300 	unsigned char __user *data_ptr;  in snd_sb_csp_riff_load()  local
313 	data_ptr = mcode->data;  in snd_sb_csp_riff_load()
315 	if (copy_from_user(&file_h, data_ptr, sizeof(file_h)))  in snd_sb_csp_riff_load()
322 	data_ptr += sizeof(file_h);  in snd_sb_csp_riff_load()
323 	data_end = data_ptr + le32_to_cpu(file_h.len);  in snd_sb_csp_riff_load()
325 	if (copy_from_user(&item_type, data_ptr, sizeof(item_type)))  in snd_sb_csp_riff_load()
331 	data_ptr += sizeof (item_type);  in snd_sb_csp_riff_load()
333 	for (; data_ptr < data_end; data_ptr += le32_to_cpu(item_h.len)) {  in snd_sb_csp_riff_load()
334 		if (copy_from_user(&item_h, data_ptr, sizeof(item_h)))  in snd_sb_csp_riff_load()
336 		data_ptr += sizeof(item_h);  in snd_sb_csp_riff_load()
340 		if (copy_from_user(&item_type, data_ptr, sizeof(item_type)))  in snd_sb_csp_riff_load()
344 			if (copy_from_user(&funcdesc_h, data_ptr + sizeof(item_type), sizeof(funcdesc_h)))  in snd_sb_csp_riff_load()
351 			data_ptr += sizeof(item_type);  in snd_sb_csp_riff_load()
363 				if (data_ptr >= data_end)  in snd_sb_csp_riff_load()
365 				if (copy_from_user(&code_h, data_ptr, sizeof(code_h)))  in snd_sb_csp_riff_load()
371 				data_ptr += sizeof(code_h);  in snd_sb_csp_riff_load()
372 				err = snd_sb_csp_load_user(p, data_ptr, le32_to_cpu(code_h.len),  in snd_sb_csp_riff_load()
376 				data_ptr += le32_to_cpu(code_h.len);  in snd_sb_csp_riff_load()
379 			if (copy_from_user(&code_h, data_ptr, sizeof(code_h)))  in snd_sb_csp_riff_load()
386 			data_ptr += sizeof(code_h);  in snd_sb_csp_riff_load()
387 			err = snd_sb_csp_load_user(p, data_ptr,  in snd_sb_csp_riff_load()