2041 	struct dtv_properties *tvps = parg;  in dvb_frontend_ioctl_properties()  local
2048 		dev_dbg(fe->dvb->device, "%s: properties.num = %d\n", __func__, tvps->num);  in dvb_frontend_ioctl_properties()
2049 		dev_dbg(fe->dvb->device, "%s: properties.props = %p\n", __func__, tvps->props);  in dvb_frontend_ioctl_properties()
2053 		if ((tvps->num == 0) || (tvps->num > DTV_IOCTL_MAX_MSGS))  in dvb_frontend_ioctl_properties()
2056 		tvp = kmalloc(tvps->num * sizeof(struct dtv_property), GFP_KERNEL);  in dvb_frontend_ioctl_properties()
2062 		if (copy_from_user(tvp, (void __user *)tvps->props,  in dvb_frontend_ioctl_properties()
2063 				   tvps->num * sizeof(struct dtv_property))) {  in dvb_frontend_ioctl_properties()
2068 		for (i = 0; i < tvps->num; i++) {  in dvb_frontend_ioctl_properties()
2079 		dev_dbg(fe->dvb->device, "%s: properties.num = %d\n", __func__, tvps->num);  in dvb_frontend_ioctl_properties()
2080 		dev_dbg(fe->dvb->device, "%s: properties.props = %p\n", __func__, tvps->props);  in dvb_frontend_ioctl_properties()
2084 		if ((tvps->num == 0) || (tvps->num > DTV_IOCTL_MAX_MSGS))  in dvb_frontend_ioctl_properties()
2087 		tvp = kmalloc(tvps->num * sizeof(struct dtv_property), GFP_KERNEL);  in dvb_frontend_ioctl_properties()
2093 		if (copy_from_user(tvp, (void __user *)tvps->props,  in dvb_frontend_ioctl_properties()
2094 				   tvps->num * sizeof(struct dtv_property))) {  in dvb_frontend_ioctl_properties()
2109 		for (i = 0; i < tvps->num; i++) {  in dvb_frontend_ioctl_properties()
2116 		if (copy_to_user((void __user *)tvps->props, tvp,  in dvb_frontend_ioctl_properties()
2117 				 tvps->num * sizeof(struct dtv_property))) {  in dvb_frontend_ioctl_properties()