iommu/intel/iommu_impl.cpp

119     static_assert(sizeof(desc->scope_bytes) < sizeof(size_t),
122     if (add_overflow(actual_size, desc->scope_bytes, &actual_size) ||
131     if (desc->scope_bytes == 0 && !desc->whole_segment) {
135     const size_t num_scopes = desc->scope_bytes / sizeof(zx_iommu_desc_intel_scope_t);
136     size_t scope_bytes = num_scopes;
137     if (mul_overflow(scope_bytes, sizeof(zx_iommu_desc_intel_scope_t), &scope_bytes) ||
138         scope_bytes != desc->scope_bytes) {
140         LTRACEF("desc has invalid scope_bytes field\n");
158     size_t cursor_bytes = sizeof(*desc) + desc->scope_bytes;
165             add_overflow(next_entry, mem->scope_bytes, &next_entry) ||
168             LTRACEF("desc reserved memory entry has invalid scope_bytes\n");
176         if (mem->scope_bytes == 0) {
180         const size_t num_scopes = mem->scope_bytes / sizeof(zx_iommu_desc_intel_scope_t);
181         size_t scope_bytes = num_scopes;
182         if (mul_overflow(scope_bytes, sizeof(zx_iommu_desc_intel_scope_t), &scope_bytes) ||
183             scope_bytes != desc->scope_bytes) {
185             LTRACEF("desc reserved memory entry has invalid scope_bytes field\n");
221     const size_t num_scopes = desc->scope_bytes / sizeof(zx_iommu_desc_intel_scope_t);
425                 reinterpret_cast<uintptr_t>(desc) + sizeof(*desc) + desc->scope_bytes +
428         const size_t num_scopes = mem->scope_bytes / sizeof(zx_iommu_desc_intel_scope_t);
458         cursor_bytes += sizeof(*mem) + mem->scope_bytes;