287 	kctl->tlv.p = ncontrol->tlv.p;  in snd_ctl_new1()
1111 				 unsigned int __user *tlv)  in snd_ctl_elem_user_tlv()  argument
1121 		new_data = memdup_user(tlv, size);  in snd_ctl_elem_user_tlv()
1144 		if (copy_to_user(tlv, ue->tlv_data, ue->tlv_data_size))  in snd_ctl_elem_user_tlv()
1320 		kctl->tlv.c = snd_ctl_elem_user_tlv;  in snd_ctl_elem_add()
1398 	struct snd_ctl_tlv tlv;  in snd_ctl_tlv_ioctl()  local
1404 	if (copy_from_user(&tlv, _tlv, sizeof(tlv)))  in snd_ctl_tlv_ioctl()
1406 	if (tlv.length < sizeof(unsigned int) * 2)  in snd_ctl_tlv_ioctl()
1408 	if (!tlv.numid)  in snd_ctl_tlv_ioctl()
1411 	kctl = snd_ctl_find_numid(card, tlv.numid);  in snd_ctl_tlv_ioctl()
1416 	if (kctl->tlv.p == NULL) {  in snd_ctl_tlv_ioctl()
1420 	vd = &kctl->vd[tlv.numid - kctl->id.numid];  in snd_ctl_tlv_ioctl()
1435 		err = kctl->tlv.c(kctl, op_flag, tlv.length, _tlv->tlv);  in snd_ctl_tlv_ioctl()
1447 		len = kctl->tlv.p[1] + 2 * sizeof(unsigned int);  in snd_ctl_tlv_ioctl()
1448 		if (tlv.length < len) {  in snd_ctl_tlv_ioctl()
1452 		if (copy_to_user(_tlv->tlv, kctl->tlv.p, len))  in snd_ctl_tlv_ioctl()