305 	const unsigned char   *p, *endp;  in load_all_firmwares()  local
312 	p = fw->data;  in load_all_firmwares()
313 	endp = p + fw->size;  in load_all_firmwares()
321 	memcpy(name, p, sizeof(name) - 1);  in load_all_firmwares()
323 	p += sizeof(name) - 1;  in load_all_firmwares()
325 	priv->firm_version = get_unaligned_le16(p);  in load_all_firmwares()
326 	p += 2;  in load_all_firmwares()
328 	n_array = get_unaligned_le16(p);  in load_all_firmwares()
329 	p += 2;  in load_all_firmwares()
344 	while (p < endp) {  in load_all_firmwares()
356 		if (endp - p < sizeof(type) + sizeof(id) + sizeof(size))  in load_all_firmwares()
359 		type = get_unaligned_le32(p);  in load_all_firmwares()
360 		p += sizeof(type);  in load_all_firmwares()
362 		id = get_unaligned_le64(p);  in load_all_firmwares()
363 		p += sizeof(id);  in load_all_firmwares()
366 			int_freq = get_unaligned_le16(p);  in load_all_firmwares()
367 			p += sizeof(int_freq);  in load_all_firmwares()
368 			if (endp - p < sizeof(size))  in load_all_firmwares()
372 		size = get_unaligned_le32(p);  in load_all_firmwares()
373 		p += sizeof(size);  in load_all_firmwares()
375 		if (!size || size > endp - p) {  in load_all_firmwares()
380 			       type, (unsigned long long)id, (endp - p), size);  in load_all_firmwares()
384 		priv->firm[n].ptr = kmemdup(p, size, GFP_KERNEL);  in load_all_firmwares()
402 		p += size;  in load_all_firmwares()
547 	unsigned char      *p, *endp, buf[MAX_XFER_SIZE];  in load_firmware()  local
563 	p = priv->firm[pos].ptr;  in load_firmware()
564 	endp = p + priv->firm[pos].size;  in load_firmware()
566 	while (p < endp) {  in load_firmware()
570 		if (p + sizeof(size) > endp) {  in load_firmware()
575 		size = le16_to_cpu(*(__le16 *) p);  in load_firmware()
576 		p += sizeof(size);  in load_firmware()
586 					   (*p) & 0x7f);  in load_firmware()
597 						  (*p) & 0x7f);  in load_firmware()
616 		if ((size + p > endp)) {  in load_firmware()
618 				   size, (endp - p));  in load_firmware()
622 		buf[0] = *p;  in load_firmware()
623 		p++;  in load_firmware()
631 			memcpy(buf + 1, p, len);  in load_firmware()
639 			p += len;  in load_firmware()
658 	unsigned char	   *p;  in load_scode()  local
676 	p = priv->firm[pos].ptr;  in load_scode()
681 		p += 12 * scode;  in load_scode()
686 		    le16_to_cpu(*(__le16 *)(p + 14 * scode)) != 12)  in load_scode()
688 		p += 14 * scode + 2;  in load_scode()
704 	rc = i2c_send(priv, p, 12);  in load_scode()
1158 			      struct analog_parameters *p)  in xc2028_set_analog_freq()  argument
1165 	if (p->mode == V4L2_TUNER_RADIO) {  in xc2028_set_analog_freq()
1169 		return generic_set_freq(fe, (625l * p->frequency) / 10,  in xc2028_set_analog_freq()
1174 	if (!p->std)  in xc2028_set_analog_freq()
1175 		p->std = V4L2_STD_MN;  in xc2028_set_analog_freq()
1178 	if (!(p->std & V4L2_STD_MN))  in xc2028_set_analog_freq()
1182 	p->std |= parse_audio_std_option();  in xc2028_set_analog_freq()
1184 	return generic_set_freq(fe, 62500l * p->frequency,  in xc2028_set_analog_freq()
1185 				V4L2_TUNER_ANALOG_TV, type, p->std, 0);  in xc2028_set_analog_freq()
1393 	struct xc2028_ctrl *p    = priv_cfg;  in xc2028_set_config()  local
1403 	memcpy(&priv->ctrl, p, sizeof(priv->ctrl));  in xc2028_set_config()
1409 	if (!firmware_name[0] && p->fname &&  in xc2028_set_config()
1410 	    priv->fname && strcmp(p->fname, priv->fname))  in xc2028_set_config()
1418 			priv->fname = kstrdup(p->fname, GFP_KERNEL);  in xc2028_set_config()