrix_size * 2),

kernel/kcov.c

756

remote_arg_size = struct_size(remote_arg, handles,

kernel/params.c

648

new_mp = krealloc(mk->mp, struct_size(mk->mp, attrs, mk->mp->num + 1),

kernel/sched/ext/ext.c

6725

new_ksyncs = kvzalloc_node(struct_size(new_ksyncs, syncs, nr_cpu_ids),

kernel/trace/ring_buffer.c

2338

len = struct_size(desc, page_va, desc->nr_page_va);

kernel/trace/trace.c

1891

int max_len = PAGE_SIZE - struct_size(entry, array, 1);

kernel/trace/trace.c

2188

struct_size(entry, caller, nr_entries),

kernel/trace/trace.c

4881

if (struct_size(tscratch, entries, tscratch->nr_entries + 1) > size)

kernel/trace/trace.c

8330

if (struct_size(tscratch, entries, tscratch->nr_entries) > size)

kernel/trace/trace.c

8401

struct_size(tscratch, entries, 128));

kernel/trace/trace_events_synth.c

442

data->as_dynamic.offset = struct_size(entry, fields, event->n_u64) + data_size;

kernel/trace/trace_events_synth.c

478

data_offset = struct_size(entry, fields, event->n_u64);

kernel/trace/trace_events_user.c

2392

size = struct_size(refs, events, count + 1);

kernel/workqueue.c

5823

wq_size = struct_size(wq, node_nr_active, nr_node_ids + 1);

lib/assoc_array.c

1496

memcpy(new_s, shortcut, struct_size(new_s, index_key, keylen));

lib/objpool.c

68

size = struct_size(slot, entries, pool->capacity) +

lib/rhashtable.c

195

kvmalloc_node_align_noprof(struct_size(tbl, buckets, nbuckets),

lib/tests/overflow_kunit.c

718

KUNIT_EXPECT_EQ(test, sizeof(ce_array), struct_size(obj, data, var));

lib/tests/overflow_kunit.c

781

struct_size, obj, data, var++);

lib/tests/overflow_kunit.c

783

struct_size, obj, data, var++);

lib/tests/overflow_kunit.c

784

check_one_size_helper(sizeof(*obj), struct_size, obj, data, 0 + unconst);

lib/tests/overflow_kunit.c

786

struct_size, obj, data, 1 + unconst);

lib/tests/overflow_kunit.c

788

struct_size, obj, data, -3 + unconst);

lib/tests/overflow_kunit.c

790

struct_size, obj, data, SIZE_MAX - 3 + unconst);

mm/percpu.c

1366

alloc_size = struct_size(chunk, populated,

mm/percpu.c

2421

base_size = ALIGN(struct_size(ai, groups, nr_groups),

mm/percpu.c

2671

pcpu_chunk_struct_size = struct_size((struct pcpu_chunk *)0, populated,

mm/slub.c

2750

sheaf_size = struct_size(sheaf, objects, capacity);

net/batman-adv/translation-table.c

2940

size = struct_size(tvlv_tt_data, vlan_data, num_vlan);

net/batman-adv/translation-table.c

3389

tvlv_ptr += struct_size(tt_data, vlan_data, ntohs(tt_data->num_vlan));

net/batman-adv/translation-table.c

4004

tt_data_sz = struct_size(tt_data, vlan_data, num_vlan);

net/batman-adv/translation-table.c

829

change_offset = struct_size(*tt_data, vlan_data, num_vlan);

net/batman-adv/translation-table.c

868

change_offset = struct_size(*tt_data, vlan_data, num_vlan);

net/batman-adv/translation-table.c

930

change_offset = struct_size(*tt_data, vlan_data, num_vlan);

net/batman-adv/translation-table.c

969

change_offset = struct_size(*tt_data, vlan_data, num_vlan);

net/bluetooth/hci_conn.c

1965

struct_size(pdu, cis, pdu->num_cis),

net/bluetooth/hci_core.c

787

err = copy_to_user(arg, dl, struct_size(dl, dev_req, n));

net/bluetooth/hci_sync.c

1315

struct_size(pdu, data, len), pdu,

net/bluetooth/hci_sync.c

1558

struct_size(pdu, data, len), pdu,

net/bluetooth/hci_sync.c

1748

struct_size(pdu, data, len), pdu,

net/bluetooth/hci_sync.c

6952

struct_size(cmd, cis, cmd->num_cis),

net/bluetooth/hci_sync.c

7563

struct_size(cp, bis, cp->num_bis), cp,

net/bluetooth/l2cap_core.c

7440

struct_size(pdu, scid, 1), pdu);

net/bluetooth/mgmt.c

2494

expected_len = struct_size(send, adv_data, send->adv_data_len);

net/bluetooth/mgmt.c

3005

expected_len = struct_size(cp, keys, key_count);

net/bluetooth/mgmt.c

3412

struct_size(rp, addr, i));

net/bluetooth/mgmt.c

4429

expected_len = struct_size(keys, keys, key_count);

net/bluetooth/mgmt.c

603

struct_size(rp, entry, count));

net/bluetooth/mgmt.c

7265

expected_len = struct_size(cp, irks, irk_count);

net/bluetooth/mgmt.c

7358

expected_len = struct_size(cp, keys, key_count);

net/bluetooth/mgmt.c

8071

expected_len = struct_size(cp, params, param_count);

net/bluetooth/mgmt.c

9223

expected_len = struct_size(cp, data, cp->adv_data_len +

net/bluetooth/rfcomm/tty.c

536

err = copy_to_user(arg, dl, struct_size(dl, dev_info, n));

net/bluetooth/sco.c

1087

optlen < struct_size(codecs, codecs, codecs->num_codecs)) {

net/bridge/br_multicast.c

3006

grec_len = struct_size(grec, grec_src, nsrcs);

net/core/dst.c

326

md_dst = __alloc_percpu_gfp(struct_size(md_dst, u.tun_info.options,

net/ipv4/igmp.c

2375

atomic_sub(struct_size(psf, sl_addr, psf->sl_max), &sk->sk_omem_alloc);

net/ipv4/igmp.c

2524

newpsl = sock_kmalloc(sk, struct_size(newpsl, sl_addr, count),

net/ipv4/igmp.c

2536

atomic_sub(struct_size(psl, sl_addr, psl->sl_max),

net/ipv4/igmp.c

2613

newpsl = sock_kmalloc(sk, struct_size(newpsl, sl_addr,

net/ipv4/igmp.c

2627

struct_size(newpsl, sl_addr,

net/ipv4/igmp.c

2641

atomic_sub(struct_size(psl, sl_addr, psl->sl_max),

net/ipv4/nexthop.c

170

size = struct_size(info->nh_res_table, nhs, num_nh_buckets);

net/ipv4/nexthop.c

567

size = struct_size(res_table, nh_buckets, num_nh_buckets);

net/ipv6/exthdrs.c

564

buf = kcalloc(struct_size(hdr, segments.addr, n + 2), 2, GFP_ATOMIC);

net/ipv6/mcast.c

2663

atomic_sub(struct_size(psl, sl_addr, psl->sl_max),

net/ipv6/mcast.c

448

newpsl = sock_kmalloc(sk, struct_size(newpsl, sl_addr, count),

net/ipv6/mcast.c

459

atomic_sub(struct_size(psl, sl_addr, psl->sl_max),

net/ipv6/mcast.c

536

newpsl = sock_kmalloc(sk, struct_size(newpsl, sl_addr,

net/ipv6/mcast.c

554

sock_kfree_s(sk, newpsl, struct_size(newpsl, sl_addr,

net/ipv6/mcast.c

567

atomic_sub(struct_size(psl, sl_addr, psl->sl_max),

net/ipv6/rpl_iptunnel.c

140

buf = kcalloc(struct_size(srh, segments.addr, srh->segments_left), 2, GFP_ATOMIC);

net/mac80211/cfg.c

1502

size += struct_size(new->mbssid_ies, elem, mbssid->cnt);

net/mac80211/cfg.c

1505

size += struct_size(new->rnr_ies, elem, rnr->cnt);

net/mac80211/cfg.c

1530

pos += struct_size(new->mbssid_ies, elem, mbssid->cnt);

net/mac80211/cfg.c

1535

pos += struct_size(new->rnr_ies, elem, rnr->cnt);

net/mac80211/nan.c

662

new_sched = kzalloc(struct_size(new_sched, channels, sched->n_channels),

net/mac80211/scan.c

780

local->hw_scan_req = kmalloc(struct_size(local->hw_scan_req,

net/mpls/mpls_iptunnel.c

189

newts = lwtunnel_state_alloc(struct_size(tun_encap_info, label,

net/netfilter/ipvs/ip_vs_ctl.c

3788

size = struct_size(get, entrytable, get->num_services);

net/netfilter/ipvs/ip_vs_ctl.c

3872

size = struct_size(get, entrytable, get->num_dests);

net/netfilter/nf_tables_api.c

522

new_trans = krealloc(tail, struct_size(tail, elems, nelems),

net/netfilter/nf_tables_api.c

6721

trans = nft_trans_alloc(ctx, msg_type, struct_size(te, elems, 1));

net/netfilter/nft_set_pipapo.c

1221

scratch = kvzalloc_node(struct_size(scratch, __map, bsize_max * 2) +

net/netlink/policy.c

50

state = krealloc(state, struct_size(state, policies, n_alloc),

net/openvswitch/flow_table.c

221

new = kzalloc(struct_size(new, masks, size) +

net/openvswitch/flow_table.c

227

struct_size(new, masks, size));

net/psp/psp_sock.c

76

sz = struct_size(pas, drv_data, psd->caps->assoc_drv_spc);

net/sched/act_pedit.c

520

s = struct_size(opt, keys, parms->tcfp_nkeys);

net/sched/cls_u32.c

1104

sel_size = struct_size(s, keys, s->nkeys);

net/sched/cls_u32.c

1124

n->pf = __alloc_percpu(struct_size(n->pf, kcnts, s->nkeys),

net/sched/cls_u32.c

1380

if (nla_put(skb, TCA_U32_SEL, struct_size(&n->sel, keys, n->sel.nkeys),

net/sched/cls_u32.c

1444

if (nla_put_64bit(skb, TCA_U32_PCNT, struct_size(gpf, kcnts, n->sel.nkeys),

net/sched/cls_u32.c

855

unsafe_memcpy(&new->sel, s, struct_size(s, keys, s->nkeys),

net/sctp/socket.c

7207

ids_size = struct_size(ids, gaids_assoc_id, num);

net/sunrpc/xprtrdma/svc_rdma_recvfrom.c

129

ctxt = kzalloc_node(struct_size(ctxt, rc_pages, pages),

net/sunrpc/xprtrdma/svc_rdma_rw.c

73

ctxt = kmalloc_node(struct_size(ctxt, rw_first_bvec,

net/sunrpc/xprtrdma/svc_rdma_sendto.c

127

ctxt = kzalloc_node(struct_size(ctxt, sc_sges, rdma->sc_max_send_sges),

net/tipc/link.c

1425

if (sz == struct_size(p, gacks, size_add(p->ugack_cnt, p->bgack_cnt))) {

net/tipc/link.c

1430

} else if (uc && sz == struct_size(p, gacks, p->ugack_cnt)) {

net/tipc/link.c

1512

len = struct_size(ga, gacks, size_add(ga->bgack_cnt, ga->ugack_cnt));

net/tipc/link.c

1561

this_ga = kmemdup(ga, struct_size(ga, gacks, ga->bgack_cnt),

net/tls/tls_sw.c

1304

mem = kmalloc(aead_size + struct_size(dctx, sg, size_add(n_sgin, n_sgout)),

net/wireless/nl80211.c

11162

size = struct_size(request, req.channels, n_channels);

net/wireless/nl80211.c

11575

size = struct_size(request, channels, n_channels);

net/wireless/nl80211.c

11589

struct_size(request, channels, n_channels);

net/wireless/nl80211.c

17519

sched = kzalloc(struct_size(sched, nan_channels, n_channels),

net/wireless/scan.c

3549

creq = kzalloc(struct_size(creq, req.channels, n_channels) +

net/wireless/scan.c

3559

struct_size(creq, req.channels, n_channels);

net/wireless/scan.c

919

size = struct_size(request, req.channels, n_channels);

net/wireless/sme.c

119

struct_size(request, req.channels, n_channels);

net/wireless/tests/scan.c

812

ies = kunit_kzalloc(test, struct_size(ies, data, input->len), GFP_KERNEL);

net/xdp/xsk_queue.c

20

return struct_size(umem_ring, desc, q->nentries);

net/xdp/xsk_queue.c

21

return struct_size(rxtx_ring, desc, q->nentries);

net/xdp/xskmap.c

76

size = struct_size(m, xsk_map, attr->max_entries);

net/xdp/xskmap.c

92

return struct_size(m, xsk_map, map->max_entries) +

scripts/dtc/libfdt/fdt_rw.c

14

int mem_rsv_size, int struct_size)

scripts/dtc/libfdt/fdt_rw.c

20

(fdt_off_dt_struct(fdt) + struct_size))

scripts/dtc/libfdt/fdt_rw.c

410

int struct_size,

scripts/dtc/libfdt/fdt_rw.c

417

strings_off = struct_off + struct_size;

scripts/dtc/libfdt/fdt_rw.c

422

memmove(new + struct_off, old + fdt_off_dt_struct(old), struct_size);

scripts/dtc/libfdt/fdt_rw.c

424

fdt_set_size_dt_struct(new, struct_size);

scripts/dtc/libfdt/fdt_rw.c

434

int mem_rsv_size, struct_size;

scripts/dtc/libfdt/fdt_rw.c

446

struct_size = fdt_size_dt_struct(fdt);

scripts/dtc/libfdt/fdt_rw.c

448

struct_size = 0;

scripts/dtc/libfdt/fdt_rw.c

449

while (fdt_next_tag(fdt, struct_size, &struct_size) != FDT_END)

scripts/dtc/libfdt/fdt_rw.c

451

if (struct_size < 0)

scripts/dtc/libfdt/fdt_rw.c

452

return struct_size;

scripts/dtc/libfdt/fdt_rw.c

458

!fdt_blocks_misordered_(fdt, mem_rsv_size, struct_size)) {

scripts/dtc/libfdt/fdt_rw.c

464

fdt_set_size_dt_struct(buf, struct_size);

scripts/dtc/libfdt/fdt_rw.c

471

+ struct_size + fdt_size_dt_strings(fdt);

scripts/dtc/libfdt/fdt_rw.c

486

fdt_packblocks_(fdt, tmp, mem_rsv_size, struct_size,

security/security.c

408

nctx_len = ALIGN(struct_size(nctx, ctx, val_len), sizeof(void *));

sound/core/init.c

236

struct_size(card, private_data_area, extra_size),

sound/core/oss/rate.c

311

struct_size(data, channels,

sound/hda/codecs/ca0132.c

3141

return struct_size(p, data, p->count);

sound/pci/ctxfi/ctmixer.c

969

alloc_size = struct_size(mixer, amixers, NUM_CT_AMIXERS * CHN_NUM);

sound/soc/apple/mca.c

1046

mca = devm_kzalloc(&pdev->dev, struct_size(mca, clusters, nclusters),

sound/soc/codecs/audio-iio-aux.c

240

iio_aux = devm_kzalloc(dev, struct_size(iio_aux, chans, count), GFP_KERNEL);

sound/soc/codecs/aw87390.c

267

struct_size(aw87390->aw_cfg, data, cont->size), GFP_KERNEL);

sound/soc/codecs/aw88081.c

1152

aw_cfg = devm_kzalloc(aw88081->aw_pa->dev, struct_size(aw_cfg, data, cont->size), GFP_KERNEL);

sound/soc/codecs/aw88166.c

1595

struct_size(aw88166->aw_cfg, data, cont->size), GFP_KERNEL);

sound/soc/codecs/aw88261.c

1174

aw_cfg = devm_kzalloc(aw88261->aw_pa->dev, struct_size(aw_cfg, data, cont->size), GFP_KERNEL);

sound/soc/codecs/aw88395/aw88395.c

479

aw_cfg = devm_kzalloc(aw88395->aw_pa->dev, struct_size(aw_cfg, data, cont->size), GFP_KERNEL);

sound/soc/codecs/aw88399.c

1927

struct_size(aw88399->aw_cfg, data, cont->size), GFP_KERNEL);

sound/soc/codecs/cs-amp-lib-test.c

1017

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, priv->cal_blob->count),

sound/soc/codecs/cs-amp-lib-test.c

1029

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, priv->cal_blob->count),

sound/soc/codecs/cs-amp-lib-test.c

1042

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, priv->cal_blob->count),

sound/soc/codecs/cs-amp-lib-test.c

1075

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 2), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1088

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 4), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1103

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 4), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1118

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1135

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1167

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 2), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1180

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1197

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1216

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1246

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 8), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1277

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 8), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1307

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 8), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1342

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 8), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1378

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, priv->cal_blob->count),

sound/soc/codecs/cs-amp-lib-test.c

1393

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, priv->cal_blob->count),

sound/soc/codecs/cs-amp-lib-test.c

1411

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, priv->cal_blob->count),

sound/soc/codecs/cs-amp-lib-test.c

1429

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, priv->cal_blob->count),

sound/soc/codecs/cs-amp-lib-test.c

1448

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, priv->cal_blob->count),

sound/soc/codecs/cs-amp-lib-test.c

1483

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 2), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1496

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 4), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1511

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1528

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1545

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 8), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1578

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 2), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1591

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 4), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1606

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1623

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1640

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 8), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1674

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1688

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1702

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1716

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1752

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1766

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1780

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1794

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1921

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1936

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1951

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

1966

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

2116

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

288

KUNIT_ASSERT_EQ(test, *size, struct_size(priv->cal_blob, data, 8));

sound/soc/codecs/cs-amp-lib-test.c

68

KUNIT_ASSERT_EQ(test, struct_size(priv->cal_blob, data, priv->cal_blob->count),

sound/soc/codecs/cs-amp-lib-test.c

83

blob_size = struct_size(priv->cal_blob, data, num_amps);

sound/soc/codecs/cs-amp-lib-test.c

903

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, priv->cal_blob->count),

sound/soc/codecs/cs-amp-lib-test.c

915

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 2), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

924

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 4), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

935

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

962

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

975

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib-test.c

988

KUNIT_EXPECT_EQ(test, struct_size(priv->cal_blob, data, 6), priv->cal_blob->size);

sound/soc/codecs/cs-amp-lib.c

383

struct_size(efi_data, data, efi_data->count) > data_size) {

sound/soc/codecs/cs-amp-lib.c

411

struct_size(data, data, data->count), data);

sound/soc/codecs/cs-amp-lib.c

544

unsigned int new_data_size = struct_size(data, data, num_entries);

sound/soc/codecs/cs-amp-lib.c

553

memcpy(new_data, data, struct_size(data, data, data->count));

sound/soc/codecs/tlv320dac33.c

1481

dac33 = devm_kzalloc(&client->dev, struct_size(dac33, reg_cache, ARRAY_SIZE(dac33_reg)),

sound/soc/codecs/uda1380.c

771

struct_size(uda1380, reg_cache, ARRAY_SIZE(uda1380_reg)),

sound/soc/intel/avs/apl.c

45

size = struct_size(info, logs_core, num_cores);

sound/soc/intel/avs/icl.c

28

size = struct_size(info, logs_priorities_mask, num_libs);

sound/soc/intel/avs/messages.h

105

#define avs_tlv_size(tlv) struct_size(tlv, value, (tlv)->length / 4)

sound/soc/intel/avs/path.c

578

cfg_size = struct_size(cfg, vols, 1);

sound/soc/intel/avs/path.c

768

cfg_size = struct_size(cfg, pin_fmts, num_pins);

sound/soc/intel/avs/skl.c

88

size = struct_size(info, logs_core, num_cores);

sound/soc/intel/avs/topology.c

432

*blob = devm_kzalloc(comp->card->dev, struct_size(*blob, capabilities, size), GFP_KERNEL);

sound/soc/mediatek/mt2701/mt2701-afe-pcm.c

1608

struct_size(afe_priv, i2s_path, soc->i2s_num),

sound/soc/qcom/qdsp6/audioreach.c

100

#define APM_MOD_PROP_PSIZE(p, n) ALIGN(struct_size(p, mod_prop_obj, n), 8)

sound/soc/qcom/qdsp6/audioreach.c

110

#define APM_MOD_CONN_PSIZE(p, n) ALIGN(struct_size(p, conn_obj, n), 8)

sound/soc/qcom/qdsp6/audioreach.c

146

#define APM_PCM_OUT_FMT_CFG_PSIZE(p, n) ALIGN(struct_size(p, channel_mapping, n), 4)

sound/soc/qcom/qdsp6/audioreach.c

162

#define APM_MFC_CFG_PSIZE(p, n) ALIGN(struct_size(p, channel_mapping, n), 4)

sound/soc/qcom/qdsp6/audioreach.c

35

#define APM_SUB_GRAPH_PSIZE(p, n) ALIGN(struct_size(p, sg_cfg, n), 8)

sound/soc/qcom/qdsp6/audioreach.c

64

#define APM_CONTAINER_PSIZE(p, n) ALIGN(struct_size(p, cont_obj, n), 8)

sound/soc/qcom/qdsp6/audioreach.c

75

#define APM_MOD_LIST_OBJ_PSIZE(p, n) struct_size(p, mod_cfg, n)

sound/soc/qcom/qdsp6/q6apm.c

28

#define APM_GRAPH_MGMT_PSIZE(p, n) ALIGN(struct_size(p, sub_graph_id_list, n), 8)

sound/soc/qcom/qdsp6/q6core.c

105

struct_size(fwk, svc_api_info,

sound/soc/qcom/qdsp6/q6core.c

122

struct_size(v, svc_api_info,

sound/soc/qcom/qdsp6/topology.c

325

memcpy(pdata, ((u8 *)private->data + sz), struct_size(pdata, data,

sound/soc/soc-core.c

530

struct_size(rtd, components,

sound/soc/soc-dapm.c

857

struct_size(new_wlist, widgets, n),

sound/soc/sof/debug.c

232

if (struct_size(reply, elems, reply->num_elems) != reply->rhdr.hdr.size) {

sound/soc/sof/ipc3-dtrace.c

156

size = struct_size(msg, elems, num_elems);

sound/soc/sof/ipc3-topology.c

1835

scontrol->size = struct_size(cdata, chanv, scontrol->num_channels);

sound/soc/sof/ipc3-topology.c

1866

scontrol->size = struct_size(cdata, chanv, scontrol->num_channels);

sound/soc/sof/ipc4-control.c

214

data_size = struct_size(data, chanv, scontrol->num_channels);

sound/soc/sof/ipc4-control.c

256

data_size = struct_size(data, chanv, scontrol->num_channels);

sound/soc/sof/ipc4-control.c

295

data_size = struct_size(msg_data, data, data->size);

sound/soc/sof/ipc4-control.c

878

size_t source_size = struct_size(msg_data, data, msg_data->num_elems);

sound/soc/sof/ipc4-control.c

900

size_t source_size = struct_size(msg_data, chanv, msg_data->num_elems);

sound/soc/sof/ipc4-mtrace.c

550

priv = devm_kzalloc(sdev->dev, struct_size(priv, cores, sdev->num_cores),

sound/soc/sof/ipc4-topology.c

1282

u32 ext_size = struct_size(base_cfg_ext, pin_formats,

sound/soc/sof/ipc4-topology.c

2916

scontrol->size = struct_size(control_data, chanv, scontrol->num_channels);

sound/soc/sof/ipc4-topology.c

2958

scontrol->size = struct_size(control_data, chanv, scontrol->num_channels);

sound/soc/sof/sof-client-probes-ipc3.c

206

size_t size = struct_size(msg, desc, num_desc);

sound/soc/sof/sof-client-probes-ipc3.c

236

size_t size = struct_size(msg, buffer_id, num_buffer_id);

sound/soc/sof/sof-client-probes-ipc3.c

67

size_t size = struct_size(msg, dma, 1);

sound/soc/tegra/tegra210_admaif.c

925

alloc_size = struct_size(admaif, capture_dma_data, soc_data->num_ch);

sound/soc/ti/j721e-evm.c

852

struct_size(priv, dai_links, match->num_links), GFP_KERNEL);

sound/usb/fcp.c

193

size_t req_buf_size = struct_size(req, data, req_size);

sound/usb/fcp.c

199

size_t resp_buf_size = struct_size(resp, data, resp_size);

sound/usb/mixer_scarlett2.c

2616

size_t req_buf_size = struct_size(req, data, req_size);

sound/usb/mixer_scarlett2.c

2622

size_t resp_buf_size = struct_size(resp, data, resp_size);

sound/usb/mixer_scarlett2.c

2833

size_t buf_size = struct_size(req, data, bytes);

sound/usb/mixer_scarlett2.c

9651

len = struct_size(req, data, count);

tools/sched_ext/include/scx/common.bpf.h

1063

struct_size((type *)NULL, member, count)

tools/testing/cxl/test/cxl_translate.c

235

cximsd = kzalloc(struct_size(cximsd, xormaps, nr_maps), GFP_KERNEL);

tools/testing/cxl/test/mem.c

1148

po = kzalloc(struct_size(po, record, poison_inject_dev_max), GFP_KERNEL);

tools/testing/cxl/test/mem.c

1186

memcpy(cmd->payload_out, po, struct_size(po, record, nr_records));

tools/testing/cxl/test/mem.c

1187

cmd->size_out = struct_size(po, record, nr_records);

tools/testing/cxl/test/mem.c

1539

if (count < struct_size(out, ents, 0)) {

tools/testing/cxl/test/mem.c

1546

if (count < struct_size(out, ents, MAX_CXL_TEST_FEATS)) {

tools/testing/cxl/test/mem.c

268

if (cmd->size_out < struct_size(pl, records, ret_limit))

tools/testing/cxl/test/mem.c

275

memset(cmd->payload_out, 0, struct_size(pl, records, 0));

tools/testing/cxl/test/mem.c

291

cmd->size_out = struct_size(pl, records, i);

tools/testing/nvdimm/test/nfit.c

1895

+ struct_size(flush, hint_address, NUM_HINTS) * NUM_DCR

virt/kvm/kvm_main.c

6044

memcpy(new_bus, bus, struct_size(bus, range, i));