66 		if (xmap->menu_count == 0 ||  in uvc_ioctl_ctrl_map()
67 		    xmap->menu_count > UVC_MAX_CONTROL_MENU_ENTRIES) {  in uvc_ioctl_ctrl_map()
72 		size = xmap->menu_count * sizeof(*map->menu_info);  in uvc_ioctl_ctrl_map()
84 		map->menu_count = xmap->menu_count;  in uvc_ioctl_ctrl_map()
1240 	__u32 menu_count;  member
1254 	    __get_user(kp->menu_count, &up->menu_count))  in uvc_v4l2_get_xu_mapping()
1259 	if (kp->menu_count == 0) {  in uvc_v4l2_get_xu_mapping()
1267 	if (!access_ok(VERIFY_READ, umenus, kp->menu_count * sizeof(*umenus)))  in uvc_v4l2_get_xu_mapping()
1270 	kmenus = compat_alloc_user_space(kp->menu_count * sizeof(*kmenus));  in uvc_v4l2_get_xu_mapping()
1275 	if (copy_in_user(kmenus, umenus, kp->menu_count * sizeof(*umenus)))  in uvc_v4l2_get_xu_mapping()
1290 	    __put_user(kp->menu_count, &up->menu_count))  in uvc_v4l2_put_xu_mapping()
1296 	if (kp->menu_count == 0)  in uvc_v4l2_put_xu_mapping()
1303 	if (copy_in_user(umenus, kmenus, kp->menu_count * sizeof(*umenus)))  in uvc_v4l2_put_xu_mapping()