[Bug 837258] kernel: copy_from_user() buffer size is not provably correct