ucontrols 911 drivers/media/v4l2-core/v4l2-compat-ioctl32.c struct v4l2_ext_control32 __user *ucontrols; ucontrols 932 drivers/media/v4l2-core/v4l2-compat-ioctl32.c ucontrols = compat_ptr(p); ucontrols 933 drivers/media/v4l2-core/v4l2-compat-ioctl32.c if (!access_ok(ucontrols, count * sizeof(*ucontrols))) ucontrols 944 drivers/media/v4l2-core/v4l2-compat-ioctl32.c if (copy_in_user(kcontrols, ucontrols, sizeof(*ucontrols))) ucontrols 953 drivers/media/v4l2-core/v4l2-compat-ioctl32.c if (get_user(p, &ucontrols->string)) ucontrols 959 drivers/media/v4l2-core/v4l2-compat-ioctl32.c ucontrols++; ucontrols 969 drivers/media/v4l2-core/v4l2-compat-ioctl32.c struct v4l2_ext_control32 __user *ucontrols; ucontrols 993 drivers/media/v4l2-core/v4l2-compat-ioctl32.c if (!count || count > (U32_MAX/sizeof(*ucontrols))) ucontrols 997 drivers/media/v4l2-core/v4l2-compat-ioctl32.c ucontrols = compat_ptr(p); ucontrols 998 drivers/media/v4l2-core/v4l2-compat-ioctl32.c if (!access_ok(ucontrols, count * sizeof(*ucontrols))) ucontrols 1002 drivers/media/v4l2-core/v4l2-compat-ioctl32.c unsigned int size = sizeof(*ucontrols); ucontrols 1006 drivers/media/v4l2-core/v4l2-compat-ioctl32.c put_user(id, &ucontrols->id) || ucontrols 1007 drivers/media/v4l2-core/v4l2-compat-ioctl32.c assign_in_user_cast(&ucontrols->size, &kcontrols->size) || ucontrols 1008 drivers/media/v4l2-core/v4l2-compat-ioctl32.c copy_in_user(&ucontrols->reserved2, ucontrols 1010 drivers/media/v4l2-core/v4l2-compat-ioctl32.c sizeof(ucontrols->reserved2))) ucontrols 1019 drivers/media/v4l2-core/v4l2-compat-ioctl32.c size -= sizeof(ucontrols->value64); ucontrols 1021 drivers/media/v4l2-core/v4l2-compat-ioctl32.c if (copy_in_user(ucontrols, ucontrols 1025 drivers/media/v4l2-core/v4l2-compat-ioctl32.c ucontrols++;