| /kernel/linux/linux-5.10/scripts/coccinelle/api/ |
| D | memdup_user.cocci | 2 /// Use memdup_user rather than duplicating its implementation
20 filter = frozenset(['memdup_user', 'vmemdup_user'])
34 + to = memdup_user(from,size);
101 coccilib.org.print_todo(p[0], "WARNING opportunity for memdup_user")
107 coccilib.report.print_report(p[0], "WARNING opportunity for memdup_user")
|
| /kernel/linux/linux-5.10/security/keys/ |
| D | keyctl_pkey.c | 246 in = memdup_user(_in, params.in_len); in keyctl_pkey_e_d_s()
308 in = memdup_user(_in, params.in_len); in keyctl_pkey_verify()
314 in2 = memdup_user(_in2, params.in2_len); in keyctl_pkey_verify()
|
| /kernel/linux/linux-5.10/fs/btrfs/ |
| D | ioctl.c | 1708 vol_args = memdup_user(arg, sizeof(*vol_args)); in btrfs_ioctl_resize()
1893 vol_args = memdup_user(arg, sizeof(*vol_args)); in btrfs_ioctl_snap_create()
1916 vol_args = memdup_user(arg, sizeof(*vol_args)); in btrfs_ioctl_snap_create_v2()
1936 inherit = memdup_user(vol_args->qgroup_inherit, vol_args->size); in btrfs_ioctl_snap_create_v2()
2630 args = memdup_user(argp, sizeof(*args)); in btrfs_ioctl_ino_lookup()
2683 args = memdup_user(argp, sizeof(*args)); in btrfs_ioctl_ino_lookup_user()
2849 rootrefs = memdup_user(argp, sizeof(*rootrefs)); in btrfs_ioctl_get_subvol_rootref()
2944 vol_args2 = memdup_user(arg, sizeof(*vol_args2)); in btrfs_ioctl_snap_destroy()
3021 vol_args = memdup_user(arg, sizeof(*vol_args)); in btrfs_ioctl_snap_destroy()
3212 vol_args = memdup_user(arg, sizeof(*vol_args)); in btrfs_ioctl_add_dev()
[all …]
|
| /kernel/linux/linux-5.10/drivers/staging/wfx/ |
| D | debug.c | 217 buf = memdup_user(user_buf, count); in wfx_send_pds_write()
259 request = memdup_user(user_buf, count); in wfx_send_hif_msg_write()
|
| /kernel/linux/linux-5.10/drivers/firmware/efi/test/ |
| D | efi_test.c | 73 buf = memdup_user(src, len); in copy_ucs2_from_user_len()
253 data = memdup_user(setvariable.data, setvariable.data_size); in efi_runtime_set_variable()
546 data = memdup_user((void *)resetsystem.data, in efi_runtime_reset_system()
|
| /kernel/linux/linux-5.10/drivers/staging/greybus/ |
| D | authentication.c | 224 ims_cert = memdup_user(buf, size); in cap_ioctl()
240 authenticate = memdup_user(buf, size); in cap_ioctl()
|
| /kernel/linux/linux-5.10/mm/ |
| D | util.c | 169 void *memdup_user(const void __user *src, size_t len) in memdup_user() function
184 EXPORT_SYMBOL(memdup_user);
232 p = memdup_user(s, length); in strndup_user()
|
| /kernel/linux/linux-5.10/drivers/i2c/ |
| D | i2c-dev.c | 169 tmp = memdup_user(buf, count); in i2cdev_write()
257 msgs[i].buf = memdup_user(data_ptrs[i], msgs[i].len); in i2cdev_ioctl_rdwr()
454 rdwr_pa = memdup_user(rdwr_arg.msgs, in i2cdev_ioctl()
|
| /kernel/linux/linux-5.10/drivers/gpu/drm/r128/ |
| D | r128_state.c | 911 buffer = memdup_user(depth->buffer, buffer_size); in r128_cce_dispatch_write_span()
917 mask = memdup_user(depth->mask, mask_size); in r128_cce_dispatch_write_span()
992 x = memdup_user(depth->x, xbuf_size); in r128_cce_dispatch_write_pixels()
995 y = memdup_user(depth->y, ybuf_size); in r128_cce_dispatch_write_pixels()
1001 buffer = memdup_user(depth->buffer, buffer_size); in r128_cce_dispatch_write_pixels()
1010 mask = memdup_user(depth->mask, mask_size); in r128_cce_dispatch_write_pixels()
|
| /kernel/linux/linux-5.10/drivers/scsi/qedf/ |
| D | qedf_debugfs.c | 173 kern_buf = memdup_user(buffer, count); in qedf_dbg_debug_cmd_write()
225 kern_buf = memdup_user(buffer, 6); in qedf_dbg_stop_io_on_error_cmd_write()
|
| /kernel/linux/linux-5.10/drivers/scsi/bfa/ |
| D | bfad_debugfs.c | 253 kern_buf = memdup_user(buf, nbytes); in bfad_debugfs_write_regrd()
320 kern_buf = memdup_user(buf, nbytes); in bfad_debugfs_write_regwr()
|
| /kernel/linux/linux-5.10/fs/efivarfs/ |
| D | file.c | 35 data = memdup_user(userbuf + sizeof(attributes), datasize); in efivarfs_file_write()
|
| /kernel/linux/linux-5.10/drivers/staging/rtl8188eu/os_dep/ |
| D | rtw_android.c | 144 command = memdup_user(priv_cmd.buf, priv_cmd.total_len); in rtw_android_priv_cmd()
|
| /kernel/linux/linux-5.10/sound/isa/wavefront/ |
| D | wavefront_fx.c | 194 page_data = memdup_user((unsigned char __user *) in snd_wavefront_fx_ioctl()
|
| /kernel/linux/linux-5.10/drivers/net/ethernet/brocade/bna/ |
| D | bnad_debugfs.c | 315 kern_buf = memdup_user(buf, nbytes); in bnad_debugfs_write_regrd()
375 kern_buf = memdup_user(buf, nbytes); in bnad_debugfs_write_regwr()
|
| /kernel/linux/linux-5.10/sound/usb/usx2y/ |
| D | usX2Yhwdep.c | 195 buf = memdup_user(dsp->image, dsp->length); in snd_usx2y_hwdep_dsp_load()
|
| /kernel/linux/linux-5.10/drivers/ptp/ |
| D | ptp_chardev.c | 298 extoff = memdup_user((void __user *)arg, sizeof(*extoff)); in ptp_ioctl()
326 sysoff = memdup_user((void __user *)arg, sizeof(*sysoff)); in ptp_ioctl()
|
| /kernel/linux/linux-5.10/drivers/mtd/ |
| D | mtdchar.c | 373 ops.oobbuf = memdup_user(ptr, length); in mtdchar_writeoob()
607 ops.datbuf = memdup_user(usr_data, ops.len); in mtdchar_write_ioctl()
615 ops.oobbuf = memdup_user(usr_oob, ops.ooblen); in mtdchar_write_ioctl()
|
| /kernel/linux/linux-5.10/arch/um/drivers/ |
| D | hostaudio_kern.c | 108 kbuf = memdup_user(buffer, count); in hostaudio_write()
|
| /kernel/linux/linux-5.10/sound/firewire/fireworks/ |
| D | fireworks_hwdep.c | 169 buf = memdup_user(data, count); in hwdep_write()
|
| /kernel/linux/linux-5.10/drivers/hv/ |
| D | hv_utils_transport.c | 83 inmsg = memdup_user(buf, count); in hvt_op_write()
|
| /kernel/linux/linux-5.10/arch/powerpc/platforms/powernv/ |
| D | opal-prd.c | 236 msg = memdup_user(buf, size); in opal_prd_write()
|
| /kernel/linux/linux-5.10/drivers/misc/vmw_vmci/ |
| D | vmci_host.c | 387 dg = memdup_user((void __user *)(uintptr_t)send_info.addr, in vmci_host_do_send_datagram()
756 cpt_buf = memdup_user((void __user *)(uintptr_t)set_info.cpt_buf, in vmci_host_do_ctx_set_cpt_state()
|
| /kernel/linux/linux-5.10/drivers/char/ |
| D | nvram.c | 271 tmp = memdup_user(buf, count); in nvram_misc_write()
|
| /kernel/linux/linux-5.10/block/ |
| D | bsg-lib.c | 43 job->request = memdup_user(uptr64(hdr->request), hdr->request_len); in bsg_transport_fill_hdr()
|