gdth: integer overflow in ioctl