312 	unsigned char __user *data_ptr;  in snd_sb_csp_riff_load()  local
325 	data_ptr = mcode->data;  in snd_sb_csp_riff_load()
327 	if (copy_from_user(&file_h, data_ptr, sizeof(file_h)))  in snd_sb_csp_riff_load()
334 	data_ptr += sizeof(file_h);  in snd_sb_csp_riff_load()
335 	data_end = data_ptr + le32_to_cpu(file_h.len);  in snd_sb_csp_riff_load()
337 	if (copy_from_user(&item_type, data_ptr, sizeof(item_type)))  in snd_sb_csp_riff_load()
343 	data_ptr += sizeof (item_type);  in snd_sb_csp_riff_load()
345 	for (; data_ptr < data_end; data_ptr += le32_to_cpu(item_h.len)) {  in snd_sb_csp_riff_load()
346 		if (copy_from_user(&item_h, data_ptr, sizeof(item_h)))  in snd_sb_csp_riff_load()
348 		data_ptr += sizeof(item_h);  in snd_sb_csp_riff_load()
352 		if (copy_from_user(&item_type, data_ptr, sizeof(item_type)))  in snd_sb_csp_riff_load()
356 			if (copy_from_user(&funcdesc_h, data_ptr + sizeof(item_type), sizeof(funcdesc_h)))  in snd_sb_csp_riff_load()
363 			data_ptr += sizeof(item_type);  in snd_sb_csp_riff_load()
375 				if (data_ptr >= data_end)  in snd_sb_csp_riff_load()
377 				if (copy_from_user(&code_h, data_ptr, sizeof(code_h)))  in snd_sb_csp_riff_load()
383 				data_ptr += sizeof(code_h);  in snd_sb_csp_riff_load()
384 				err = snd_sb_csp_load_user(p, data_ptr, le32_to_cpu(code_h.len),  in snd_sb_csp_riff_load()
388 				data_ptr += le32_to_cpu(code_h.len);  in snd_sb_csp_riff_load()
391 			if (copy_from_user(&code_h, data_ptr, sizeof(code_h)))  in snd_sb_csp_riff_load()
398 			data_ptr += sizeof(code_h);  in snd_sb_csp_riff_load()
399 			err = snd_sb_csp_load_user(p, data_ptr,  in snd_sb_csp_riff_load()