Thanks for resending this patch, but you need to preserve the author and Reported-by tags. https://lore.kernel.org/linux-media/YHaulytonFcW+lyZ@mwanda/ You changed the check in fdtv_ca_pmt() but I don't understand why you did that... But looking at it again, I think neither of us was correct, instead of "sizeof(msg->msg) - 4" it should be "- data_pos": if (data_length > sizeof(msg->msg) - data_pos) return -EINVAL; I will resend a v2. regards, dan carpenter