387 static int pkey_nonccatok2pkey(const u8 *key, u32 keylen,  in pkey_nonccatok2pkey()  argument
398 		if (keylen != sizeof(struct protaeskeytoken))  in pkey_nonccatok2pkey()
417 		if (keylen < sizeof(struct clearaeskeytoken))  in pkey_nonccatok2pkey()
420 		if (keylen != sizeof(*t) + t->len)  in pkey_nonccatok2pkey()
457 		rc = ep11_check_aes_key(debug_info, 3, key, keylen, 1);  in pkey_nonccatok2pkey()
465 		rc = ep11_check_aes_key_with_hdr(debug_info, 3, key, keylen, 1);  in pkey_nonccatok2pkey()
485 static int pkey_ccainttok2pkey(const u8 *key, u32 keylen,  in pkey_ccainttok2pkey()  argument
492 		if (keylen != sizeof(struct secaeskeytoken))  in pkey_ccainttok2pkey()
496 		if (keylen < hdr->len || keylen > MAXCCAVLSCTOKENSIZE)  in pkey_ccainttok2pkey()
511 int pkey_keyblob2pkey(const u8 *key, u32 keylen,  in pkey_keyblob2pkey()  argument
517 	if (keylen < sizeof(struct keytoken_header)) {  in pkey_keyblob2pkey()
518 		DEBUG_ERR("%s invalid keylen %d\n", __func__, keylen);  in pkey_keyblob2pkey()
524 		rc = pkey_nonccatok2pkey(key, keylen, protkey);  in pkey_keyblob2pkey()
527 		rc = pkey_ccainttok2pkey(key, keylen, protkey);  in pkey_keyblob2pkey()
649 static int pkey_verifykey2(const u8 *key, size_t keylen,  in pkey_verifykey2()  argument
658 	if (keylen < sizeof(struct keytoken_header))  in pkey_verifykey2()
732 		rc = ep11_check_aes_key(debug_info, 3, key, keylen, 1);  in pkey_verifykey2()
760 			      const u8 *key, size_t keylen,  in pkey_keyblob2pkey2()  argument
770 	if (keylen < sizeof(struct keytoken_header))  in pkey_keyblob2pkey2()
775 			if (keylen != sizeof(struct secaeskeytoken))  in pkey_keyblob2pkey2()
780 			if (keylen < hdr->len || keylen > MAXCCAVLSCTOKENSIZE)  in pkey_keyblob2pkey2()
791 			if (keylen < sizeof(struct ep11keyblob))  in pkey_keyblob2pkey2()
793 			if (ep11_check_aes_key(debug_info, 3, key, keylen, 1))  in pkey_keyblob2pkey2()
796 			return pkey_nonccatok2pkey(key, keylen, pkey);  in pkey_keyblob2pkey2()
831 static int pkey_apqns4key(const u8 *key, size_t keylen, u32 flags,  in pkey_apqns4key()  argument
838 	if (keylen < sizeof(struct keytoken_header) || flags == 0)  in pkey_apqns4key()
1001 			      const u8 *key, size_t keylen, u32 *protkeytype,  in pkey_keyblob2pkey3()  argument
1011 	if (keylen < sizeof(struct keytoken_header))  in pkey_keyblob2pkey3()
1018 		if (ep11_check_aes_key_with_hdr(debug_info, 3, key, keylen, 1))  in pkey_keyblob2pkey3()
1024 		if (ep11_check_ecc_key_with_hdr(debug_info, 3, key, keylen, 1))  in pkey_keyblob2pkey3()
1030 		if (ep11_check_aes_key(debug_info, 3, key, keylen, 1))  in pkey_keyblob2pkey3()
1035 			if (keylen != sizeof(struct secaeskeytoken))  in pkey_keyblob2pkey3()
1041 			if (keylen < hdr->len || keylen > MAXCCAVLSCTOKENSIZE)  in pkey_keyblob2pkey3()
1052 		if (keylen < sizeof(struct eccprivkeytoken))  in pkey_keyblob2pkey3()
1054 		if (cca_check_sececckeytoken(debug_info, 3, key, keylen, 1))  in pkey_keyblob2pkey3()
1059 		rc = pkey_nonccatok2pkey(key, keylen, &pkey);  in pkey_keyblob2pkey3()
1109 static void *_copy_key_from_user(void __user *ukey, size_t keylen)  in _copy_key_from_user()  argument
1111 	if (!ukey || keylen < MINKEYBLOBSIZE || keylen > KEYBLOBBUFSIZE)  in _copy_key_from_user()
1114 	return memdup_user(ukey, keylen);  in _copy_key_from_user()
1269 		kkey = _copy_key_from_user(ktp.key, ktp.keylen);  in pkey_unlocked_ioctl()
1272 		rc = pkey_keyblob2pkey(kkey, ktp.keylen, &ktp.protkey);  in pkey_unlocked_ioctl()
1308 			if (kgs.keylen < klen) {  in pkey_unlocked_ioctl()
1317 		kgs.keylen = klen;  in pkey_unlocked_ioctl()
1350 			if (kcs.keylen < klen) {  in pkey_unlocked_ioctl()
1359 		kcs.keylen = klen;  in pkey_unlocked_ioctl()
1373 		kkey = _copy_key_from_user(kvk.key, kvk.keylen);  in pkey_unlocked_ioctl()
1376 		rc = pkey_verifykey2(kkey, kvk.keylen,  in pkey_unlocked_ioctl()
1398 		kkey = _copy_key_from_user(ktp.key, ktp.keylen);  in pkey_unlocked_ioctl()
1404 					kkey, ktp.keylen, &ktp.protkey);  in pkey_unlocked_ioctl()
1431 		kkey = _copy_key_from_user(kak.key, kak.keylen);  in pkey_unlocked_ioctl()
1436 		rc = pkey_apqns4key(kkey, kak.keylen, kak.flags,  in pkey_unlocked_ioctl()
1517 		kkey = _copy_key_from_user(ktp.key, ktp.keylen);  in pkey_unlocked_ioctl()
1529 					ktp.keylen, &ktp.pkeytype,  in pkey_unlocked_ioctl()