x86/dell/dell-wmi-base.c

452 	u16 *buffer_entry, *buffer_end;
464 	buffer_entry = (u16 *)obj->buffer.pointer;
466 	buffer_end = buffer_entry + buffer_size;
480 	if (priv->interface_version == 0 && buffer_entry < buffer_end)
481 		if (buffer_end > buffer_entry + buffer_entry[0] + 1)
482 			buffer_end = buffer_entry + buffer_entry[0] + 1;
484 	while (buffer_entry < buffer_end) {
486 		len = buffer_entry[0];
492 		if (buffer_entry + len > buffer_end) {
497 		pr_debug("Process buffer (%*ph)\n", len*2, buffer_entry);
499 		switch (buffer_entry[1]) {
502 				dell_wmi_process_key(wdev, buffer_entry[1],
503 						     buffer_entry[2],
504 						     buffer_entry + 3,
511 				i += dell_wmi_process_key(wdev, buffer_entry[1],
512 							  buffer_entry[i],
513 							  buffer_entry + i,
517 			if ((len > 4) && dell_privacy_process_event(buffer_entry[1], buffer_entry[3],
518 								    buffer_entry[4]))
521 				dell_wmi_process_key(wdev, buffer_entry[1], buffer_entry[2],
522 						     buffer_entry + 3, len - 3);
526 				(int)buffer_entry[1]);
530 		buffer_entry += len;