2061 	struct dtv_properties *tvps = parg;  in dvb_frontend_ioctl_properties()  local
2068 		dev_dbg(fe->dvb->device, "%s: properties.num = %d\n", __func__, tvps->num);  in dvb_frontend_ioctl_properties()
2069 		dev_dbg(fe->dvb->device, "%s: properties.props = %p\n", __func__, tvps->props);  in dvb_frontend_ioctl_properties()
2073 		if ((tvps->num == 0) || (tvps->num > DTV_IOCTL_MAX_MSGS))  in dvb_frontend_ioctl_properties()
2076 		tvp = kmalloc(tvps->num * sizeof(struct dtv_property), GFP_KERNEL);  in dvb_frontend_ioctl_properties()
2082 		if (copy_from_user(tvp, (void __user *)tvps->props,  in dvb_frontend_ioctl_properties()
2083 				   tvps->num * sizeof(struct dtv_property))) {  in dvb_frontend_ioctl_properties()
2088 		for (i = 0; i < tvps->num; i++) {  in dvb_frontend_ioctl_properties()
2099 		dev_dbg(fe->dvb->device, "%s: properties.num = %d\n", __func__, tvps->num);  in dvb_frontend_ioctl_properties()
2100 		dev_dbg(fe->dvb->device, "%s: properties.props = %p\n", __func__, tvps->props);  in dvb_frontend_ioctl_properties()
2104 		if ((tvps->num == 0) || (tvps->num > DTV_IOCTL_MAX_MSGS))  in dvb_frontend_ioctl_properties()
2107 		tvp = kmalloc(tvps->num * sizeof(struct dtv_property), GFP_KERNEL);  in dvb_frontend_ioctl_properties()
2113 		if (copy_from_user(tvp, (void __user *)tvps->props,  in dvb_frontend_ioctl_properties()
2114 				   tvps->num * sizeof(struct dtv_property))) {  in dvb_frontend_ioctl_properties()
2129 		for (i = 0; i < tvps->num; i++) {  in dvb_frontend_ioctl_properties()
2136 		if (copy_to_user((void __user *)tvps->props, tvp,  in dvb_frontend_ioctl_properties()
2137 				 tvps->num * sizeof(struct dtv_property))) {  in dvb_frontend_ioctl_properties()