"Stable" kernel 2.6.25.6

What are you talking about?  I have no idea which hat you pulled the "less than 3 arguments"
idea out of, but that command gives a list of places where copy_from_user is called with a
likely non-fixed length argument.  You then go inspect whether the length is user-controlled
and if so, whether proper bounds checking is done (especially in the case where the length is
signed).

Thanks for spelling 0, though.

-Brad