44 	entropy_input = params[0].memref.buffer;  in system_rng_reseed()
45 	entropy_sz = params[0].memref.size;  in system_rng_reseed()
79 	if (params[0].memref.size > TA_DERIVED_EXTRA_DATA_MAX_SIZE ||  in system_derive_ta_unique_key()
80 	    params[1].memref.size < TA_DERIVED_KEY_MIN_SIZE ||  in system_derive_ta_unique_key()
81 	    params[1].memref.size > TA_DERIVED_KEY_MAX_SIZE)  in system_derive_ta_unique_key()
95 				     (uaddr_t)params[1].memref.buffer,  in system_derive_ta_unique_key()
96 				     params[1].memref.size);  in system_derive_ta_unique_key()
101 	if (ADD_OVERFLOW(data_len, params[0].memref.size, &data_len))  in system_derive_ta_unique_key()
111 	res = copy_from_user(data + sizeof(TEE_UUID), params[0].memref.buffer,  in system_derive_ta_unique_key()
112 			     params[0].memref.size);  in system_derive_ta_unique_key()
116 	subkey_bbuf = bb_alloc(params[1].memref.size);  in system_derive_ta_unique_key()
123 				subkey_bbuf, params[1].memref.size);  in system_derive_ta_unique_key()
127 	res = copy_to_user(params[1].memref.buffer, subkey_bbuf,  in system_derive_ta_unique_key()
128 			   params[1].memref.size);  in system_derive_ta_unique_key()
131 	bb_free_wipe(subkey_bbuf, params[1].memref.size);  in system_derive_ta_unique_key()
239 	if (!params[0].memref.buffer || params[0].memref.size != sizeof(uuid))  in system_dlopen()
242 	res = copy_from_user(&uuid, params[0].memref.buffer, sizeof(uuid));  in system_dlopen()
272 	if (!params[0].memref.buffer || params[0].memref.size != sizeof(uuid))  in system_dlsym()
275 	res = copy_from_user(&uuid, params[0].memref.buffer, sizeof(uuid));  in system_dlsym()
279 	if (!params[1].memref.buffer)  in system_dlsym()
281 	res = bb_strndup_user(params[1].memref.buffer, params[1].memref.size,  in system_dlsym()
309 	size = params[0].memref.size;  in system_get_tpm_event_log()
310 	res = tpm_get_event_log(params[0].memref.buffer, &size);  in system_get_tpm_event_log()
311 	params[0].memref.size = size;  in system_get_tpm_event_log()
330 	if (!params[0].memref.buffer || params[0].memref.size != sizeof(uuid))  in system_supp_plugin_invoke()
333 	res = copy_from_user(&uuid, params[0].memref.buffer, sizeof(uuid));  in system_supp_plugin_invoke()
341 					 params[2].memref.buffer, /* data */  in system_supp_plugin_invoke()
342 					 params[2].memref.size, /* in len */  in system_supp_plugin_invoke()