On Sun, Feb 14, 2021 at 11:50:12PM +0000, Al Viro wrote:> check that len is reasonable> p = kmalloc(offsetof(struct foo, string[len]), GFP_KERNEL);> copy_from_user(p, user_object, len); offsetof(struct foo, string[len]), that is