The multiplications here can overflow resulting in smaller buffer
sizes than expected.  "count" comes from a copy_from_user().
Signed-off-by: NDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: NKonrad Rzeszutek Wilk <konrad.wilk@oracle.com>