arch/alpha/include/asm/checksum.h

46

__wsum csum_and_copy_from_user(const void __user *src, void *dst, int len);

arch/alpha/include/asm/futex.h

30

u32 __user *uaddr)

arch/alpha/include/asm/futex.h

64

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/alpha/include/asm/thread_info.h

124

put_user(res, (int __user *)(value)); \

arch/alpha/include/asm/uaccess.h

132

__typeof__(*(ptr)) __user *__pu_addr = (ptr); \

arch/alpha/include/asm/uaccess.h

186

raw_copy_from_user(void *to, const void __user *from, unsigned long len)

arch/alpha/include/asm/uaccess.h

192

raw_copy_to_user(void __user *to, const void *from, unsigned long len)

arch/alpha/include/asm/uaccess.h

197

extern long __clear_user(void __user *to, long len);

arch/alpha/include/asm/uaccess.h

200

clear_user(void __user *to, long len)

arch/alpha/include/asm/uaccess.h

207

extern long strncpy_from_user(char *dest, const char __user *src, long count);

arch/alpha/include/asm/uaccess.h

208

extern __must_check long strnlen_user(const char __user *str, long n);

arch/alpha/include/asm/uaccess.h

67

const __typeof__(*(ptr)) __user *__gu_addr = (ptr); \

arch/alpha/include/asm/uaccess.h

83

#define __m(x) (*(struct __large_struct __user *)(x))

arch/alpha/include/uapi/asm/signal.h

101

void __user *ss_sp;

arch/alpha/include/uapi/asm/signal.h

111

void __user *ss_sp;

arch/alpha/kernel/osf_sys.c

1004

SYSCALL_DEFINE2(osf_utimes, const char __user *, filename,

arch/alpha/kernel/osf_sys.c

1005

struct timeval32 __user *, tvs)

arch/alpha/kernel/osf_sys.c

1022

SYSCALL_DEFINE5(osf_select, int, n, fd_set __user *, inp, fd_set __user *, outp,

arch/alpha/kernel/osf_sys.c

1023

fd_set __user *, exp, struct timeval32 __user *, tvp)

arch/alpha/kernel/osf_sys.c

105

struct osf_dirent __user *dirent;

arch/alpha/kernel/osf_sys.c

106

long __user *basep;

arch/alpha/kernel/osf_sys.c

1064

SYSCALL_DEFINE2(osf_getrusage, int, who, struct rusage32 __user *, ru)

arch/alpha/kernel/osf_sys.c

1097

SYSCALL_DEFINE4(osf_wait4, pid_t, pid, int __user *, ustatus, int, options,

arch/alpha/kernel/osf_sys.c

1098

struct rusage32 __user *, ur)

arch/alpha/kernel/osf_sys.c

1121

SYSCALL_DEFINE2(osf_usleep_thread, struct timeval32 __user *, sleep,

arch/alpha/kernel/osf_sys.c

1122

struct timeval32 __user *, remain)

arch/alpha/kernel/osf_sys.c

115

struct osf_dirent __user *dirent;

arch/alpha/kernel/osf_sys.c

1175

SYSCALL_DEFINE1(old_adjtimex, struct timex32 __user *, txc_p)

arch/alpha/kernel/osf_sys.c

141

dirent = (void __user *)dirent + reclen;

arch/alpha/kernel/osf_sys.c

151

struct osf_dirent __user *, dirent, unsigned int, count,

arch/alpha/kernel/osf_sys.c

152

long __user *, basep)

arch/alpha/kernel/osf_sys.c

277

linux_to_osf_stat(struct kstat *lstat, struct osf_stat __user *osf_stat)

arch/alpha/kernel/osf_sys.c

303

linux_to_osf_statfs(struct kstatfs *linux_stat, struct osf_statfs __user *osf_stat,

arch/alpha/kernel/osf_sys.c

324

linux_to_osf_statfs64(struct kstatfs *linux_stat, struct osf_statfs64 __user *osf_stat,

arch/alpha/kernel/osf_sys.c

343

SYSCALL_DEFINE3(osf_statfs, const char __user *, pathname,

arch/alpha/kernel/osf_sys.c

344

struct osf_statfs __user *, buffer, unsigned long, bufsiz)

arch/alpha/kernel/osf_sys.c

353

SYSCALL_DEFINE2(osf_stat, char __user *, name, struct osf_stat __user *, buf)

arch/alpha/kernel/osf_sys.c

365

SYSCALL_DEFINE2(osf_lstat, char __user *, name, struct osf_stat __user *, buf)

arch/alpha/kernel/osf_sys.c

377

SYSCALL_DEFINE2(osf_fstat, int, fd, struct osf_stat __user *, buf)

arch/alpha/kernel/osf_sys.c

390

struct osf_statfs __user *, buffer, unsigned long, bufsiz)

arch/alpha/kernel/osf_sys.c

399

SYSCALL_DEFINE3(osf_statfs64, char __user *, pathname,

arch/alpha/kernel/osf_sys.c

400

struct osf_statfs64 __user *, buffer, unsigned long, bufsiz)

arch/alpha/kernel/osf_sys.c

410

struct osf_statfs64 __user *, buffer, unsigned long, bufsiz)

arch/alpha/kernel/osf_sys.c

425

char __user *devname;

arch/alpha/kernel/osf_sys.c

431

char __user *devname;

arch/alpha/kernel/osf_sys.c

440

char __user *devname;

arch/alpha/kernel/osf_sys.c

454

osf_ufs_mount(const char __user *dirname,

arch/alpha/kernel/osf_sys.c

455

struct ufs_args __user *args, int flags)

arch/alpha/kernel/osf_sys.c

469

osf_cdfs_mount(const char __user *dirname,

arch/alpha/kernel/osf_sys.c

470

struct cdfs_args __user *args, int flags)

arch/alpha/kernel/osf_sys.c

484

osf_procfs_mount(const char __user *dirname,

arch/alpha/kernel/osf_sys.c

485

struct procfs_args __user *args, int flags)

arch/alpha/kernel/osf_sys.c

495

SYSCALL_DEFINE4(osf_mount, unsigned long, typenr, const char __user *, path,

arch/alpha/kernel/osf_sys.c

496

int, flag, void __user *, data)

arch/alpha/kernel/osf_sys.c

518

SYSCALL_DEFINE1(osf_utsname, char __user *, name)

arch/alpha/kernel/osf_sys.c

548

SYSCALL_DEFINE2(osf_getdomainname, char __user *, name, int, namelen)

arch/alpha/kernel/osf_sys.c

592

char __user *path;

arch/alpha/kernel/osf_sys.c

595

char __user *buf;

arch/alpha/kernel/osf_sys.c

600

char __user *buf;

arch/alpha/kernel/osf_sys.c

603

char __user *path;

arch/alpha/kernel/osf_sys.c

605

struct proplistname_args __user *name_args;

arch/alpha/kernel/osf_sys.c

607

char __user *buf;

arch/alpha/kernel/osf_sys.c

608

int __user *min_buf_size;

arch/alpha/kernel/osf_sys.c

612

struct proplistname_args __user *name_args;

arch/alpha/kernel/osf_sys.c

614

char __user *buf;

arch/alpha/kernel/osf_sys.c

615

int __user *min_buf_size;

arch/alpha/kernel/osf_sys.c

618

char __user *path;

arch/alpha/kernel/osf_sys.c

620

struct proplistname_args __user *name_args;

arch/alpha/kernel/osf_sys.c

624

struct proplistname_args __user *name_args;

arch/alpha/kernel/osf_sys.c

635

union pl_args __user *, args)

arch/alpha/kernel/osf_sys.c

638

int __user *min_buf_size_ptr;

arch/alpha/kernel/osf_sys.c

672

SYSCALL_DEFINE2(osf_sigstack, struct sigstack __user *, uss,

arch/alpha/kernel/osf_sys.c

673

struct sigstack __user *, uoss)

arch/alpha/kernel/osf_sys.c

681

void __user *ss_sp;

arch/alpha/kernel/osf_sys.c

712

SYSCALL_DEFINE3(osf_sysinfo, int, command, char __user *, buf, long, count)

arch/alpha/kernel/osf_sys.c

749

SYSCALL_DEFINE5(osf_getsysinfo, unsigned long, op, void __user *, buffer,

arch/alpha/kernel/osf_sys.c

750

unsigned long, nbytes, int __user *, start, void __user *, arg)

arch/alpha/kernel/osf_sys.c

762

if (put_user(w, (unsigned long __user *) buffer))

arch/alpha/kernel/osf_sys.c

778

if (put_user(w, (unsigned int __user *)buffer))

arch/alpha/kernel/osf_sys.c

788

if (put_user(w, (unsigned long __user*)buffer))

arch/alpha/kernel/osf_sys.c

806

SYSCALL_DEFINE5(osf_setsysinfo, unsigned long, op, void __user *, buffer,

arch/alpha/kernel/osf_sys.c

807

unsigned long, nbytes, int __user *, start, void __user *, arg)

arch/alpha/kernel/osf_sys.c

821

if (get_user(swcr, (unsigned long __user *)buffer))

arch/alpha/kernel/osf_sys.c

840

if (get_user(exc, (unsigned long __user *)buffer))

arch/alpha/kernel/osf_sys.c

868

(void __user *)NULL, /* FIXME */

arch/alpha/kernel/osf_sys.c

884

unsigned __user *p = buffer;

arch/alpha/kernel/osf_sys.c

934

get_tv32(struct timespec64 *o, struct timeval32 __user *i)

arch/alpha/kernel/osf_sys.c

945

put_tv32(struct timeval32 __user *o, struct timespec64 *i)

arch/alpha/kernel/osf_sys.c

954

put_tv_to_tv32(struct timeval32 __user *o, struct __kernel_old_timeval *i)

arch/alpha/kernel/osf_sys.c

969

SYSCALL_DEFINE2(osf_gettimeofday, struct timeval32 __user *, tv,

arch/alpha/kernel/osf_sys.c

970

struct timezone __user *, tz)

arch/alpha/kernel/osf_sys.c

986

SYSCALL_DEFINE2(osf_settimeofday, struct timeval32 __user *, tv,

arch/alpha/kernel/osf_sys.c

987

struct timezone __user *, tz)

arch/alpha/kernel/proto.h

172

extern void do_sigreturn(struct sigcontext __user *);

arch/alpha/kernel/proto.h

174

extern void do_rt_sigreturn(struct rt_sigframe __user *);

arch/alpha/kernel/proto.h

186

extern void do_entUnaUser(void __user *, unsigned long, unsigned long, struct pt_regs *);

arch/alpha/kernel/ptrace.c

320

struct iovec __user *uiov = (struct iovec __user *)data;

arch/alpha/kernel/rtc.c

127

return put_user(rtc_epoch, (unsigned long __user *)arg);

arch/alpha/kernel/signal.c

149

restore_sigcontext(struct sigcontext __user *sc, struct pt_regs *regs)

arch/alpha/kernel/signal.c

205

do_sigreturn(struct sigcontext __user *sc)

arch/alpha/kernel/signal.c

223

send_sig_fault(SIGTRAP, TRAP_BRKPT, (void __user *) regs->pc,

arch/alpha/kernel/signal.c

233

do_rt_sigreturn(struct rt_sigframe __user *frame)

arch/alpha/kernel/signal.c

251

send_sig_fault(SIGTRAP, TRAP_BRKPT, (void __user *) regs->pc,

arch/alpha/kernel/signal.c

265

static inline void __user *

arch/alpha/kernel/signal.c

268

return (void __user *)((sigsp(sp, ksig) - frame_size) & -32ul);

arch/alpha/kernel/signal.c

272

setup_sigcontext(struct sigcontext __user *sc, struct pt_regs *regs,

arch/alpha/kernel/signal.c

332

struct sigframe __user *frame;

arch/alpha/kernel/signal.c

377

struct rt_sigframe __user *frame;

arch/alpha/kernel/signal.c

60

const struct osf_sigaction __user *, act,

arch/alpha/kernel/signal.c

61

struct osf_sigaction __user *, oact)

arch/alpha/kernel/signal.c

90

SYSCALL_DEFINE5(rt_sigaction, int, sig, const struct sigaction __user *, act,

arch/alpha/kernel/signal.c

91

struct sigaction __user *, oact,

arch/alpha/kernel/signal.c

92

size_t, sigsetsize, void __user *, restorer)

arch/alpha/kernel/srm_env.c

89

static ssize_t srm_env_proc_write(struct file *file, const char __user *buffer,

arch/alpha/kernel/termios.c

32

int kernel_termios_to_user_termio(struct termio __user *termio,

arch/alpha/kernel/termios.c

5

struct termio __user *termio)

arch/alpha/kernel/traps.c

196

send_sig_fault_trapno(SIGFPE, si_code, (void __user *) regs->pc, 0, current);

arch/alpha/kernel/traps.c

251

send_sig_fault(SIGTRAP, TRAP_BRKPT, (void __user *)regs->pc,

arch/alpha/kernel/traps.c

257

(void __user *) regs->pc, 0, current);

arch/alpha/kernel/traps.c

318

send_sig_fault_trapno(signo, code, (void __user *) regs->pc,

arch/alpha/kernel/traps.c

330

send_sig_fault(SIGILL, ILL_ILLOPC, (void __user *)regs->pc, current);

arch/alpha/kernel/traps.c

345

force_sig_fault(SIGILL, ILL_ILLOPC, (void __user *)regs->pc);

arch/alpha/kernel/traps.c

662

do_entUnaUser(void __user * va, unsigned long opcode,

arch/alpha/kernel/traps.c

84

if (__get_user(insn, (unsigned int __user *)pc + i))

arch/alpha/lib/csum_partial_copy.c

124

csum_partial_cfu_dest_aligned(const unsigned long __user *src,

arch/alpha/lib/csum_partial_copy.c

179

csum_partial_cfu_src_aligned(const unsigned long __user *src,

arch/alpha/lib/csum_partial_copy.c

237

csum_partial_cfu_unaligned(const unsigned long __user * src,

arch/alpha/lib/csum_partial_copy.c

316

static __wsum __csum_and_copy(const void __user *src, void *dst, int len)

arch/alpha/lib/csum_partial_copy.c

325

(const unsigned long __user *) src,

arch/alpha/lib/csum_partial_copy.c

329

(const unsigned long __user *) src,

arch/alpha/lib/csum_partial_copy.c

337

(const unsigned long __user *) src,

arch/alpha/lib/csum_partial_copy.c

342

(const unsigned long __user *) src,

arch/alpha/lib/csum_partial_copy.c

350

csum_and_copy_from_user(const void __user *src, void *dst, int len)

arch/alpha/lib/csum_partial_copy.c

360

return __csum_and_copy((__force const void __user *)src,

arch/alpha/lib/csum_partial_copy.c

84

csum_partial_cfu_aligned(const unsigned long __user *src, unsigned long *dst,

arch/alpha/math-emu/math.c

109

get_user(insn, (__u32 __user *)pc);

arch/alpha/math-emu/math.c

354

get_user(insn, (__u32 __user *)(trigger_pc));

arch/alpha/mm/fault.c

100

__get_user(insn, (unsigned int __user *)regs->pc);

arch/alpha/mm/fault.c

220

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *) address);

arch/alpha/mm/fault.c

226

force_sig_fault(SIGSEGV, si_code, (void __user *) address);

arch/arc/include/asm/futex.h

121

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr, u32 expval,

arch/arc/include/asm/futex.h

74

u32 __user *uaddr)

arch/arc/include/asm/uaccess.h

139

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/arc/include/asm/uaccess.h

367

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/arc/include/asm/uaccess.h

589

static inline unsigned long __clear_user(void __user *to, unsigned long n)

arch/arc/kernel/arc_hostlink.c

35

put_user((unsigned int)__HOSTLINK__, (int __user *)arg);

arch/arc/kernel/disasm.c

38

(const void __user *) addr, 8);

arch/arc/kernel/process.c

46

SYSCALL_DEFINE3(arc_usr_cmpxchg, int __user *, uaddr, int, expected, int, new)

arch/arc/kernel/ptrace.c

164

const void *kbuf, const void __user *ubuf)

arch/arc/kernel/ptrace.c

262

const void *kbuf, const void __user *ubuf)

arch/arc/kernel/ptrace.c

332

(unsigned long __user *)data);

arch/arc/kernel/signal.c

102

stash_usr_regs(struct rt_sigframe __user *sf, struct pt_regs *regs,

arch/arc/kernel/signal.c

143

static int restore_usr_regs(struct pt_regs *regs, struct rt_sigframe __user *sf)

arch/arc/kernel/signal.c

198

struct rt_sigframe __user *sf;

arch/arc/kernel/signal.c

212

sf = (struct rt_sigframe __force __user *)(regs->sp);

arch/arc/kernel/signal.c

249

static inline void __user *get_sigframe(struct ksignal *ksig,

arch/arc/kernel/signal.c

254

void __user *frame;

arch/arc/kernel/signal.c

261

frame = (void __user *)((sp - framesize) & ~7);

arch/arc/kernel/signal.c

273

struct rt_sigframe __user *sf;

arch/arc/kernel/signal.c

66

static int save_arcv2_regs(struct sigcontext __user *mctx, struct pt_regs *regs)

arch/arc/kernel/signal.c

84

static int restore_arcv2_regs(struct sigcontext __user *mctx, struct pt_regs *regs)

arch/arc/kernel/traps.c

40

int signo, int si_code, void __user *addr)

arch/arc/kernel/traps.c

64

(void __user *)address); \

arch/arc/kernel/unwind.c

1278

(u8 __user *)addr);

arch/arc/kernel/unwind.c

1282

(u16 __user *)addr);

arch/arc/kernel/unwind.c

1286

(u32 __user *)addr);

arch/arc/kernel/unwind.c

1291

(u64 __user *)addr);

arch/arc/kernel/unwind.c

590

&& __get_user(value, (unsigned long __user *)value))

arch/arc/mm/fault.c

185

force_sig_fault(sig, si_code, (void __user *)address);

arch/arm/common/bL_switcher_dummy_if.c

18

static ssize_t bL_switcher_write(struct file *file, const char __user *buf,

arch/arm/include/asm/bug.h

66

int signo, int si_code, void __user *addr,

arch/arm/include/asm/checksum.h

42

csum_partial_copy_from_user(const void __user *src, void *dst, int len);

arch/arm/include/asm/checksum.h

47

__wsum csum_and_copy_from_user(const void __user *src, void *dst, int len)

arch/arm/include/asm/futex.h

100

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/arm/include/asm/futex.h

133

arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *uaddr)

arch/arm/include/asm/futex.h

46

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/arm/include/asm/syscalls.h

15

asmlinkage long sys_oabi_stat64(const char __user * filename,

arch/arm/include/asm/syscalls.h

16

struct oldabi_stat64 __user * statbuf);

arch/arm/include/asm/syscalls.h

17

asmlinkage long sys_oabi_lstat64(const char __user * filename,

arch/arm/include/asm/syscalls.h

18

struct oldabi_stat64 __user * statbuf);

arch/arm/include/asm/syscalls.h

20

struct oldabi_stat64 __user * statbuf);

arch/arm/include/asm/syscalls.h

22

const char __user *filename,

arch/arm/include/asm/syscalls.h

23

struct oldabi_stat64 __user *statbuf,

arch/arm/include/asm/syscalls.h

29

struct oabi_epoll_event __user *event);

arch/arm/include/asm/syscalls.h

33

struct oabi_sembuf __user *tsops,

arch/arm/include/asm/syscalls.h

35

const struct old_timespec32 __user *timeout);

arch/arm/include/asm/syscalls.h

36

asmlinkage long sys_oabi_semop(int semid, struct oabi_sembuf __user *tsops,

arch/arm/include/asm/syscalls.h

39

void __user *ptr, long fifth);

arch/arm/include/asm/syscalls.h

41

asmlinkage long sys_oabi_bind(int fd, struct sockaddr __user *addr, int addrlen);

arch/arm/include/asm/syscalls.h

42

asmlinkage long sys_oabi_connect(int fd, struct sockaddr __user *addr, int addrlen);

arch/arm/include/asm/syscalls.h

43

asmlinkage long sys_oabi_sendto(int fd, void __user *buff,

arch/arm/include/asm/syscalls.h

45

struct sockaddr __user *addr,

arch/arm/include/asm/syscalls.h

48

asmlinkage long sys_oabi_sendmsg(int fd, struct user_msghdr __user *msg, unsigned flags);

arch/arm/include/asm/syscalls.h

49

asmlinkage long sys_oabi_socketcall(int call, unsigned long __user *args);

arch/arm/include/asm/uaccess.h

105

static inline void __user *__uaccess_mask_range_ptr(const void __user *ptr,

arch/arm/include/asm/uaccess.h

108

void __user *safe_ptr = (void __user *)ptr;

arch/arm/include/asm/uaccess.h

184

register typeof(*(p)) __user *__p asm("r0") = (p); \

arch/arm/include/asm/uaccess.h

238

register const void __user *__p asm("r0") = __ptr; \

arch/arm/include/asm/uaccess.h

382

const __typeof__(*(ptr)) __user *__pu_ptr = (ptr); \

arch/arm/include/asm/uaccess.h

558

arm_copy_from_user(void *to, const void __user *from, unsigned long n);

arch/arm/include/asm/uaccess.h

561

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/arm/include/asm/uaccess.h

572

arm_copy_to_user(void __user *to, const void *from, unsigned long n);

arch/arm/include/asm/uaccess.h

574

__copy_to_user_std(void __user *to, const void *from, unsigned long n);

arch/arm/include/asm/uaccess.h

577

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/arm/include/asm/uaccess.h

591

arm_clear_user(void __user *addr, unsigned long n);

arch/arm/include/asm/uaccess.h

593

__clear_user_std(void __user *addr, unsigned long n);

arch/arm/include/asm/uaccess.h

596

__clear_user(void __user *addr, unsigned long n)

arch/arm/include/asm/uaccess.h

606

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/arm/include/asm/uaccess.h

612

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/arm/include/asm/uaccess.h

621

static inline unsigned long __must_check clear_user(void __user *to, unsigned long n)

arch/arm/include/asm/uaccess.h

629

extern long strncpy_from_user(char *dest, const char __user *src, long count);

arch/arm/include/asm/uaccess.h

631

extern __must_check long strnlen_user(const char __user *str, long n);

arch/arm/include/uapi/asm/signal.h

94

void __user *ss_sp;

arch/arm/kernel/atags_proc.c

13

static ssize_t atags_read(struct file *file, char __user *buf,

arch/arm/kernel/perf_callchain.c

24

struct frame_tail __user *fp;

arch/arm/kernel/perf_callchain.c

33

static struct frame_tail __user *

arch/arm/kernel/perf_callchain.c

34

user_backtrace(struct frame_tail __user *tail,

arch/arm/kernel/perf_callchain.c

65

struct frame_tail __user *tail;

arch/arm/kernel/perf_callchain.c

72

tail = (struct frame_tail __user *)regs->ARM_fp - 1;

arch/arm/kernel/ptrace.c

203

(void __user *)instruction_pointer(regs));

arch/arm/kernel/ptrace.c

251

unsigned long __user *ret)

arch/arm/kernel/ptrace.c

294

static int ptrace_getwmmxregs(struct task_struct *tsk, void __user *ufp)

arch/arm/kernel/ptrace.c

308

static int ptrace_setwmmxregs(struct task_struct *tsk, void __user *ufp)

arch/arm/kernel/ptrace.c

364

force_sig_ptrace_errno_trap((int)num, (void __user *)(bkpt->trigger));

arch/arm/kernel/ptrace.c

432

unsigned long __user *data)

arch/arm/kernel/ptrace.c

478

unsigned long __user *data)

arch/arm/kernel/ptrace.c

554

const void *kbuf, const void __user *ubuf)

arch/arm/kernel/ptrace.c

583

const void *kbuf, const void __user *ubuf)

arch/arm/kernel/ptrace.c

634

const void *kbuf, const void __user *ubuf)

arch/arm/kernel/ptrace.c

729

unsigned long __user *datap = (unsigned long __user *) data;

arch/arm/kernel/ptrace.c

809

(unsigned long __user *)data);

arch/arm/kernel/ptrace.c

813

(unsigned long __user *)data);

arch/arm/kernel/signal.c

102

static int preserve_vfp_context(struct vfp_sigframe __user *frame)

arch/arm/kernel/signal.c

118

static int restore_vfp_context(char __user **auxp)

arch/arm/kernel/signal.c

140

static int restore_sigframe(struct pt_regs *regs, struct sigframe __user *sf)

arch/arm/kernel/signal.c

143

char __user *aux;

arch/arm/kernel/signal.c

174

aux = (char __user *) sf->uc.uc_regspace;

arch/arm/kernel/signal.c

189

struct sigframe __user *frame;

arch/arm/kernel/signal.c

202

frame = (struct sigframe __user *)regs->ARM_sp;

arch/arm/kernel/signal.c

219

struct rt_sigframe __user *frame;

arch/arm/kernel/signal.c

232

frame = (struct rt_sigframe __user *)regs->ARM_sp;

arch/arm/kernel/signal.c

251

setup_sigframe(struct sigframe __user *sf, struct pt_regs *regs, sigset_t *set)

arch/arm/kernel/signal.c

253

struct aux_sigframe __user *aux;

arch/arm/kernel/signal.c

286

aux = (struct aux_sigframe __user *) sf->uc.uc_regspace;

arch/arm/kernel/signal.c

300

static inline void __user *

arch/arm/kernel/signal.c

304

void __user *frame;

arch/arm/kernel/signal.c

309

frame = (void __user *)((sp - framesize) & ~7);

arch/arm/kernel/signal.c

31

static int preserve_iwmmxt_context(struct iwmmxt_sigframe __user *frame)

arch/arm/kernel/signal.c

322

unsigned long __user *rc, void __user *frame)

arch/arm/kernel/signal.c

333

unsigned long __user *fdpic_func_desc =

arch/arm/kernel/signal.c

334

(unsigned long __user *)handler;

arch/arm/kernel/signal.c

450

struct sigframe __user *frame = get_sigframe(ksig, regs, sizeof(*frame));

arch/arm/kernel/signal.c

471

struct rt_sigframe __user *frame = get_sigframe(ksig, regs, sizeof(*frame));

arch/arm/kernel/signal.c

62

static int restore_iwmmxt_context(char __user **auxp)

arch/arm/kernel/signal.c

64

struct iwmmxt_sigframe __user *frame =

arch/arm/kernel/signal.c

65

(struct iwmmxt_sigframe __user *)*auxp;

arch/arm/kernel/swp_emulate.c

111

(void __user *)instruction_pointer(regs),

arch/arm/kernel/swp_emulate.c

199

if (!access_ok((void __user *)(address & ~3), 4)) {

arch/arm/kernel/sys_oabi-compat.c

122

struct oldabi_stat64 __user *statbuf)

arch/arm/kernel/sys_oabi-compat.c

148

asmlinkage long sys_oabi_stat64(const char __user * filename,

arch/arm/kernel/sys_oabi-compat.c

149

struct oldabi_stat64 __user * statbuf)

arch/arm/kernel/sys_oabi-compat.c

158

asmlinkage long sys_oabi_lstat64(const char __user * filename,

arch/arm/kernel/sys_oabi-compat.c

159

struct oldabi_stat64 __user * statbuf)

arch/arm/kernel/sys_oabi-compat.c

169

struct oldabi_stat64 __user * statbuf)

arch/arm/kernel/sys_oabi-compat.c

179

const char __user *filename,

arch/arm/kernel/sys_oabi-compat.c

180

struct oldabi_stat64 __user *statbuf,

arch/arm/kernel/sys_oabi-compat.c

200

static int get_oabi_flock(struct flock64 *kernel, struct oabi_flock64 __user *arg)

arch/arm/kernel/sys_oabi-compat.c

204

if (copy_from_user(&user, (struct oabi_flock64 __user *)arg,

arch/arm/kernel/sys_oabi-compat.c

217

static int put_oabi_flock(struct flock64 *kernel, struct oabi_flock64 __user *arg)

arch/arm/kernel/sys_oabi-compat.c

227

if (copy_to_user((struct oabi_flock64 __user *)arg,

arch/arm/kernel/sys_oabi-compat.c

237

void __user *argp = (void __user *)arg;

arch/arm/kernel/sys_oabi-compat.c

284

struct oabi_epoll_event __user *event)

arch/arm/kernel/sys_oabi-compat.c

300

struct oabi_epoll_event __user *event)

arch/arm/kernel/sys_oabi-compat.c

306

struct epoll_event __user *

arch/arm/kernel/sys_oabi-compat.c

308

struct epoll_event __user *uevent)

arch/arm/kernel/sys_oabi-compat.c

311

struct oabi_epoll_event __user *oevent = (void __user *)uevent;

arch/arm/kernel/sys_oabi-compat.c

317

return (void __user *)(oevent+1);

arch/arm/kernel/sys_oabi-compat.c

338

struct oabi_sembuf __user *tsops,

arch/arm/kernel/sys_oabi-compat.c

340

const struct old_timespec32 __user *timeout)

arch/arm/kernel/sys_oabi-compat.c

383

asmlinkage long sys_oabi_semop(int semid, struct oabi_sembuf __user *tsops,

arch/arm/kernel/sys_oabi-compat.c

390

void __user *ptr, long fifth)

arch/arm/kernel/sys_oabi-compat.c

395

(struct oabi_sembuf __user *)ptr,

arch/arm/kernel/sys_oabi-compat.c

399

(struct oabi_sembuf __user *)ptr,

arch/arm/kernel/sys_oabi-compat.c

401

(const struct old_timespec32 __user *)fifth);

arch/arm/kernel/sys_oabi-compat.c

408

struct oabi_sembuf __user *tsops,

arch/arm/kernel/sys_oabi-compat.c

410

const struct old_timespec32 __user *timeout)

arch/arm/kernel/sys_oabi-compat.c

415

asmlinkage long sys_oabi_semop(int semid, struct oabi_sembuf __user *tsops,

arch/arm/kernel/sys_oabi-compat.c

422

void __user *ptr, long fifth)

arch/arm/kernel/sys_oabi-compat.c

428

asmlinkage long sys_oabi_bind(int fd, struct sockaddr __user *addr, int addrlen)

arch/arm/kernel/sys_oabi-compat.c

438

asmlinkage long sys_oabi_connect(int fd, struct sockaddr __user *addr, int addrlen)

arch/arm/kernel/sys_oabi-compat.c

448

asmlinkage long sys_oabi_sendto(int fd, void __user *buff,

arch/arm/kernel/sys_oabi-compat.c

450

struct sockaddr __user *addr,

arch/arm/kernel/sys_oabi-compat.c

461

asmlinkage long sys_oabi_sendmsg(int fd, struct user_msghdr __user *msg, unsigned flags)

arch/arm/kernel/sys_oabi-compat.c

463

struct sockaddr __user *addr;

arch/arm/kernel/sys_oabi-compat.c

487

asmlinkage long sys_oabi_socketcall(int call, unsigned long __user *args)

arch/arm/kernel/sys_oabi-compat.c

494

r = sys_oabi_bind(a[0], (struct sockaddr __user *)a[1], a[2]);

arch/arm/kernel/sys_oabi-compat.c

498

r = sys_oabi_connect(a[0], (struct sockaddr __user *)a[1], a[2]);

arch/arm/kernel/sys_oabi-compat.c

502

r = sys_oabi_sendto(a[0], (void __user *)a[1], a[2], a[3],

arch/arm/kernel/sys_oabi-compat.c

503

(struct sockaddr __user *)a[4], a[5]);

arch/arm/kernel/sys_oabi-compat.c

507

r = sys_oabi_sendmsg(a[0], (struct user_msghdr __user *)a[1], a[2]);

arch/arm/kernel/traps.c

186

bad = get_user(tmp, &((u16 __user *)addr)[i]);

arch/arm/kernel/traps.c

193

bad = get_user(val, &((u32 __user *)addr)[i]);

arch/arm/kernel/traps.c

374

int signo, int si_code, void __user *addr,

arch/arm/kernel/traps.c

448

void __user *pc;

arch/arm/kernel/traps.c

450

pc = (void __user *)instruction_pointer(regs);

arch/arm/kernel/traps.c

465

if (get_user(instr, (u16 __user *)pc))

arch/arm/kernel/traps.c

470

if (get_user(instr2, (u16 __user *)pc+1))

arch/arm/kernel/traps.c

476

if (get_user(instr, (u32 __user *)pc))

arch/arm/kernel/traps.c

556

(void __user *)instruction_pointer(regs) -

arch/arm/kernel/traps.c

594

if (!access_ok((void __user *)start, end - start))

arch/arm/kernel/traps.c

682

(void __user *)instruction_pointer(regs) -

arch/arm/kernel/traps.c

746

SIGILL, ILL_ILLOPC, (void __user *)addr, instr, 0);

arch/arm/lib/uaccess_with_memcpy.c

111

if (__put_user(0, (char __user *)to))

arch/arm/lib/uaccess_with_memcpy.c

141

arm_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/arm/lib/uaccess_with_memcpy.c

162

__clear_user_memset(void __user *addr, unsigned long n)

arch/arm/lib/uaccess_with_memcpy.c

174

if (__put_user(0, (char __user *)addr))

arch/arm/lib/uaccess_with_memcpy.c

200

unsigned long arm_clear_user(void __user *addr, unsigned long n)

arch/arm/lib/uaccess_with_memcpy.c

23

pin_page_for_write(const void __user *_addr, pte_t **ptep, spinlock_t **ptlp)

arch/arm/lib/uaccess_with_memcpy.c

93

__copy_to_user_memcpy(void __user *to, const void *from, unsigned long n)

arch/arm/mm/alignment.c

152

static ssize_t alignment_proc_write(struct file *file, const char __user *buffer,

arch/arm/mm/alignment.c

985

force_sig_fault(SIGBUS, BUS_ADRALN, (void __user *)addr);

arch/arm/mm/fault.c

198

force_sig_fault(sig, code, (void __user *)addr);

arch/arm/mm/fault.c

641

arm_notify_die("", regs, inf->sig, inf->code, (void __user *)addr,

arch/arm/mm/fault.c

670

arm_notify_die("", regs, inf->sig, inf->code, (void __user *)addr,

arch/arm/nwfpe/fpa11_cpdt.c

117

static inline void storeDouble(struct roundingData *roundData, const unsigned int Fn, unsigned int __user *pMem)

arch/arm/nwfpe/fpa11_cpdt.c

150

static inline void storeExtended(const unsigned int Fn, unsigned int __user *pMem)

arch/arm/nwfpe/fpa11_cpdt.c

182

static inline void storeMultiple(const unsigned int Fn, unsigned int __user *pMem)

arch/arm/nwfpe/fpa11_cpdt.c

19

static inline void loadSingle(const unsigned int Fn, const unsigned int __user *pMem)

arch/arm/nwfpe/fpa11_cpdt.c

214

unsigned int __user *pBase, *pAddress, *pFinal;

arch/arm/nwfpe/fpa11_cpdt.c

217

pBase = (unsigned int __user *) readRegister(getRn(opcode));

arch/arm/nwfpe/fpa11_cpdt.c

257

unsigned int __user *pBase, *pAddress, *pFinal;

arch/arm/nwfpe/fpa11_cpdt.c

26

static inline void loadDouble(const unsigned int Fn, const unsigned int __user *pMem)

arch/arm/nwfpe/fpa11_cpdt.c

265

pBase = (unsigned int __user *) readRegister(getRn(opcode));

arch/arm/nwfpe/fpa11_cpdt.c

308

unsigned int __user *pBase, *pAddress, *pFinal;

arch/arm/nwfpe/fpa11_cpdt.c

311

pBase = (unsigned int __user *) readRegister(getRn(opcode));

arch/arm/nwfpe/fpa11_cpdt.c

344

unsigned int __user *pBase, *pAddress, *pFinal;

arch/arm/nwfpe/fpa11_cpdt.c

347

pBase = (unsigned int __user *) readRegister(getRn(opcode));

arch/arm/nwfpe/fpa11_cpdt.c

42

static inline void loadExtended(const unsigned int Fn, const unsigned int __user *pMem)

arch/arm/nwfpe/fpa11_cpdt.c

59

static inline void loadMultiple(const unsigned int Fn, const unsigned int __user *pMem)

arch/arm/nwfpe/fpa11_cpdt.c

91

static inline void storeSingle(struct roundingData *roundData, const unsigned int Fn, unsigned int __user *pMem)

arch/arm/vfp/vfpmodule.c

252

(void __user *)(instruction_pointer(regs) - 4),

arch/arm64/include/asm/entry-common.h

21

send_sig_fault(SIGSEGV, SEGV_MTEAERR, (void __user *)NULL, current);

arch/arm64/include/asm/futex.h

102

__lsui_futex_atomic_##op(int oparg, u32 __user *uaddr, int *oval) \

arch/arm64/include/asm/futex.h

132

__lsui_cmpxchg64(u64 __user *uaddr, u64 *oldval, u64 newval)

arch/arm64/include/asm/futex.h

154

__lsui_cmpxchg32(u32 __user *uaddr, u32 oldval, u32 newval, u32 *oval)

arch/arm64/include/asm/futex.h

156

u64 __user *uaddr64;

arch/arm64/include/asm/futex.h

164

uaddr64 = (u64 __user *)PTR_ALIGN_DOWN(uaddr, sizeof(u64));

arch/arm64/include/asm/futex.h

169

if (get_user(oval64.futex[other_pos], (u32 __user *)uaddr64 + other_pos))

arch/arm64/include/asm/futex.h

18

__llsc_futex_atomic_##op(int oparg, u32 __user *uaddr, int *oval) \

arch/arm64/include/asm/futex.h

193

__lsui_futex_atomic_and(int oparg, u32 __user *uaddr, int *oval)

arch/arm64/include/asm/futex.h

203

__lsui_futex_atomic_eor(int oparg, u32 __user *uaddr, int *oval)

arch/arm64/include/asm/futex.h

237

__lsui_futex_cmpxchg(u32 __user *uaddr, u32 oldval, u32 newval, u32 *oval)

arch/arm64/include/asm/futex.h

250

__futex_atomic_##op(int oparg, u32 __user *uaddr, int *oval) \

arch/arm64/include/asm/futex.h

262

__futex_cmpxchg(u32 __user *uaddr, u32 oldval, u32 newval, u32 *oval)

arch/arm64/include/asm/futex.h

268

arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *_uaddr)

arch/arm64/include/asm/futex.h

271

u32 __user *uaddr;

arch/arm64/include/asm/futex.h

302

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *_uaddr,

arch/arm64/include/asm/futex.h

305

u32 __user *uaddr;

arch/arm64/include/asm/futex.h

57

__llsc_futex_cmpxchg(u32 __user *uaddr, u32 oldval, u32 newval, u32 *oval)

arch/arm64/include/asm/gcs.h

102

static inline void put_user_gcs(unsigned long val, unsigned long __user *addr,

arch/arm64/include/asm/gcs.h

107

if (!access_ok((char __user *)addr, sizeof(u64))) {

arch/arm64/include/asm/gcs.h

124

put_user_gcs(val, (unsigned long __user *)gcspr, err);

arch/arm64/include/asm/gcs.h

135

static inline u64 get_user_gcs(unsigned long __user *addr, int *err)

arch/arm64/include/asm/gcs.h

153

read_val = get_user_gcs((__force unsigned long __user *)gcspr, err);

arch/arm64/include/asm/gcs.h

170

static inline void put_user_gcs(unsigned long val, unsigned long __user *addr,

arch/arm64/include/asm/gcs.h

184

static inline u64 get_user_gcs(unsigned long __user *addr, int *err)

arch/arm64/include/asm/gcs.h

84

static inline int gcssttr(unsigned long __user *addr, unsigned long val)

arch/arm64/include/asm/gcs.h

86

register unsigned long __user *_addr __asm__ ("x0") = addr;

arch/arm64/include/asm/kvm_host.h

1237

int kvm_arm_copy_reg_indices(struct kvm_vcpu *vcpu, u64 __user *indices);

arch/arm64/include/asm/kvm_host.h

1242

int kvm_arm_copy_sys_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices);

arch/arm64/include/asm/mte.h

110

size_t mte_probe_user_range(const char __user *uaddr, size_t size);

arch/arm64/include/asm/mte.h

22

unsigned long mte_copy_tags_from_user(void *to, const void __user *from,

arch/arm64/include/asm/mte.h

24

unsigned long mte_copy_tags_to_user(void __user *to, void *from,

arch/arm64/include/asm/signal.h

9

static inline void __user *arch_untagged_si_addr(void __user *addr,

arch/arm64/include/asm/uaccess.h

163

static inline void __user *__uaccess_mask_ptr(const void __user *ptr)

arch/arm64/include/asm/uaccess.h

165

void __user *safe_ptr;

arch/arm64/include/asm/uaccess.h

233

__typeof__(*(ptr)) __user *__rgu_ptr = (ptr); \

arch/arm64/include/asm/uaccess.h

252

__typeof__(*(ptr)) __user *__p = (ptr); \

arch/arm64/include/asm/uaccess.h

29

static inline int __access_ok(const void __user *ptr, unsigned long size);

arch/arm64/include/asm/uaccess.h

331

__typeof__(*(ptr)) __user *__rpu_ptr = (ptr); \

arch/arm64/include/asm/uaccess.h

349

__typeof__(*(ptr)) __user *__p = (ptr); \

arch/arm64/include/asm/uaccess.h

38

static inline int access_ok(const void __user *addr, unsigned long size)

arch/arm64/include/asm/uaccess.h

392

extern unsigned long __must_check __arch_copy_from_user(void *to, const void __user *from, unsigned long n);

arch/arm64/include/asm/uaccess.h

403

extern unsigned long __must_check __arch_copy_to_user(void __user *to, const void *from, unsigned long n);

arch/arm64/include/asm/uaccess.h

414

static __must_check __always_inline bool user_access_begin(const void __user *ptr, size_t len)

arch/arm64/include/asm/uaccess.h

442

unsafe_put_user(*(type *)(src),(type __user *)(dst),label); \

arch/arm64/include/asm/uaccess.h

450

char __user *__ucu_dst = (_dst); \

arch/arm64/include/asm/uaccess.h

461

extern unsigned long __must_check __arch_clear_user(void __user *to, unsigned long n);

arch/arm64/include/asm/uaccess.h

462

static inline unsigned long __must_check __clear_user(void __user *to, unsigned long n)

arch/arm64/include/asm/uaccess.h

473

extern long strncpy_from_user(char *dest, const char __user *src, long count);

arch/arm64/include/asm/uaccess.h

475

extern __must_check long strnlen_user(const char __user *str, long n);

arch/arm64/include/asm/uaccess.h

478

extern unsigned long __must_check __copy_user_flushcache(void *to, const void __user *from, unsigned long n);

arch/arm64/include/asm/uaccess.h

480

static inline size_t copy_from_user_flushcache(void *dst, const void __user *src, size_t size)

arch/arm64/include/asm/uaccess.h

492

static inline size_t probe_subpage_writeable(const char __user *uaddr,

arch/arm64/include/uapi/asm/kvm.h

197

void __user *addr;

arch/arm64/kernel/armv8_deprecated.c

167

const void __user *user_ptr;

arch/arm64/kernel/armv8_deprecated.c

199

user_ptr = (const void __user *)(unsigned long)(address & ~3);

arch/arm64/kernel/compat_alignment.c

140

if (get_user(val, (u32 __user *)eaddr))

arch/arm64/kernel/compat_alignment.c

155

if (put_user(val, (u32 __user *)eaddr))

arch/arm64/kernel/compat_alignment.c

284

static int alignment_get_arm(struct pt_regs *regs, __le32 __user *ip, u32 *inst)

arch/arm64/kernel/compat_alignment.c

297

static int alignment_get_thumb(struct pt_regs *regs, __le16 __user *ip, u16 *inst)

arch/arm64/kernel/compat_alignment.c

323

__le16 __user *ptr = (__le16 __user *)(instrptr & ~1);

arch/arm64/kernel/compat_alignment.c

339

if (alignment_get_arm(regs, (__le32 __user *)instrptr, &instr))

arch/arm64/kernel/compat_alignment.c

88

if (get_user(val, (u32 __user *)addr) ||

arch/arm64/kernel/compat_alignment.c

89

get_user(val2, (u32 __user *)(addr + 4)))

arch/arm64/kernel/compat_alignment.c

94

if (put_user(regs->regs[rd], (u32 __user *)addr) ||

arch/arm64/kernel/compat_alignment.c

95

put_user(regs->regs[rd2], (u32 __user *)(addr + 4)))

arch/arm64/kernel/debug-monitors.c

285

void __user *pc = (void __user *)instruction_pointer(regs);

arch/arm64/kernel/debug-monitors.c

293

get_user(instr, (__le16 __user *)pc);

arch/arm64/kernel/debug-monitors.c

297

get_user(instr, (__le16 __user *)(pc + 2));

arch/arm64/kernel/debug-monitors.c

306

get_user(instr, (__le32 __user *)pc);

arch/arm64/kernel/fpsimd.c

1525

(void __user *)instruction_pointer(regs),

arch/arm64/kernel/mte.c

447

void __user *buf = kiov->iov_base;

arch/arm64/kernel/mte.c

556

struct iovec __user *uiov = (void __user *)data;

arch/arm64/kernel/mte.c

637

size_t mte_probe_user_range(const char __user *uaddr, size_t size)

arch/arm64/kernel/mte.c

639

const char __user *end = uaddr + size;

arch/arm64/kernel/probes/uprobes.c

168

gcs_ret_vaddr = get_user_gcs((__force unsigned long __user *)gcspr, &err);

arch/arm64/kernel/probes/uprobes.c

186

put_user_gcs(trampoline_vaddr, (__force unsigned long __user *)gcspr, &err);

arch/arm64/kernel/process.c

996

return put_user(val, (unsigned int __user *)adr);

arch/arm64/kernel/ptrace.c

1041

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

1067

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

1128

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

1237

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

1307

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

1376

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

1425

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

1462

void __user *ubuf)

arch/arm64/kernel/ptrace.c

1497

void __user *ubuf)

arch/arm64/kernel/ptrace.c

1554

void __user *ubuf)

arch/arm64/kernel/ptrace.c

1833

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

1920

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

1958

const void __user *ubuf)

arch/arm64/kernel/ptrace.c

2056

compat_ulong_t __user *ret)

arch/arm64/kernel/ptrace.c

2191

compat_ulong_t __user *data)

arch/arm64/kernel/ptrace.c

2214

compat_ulong_t __user *data)

arch/arm64/kernel/ptrace.c

2240

void __user *datap = compat_ptr(data);

arch/arm64/kernel/ptrace.c

2270

(compat_ulong_t __user *)datap);

arch/arm64/kernel/ptrace.c

509

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

565

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

619

const void *kbuf, const void __user *ubuf,

arch/arm64/kernel/ptrace.c

645

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

681

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

715

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

746

const void *kbuf, const void __user *ubuf)

arch/arm64/kernel/ptrace.c

886

const void *kbuf, const void __user *ubuf,

arch/arm64/kernel/signal.c

1014

struct rt_sigframe __user *sf,

arch/arm64/kernel/signal.c

1101

ret = copy_from_user(&cap, (unsigned long __user *)gcspr_el0,

arch/arm64/kernel/signal.c

1113

put_user_gcs(0, (unsigned long __user *)gcspr_el0, &ret);

arch/arm64/kernel/signal.c

1129

struct rt_sigframe __user *frame;

arch/arm64/kernel/signal.c

1142

frame = (struct rt_sigframe __user *)regs->sp;

arch/arm64/kernel/signal.c

1276

struct rt_sigframe __user *sf = user->sigframe;

arch/arm64/kernel/signal.c

1294

struct fpsimd_context __user *fpsimd_ctx =

arch/arm64/kernel/signal.c

1301

struct esr_context __user *esr_ctx =

arch/arm64/kernel/signal.c

1310

struct gcs_context __user *gcs_ctx =

arch/arm64/kernel/signal.c

1318

struct sve_context __user *sve_ctx =

arch/arm64/kernel/signal.c

1325

struct tpidr2_context __user *tpidr2_ctx =

arch/arm64/kernel/signal.c

1332

struct fpmr_context __user *fpmr_ctx =

arch/arm64/kernel/signal.c

1338

struct poe_context __user *poe_ctx =

arch/arm64/kernel/signal.c

1346

struct za_context __user *za_ctx =

arch/arm64/kernel/signal.c

1353

struct zt_context __user *zt_ctx =

arch/arm64/kernel/signal.c

1359

char __user *sfp = (char __user *)user->sigframe;

arch/arm64/kernel/signal.c

1360

char __user *userp =

arch/arm64/kernel/signal.c

1363

struct extra_context __user *extra;

arch/arm64/kernel/signal.c

1364

struct _aarch64_ctx __user *end;

arch/arm64/kernel/signal.c

1368

extra = (struct extra_context __user *)userp;

arch/arm64/kernel/signal.c

1371

end = (struct _aarch64_ctx __user *)userp;

arch/arm64/kernel/signal.c

1394

struct _aarch64_ctx __user *end =

arch/arm64/kernel/signal.c

1418

user->next_frame = (struct frame_record __user *)sp;

arch/arm64/kernel/signal.c

1421

user->sigframe = (struct rt_sigframe __user *)sp;

arch/arm64/kernel/signal.c

1455

(unsigned long __user *)(gcspr_el0 - 16), &ret);

arch/arm64/kernel/signal.c

1457

(unsigned long __user *)(gcspr_el0 - 8), &ret);

arch/arm64/kernel/signal.c

1541

struct rt_sigframe __user *frame;

arch/arm64/kernel/signal.c

251

static void __user *apply_user_offset(

arch/arm64/kernel/signal.c

254

char __user *base = (char __user *)user->sigframe;

arch/arm64/kernel/signal.c

260

struct fpsimd_context __user *fpsimd;

arch/arm64/kernel/signal.c

262

struct sve_context __user *sve;

arch/arm64/kernel/signal.c

264

struct tpidr2_context __user *tpidr2;

arch/arm64/kernel/signal.c

266

struct za_context __user *za;

arch/arm64/kernel/signal.c

268

struct zt_context __user *zt;

arch/arm64/kernel/signal.c

270

struct fpmr_context __user *fpmr;

arch/arm64/kernel/signal.c

272

struct poe_context __user *poe;

arch/arm64/kernel/signal.c

274

struct gcs_context __user *gcs;

arch/arm64/kernel/signal.c

278

static int preserve_fpsimd_context(struct fpsimd_context __user *ctx)

arch/arm64/kernel/signal.c

334

static int preserve_fpmr_context(struct fpmr_context __user *ctx)

arch/arm64/kernel/signal.c

360

static int preserve_poe_context(struct poe_context __user *ctx,

arch/arm64/kernel/signal.c

395

static int preserve_sve_context(struct sve_context __user *ctx)

arch/arm64/kernel/signal.c

422

err |= __copy_to_user((char __user *)ctx + SVE_SIG_REGS_OFFSET,

arch/arm64/kernel/signal.c

507

(char __user const *)user->sve +

arch/arm64/kernel/signal.c

51

struct rt_sigframe __user *sigframe;

arch/arm64/kernel/signal.c

52

struct frame_record __user *next_frame;

arch/arm64/kernel/signal.c

532

extern int preserve_sve_context(void __user *ctx);

arch/arm64/kernel/signal.c

538

static int preserve_tpidr2_context(struct tpidr2_context __user *ctx)

arch/arm64/kernel/signal.c

565

static int preserve_za_context(struct za_context __user *ctx)

arch/arm64/kernel/signal.c

587

err |= __copy_to_user((char __user *)ctx + ZA_SIG_REGS_OFFSET,

arch/arm64/kernel/signal.c

633

(char __user const *)user->za +

arch/arm64/kernel/signal.c

645

static int preserve_zt_context(struct zt_context __user *ctx)

arch/arm64/kernel/signal.c

662

err |= __copy_to_user((char __user *)ctx + ZT_SIG_REGS_OFFSET,

arch/arm64/kernel/signal.c

688

(char __user const *)user->zt +

arch/arm64/kernel/signal.c

700

extern int preserve_tpidr2_context(void __user *ctx);

arch/arm64/kernel/signal.c

702

extern int preserve_za_context(void __user *ctx);

arch/arm64/kernel/signal.c

704

extern int preserve_zt_context(void __user *ctx);

arch/arm64/kernel/signal.c

711

static int preserve_gcs_context(struct gcs_context __user *ctx)

arch/arm64/kernel/signal.c

780

extern int preserve_gcs_context(void __user *ctx);

arch/arm64/kernel/signal.c

786

struct rt_sigframe __user *sf)

arch/arm64/kernel/signal.c

788

struct sigcontext __user *const sc = &sf->uc.uc_mcontext;

arch/arm64/kernel/signal.c

789

struct _aarch64_ctx __user *head;

arch/arm64/kernel/signal.c

790

char __user *base = (char __user *)&sc->__reserved;

arch/arm64/kernel/signal.c

794

char const __user *const sfp = (char const __user *)sf;

arch/arm64/kernel/signal.c

811

char const __user *userp;

arch/arm64/kernel/signal.c

812

struct extra_context const __user *extra;

arch/arm64/kernel/signal.c

815

struct _aarch64_ctx const __user *end;

arch/arm64/kernel/signal.c

824

head = (struct _aarch64_ctx __user *)(base + offset);

arch/arm64/kernel/signal.c

846

user->fpsimd = (struct fpsimd_context __user *)head;

arch/arm64/kernel/signal.c

861

user->poe = (struct poe_context __user *)head;

arch/arm64/kernel/signal.c

872

user->sve = (struct sve_context __user *)head;

arch/arm64/kernel/signal.c

883

user->tpidr2 = (struct tpidr2_context __user *)head;

arch/arm64/kernel/signal.c

894

user->za = (struct za_context __user *)head;

arch/arm64/kernel/signal.c

905

user->zt = (struct zt_context __user *)head;

arch/arm64/kernel/signal.c

916

user->fpmr = (struct fpmr_context __user *)head;

arch/arm64/kernel/signal.c

927

user->gcs = (struct gcs_context __user *)head;

arch/arm64/kernel/signal.c

938

userp = (char const __user *)head;

arch/arm64/kernel/signal.c

940

extra = (struct extra_context const __user *)userp;

arch/arm64/kernel/signal.c

953

end = (struct _aarch64_ctx const __user *)userp;

arch/arm64/kernel/signal.c

967

base = (__force void __user *)extra_datap;

arch/arm64/kernel/signal32.c

142

static int compat_restore_vfp_context(struct compat_vfp_sigframe __user *frame)

arch/arm64/kernel/signal32.c

186

struct compat_sigframe __user *sf)

arch/arm64/kernel/signal32.c

190

struct compat_aux_sigframe __user *aux;

arch/arm64/kernel/signal32.c

224

aux = (struct compat_aux_sigframe __user *) sf->uc.uc_regspace;

arch/arm64/kernel/signal32.c

234

struct compat_sigframe __user *frame;

arch/arm64/kernel/signal32.c

247

frame = (struct compat_sigframe __user *)regs->compat_sp;

arch/arm64/kernel/signal32.c

265

struct compat_rt_sigframe __user *frame;

arch/arm64/kernel/signal32.c

278

frame = (struct compat_rt_sigframe __user *)regs->compat_sp;

arch/arm64/kernel/signal32.c

296

static void __user *compat_get_sigframe(struct ksignal *ksig,

arch/arm64/kernel/signal32.c

301

void __user *frame;

arch/arm64/kernel/signal32.c

318

compat_ulong_t __user *rc, void __user *frame,

arch/arm64/kernel/signal32.c

360

static int compat_setup_sigframe(struct compat_sigframe __user *sf,

arch/arm64/kernel/signal32.c

363

struct compat_aux_sigframe __user *aux;

arch/arm64/kernel/signal32.c

394

aux = (struct compat_aux_sigframe __user *) sf->uc.uc_regspace;

arch/arm64/kernel/signal32.c

409

struct compat_rt_sigframe __user *frame;

arch/arm64/kernel/signal32.c

438

struct compat_sigframe __user *frame;

arch/arm64/kernel/signal32.c

49

static inline int put_sigset_t(compat_sigset_t __user *uset, sigset_t *set)

arch/arm64/kernel/signal32.c

60

const compat_sigset_t __user *uset)

arch/arm64/kernel/signal32.c

92

static int compat_preserve_vfp_context(struct compat_vfp_sigframe __user *frame)

arch/arm64/kernel/stacktrace.c

507

struct frame_tail __user *fp;

arch/arm64/kernel/stacktrace.c

515

static struct frame_tail __user *

arch/arm64/kernel/stacktrace.c

516

unwind_user_frame(struct frame_tail __user *tail, void *cookie,

arch/arm64/kernel/stacktrace.c

564

static struct compat_frame_tail __user *

arch/arm64/kernel/stacktrace.c

565

unwind_compat_user_frame(struct compat_frame_tail __user *tail, void *cookie,

arch/arm64/kernel/stacktrace.c

589

if (tail + 1 >= (struct compat_frame_tail __user *)

arch/arm64/kernel/stacktrace.c

593

return (struct compat_frame_tail __user *)compat_ptr(buftail.fp) - 1;

arch/arm64/kernel/stacktrace.c

606

struct frame_tail __user *tail;

arch/arm64/kernel/stacktrace.c

608

tail = (struct frame_tail __user *)regs->regs[29];

arch/arm64/kernel/stacktrace.c

614

struct compat_frame_tail __user *tail;

arch/arm64/kernel/stacktrace.c

616

tail = (struct compat_frame_tail __user *)regs->compat_fp - 1;

arch/arm64/kernel/sys32.c

18

COMPAT_SYSCALL_DEFINE3(aarch32_statfs64, const char __user *, pathname,

arch/arm64/kernel/sys32.c

19

compat_size_t, sz, struct compat_statfs64 __user *, buf)

arch/arm64/kernel/sys32.c

37

struct compat_statfs64 __user *, buf)

arch/arm64/kernel/sys32.c

70

COMPAT_SYSCALL_DEFINE6(aarch32_pread64, unsigned int, fd, char __user *, buf,

arch/arm64/kernel/sys32.c

77

const char __user *, buf, size_t, count, u32, __pad,

arch/arm64/kernel/sys32.c

83

COMPAT_SYSCALL_DEFINE4(aarch32_truncate64, const char __user *, pathname,

arch/arm64/kernel/sys_compat.c

60

if (!access_ok((const void __user *)start, end - start))

arch/arm64/kernel/traps.c

268

force_sig_fault(signo, code, (void __user *)far);

arch/arm64/kernel/traps.c

274

force_sig_pkuerr((void __user *)far, pkey);

arch/arm64/kernel/traps.c

281

force_sig_mceerr(code, (void __user *)far, lsb);

arch/arm64/kernel/traps.c

288

force_sig_ptrace_errno_trap(errno, (void __user *)far);

arch/arm64/kernel/traps.c

386

if (get_user(instr_le, (__le16 __user *)pc))

arch/arm64/kernel/traps.c

392

if (get_user(instr_le, (__le16 __user *)(pc + 2)))

arch/arm64/kernel/traps.c

400

if (get_user(instr_le, (__le32 __user *)pc))

arch/arm64/kvm/arch_timer.c

1638

int __user *uaddr = (int __user *)(long)attr->addr;

arch/arm64/kvm/arch_timer.c

1686

int __user *uaddr = (int __user *)(long)attr->addr;

arch/arm64/kvm/arm.c

1841

void __user *argp = (void __user *)arg;

arch/arm64/kvm/arm.c

1883

struct kvm_reg_list __user *user_list = argp;

arch/arm64/kvm/arm.c

1960

if (get_user(what, (const int __user *)argp))

arch/arm64/kvm/arm.c

2019

void __user *argp = (void __user *)arg;

arch/arm64/kvm/at.c

1759

static int __lsui_swap_desc(u64 __user *ptep, u64 old, u64 new)

arch/arm64/kvm/at.c

1788

static int __lse_swap_desc(u64 __user *ptep, u64 old, u64 new)

arch/arm64/kvm/at.c

1813

static int __llsc_swap_desc(u64 __user *ptep, u64 old, u64 new)

arch/arm64/kvm/at.c

1845

u64 __user *ptep;

arch/arm64/kvm/at.c

1862

ptep = (void __user *)hva + offset;

arch/arm64/kvm/guest.c

194

__u32 __user *uaddr = (__u32 __user *)(unsigned long)reg->addr;

arch/arm64/kvm/guest.c

217

__u32 __user *uaddr = (__u32 __user *)(unsigned long)reg->addr;

arch/arm64/kvm/guest.c

331

if (copy_to_user((void __user *)reg->addr, vqs, sizeof(vqs)))

arch/arm64/kvm/guest.c

351

if (copy_from_user(vqs, (const void __user *)reg->addr, sizeof(vqs)))

arch/arm64/kvm/guest.c

489

char __user *uptr = (char __user *)reg->addr;

arch/arm64/kvm/guest.c

515

const char __user *uptr = (const char __user *)reg->addr;

arch/arm64/kvm/guest.c

547

u64 __user *uindices)

arch/arm64/kvm/guest.c

609

u64 __user *uindices)

arch/arm64/kvm/guest.c

680

int kvm_arm_copy_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices)

arch/arm64/kvm/guest.c

980

void __user *tags = copy_tags->addr;

arch/arm64/kvm/hyp_trace.c

365

static ssize_t hyp_trace_write_event_write(struct file *f, const char __user *ubuf,

arch/arm64/kvm/hypercalls.c

172

static int kvm_smccc_set_filter(struct kvm *kvm, struct kvm_smccc_filter __user *uaddr)

arch/arm64/kvm/hypercalls.c

420

int kvm_arm_copy_fw_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices)

arch/arm64/kvm/hypercalls.c

486

void __user *uaddr = (void __user *)(long)reg->addr;

arch/arm64/kvm/hypercalls.c

567

void __user *uaddr = (void __user *)(long)reg->addr;

arch/arm64/kvm/hypercalls.c

671

void __user *uaddr = (void __user *)attr->addr;

arch/arm64/kvm/mmu.c

1353

send_sig_mceerr(BUS_MCEERR_AR, (void __user *)address, lsb, current);

arch/arm64/kvm/pmu-emul.c

1132

int __user *uaddr = (int __user *)(long)attr->addr;

arch/arm64/kvm/pmu-emul.c

1157

struct kvm_pmu_event_filter __user *uaddr;

arch/arm64/kvm/pmu-emul.c

1168

uaddr = (struct kvm_pmu_event_filter __user *)(long)attr->addr;

arch/arm64/kvm/pmu-emul.c

1206

int __user *uaddr = (int __user *)(long)attr->addr;

arch/arm64/kvm/pmu-emul.c

1215

unsigned int __user *uaddr = (unsigned int __user *)(long)attr->addr;

arch/arm64/kvm/pmu-emul.c

1234

int __user *uaddr = (int __user *)(long)attr->addr;

arch/arm64/kvm/pvtime.c

110

u64 __user *user = (u64 __user *)attr->addr;

arch/arm64/kvm/pvtime.c

78

u64 __user *user = (u64 __user *)attr->addr;

arch/arm64/kvm/sys_regs.c

5393

static int demux_c15_get(struct kvm_vcpu *vcpu, u64 id, void __user *uaddr)

arch/arm64/kvm/sys_regs.c

5396

u32 __user *uval = uaddr;

arch/arm64/kvm/sys_regs.c

5418

static int demux_c15_set(struct kvm_vcpu *vcpu, u64 id, void __user *uaddr)

arch/arm64/kvm/sys_regs.c

5421

u32 __user *uval = uaddr;

arch/arm64/kvm/sys_regs.c

5461

u64 __user *uaddr = (u64 __user *)(unsigned long)reg->addr;

arch/arm64/kvm/sys_regs.c

5486

void __user *uaddr = (void __user *)(unsigned long)reg->addr;

arch/arm64/kvm/sys_regs.c

5498

u64 __user *uaddr = (u64 __user *)(unsigned long)reg->addr;

arch/arm64/kvm/sys_regs.c

5526

void __user *uaddr = (void __user *)(unsigned long)reg->addr;

arch/arm64/kvm/sys_regs.c

5540

static int write_demux_regids(u64 __user *uindices)

arch/arm64/kvm/sys_regs.c

5565

static bool copy_reg_to_user(const struct sys_reg_desc *reg, u64 __user **uind)

arch/arm64/kvm/sys_regs.c

5592

u64 __user **uind,

arch/arm64/kvm/sys_regs.c

5613

static int walk_sys_regs(struct kvm_vcpu *vcpu, u64 __user *uind)

arch/arm64/kvm/sys_regs.c

5633

+ walk_sys_regs(vcpu, (u64 __user *)NULL);

arch/arm64/kvm/sys_regs.c

5636

int kvm_arm_copy_sys_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices)

arch/arm64/kvm/sys_regs.c

5658

u64 __user *masks = (u64 __user *)range->addr;

arch/arm64/kvm/vgic/vgic-its.c

2745

u64 __user *uaddr = (u64 __user *)(long)attr->addr;

arch/arm64/kvm/vgic/vgic-its.c

2770

u64 __user *uaddr = (u64 __user *)(long)attr->addr;

arch/arm64/kvm/vgic/vgic-its.c

2789

u64 __user *uaddr = (u64 __user *)(long)attr->addr;

arch/arm64/kvm/vgic/vgic-its.c

2800

u64 __user *uaddr = (u64 __user *)(long)attr->addr;

arch/arm64/kvm/vgic/vgic-kvm-device.c

220

u32 __user *uaddr = (u32 __user *)(long)attr->addr;

arch/arm64/kvm/vgic/vgic-kvm-device.c

301

u32 __user *uaddr = (u32 __user *)(long)attr->addr;

arch/arm64/kvm/vgic/vgic-kvm-device.c

372

u32 __user *uaddr = (u32 __user *)(unsigned long)attr->addr;

arch/arm64/kvm/vgic/vgic-kvm-device.c

564

u32 __user *uaddr = (u32 __user *)(unsigned long)attr->addr;

arch/arm64/kvm/vgic/vgic-kvm-device.c

619

u32 __user *uaddr = (u32 __user *)(unsigned long)attr->addr;

arch/arm64/kvm/vgic/vgic-kvm-device.c

636

u32 __user *uaddr = (u32 __user *)attr->addr;

arch/arm64/kvm/vgic/vgic-kvm-device.c

667

u32 __user *uaddr = (u32 __user *)(long)attr->addr;

arch/arm64/kvm/vgic/vgic-kvm-device.c

727

u64 __user *uaddr = (u64 __user *)(long)attr->addr;

arch/arm64/kvm/vgic/vgic-kvm-device.c

95

u64 __user *uaddr = (u64 __user *)attr->addr;

arch/arm64/lib/uaccess_flushcache.c

22

unsigned long __copy_user_flushcache(void *to, const void __user *from,

arch/arm64/mm/gcs.c

103

cap_ptr = (unsigned long __user *)(addr + size -

arch/arm64/mm/gcs.c

209

unsigned long __user *arg)

arch/arm64/mm/gcs.c

62

unsigned long __user *cap_ptr;

arch/csky/abiv1/alignment.c

300

force_sig_fault(SIGBUS, BUS_ADRALN, (void __user *)addr);

arch/csky/abiv2/fpu.c

122

force_sig_fault(sig, code, (void __user *)regs->pc);

arch/csky/include/asm/futex.h

42

arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *uaddr)

arch/csky/include/asm/futex.h

83

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/csky/include/asm/syscalls.h

8

long sys_cacheflush(void __user *, unsigned long, int);

arch/csky/include/asm/uaccess.h

168

static inline int __get_user_fn(size_t size, const void __user *ptr, void *x)

arch/csky/include/asm/uaccess.h

198

unsigned long __clear_user(void __user *to, unsigned long n);

arch/csky/include/asm/uaccess.h

91

static inline int __put_user_fn(size_t size, void __user *ptr, void *x)

arch/csky/include/asm/vdso.h

19

(void __user *)((unsigned long)(base) + __vdso_##name); \

arch/csky/kernel/perf_callchain.c

52

unsigned long __user *user_frame_tail = (unsigned long __user *)fp;

arch/csky/kernel/ptrace.c

140

const void *kbuf, const void __user *ubuf)

arch/csky/kernel/ptrace.c

92

const void *kbuf, const void __user *ubuf)

arch/csky/kernel/signal.c

101

static int setup_sigcontext(struct rt_sigframe __user *frame,

arch/csky/kernel/signal.c

104

struct sigcontext __user *sc = &frame->uc.uc_mcontext;

arch/csky/kernel/signal.c

113

static inline void __user *get_sigframe(struct ksignal *ksig,

arch/csky/kernel/signal.c

125

return (void __user __force *)(-1UL);

arch/csky/kernel/signal.c

133

return (void __user *)sp;

arch/csky/kernel/signal.c

139

struct rt_sigframe __user *frame;

arch/csky/kernel/signal.c

16

static int restore_fpu_state(struct sigcontext __user *sc)

arch/csky/kernel/signal.c

28

static int save_fpu_state(struct sigcontext __user *sc)

arch/csky/kernel/signal.c

52

struct sigcontext __user *sc)

arch/csky/kernel/signal.c

72

struct rt_sigframe __user *frame;

arch/csky/kernel/signal.c

78

frame = (struct rt_sigframe __user *)regs->usp;

arch/csky/kernel/traps.c

129

force_sig_fault(signo, code, (void __user *)addr);

arch/csky/lib/usercopy.c

157

__clear_user(void __user *to, unsigned long n)

arch/csky/mm/syscache.c

10

void __user *, addr,

arch/hexagon/include/asm/futex.h

35

arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *uaddr)

arch/hexagon/include/asm/futex.h

73

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr, u32 oldval,

arch/hexagon/include/asm/uaccess.h

25

unsigned long raw_copy_from_user(void *to, const void __user *from,

arch/hexagon/include/asm/uaccess.h

27

unsigned long raw_copy_to_user(void __user *to, const void *from,

arch/hexagon/include/asm/uaccess.h

31

__kernel_size_t __clear_user_hexagon(void __user *dest, unsigned long count);

arch/hexagon/kernel/ptrace.c

75

const void *kbuf, const void __user *ubuf)

arch/hexagon/kernel/signal.c

226

struct rt_sigframe __user *frame;

arch/hexagon/kernel/signal.c

232

frame = (struct rt_sigframe __user *)pt_psp(regs);

arch/hexagon/kernel/signal.c

27

static void __user *get_sigframe(struct ksignal *ksig, struct pt_regs *regs,

arch/hexagon/kernel/signal.c

32

return (void __user *)((sp - frame_size) & ~(sizeof(long long) - 1));

arch/hexagon/kernel/signal.c

35

static int setup_sigcontext(struct pt_regs *regs, struct sigcontext __user *sc)

arch/hexagon/kernel/signal.c

65

struct sigcontext __user *sc)

arch/hexagon/kernel/signal.c

99

struct rt_sigframe __user *frame;

arch/hexagon/kernel/traps.c

400

(void __user *) pt_elr(regs));

arch/hexagon/mm/uaccess.c

22

__kernel_size_t __clear_user_hexagon(void __user *dest, unsigned long count)

arch/hexagon/mm/vm_fault.c

130

force_sig_fault(si_signo, si_code, (void __user *)address);

arch/hexagon/mm/vm_fault.c

138

force_sig_fault(SIGSEGV, si_code, (void __user *)address);

arch/loongarch/include/asm/fpu.h

32

asmlinkage int _save_fp_context(void __user *fpregs, void __user *fcc, void __user *csr);

arch/loongarch/include/asm/fpu.h

33

asmlinkage int _restore_fp_context(void __user *fpregs, void __user *fcc, void __user *csr);

arch/loongarch/include/asm/fpu.h

39

asmlinkage int _save_lsx_context(void __user *fpregs, void __user *fcc, void __user *fcsr);

arch/loongarch/include/asm/fpu.h

40

asmlinkage int _restore_lsx_context(void __user *fpregs, void __user *fcc, void __user *fcsr);

arch/loongarch/include/asm/fpu.h

46

asmlinkage int _save_lasx_context(void __user *fpregs, void __user *fcc, void __user *fcsr);

arch/loongarch/include/asm/fpu.h

47

asmlinkage int _restore_lasx_context(void __user *fpregs, void __user *fcc, void __user *fcsr);

arch/loongarch/include/asm/futex.h

31

arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *uaddr)

arch/loongarch/include/asm/futex.h

66

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr, u32 oldval, u32 newval)

arch/loongarch/include/asm/inst.h

805

void emulate_load_store_insn(struct pt_regs *regs, void __user *addr, unsigned int *pc);

arch/loongarch/include/asm/inst.h

806

unsigned long unaligned_read(void __user *addr, void *value, unsigned long n, bool sign);

arch/loongarch/include/asm/inst.h

807

unsigned long unaligned_write(void __user *addr, unsigned long value, unsigned long n);

arch/loongarch/include/asm/lbt.h

18

asmlinkage int _save_lbt_context(void __user *regs, void __user *eflags);

arch/loongarch/include/asm/lbt.h

19

asmlinkage int _restore_lbt_context(void __user *regs, void __user *eflags);

arch/loongarch/include/asm/lbt.h

20

asmlinkage int _save_ftop_context(void __user *ftop);

arch/loongarch/include/asm/lbt.h

21

asmlinkage int _restore_ftop_context(void __user *ftop);

arch/loongarch/include/asm/uaccess.h

148

#define __m(x) (*(struct __large_struct __user *)(x))

arch/loongarch/include/asm/uaccess.h

184

u32 __user *__ptr = (u32 __user *)(ptr); \

arch/loongarch/include/asm/uaccess.h

232

u32 __user *__ptr = (u32 __user *)(ptr); \

arch/loongarch/include/asm/uaccess.h

284

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/loongarch/include/asm/uaccess.h

290

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/loongarch/include/asm/uaccess.h

308

extern unsigned long __clear_user(void __user *addr, __kernel_size_t size);

arch/loongarch/include/asm/uaccess.h

312

void __user *__cl_addr = (addr); \

arch/loongarch/include/asm/uaccess.h

319

extern long strncpy_from_user(char *to, const char __user *from, long n);

arch/loongarch/include/asm/uaccess.h

320

extern long strnlen_user(const char __user *str, long n);

arch/loongarch/include/asm/uaccess.h

53

const __typeof__(*(ptr)) __user *__p = (ptr); \

arch/loongarch/include/asm/uaccess.h

79

__typeof__(*(ptr)) __user *__p = (ptr); \

arch/loongarch/kernel/access-helper.h

12

return user ? get_user(*a, (unsigned long __user *)p) : get_kernel_nofault(*a, p);

arch/loongarch/kernel/access-helper.h

7

return user ? get_user(*i, (u32 __user *)p) : get_kernel_nofault(*i, p);

arch/loongarch/kernel/kdebugfs.c

122

static ssize_t tso_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)

arch/loongarch/kernel/kdebugfs.c

20

static ssize_t sfb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

arch/loongarch/kernel/kdebugfs.c

43

static ssize_t sfb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)

arch/loongarch/kernel/kdebugfs.c

93

static ssize_t tso_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

arch/loongarch/kernel/perf_event.c

34

unsigned long __user *user_frame_tail;

arch/loongarch/kernel/perf_event.c

37

user_frame_tail = (unsigned long __user *)(fp - sizeof(struct stack_frame));

arch/loongarch/kernel/ptrace.c

1010

unsigned long __user *datap = (void __user *) data;

arch/loongarch/kernel/ptrace.c

166

const void **kbuf, const void __user **ubuf)

arch/loongarch/kernel/ptrace.c

175

const void **kbuf, const void __user **ubuf)

arch/loongarch/kernel/ptrace.c

200

const void *kbuf, const void __user *ubuf)

arch/loongarch/kernel/ptrace.c

251

const void *kbuf, const void __user *ubuf)

arch/loongarch/kernel/ptrace.c

311

const void *kbuf, const void __user *ubuf)

arch/loongarch/kernel/ptrace.c

362

const void *kbuf, const void __user *ubuf)

arch/loongarch/kernel/ptrace.c

402

force_sig_ptrace_errno_trap(i, (void __user *)bkpt->address);

arch/loongarch/kernel/ptrace.c

720

const void *kbuf, const void __user *ubuf)

arch/loongarch/kernel/ptrace.c

93

const void *kbuf, const void __user *ubuf)

arch/loongarch/kernel/ptrace.c

959

unsigned long __user *data)

arch/loongarch/kernel/signal.c

103

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

104

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

105

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

117

static int copy_lsx_to_sigcontext(struct lsx_context __user *ctx)

arch/loongarch/kernel/signal.c

121

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

122

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

123

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

137

static int copy_lsx_from_sigcontext(struct lsx_context __user *ctx)

arch/loongarch/kernel/signal.c

142

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

143

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

144

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

158

static int copy_lasx_to_sigcontext(struct lasx_context __user *ctx)

arch/loongarch/kernel/signal.c

162

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

163

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

164

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

182

static int copy_lasx_from_sigcontext(struct lasx_context __user *ctx)

arch/loongarch/kernel/signal.c

187

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

188

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

189

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

208

static int copy_lbt_to_sigcontext(struct lbt_context __user *ctx)

arch/loongarch/kernel/signal.c

211

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

212

uint32_t __user *eflags = (uint32_t *)&ctx->eflags;

arch/loongarch/kernel/signal.c

223

static int copy_lbt_from_sigcontext(struct lbt_context __user *ctx)

arch/loongarch/kernel/signal.c

226

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

227

uint32_t __user *eflags = (uint32_t *)&ctx->eflags;

arch/loongarch/kernel/signal.c

238

static int copy_ftop_to_sigcontext(struct lbt_context __user *ctx)

arch/loongarch/kernel/signal.c

240

uint32_t __user *ftop = &ctx->ftop;

arch/loongarch/kernel/signal.c

245

static int copy_ftop_from_sigcontext(struct lbt_context __user *ctx)

arch/loongarch/kernel/signal.c

247

uint32_t __user *ftop = &ctx->ftop;

arch/loongarch/kernel/signal.c

256

static int save_hw_fpu_context(struct fpu_context __user *ctx)

arch/loongarch/kernel/signal.c

258

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

259

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

260

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

265

static int restore_hw_fpu_context(struct fpu_context __user *ctx)

arch/loongarch/kernel/signal.c

267

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

268

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

269

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

274

static int save_hw_lsx_context(struct lsx_context __user *ctx)

arch/loongarch/kernel/signal.c

276

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

277

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

278

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

283

static int restore_hw_lsx_context(struct lsx_context __user *ctx)

arch/loongarch/kernel/signal.c

285

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

286

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

287

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

292

static int save_hw_lasx_context(struct lasx_context __user *ctx)

arch/loongarch/kernel/signal.c

294

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

295

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

296

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

301

static int restore_hw_lasx_context(struct lasx_context __user *ctx)

arch/loongarch/kernel/signal.c

303

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

304

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

305

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

314

static int save_hw_lbt_context(struct lbt_context __user *ctx)

arch/loongarch/kernel/signal.c

316

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

317

uint32_t __user *eflags = (uint32_t *)&ctx->eflags;

arch/loongarch/kernel/signal.c

322

static int restore_hw_lbt_context(struct lbt_context __user *ctx)

arch/loongarch/kernel/signal.c

324

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

325

uint32_t __user *eflags = (uint32_t *)&ctx->eflags;

arch/loongarch/kernel/signal.c

330

static int save_hw_ftop_context(struct lbt_context __user *ctx)

arch/loongarch/kernel/signal.c

332

uint32_t __user *ftop = &ctx->ftop;

arch/loongarch/kernel/signal.c

337

static int restore_hw_ftop_context(struct lbt_context __user *ctx)

arch/loongarch/kernel/signal.c

339

uint32_t __user *ftop = &ctx->ftop;

arch/loongarch/kernel/signal.c

345

static int fcsr_pending(unsigned int __user *fcsr)

arch/loongarch/kernel/signal.c

370

struct sctx_info __user *info = extctx->fpu.addr;

arch/loongarch/kernel/signal.c

371

struct fpu_context __user *fpu_ctx = (struct fpu_context *)get_ctx_through_ctxinfo(info);

arch/loongarch/kernel/signal.c

372

uint64_t __user *regs = (uint64_t *)&fpu_ctx->regs;

arch/loongarch/kernel/signal.c

373

uint64_t __user *fcc = &fpu_ctx->fcc;

arch/loongarch/kernel/signal.c

374

uint32_t __user *fcsr = &fpu_ctx->fcsr;

arch/loongarch/kernel/signal.c

404

struct sctx_info __user *info = extctx->fpu.addr;

arch/loongarch/kernel/signal.c

405

struct fpu_context __user *fpu_ctx = (struct fpu_context *)get_ctx_through_ctxinfo(info);

arch/loongarch/kernel/signal.c

406

uint64_t __user *regs = (uint64_t *)&fpu_ctx->regs;

arch/loongarch/kernel/signal.c

407

uint64_t __user *fcc = &fpu_ctx->fcc;

arch/loongarch/kernel/signal.c

408

uint32_t __user *fcsr = &fpu_ctx->fcsr;

arch/loongarch/kernel/signal.c

439

struct sctx_info __user *info = extctx->lsx.addr;

arch/loongarch/kernel/signal.c

440

struct lsx_context __user *lsx_ctx = (struct lsx_context *)get_ctx_through_ctxinfo(info);

arch/loongarch/kernel/signal.c

441

uint64_t __user *regs = (uint64_t *)&lsx_ctx->regs;

arch/loongarch/kernel/signal.c

442

uint64_t __user *fcc = &lsx_ctx->fcc;

arch/loongarch/kernel/signal.c

443

uint32_t __user *fcsr = &lsx_ctx->fcsr;

arch/loongarch/kernel/signal.c

476

struct sctx_info __user *info = extctx->lsx.addr;

arch/loongarch/kernel/signal.c

477

struct lsx_context __user *lsx_ctx = (struct lsx_context *)get_ctx_through_ctxinfo(info);

arch/loongarch/kernel/signal.c

478

uint64_t __user *regs = (uint64_t *)&lsx_ctx->regs;

arch/loongarch/kernel/signal.c

479

uint64_t __user *fcc = &lsx_ctx->fcc;

arch/loongarch/kernel/signal.c

480

uint32_t __user *fcsr = &lsx_ctx->fcsr;

arch/loongarch/kernel/signal.c

514

struct sctx_info __user *info = extctx->lasx.addr;

arch/loongarch/kernel/signal.c

515

struct lasx_context __user *lasx_ctx =

arch/loongarch/kernel/signal.c

517

uint64_t __user *regs = (uint64_t *)&lasx_ctx->regs;

arch/loongarch/kernel/signal.c

518

uint64_t __user *fcc = &lasx_ctx->fcc;

arch/loongarch/kernel/signal.c

519

uint32_t __user *fcsr = &lasx_ctx->fcsr;

arch/loongarch/kernel/signal.c

554

struct sctx_info __user *info = extctx->lasx.addr;

arch/loongarch/kernel/signal.c

555

struct lasx_context __user *lasx_ctx =

arch/loongarch/kernel/signal.c

557

uint64_t __user *regs = (uint64_t *)&lasx_ctx->regs;

arch/loongarch/kernel/signal.c

558

uint64_t __user *fcc = &lasx_ctx->fcc;

arch/loongarch/kernel/signal.c

559

uint32_t __user *fcsr = &lasx_ctx->fcsr;

arch/loongarch/kernel/signal.c

596

struct sctx_info __user *info = extctx->lbt.addr;

arch/loongarch/kernel/signal.c

597

struct lbt_context __user *lbt_ctx =

arch/loongarch/kernel/signal.c

599

uint64_t __user *regs = (uint64_t *)&lbt_ctx->regs;

arch/loongarch/kernel/signal.c

600

uint32_t __user *eflags = (uint32_t *)&lbt_ctx->eflags;

arch/loongarch/kernel/signal.c

632

struct sctx_info __user *info = extctx->lbt.addr;

arch/loongarch/kernel/signal.c

633

struct lbt_context __user *lbt_ctx =

arch/loongarch/kernel/signal.c

635

uint64_t __user *regs = (uint64_t *)&lbt_ctx->regs;

arch/loongarch/kernel/signal.c

636

uint32_t __user *eflags = (uint32_t *)&lbt_ctx->eflags;

arch/loongarch/kernel/signal.c

663

static int setup_sigcontext(struct pt_regs *regs, struct sigcontext __user *sc,

arch/loongarch/kernel/signal.c

667

struct sctx_info __user *info;

arch/loongarch/kernel/signal.c

696

static int parse_extcontext(struct sigcontext __user *sc, struct extctx_layout *extctx)

arch/loongarch/kernel/signal.c

70

static void __user *get_ctx_through_ctxinfo(struct sctx_info *info)

arch/loongarch/kernel/signal.c

700

struct sctx_info __user *info = (struct sctx_info __user *)&sc->sc_extcontext;

arch/loongarch/kernel/signal.c

72

return (void __user *)((char *)info + sizeof(struct sctx_info));

arch/loongarch/kernel/signal.c

754

static int restore_sigcontext(struct pt_regs *regs, struct sigcontext __user *sc)

arch/loongarch/kernel/signal.c

79

static int copy_fpu_to_sigcontext(struct fpu_context __user *ctx)

arch/loongarch/kernel/signal.c

83

uint64_t __user *regs = (uint64_t *)&ctx->regs;

arch/loongarch/kernel/signal.c

84

uint64_t __user *fcc = &ctx->fcc;

arch/loongarch/kernel/signal.c

85

uint32_t __user *fcsr = &ctx->fcsr;

arch/loongarch/kernel/signal.c

871

static void __user *get_sigframe(struct ksignal *ksig, struct pt_regs *regs,

arch/loongarch/kernel/signal.c

885

return (void __user __force *)(-1UL);

arch/loongarch/kernel/signal.c

895

return (void __user *)sp;

arch/loongarch/kernel/signal.c

907

struct rt_sigframe __user *frame;

arch/loongarch/kernel/signal.c

910

frame = (struct rt_sigframe __user *)regs->regs[3];

arch/loongarch/kernel/signal.c

940

struct rt_sigframe __user *frame;

arch/loongarch/kernel/signal.c

98

static int copy_fpu_from_sigcontext(struct fpu_context __user *ctx)

arch/loongarch/kernel/stacktrace.c

89

unsigned long __user *user_frame_tail;

arch/loongarch/kernel/traps.c

463

void __user *fault_addr, struct task_struct *tsk)

arch/loongarch/kernel/traps.c

481

static int process_fpemu_return(int sig, void __user *fault_addr, unsigned long fcsr)

arch/loongarch/kernel/traps.c

519

void __user *fault_addr;

arch/loongarch/kernel/traps.c

533

fault_addr = (void __user *) regs->csr_era;

arch/loongarch/kernel/traps.c

552

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *)regs->csr_badvaddr);

arch/loongarch/kernel/traps.c

568

force_sig_fault(SIGBUS, BUS_ADRALN, (void __user *)regs->csr_badvaddr);

arch/loongarch/kernel/traps.c

592

emulate_load_store_insn(regs, (void __user *)regs->csr_badvaddr, pc);

arch/loongarch/kernel/traps.c

598

force_sig_fault(SIGBUS, BUS_ADRALN, (void __user *)regs->csr_badvaddr);

arch/loongarch/kernel/traps.c

708

force_sig_bnderr((void __user *)badv, (void __user *)lower, (void __user *)upper);

arch/loongarch/kernel/traps.c

787

force_sig_fault(SIGFPE, FPE_INTDIV, (void __user *)regs->csr_era);

arch/loongarch/kernel/traps.c

791

force_sig_fault(SIGFPE, FPE_INTOVF, (void __user *)regs->csr_era);

arch/loongarch/kernel/traps.c

795

force_sig_fault(SIGTRAP, TRAP_BRKPT, (void __user *)regs->csr_era);

arch/loongarch/kernel/traps.c

868

unsigned int __user *era = (unsigned int __user *)exception_era(regs);

arch/loongarch/kernel/unaligned.c

267

void emulate_load_store_insn(struct pt_regs *regs, void __user *addr, unsigned int *pc)

arch/loongarch/kvm/intc/dmsintc.c

89

void __user *data = (void __user *)attr->addr;

arch/loongarch/kvm/intc/eiointc.c

416

void __user *data;

arch/loongarch/kvm/intc/eiointc.c

419

data = (void __user *)attr->addr;

arch/loongarch/kvm/intc/eiointc.c

573

if (copy_to_user((void __user *)attr->addr, &data, 4))

arch/loongarch/kvm/intc/eiointc.c

582

if (copy_to_user((void __user *)attr->addr, &data, 4))

arch/loongarch/kvm/intc/eiointc.c

600

if (copy_from_user(&data, (void __user *)attr->addr, 4))

arch/loongarch/kvm/intc/eiointc.c

605

if (copy_from_user(&data, (void __user *)attr->addr, 4))

arch/loongarch/kvm/intc/ipi.c

349

if (get_user(val, (uint32_t __user *)attr->addr))

arch/loongarch/kvm/intc/ipi.c

353

if (get_user(val, (uint64_t __user *)attr->addr))

arch/loongarch/kvm/intc/ipi.c

360

return put_user(val, (uint32_t __user *)attr->addr);

arch/loongarch/kvm/intc/ipi.c

363

return put_user(val, (uint64_t __user *)attr->addr);

arch/loongarch/kvm/intc/pch_pic.c

300

void __user *data;

arch/loongarch/kvm/intc/pch_pic.c

306

data = (void __user *)attr->addr;

arch/loongarch/kvm/intc/pch_pic.c

383

void __user *uaddr = (void __user *)(long)attr->addr;

arch/loongarch/kvm/vcpu.c

1094

uint64_t __user *uaddr = (uint64_t __user *)attr->addr;

arch/loongarch/kvm/vcpu.c

1119

u64 __user *user = (u64 __user *)attr->addr;

arch/loongarch/kvm/vcpu.c

1155

u64 __user *user = (u64 __user *)attr->addr;

arch/loongarch/kvm/vcpu.c

1182

u64 gpa, __user *user = (u64 __user *)attr->addr;

arch/loongarch/kvm/vcpu.c

1239

void __user *argp = (void __user *)arg;

arch/loongarch/kvm/vcpu.c

1488

void __user *argp = (void __user *)arg;

arch/loongarch/kvm/vcpu.c

158

struct kvm_steal_time __user *st;

arch/loongarch/kvm/vcpu.c

175

st = (struct kvm_steal_time __user *)ghc->hva;

arch/loongarch/kvm/vcpu.c

1794

struct kvm_steal_time __user *st;

arch/loongarch/kvm/vcpu.c

1818

st = (struct kvm_steal_time __user *)ghc->hva;

arch/loongarch/kvm/vcpu.c

890

ret = put_user(v, (u64 __user *)(long)reg->addr);

arch/loongarch/kvm/vcpu.c

991

ret = get_user(v, (u64 __user *)(long)reg->addr);

arch/loongarch/kvm/vm.c

181

void __user *argp = (void __user *)arg;

arch/loongarch/mm/fault.c

129

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *)address);

arch/loongarch/mm/fault.c

167

force_sig_fault(SIGSEGV, si_code, (void __user *)address);

arch/m68k/bvme6000/rtc.c

45

void __user *argp = (void __user *)arg;

arch/m68k/include/asm/checksum.h

35

extern __wsum csum_and_copy_from_user(const void __user *src,

arch/m68k/include/asm/dsp56k.h

16

char __user *bin;

arch/m68k/include/asm/fbio.h

107

char __user *image; /* cursor image bits */

arch/m68k/include/asm/fbio.h

108

char __user *mask; /* cursor mask bits */

arch/m68k/include/asm/fbio.h

63

unsigned char __user *red;

arch/m68k/include/asm/fbio.h

64

unsigned char __user *green;

arch/m68k/include/asm/fbio.h

65

unsigned char __user *blue;

arch/m68k/include/asm/syscalls.h

11

int d4, int d5, unsigned long __user *mem);

arch/m68k/include/asm/uaccess.h

182

unsigned long __generic_copy_from_user(void *to, const void __user *from, unsigned long n);

arch/m68k/include/asm/uaccess.h

183

unsigned long __generic_copy_to_user(void __user *to, const void *from, unsigned long n);

arch/m68k/include/asm/uaccess.h

235

__constant_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/m68k/include/asm/uaccess.h

316

__constant_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/m68k/include/asm/uaccess.h

322

__put_user_asm(MOVES, res, *(u8 *)from, (u8 __user *)to,

arch/m68k/include/asm/uaccess.h

326

__put_user_asm(MOVES, res, *(u16 *)from, (u16 __user *)to,

arch/m68k/include/asm/uaccess.h

333

__put_user_asm(MOVES, res, *(u32 *)from, (u32 __user *)to,

arch/m68k/include/asm/uaccess.h

366

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/m68k/include/asm/uaccess.h

374

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/m68k/include/asm/uaccess.h

440

extern long strncpy_from_user(char *dst, const char __user *src, long count);

arch/m68k/include/asm/uaccess.h

441

extern __must_check long strnlen_user(const char __user *str, long n);

arch/m68k/include/asm/uaccess.h

443

unsigned long __clear_user(void __user *to, unsigned long n);

arch/m68k/include/uapi/asm/signal.h

84

void __user *ss_sp;

arch/m68k/kernel/bootinfo_proc.c

22

static ssize_t bootinfo_read(struct file *file, char __user *buf,

arch/m68k/kernel/process.c

121

.pidfd = (int __user *)regs->d3,

arch/m68k/kernel/process.c

122

.child_tid = (int __user *)regs->d4,

arch/m68k/kernel/process.c

123

.parent_tid = (int __user *)regs->d3,

arch/m68k/kernel/process.c

139

return sys_clone3((struct clone_args __user *)regs->d1, regs->d2);

arch/m68k/kernel/ptrace.c

170

unsigned long __user *datap = (unsigned long __user *) data;

arch/m68k/kernel/signal.c

228

char __user *pretcode;

arch/m68k/kernel/signal.c

231

struct sigcontext __user *psc;

arch/m68k/kernel/signal.c

239

char __user *pretcode;

arch/m68k/kernel/signal.c

241

struct siginfo __user *pinfo;

arch/m68k/kernel/signal.c

242

void __user *puc;

arch/m68k/kernel/signal.c

333

static inline int rt_restore_fpu_state(struct ucontext __user *uc)

arch/m68k/kernel/signal.c

352

if (__get_user(*(long *)fpstate, (long __user *)&uc->uc_fpstate))

arch/m68k/kernel/signal.c

410

__copy_from_user(fpstate + 4, (long __user *)&uc->uc_fpstate + 1,

arch/m68k/kernel/signal.c

484

static inline int rt_save_fpu_state(struct ucontext __user *uc, struct pt_regs *regs)

arch/m68k/kernel/signal.c

509

err |= __put_user(*(long *)fpstate, (long __user *)&uc->uc_fpstate);

arch/m68k/kernel/signal.c

547

err |= copy_to_user((long __user *)&uc->uc_fpstate + 1, fpstate + 4,

arch/m68k/kernel/signal.c

562

static inline int rt_restore_fpu_state(struct ucontext __user *uc)

arch/m68k/kernel/signal.c

571

static inline int rt_save_fpu_state(struct ucontext __user *uc, struct pt_regs *regs)

arch/m68k/kernel/signal.c

645

void __user *fp)

arch/m68k/kernel/signal.c

679

restore_sigcontext(struct pt_regs *regs, struct sigcontext __user *usc, void __user *fp)

arch/m68k/kernel/signal.c

712

struct ucontext __user *uc)

arch/m68k/kernel/signal.c

715

greg_t __user *gregs = uc->uc_mcontext.gregs;

arch/m68k/kernel/signal.c

761

struct sigframe __user *frame = (struct sigframe __user *)(usp - 4);

arch/m68k/kernel/signal.c

788

struct rt_sigframe __user *frame = (struct rt_sigframe __user *)(usp - 4);

arch/m68k/kernel/signal.c

831

static inline int rt_setup_ucontext(struct ucontext __user *uc, struct pt_regs *regs)

arch/m68k/kernel/signal.c

835

greg_t __user *gregs = uc->uc_mcontext.gregs;

arch/m68k/kernel/signal.c

862

static inline void __user *

arch/m68k/kernel/signal.c

873

return (void __user *)((usp - gap - frame_size) & -8UL);

arch/m68k/kernel/signal.c

879

struct sigframe __user *frame;

arch/m68k/kernel/signal.c

913

(long __user *)(frame->retcode));

arch/m68k/kernel/signal.c

916

(long __user *) &frame->pretcode);

arch/m68k/kernel/signal.c

952

struct rt_sigframe __user *frame;

arch/m68k/kernel/signal.c

985

err |= __put_user(0x203c0000, (long __user *)(frame->retcode + 0));

arch/m68k/kernel/signal.c

987

(long __user *)(frame->retcode + 4));

arch/m68k/kernel/signal.c

991

(long __user *)(frame->retcode + 0));

arch/m68k/kernel/signal.c

992

err |= __put_user(0x4e40, (short __user *)(frame->retcode + 4));

arch/m68k/kernel/signal.c

996

(long __user *) &frame->pretcode);

arch/m68k/kernel/sys_m68k.c

464

unsigned long __user * mem)

arch/m68k/kernel/sys_m68k.c

547

unsigned long __user * mem)

arch/m68k/kernel/time.c

110

struct rtc_pll_info __user *argp = (void __user *)arg;

arch/m68k/kernel/traps.c

1005

void __user *addr;

arch/m68k/kernel/traps.c

1106

addr = (void __user *) fp->ptregs.pc;

arch/m68k/kernel/traps.c

1109

addr = (void __user *) fp->un.fmt2.iaddr;

arch/m68k/kernel/traps.c

1112

addr = (void __user *) fp->un.fmt7.effaddr;

arch/m68k/kernel/traps.c

1115

addr = (void __user *) fp->un.fmt9.iaddr;

arch/m68k/kernel/traps.c

1118

addr = (void __user *) fp->un.fmta.daddr;

arch/m68k/kernel/traps.c

1121

addr = (void __user*) fp->un.fmtb.daddr;

arch/m68k/kernel/traps.c

209

res = put_user(wbd & 0xff, (char __user *)wba);

arch/m68k/kernel/traps.c

212

res = put_user(wbd & 0xffff, (short __user *)wba);

arch/m68k/kernel/traps.c

215

res = put_user(wbd, (int __user *)wba);

arch/m68k/lib/checksum.c

132

csum_and_copy_from_user(const void __user *src, void *dst, int len)

arch/m68k/lib/uaccess.c

10

unsigned long __generic_copy_from_user(void *to, const void __user *from,

arch/m68k/lib/uaccess.c

104

unsigned long __clear_user(void __user *to, unsigned long n)

arch/m68k/lib/uaccess.c

56

unsigned long __generic_copy_to_user(void __user *to, const void *from,

arch/m68k/mm/fault.c

27

void __user *addr;

arch/m68k/mm/fault.c

31

addr = (void __user *)current->thread.faddr;

arch/microblaze/include/asm/flat.h

27

static inline int flat_get_addr_from_rp(u32 __user *rp, u32 relval, u32 flags,

arch/microblaze/include/asm/flat.h

56

flat_put_addr_at_rp(u32 __user *rp, u32 addr, u32 relval)

arch/microblaze/include/asm/futex.h

33

arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *uaddr)

arch/microblaze/include/asm/futex.h

67

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/microblaze/include/asm/uaccess.h

189

typeof(*(ptr)) __user *__pu_addr = (ptr); \

arch/microblaze/include/asm/uaccess.h

23

extern unsigned long __copy_tofrom_user(void __user *to,

arch/microblaze/include/asm/uaccess.h

24

const void __user *from, unsigned long size);

arch/microblaze/include/asm/uaccess.h

243

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/microblaze/include/asm/uaccess.h

245

return __copy_tofrom_user((__force void __user *)to, from, n);

arch/microblaze/include/asm/uaccess.h

249

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/microblaze/include/asm/uaccess.h

251

return __copy_tofrom_user(to, (__force const void __user *)from, n);

arch/microblaze/include/asm/uaccess.h

258

__must_check long strncpy_from_user(char *dst, const char __user *src,

arch/microblaze/include/asm/uaccess.h

266

__must_check long strnlen_user(const char __user *sstr, long len);

arch/microblaze/include/asm/uaccess.h

27

static inline unsigned long __must_check __clear_user(void __user *to,

arch/microblaze/include/asm/uaccess.h

46

static inline unsigned long __must_check clear_user(void __user *to,

arch/microblaze/include/asm/uaccess.h

96

const typeof(*(ptr)) __user *__gu_ptr = (ptr); \

arch/microblaze/kernel/exceptions.c

66

force_sig_fault(signr, code, (void __user *)addr);

arch/microblaze/kernel/ptrace.c

127

rval = put_user(val, (unsigned long __user *)data);

arch/microblaze/kernel/signal.c

118

setup_sigcontext(struct sigcontext __user *sc, struct pt_regs *regs,

arch/microblaze/kernel/signal.c

145

static inline void __user *

arch/microblaze/kernel/signal.c

151

return (void __user *)((sp - frame_size) & -8UL);

arch/microblaze/kernel/signal.c

157

struct rt_sigframe __user *frame;

arch/microblaze/kernel/signal.c

58

struct sigcontext __user *sc, int *rval_p)

arch/microblaze/kernel/signal.c

83

struct rt_sigframe __user *frame =

arch/microblaze/kernel/signal.c

84

(struct rt_sigframe __user *)(regs->r1);

arch/microblaze/mm/fault.c

295

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *)address);

arch/microblaze/mm/fault.c

50

if (get_user(inst, (unsigned int __user *)regs->pc))

arch/mips/dec/kn01-berr.c

75

unsigned int __user *pc = (unsigned int __user *)regs->cp0_epc +

arch/mips/include/asm/checksum.h

37

__wsum __csum_partial_copy_from_user(const void __user *src, void *dst, int len);

arch/mips/include/asm/checksum.h

38

__wsum __csum_partial_copy_to_user(const void *src, void __user *dst, int len);

arch/mips/include/asm/checksum.h

42

__wsum csum_and_copy_from_user(const void __user *src, void *dst, int len)

arch/mips/include/asm/checksum.h

55

__wsum csum_and_copy_to_user(const void *src, void __user *dst, int len)

arch/mips/include/asm/compat-signal.h

14

static inline int __copy_conv_sigset_to_user(compat_sigset_t __user *d,

arch/mips/include/asm/compat-signal.h

24

const compat_sigset_t __user *s)

arch/mips/include/asm/fpu_emulator.h

170

void __user **fault_addr);

arch/mips/include/asm/fpu_emulator.h

171

void force_fcr31_sig(unsigned long fcr31, void __user *fault_addr,

arch/mips/include/asm/fpu_emulator.h

173

int process_fpemu_return(int sig, void __user *fault_addr,

arch/mips/include/asm/futex.h

132

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/mips/include/asm/futex.h

93

arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *uaddr)

arch/mips/include/asm/kvm_host.h

750

int (*copy_reg_indices)(struct kvm_vcpu *vcpu, u64 __user *indices);

arch/mips/include/asm/mips-r2-to-r6-emul.h

53

err = __get_user(nir, (u32 __user *)regs->cp0_epc); \

arch/mips/include/asm/ptrace.h

128

struct user_pt_regs __user *data);

arch/mips/include/asm/ptrace.h

130

struct user_pt_regs __user *data);

arch/mips/include/asm/ptrace.h

132

extern int ptrace_getfpregs(struct task_struct *child, __u32 __user *data);

arch/mips/include/asm/ptrace.h

133

extern int ptrace_setfpregs(struct task_struct *child, __u32 __user *data);

arch/mips/include/asm/ptrace.h

136

struct pt_watch_regs __user *addr);

arch/mips/include/asm/ptrace.h

138

struct pt_watch_regs __user *addr);

arch/mips/include/asm/rtlx.h

35

ssize_t rtlx_read(int index, void __user *buff, size_t count);

arch/mips/include/asm/rtlx.h

36

ssize_t rtlx_write(int index, const void __user *buffer, size_t count);

arch/mips/include/asm/signal.h

32

extern int protected_save_fp_context(void __user *sc);

arch/mips/include/asm/signal.h

33

extern int protected_restore_fp_context(void __user *sc);

arch/mips/include/asm/switch_to.h

91

void __user *pc; \

arch/mips/include/asm/switch_to.h

94

pc = (void __user *)task_pt_regs(next)->cp0_epc; \

arch/mips/include/asm/syscalls.h

12

unsigned long __user *user_mask_ptr);

arch/mips/include/asm/syscalls.h

14

unsigned long __user *user_mask_ptr);

arch/mips/include/asm/syscalls.h

30

asmlinkage int sys32_sigsuspend(compat_sigset_t __user *uset);

arch/mips/include/asm/uaccess.h

123

__typeof__(*(ptr)) __user *__pu_ptr = (ptr); \

arch/mips/include/asm/uaccess.h

171

const __typeof__(*(ptr)) __user *__gu_ptr = (ptr); \

arch/mips/include/asm/uaccess.h

196

#define __m(x) (*(struct __large_struct __user *)(x))

arch/mips/include/asm/uaccess.h

390

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/mips/include/asm/uaccess.h

393

register const void __user *__cu_from_r __asm__("$5");

arch/mips/include/asm/uaccess.h

416

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/mips/include/asm/uaccess.h

418

register void __user *__cu_to_r __asm__("$4");

arch/mips/include/asm/uaccess.h

438

extern __kernel_size_t __bzero(void __user *addr, __kernel_size_t size);

arch/mips/include/asm/uaccess.h

452

__clear_user(void __user *addr, __kernel_size_t size)

arch/mips/include/asm/uaccess.h

479

void __user * __cl_addr = (addr); \

arch/mips/include/asm/uaccess.h

486

extern long __strncpy_from_user_asm(char *__to, const char __user *__from, long __len);

arch/mips/include/asm/uaccess.h

507

strncpy_from_user(char *__to, const char __user *__from, long __len)

arch/mips/include/asm/uaccess.h

528

extern long __strnlen_user_asm(const char __user *s, long n);

arch/mips/include/asm/uaccess.h

543

static inline long strnlen_user(const char __user *s, long n)

arch/mips/include/asm/uaccess.h

68

__typeof__(*(ptr)) __user *__p = (ptr); \

arch/mips/include/asm/uaccess.h

94

const __typeof__(*(ptr)) __user *__p = (ptr); \

arch/mips/include/uapi/asm/signal.h

102

void __user *ss_sp;

arch/mips/kernel/access-helper.h

13

return user ? get_user(*i, (u16 __user *)p) : get_kernel_nofault(*i, p);

arch/mips/kernel/access-helper.h

18

return user ? get_user(*i, (u32 __user *)p) : get_kernel_nofault(*i, p);

arch/mips/kernel/access-helper.h

7

return user ? get_user(*a, (unsigned long __user *)p) :

arch/mips/kernel/branch.c

264

u16 __user *pc16;

arch/mips/kernel/branch.c

273

pc16 = (unsigned short __user *)msk_isa16_mode(regs->cp0_epc);

arch/mips/kernel/branch.c

322

u16 __user *addr;

arch/mips/kernel/branch.c

331

addr = (u16 __user *)msk_isa16_mode(epc);

arch/mips/kernel/branch.c

35

if (__get_user(inst, (u16 __user *) msk_isa16_mode(epc))) {

arch/mips/kernel/branch.c

851

unsigned int __user *addr;

arch/mips/kernel/branch.c

862

addr = (unsigned int __user *) epc;

arch/mips/kernel/linux32.c

54

SYSCALL_DEFINE4(32_truncate64, const char __user *, path,

arch/mips/kernel/linux32.c

67

unsigned int, offset_low, loff_t __user *, result,

arch/mips/kernel/linux32.c

77

SYSCALL_DEFINE6(32_pread, unsigned long, fd, char __user *, buf, size_t, count,

arch/mips/kernel/linux32.c

83

SYSCALL_DEFINE6(32_pwrite, unsigned int, fd, const char __user *, buf,

arch/mips/kernel/mips-mt-fpaff.c

161

unsigned long __user *user_mask_ptr)

arch/mips/kernel/mips-mt-fpaff.c

67

unsigned long __user *user_mask_ptr)

arch/mips/kernel/mips-r2-to-r6-emul.c

1002

err = __get_user(nir, (u32 __user *)nepc);

arch/mips/kernel/mips-r2-to-r6-emul.c

1057

err = __get_user(nir, (u32 __user *)nepc);

arch/mips/kernel/mips-r2-to-r6-emul.c

1128

err = __get_user(nir, (u32 __user *)nepc);

arch/mips/kernel/mips-r2-to-r6-emul.c

1208

if (!access_ok((void __user *)vaddr, 4)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

1281

if (!access_ok((void __user *)vaddr, 4)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

1355

if (!access_ok((void __user *)vaddr, 4)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

1425

if (!access_ok((void __user *)vaddr, 4)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

1500

if (!access_ok((void __user *)vaddr, 8)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

1619

if (!access_ok((void __user *)vaddr, 8)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

1738

if (!access_ok((void __user *)vaddr, 8)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

1856

if (!access_ok((void __user *)vaddr, 8)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

1973

if (!access_ok((void __user *)vaddr, 4)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

2029

if (!access_ok((void __user *)vaddr, 4)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

2092

if (!access_ok((void __user *)vaddr, 8)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

2153

if (!access_ok((void __user *)vaddr, 8)) {

arch/mips/kernel/mips-r2-to-r6-emul.c

2216

err = get_user(inst, (u32 __user *)regs->cp0_epc);

arch/mips/kernel/mips-r2-to-r6-emul.c

271

err = __get_user(nir, (u32 __user *)nepc);

arch/mips/kernel/mips-r2-to-r6-emul.c

913

void __user *fault_addr = NULL;

arch/mips/kernel/ptrace.c

101

int ptrace_setregs(struct task_struct *child, struct user_pt_regs __user *data)

arch/mips/kernel/ptrace.c

1088

void __user *addrp = (void __user *) addr;

arch/mips/kernel/ptrace.c

1089

void __user *datavp = (void __user *) data;

arch/mips/kernel/ptrace.c

1090

unsigned long __user *datalp = (void __user *) data;

arch/mips/kernel/ptrace.c

112

__get_user(regs->regs[i], (__s64 __user *)&data->regs[i]);

arch/mips/kernel/ptrace.c

113

__get_user(regs->lo, (__s64 __user *)&data->lo);

arch/mips/kernel/ptrace.c

114

__get_user(regs->hi, (__s64 __user *)&data->hi);

arch/mips/kernel/ptrace.c

115

__get_user(regs->cp0_epc, (__s64 __user *)&data->cp0_epc);

arch/mips/kernel/ptrace.c

126

struct pt_watch_regs __user *addr)

arch/mips/kernel/ptrace.c

166

struct pt_watch_regs __user *addr)

arch/mips/kernel/ptrace.c

231

const void *kbuf, const void __user *ubuf)

arch/mips/kernel/ptrace.c

296

const void *kbuf, const void __user *ubuf)

arch/mips/kernel/ptrace.c

359

int ptrace_getfpregs(struct task_struct *child, __u32 __user *data)

arch/mips/kernel/ptrace.c

370

i + (__u64 __user *)data);

arch/mips/kernel/ptrace.c

373

__put_user((__u64) -1, i + (__u64 __user *) data);

arch/mips/kernel/ptrace.c

382

int ptrace_setfpregs(struct task_struct *child, __u32 __user *data)

arch/mips/kernel/ptrace.c

396

__get_user(fpr_val, i + (__u64 __user *)data);

arch/mips/kernel/ptrace.c

461

const void **kbuf, const void __user **ubuf)

arch/mips/kernel/ptrace.c

476

const void **kbuf, const void __user **ubuf)

arch/mips/kernel/ptrace.c

510

const void *kbuf, const void __user *ubuf)

arch/mips/kernel/ptrace.c

570

const void *kbuf, const void __user *ubuf)

arch/mips/kernel/ptrace.c

655

const void *kbuf, const void __user *ubuf)

arch/mips/kernel/ptrace.c

724

const void *kbuf, const void __user *ubuf)

arch/mips/kernel/ptrace.c

74

int ptrace_getregs(struct task_struct *child, struct user_pt_regs __user *data)

arch/mips/kernel/ptrace.c

790

const void *kbuf, const void __user *ubuf)

arch/mips/kernel/ptrace.c

85

__put_user((long)regs->regs[i], (__s64 __user *)&data->regs[i]);

arch/mips/kernel/ptrace.c

86

__put_user((long)regs->lo, (__s64 __user *)&data->lo);

arch/mips/kernel/ptrace.c

87

__put_user((long)regs->hi, (__s64 __user *)&data->hi);

arch/mips/kernel/ptrace.c

88

__put_user((long)regs->cp0_epc, (__s64 __user *)&data->cp0_epc);

arch/mips/kernel/ptrace.c

89

__put_user((long)regs->cp0_badvaddr, (__s64 __user *)&data->cp0_badvaddr);

arch/mips/kernel/ptrace.c

90

__put_user((long)regs->cp0_status, (__s64 __user *)&data->cp0_status);

arch/mips/kernel/ptrace.c

91

__put_user((long)regs->cp0_cause, (__s64 __user *)&data->cp0_cause);

arch/mips/kernel/ptrace32.c

164

ret = put_user(tmp, (unsigned __user *) (unsigned long) data);

arch/mips/kernel/ptrace32.c

179

u32 __user * addrOthers;

arch/mips/kernel/ptrace32.c

183

if (get_user(addrOthers, (u32 __user * __user *) (unsigned long) addr) != 0)

arch/mips/kernel/ptrace32.c

274

(struct user_pt_regs __user *) (__u64) data);

arch/mips/kernel/ptrace32.c

279

(struct user_pt_regs __user *) (__u64) data);

arch/mips/kernel/ptrace32.c

284

ret = ptrace_getfpregs(child, (__u32 __user *) (__u64) data);

arch/mips/kernel/ptrace32.c

288

ret = ptrace_setfpregs(child, (__u32 __user *) (__u64) data);

arch/mips/kernel/ptrace32.c

293

(unsigned int __user *) (unsigned long) data);

arch/mips/kernel/ptrace32.c

298

(unsigned long __user *) (unsigned long) data);

arch/mips/kernel/ptrace32.c

303

(struct pt_watch_regs __user *) (unsigned long) addr);

arch/mips/kernel/ptrace32.c

308

(struct pt_watch_regs __user *) (unsigned long) addr);

arch/mips/kernel/ptrace32.c

65

u32 __user * addrOthers;

arch/mips/kernel/ptrace32.c

70

if (get_user(addrOthers, (u32 __user * __user *) (unsigned long) addr) != 0)

arch/mips/kernel/ptrace32.c

77

ret = put_user(tmp, (u32 __user *) (unsigned long) data);

arch/mips/kernel/rtlx.c

242

ssize_t rtlx_read(int index, void __user *buff, size_t count)

arch/mips/kernel/rtlx.c

284

ssize_t rtlx_write(int index, const void __user *buffer, size_t count)

arch/mips/kernel/rtlx.c

361

static ssize_t file_read(struct file *file, char __user *buffer, size_t count,

arch/mips/kernel/rtlx.c

373

static ssize_t file_write(struct file *file, const char __user *buffer,

arch/mips/kernel/signal-common.h

25

extern void __user *get_sigframe(struct ksignal *ksig, struct pt_regs *regs,

arch/mips/kernel/signal-common.h

28

extern int fpcsr_pending(unsigned int __user *fpcsr);

arch/mips/kernel/signal-common.h

36

_save_fp_context(void __user *fpregs, void __user *csr);

arch/mips/kernel/signal-common.h

38

_restore_fp_context(void __user *fpregs, void __user *csr);

arch/mips/kernel/signal-common.h

40

extern asmlinkage int _save_msa_all_upper(void __user *buf);

arch/mips/kernel/signal-common.h

41

extern asmlinkage int _restore_msa_all_upper(void __user *buf);

arch/mips/kernel/signal-common.h

43

extern int setup_sigcontext(struct pt_regs *, struct sigcontext __user *);

arch/mips/kernel/signal-common.h

44

extern int restore_sigcontext(struct pt_regs *, struct sigcontext __user *);

arch/mips/kernel/signal.c

111

static int copy_fp_to_sigcontext(void __user *sc)

arch/mips/kernel/signal.c

116

static int copy_fp_from_sigcontext(void __user *sc)

arch/mips/kernel/signal.c

126

static int save_hw_fp_context(void __user *sc)

arch/mips/kernel/signal.c

129

uint64_t __user *fpregs = sc + abi->off_sc_fpregs;

arch/mips/kernel/signal.c

130

uint32_t __user *csr = sc + abi->off_sc_fpc_csr;

arch/mips/kernel/signal.c

135

static int restore_hw_fp_context(void __user *sc)

arch/mips/kernel/signal.c

138

uint64_t __user *fpregs = sc + abi->off_sc_fpregs;

arch/mips/kernel/signal.c

139

uint32_t __user *csr = sc + abi->off_sc_fpc_csr;

arch/mips/kernel/signal.c

148

static inline void __user *sc_to_extcontext(void __user *sc)

arch/mips/kernel/signal.c

150

struct ucontext __user *uc;

arch/mips/kernel/signal.c

163

static int save_msa_extcontext(void __user *buf)

arch/mips/kernel/signal.c

165

struct msa_extcontext __user *msa = buf;

arch/mips/kernel/signal.c

209

static int restore_msa_extcontext(void __user *buf, unsigned int size)

arch/mips/kernel/signal.c

211

struct msa_extcontext __user *msa = buf;

arch/mips/kernel/signal.c

254

static int save_msa_extcontext(void __user *buf)

arch/mips/kernel/signal.c

259

static int restore_msa_extcontext(void __user *buf, unsigned int size)

arch/mips/kernel/signal.c

266

static int save_extcontext(void __user *buf)

arch/mips/kernel/signal.c

287

static int restore_extcontext(void __user *buf)

arch/mips/kernel/signal.c

325

int protected_save_fp_context(void __user *sc)

arch/mips/kernel/signal.c

328

uint64_t __user *fpregs = sc + abi->off_sc_fpregs;

arch/mips/kernel/signal.c

329

uint32_t __user *csr = sc + abi->off_sc_fpc_csr;

arch/mips/kernel/signal.c

330

uint32_t __user *used_math = sc + abi->off_sc_used_math;

arch/mips/kernel/signal.c

378

int protected_restore_fp_context(void __user *sc)

arch/mips/kernel/signal.c

381

uint64_t __user *fpregs = sc + abi->off_sc_fpregs;

arch/mips/kernel/signal.c

382

uint32_t __user *csr = sc + abi->off_sc_fpc_csr;

arch/mips/kernel/signal.c

383

uint32_t __user *used_math = sc + abi->off_sc_used_math;

arch/mips/kernel/signal.c

439

int setup_sigcontext(struct pt_regs *regs, struct sigcontext __user *sc)

arch/mips/kernel/signal.c

45

static int (*save_fp_context)(void __user *sc);

arch/mips/kernel/signal.c

46

static int (*restore_fp_context)(void __user *sc);

arch/mips/kernel/signal.c

497

int fpcsr_pending(unsigned int __user *fpcsr)

arch/mips/kernel/signal.c

516

int restore_sigcontext(struct pt_regs *regs, struct sigcontext __user *sc)

arch/mips/kernel/signal.c

554

void __user *get_sigframe(struct ksignal *ksig, struct pt_regs *regs,

arch/mips/kernel/signal.c

570

return (void __user __force *)(-1UL);

arch/mips/kernel/signal.c

581

return (void __user *)((sp - frame_size) & SIGMASK);

arch/mips/kernel/signal.c

589

SYSCALL_DEFINE1(sigsuspend, sigset_t __user *, uset)

arch/mips/kernel/signal.c

596

SYSCALL_DEFINE3(sigaction, int, sig, const struct sigaction __user *, act,

arch/mips/kernel/signal.c

597

struct sigaction __user *, oact)

arch/mips/kernel/signal.c

639

struct sigframe __user *frame;

arch/mips/kernel/signal.c

645

frame = (struct sigframe __user *)regs->regs[29];

arch/mips/kernel/signal.c

676

struct rt_sigframe __user *frame;

arch/mips/kernel/signal.c

682

frame = (struct rt_sigframe __user *)regs->regs[29];

arch/mips/kernel/signal.c

71

static int copy_fp_to_sigcontext(void __user *sc)

arch/mips/kernel/signal.c

717

struct sigframe __user *frame;

arch/mips/kernel/signal.c

74

uint64_t __user *fpregs = sc + abi->off_sc_fpregs;

arch/mips/kernel/signal.c

75

uint32_t __user *csr = sc + abi->off_sc_fpc_csr;

arch/mips/kernel/signal.c

756

struct rt_sigframe __user *frame;

arch/mips/kernel/signal.c

90

static int copy_fp_from_sigcontext(void __user *sc)

arch/mips/kernel/signal.c

925

static int smp_save_fp_context(void __user *sc)

arch/mips/kernel/signal.c

93

uint64_t __user *fpregs = sc + abi->off_sc_fpregs;

arch/mips/kernel/signal.c

932

static int smp_restore_fp_context(void __user *sc)

arch/mips/kernel/signal.c

94

uint32_t __user *csr = sc + abi->off_sc_fpc_csr;

arch/mips/kernel/signal32.c

34

asmlinkage int sys32_sigsuspend(compat_sigset_t __user *uset)

arch/mips/kernel/signal32.c

39

SYSCALL_DEFINE3(32_sigaction, long, sig, const struct compat_sigaction __user *, act,

arch/mips/kernel/signal32.c

40

struct compat_sigaction __user *, oact)

arch/mips/kernel/signal32.c

53

new_ka.sa.sa_handler = (void __user *)(s64)handler;

arch/mips/kernel/signal_n32.c

53

struct rt_sigframe_n32 __user *frame;

arch/mips/kernel/signal_n32.c

59

frame = (struct rt_sigframe_n32 __user *)regs->regs[29];

arch/mips/kernel/signal_n32.c

93

struct rt_sigframe_n32 __user *frame;

arch/mips/kernel/signal_o32.c

118

struct sigframe32 __user *frame;

arch/mips/kernel/signal_o32.c

157

struct rt_sigframe32 __user *frame;

arch/mips/kernel/signal_o32.c

163

frame = (struct rt_sigframe32 __user *)regs->regs[29];

arch/mips/kernel/signal_o32.c

197

struct rt_sigframe32 __user *frame;

arch/mips/kernel/signal_o32.c

259

struct sigframe32 __user *frame;

arch/mips/kernel/signal_o32.c

265

frame = (struct sigframe32 __user *)regs->regs[29];

arch/mips/kernel/signal_o32.c

54

struct sigcontext32 __user *sc)

arch/mips/kernel/signal_o32.c

87

struct sigcontext32 __user *sc)

arch/mips/kernel/syscall.c

107

if (unlikely(!access_ok((const void __user *)addr, 4)))

arch/mips/kernel/traps.c

1155

unsigned int __user *epc = (unsigned int __user *)exception_epc(regs);

arch/mips/kernel/traps.c

1223

if (unlikely(get_user(mmop[0], (u16 __user *)epc + 0) < 0))

arch/mips/kernel/traps.c

1225

if (unlikely(get_user(mmop[1], (u16 __user *)epc + 1) < 0))

arch/mips/kernel/traps.c

1407

unsigned int __user *epc;

arch/mips/kernel/traps.c

1421

epc = (unsigned int __user *)exception_epc(regs);

arch/mips/kernel/traps.c

1469

void __user *fault_addr;

arch/mips/kernel/traps.c

532

unsigned long value, __user *vaddr;

arch/mips/kernel/traps.c

545

vaddr = (unsigned long __user *)

arch/mips/kernel/traps.c

571

unsigned long __user *vaddr;

arch/mips/kernel/traps.c

585

vaddr = (unsigned long __user *)

arch/mips/kernel/traps.c

761

force_sig_fault(SIGFPE, FPE_INTOVF, (void __user *)regs->cp0_epc);

arch/mips/kernel/traps.c

773

void force_fcr31_sig(unsigned long fcr31, void __user *fault_addr,

arch/mips/kernel/traps.c

792

int process_fpemu_return(int sig, void __user *fault_addr, unsigned long fcr31)

arch/mips/kernel/traps.c

828

void __user *fault_addr;

arch/mips/kernel/traps.c

879

void __user *fault_addr;

arch/mips/kernel/traps.c

920

fault_addr = (void __user *) regs->cp0_epc;

arch/mips/kernel/traps.c

997

(void __user *) regs->cp0_epc);

arch/mips/kernel/unaligned.c

113

void __user *addr, unsigned int *pc)

arch/mips/kernel/unaligned.c

1236

static void emulate_load_store_MIPS16e(struct pt_regs *regs, void __user * addr)

arch/mips/kernel/unaligned.c

1242

u16 __user *pc16;

arch/mips/kernel/unaligned.c

1251

pc16 = (unsigned short __user *)msk_isa16_mode(origpc);

arch/mips/kernel/unaligned.c

1573

(void __user *)regs->cp0_badvaddr);

arch/mips/kernel/unaligned.c

1579

(void __user *)regs->cp0_badvaddr);

arch/mips/kernel/unaligned.c

1590

emulate_load_store_insn(regs, (void __user *)regs->cp0_badvaddr, pc);

arch/mips/kernel/unaligned.c

442

void __user *fault_addr = NULL;

arch/mips/kernel/unaligned.c

616

void __user *addr)

arch/mips/kernel/unaligned.c

623

u16 __user *pc16;

arch/mips/kernel/unaligned.c

639

pc16 = (unsigned short __user *)msk_isa16_mode(regs->cp0_epc);

arch/mips/kernel/unaligned.c

957

void __user *fault_addr = NULL;

arch/mips/kernel/vpe.c

838

static ssize_t vpe_write(struct file *file, const char __user *buffer,

arch/mips/kvm/mips.c

1172

u32 __user *opc = (u32 __user *) vcpu->arch.pc;

arch/mips/kvm/mips.c

596

static int kvm_mips_copy_reg_indices(struct kvm_vcpu *vcpu, u64 __user *indices)

arch/mips/kvm/mips.c

741

u64 __user *uaddr64 = (u64 __user *)(long)reg->addr;

arch/mips/kvm/mips.c

745

u32 __user *uaddr32 = (u32 __user *)(long)reg->addr;

arch/mips/kvm/mips.c

750

void __user *uaddr = (void __user *)(long)reg->addr;

arch/mips/kvm/mips.c

768

u64 __user *uaddr64 = (u64 __user *)(long)reg->addr;

arch/mips/kvm/mips.c

773

u32 __user *uaddr32 = (u32 __user *)(long)reg->addr;

arch/mips/kvm/mips.c

780

void __user *uaddr = (void __user *)(long)reg->addr;

arch/mips/kvm/mips.c

902

void __user *argp = (void __user *)arg;

arch/mips/kvm/mips.c

922

void __user *argp = (void __user *)arg;

arch/mips/kvm/mips.c

942

struct kvm_reg_list __user *user_list = argp;

arch/mips/kvm/vz.c

1806

static int kvm_vz_copy_reg_indices(struct kvm_vcpu *vcpu, u64 __user *indices)

arch/mips/loongson64/cop2-ex.c

36

void __user *addr = (void __user *)regs->cp0_badvaddr;

arch/mips/loongson64/cop2-ex.c

37

unsigned int __user *pc = (unsigned int __user *)exception_epc(regs);

arch/mips/math-emu/cp1emu.c

1050

dva = (u64 __user *) (xcp->regs[MIPSInst_RS(ir)] +

arch/mips/math-emu/cp1emu.c

1068

dva = (u64 __user *) (xcp->regs[MIPSInst_RS(ir)] +

arch/mips/math-emu/cp1emu.c

1085

wva = (u32 __user *) (xcp->regs[MIPSInst_RS(ir)] +

arch/mips/math-emu/cp1emu.c

1102

wva = (u32 __user *) (xcp->regs[MIPSInst_RS(ir)] +

arch/mips/math-emu/cp1emu.c

1464

mips_instruction ir, void __user **fault_addr)

arch/mips/math-emu/cp1emu.c

1475

u32 __user *va;

arch/mips/math-emu/cp1emu.c

1480

va = (void __user *) (xcp->regs[MIPSInst_FR(ir)] +

arch/mips/math-emu/cp1emu.c

1498

va = (void __user *) (xcp->regs[MIPSInst_FR(ir)] +

arch/mips/math-emu/cp1emu.c

1584

u64 __user *va;

arch/mips/math-emu/cp1emu.c

1589

va = (void __user *) (xcp->regs[MIPSInst_FR(ir)] +

arch/mips/math-emu/cp1emu.c

1607

va = (void __user *) (xcp->regs[MIPSInst_FR(ir)] +

arch/mips/math-emu/cp1emu.c

2838

int has_fpu, void __user **fault_addr)

arch/mips/math-emu/cp1emu.c

2862

if ((get_user(instr[0], (u16 __user *)msk_isa16_mode(xcp->cp0_epc))) ||

arch/mips/math-emu/cp1emu.c

2863

(get_user(instr[1], (u16 __user *)msk_isa16_mode(xcp->cp0_epc + 2))) ||

arch/mips/math-emu/cp1emu.c

2864

(get_user(instr[2], (u16 __user *)msk_isa16_mode(xcp->cp0_epc + 4))) ||

arch/mips/math-emu/cp1emu.c

2865

(get_user(instr[3], (u16 __user *)msk_isa16_mode(xcp->cp0_epc + 6)))) {

arch/mips/math-emu/cp1emu.c

2902

(mips_instruction __user *) xcp->cp0_epc)) ||

arch/mips/math-emu/cp1emu.c

2904

(mips_instruction __user *)(xcp->cp0_epc+4)))) {

arch/mips/math-emu/cp1emu.c

49

struct mips_fpu_struct *, mips_instruction, void __user **);

arch/mips/math-emu/cp1emu.c

972

struct mm_decoded_insn dec_insn, void __user **fault_addr)

arch/mips/math-emu/cp1emu.c

979

u32 __user *wva;

arch/mips/math-emu/cp1emu.c

980

u64 __user *dva;

arch/mips/math-emu/dsemul.c

172

struct emuframe __user *fr;

arch/mips/math-emu/dsemul.c

70

static inline __user struct emuframe *dsemul_page(void)

arch/mips/math-emu/dsemul.c

72

return (__user struct emuframe *)STACK_TOP;

arch/mips/mm/cache.c

94

if (!access_ok((void __user *) addr, bytes))

arch/mips/mm/fault.c

216

force_sig_fault(SIGSEGV, si_code, (void __user *)address);

arch/mips/mm/fault.c

272

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *)address);

arch/mips/mm/sc-debugfs.c

13

static ssize_t sc_prefetch_read(struct file *file, char __user *user_buf,

arch/mips/mm/sc-debugfs.c

27

const char __user *user_buf,

arch/mips/sibyte/common/sb_tbprof.c

440

static ssize_t sbprof_tb_read(struct file *filp, char __user *buf,

arch/mips/sibyte/common/sb_tbprof.c

446

char __user *dest = buf;

arch/mips/sibyte/common/sb_tbprof.c

515

err = put_user(TB_FULL, (int __user *) arg);

arch/nios2/include/asm/syscalls.h

10

asmlinkage long __sys_clone3(struct clone_args __user *uargs, size_t size);

arch/nios2/include/asm/uaccess.h

119

const __typeof__(*(ptr)) __user *__gu_ptr = (ptr); \

arch/nios2/include/asm/uaccess.h

127

const __typeof__(*(ptr)) __user *__gu_ptr = (ptr); \

arch/nios2/include/asm/uaccess.h

29

static inline unsigned long __must_check __clear_user(void __user *to,

arch/nios2/include/asm/uaccess.h

48

static inline unsigned long __must_check clear_user(void __user *to,

arch/nios2/include/asm/uaccess.h

57

raw_copy_from_user(void *to, const void __user *from, unsigned long n);

arch/nios2/include/asm/uaccess.h

59

raw_copy_to_user(void __user *to, const void *from, unsigned long n);

arch/nios2/include/asm/uaccess.h

62

extern long strncpy_from_user(char *__to, const char __user *__from,

arch/nios2/include/asm/uaccess.h

64

extern __must_check long strnlen_user(const char __user *s, long n);

arch/nios2/kernel/process.c

254

int __user *parent_tidptr, int __user *child_tidptr,

arch/nios2/kernel/ptrace.c

49

const void *kbuf, const void __user *ubuf)

arch/nios2/kernel/signal.c

105

struct rt_sigframe __user *frame;

arch/nios2/kernel/signal.c

109

frame = (struct rt_sigframe __user *) regs->sp;

arch/nios2/kernel/signal.c

128

static inline int rt_setup_ucontext(struct ucontext __user *uc, struct pt_regs *regs)

arch/nios2/kernel/signal.c

131

unsigned long __user *gregs = uc->uc_mcontext.gregs;

arch/nios2/kernel/signal.c

166

static inline void __user *get_sigframe(struct ksignal *ksig,

arch/nios2/kernel/signal.c

179

return (void __user *)((usp - frame_size) & -8UL);

arch/nios2/kernel/signal.c

185

struct rt_sigframe __user *frame;

arch/nios2/kernel/signal.c

39

struct ucontext __user *uc, int *pr2)

arch/nios2/kernel/signal.c

42

unsigned long __user *gregs = uc->uc_mcontext.gregs;

arch/nios2/kernel/traps.c

29

force_sig_fault(signo, code, (void __user *) addr);

arch/openrisc/include/asm/futex.h

34

arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *uaddr)

arch/openrisc/include/asm/futex.h

68

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/openrisc/include/asm/syscalls.h

24

void __user *parent_tid, void __user *child_tid, int tls);

arch/openrisc/include/asm/syscalls.h

25

asmlinkage long __sys_clone3(struct clone_args __user *uargs, size_t size);

arch/openrisc/include/asm/uaccess.h

139

const __typeof__(*(ptr)) __user *__gu_addr = (ptr); \

arch/openrisc/include/asm/uaccess.h

212

raw_copy_from_user(void *to, const void __user *from, unsigned long size)

arch/openrisc/include/asm/uaccess.h

217

raw_copy_to_user(void __user *to, const void *from, unsigned long size)

arch/openrisc/include/asm/uaccess.h

223

extern unsigned long __clear_user(void __user *addr, unsigned long size);

arch/openrisc/include/asm/uaccess.h

226

clear_user(void __user *addr, unsigned long size)

arch/openrisc/include/asm/uaccess.h

233

extern long strncpy_from_user(char *dest, const char __user *src, long count);

arch/openrisc/include/asm/uaccess.h

235

extern __must_check long strnlen_user(const char __user *str, long n);

arch/openrisc/include/asm/uaccess.h

67

__typeof__(*(ptr)) __user *__pu_addr = (ptr); \

arch/openrisc/kernel/ptrace.c

107

const void *kbuf, const void __user *ubuf)

arch/openrisc/kernel/ptrace.c

67

const void *kbuf, const void __user * ubuf)

arch/openrisc/kernel/signal.c

107

struct rt_sigframe __user *frame = (struct rt_sigframe __user *)regs->sp;

arch/openrisc/kernel/signal.c

142

static int setup_sigcontext(struct pt_regs *regs, struct sigcontext __user *sc)

arch/openrisc/kernel/signal.c

168

static inline void __user *get_sigframe(struct ksignal *ksig,

arch/openrisc/kernel/signal.c

178

return (void __user *)sp;

arch/openrisc/kernel/signal.c

191

struct rt_sigframe __user *frame;

arch/openrisc/kernel/signal.c

221

err |= __put_user(0xa960, (short __user *)(frame->retcode + 0));

arch/openrisc/kernel/signal.c

222

err |= __put_user(__NR_rt_sigreturn, (short __user *)(frame->retcode + 2));

arch/openrisc/kernel/signal.c

223

err |= __put_user(0x20000001, (unsigned long __user *)(frame->retcode + 4));

arch/openrisc/kernel/signal.c

224

err |= __put_user(0x15000000, (unsigned long __user *)(frame->retcode + 8));

arch/openrisc/kernel/signal.c

44

static long restore_fp_state(struct sigcontext __user *sc)

arch/openrisc/kernel/signal.c

58

static long save_fp_state(struct sigcontext __user *sc)

arch/openrisc/kernel/signal.c

75

struct sigcontext __user *sc)

arch/openrisc/kernel/traps.c

206

force_sig_fault(SIGFPE, code, (void __user *)regs->pc);

arch/openrisc/kernel/traps.c

216

force_sig_fault(SIGTRAP, TRAP_BRKPT, (void __user *)regs->pc);

arch/openrisc/kernel/traps.c

227

force_sig_fault(SIGBUS, BUS_ADRALN, (void __user *)address);

arch/openrisc/kernel/traps.c

239

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *)address);

arch/openrisc/kernel/traps.c

334

lwa_addr = (unsigned long __user *)(regs->gpr[ra] + imm);

arch/openrisc/kernel/traps.c

363

unsigned long __user *vaddr;

arch/openrisc/kernel/traps.c

376

vaddr = (unsigned long __user *)(regs->gpr[ra] + imm);

arch/openrisc/kernel/traps.c

41

static unsigned long __user *lwa_addr;

arch/openrisc/kernel/traps.c

433

force_sig_fault(SIGILL, ILL_ILLOPC, (void __user *)address);

arch/openrisc/mm/fault.c

216

force_sig_fault(SIGSEGV, si_code, (void __user *)address);

arch/openrisc/mm/fault.c

274

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *)address);

arch/parisc/include/asm/futex.h

35

arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *uaddr)

arch/parisc/include/asm/futex.h

90

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/parisc/include/asm/processor.h

133

>> PARISC_UAC_SHIFT, (int __user *) (addr)); \

arch/parisc/include/asm/uaccess.h

186

extern long strncpy_from_user(char *, const char __user *, long);

arch/parisc/include/asm/uaccess.h

187

extern __must_check unsigned lclear_user(void __user *, unsigned long);

arch/parisc/include/asm/uaccess.h

188

extern __must_check long strnlen_user(const char __user *src, long n);

arch/parisc/include/asm/uaccess.h

196

unsigned long __must_check raw_copy_to_user(void __user *dst, const void *src,

arch/parisc/include/asm/uaccess.h

198

unsigned long __must_check raw_copy_from_user(void *dst, const void __user *src,

arch/parisc/include/uapi/asm/signal.h

78

void __user *ss_sp;

arch/parisc/kernel/cache.c

943

if (!access_ok((void __user *) addr, bytes))

arch/parisc/kernel/perf.c

184

static ssize_t perf_read(struct file *file, char __user *buf, size_t cnt, loff_t *ppos);

arch/parisc/kernel/perf.c

185

static ssize_t perf_write(struct file *file, const char __user *buf,

arch/parisc/kernel/perf.c

276

static ssize_t perf_read(struct file *file, char __user *buf, size_t cnt, loff_t *ppos)

arch/parisc/kernel/perf.c

288

static ssize_t perf_write(struct file *file, const char __user *buf,

arch/parisc/kernel/perf.c

449

if (copy_to_user((void __user *)arg, raddr,

arch/parisc/kernel/ptrace.c

125

unsigned long __user *datap = (unsigned long __user *)data;

arch/parisc/kernel/ptrace.c

414

const void *kbuf, const void __user *ubuf)

arch/parisc/kernel/ptrace.c

418

const __u64 __user *u = ubuf;

arch/parisc/kernel/ptrace.c

534

const void *kbuf, const void __user *ubuf)

arch/parisc/kernel/ptrace.c

538

const unsigned long __user *u = ubuf;

arch/parisc/kernel/ptrace.c

598

const void *kbuf, const void __user *ubuf)

arch/parisc/kernel/ptrace.c

602

const compat_ulong_t __user *u = ubuf;

arch/parisc/kernel/ptrace.c

90

(void __user *) (task_regs(task)->iaoq[0] & ~3),

arch/parisc/kernel/signal.c

100

compat_frame = (struct compat_rt_sigframe __user *)frame;

arch/parisc/kernel/signal.c

160

static inline void __user *

arch/parisc/kernel/signal.c

175

return (void __user *) sp; /* Stacks grow up. Fun. */

arch/parisc/kernel/signal.c

179

setup_sigcontext(struct sigcontext __user *sc, struct pt_regs *regs, long in_syscall)

arch/parisc/kernel/signal.c

216

struct rt_sigframe __user *frame;

arch/parisc/kernel/signal.c

222

struct compat_rt_sigframe __user * compat_frame;

arch/parisc/kernel/signal.c

244

compat_frame = (struct compat_rt_sigframe __user *)frame;

arch/parisc/kernel/signal.c

291

Elf32_Fdesc __user *ufdesc = (Elf32_Fdesc __user *)A(haddr & ~3);

arch/parisc/kernel/signal.c

304

Elf64_Fdesc __user *ufdesc = (Elf64_Fdesc __user *)A(haddr & ~3);

arch/parisc/kernel/signal.c

409

u32 __user *uaddr;

arch/parisc/kernel/signal.c

426

uaddr = (u32 __user *) ((regs->gr[31] & ~3) + 4);

arch/parisc/kernel/signal.c

61

restore_sigcontext(struct sigcontext __user *sc, struct pt_regs *regs)

arch/parisc/kernel/signal.c

79

struct rt_sigframe __user *frame;

arch/parisc/kernel/signal.c

84

struct compat_rt_sigframe __user * compat_frame;

arch/parisc/kernel/signal.c

93

frame = (struct rt_sigframe __user *)

arch/parisc/kernel/signal32.c

115

setup_sigcontext32(struct compat_sigcontext __user *sc, struct compat_regfile __user * rf,

arch/parisc/kernel/signal32.c

36

restore_sigcontext32(struct compat_sigcontext __user *sc, struct compat_regfile __user * rf,

arch/parisc/kernel/signal32.h

57

long restore_sigcontext32(struct compat_sigcontext __user *sc,

arch/parisc/kernel/signal32.h

58

struct compat_regfile __user *rf,

arch/parisc/kernel/signal32.h

60

long setup_sigcontext32(struct compat_sigcontext __user *sc,

arch/parisc/kernel/signal32.h

61

struct compat_regfile __user *rf,

arch/parisc/kernel/sys_parisc.c

214

asmlinkage long parisc_truncate64(const char __user * path,

arch/parisc/kernel/sys_parisc.c

228

asmlinkage long sys_truncate64(const char __user * path, unsigned long length)

arch/parisc/kernel/sys_parisc.c

242

asmlinkage long parisc_truncate64(const char __user * path,

arch/parisc/kernel/sys_parisc.c

255

asmlinkage ssize_t parisc_pread64(unsigned int fd, char __user *buf, size_t count,

arch/parisc/kernel/sys_parisc.c

261

asmlinkage ssize_t parisc_pwrite64(unsigned int fd, const char __user *buf,

arch/parisc/kernel/sys_parisc.c

342

asmlinkage long parisc_signalfd4(int ufd, sigset_t __user *user_mask,

arch/parisc/kernel/sys_parisc.c

351

compat_sigset_t __user *user_mask,

arch/parisc/kernel/sys_parisc.c

371

asmlinkage long parisc_pipe2(int __user *fildes, int flags)

arch/parisc/kernel/traps.c

280

(void __user *) (regs->iaoq[0] & ~3));

arch/parisc/kernel/traps.c

609

(void __user *) regs->iaoq[0]);

arch/parisc/kernel/traps.c

615

(void __user *) regs->iaoq[0]);

arch/parisc/kernel/traps.c

627

(void __user *) regs->iaoq[0]);

arch/parisc/kernel/traps.c

743

((void __user *) regs->iaoq[0]) :

arch/parisc/kernel/traps.c

744

((void __user *) regs->ior));

arch/parisc/kernel/traps.c

759

(void __user *)regs->ior);

arch/parisc/kernel/traps.c

775

(void __user *)regs->ior);

arch/parisc/kernel/unaligned.c

618

(void __user *)regs->ior);

arch/parisc/kernel/unaligned.c

625

(void __user *)regs->ior);

arch/parisc/lib/memcpy.c

24

unsigned long raw_copy_to_user(void __user *dst, const void *src,

arch/parisc/lib/memcpy.c

33

unsigned long raw_copy_from_user(void *dst, const void __user *src,

arch/parisc/math-emu/driver.c

111

(void __user *) regs->iaoq[0]);

arch/parisc/mm/fault.c

420

force_sig_mceerr(BUS_MCEERR_AR, (void __user *) address,

arch/parisc/mm/fault.c

427

force_sig_fault(signo, si_code, (void __user *) address);

arch/powerpc/include/asm/book3s/32/kup.h

100

static __always_inline void allow_user_access(void __user *to, unsigned long dir)

arch/powerpc/include/asm/book3s/32/mmu-hash.h

179

void __user *vdso;

arch/powerpc/include/asm/book3s/64/kup.h

356

static __always_inline void allow_user_access(void __user *to, unsigned long dir)

arch/powerpc/include/asm/book3s/64/kup.h

385

static __always_inline void allow_user_access(void __user *to, unsigned long dir)

arch/powerpc/include/asm/book3s/64/mmu.h

117

void __user *vdso;

arch/powerpc/include/asm/checksum.h

25

static inline __wsum csum_and_copy_from_user(const void __user *src, void *dst, int len)

arch/powerpc/include/asm/checksum.h

35

static inline __wsum csum_and_copy_to_user(const void *src, void __user *dst, int len)

arch/powerpc/include/asm/futex.h

32

u32 __user *uaddr)

arch/powerpc/include/asm/futex.h

65

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/powerpc/include/asm/inst.h

13

u32 __user *__gui_ptr = (u32 __user *)ptr; \

arch/powerpc/include/asm/kup.h

75

static __always_inline void allow_user_access(void __user *to, unsigned long dir) { }

arch/powerpc/include/asm/kvm_ppc.h

232

extern int kvm_vm_ioctl_rtas_define_token(struct kvm *kvm, void __user *argp);

arch/powerpc/include/asm/nohash/32/kup-8xx.h

52

static __always_inline void allow_user_access(void __user *to, unsigned long dir)

arch/powerpc/include/asm/nohash/32/mmu-44x.h

111

void __user *vdso;

arch/powerpc/include/asm/nohash/32/mmu-8xx.h

183

void __user *vdso;

arch/powerpc/include/asm/nohash/kup-booke.h

76

static __always_inline void allow_user_access(void __user *to, unsigned long dir)

arch/powerpc/include/asm/nohash/mmu-e500.h

241

void __user *vdso;

arch/powerpc/include/asm/ps3.h

484

int ps3_lpm_copy_tb_to_user(unsigned long offset, void __user *buf,

arch/powerpc/include/asm/spu.h

215

long (*create_thread)(const char __user *name,

arch/powerpc/include/asm/spu.h

218

long (*spu_run)(struct file *filp, __u32 __user *unpc,

arch/powerpc/include/asm/spu.h

219

__u32 __user *ustatus);

arch/powerpc/include/asm/syscalls.h

101

long sys_ppc_truncate64(const char __user *path, u32 reg4,

arch/powerpc/include/asm/syscalls.h

120

char __user *ubuf, compat_size_t count,

arch/powerpc/include/asm/syscalls.h

123

const char __user *ubuf, compat_size_t count,

arch/powerpc/include/asm/syscalls.h

127

long compat_sys_ppc_truncate64(const char __user *path, u32 reg4,

arch/powerpc/include/asm/syscalls.h

44

long sys_rtas(struct rtas_args __user *uargs);

arch/powerpc/include/asm/syscalls.h

53

long sys_swapcontext(struct ucontext __user *old_ctx,

arch/powerpc/include/asm/syscalls.h

54

struct ucontext __user *new_ctx, long ctx_size);

arch/powerpc/include/asm/syscalls.h

65

long sys_debug_setcontext(struct ucontext __user *ctx, int ndbg,

arch/powerpc/include/asm/syscalls.h

66

struct sig_dbg_op __user *dbg);

arch/powerpc/include/asm/syscalls.h

72

unsigned long len, u32 __user *map);

arch/powerpc/include/asm/syscalls.h

75

long compat_sys_swapcontext(struct ucontext32 __user *old_ctx,

arch/powerpc/include/asm/syscalls.h

76

struct ucontext32 __user *new_ctx,

arch/powerpc/include/asm/syscalls.h

79

struct compat_rlimit __user *rlim);

arch/powerpc/include/asm/syscalls.h

94

char __user *ubuf, compat_size_t count,

arch/powerpc/include/asm/syscalls.h

97

const char __user *ubuf, compat_size_t count,

arch/powerpc/include/asm/uaccess.h

155

__typeof__(*(ptr)) __user *__pus_addr = (ptr); \

arch/powerpc/include/asm/uaccess.h

240

case 1: __get_user_asm_goto(x, (u8 __user *)ptr, label, "lbz"); break; \

arch/powerpc/include/asm/uaccess.h

241

case 2: __get_user_asm_goto(x, (u16 __user *)ptr, label, "lhz"); break; \

arch/powerpc/include/asm/uaccess.h

242

case 4: __get_user_asm_goto(x, (u32 __user *)ptr, label, "lwz"); break; \

arch/powerpc/include/asm/uaccess.h

243

case 8: __get_user_asm2_goto(x, (u64 __user *)ptr, label); break; \

arch/powerpc/include/asm/uaccess.h

29

static __always_inline int __access_ok(const void __user *ptr, unsigned long size)

arch/powerpc/include/asm/uaccess.h

301

case 1: __get_user_asm(x, (u8 __user *)ptr, retval, "lbz"); break; \

arch/powerpc/include/asm/uaccess.h

302

case 2: __get_user_asm(x, (u16 __user *)ptr, retval, "lhz"); break; \

arch/powerpc/include/asm/uaccess.h

303

case 4: __get_user_asm(x, (u32 __user *)ptr, retval, "lwz"); break; \

arch/powerpc/include/asm/uaccess.h

304

case 8: __get_user_asm2(x, (u64 __user *)ptr, retval); break; \

arch/powerpc/include/asm/uaccess.h

331

__typeof__(*(ptr)) __user *__gu_addr = (ptr); \

arch/powerpc/include/asm/uaccess.h

346

__typeof__(*(ptr)) __user *_gu_addr = (ptr); \

arch/powerpc/include/asm/uaccess.h

355

extern unsigned long __copy_tofrom_user(void __user *to,

arch/powerpc/include/asm/uaccess.h

356

const void __user *from, unsigned long size);

arch/powerpc/include/asm/uaccess.h

358

unsigned long __copy_tofrom_user_base(void __user *to,

arch/powerpc/include/asm/uaccess.h

359

const void __user *from, unsigned long size);

arch/powerpc/include/asm/uaccess.h

361

unsigned long __copy_tofrom_user_power7_vmx(void __user *to,

arch/powerpc/include/asm/uaccess.h

362

const void __user *from, unsigned long size);

arch/powerpc/include/asm/uaccess.h

371

raw_copy_tofrom_user(void __user *to, const void __user *from,

arch/powerpc/include/asm/uaccess.h

398

raw_copy_in_user(void __user *to, const void __user *from, unsigned long n)

arch/powerpc/include/asm/uaccess.h

405

static inline unsigned long raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/powerpc/include/asm/uaccess.h

407

return raw_copy_tofrom_user((__force void __user *)to, from, n, KUAP_READ);

arch/powerpc/include/asm/uaccess.h

411

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/powerpc/include/asm/uaccess.h

413

return raw_copy_tofrom_user(to, (__force const void __user *)from, n, KUAP_WRITE);

arch/powerpc/include/asm/uaccess.h

416

unsigned long __arch_clear_user(void __user *addr, unsigned long size);

arch/powerpc/include/asm/uaccess.h

418

static inline unsigned long __clear_user(void __user *addr, unsigned long size)

arch/powerpc/include/asm/uaccess.h

429

static inline unsigned long clear_user(void __user *addr, unsigned long size)

arch/powerpc/include/asm/uaccess.h

434

extern long strncpy_from_user(char *dst, const char __user *src, long count);

arch/powerpc/include/asm/uaccess.h

435

extern __must_check long strnlen_user(const char __user *str, long n);

arch/powerpc/include/asm/uaccess.h

449

copy_mc_to_user(void __user *to, const void *from, unsigned long n)

arch/powerpc/include/asm/uaccess.h

463

extern size_t copy_from_user_flushcache(void *dst, const void __user *src, size_t size);

arch/powerpc/include/asm/uaccess.h

465

static __must_check __always_inline bool __user_access_begin(const void __user *ptr, size_t len,

arch/powerpc/include/asm/uaccess.h

475

allow_user_access((void __user *)ptr, dir);

arch/powerpc/include/asm/uaccess.h

495

static inline void __user *mask_user_address_simple(const void __user *ptr)

arch/powerpc/include/asm/uaccess.h

500

return (void __user *)(addr & ~mask);

arch/powerpc/include/asm/uaccess.h

503

static inline void __user *mask_user_address_isel(const void __user *ptr)

arch/powerpc/include/asm/uaccess.h

509

return (void __user *)addr;

arch/powerpc/include/asm/uaccess.h

513

static inline void __user *mask_user_address_32(const void __user *ptr)

arch/powerpc/include/asm/uaccess.h

520

return (void __user *)addr;

arch/powerpc/include/asm/uaccess.h

523

static inline void __user *mask_user_address_fallback(const void __user *ptr)

arch/powerpc/include/asm/uaccess.h

527

return (void __user *)(likely(addr < TASK_SIZE) ? addr : TASK_SIZE);

arch/powerpc/include/asm/uaccess.h

530

static inline void __user *mask_user_address(const void __user *ptr)

arch/powerpc/include/asm/uaccess.h

549

static __always_inline void __user *__masked_user_access_begin(const void __user *p,

arch/powerpc/include/asm/uaccess.h

552

void __user *ptr = mask_user_address(p);

arch/powerpc/include/asm/uaccess.h

566

__typeof__(*(p)) __user *__gu_addr = (p); \

arch/powerpc/include/asm/uaccess.h

578

const u8 __user *_src = (const u8 __user *)(s); \

arch/powerpc/include/asm/uaccess.h

583

unsafe_get_user(*(u64 *)(_dst + _i), (u64 __user *)(_src + _i), e); \

arch/powerpc/include/asm/uaccess.h

585

unsafe_get_user(*(u32 *)(_dst + _i), (u32 __user *)(_src + _i), e); \

arch/powerpc/include/asm/uaccess.h

589

unsafe_get_user(*(u16 *)(_dst + _i), (u16 __user *)(_src + _i), e); \

arch/powerpc/include/asm/uaccess.h

593

unsafe_get_user(*(u8 *)(_dst + _i), (u8 __user *)(_src + _i), e); \

arch/powerpc/include/asm/uaccess.h

598

u8 __user *_dst = (u8 __user *)(d); \

arch/powerpc/include/asm/uaccess.h

604

unsafe_put_user(*(u64 *)(_src + _i), (u64 __user *)(_dst + _i), e); \

arch/powerpc/include/asm/uaccess.h

606

unsafe_put_user(*(u32*)(_src + _i), (u32 __user *)(_dst + _i), e); \

arch/powerpc/include/asm/uaccess.h

610

unsafe_put_user(*(u16*)(_src + _i), (u16 __user *)(_dst + _i), e); \

arch/powerpc/include/asm/uaccess.h

614

unsafe_put_user(*(u8*)(_src + _i), (u8 __user *)(_dst + _i), e); \

arch/powerpc/include/asm/uaccess.h

619

(__force type __user *)(src), sizeof(type), err_label)

arch/powerpc/include/asm/uaccess.h

623

(__force type __user *)(dst), sizeof(type), err_label)

arch/powerpc/include/asm/uaccess.h

71

__typeof__(*(ptr)) __user *__pu_addr = (ptr); \

arch/powerpc/include/asm/uaccess.h

95

__typeof__(*(ptr)) __user *_pu_addr = (ptr); \

arch/powerpc/include/uapi/asm/sigcontext.h

26

struct user_pt_regs __user *regs;

arch/powerpc/include/uapi/asm/sigcontext.h

87

elf_vrreg_t __user *v_regs;

arch/powerpc/include/uapi/asm/signal.h

92

void __user *ss_sp;

arch/powerpc/include/uapi/asm/ucontext.h

23

struct ucontext __user *uc_link;

arch/powerpc/include/uapi/asm/ucontext.h

27

struct mcontext __user *uc_regs;/* points to uc_mcontext field */

arch/powerpc/kernel/align.c

116

unsigned char __user *p, *addr;

arch/powerpc/kernel/align.c

124

addr = (unsigned char __user *)regs->dar;

arch/powerpc/kernel/align.c

301

r = __get_user_instr(instr, (void __user *)regs->nip);

arch/powerpc/kernel/dawr.c

63

const char __user *user_buf,

arch/powerpc/kernel/eeh.c

1676

const char __user *user_buf,

arch/powerpc/kernel/eeh.c

1725

const char __user *user_buf,

arch/powerpc/kernel/eeh.c

1780

char __user *user_buf,

arch/powerpc/kernel/eeh.c

1790

const char __user *user_buf,

arch/powerpc/kernel/eeh.c

1824

const char __user *user_buf,

arch/powerpc/kernel/eeh.c

1850

const char __user *user_buf,

arch/powerpc/kernel/hw_breakpoint_constraints.c

137

err = __get_user_instr(*instr, (void __user *)regs->nip);

arch/powerpc/kernel/kvm.c

672

if (fault_in_readable((const char __user *)KVM_MAGIC_PAGE,

arch/powerpc/kernel/proc_powerpc.c

27

static ssize_t page_map_read( struct file *file, char __user *buf, size_t nbytes,

arch/powerpc/kernel/process.c

1429

if (copy_from_user_nofault(&instr, (void __user *)pc,

arch/powerpc/kernel/process.c

1933

get_user(entry, (unsigned long __user *)start);

arch/powerpc/kernel/process.c

1934

get_user(toc, (unsigned long __user *)start+1);

arch/powerpc/kernel/process.c

2070

return put_user(val, (unsigned int __user *) adr);

arch/powerpc/kernel/process.c

2114

return put_user(val, (unsigned int __user *)adr);

arch/powerpc/kernel/process.c

2125

return put_user(tsk->thread.align_ctl, (unsigned int __user *)adr);

arch/powerpc/kernel/process.c

618

(void __user *)address);

arch/powerpc/kernel/process.c

680

force_sig_fault(SIGTRAP, TRAP_HWBKPT, (void __user *)regs->dar);

arch/powerpc/kernel/ptrace/ptrace-adv.c

75

unsigned long __user *datalp)

arch/powerpc/kernel/ptrace/ptrace-altivec.c

81

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-decl.h

110

const void *kbuf, const void __user *ubuf,

arch/powerpc/kernel/ptrace/ptrace-decl.h

125

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

130

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

135

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

140

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

145

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

150

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

155

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

160

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

164

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

180

unsigned long __user *datalp);

arch/powerpc/kernel/ptrace/ptrace-decl.h

75

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

83

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

91

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-decl.h

99

const void *kbuf, const void __user *ubuf);

arch/powerpc/kernel/ptrace/ptrace-noadv.c

61

unsigned long __user *datalp)

arch/powerpc/kernel/ptrace/ptrace-novsx.c

51

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-spe.c

41

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-tm.c

136

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-tm.c

275

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-tm.c

395

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-tm.c

514

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-tm.c

618

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-tm.c

678

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-tm.c

719

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-tm.c

759

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-tm.c

784

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-view.c

240

const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-view.c

301

const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-view.c

317

const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-view.c

331

const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-view.c

366

const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-view.c

420

const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-view.c

501

const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-view.c

535

const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-view.c

755

const void __user *ubuf, unsigned long *regs)

arch/powerpc/kernel/ptrace/ptrace-view.c

757

const compat_ulong_t __user *u = ubuf;

arch/powerpc/kernel/ptrace/ptrace-view.c

807

const void *kbuf, const void __user *ubuf,

arch/powerpc/kernel/ptrace/ptrace-view.c

830

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-vsx.c

128

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace-vsx.c

51

const void *kbuf, const void __user *ubuf)

arch/powerpc/kernel/ptrace/ptrace.c

41

void __user *datavp = (void __user *) data;

arch/powerpc/kernel/ptrace/ptrace.c

42

unsigned long __user *datalp = datavp;

arch/powerpc/kernel/ptrace/ptrace32.c

100

ret = put_user((unsigned int)tmp, (u32 __user *)data);

arch/powerpc/kernel/ptrace/ptrace32.c

147

ret = put_user(reg32bits, (u32 __user *)data);

arch/powerpc/kernel/ptrace/ptrace32.c

163

u32 __user * addrOthers;

arch/powerpc/kernel/ptrace/ptrace32.c

167

if (get_user(addrOthers, (u32 __user * __user *)addr) != 0)

arch/powerpc/kernel/ptrace/ptrace32.c

257

ret = put_user(child->thread.debug.dac1, (u32 __user *)data);

arch/powerpc/kernel/ptrace/ptrace32.c

262

ret = put_user(dabr_fake, (u32 __user *)data);

arch/powerpc/kernel/ptrace/ptrace32.c

59

u32 __user * addrOthers;

arch/powerpc/kernel/ptrace/ptrace32.c

64

if (get_user(addrOthers, (u32 __user * __user *)addr) != 0)

arch/powerpc/kernel/ptrace/ptrace32.c

71

ret = put_user(tmp, (u32 __user *)data);

arch/powerpc/kernel/rtas-proc.c

141

const char __user *buf, size_t count, loff_t *ppos);

arch/powerpc/kernel/rtas-proc.c

144

const char __user *buf, size_t count, loff_t *ppos);

arch/powerpc/kernel/rtas-proc.c

147

const char __user *buf, size_t count, loff_t *ppos);

arch/powerpc/kernel/rtas-proc.c

150

const char __user *buf, size_t count, loff_t *ppos);

arch/powerpc/kernel/rtas-proc.c

153

const char __user *buf, size_t count, loff_t *ppos);

arch/powerpc/kernel/rtas-proc.c

259

static int parse_number(const char __user *p, size_t count, u64 *val)

arch/powerpc/kernel/rtas-proc.c

278

const char __user *buf, size_t count, loff_t *ppos)

arch/powerpc/kernel/rtas-proc.c

312

const char __user *buf, size_t count, loff_t *ppos)

arch/powerpc/kernel/rtas-proc.c

344

const char __user *buf, size_t count, loff_t *ppos)

arch/powerpc/kernel/rtas-proc.c

703

const char __user *buf, size_t count, loff_t *ppos)

arch/powerpc/kernel/rtas-proc.c

728

const char __user *buf, size_t count, loff_t *ppos)

arch/powerpc/kernel/rtas.c

1850

SYSCALL_DEFINE1(rtas, struct rtas_args __user *, uargs)

arch/powerpc/kernel/rtas_flash.c

272

static ssize_t rtas_flash_read_msg(struct file *file, char __user *buf,

arch/powerpc/kernel/rtas_flash.c

289

static ssize_t rtas_flash_read_num(struct file *file, char __user *buf,

arch/powerpc/kernel/rtas_flash.c

310

static ssize_t rtas_flash_write(struct file *file, const char __user *buffer,

arch/powerpc/kernel/rtas_flash.c

378

static ssize_t manage_flash_read(struct file *file, char __user *buf,

arch/powerpc/kernel/rtas_flash.c

393

static ssize_t manage_flash_write(struct file *file, const char __user *buf,

arch/powerpc/kernel/rtas_flash.c

466

static ssize_t validate_flash_read(struct file *file, char __user *buf,

arch/powerpc/kernel/rtas_flash.c

481

static ssize_t validate_flash_write(struct file *file, const char __user *buf,

arch/powerpc/kernel/rtasd.c

301

static ssize_t rtas_log_read(struct file * file, char __user * buf,

arch/powerpc/kernel/signal.c

109

unsigned long copy_ckvsx_to_user(void __user *to,

arch/powerpc/kernel/signal.c

122

void __user *from)

arch/powerpc/kernel/signal.c

162

void __user *get_sigframe(struct ksignal *ksig, struct task_struct *tsk,

arch/powerpc/kernel/signal.c

176

return (void __user *)newsp;

arch/powerpc/kernel/signal.c

27

unsigned long copy_fpr_to_user(void __user *to,

arch/powerpc/kernel/signal.c

349

const char *where, void __user *ptr)

arch/powerpc/kernel/signal.c

41

void __user *from)

arch/powerpc/kernel/signal.c

55

unsigned long copy_vsx_to_user(void __user *to,

arch/powerpc/kernel/signal.c

68

void __user *from)

arch/powerpc/kernel/signal.c

81

unsigned long copy_ckfpr_to_user(void __user *to,

arch/powerpc/kernel/signal.c

95

void __user *from)

arch/powerpc/kernel/signal.h

10

void __user *get_sigframe(struct ksignal *ksig, struct task_struct *tsk,

arch/powerpc/kernel/signal.h

101

u64 __user *buf = (u64 __user *)to; \

arch/powerpc/kernel/signal.h

111

u64 __user *buf = (u64 __user *)from; \

arch/powerpc/kernel/signal.h

121

u64 __user *buf = (u64 __user *)from; \

arch/powerpc/kernel/signal.h

140

copy_fpr_to_user(void __user *to, struct task_struct *task)

arch/powerpc/kernel/signal.h

147

copy_fpr_from_user(struct task_struct *task, void __user *from)

arch/powerpc/kernel/signal.h

158

inline unsigned long copy_ckfpr_to_user(void __user *to, struct task_struct *task)

arch/powerpc/kernel/signal.h

165

copy_ckfpr_from_user(struct task_struct *task, void __user *from)

arch/powerpc/kernel/signal.h

177

copy_fpr_to_user(void __user *to, struct task_struct *task)

arch/powerpc/kernel/signal.h

183

copy_fpr_from_user(struct task_struct *task, void __user *from)

arch/powerpc/kernel/signal.h

19

static inline int __get_user_sigset(sigset_t *dst, const sigset_t __user *src)

arch/powerpc/kernel/signal.h

205

const char *where, void __user *ptr);

arch/powerpc/kernel/signal.h

23

return __get_user(dst->sig[0], (u64 __user *)&src->sig[0]);

arch/powerpc/kernel/signal.h

27

const sigset_t __user *__src = src; \

arch/powerpc/kernel/signal.h

35

extern unsigned long copy_vsx_to_user(void __user *to,

arch/powerpc/kernel/signal.h

37

extern unsigned long copy_ckvsx_to_user(void __user *to,

arch/powerpc/kernel/signal.h

40

void __user *from);

arch/powerpc/kernel/signal.h

42

void __user *from);

arch/powerpc/kernel/signal.h

43

unsigned long copy_fpr_to_user(void __user *to, struct task_struct *task);

arch/powerpc/kernel/signal.h

44

unsigned long copy_ckfpr_to_user(void __user *to, struct task_struct *task);

arch/powerpc/kernel/signal.h

45

unsigned long copy_fpr_from_user(struct task_struct *task, void __user *from);

arch/powerpc/kernel/signal.h

46

unsigned long copy_ckfpr_from_user(struct task_struct *task, void __user *from);

arch/powerpc/kernel/signal.h

50

u64 __user *buf = (u64 __user *)to; \

arch/powerpc/kernel/signal.h

60

u64 __user *buf = (u64 __user *)to; \

arch/powerpc/kernel/signal.h

70

u64 __user *buf = (u64 __user *)from; \

arch/powerpc/kernel/signal.h

80

u64 __user *buf = (u64 __user *)from; \

arch/powerpc/kernel/signal.h

91

u64 __user *buf = (u64 __user *)to; \

arch/powerpc/kernel/signal_32.c

1004

struct mcontext __user *mcp;

arch/powerpc/kernel/signal_32.c

1014

mcp = (struct mcontext __user *)(u64)cmcp;

arch/powerpc/kernel/signal_32.c

1042

struct mcontext __user *mctx;

arch/powerpc/kernel/signal_32.c

1051

mctx = (struct mcontext __user *)

arch/powerpc/kernel/signal_32.c

1064

fault_in_readable((char __user *)new_ctx, ctx_size))

arch/powerpc/kernel/signal_32.c

1097

struct rt_sigframe __user *rt_sf;

arch/powerpc/kernel/signal_32.c

1101

struct ucontext __user *uc_transact;

arch/powerpc/kernel/signal_32.c

1108

rt_sf = (struct rt_sigframe __user *)

arch/powerpc/kernel/signal_32.c

1129

uc_transact = (struct ucontext __user *)(uintptr_t)tmp;

arch/powerpc/kernel/signal_32.c

113

__unsafe_restore_general_regs(struct pt_regs *regs, struct mcontext __user *sr)

arch/powerpc/kernel/signal_32.c

1132

struct mcontext __user *mcp;

arch/powerpc/kernel/signal_32.c

1136

mcp = (struct mcontext __user *)(u64)cmcp;

arch/powerpc/kernel/signal_32.c

1193

SYSCALL_DEFINE3(debug_setcontext, struct ucontext __user *, ctx,

arch/powerpc/kernel/signal_32.c

1194

int, ndbg, struct sig_dbg_op __user *, dbg)

arch/powerpc/kernel/signal_32.c

1255

fault_in_readable((char __user *)ctx, sizeof(*ctx)))

arch/powerpc/kernel/signal_32.c

1301

struct sigframe __user *sf;

arch/powerpc/kernel/signal_32.c

1302

struct sigcontext __user *sc;

arch/powerpc/kernel/signal_32.c

1304

struct mcontext __user *sr;

arch/powerpc/kernel/signal_32.c

1306

struct mcontext __user *mcp;

arch/powerpc/kernel/signal_32.c

1307

struct mcontext __user *tm_mcp = NULL;

arch/powerpc/kernel/signal_32.c

1313

sf = (struct sigframe __user *)(regs->gpr[1] + __SIGNAL_FRAMESIZE);

arch/powerpc/kernel/signal_32.c

1330

mcp = (struct mcontext __user *)&sf->mctx;

arch/powerpc/kernel/signal_32.c

1332

tm_mcp = (struct mcontext __user *)&sf->mctx_transact;

arch/powerpc/kernel/signal_32.c

134

sigset_t __user *__us = uset ; \

arch/powerpc/kernel/signal_32.c

1342

sr = (struct mcontext __user *)from_user_ptr(sigctx.regs);

arch/powerpc/kernel/signal_32.c

143

#define from_user_ptr(p) ((void __user *)(p))

arch/powerpc/kernel/signal_32.c

146

__unsafe_save_general_regs(struct pt_regs *regs, struct mcontext __user *frame)

arch/powerpc/kernel/signal_32.c

156

int __unsafe_restore_general_regs(struct pt_regs *regs, struct mcontext __user *sr)

arch/powerpc/kernel/signal_32.c

268

__unsafe_save_user_regs(struct pt_regs *regs, struct mcontext __user *frame,

arch/powerpc/kernel/signal_32.c

269

struct mcontext __user *tm_frame, int ctx_has_vsx_region)

arch/powerpc/kernel/signal_32.c

293

unsafe_put_user(current->thread.vrsave, (u32 __user *)&frame->mc_vregs[32],

arch/powerpc/kernel/signal_32.c

328

(u32 __user *)&frame->mc_vregs + ELF_NEVRREG, failed);

arch/powerpc/kernel/signal_32.c

369

save_tm_user_regs_unsafe(struct pt_regs *regs, struct mcontext __user *frame,

arch/powerpc/kernel/signal_32.c

370

struct mcontext __user *tm_frame, unsigned long msr)

arch/powerpc/kernel/signal_32.c

409

(u32 __user *)&frame->mc_vregs[32], failed);

arch/powerpc/kernel/signal_32.c

412

(u32 __user *)&tm_frame->mc_vregs[32], failed);

arch/powerpc/kernel/signal_32.c

415

(u32 __user *)&tm_frame->mc_vregs[32], failed);

arch/powerpc/kernel/signal_32.c

450

save_tm_user_regs_unsafe(struct pt_regs *regs, struct mcontext __user *frame,

arch/powerpc/kernel/signal_32.c

451

struct mcontext __user *tm_frame, unsigned long msr)

arch/powerpc/kernel/signal_32.c

467

struct mcontext __user *sr, int sig)

arch/powerpc/kernel/signal_32.c

509

unsafe_get_user(current->thread.vrsave, (u32 __user *)&sr->mc_vregs[32], failed);

arch/powerpc/kernel/signal_32.c

555

unsafe_get_user(current->thread.spefscr, (u32 __user *)&sr->mc_vregs + ELF_NEVRREG, failed);

arch/powerpc/kernel/signal_32.c

573

struct mcontext __user *sr,

arch/powerpc/kernel/signal_32.c

574

struct mcontext __user *tm_sr)

arch/powerpc/kernel/signal_32.c

613

(u32 __user *)&sr->mc_vregs[32], failed);

arch/powerpc/kernel/signal_32.c

649

(u32 __user *)&tm_sr->mc_vregs[32], failed);

arch/powerpc/kernel/signal_32.c

719

static long restore_tm_user_regs(struct pt_regs *regs, struct mcontext __user *sr,

arch/powerpc/kernel/signal_32.c

720

struct mcontext __user *tm_sr)

arch/powerpc/kernel/signal_32.c

739

struct rt_sigframe __user *frame;

arch/powerpc/kernel/signal_32.c

740

struct mcontext __user *mctx;

arch/powerpc/kernel/signal_32.c

741

struct mcontext __user *tm_mctx = NULL;

arch/powerpc/kernel/signal_32.c

808

if (put_user(regs->gpr[1], (u32 __user *)newsp))

arch/powerpc/kernel/signal_32.c

838

struct sigcontext __user *sc;

arch/powerpc/kernel/signal_32.c

839

struct sigframe __user *frame;

arch/powerpc/kernel/signal_32.c

840

struct mcontext __user *mctx;

arch/powerpc/kernel/signal_32.c

841

struct mcontext __user *tm_mctx = NULL;

arch/powerpc/kernel/signal_32.c

861

sc = (struct sigcontext __user *) &frame->sctx;

arch/powerpc/kernel/signal_32.c

899

if (put_user(regs->gpr[1], (u32 __user *)newsp))

arch/powerpc/kernel/signal_32.c

92

__unsafe_save_general_regs(struct pt_regs *regs, struct mcontext __user *frame)

arch/powerpc/kernel/signal_32.c

920

static int do_setcontext(struct ucontext __user *ucp, struct pt_regs *regs, int sig)

arch/powerpc/kernel/signal_32.c

923

struct mcontext __user *mcp;

arch/powerpc/kernel/signal_32.c

934

mcp = (struct mcontext __user *)(u64)cmcp;

arch/powerpc/kernel/signal_32.c

953

static int do_setcontext_tm(struct ucontext __user *ucp,

arch/powerpc/kernel/signal_32.c

954

struct ucontext __user *tm_ucp,

arch/powerpc/kernel/signal_32.c

958

struct mcontext __user *mcp;

arch/powerpc/kernel/signal_32.c

959

struct mcontext __user *tm_mcp;

arch/powerpc/kernel/signal_32.c

973

mcp = (struct mcontext __user *)(u64)cmcp;

arch/powerpc/kernel/signal_32.c

974

tm_mcp = (struct mcontext __user *)(u64)tm_cmcp;

arch/powerpc/kernel/signal_32.c

990

COMPAT_SYSCALL_DEFINE3(swapcontext, struct ucontext __user *, old_ctx,

arch/powerpc/kernel/signal_32.c

991

struct ucontext __user *, new_ctx, int, ctx_size)

arch/powerpc/kernel/signal_32.c

993

SYSCALL_DEFINE3(swapcontext, struct ucontext __user *, old_ctx,

arch/powerpc/kernel/signal_32.c

994

struct ucontext __user *, new_ctx, long, ctx_size)

arch/powerpc/kernel/signal_64.c

114

static long notrace __unsafe_setup_sigcontext(struct sigcontext __user *sc,

arch/powerpc/kernel/signal_64.c

127

elf_vrreg_t __user *v_regs = sigcontext_vmx_regs(sc);

arch/powerpc/kernel/signal_64.c

152

unsafe_put_user(tsk->thread.vrsave, (u32 __user *)&v_regs[33], efault_out);

arch/powerpc/kernel/signal_64.c

206

static long setup_tm_sigcontexts(struct sigcontext __user *sc,

arch/powerpc/kernel/signal_64.c

207

struct sigcontext __user *tm_sc,

arch/powerpc/kernel/signal_64.c

221

elf_vrreg_t __user *v_regs = sigcontext_vmx_regs(sc);

arch/powerpc/kernel/signal_64.c

222

elf_vrreg_t __user *tm_v_regs = sigcontext_vmx_regs(tm_sc);

arch/powerpc/kernel/signal_64.c

270

err |= __put_user(tsk->thread.ckvrsave, (u32 __user *)&v_regs[33]);

arch/powerpc/kernel/signal_64.c

273

(u32 __user *)&tm_v_regs[33]);

arch/powerpc/kernel/signal_64.c

276

(u32 __user *)&tm_v_regs[33]);

arch/powerpc/kernel/signal_64.c

338

int sig, struct sigcontext __user *sc)

arch/powerpc/kernel/signal_64.c

341

elf_vrreg_t __user *v_regs;

arch/powerpc/kernel/signal_64.c

403

unsafe_get_user(tsk->thread.vrsave, (u32 __user *)&v_regs[33], efault_out);

arch/powerpc/kernel/signal_64.c

438

struct sigcontext __user *sc,

arch/powerpc/kernel/signal_64.c

439

struct sigcontext __user *tm_sc)

arch/powerpc/kernel/signal_64.c

442

elf_vrreg_t __user *v_regs, *tm_v_regs;

arch/powerpc/kernel/signal_64.c

532

(u32 __user *)&v_regs[33]);

arch/powerpc/kernel/signal_64.c

534

(u32 __user *)&tm_v_regs[33]);

arch/powerpc/kernel/signal_64.c

614

static long restore_tm_sigcontexts(struct task_struct *tsk, struct sigcontext __user *sc,

arch/powerpc/kernel/signal_64.c

615

struct sigcontext __user *tm_sc)

arch/powerpc/kernel/signal_64.c

62

struct siginfo __user *pinfo;

arch/powerpc/kernel/signal_64.c

624

static long setup_trampoline(unsigned int syscall, unsigned int __user *tramp)

arch/powerpc/kernel/signal_64.c

63

void __user *puc;

arch/powerpc/kernel/signal_64.c

657

SYSCALL_DEFINE3(swapcontext, struct ucontext __user *, old_ctx,

arch/powerpc/kernel/signal_64.c

658

struct ucontext __user *, new_ctx, long, ctx_size)

arch/powerpc/kernel/signal_64.c

699

fault_in_readable((char __user *)new_ctx, ctx_size))

arch/powerpc/kernel/signal_64.c

747

struct ucontext __user *uc = (struct ucontext __user *)regs->gpr[1];

arch/powerpc/kernel/signal_64.c

806

struct ucontext __user *uc_transact;

arch/powerpc/kernel/signal_64.c

81

static elf_vrreg_t __user *sigcontext_vmx_regs(struct sigcontext __user *sc)

arch/powerpc/kernel/signal_64.c

83

return (elf_vrreg_t __user *) (((unsigned long)sc->vmx_reserve + 15) & ~0xful);

arch/powerpc/kernel/signal_64.c

860

struct rt_sigframe __user *frame;

arch/powerpc/kernel/signal_64.c

935

err |= put_user(regs->gpr[1], (unsigned long __user *)newsp);

arch/powerpc/kernel/signal_64.c

947

struct func_desc __user *ptr =

arch/powerpc/kernel/signal_64.c

948

(struct func_desc __user *)ksig->ka.sa.sa_handler;

arch/powerpc/kernel/sys_ppc32.c

72

char __user *, ubuf, compat_size_t, count,

arch/powerpc/kernel/sys_ppc32.c

80

const char __user *, ubuf, compat_size_t, count,

arch/powerpc/kernel/sys_ppc32.c

94

const char __user *, path, u32, reg4,

arch/powerpc/kernel/traps.c

1261

if (get_user(val, (u8 __user *)EA))

arch/powerpc/kernel/traps.c

1272

if (put_user(val, (u8 __user *)EA))

arch/powerpc/kernel/traps.c

1355

if (get_user(instword, (u32 __user *)(regs->nip)))

arch/powerpc/kernel/traps.c

1577

if (get_user_instr(insn, (void __user *)regs->nip)) {

arch/powerpc/kernel/traps.c

1799

if (get_user(instword, (u32 __user *)(regs->nip))) {

arch/powerpc/kernel/traps.c

306

force_sig_fault(SIGTRAP, TRAP_TRACE, (void __user *)regs->nip);

arch/powerpc/kernel/traps.c

364

force_sig_pkuerr((void __user *) addr, key);

arch/powerpc/kernel/traps.c

372

force_sig_fault(signr, code, (void __user *)addr);

arch/powerpc/kernel/traps.c

887

const void __user *addr;

arch/powerpc/kernel/traps.c

892

if (__get_user(instr, (unsigned int __user *)regs->nip))

arch/powerpc/kernel/traps.c

933

addr = (__force const void __user *)ea;

arch/powerpc/kernel/vdso.c

151

mm->context.vdso = (void __user *)vdso_base + vvar_size;

arch/powerpc/kernel/vdso.c

52

current->mm->context.vdso = (void __user *)new_vma->vm_start;

arch/powerpc/kernel/vecemu.c

269

if (get_user_instr(instr, (void __user *)regs->nip))

arch/powerpc/kvm/book3s_32_mmu.c

209

if(copy_from_user(pteg, (void __user *)ptegp, sizeof(pteg))) {

arch/powerpc/kvm/book3s_32_mmu.c

256

char __user *addr = (char __user *) (ptegp + (i+1) * sizeof(u32));

arch/powerpc/kvm/book3s_64_mmu.c

251

if(copy_from_user(pteg, (void __user *)ptegp, sizeof(pteg))) {

arch/powerpc/kvm/book3s_64_mmu.c

336

char __user *addr = (char __user *) (ptegp + (i + 1) * sizeof(u64));

arch/powerpc/kvm/book3s_64_mmu.c

343

char __user *addr = (char __user *) (ptegp + (i + 1) * sizeof(u64));

arch/powerpc/kvm/book3s_64_mmu_hv.c

1696

static ssize_t kvm_htab_read(struct file *file, char __user *buf,

arch/powerpc/kvm/book3s_64_mmu_hv.c

1705

unsigned long __user *lbuf;

arch/powerpc/kvm/book3s_64_mmu_hv.c

1706

struct kvm_get_htab_header __user *hptr;

arch/powerpc/kvm/book3s_64_mmu_hv.c

1722

lbuf = (unsigned long __user *)buf;

arch/powerpc/kvm/book3s_64_mmu_hv.c

1727

hptr = (struct kvm_get_htab_header __user *)buf;

arch/powerpc/kvm/book3s_64_mmu_hv.c

1732

lbuf = (unsigned long __user *)(buf + sizeof(hdr));

arch/powerpc/kvm/book3s_64_mmu_hv.c

1777

buf = (char __user *)lbuf;

arch/powerpc/kvm/book3s_64_mmu_hv.c

1795

static ssize_t kvm_htab_write(struct file *file, const char __user *buf,

arch/powerpc/kvm/book3s_64_mmu_hv.c

1803

unsigned long __user *lbuf;

arch/powerpc/kvm/book3s_64_mmu_hv.c

1850

lbuf = (unsigned long __user *)buf;

arch/powerpc/kvm/book3s_64_mmu_hv.c

2009

static ssize_t debugfs_htab_read(struct file *file, char __user *buf,

arch/powerpc/kvm/book3s_64_mmu_hv.c

2091

static ssize_t debugfs_htab_write(struct file *file, const char __user *buf,

arch/powerpc/kvm/book3s_64_mmu_radix.c

1280

static ssize_t debugfs_radix_read(struct file *file, char __user *buf,

arch/powerpc/kvm/book3s_64_mmu_radix.c

1432

static ssize_t debugfs_radix_write(struct file *file, const char __user *buf,

arch/powerpc/kvm/book3s_64_mmu_radix.c

80

ret = __copy_from_user_inatomic(to, (const void __user *)from, n);

arch/powerpc/kvm/book3s_64_mmu_radix.c

82

ret = __copy_to_user_inatomic((void __user *)to, from, n);

arch/powerpc/kvm/book3s_64_vio.c

636

u64 __user *tces;

arch/powerpc/kvm/book3s_64_vio.c

664

tces = (u64 __user *) ua;

arch/powerpc/kvm/book3s_hv.c

1002

r = raw_copy_in_user((void __user *)to_addr, (void __user *)from_addr,

arch/powerpc/kvm/book3s_hv.c

2864

static ssize_t debugfs_timings_read(struct file *file, char __user *buf,

arch/powerpc/kvm/book3s_hv.c

2929

static ssize_t debugfs_timings_write(struct file *file, const char __user *buf,

arch/powerpc/kvm/book3s_hv.c

6149

void __user *argp = (void __user *)arg;

arch/powerpc/kvm/book3s_hv.c

6164

if (get_user(htab_order, (u32 __user *)argp))

arch/powerpc/kvm/book3s_pr_papr.c

110

if (copy_to_user((void __user *)pteg, &v, sizeof(v)))

arch/powerpc/kvm/book3s_pr_papr.c

179

if (copy_from_user(pte, (void __user *)pteg, sizeof(pte))) {

arch/powerpc/kvm/book3s_pr_papr.c

195

if (copy_to_user((void __user *)pteg, &v, sizeof(v))) {

arch/powerpc/kvm/book3s_pr_papr.c

226

if (copy_from_user(pte, (void __user *)pteg, sizeof(pte)))

arch/powerpc/kvm/book3s_pr_papr.c

251

if (copy_to_user((void __user *)pteg, pte, sizeof(pte)))

arch/powerpc/kvm/book3s_pr_papr.c

51

if (copy_from_user(pteg, (void __user *)pteg_addr, sizeof(pteg)))

arch/powerpc/kvm/book3s_pr_papr.c

74

if (copy_to_user((void __user *)pteg_addr, hpte, HPTE_SIZE))

arch/powerpc/kvm/book3s_pr_papr.c

98

if (copy_from_user(pte, (void __user *)pteg, sizeof(pte)))

arch/powerpc/kvm/book3s_rtas.c

198

int kvm_vm_ioctl_rtas_define_token(struct kvm *kvm, void __user *argp)

arch/powerpc/kvm/book3s_xics.c

1181

u64 __user *ubufp = (u64 __user *) addr;

arch/powerpc/kvm/book3s_xics.c

1230

u64 __user *ubufp = (u64 __user *) addr;

arch/powerpc/kvm/book3s_xive.c

2185

u64 __user *ubufp = (u64 __user *) addr;

arch/powerpc/kvm/book3s_xive.c

2328

u64 __user *ubufp = (u64 __user *) addr;

arch/powerpc/kvm/book3s_xive.c

2526

u32 __user *ubufp = (u32 __user *) addr;

arch/powerpc/kvm/book3s_xive_native.c

344

u64 __user *ubufp = (u64 __user *) addr;

arch/powerpc/kvm/book3s_xive_native.c

468

u64 __user *ubufp = (u64 __user *) addr;

arch/powerpc/kvm/book3s_xive_native.c

565

void __user *ubufp = (void __user *) addr;

arch/powerpc/kvm/book3s_xive_native.c

714

void __user *ubufp = (u64 __user *) addr;

arch/powerpc/kvm/e500_mmu.c

747

if (copy_from_user(&params, (void __user *)(uintptr_t)cfg->params,

arch/powerpc/kvm/mpic.c

1463

if (copy_from_user(&base, (u64 __user *)(long)attr->addr, sizeof(u64)))

arch/powerpc/kvm/mpic.c

1532

if (get_user(attr32, (u32 __user *)(long)attr->addr))

arch/powerpc/kvm/mpic.c

1541

if (get_user(attr32, (u32 __user *)(long)attr->addr))

arch/powerpc/kvm/mpic.c

1571

if (copy_to_user((u64 __user *)(long)attr->addr,

arch/powerpc/kvm/mpic.c

1585

if (put_user(attr32, (u32 __user *)(long)attr->addr))

arch/powerpc/kvm/mpic.c

1598

if (put_user(attr32, (u32 __user *)(long)attr->addr))

arch/powerpc/kvm/powerpc.c

1726

if (copy_to_user((char __user *)(unsigned long)reg->addr, &val, size))

arch/powerpc/kvm/powerpc.c

1742

if (copy_from_user(&val, (char __user *)(unsigned long)reg->addr, size))

arch/powerpc/kvm/powerpc.c

1912

void __user *user_ptr = (void __user *)(uintptr_t)cap->args[0];

arch/powerpc/kvm/powerpc.c

2029

void __user *argp = (void __user *)arg;

arch/powerpc/kvm/powerpc.c

2044

void __user *argp = (void __user *)arg;

arch/powerpc/kvm/powerpc.c

2359

void __user *argp = (void __user *)arg;

arch/powerpc/kvm/timing.c

162

const char __user *user_buf,

arch/powerpc/lib/pmem.c

69

size_t copy_from_user_flushcache(void *dest, const void __user *src,

arch/powerpc/lib/sstep.c

1046

unsafe_put_user(0, (unsigned long __user *)(ea + i), Efault);

arch/powerpc/lib/sstep.c

1056

void __user *uea = (void __user *)ea;

arch/powerpc/lib/sstep.c

110

if (access_ok((void __user *)ea, nb))

arch/powerpc/lib/sstep.c

112

if (access_ok((void __user *)ea, 1))

arch/powerpc/lib/sstep.c

307

unsafe_get_user(x, (unsigned char __user *)ea, Efault);

arch/powerpc/lib/sstep.c

310

unsafe_get_user(x, (unsigned short __user *)ea, Efault);

arch/powerpc/lib/sstep.c

313

unsafe_get_user(x, (unsigned int __user *)ea, Efault);

arch/powerpc/lib/sstep.c

317

unsafe_get_user(x, (unsigned long __user *)ea, Efault);

arch/powerpc/lib/sstep.c

332

void __user *uea = (void __user *)ea;

arch/powerpc/lib/sstep.c

359

unsafe_get_user(*dest, (u8 __user *)ea, Efault);

arch/powerpc/lib/sstep.c

362

unsafe_get_user(*(u16 *)dest, (u16 __user *)ea, Efault);

arch/powerpc/lib/sstep.c

365

unsafe_get_user(*(u32 *)dest, (u32 __user *)ea, Efault);

arch/powerpc/lib/sstep.c

369

unsafe_get_user(*(u64 *)dest, (u64 __user *)ea, Efault);

arch/powerpc/lib/sstep.c

385

void __user *uea = (void __user *)ea;

arch/powerpc/lib/sstep.c

438

unsafe_put_user(val, (unsigned char __user *)ea, Efault);

arch/powerpc/lib/sstep.c

441

unsafe_put_user(val, (unsigned short __user *)ea, Efault);

arch/powerpc/lib/sstep.c

444

unsafe_put_user(val, (unsigned int __user *)ea, Efault);

arch/powerpc/lib/sstep.c

448

unsafe_put_user(val, (unsigned long __user *)ea, Efault);

arch/powerpc/lib/sstep.c

462

void __user *uea = (void __user *)ea;

arch/powerpc/lib/sstep.c

489

unsafe_put_user(*dest, (u8 __user *)ea, Efault);

arch/powerpc/lib/sstep.c

492

unsafe_put_user(*(u16 *)dest, (u16 __user *)ea, Efault);

arch/powerpc/lib/sstep.c

495

unsafe_put_user(*(u32 *)dest, (u32 __user *)ea, Efault);

arch/powerpc/lib/sstep.c

499

unsafe_put_user(*(u64 *)dest, (u64 __user *)ea, Efault);

arch/powerpc/lib/sstep.c

515

void __user *uea = (void __user *)ea;

arch/powerpc/math-emu/math.c

237

if (get_user(insn, (u32 __user *)pc))

arch/powerpc/math-emu/math_efp.c

185

if (get_user(speinsn, (unsigned int __user *) regs->nip))

arch/powerpc/math-emu/math_efp.c

734

if (get_user(speinsn, (unsigned int __user *) regs->nip))

arch/powerpc/mm/book3s64/subpage_prot.c

185

unsigned long, len, u32 __user *, map)

arch/powerpc/mm/fault.c

159

force_sig_mceerr(BUS_MCEERR_AR, (void __user *)address, lsb);

arch/powerpc/mm/fault.c

164

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *)address);

arch/powerpc/perf/callchain.h

24

static inline int __read_user_stack(const void __user *ptr, void *ret,

arch/powerpc/perf/callchain_32.c

101

static unsigned int __user *signal_frame_32_regs(unsigned int sp,

arch/powerpc/perf/callchain_32.c

104

struct mcontext32 __user *mctx = NULL;

arch/powerpc/perf/callchain_32.c

105

struct signal_frame_32 __user *sf;

arch/powerpc/perf/callchain_32.c

106

struct rt_signal_frame_32 __user *rt_sf;

arch/powerpc/perf/callchain_32.c

117

sf = (struct signal_frame_32 __user *) (unsigned long) sp;

arch/powerpc/perf/callchain_32.c

124

rt_sf = (struct rt_signal_frame_32 __user *) (unsigned long) sp;

arch/powerpc/perf/callchain_32.c

140

unsigned int __user *fp, *uregs;

arch/powerpc/perf/callchain_32.c

147

fp = (unsigned int __user *) (unsigned long) sp;

arch/powerpc/perf/callchain_32.c

33

static int read_user_stack_32(const unsigned int __user *ptr, unsigned int *ret)

arch/powerpc/perf/callchain_32.c

81

struct signal_frame_32 __user *sf;

arch/powerpc/perf/callchain_32.c

84

sf = (struct signal_frame_32 __user *) (unsigned long) sp;

arch/powerpc/perf/callchain_32.c

85

if (read_user_stack_32((unsigned int __user *) &sf->sctx.regs, &regs))

arch/powerpc/perf/callchain_32.c

92

struct rt_signal_frame_32 __user *sf;

arch/powerpc/perf/callchain_32.c

95

sf = (struct rt_signal_frame_32 __user *) (unsigned long) sp;

arch/powerpc/perf/callchain_32.c

96

if (read_user_stack_32((unsigned int __user *) &sf->uc.uc_regs, &regs))

arch/powerpc/perf/callchain_64.c

101

sigframe = (struct signal_frame_64 __user *) sp;

arch/powerpc/perf/callchain_64.c

21

static int read_user_stack_64(const unsigned long __user *ptr, unsigned long *ret)

arch/powerpc/perf/callchain_64.c

56

struct signal_frame_64 __user *sf;

arch/powerpc/perf/callchain_64.c

59

sf = (struct signal_frame_64 __user *) sp;

arch/powerpc/perf/callchain_64.c

60

if (read_user_stack_64((unsigned long __user *) &sf->pinfo, &pinfo) ||

arch/powerpc/perf/callchain_64.c

61

read_user_stack_64((unsigned long __user *) &sf->puc, &puc))

arch/powerpc/perf/callchain_64.c

74

struct signal_frame_64 __user *sigframe;

arch/powerpc/perf/callchain_64.c

75

unsigned long __user *fp, *uregs;

arch/powerpc/perf/callchain_64.c

82

fp = (unsigned long __user *) sp;

arch/powerpc/perf/core-book3s.c

475

if (copy_from_user_nofault(&instr, (unsigned int __user *)addr,

arch/powerpc/platforms/52xx/mpc52xx_gpt.c

534

static ssize_t mpc52xx_wdt_write(struct file *file, const char __user *data,

arch/powerpc/platforms/52xx/mpc52xx_gpt.c

551

int __user *data = (int __user *)arg;

arch/powerpc/platforms/book3s/vas-api.c

154

void __user *csb_addr;

arch/powerpc/platforms/book3s/vas-api.c

165

csb_addr = (void __user *)be64_to_cpu(crb->csb_addr);

arch/powerpc/platforms/book3s/vas-api.c

282

void __user *uptr = (void __user *)arg;

arch/powerpc/platforms/book3s/vas-api.c

375

if (get_user(instword, (u32 __user *)(regs->nip)))

arch/powerpc/platforms/cell/spu_syscalls.c

61

SYSCALL_DEFINE4(spu_create, const char __user *, name, unsigned int, flags,

arch/powerpc/platforms/cell/spu_syscalls.c

78

SYSCALL_DEFINE3(spu_run,int, fd, __u32 __user *, unpc, __u32 __user *, ustatus)

arch/powerpc/platforms/cell/spufs/fault.c

38

force_sig_fault(SIGSEGV, SEGV_ACCERR, (void __user *)ea);

arch/powerpc/platforms/cell/spufs/fault.c

47

(void __user *)(unsigned long)

arch/powerpc/platforms/cell/spufs/file.c

103

static ssize_t spufs_attr_write(struct file *file, const char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

1098

static ssize_t __spufs_signal2_read(struct spu_context *ctx, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

1111

static ssize_t spufs_signal2_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

1126

static ssize_t spufs_signal2_write(struct file *file, const char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

1483

static ssize_t spufs_mfc_read(struct file *file, char __user *buffer,

arch/powerpc/platforms/cell/spufs/file.c

1609

static ssize_t spufs_mfc_write(struct file *file, const char __user *buffer,

arch/powerpc/platforms/cell/spufs/file.c

190

spufs_mem_read(struct file *file, char __user *buffer,

arch/powerpc/platforms/cell/spufs/file.c

1936

static ssize_t spufs_mbox_info_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

1974

static ssize_t spufs_ibox_info_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

2015

static ssize_t spufs_wbox_info_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

207

spufs_mem_write(struct file *file, const char __user *buffer,

arch/powerpc/platforms/cell/spufs/file.c

2071

static ssize_t spufs_dma_info_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

2124

static ssize_t spufs_proxydma_info_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

2334

static ssize_t spufs_switch_log_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

477

spufs_regs_read(struct file *file, char __user *buffer,

arch/powerpc/platforms/cell/spufs/file.c

498

spufs_regs_write(struct file *file, const char __user *buffer,

arch/powerpc/platforms/cell/spufs/file.c

534

spufs_fpcr_read(struct file *file, char __user * buffer,

arch/powerpc/platforms/cell/spufs/file.c

550

spufs_fpcr_write(struct file *file, const char __user * buffer,

arch/powerpc/platforms/cell/spufs/file.c

595

static ssize_t spufs_mbox_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

599

u32 mbox_data, __user *udata = (void __user *)buf;

arch/powerpc/platforms/cell/spufs/file.c

640

static ssize_t spufs_mbox_stat_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

696

static ssize_t spufs_ibox_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

70

static ssize_t spufs_attr_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

700

u32 ibox_data, __user *udata = (void __user *)buf;

arch/powerpc/platforms/cell/spufs/file.c

773

static ssize_t spufs_ibox_stat_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

827

static ssize_t spufs_wbox_write(struct file *file, const char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

831

u32 wbox_data, __user *udata = (void __user *)buf;

arch/powerpc/platforms/cell/spufs/file.c

903

static ssize_t spufs_wbox_stat_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

965

static ssize_t __spufs_signal1_read(struct spu_context *ctx, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

978

static ssize_t spufs_signal1_read(struct file *file, char __user *buf,

arch/powerpc/platforms/cell/spufs/file.c

993

static ssize_t spufs_signal1_write(struct file *file, const char __user *buf,

arch/powerpc/platforms/cell/spufs/syscalls.c

35

__u32 __user *unpc,

arch/powerpc/platforms/cell/spufs/syscalls.c

36

__u32 __user *ustatus)

arch/powerpc/platforms/cell/spufs/syscalls.c

63

static long do_spu_create(const char __user *pathname, unsigned int flags,

arch/powerpc/platforms/powernv/eeh-powernv.c

66

const char __user *user_buf,

arch/powerpc/platforms/powernv/memtrace.c

40

static ssize_t memtrace_read(struct file *filp, char __user *ubuf,

arch/powerpc/platforms/powernv/opal-lpc.c

184

static ssize_t lpc_debug_read(struct file *filp, char __user *ubuf,

arch/powerpc/platforms/powernv/opal-lpc.c

250

rc = __put_user((u32)data, (u32 __user *)ubuf);

arch/powerpc/platforms/powernv/opal-lpc.c

256

rc = __put_user((u16)data, (u16 __user *)ubuf);

arch/powerpc/platforms/powernv/opal-lpc.c

262

rc = __put_user((u8)data, (u8 __user *)ubuf);

arch/powerpc/platforms/powernv/opal-lpc.c

275

static ssize_t lpc_debug_write(struct file *filp, const char __user *ubuf,

arch/powerpc/platforms/powernv/opal-lpc.c

320

rc = __get_user(data, (u32 __user *)ubuf);

arch/powerpc/platforms/powernv/opal-lpc.c

324

rc = __get_user(data, (u16 __user *)ubuf);

arch/powerpc/platforms/powernv/opal-lpc.c

328

rc = __get_user(data, (u8 __user *)ubuf);

arch/powerpc/platforms/powernv/opal-prd.c

159

static ssize_t opal_prd_read(struct file *file, char __user *buf,

arch/powerpc/platforms/powernv/opal-prd.c

222

static ssize_t opal_prd_write(struct file *file, const char __user *buf,

arch/powerpc/platforms/powernv/opal-prd.c

282

rc = copy_to_user((void __user *)param, &info, sizeof(info));

arch/powerpc/platforms/powernv/opal-prd.c

288

rc = copy_from_user(&scom, (void __user *)param, sizeof(scom));

arch/powerpc/platforms/powernv/opal-prd.c

298

rc = copy_to_user((void __user *)param, &scom, sizeof(scom));

arch/powerpc/platforms/powernv/opal-prd.c

304

rc = copy_from_user(&scom, (void __user *)param, sizeof(scom));

arch/powerpc/platforms/powernv/opal-prd.c

312

rc = copy_to_user((void __user *)param, &scom, sizeof(scom));

arch/powerpc/platforms/powernv/opal-xscom.c

118

static ssize_t scom_debug_write(struct file *filp, const char __user *ubuf,

arch/powerpc/platforms/powernv/opal-xscom.c

122

u64 __user *ubuf64 = (u64 __user *)ubuf;

arch/powerpc/platforms/powernv/opal-xscom.c

87

static ssize_t scom_debug_read(struct file *filp, char __user *ubuf,

arch/powerpc/platforms/powernv/opal-xscom.c

91

u64 __user *ubuf64 = (u64 __user *)ubuf;

arch/powerpc/platforms/pseries/dtl.c

260

static ssize_t dtl_file_read(struct file *filp, char __user *buf, size_t len,

arch/powerpc/platforms/pseries/htmdump.c

119

static ssize_t htmsystem_mem_read(struct file *filp, char __user *ubuf,

arch/powerpc/platforms/pseries/htmdump.c

287

static ssize_t htmstatus_read(struct file *filp, char __user *ubuf,

arch/powerpc/platforms/pseries/htmdump.c

347

static ssize_t htminfo_read(struct file *filp, char __user *ubuf,

arch/powerpc/platforms/pseries/htmdump.c

396

static ssize_t htmcaps_read(struct file *filp, char __user *ubuf,

arch/powerpc/platforms/pseries/htmdump.c

87

static ssize_t htmdump_read(struct file *filp, char __user *ubuf,

arch/powerpc/platforms/pseries/lpar.c

1995

static ssize_t vpa_file_read(struct file *filp, char __user *buf, size_t len,

arch/powerpc/platforms/pseries/lpar.c

501

static ssize_t vcpudispatch_stats_write(struct file *file, const char __user *p,

arch/powerpc/platforms/pseries/lpar.c

601

const char __user *p, size_t count, loff_t *ppos)

arch/powerpc/platforms/pseries/lparcfg.c

690

static ssize_t lparcfg_write(struct file *file, const char __user * buf,

arch/powerpc/platforms/pseries/papr-hvpipe.c

181

static int hvpipe_rtas_recv_msg(char __user *buf, int size)

arch/powerpc/platforms/pseries/papr-hvpipe.c

231

const char __user *buf, size_t size, loff_t *off)

arch/powerpc/platforms/pseries/papr-hvpipe.c

327

char __user *buf, size_t size, loff_t *off)

arch/powerpc/platforms/pseries/papr-hvpipe.c

545

u32 __user *argp = (void __user *)arg;

arch/powerpc/platforms/pseries/papr-indices.c

201

char __user *buf, size_t size, loff_t *off)

arch/powerpc/platforms/pseries/papr-indices.c

245

static long papr_indices_create_handle(struct papr_indices_io_block __user *ubuf)

arch/powerpc/platforms/pseries/papr-indices.c

276

papr_dynamic_indice_buf_from_user(struct papr_indices_io_block __user *ubuf,

arch/powerpc/platforms/pseries/papr-indices.c

327

static long papr_dynamic_indicator_ioc_set(struct papr_indices_io_block __user *ubuf)

arch/powerpc/platforms/pseries/papr-indices.c

385

static long papr_dynamic_sensor_ioc_get(struct papr_indices_io_block __user *ubuf)

arch/powerpc/platforms/pseries/papr-indices.c

441

void __user *argp = (__force void __user *)arg;

arch/powerpc/platforms/pseries/papr-phy-attest.c

219

static long papr_phy_attest_create_handle(struct papr_phy_attest_io_block __user *ulc)

arch/powerpc/platforms/pseries/papr-phy-attest.c

257

void __user *argp = (__force void __user *)arg;

arch/powerpc/platforms/pseries/papr-platform-dump.c

147

char __user *buf, size_t size, loff_t *off)

arch/powerpc/platforms/pseries/papr-platform-dump.c

238

u64 __user *argp = (void __user *)arg;

arch/powerpc/platforms/pseries/papr-platform-dump.c

360

u64 __user *argp = (void __user *)arg;

arch/powerpc/platforms/pseries/papr-rtas-common.c

265

char __user *buf, size_t size, loff_t *off)

arch/powerpc/platforms/pseries/papr-rtas-common.h

55

char __user *buf, size_t size, loff_t *off);

arch/powerpc/platforms/pseries/papr-sysparm.c

206

papr_sysparm_buf_from_user(const struct papr_sysparm_io_block __user *user_iob)

arch/powerpc/platforms/pseries/papr-sysparm.c

244

struct papr_sysparm_io_block __user *user_iob)

arch/powerpc/platforms/pseries/papr-sysparm.c

260

static long papr_sysparm_ioctl_get(struct papr_sysparm_io_block __user *user_iob)

arch/powerpc/platforms/pseries/papr-sysparm.c

289

static long papr_sysparm_ioctl_set(struct papr_sysparm_io_block __user *user_iob)

arch/powerpc/platforms/pseries/papr-sysparm.c

315

void __user *argp = (__force void __user *)arg;

arch/powerpc/platforms/pseries/papr-vpd.c

211

static long papr_vpd_create_handle(struct papr_location_code __user *ulc)

arch/powerpc/platforms/pseries/papr-vpd.c

244

void __user *argp = (__force void __user *)arg;

arch/powerpc/platforms/pseries/reconfig.c

358

static ssize_t ofdt_write(struct file *file, const char __user *buf, size_t count,

arch/powerpc/sysdev/fsl_pci.c

1084

(void __user *)regs->nip, sizeof(inst));

arch/riscv/include/asm/futex.h

37

arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *uaddr)

arch/riscv/include/asm/futex.h

76

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/riscv/include/asm/kvm_host.h

303

u64 __user *uindices);

arch/riscv/include/asm/kvm_vcpu_sbi.h

82

int kvm_riscv_vcpu_reg_indices_sbi_ext(struct kvm_vcpu *vcpu, u64 __user *uindices);

arch/riscv/include/asm/kvm_vcpu_sbi.h

87

int kvm_riscv_vcpu_reg_indices_sbi(struct kvm_vcpu *vcpu, u64 __user *uindices);

arch/riscv/include/asm/uaccess.h

141

u32 __user *__ptr = (u32 __user *)(ptr); \

arch/riscv/include/asm/uaccess.h

159

u32 __user *__ptr = (u32 __user *)(ptr); \

arch/riscv/include/asm/uaccess.h

183

unsigned long __must_check __asm_copy_to_user_sum_enabled(void __user *to,

arch/riscv/include/asm/uaccess.h

186

const void __user *from, unsigned long n);

arch/riscv/include/asm/uaccess.h

248

const __typeof__(*(ptr)) __user *__gu_ptr = untagged_addr(ptr); \

arch/riscv/include/asm/uaccess.h

282

const __typeof__(*(ptr)) __user *__p = (ptr); \

arch/riscv/include/asm/uaccess.h

305

u32 __user *__ptr = (u32 __user *)(ptr); \

arch/riscv/include/asm/uaccess.h

379

__typeof__(*(ptr)) __user *__gu_ptr = untagged_addr(ptr); \

arch/riscv/include/asm/uaccess.h

410

__typeof__(*(ptr)) __user *__p = (ptr); \

arch/riscv/include/asm/uaccess.h

418

unsigned long __must_check __asm_copy_to_user(void __user *to,

arch/riscv/include/asm/uaccess.h

421

const void __user *from, unsigned long n);

arch/riscv/include/asm/uaccess.h

424

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/riscv/include/asm/uaccess.h

430

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/riscv/include/asm/uaccess.h

435

extern long strncpy_from_user(char *dest, const char __user *src, long count);

arch/riscv/include/asm/uaccess.h

437

extern long __must_check strnlen_user(const char __user *str, long n);

arch/riscv/include/asm/uaccess.h

440

unsigned long __must_check __clear_user(void __user *addr, unsigned long n);

arch/riscv/include/asm/uaccess.h

443

unsigned long __must_check clear_user(void __user *to, unsigned long n)

arch/riscv/include/asm/uaccess.h

451

__get_user_nocheck(*((type *)(dst)), (__force __user type *)(src), err_label)

arch/riscv/include/asm/uaccess.h

454

__put_user_nocheck(*((type *)(src)), (__force __user type *)(dst), err_label)

arch/riscv/include/asm/uaccess.h

456

static __must_check __always_inline bool user_access_begin(const void __user *ptr, size_t len)

arch/riscv/include/asm/vdso.h

31

(void __user *)((unsigned long)(base) + __vdso_##name##_cfi_offset) : \

arch/riscv/include/asm/vdso.h

32

(void __user *)((unsigned long)(base) + __vdso_##name##_offset))

arch/riscv/include/asm/vdso.h

35

((void __user *)((unsigned long)(base) + __vdso_##name##_offset))

arch/riscv/include/asm/vdso.h

42

(void __user *)((unsigned long)(base) + compat__vdso_##name##_offset)

arch/riscv/kernel/compat_signal.c

103

struct compat_sigcontext __user *sc)

arch/riscv/kernel/compat_signal.c

124

struct compat_rt_sigframe __user *frame;

arch/riscv/kernel/compat_signal.c

131

frame = (struct compat_rt_sigframe __user *)regs->sp;

arch/riscv/kernel/compat_signal.c

161

static long compat_setup_sigcontext(struct compat_rt_sigframe __user *frame,

arch/riscv/kernel/compat_signal.c

164

struct compat_sigcontext __user *sc = &frame->uc.uc_mcontext;

arch/riscv/kernel/compat_signal.c

178

static inline void __user *compat_get_sigframe(struct ksignal *ksig,

arch/riscv/kernel/compat_signal.c

190

return (void __user __force *)(-1UL);

arch/riscv/kernel/compat_signal.c

198

return (void __user *)sp;

arch/riscv/kernel/compat_signal.c

204

struct compat_rt_sigframe __user *frame;

arch/riscv/kernel/compat_signal.c

50

union __riscv_fp_state __user *sc_fpregs)

arch/riscv/kernel/compat_signal.c

53

struct __riscv_d_ext_state __user *state = &sc_fpregs->d;

arch/riscv/kernel/compat_signal.c

77

union __riscv_fp_state __user *sc_fpregs)

arch/riscv/kernel/compat_signal.c

80

struct __riscv_d_ext_state __user *state = &sc_fpregs->d;

arch/riscv/kernel/process.c

64

return put_user(tsk->thread.align_ctl, (unsigned int __user *)adr);

arch/riscv/kernel/ptrace.c

220

const void *kbuf, const void __user *ubuf)

arch/riscv/kernel/ptrace.c

281

const void *kbuf, const void __user *ubuf)

arch/riscv/kernel/ptrace.c

334

const void *kbuf, const void __user *ubuf)

arch/riscv/kernel/ptrace.c

51

const void *kbuf, const void __user *ubuf)

arch/riscv/kernel/ptrace.c

574

const void *kbuf, const void __user *ubuf)

arch/riscv/kernel/ptrace.c

77

const void *kbuf, const void __user *ubuf)

arch/riscv/kernel/signal.c

115

static long __restore_v_state(struct pt_regs *regs, void __user *sc_vec)

arch/riscv/kernel/signal.c

118

struct __sc_riscv_v_state __user *state = sc_vec;

arch/riscv/kernel/signal.c

119

void __user *datap;

arch/riscv/kernel/signal.c

145

static long save_cfiss_state(struct pt_regs *regs, void __user *sc_cfi)

arch/riscv/kernel/signal.c

147

struct __sc_riscv_cfi_state __user *state = sc_cfi;

arch/riscv/kernel/signal.c

174

static long __restore_cfiss_state(struct pt_regs *regs, void __user *sc_cfi)

arch/riscv/kernel/signal.c

176

struct __sc_riscv_cfi_state __user *state = sc_cfi;

arch/riscv/kernel/signal.c

203

long (*save)(struct pt_regs *regs, void __user *sc_vec);

arch/riscv/kernel/signal.c

220

struct sigcontext __user *sc)

arch/riscv/kernel/signal.c

222

void __user *sc_ext_ptr = &sc->sc_extdesc.hdr;

arch/riscv/kernel/signal.c

246

struct __riscv_ctx_hdr __user *head = sc_ext_ptr;

arch/riscv/kernel/signal.c

276

sc_ext_ptr = (void __user *)head + size;

arch/riscv/kernel/signal.c

283

struct rt_sigframe __user *frame;

arch/riscv/kernel/signal.c

313

struct rt_sigframe __user *frame;

arch/riscv/kernel/signal.c

321

frame = (struct rt_sigframe __user *)regs->sp;

arch/riscv/kernel/signal.c

353

static long setup_sigcontext(struct rt_sigframe __user *frame,

arch/riscv/kernel/signal.c

356

struct sigcontext __user *sc = &frame->uc.uc_mcontext;

arch/riscv/kernel/signal.c

357

struct __riscv_ctx_hdr __user *sc_ext_ptr = &sc->sc_extdesc.hdr;

arch/riscv/kernel/signal.c

378

sc_ext_ptr = (void __user *)sc_ext_ptr + ext_size;

arch/riscv/kernel/signal.c

390

static inline void __user *get_sigframe(struct ksignal *ksig,

arch/riscv/kernel/signal.c

402

return (void __user __force *)(-1UL);

arch/riscv/kernel/signal.c

410

return (void __user *)sp;

arch/riscv/kernel/signal.c

416

struct rt_sigframe __user *frame;

arch/riscv/kernel/signal.c

45

union __riscv_fp_state __user *sc_fpregs)

arch/riscv/kernel/signal.c

48

struct __riscv_d_ext_state __user *state = &sc_fpregs->d;

arch/riscv/kernel/signal.c

59

union __riscv_fp_state __user *sc_fpregs)

arch/riscv/kernel/signal.c

62

struct __riscv_d_ext_state __user *state = &sc_fpregs->d;

arch/riscv/kernel/signal.c

73

static long save_v_state(struct pt_regs *regs, void __user *sc_vec)

arch/riscv/kernel/signal.c

75

struct __sc_riscv_v_state __user *state;

arch/riscv/kernel/signal.c

76

void __user *datap;

arch/riscv/kernel/signal.c

85

state = (struct __sc_riscv_v_state __user *)sc_vec;

arch/riscv/kernel/stacktrace.c

195

unsigned long __user *user_frame_tail =

arch/riscv/kernel/stacktrace.c

196

(unsigned long __user *)(fp - sizeof(struct stackframe));

arch/riscv/kernel/sys_hwprobe.c

377

static int hwprobe_get_values(struct riscv_hwprobe __user *pairs,

arch/riscv/kernel/sys_hwprobe.c

379

unsigned long __user *cpus_user,

arch/riscv/kernel/sys_hwprobe.c

434

static int hwprobe_get_cpus(struct riscv_hwprobe __user *pairs,

arch/riscv/kernel/sys_hwprobe.c

436

unsigned long __user *cpus_user,

arch/riscv/kernel/sys_hwprobe.c

592

static int do_riscv_hwprobe(struct riscv_hwprobe __user *pairs,

arch/riscv/kernel/sys_hwprobe.c

594

unsigned long __user *cpus_user,

arch/riscv/kernel/sys_hwprobe.c

607

SYSCALL_DEFINE5(riscv_hwprobe, struct riscv_hwprobe __user *, pairs,

arch/riscv/kernel/sys_hwprobe.c

608

size_t, pair_count, size_t, cpusetsize, unsigned long __user *,

arch/riscv/kernel/traps.c

129

force_sig_fault(signo, code, (void __user *)addr);

arch/riscv/kernel/traps.c

292

force_sig_fault(SIGTRAP, TRAP_BRKPT, (void __user *)regs->epc);

arch/riscv/kernel/traps.c

43

const void __user *uaddr = (__force const void __user *)insns;

arch/riscv/kernel/traps_misaligned.c

137

__ret = get_user(insn, (type __user *) insn_addr); \

arch/riscv/kernel/traps_misaligned.c

315

if (copy_from_user(&val, (u8 __user *)addr, len))

arch/riscv/kernel/traps_misaligned.c

416

if (copy_to_user((u8 __user *)addr, &val, len))

arch/riscv/kernel/usercfi.c

130

static noinline unsigned long amo_user_shstk(unsigned long __user *addr, unsigned long val)

arch/riscv/kernel/usercfi.c

170

if (amo_user_shstk((unsigned long __user *)addr, (unsigned long)ssp) == -1)

arch/riscv/kernel/usercfi.c

211

token = amo_user_shstk((unsigned long __user *)shstk_ptr, 0);

arch/riscv/kernel/usercfi.c

371

int arch_get_shadow_stack_status(struct task_struct *t, unsigned long __user *status)

arch/riscv/kernel/usercfi.c

452

unsigned long __user *state)

arch/riscv/kernel/vector.c

187

u32 __user *epc = (u32 __user *)regs->epc;

arch/riscv/kvm/aia_device.c

306

void __user *uaddr = (void __user *)(long)attr->addr;

arch/riscv/kvm/aia_device.c

372

void __user *uaddr = (void __user *)(long)attr->addr;

arch/riscv/kvm/mmu.c

619

send_sig_mceerr(BUS_MCEERR_AR, (void __user *)hva,

arch/riscv/kvm/vcpu.c

253

void __user *argp = (void __user *)arg;

arch/riscv/kvm/vcpu.c

274

void __user *argp = (void __user *)arg;

arch/riscv/kvm/vcpu.c

293

struct kvm_reg_list __user *user_list = argp;

arch/riscv/kvm/vcpu_fp.c

133

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_fp.c

134

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_fp.c

84

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_fp.c

85

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_onereg.c

191

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_onereg.c

192

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_onereg.c

227

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_onereg.c

228

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_onereg.c

354

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_onereg.c

355

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_onereg.c

38

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_onereg.c

39

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_onereg.c

393

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_onereg.c

394

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_onereg.c

530

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_onereg.c

531

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_onereg.c

569

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_onereg.c

570

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_onereg.c

600

u64 __user *uindices)

arch/riscv/kvm/vcpu_onereg.c

634

static int copy_core_reg_indices(u64 __user *uindices)

arch/riscv/kvm/vcpu_onereg.c

666

u64 __user *uindices)

arch/riscv/kvm/vcpu_onereg.c

729

static int copy_timer_reg_indices(u64 __user *uindices)

arch/riscv/kvm/vcpu_onereg.c

758

u64 __user *uindices)

arch/riscv/kvm/vcpu_onereg.c

787

u64 __user *uindices)

arch/riscv/kvm/vcpu_onereg.c

817

u64 __user *uindices)

arch/riscv/kvm/vcpu_onereg.c

86

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_onereg.c

867

u64 __user *uindices)

arch/riscv/kvm/vcpu_onereg.c

87

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_onereg.c

933

u64 __user *uindices)

arch/riscv/kvm/vcpu_sbi.c

299

int kvm_riscv_vcpu_reg_indices_sbi_ext(struct kvm_vcpu *vcpu, u64 __user *uindices)

arch/riscv/kvm/vcpu_sbi.c

327

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_sbi.c

328

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_sbi.c

364

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_sbi.c

365

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_sbi.c

400

int kvm_riscv_vcpu_reg_indices_sbi(struct kvm_vcpu *vcpu, u64 __user *uindices)

arch/riscv/kvm/vcpu_sbi.c

469

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_sbi.c

470

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_sbi.c

514

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_sbi.c

515

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_sbi_sta.c

29

__le32 __user *sequence_ptr;

arch/riscv/kvm/vcpu_sbi_sta.c

30

__le64 __user *steal_ptr;

arch/riscv/kvm/vcpu_sbi_sta.c

54

sequence_ptr = (__le32 __user *)(hva + offset_in_page(shmem) +

arch/riscv/kvm/vcpu_sbi_sta.c

56

steal_ptr = (__le64 __user *)(hva + offset_in_page(shmem) +

arch/riscv/kvm/vcpu_timer.c

166

u64 __user *uaddr = (u64 __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_timer.c

206

u64 __user *uaddr = (u64 __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_vector.c

158

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_vector.c

159

(unsigned long __user *)(unsigned long)reg->addr;

arch/riscv/kvm/vcpu_vector.c

184

unsigned long __user *uaddr =

arch/riscv/kvm/vcpu_vector.c

185

(unsigned long __user *)(unsigned long)reg->addr;

arch/s390/crypto/prng.c

511

static ssize_t prng_tdes_read(struct file *file, char __user *ubuf,

arch/s390/crypto/prng.c

589

static ssize_t prng_sha512_read(struct file *file, char __user *ubuf,

arch/s390/hypfs/hypfs_dbfs.c

32

static ssize_t dbfs_read(struct file *file, char __user *buf,

arch/s390/hypfs/hypfs_sprp.c

114

void __user *argp;

arch/s390/hypfs/hypfs_sprp.c

118

argp = (void __user *)arg;

arch/s390/hypfs/hypfs_sprp.c

67

static int __hypfs_sprp_ioctl(void __user *user_area)

arch/s390/hypfs/hypfs_sprp.c

71

void __user *udata;

arch/s390/hypfs/hypfs_sprp.c

89

udata = (void __user *)(unsigned long) diag304->data;

arch/s390/include/asm/debug.h

81

const char __user *user_buf,

arch/s390/include/asm/futex.h

14

__futex_atomic_##name(int oparg, int *old, u32 __user *uaddr) \

arch/s390/include/asm/futex.h

50

int arch_futex_atomic_op_inuser(int op, int oparg, int *oval, u32 __user *uaddr)

arch/s390/include/asm/futex.h

79

int futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr, u32 oldval, u32 newval)

arch/s390/include/asm/idals.h

295

static inline size_t idal_buffer_to_user(struct idal_buffer *ib, void __user *to, size_t count)

arch/s390/include/asm/idals.h

307

to = (void __user *)to + IDA_BLOCK_SIZE;

arch/s390/include/asm/idals.h

317

static inline size_t idal_buffer_from_user(struct idal_buffer *ib, const void __user *from, size_t count)

arch/s390/include/asm/idals.h

329

from = (void __user *)from + IDA_BLOCK_SIZE;

arch/s390/include/asm/uaccess.h

103

_copy_to_user_key(void __user *to, const void *from, unsigned long n, unsigned long key);

arch/s390/include/asm/uaccess.h

106

copy_to_user_key(void __user *to, const void *from, unsigned long n, unsigned long key)

arch/s390/include/asm/uaccess.h

119

__put_user_##type##_noinstr(unsigned type __user *to, \

arch/s390/include/asm/uaccess.h

144

__put_user_##type##_noinstr(unsigned type __user *to, \

arch/s390/include/asm/uaccess.h

173

__put_user_##type(unsigned type __user *to, unsigned type *from, \

arch/s390/include/asm/uaccess.h

196

__prc = __put_user_char((unsigned char __user *)(ptr), \

arch/s390/include/asm/uaccess.h

201

__prc = __put_user_short((unsigned short __user *)(ptr),\

arch/s390/include/asm/uaccess.h

206

__prc = __put_user_int((unsigned int __user *)(ptr), \

arch/s390/include/asm/uaccess.h

211

__prc = __put_user_long((unsigned long __user *)(ptr), \

arch/s390/include/asm/uaccess.h

235

const unsigned type __user *from, \

arch/s390/include/asm/uaccess.h

261

const unsigned type __user *from, \

arch/s390/include/asm/uaccess.h

292

__get_user_##type(unsigned type *to, const unsigned type __user *from, \

arch/s390/include/asm/uaccess.h

309

const __user void *____guptr = (ptr); \

arch/s390/include/asm/uaccess.h

315

const unsigned char __user *__guptr = ____guptr; \

arch/s390/include/asm/uaccess.h

323

const unsigned short __user *__guptr = ____guptr; \

arch/s390/include/asm/uaccess.h

331

const unsigned int __user *__guptr = ____guptr; \

arch/s390/include/asm/uaccess.h

339

const unsigned long __user *__guptr = ____guptr; \

arch/s390/include/asm/uaccess.h

36

raw_copy_from_user(void *to, const void __user *from, unsigned long size)

arch/s390/include/asm/uaccess.h

362

long __must_check strncpy_from_user(char *dst, const char __user *src, long count);

arch/s390/include/asm/uaccess.h

364

long __must_check strnlen_user(const char __user *src, long count);

arch/s390/include/asm/uaccess.h

367

__clear_user(void __user *to, unsigned long size)

arch/s390/include/asm/uaccess.h

381

: CC_OUT(cc, cc), [size] "+d" (size), [to] "=Q" (*(char __user *)to)

arch/s390/include/asm/uaccess.h

393

static __always_inline unsigned long __must_check clear_user(void __user *to, unsigned long n)

arch/s390/include/asm/uaccess.h

51

: [spec] "I" (0x81), [from] "Q" (*(const char __user *)from)

arch/s390/include/asm/uaccess.h

64

raw_copy_to_user(void __user *to, const void *from, unsigned long size)

arch/s390/include/asm/uaccess.h

78

: CC_OUT(cc, cc), [size] "+d" (size), [to] "=Q" (*(char __user *)to)

arch/s390/include/asm/uaccess.h

92

_copy_from_user_key(void *to, const void __user *from, unsigned long n, unsigned long key);

arch/s390/include/asm/uaccess.h

95

copy_from_user_key(void *to, const void __user *from, unsigned long n, unsigned long key)

arch/s390/include/uapi/asm/kvm.h

548

struct kvm_hw_breakpoint __user *hw_bp;

arch/s390/include/uapi/asm/pkey.h

233

__u8 __user *key; /* in: the key blob */

arch/s390/include/uapi/asm/pkey.h

261

struct pkey_apqn __user *apqns; /* in: ptr to list of apqn targets*/

arch/s390/include/uapi/asm/pkey.h

266

__u8 __user *key; /* in: pointer to key blob buffer */

arch/s390/include/uapi/asm/pkey.h

295

struct pkey_apqn __user *apqns; /* in: ptr to list of apqn targets */

arch/s390/include/uapi/asm/pkey.h

301

__u8 __user *key; /* in: pointer to key blob buffer */

arch/s390/include/uapi/asm/pkey.h

335

__u8 __user *key; /* in: pointer to key blob */

arch/s390/include/uapi/asm/pkey.h

360

__u8 __user *key; /* in: pointer to key blob */

arch/s390/include/uapi/asm/pkey.h

362

struct pkey_apqn __user *apqns; /* in: ptr to list of apqn targets */

arch/s390/include/uapi/asm/pkey.h

396

__u8 __user *key; /* in: pointer to key blob */

arch/s390/include/uapi/asm/pkey.h

399

struct pkey_apqn __user *apqns; /* in/out: ptr to list of apqn targets*/

arch/s390/include/uapi/asm/pkey.h

439

struct pkey_apqn __user *apqns; /* in/out: ptr to list of apqn targets*/

arch/s390/include/uapi/asm/pkey.h

462

__u8 __user *key; /* in: pointer to key blob */

arch/s390/include/uapi/asm/pkey.h

464

struct pkey_apqn __user *apqns; /* in: ptr to list of apqn targets */

arch/s390/include/uapi/asm/pkey.h

468

__u8 __user *pkey; /* in: pkey blob buffer space ptr */

arch/s390/include/uapi/asm/sigcontext.h

65

_sigregs __user *sregs;

arch/s390/include/uapi/asm/signal.h

109

void __user *ss_sp;

arch/s390/include/uapi/asm/zcrypt.h

102

__u8 __user *req_parmb; /* request parm block 'address' */

arch/s390/include/uapi/asm/zcrypt.h

104

__u8 __user *req_datab; /* request data block 'address' */

arch/s390/include/uapi/asm/zcrypt.h

106

__u8 __user *rpl_parmb; /* reply parm block 'address' */

arch/s390/include/uapi/asm/zcrypt.h

108

__u8 __user *rpl_datab; /* reply data block 'address' */

arch/s390/include/uapi/asm/zcrypt.h

110

__u8 __user *req_extb; /* request extension block 'addr'*/

arch/s390/include/uapi/asm/zcrypt.h

112

__u8 __user *rpl_extb; /* reply extension block 'address'*/

arch/s390/include/uapi/asm/zcrypt.h

134

__u8 __user *request_control_blk_addr;

arch/s390/include/uapi/asm/zcrypt.h

137

__u8 __user *request_data_address;

arch/s390/include/uapi/asm/zcrypt.h

140

__u8 __user *reply_control_blk_addr;

arch/s390/include/uapi/asm/zcrypt.h

143

__u8 __user *reply_data_addr;

arch/s390/include/uapi/asm/zcrypt.h

199

__u8 __user *targets;

arch/s390/include/uapi/asm/zcrypt.h

203

__u8 __user *req;

arch/s390/include/uapi/asm/zcrypt.h

205

__u8 __user *resp;

arch/s390/include/uapi/asm/zcrypt.h

39

__u8 __user *inputdata;

arch/s390/include/uapi/asm/zcrypt.h

41

__u8 __user *outputdata;

arch/s390/include/uapi/asm/zcrypt.h

43

__u8 __user *b_key;

arch/s390/include/uapi/asm/zcrypt.h

44

__u8 __user *n_modulus;

arch/s390/include/uapi/asm/zcrypt.h

62

__u8 __user *inputdata;

arch/s390/include/uapi/asm/zcrypt.h

64

__u8 __user *outputdata;

arch/s390/include/uapi/asm/zcrypt.h

66

__u8 __user *bp_key;

arch/s390/include/uapi/asm/zcrypt.h

67

__u8 __user *bq_key;

arch/s390/include/uapi/asm/zcrypt.h

68

__u8 __user *np_prime;

arch/s390/include/uapi/asm/zcrypt.h

69

__u8 __user *nq_prime;

arch/s390/include/uapi/asm/zcrypt.h

70

__u8 __user *u_mult_inv;

arch/s390/kernel/debug.c

1507

static inline char *debug_get_user_string(const char __user *user_buf,

arch/s390/kernel/debug.c

1555

struct file *file, const char __user *user_buf,

arch/s390/kernel/debug.c

1609

struct file *file, const char __user *user_buf,

arch/s390/kernel/debug.c

1679

struct file *file, const char __user *user_buf,

arch/s390/kernel/debug.c

635

char __user *user_buf, /* user buffer */

arch/s390/kernel/debug.c

684

static ssize_t debug_input(struct file *file, const char __user *user_buf,

arch/s390/kernel/debug.c

71

static ssize_t debug_output(struct file *file, char __user *user_buf,

arch/s390/kernel/debug.c

73

static ssize_t debug_input(struct file *file, const char __user *user_buf,

arch/s390/kernel/debug.c

85

struct file *file, const char __user *user_buf,

arch/s390/kernel/debug.c

91

struct file *file, const char __user *user_buf,

arch/s390/kernel/debug.c

94

struct file *file, const char __user *user_buf,

arch/s390/kernel/diag/diag310.c

212

size_t __user *argp = (void __user *)arg;

arch/s390/kernel/diag/diag310.c

229

size_t __user *argp = (void __user *)arg;

arch/s390/kernel/diag/diag310.c

248

struct diag310_memtop __user *udata = (struct diag310_memtop __user *)arg;

arch/s390/kernel/diag/diag310.c

272

if (copy_to_user((void __user *)address, buf, data_size))

arch/s390/kernel/diag/diag324.c

157

struct diag324_pib __user *udata = (struct diag324_pib __user *)arg;

arch/s390/kernel/diag/diag324.c

183

rc = copy_to_user((void __user *)address, data->pib, data->pib->len);

arch/s390/kernel/diag/diag324.c

198

if (put_user(data->len, (size_t __user *)arg))

arch/s390/kernel/dis.c

494

if (copy_from_user(dst, (char __user *)src, len))

arch/s390/kernel/entry.h

54

long sys_s390_guarded_storage(int command, struct gs_cb __user *);

arch/s390/kernel/entry.h

55

long sys_s390_pci_mmio_write(unsigned long, const void __user *, size_t);

arch/s390/kernel/entry.h

56

long sys_s390_pci_mmio_read(unsigned long, void __user *, size_t);

arch/s390/kernel/entry.h

57

long sys_s390_sthyi(unsigned long function_code, void __user *buffer, u64 __user *return_code, unsigned long flags);

arch/s390/kernel/guarded_storage.c

111

struct gs_cb __user *, gs_cb)

arch/s390/kernel/guarded_storage.c

52

static int gs_set_bc_cb(struct gs_cb __user *u_gs_cb)

arch/s390/kernel/perf_cpum_cf.c

1479

struct s390_ctrset_read __user *ctrset_read;

arch/s390/kernel/perf_cpum_cf.c

1481

void __user *uptr;

arch/s390/kernel/perf_cpum_cf.c

1483

ctrset_read = (struct s390_ctrset_read __user *)arg;

arch/s390/kernel/perf_cpum_cf.c

1487

struct s390_ctrset_cpudata __user *ctrset_cpudata;

arch/s390/kernel/perf_cpum_cf.c

1598

struct s390_ctrset_start __user *ustart;

arch/s390/kernel/perf_cpum_cf.c

1601

void __user *umask;

arch/s390/kernel/perf_cpum_cf.c

1608

ustart = (struct s390_ctrset_start __user *)arg;

arch/s390/kernel/perf_cpum_cf.c

1627

umask = (void __user *)start.cpumask;

arch/s390/kernel/ptrace.c

287

return put_user(tmp, (addr_t __user *) data);

arch/s390/kernel/ptrace.c

445

if (copy_from_user(&parea, (void __force __user *) addr,

arch/s390/kernel/ptrace.c

457

(addr_t __force __user *) data))

arch/s390/kernel/ptrace.c

469

return put_user(child->thread.last_break, (unsigned long __user *)data);

arch/s390/kernel/ptrace.c

525

const void *kbuf, const void __user *ubuf)

arch/s390/kernel/ptrace.c

540

const unsigned long __user *u = ubuf;

arch/s390/kernel/ptrace.c

576

const void __user *ubuf)

arch/s390/kernel/ptrace.c

614

const void *kbuf, const void __user *ubuf)

arch/s390/kernel/ptrace.c

635

const void *kbuf, const void __user *ubuf)

arch/s390/kernel/ptrace.c

659

const void *kbuf, const void __user *ubuf)

arch/s390/kernel/ptrace.c

695

const void *kbuf, const void __user *ubuf)

arch/s390/kernel/ptrace.c

719

const void *kbuf, const void __user *ubuf)

arch/s390/kernel/ptrace.c

744

const void *kbuf, const void __user *ubuf)

arch/s390/kernel/ptrace.c

796

const void *kbuf, const void __user *ubuf)

arch/s390/kernel/ptrace.c

855

const void *kbuf, const void __user *ubuf)

arch/s390/kernel/signal.c

121

static int save_sigregs(struct pt_regs *regs, _sigregs __user *sregs)

arch/s390/kernel/signal.c

139

static int restore_sigregs(struct pt_regs *regs, _sigregs __user *sregs)

arch/s390/kernel/signal.c

175

_sigregs_ext __user *sregs_ext)

arch/s390/kernel/signal.c

195

_sigregs_ext __user *sregs_ext)

arch/s390/kernel/signal.c

217

struct sigframe __user *frame =

arch/s390/kernel/signal.c

218

(struct sigframe __user *) regs->gprs[15];

arch/s390/kernel/signal.c

239

struct rt_sigframe __user *frame =

arch/s390/kernel/signal.c

240

(struct rt_sigframe __user *)regs->gprs[15];

arch/s390/kernel/signal.c

263

static inline void __user *

arch/s390/kernel/signal.c

273

return (void __user *) -1UL;

arch/s390/kernel/signal.c

281

return (void __user *)((sp - frame_size) & -8ul);

arch/s390/kernel/signal.c

287

struct sigframe __user *frame;

arch/s390/kernel/signal.c

296

if (frame == (void __user *) -1UL)

arch/s390/kernel/signal.c

300

if (__put_user(regs->gprs[15], (addr_t __user *) frame))

arch/s390/kernel/signal.c

305

sc.sregs = (_sigregs __user __force *) &frame->sregs;

arch/s390/kernel/signal.c

317

if (__put_user(regs->gprs[2], (int __user *) &frame->signo))

arch/s390/kernel/signal.c

358

struct rt_sigframe __user *frame;

arch/s390/kernel/signal.c

369

if (frame == (void __user *) -1UL)

arch/s390/kernel/signal.c

373

if (__put_user(regs->gprs[15], (addr_t __user *) frame))

arch/s390/kernel/stacktrace.c

104

struct stack_frame_vdso_wrapper __user *sf_vdso;

arch/s390/kernel/stacktrace.c

105

struct stack_frame_user __user *sf;

arch/s390/kernel/stacktrace.c

113

sf = (void __user *)user_stack_pointer(regs);

arch/s390/kernel/stacktrace.c

123

sf_vdso = (void __user *)sf;

arch/s390/kernel/stacktrace.c

127

sf = (void __user *)sp;

arch/s390/kernel/stacktrace.c

131

sf = (void __user *)sp;

arch/s390/kernel/sthyi.c

530

SYSCALL_DEFINE4(s390_sthyi, unsigned long, function_code, void __user *, buffer,

arch/s390/kernel/sthyi.c

531

u64 __user *, return_code, unsigned long, flags)

arch/s390/kernel/syscall.c

58

unsigned long, third, void __user *, ptr)

arch/s390/kernel/sysinfo.c

473

static ssize_t stsi_read(struct file *file, char __user *buf, size_t size, loff_t *ppos)

arch/s390/kernel/traps.c

143

u16 __user *location;

arch/s390/kernel/traps.c

36

static inline void __user *get_trap_ip(struct pt_regs *regs)

arch/s390/kernel/traps.c

44

return (void __user *)(address - (regs->int_code >> 16));

arch/s390/kernel/traps.c

79

force_sig_fault(SIGTRAP, TRAP_HWBKPT, (void __force __user *)current->thread.per_event.address);

arch/s390/kernel/uprobes.c

281

rc = emu_load_ril((u16 __user *)uptr, &rx->u32[1]);

arch/s390/kernel/uprobes.c

284

rc = emu_load_ril((s16 __user *)uptr, &rx->u64);

arch/s390/kernel/uprobes.c

287

rc = emu_load_ril((s16 __user *)uptr, &rx->u32[1]);

arch/s390/kernel/uprobes.c

290

rc = emu_load_ril((u16 __user *)uptr, &rx->u64);

arch/s390/kernel/uprobes.c

293

rc = emu_load_ril((u64 __user *)uptr, &rx->u64);

arch/s390/kernel/uprobes.c

296

rc = emu_load_ril((s32 __user *)uptr, &rx->u64);

arch/s390/kernel/uprobes.c

299

rc = emu_load_ril((u32 __user *)uptr, &rx->u32[1]);

arch/s390/kernel/uprobes.c

302

rc = emu_load_ril((u32 __user *)uptr, &rx->u64);

arch/s390/kernel/uprobes.c

305

rc = emu_store_ril(regs, (u16 __user *)uptr, &rx->u16[3]);

arch/s390/kernel/uprobes.c

308

rc = emu_store_ril(regs, (u64 __user *)uptr, &rx->u64);

arch/s390/kernel/uprobes.c

311

rc = emu_store_ril(regs, (u32 __user *)uptr, &rx->u32[1]);

arch/s390/kernel/uprobes.c

318

rc = emu_cmp_ril(regs, (s16 __user *)uptr, &rx->s64);

arch/s390/kernel/uprobes.c

321

rc = emu_cmp_ril(regs, (s16 __user *)uptr, &rx->s32[1]);

arch/s390/kernel/uprobes.c

324

rc = emu_cmp_ril(regs, (u16 __user *)uptr, &rx->u64);

arch/s390/kernel/uprobes.c

327

rc = emu_cmp_ril(regs, (u16 __user *)uptr, &rx->u32[1]);

arch/s390/kernel/uprobes.c

330

rc = emu_cmp_ril(regs, (s64 __user *)uptr, &rx->s64);

arch/s390/kernel/uprobes.c

333

rc = emu_cmp_ril(regs, (u64 __user *)uptr, &rx->u64);

arch/s390/kernel/uprobes.c

336

rc = emu_cmp_ril(regs, (s32 __user *)uptr, &rx->s64);

arch/s390/kernel/uprobes.c

339

rc = emu_cmp_ril(regs, (s32 __user *)uptr, &rx->s32[1]);

arch/s390/kernel/uprobes.c

342

rc = emu_cmp_ril(regs, (u32 __user *)uptr, &rx->u64);

arch/s390/kernel/uprobes.c

345

rc = emu_cmp_ril(regs, (u32 __user *)uptr, &rx->u32[1]);

arch/s390/kvm/interrupt.c

2202

static int get_all_floating_irqs(struct kvm *kvm, u8 __user *usrbuf, u64 len)

arch/s390/kvm/interrupt.c

2310

if (copy_to_user((void __user *)attr->addr, &ais, sizeof(ais)))

arch/s390/kvm/interrupt.c

2322

r = get_all_floating_irqs(dev->kvm, (u8 __user *) attr->addr,

arch/s390/kvm/interrupt.c

2338

struct kvm_s390_irq __user *uptr = (struct kvm_s390_irq __user *) addr;

arch/s390/kvm/interrupt.c

2340

void __user *source;

arch/s390/kvm/interrupt.c

2343

if (get_user(inti->type, (u64 __user *)addr))

arch/s390/kvm/interrupt.c

2426

(void __user *)attr->addr, sizeof(adapter_info))) {

arch/s390/kvm/interrupt.c

2655

if (copy_from_user(&req, (void __user *)attr->addr, sizeof(req)))

arch/s390/kvm/interrupt.c

2701

if (copy_from_user(&schid, (void __user *) attr->addr, sizeof(schid)))

arch/s390/kvm/interrupt.c

2724

if (copy_from_user(&req, (void __user *)attr->addr, sizeof(req)))

arch/s390/kvm/interrupt.c

2823

if (copy_from_user(&ais, (void __user *)attr->addr, sizeof(ais)))

arch/s390/kvm/interrupt.c

3188

int kvm_s390_set_irq_state(struct kvm_vcpu *vcpu, void __user *irqstate, int len)

arch/s390/kvm/interrupt.c

3270

int kvm_s390_get_irq_state(struct kvm_vcpu *vcpu, __u8 __user *buf, int len)

arch/s390/kvm/interrupt.c

469

(u16 __user *)__LC_EXT_INT_CODE);

arch/s390/kvm/interrupt.c

580

rc |= put_guest_lc(vcpu, 1, (u8 __user *) __LC_AR_MODE_ID);

arch/s390/kvm/interrupt.c

585

rc |= put_guest_lc(vcpu, mci.val, (u64 __user *) __LC_MCCK_CODE);

arch/s390/kvm/interrupt.c

598

(u32 __user *) __LC_FP_CREG_SAVE_AREA);

arch/s390/kvm/interrupt.c

600

(u32 __user *) __LC_TOD_PROGREG_SAVE_AREA);

arch/s390/kvm/interrupt.c

602

(u64 __user *) __LC_CPU_TIMER_SAVE_AREA);

arch/s390/kvm/interrupt.c

604

(u64 __user *) __LC_CLOCK_COMP_SAVE_AREA);

arch/s390/kvm/interrupt.c

612

(u32 __user *) __LC_EXT_DAMAGE_CODE);

arch/s390/kvm/interrupt.c

614

(u64 __user *) __LC_MCCK_FAIL_STOR_ADDR);

arch/s390/kvm/kvm-s390.c

1044

if (get_user(new_limit, (u64 __user *)attr->addr))

arch/s390/kvm/kvm-s390.c

1327

if (copy_to_user((void __user *)attr->addr, &mig, sizeof(mig)))

arch/s390/kvm/kvm-s390.c

1338

if (copy_from_user(&gtod, (void __user *)attr->addr, sizeof(gtod)))

arch/s390/kvm/kvm-s390.c

1355

if (copy_from_user(&gtod_high, (void __user *)attr->addr,

arch/s390/kvm/kvm-s390.c

1370

if (copy_from_user(&gtod.tod, (void __user *)attr->addr,

arch/s390/kvm/kvm-s390.c

1442

if (copy_to_user((void __user *)attr->addr, &gtod, sizeof(gtod)))

arch/s390/kvm/kvm-s390.c

1454

if (copy_to_user((void __user *)attr->addr, &gtod_high,

arch/s390/kvm/kvm-s390.c

1467

if (copy_to_user((void __user *)attr->addr, &gtod, sizeof(gtod)))

arch/s390/kvm/kvm-s390.c

1514

if (!copy_from_user(proc, (void __user *)attr->addr,

arch/s390/kvm/kvm-s390.c

1549

if (copy_from_user(&data, (void __user *)attr->addr, sizeof(data)))

arch/s390/kvm/kvm-s390.c

1579

if (copy_from_user(&kvm->arch.model.subfuncs, (void __user *)attr->addr,

arch/s390/kvm/kvm-s390.c

1661

struct kvm_s390_vm_cpu_uv_feat __user *ptr = (void __user *)attr->addr;

arch/s390/kvm/kvm-s390.c

1725

if (copy_to_user((void __user *)attr->addr, proc, sizeof(*proc)))

arch/s390/kvm/kvm-s390.c

1759

if (copy_to_user((void __user *)attr->addr, mach, sizeof(*mach)))

arch/s390/kvm/kvm-s390.c

1772

if (copy_to_user((void __user *)attr->addr, &data, sizeof(data)))

arch/s390/kvm/kvm-s390.c

1787

if (copy_to_user((void __user *)attr->addr, &data, sizeof(data)))

arch/s390/kvm/kvm-s390.c

1799

if (copy_to_user((void __user *)attr->addr, &kvm->arch.model.subfuncs,

arch/s390/kvm/kvm-s390.c

1870

if (copy_to_user((void __user *)attr->addr, &kvm_s390_available_subfunc,

arch/s390/kvm/kvm-s390.c

1940

struct kvm_s390_vm_cpu_uv_feat __user *dst = (void __user *)attr->addr;

arch/s390/kvm/kvm-s390.c

1952

struct kvm_s390_vm_cpu_uv_feat __user *dst = (void __user *)attr->addr;

arch/s390/kvm/kvm-s390.c

2040

return put_user(topo, (u8 __user *)attr->addr);

arch/s390/kvm/kvm-s390.c

2210

r = copy_to_user((uint8_t __user *)args->skeydata_addr, keys,

arch/s390/kvm/kvm-s390.c

2237

r = copy_from_user(keys, (uint8_t __user *)args->skeydata_addr,

arch/s390/kvm/kvm-s390.c

2335

if (copy_to_user((void __user *)args->values, values, args->count))

arch/s390/kvm/kvm-s390.c

2373

r = copy_from_user(bits, (void __user *)args->values, args->count);

arch/s390/kvm/kvm-s390.c

2521

void __user *result_buff = (void __user *)dmp.buff_addr;

arch/s390/kvm/kvm-s390.c

2582

void __user *argp = (void __user *)cmd->data;

arch/s390/kvm/kvm-s390.c

2688

if (!copy_from_user(hdr, (void __user *)parms.origin,

arch/s390/kvm/kvm-s390.c

2832

void __user *uaddr = (void __user *)mop->buf;

arch/s390/kvm/kvm-s390.c

2868

void __user *uaddr = (void __user *)mop->buf;

arch/s390/kvm/kvm-s390.c

2869

void __user *old_addr = (void __user *)mop->old_addr;

arch/s390/kvm/kvm-s390.c

2928

void __user *argp = (void __user *)arg;

arch/s390/kvm/kvm-s390.c

2956

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

arch/s390/kvm/kvm-s390.c

2963

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

arch/s390/kvm/kvm-s390.c

2970

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

arch/s390/kvm/kvm-s390.c

3962

(u32 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

3966

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

3970

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

3974

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

3978

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

3982

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

3986

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

3990

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

3994

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

4012

(u32 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

4016

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

4019

r = get_user(val, (u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

4025

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

4029

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

4035

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

4039

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

4043

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

4047

(u64 __user *)reg->addr);

arch/s390/kvm/kvm-s390.c

5331

void __user *uaddr = (void __user *)mop->buf;

arch/s390/kvm/kvm-s390.c

5363

void __user *uaddr = (void __user *)mop->buf;

arch/s390/kvm/kvm-s390.c

5434

void __user *argp = (void __user *)arg;

arch/s390/kvm/kvm-s390.c

5486

if (copy_from_user(&dmp, (__u8 __user *)cmd->data, sizeof(dmp)))

arch/s390/kvm/kvm-s390.c

5510

if (!ret && copy_to_user((__u8 __user *)dmp.buff_addr, data, uv_info.guest_cpu_stor_len))

arch/s390/kvm/kvm-s390.c

5521

void __user *argp = (void __user *)arg;

arch/s390/kvm/kvm-s390.c

5677

(void __user *) irq_state.buf,

arch/s390/kvm/kvm-s390.c

5693

(__u8 __user *) irq_state.buf,

arch/s390/kvm/kvm-s390.c

5719

if (copy_to_user((__u8 __user *)argp, &cmd.rc,

arch/s390/kvm/kvm-s390.c

983

if (put_user(kvm->arch.mem_limit, (u64 __user *)attr->addr))

arch/s390/kvm/kvm-s390.h

318

int kvm_s390_pv_dump_stor_state(struct kvm *kvm, void __user *buff_user,

arch/s390/kvm/kvm-s390.h

320

int kvm_s390_pv_dump_complete(struct kvm *kvm, void __user *buff_user,

arch/s390/kvm/kvm-s390.h

554

void __user *buf, int len);

arch/s390/kvm/kvm-s390.h

556

__u8 __user *buf, int len);

arch/s390/kvm/pv.c

1023

int kvm_s390_pv_dump_complete(struct kvm *kvm, void __user *buff_user,

arch/s390/kvm/pv.c

915

int kvm_s390_pv_dump_stor_state(struct kvm *kvm, void __user *buff_user,

arch/s390/mm/fault.c

214

force_sig_fault(SIGSEGV, si_code, (void __user *)get_fault_address(regs));

arch/s390/mm/fault.c

252

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *)get_fault_address(regs));

arch/s390/pci/pci_clp.c

580

void __user *uptr;

arch/s390/pci/pci_clp.c

593

uptr = (void __force __user *)(unsigned long) req->data_p;

arch/s390/pci/pci_clp.c

626

void __user *uptr;

arch/s390/pci/pci_clp.c

633

uptr = (void __force __user *)(unsigned long) req->data_p;

arch/s390/pci/pci_clp.c

637

return put_user(exists, (int __user *) uptr);

arch/s390/pci/pci_clp.c

640

return put_user(ilp, (unsigned long __user *) uptr);

arch/s390/pci/pci_clp.c

647

void __user *argp;

arch/s390/pci/pci_clp.c

652

argp = (void __user *)arg;

arch/s390/pci/pci_debug.c

142

static ssize_t pci_perf_seq_write(struct file *file, const char __user *ubuf,

arch/s390/pci/pci_mmio.c

101

const void __user *src, size_t n)

arch/s390/pci/pci_mmio.c

129

const void __user *, user_buffer, size_t, length)

arch/s390/pci/pci_mmio.c

209

void __user *dst, const void __iomem *ioaddr,

arch/s390/pci/pci_mmio.c

260

static inline int __memcpy_fromio_inuser(void __user *dst,

arch/s390/pci/pci_mmio.c

284

void __user *, user_buffer, size_t, length)

arch/s390/pci/pci_mmio.c

31

void __iomem *ioaddr, const void __user *src,

arch/s390/pci/pci_mmio.c

55

void __iomem *ioaddr, const void __user *src,

arch/sh/include/asm/checksum_32.h

197

void __user *dst,

arch/sh/include/asm/checksum_32.h

52

__wsum csum_and_copy_from_user(const void __user *src, void *dst, int len)

arch/sh/include/asm/flat.h

14

static inline int flat_get_addr_from_rp(u32 __user *rp, u32 relval, u32 flags,

arch/sh/include/asm/flat.h

20

static inline int flat_put_addr_at_rp(u32 __user *rp, u32 addr, u32 rel)

arch/sh/include/asm/futex-cas.h

6

u32 __user *uaddr,

arch/sh/include/asm/futex-irq.h

6

u32 __user *uaddr,

arch/sh/include/asm/futex-llsc.h

6

u32 __user *uaddr,

arch/sh/include/asm/futex.h

20

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/sh/include/asm/futex.h

30

u32 __user *uaddr)

arch/sh/include/asm/syscalls_32.h

14

asmlinkage ssize_t sys_pread_wrapper(unsigned int fd, char __user *buf,

arch/sh/include/asm/syscalls_32.h

16

asmlinkage ssize_t sys_pwrite_wrapper(unsigned int fd, const char __user *buf,

arch/sh/include/asm/uaccess.h

104

__kernel_size_t __clear_user(void __user *addr, __kernel_size_t size);

arch/sh/include/asm/uaccess.h

108

void __user * __cl_addr = (addr); \

arch/sh/include/asm/uaccess.h

125

unsigned long (*from)(void *dst, const void __user *src, unsigned long cnt);

arch/sh/include/asm/uaccess.h

126

unsigned long (*to)(void __user *dst, const void *src, unsigned long cnt);

arch/sh/include/asm/uaccess.h

32

#define __m(x) (*(struct __large_struct __user *)(x))

arch/sh/include/asm/uaccess.h

38

const __typeof__(*(ptr)) __user *__gu_addr = (ptr); \

arch/sh/include/asm/uaccess.h

49

const __typeof__(*(ptr)) __user *__gu_addr = (ptr); \

arch/sh/include/asm/uaccess.h

59

__typeof__(*(ptr)) __user *__pu_addr = (ptr); \

arch/sh/include/asm/uaccess.h

69

__typeof__(*(ptr)) __user *__pu_addr = (ptr); \

arch/sh/include/asm/uaccess.h

79

extern long strncpy_from_user(char *dest, const char __user *src, long count);

arch/sh/include/asm/uaccess.h

81

extern __must_check long strnlen_user(const char __user *str, long n);

arch/sh/include/asm/uaccess.h

88

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/sh/include/asm/uaccess.h

94

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/sh/kernel/dumpstack.c

36

if (__get_user(val, (unsigned int __user *)p)) {

arch/sh/kernel/hw_breakpoint.c

342

(void __user *)NULL);

arch/sh/kernel/ptrace_32.c

146

const void *kbuf, const void __user *ubuf)

arch/sh/kernel/ptrace_32.c

184

const void *kbuf, const void __user *ubuf)

arch/sh/kernel/ptrace_32.c

223

const void *kbuf, const void __user *ubuf)

arch/sh/kernel/ptrace_32.c

341

unsigned long __user *datap = (unsigned long __user *)data;

arch/sh/kernel/signal_32.c

115

restore_sigcontext(struct pt_regs *regs, struct sigcontext __user *sc, int *r0_p)

arch/sh/kernel/signal_32.c

158

struct sigframe __user *frame = (struct sigframe __user *)regs->regs[15];

arch/sh/kernel/signal_32.c

188

struct rt_sigframe __user *frame = (struct rt_sigframe __user *)regs->regs[15];

arch/sh/kernel/signal_32.c

221

setup_sigcontext(struct sigcontext __user *sc, struct pt_regs *regs,

arch/sh/kernel/signal_32.c

253

static inline void __user *

arch/sh/kernel/signal_32.c

261

return (void __user *)((sp - (frame_size+UNWINDGUARD)) & -8ul);

arch/sh/kernel/signal_32.c

272

struct sigframe __user *frame;

arch/sh/kernel/signal_32.c

318

struct fdpic_func_descriptor __user *funcptr =

arch/sh/kernel/signal_32.c

319

(struct fdpic_func_descriptor __user *)ksig->ka.sa.sa_handler;

arch/sh/kernel/signal_32.c

338

struct rt_sigframe __user *frame;

arch/sh/kernel/signal_32.c

388

struct fdpic_func_descriptor __user *funcptr =

arch/sh/kernel/signal_32.c

389

(struct fdpic_func_descriptor __user *)ksig->ka.sa.sa_handler;

arch/sh/kernel/signal_32.c

77

static inline int restore_sigcontext_fpu(struct sigcontext __user *sc)

arch/sh/kernel/signal_32.c

89

static inline int save_sigcontext_fpu(struct sigcontext __user *sc,

arch/sh/kernel/sys_sh32.c

39

asmlinkage ssize_t sys_pread_wrapper(unsigned int fd, char __user *buf,

arch/sh/kernel/sys_sh32.c

45

asmlinkage ssize_t sys_pwrite_wrapper(unsigned int fd, const char __user *buf,

arch/sh/kernel/traps_32.c

109

unsigned char __user *srcu, *dstu;

arch/sh/kernel/traps_32.c

131

srcu = (unsigned char __user *)*rm;

arch/sh/kernel/traps_32.c

149

dstu = (unsigned char __user *)*rn;

arch/sh/kernel/traps_32.c

160

dstu = (unsigned char __user *)*rn;

arch/sh/kernel/traps_32.c

172

dstu = (unsigned char __user *)*rn;

arch/sh/kernel/traps_32.c

182

srcu = (unsigned char __user *)*rm;

arch/sh/kernel/traps_32.c

193

srcu = (unsigned char __user *)*rm;

arch/sh/kernel/traps_32.c

215

dstu = (unsigned char __user *)*rm; /* called Rn in the spec */

arch/sh/kernel/traps_32.c

224

srcu = (unsigned char __user *)*rm;

arch/sh/kernel/traps_32.c

241

srcu = (unsigned char __user *)regs->pc;

arch/sh/kernel/traps_32.c

258

srcu = (unsigned char __user *)(regs->pc & ~0x3);

arch/sh/kernel/traps_32.c

288

void __user *addr = (void __user *)(regs->pc +

arch/sh/kernel/traps_32.c

509

if (copy_from_user(&instruction, (insn_size_t __user *)(regs->pc & ~1),

arch/sh/kernel/traps_32.c

546

force_sig_fault(SIGBUS, si_code, (void __user *)address);

arch/sh/kernel/traps_32.c

626

get_user(inst, (unsigned short __user *)regs->pc);

arch/sh/kernel/traps_32.c

711

get_user(inst, (unsigned short __user *)regs->pc + 1);

arch/sh/kernel/traps_32.c

713

get_user(inst, (unsigned short __user *)regs->pc);

arch/sh/kernel/traps_32.c

79

static unsigned long copy_from_kernel_wrapper(void *dst, const void __user *src,

arch/sh/kernel/traps_32.c

85

static unsigned long copy_to_kernel_wrapper(void __user *dst, const void *src,

arch/sh/math-emu/math.c

56

#define MWRITE(d,a) ({if(put_user(d, (typeof (d) __user *)a)) return -EFAULT;})

arch/sh/math-emu/math.c

57

#define MREAD(d,a) ({if(get_user(d, (typeof (d) __user *)a)) return -EFAULT;})

arch/sh/mm/alignment.c

141

const char __user *buffer, size_t count, loff_t *pos)

arch/sh/mm/alignment.c

86

(unsigned int __user *)addr);

arch/sh/mm/fault.c

30

force_sig_fault(si_signo, si_code, (void __user *)address);

arch/sh/mm/nommu.c

33

__kernel_size_t __clear_user(void __user *to, __kernel_size_t n)

arch/sparc/include/asm/checksum_32.h

63

csum_and_copy_from_user(const void __user *src, void *dst, int len)

arch/sparc/include/asm/checksum_32.h

71

csum_and_copy_to_user(const void *src, void __user *dst, int len)

arch/sparc/include/asm/checksum_64.h

42

__wsum csum_and_copy_from_user(const void __user *src, void *dst, int len);

arch/sparc/include/asm/checksum_64.h

43

__wsum csum_and_copy_to_user(const void *src, void __user *dst, int len);

arch/sparc/include/asm/futex_64.h

34

u32 __user *uaddr)

arch/sparc/include/asm/futex_64.h

68

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/sparc/include/asm/uaccess.h

13

long strncpy_from_user(char *dest, const char __user *src, long count);

arch/sparc/include/asm/uaccess_32.h

181

unsigned long __copy_user(void __user *to, const void __user *from, unsigned long size);

arch/sparc/include/asm/uaccess_32.h

183

static inline unsigned long raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/sparc/include/asm/uaccess_32.h

185

return __copy_user(to, (__force void __user *) from, n);

arch/sparc/include/asm/uaccess_32.h

188

static inline unsigned long raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/sparc/include/asm/uaccess_32.h

190

return __copy_user((__force void __user *) to, from, n);

arch/sparc/include/asm/uaccess_32.h

195

static inline unsigned long __clear_user(void __user *addr, unsigned long size)

arch/sparc/include/asm/uaccess_32.h

211

static inline unsigned long clear_user(void __user *addr, unsigned long n)

arch/sparc/include/asm/uaccess_32.h

219

__must_check long strnlen_user(const char __user *str, long n);

arch/sparc/include/asm/uaccess_32.h

27

void __user *__pu_addr = (ptr); \

arch/sparc/include/asm/uaccess_32.h

33

const void __user *__gu_addr = (ptr); \

arch/sparc/include/asm/uaccess_32.h

49

#define __m(x) ((struct __large_struct __user *)(x))

arch/sparc/include/asm/uaccess_64.h

228

const void __user *from,

arch/sparc/include/asm/uaccess_64.h

231

unsigned long __must_check raw_copy_to_user(void __user *to,

arch/sparc/include/asm/uaccess_64.h

236

unsigned long __must_check raw_copy_in_user(void __user *to,

arch/sparc/include/asm/uaccess_64.h

237

const void __user *from,

arch/sparc/include/asm/uaccess_64.h

240

unsigned long __must_check __clear_user(void __user *, unsigned long);

arch/sparc/include/asm/uaccess_64.h

244

__must_check long strnlen_user(const char __user *str, long n);

arch/sparc/include/uapi/asm/fbio.h

104

char __user *image; /* cursor image bits */

arch/sparc/include/uapi/asm/fbio.h

105

char __user *mask; /* cursor mask bits */

arch/sparc/include/uapi/asm/fbio.h

63

unsigned char __user *red;

arch/sparc/include/uapi/asm/fbio.h

64

unsigned char __user *green;

arch/sparc/include/uapi/asm/fbio.h

65

unsigned char __user *blue;

arch/sparc/include/uapi/asm/openpromio.h

55

char __user *op_name; /* Pointer to the property name. */

arch/sparc/include/uapi/asm/openpromio.h

57

char __user *op_buf; /* Pointer to buffer. */

arch/sparc/include/uapi/asm/signal.h

173

void __user *ss_sp;

arch/sparc/kernel/apc.c

90

__u8 inarg, __user *arg = (__u8 __user *) __arg;

arch/sparc/kernel/kernel.h

170

asmlinkage int do_sys_sigstack(struct sigstack __user *ssptr,

arch/sparc/kernel/kernel.h

171

struct sigstack __user *ossptr,

arch/sparc/kernel/led.c

68

static ssize_t led_proc_write(struct file *file, const char __user *buffer,

arch/sparc/kernel/mdesc.c

1262

static ssize_t mdesc_read(struct file *file, char __user *buf,

arch/sparc/kernel/perf_event.c

1787

valid_user_frame(const void __user *fp, unsigned long size)

arch/sparc/kernel/perf_event.c

1803

struct sparc_stackf __user *usf;

arch/sparc/kernel/perf_event.c

1807

usf = (struct sparc_stackf __user *)ufp;

arch/sparc/kernel/perf_event.c

1830

struct sparc_stackf __user *usf;

arch/sparc/kernel/perf_event.c

1834

usf = (struct sparc_stackf __user *)ufp;

arch/sparc/kernel/perf_event.c

1840

struct sparc_stackf32 __user *usf;

arch/sparc/kernel/perf_event.c

1842

usf = (struct sparc_stackf32 __user *)ufp;

arch/sparc/kernel/process.c

126

struct clone_args __user *cl_args;

arch/sparc/kernel/process.c

130

cl_args = (struct clone_args __user *)regs->u_regs[UREG_I0];

arch/sparc/kernel/process.c

97

args.pidfd = (int __user *)regs->u_regs[UREG_I2];

arch/sparc/kernel/process.c

98

args.child_tid = (int __user *)regs->u_regs[UREG_I4];

arch/sparc/kernel/process.c

99

args.parent_tid = (int __user *)regs->u_regs[UREG_I2];

arch/sparc/kernel/process_32.c

217

static inline struct sparc_stackf __user *

arch/sparc/kernel/process_32.c

218

clone_stackframe(struct sparc_stackf __user *dst,

arch/sparc/kernel/process_32.c

219

struct sparc_stackf __user *src)

arch/sparc/kernel/process_32.c

223

struct sparc_stackf __user *sp;

arch/sparc/kernel/process_32.c

231

sp = (struct sparc_stackf __user *)(fp - size);

arch/sparc/kernel/process_32.c

321

struct sparc_stackf __user *childstack;

arch/sparc/kernel/process_32.c

322

struct sparc_stackf __user *parentstack;

arch/sparc/kernel/process_32.c

328

childstack = (struct sparc_stackf __user *)

arch/sparc/kernel/process_32.c

330

parentstack = (struct sparc_stackf __user *)

arch/sparc/kernel/process_64.c

108

struct reg_window32 __user *rw;

arch/sparc/kernel/process_64.c

132

struct reg_window __user *rw;

arch/sparc/kernel/process_64.c

138

rw = (struct reg_window __user *)

arch/sparc/kernel/process_64.c

434

__get_user(fp, &(((struct reg_window __user *)psp)->ins[6]));

arch/sparc/kernel/process_64.c

439

__get_user(fp, &(((struct reg_window32 __user *)psp)->ins[6]));

arch/sparc/kernel/process_64.c

449

if (raw_copy_in_user((void __user *)rval, (void __user *)psp, distance))

arch/sparc/kernel/process_64.c

453

&(((struct reg_window32 __user *)rval)->ins[6])))

arch/sparc/kernel/process_64.c

457

&(((struct reg_window __user *)rval)->ins[6])))

arch/sparc/kernel/process_64.c

499

if (!copy_to_user((char __user *)sp, rwin, winsize)) {

arch/sparc/kernel/process_64.c

509

force_sig_fault(SIGBUS, BUS_ADRALN, (void __user *) sp);

arch/sparc/kernel/process_64.c

542

if (unlikely(copy_to_user((char __user *)sp,

arch/sparc/kernel/ptrace_32.c

109

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_32.c

185

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_32.c

263

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_32.c

303

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_32.c

364

void __user *addr2p;

arch/sparc/kernel/ptrace_32.c

365

struct pt_regs __user *pregs;

arch/sparc/kernel/ptrace_32.c

366

struct fps __user *fps;

arch/sparc/kernel/ptrace_32.c

369

addr2p = (void __user *) addr2;

arch/sparc/kernel/ptrace_32.c

370

pregs = (struct pt_regs __user *) addr;

arch/sparc/kernel/ptrace_32.c

371

fps = (struct fps __user *) addr;

arch/sparc/kernel/ptrace_32.c

55

if (copy_from_user(uregs, (void __user *)reg_window, size))

arch/sparc/kernel/ptrace_32.c

73

if (copy_to_user((void __user *)reg_window, uregs, size))

arch/sparc/kernel/ptrace_64.c

1015

struct pt_regs __user *pregs;

arch/sparc/kernel/ptrace_64.c

1016

struct fps __user *fps;

arch/sparc/kernel/ptrace_64.c

1017

void __user *addr2p;

arch/sparc/kernel/ptrace_64.c

1020

pregs = (struct pt_regs __user *) addr;

arch/sparc/kernel/ptrace_64.c

1021

fps = (struct fps __user *) addr;

arch/sparc/kernel/ptrace_64.c

1022

addr2p = (void __user *) addr2;

arch/sparc/kernel/ptrace_64.c

164

if (copy_from_user(kbuf, (void __user *) uaddr, len))

arch/sparc/kernel/ptrace_64.c

179

if (copy_to_user((void __user *) uaddr, kbuf, len))

arch/sparc/kernel/ptrace_64.c

270

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_64.c

374

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_64.c

460

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_64.c

561

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_64.c

564

compat_ulong_t __user *reg_window;

arch/sparc/kernel/ptrace_64.c

566

const compat_ulong_t __user *u = ubuf;

arch/sparc/kernel/ptrace_64.c

579

reg_window = (compat_ulong_t __user *) regs->u_regs[UREG_I6];

arch/sparc/kernel/ptrace_64.c

607

reg_window = (compat_ulong_t __user *) regs->u_regs[UREG_I6];

arch/sparc/kernel/ptrace_64.c

701

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_64.c

798

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_64.c

849

const void *kbuf, const void __user *ubuf)

arch/sparc/kernel/ptrace_64.c

931

struct pt_regs32 __user *pregs;

arch/sparc/kernel/ptrace_64.c

932

struct compat_fps __user *fps;

arch/sparc/kernel/ptrace_64.c

938

pregs = (struct pt_regs32 __user *) addr;

arch/sparc/kernel/ptrace_64.c

939

fps = (struct compat_fps __user *) addr;

arch/sparc/kernel/ptrace_64.c

977

(char __user *)addr2, data);

arch/sparc/kernel/ptrace_64.c

986

ret = ptrace_writedata(child, (char __user *) addr2,

arch/sparc/kernel/signal32.c

100

sf = (struct signal_frame32 __user *) regs->u_regs[UREG_FP];

arch/sparc/kernel/signal32.c

176

struct rt_signal_frame32 __user *sf;

arch/sparc/kernel/signal32.c

188

sf = (struct rt_signal_frame32 __user *) regs->u_regs[UREG_FP];

arch/sparc/kernel/signal32.c

260

static void __user *get_sigframe(struct ksignal *ksig, struct pt_regs *regs, unsigned long framesize)

arch/sparc/kernel/signal32.c

272

return (void __user *) -1L;

arch/sparc/kernel/signal32.c

285

return (void __user *) sp;

arch/sparc/kernel/signal32.c

355

struct signal_frame32 __user *sf;

arch/sparc/kernel/signal32.c

357

void __user *tail;

arch/sparc/kernel/signal32.c

374

sf = (struct signal_frame32 __user *)

arch/sparc/kernel/signal32.c

411

__siginfo_fpu_t __user *fp = tail;

arch/sparc/kernel/signal32.c

419

__siginfo_rwin_t __user *rwp = tail;

arch/sparc/kernel/signal32.c

439

err |= raw_copy_in_user((u32 __user *)sf,

arch/sparc/kernel/signal32.c

440

(u32 __user *)(regs->u_regs[UREG_FP]),

arch/sparc/kernel/signal32.c

490

struct rt_signal_frame32 __user *sf;

arch/sparc/kernel/signal32.c

492

void __user *tail;

arch/sparc/kernel/signal32.c

508

sf = (struct rt_signal_frame32 __user *)

arch/sparc/kernel/signal32.c

545

__siginfo_fpu_t __user *fp = tail;

arch/sparc/kernel/signal32.c

553

__siginfo_rwin_t __user *rwp = tail;

arch/sparc/kernel/signal32.c

571

err |= raw_copy_in_user((u32 __user *)sf,

arch/sparc/kernel/signal32.c

572

(u32 __user *)(regs->u_regs[UREG_FP]),

arch/sparc/kernel/signal32.c

709

struct sigstack32 __user *ssptr =

arch/sparc/kernel/signal32.c

710

(struct sigstack32 __user *)((unsigned long)(u_ssptr));

arch/sparc/kernel/signal32.c

711

struct sigstack32 __user *ossptr =

arch/sparc/kernel/signal32.c

712

(struct sigstack32 __user *)((unsigned long)(u_ossptr));

arch/sparc/kernel/signal32.c

75

static bool invalid_frame_pointer(void __user *fp, int fplen)

arch/sparc/kernel/signal32.c

85

struct signal_frame32 __user *sf;

arch/sparc/kernel/signal_32.c

143

struct rt_signal_frame __user *sf;

arch/sparc/kernel/signal_32.c

145

__siginfo_fpu_t __user *fpu_save;

arch/sparc/kernel/signal_32.c

146

__siginfo_rwin_t __user *rwin_save;

arch/sparc/kernel/signal_32.c

151

sf = (struct rt_signal_frame __user *) regs->u_regs[UREG_FP];

arch/sparc/kernel/signal_32.c

200

static inline void __user *get_sigframe(struct ksignal *ksig, struct pt_regs *regs, unsigned long framesize)

arch/sparc/kernel/signal_32.c

209

return (void __user *) -1L;

arch/sparc/kernel/signal_32.c

222

return (void __user *) sp;

arch/sparc/kernel/signal_32.c

228

struct signal_frame __user *sf;

arch/sparc/kernel/signal_32.c

230

void __user *tail;

arch/sparc/kernel/signal_32.c

243

sf = (struct signal_frame __user *)

arch/sparc/kernel/signal_32.c

259

__siginfo_fpu_t __user *fp = tail;

arch/sparc/kernel/signal_32.c

267

__siginfo_rwin_t __user *rwp = tail;

arch/sparc/kernel/signal_32.c

323

struct rt_signal_frame __user *sf;

arch/sparc/kernel/signal_32.c

325

void __user *tail;

arch/sparc/kernel/signal_32.c

336

sf = (struct rt_signal_frame __user *)

arch/sparc/kernel/signal_32.c

355

__siginfo_fpu_t __user *fp = tail;

arch/sparc/kernel/signal_32.c

363

__siginfo_rwin_t __user *rwp = tail;

arch/sparc/kernel/signal_32.c

39

__siginfo_fpu_t __user *fpu_save;

arch/sparc/kernel/signal_32.c

43

__siginfo_rwin_t __user *rwin_save;

arch/sparc/kernel/signal_32.c

51

__siginfo_fpu_t __user *fpu_save;

arch/sparc/kernel/signal_32.c

530

asmlinkage int do_sys_sigstack(struct sigstack __user *ssptr,

arch/sparc/kernel/signal_32.c

531

struct sigstack __user *ossptr,

arch/sparc/kernel/signal_32.c

55

__siginfo_rwin_t __user *rwin_save;

arch/sparc/kernel/signal_32.c

66

static inline bool invalid_frame_pointer(void __user *fp, int fplen)

arch/sparc/kernel/signal_32.c

77

struct signal_frame __user *sf;

arch/sparc/kernel/signal_32.c

79

__siginfo_fpu_t __user *fpu_save;

arch/sparc/kernel/signal_32.c

80

__siginfo_rwin_t __user *rwin_save;

arch/sparc/kernel/signal_32.c

88

sf = (struct signal_frame __user *) regs->u_regs[UREG_FP];

arch/sparc/kernel/signal_64.c

105

(&(((struct reg_window __user *)(STACK_BIAS+regs->u_regs[UREG_I6]))->ins[6])));

arch/sparc/kernel/signal_64.c

107

(&(((struct reg_window __user *)(STACK_BIAS+regs->u_regs[UREG_I6]))->ins[7])));

arch/sparc/kernel/signal_64.c

122

((unsigned long __user *)&(ucp->uc_mcontext.mc_fpregs.mcfpu_fregs))+16,

arch/sparc/kernel/signal_64.c

142

struct ucontext __user *ucp = (struct ucontext __user *)

arch/sparc/kernel/signal_64.c

145

mc_gregset_t __user *grp;

arch/sparc/kernel/signal_64.c

146

mcontext_t __user *mcp;

arch/sparc/kernel/signal_64.c

175

(unsigned long __user *)&ucp->uc_sigmask);

arch/sparc/kernel/signal_64.c

201

(&(((struct reg_window __user *)(STACK_BIAS+regs->u_regs[UREG_I6]))->ins[6])));

arch/sparc/kernel/signal_64.c

203

(&(((struct reg_window __user *)(STACK_BIAS+regs->u_regs[UREG_I6]))->ins[7])));

arch/sparc/kernel/signal_64.c

218

((unsigned long __user *)&(mcp->mc_fpregs.mcfpu_fregs))+16, fpregs+16,

arch/sparc/kernel/signal_64.c

238

static bool invalid_frame_pointer(void __user *fp)

arch/sparc/kernel/signal_64.c

249

__siginfo_fpu_t __user *fpu_save;

arch/sparc/kernel/signal_64.c

258

struct rt_signal_frame __user *sf;

arch/sparc/kernel/signal_64.c

259

__siginfo_fpu_t __user *fpu_save;

arch/sparc/kernel/signal_64.c

260

__siginfo_rwin_t __user *rwin_save;

arch/sparc/kernel/signal_64.c

268

sf = (struct rt_signal_frame __user *)

arch/sparc/kernel/signal_64.c

325

static inline void __user *get_sigframe(struct ksignal *ksig, struct pt_regs *regs, unsigned long framesize)

arch/sparc/kernel/signal_64.c

334

return (void __user *) -1L;

arch/sparc/kernel/signal_64.c

347

return (void __user *) sp;

arch/sparc/kernel/signal_64.c

353

struct rt_signal_frame __user *sf;

arch/sparc/kernel/signal_64.c

355

void __user *tail;

arch/sparc/kernel/signal_64.c

368

sf = (struct rt_signal_frame __user *)

arch/sparc/kernel/signal_64.c

386

__siginfo_fpu_t __user *fpu_save = tail;

arch/sparc/kernel/signal_64.c

394

__siginfo_rwin_t __user *rwin_save = tail;

arch/sparc/kernel/signal_64.c

409

err |= raw_copy_in_user((u64 __user *)sf,

arch/sparc/kernel/signal_64.c

410

(u64 __user *)(regs->u_regs[UREG_FP] +

arch/sparc/kernel/signal_64.c

43

struct ucontext __user *ucp = (struct ucontext __user *)

arch/sparc/kernel/signal_64.c

46

mc_gregset_t __user *grp;

arch/sparc/kernel/sigutil.h

5

int save_fpu_state(struct pt_regs *regs, __siginfo_fpu_t __user *fpu);

arch/sparc/kernel/sigutil.h

6

int restore_fpu_state(struct pt_regs *regs, __siginfo_fpu_t __user *fpu);

arch/sparc/kernel/sigutil.h

7

int save_rwin_state(int wsaved, __siginfo_rwin_t __user *rwin);

arch/sparc/kernel/sigutil.h

8

int restore_rwin_state(__siginfo_rwin_t __user *rp);

arch/sparc/kernel/sigutil_32.c

100

int restore_rwin_state(__siginfo_rwin_t __user *rp)

arch/sparc/kernel/sigutil_32.c

15

int save_fpu_state(struct pt_regs *regs, __siginfo_fpu_t __user *fpu)

arch/sparc/kernel/sigutil_32.c

49

int restore_fpu_state(struct pt_regs *regs, __siginfo_fpu_t __user *fpu)

arch/sparc/kernel/sigutil_32.c

83

int save_rwin_state(int wsaved, __siginfo_rwin_t __user *rwin)

arch/sparc/kernel/sigutil_64.c

15

int save_fpu_state(struct pt_regs *regs, __siginfo_fpu_t __user *fpu)

arch/sparc/kernel/sigutil_64.c

35

int restore_fpu_state(struct pt_regs *regs, __siginfo_fpu_t __user *fpu)

arch/sparc/kernel/sigutil_64.c

59

int save_rwin_state(int wsaved, __siginfo_rwin_t __user *rwin)

arch/sparc/kernel/sigutil_64.c

74

int restore_rwin_state(__siginfo_rwin_t __user *rp)

arch/sparc/kernel/sys_sparc32.c

105

COMPAT_SYSCALL_DEFINE2(lstat64, const char __user *, filename,

arch/sparc/kernel/sys_sparc32.c

106

struct compat_stat64 __user *, statbuf)

arch/sparc/kernel/sys_sparc32.c

117

struct compat_stat64 __user *, statbuf)

arch/sparc/kernel/sys_sparc32.c

128

const char __user *, filename,

arch/sparc/kernel/sys_sparc32.c

129

struct compat_stat64 __user *, statbuf, int, flag)

arch/sparc/kernel/sys_sparc32.c

141

struct compat_old_sigaction __user *,act,

arch/sparc/kernel/sys_sparc32.c

142

struct compat_old_sigaction __user *,oact)

arch/sparc/kernel/sys_sparc32.c

149

struct compat_sigaction __user *,act,

arch/sparc/kernel/sys_sparc32.c

150

struct compat_sigaction __user *,oact,

arch/sparc/kernel/sys_sparc32.c

151

void __user *,restorer,

arch/sparc/kernel/sys_sparc32.c

190

COMPAT_SYSCALL_DEFINE5(pread64, unsigned int, fd, char __user *, ubuf,

arch/sparc/kernel/sys_sparc32.c

196

COMPAT_SYSCALL_DEFINE5(pwrite64, unsigned int, fd, char __user *, ubuf,

arch/sparc/kernel/sys_sparc32.c

54

COMPAT_SYSCALL_DEFINE3(truncate64, const char __user *, path, u32, high, u32, low)

arch/sparc/kernel/sys_sparc32.c

65

struct compat_stat64 __user *statbuf)

arch/sparc/kernel/sys_sparc32.c

76

err |= put_user(0, (unsigned long __user *) &statbuf->__pad3[0]);

arch/sparc/kernel/sys_sparc32.c

79

err |= put_user(0, (unsigned int __user *) &statbuf->__pad4[0]);

arch/sparc/kernel/sys_sparc32.c

80

err |= put_user(0, (unsigned int __user *) &statbuf->__pad4[4]);

arch/sparc/kernel/sys_sparc32.c

94

COMPAT_SYSCALL_DEFINE2(stat64, const char __user *, filename,

arch/sparc/kernel/sys_sparc32.c

95

struct compat_stat64 __user *, statbuf)

arch/sparc/kernel/sys_sparc_32.c

162

force_sig_fault(SIGTRAP, TRAP_BRKPT, (void __user *)regs->pc);

arch/sparc/kernel/sys_sparc_32.c

170

struct old_sigaction __user *,act,

arch/sparc/kernel/sys_sparc_32.c

171

struct old_sigaction __user *,oact)

arch/sparc/kernel/sys_sparc_32.c

178

const struct sigaction __user *, act,

arch/sparc/kernel/sys_sparc_32.c

179

struct sigaction __user *, oact,

arch/sparc/kernel/sys_sparc_32.c

180

void __user *, restorer,

arch/sparc/kernel/sys_sparc_32.c

206

SYSCALL_DEFINE2(getdomainname, char __user *, name, int, len)

arch/sparc/kernel/sys_sparc_64.c

352

unsigned long, third, void __user *, ptr, long, fifth)

arch/sparc/kernel/sys_sparc_64.c

368

(const struct __kernel_timespec __user *)

arch/sparc/kernel/sys_sparc_64.c

413

(ulong __user *) third))

arch/sparc/kernel/sys_sparc_64.c

534

force_sig_fault(SIGTRAP, TRAP_BRKPT, (void __user *)regs->tpc);

arch/sparc/kernel/sys_sparc_64.c

541

SYSCALL_DEFINE2(getdomainname, char __user *, name, int, len)

arch/sparc/kernel/sys_sparc_64.c

568

SYSCALL_DEFINE1(sparc_adjtimex, struct __kernel_timex __user *, txc_p)

arch/sparc/kernel/sys_sparc_64.c

593

struct __kernel_timex __user *, txc_p)

arch/sparc/kernel/sys_sparc_64.c

627

utrap_handler_t __user *, old_p,

arch/sparc/kernel/sys_sparc_64.c

628

utrap_handler_t __user *, old_d)

arch/sparc/kernel/sys_sparc_64.c

693

SYSCALL_DEFINE5(rt_sigaction, int, sig, const struct sigaction __user *, act,

arch/sparc/kernel/sys_sparc_64.c

694

struct sigaction __user *, oact, void __user *, restorer,

arch/sparc/kernel/systbls.h

100

struct compat_stat64 __user * statbuf,

arch/sparc/kernel/systbls.h

15

asmlinkage long sys_getdomainname(char __user *name, int len);

arch/sparc/kernel/systbls.h

36

void __user *ptr, long fifth);

arch/sparc/kernel/systbls.h

47

utrap_handler_t __user *old_p,

arch/sparc/kernel/systbls.h

48

utrap_handler_t __user *old_d);

arch/sparc/kernel/systbls.h

52

asmlinkage long compat_sys_truncate64(const char __user * path,

arch/sparc/kernel/systbls.h

59

asmlinkage long compat_sys_stat64(const char __user * filename,

arch/sparc/kernel/systbls.h

60

struct compat_stat64 __user *statbuf);

arch/sparc/kernel/systbls.h

61

asmlinkage long compat_sys_lstat64(const char __user * filename,

arch/sparc/kernel/systbls.h

62

struct compat_stat64 __user *statbuf);

arch/sparc/kernel/systbls.h

64

struct compat_stat64 __user * statbuf);

arch/sparc/kernel/systbls.h

66

const char __user *filename,

arch/sparc/kernel/systbls.h

67

struct compat_stat64 __user * statbuf, int flag);

arch/sparc/kernel/systbls.h

69

char __user *ubuf,

arch/sparc/kernel/systbls.h

74

char __user *ubuf,

arch/sparc/kernel/systbls.h

97

struct compat_stat64 __user * statbuf);

arch/sparc/kernel/systbls.h

99

const char __user *filename,

arch/sparc/kernel/termios.c

15

int kernel_termios_to_user_termio(struct termio __user *termio,

arch/sparc/kernel/termios.c

34

struct termios2 __user *u)

arch/sparc/kernel/termios.c

55

int kernel_termios_to_user_termios(struct termios2 __user *u,

arch/sparc/kernel/termios.c

78

struct termios __user *u)

arch/sparc/kernel/termios.c

97

int kernel_termios_to_user_termios_1(struct termios __user *u,

arch/sparc/kernel/traps_32.c

105

(void __user *)regs->pc, type - 0x80);

arch/sparc/kernel/traps_32.c

118

send_sig_fault(SIGILL, ILL_ILLOPC, (void __user *)pc, current);

arch/sparc/kernel/traps_32.c

126

send_sig_fault(SIGILL, ILL_PRVOPC, (void __user *)pc, current);

arch/sparc/kernel/traps_32.c

293

send_sig_fault(SIGFPE, code, (void __user *)pc, fpt);

arch/sparc/kernel/traps_32.c

307

send_sig_fault(SIGEMT, EMT_TAGOVF, (void __user *)pc, current);

arch/sparc/kernel/traps_32.c

329

force_sig_fault(SIGBUS, BUS_OBJERR, (void __user *)pc);

arch/sparc/kernel/traps_32.c

335

send_sig_fault(SIGILL, ILL_COPROC, (void __user *)pc, current);

arch/sparc/kernel/traps_32.c

345

send_sig_fault(SIGILL, ILL_COPROC, (void __user *)pc, current);

arch/sparc/kernel/traps_32.c

351

send_sig_fault(SIGFPE, FPE_INTDIV, (void __user *)pc, current);

arch/sparc/kernel/traps_64.c

112

(void __user *)regs->tpc, lvl);

arch/sparc/kernel/traps_64.c

205

force_sig_fault(SIGSEGV, SEGV_MAPERR, (void __user *)regs->tpc);

arch/sparc/kernel/traps_64.c

2072

force_sig_fault(SIGSEGV, SEGV_ADIDERR, (void __user *)ent.err_raddr);

arch/sparc/kernel/traps_64.c

2143

if (!copy_from_user(&insn, (void __user *)regs->tpc, 4)) {

arch/sparc/kernel/traps_64.c

2186

(void __user *)sun4v_get_vaddr(regs));

arch/sparc/kernel/traps_64.c

2342

force_sig_fault(SIGFPE, code, (void __user *)regs->tpc);

arch/sparc/kernel/traps_64.c

2396

force_sig_fault(SIGEMT, EMT_TAGOVF, (void __user *)regs->tpc);

arch/sparc/kernel/traps_64.c

240

force_sig_fault(SIGSEGV, SEGV_MAPERR, (void __user *) addr);

arch/sparc/kernel/traps_64.c

2415

force_sig_fault(SIGFPE, FPE_INTDIV, (void __user *)regs->tpc);

arch/sparc/kernel/traps_64.c

2433

static void user_instruction_dump(unsigned int __user *pc)

arch/sparc/kernel/traps_64.c

2559

user_instruction_dump ((unsigned int __user *) regs->tpc);

arch/sparc/kernel/traps_64.c

258

if (get_user(insn, (u32 __user *)regs->tpc) == -EFAULT)

arch/sparc/kernel/traps_64.c

2585

if (get_user(insn, (u32 __user *) pc) != -EFAULT) {

arch/sparc/kernel/traps_64.c

2609

force_sig_fault(SIGILL, ILL_ILLOPC, (void __user *)pc);

arch/sparc/kernel/traps_64.c

2629

force_sig_fault(SIGBUS, BUS_ADRALN, (void __user *)sfar);

arch/sparc/kernel/traps_64.c

2647

force_sig_fault(SIGBUS, BUS_ADRALN, (void __user *) addr);

arch/sparc/kernel/traps_64.c

2694

force_sig_fault(SIGSEGV, SEGV_ADIPERR, (void __user *)addr);

arch/sparc/kernel/traps_64.c

2709

force_sig_fault(SIGILL, ILL_PRVOPC, (void __user *)regs->tpc);

arch/sparc/kernel/traps_64.c

324

force_sig_fault(SIGSEGV, SEGV_MAPERR, (void __user *)sfar);

arch/sparc/kernel/traps_64.c

388

force_sig_fault(SIGILL, ILL_ILLADR, (void __user *)addr);

arch/sparc/kernel/traps_64.c

391

force_sig_fault(SIGSEGV, SEGV_ACCADI, (void __user *)addr);

arch/sparc/kernel/traps_64.c

394

force_sig_fault(SIGSEGV, SEGV_MAPERR, (void __user *)addr);

arch/sparc/kernel/unaligned_32.c

108

struct reg_window32 __user *win;

arch/sparc/kernel/unaligned_32.c

115

win = (struct reg_window32 __user *) regs->u_regs[UREG_FP];

arch/sparc/kernel/unaligned_32.c

280

(void __user *)safe_compute_effective_address(regs, insn),

arch/sparc/kernel/unaligned_64.c

134

struct reg_window32 __user *win32;

arch/sparc/kernel/unaligned_64.c

135

win32 = (struct reg_window32 __user *)((unsigned long)((u32)fp));

arch/sparc/kernel/unaligned_64.c

138

struct reg_window __user *win;

arch/sparc/kernel/unaligned_64.c

139

win = (struct reg_window __user *)(fp + STACK_BIAS);

arch/sparc/kernel/unaligned_64.c

418

struct reg_window32 __user *win32;

arch/sparc/kernel/unaligned_64.c

419

win32 = (struct reg_window32 __user *)((unsigned long)((u32)fp));

arch/sparc/kernel/unaligned_64.c

422

struct reg_window __user *win;

arch/sparc/kernel/unaligned_64.c

423

win = (struct reg_window __user *)(fp + STACK_BIAS);

arch/sparc/kernel/unaligned_64.c

488

if (put_user (first >> 32, (u32 __user *)addr) ||

arch/sparc/kernel/unaligned_64.c

489

__put_user ((u32)first, (u32 __user *)(addr + 4)) ||

arch/sparc/kernel/unaligned_64.c

490

__put_user (second >> 32, (u32 __user *)(addr + 8)) ||

arch/sparc/kernel/unaligned_64.c

491

__put_user ((u32)second, (u32 __user *)(addr + 12))) {

arch/sparc/kernel/unaligned_64.c

528

err = get_user (data[0], (u32 __user *) addr);

arch/sparc/kernel/unaligned_64.c

531

err |= __get_user (data[i], (u32 __user *)(addr + 4*i));

arch/sparc/kernel/unaligned_64.c

585

put_user(0, (int __user *) reg);

arch/sparc/kernel/unaligned_64.c

587

put_user(0, ((int __user *) reg) + 1);

arch/sparc/kernel/unaligned_64.c

589

put_user(0, (unsigned long __user *) reg);

arch/sparc/kernel/unaligned_64.c

591

put_user(0, (unsigned long __user *) reg + 1);

arch/sparc/kernel/unaligned_64.c

612

if (get_user(insn, (u32 __user *) pc) != -EFAULT) {

arch/sparc/kernel/unaligned_64.c

621

err = get_user(first, (u32 __user *)sfar);

arch/sparc/kernel/unaligned_64.c

623

err = get_user(second, (u32 __user *)(sfar + 4));

arch/sparc/kernel/unaligned_64.c

676

if (get_user(insn, (u32 __user *) pc) != -EFAULT) {

arch/sparc/kernel/unaligned_64.c

695

if (put_user (value >> 32, (u32 __user *) sfar) ||

arch/sparc/kernel/unaligned_64.c

696

__put_user ((u32)value, (u32 __user *)(sfar + 4)))

arch/sparc/kernel/uprobes.c

148

unsigned long __user *uslot =

arch/sparc/kernel/uprobes.c

149

(unsigned long __user *) (fp + STACK_BIAS) + rd;

arch/sparc/kernel/uprobes.c

152

unsigned int __user *uslot = (unsigned int

arch/sparc/kernel/uprobes.c

153

__user *) fp + rd;

arch/sparc/kernel/visemul.c

165

struct reg_window32 __user *win32;

arch/sparc/kernel/visemul.c

166

win32 = (struct reg_window32 __user *)((unsigned long)((u32)fp));

arch/sparc/kernel/visemul.c

169

struct reg_window __user *win;

arch/sparc/kernel/visemul.c

170

win = (struct reg_window __user *)(fp + STACK_BIAS);

arch/sparc/kernel/visemul.c

176

static inline unsigned long __user *__fetch_reg_addr_user(unsigned int reg,

arch/sparc/kernel/visemul.c

185

struct reg_window32 __user *win32;

arch/sparc/kernel/visemul.c

186

win32 = (struct reg_window32 __user *)((unsigned long)((u32)fp));

arch/sparc/kernel/visemul.c

187

return (unsigned long __user *)&win32->locals[reg - 16];

arch/sparc/kernel/visemul.c

189

struct reg_window __user *win;

arch/sparc/kernel/visemul.c

190

win = (struct reg_window __user *)(fp + STACK_BIAS);

arch/sparc/kernel/visemul.c

211

unsigned long __user *rd_user = __fetch_reg_addr_user(rd, regs);

arch/sparc/kernel/visemul.c

214

__put_user((u32)val, (u32 __user *)rd_user);

arch/sparc/kernel/visemul.c

816

if (get_user(insn, (u32 __user *) pc))

arch/sparc/kernel/windows.c

123

copy_to_user((char __user *) sp, &tp->reg_window[window],

arch/sparc/kernel/windows.c

75

if (copy_to_user((char __user *) sp, &tp->reg_window[window],

arch/sparc/math-emu/math_32.c

182

if (!get_user(insn, (u32 __user *) regs->pc)) {

arch/sparc/math-emu/math_64.c

192

if (get_user(insn, (u32 __user *) pc) != -EFAULT) {

arch/sparc/math-emu/math_64.c

325

struct reg_window32 __user *win32;

arch/sparc/math-emu/math_64.c

327

win32 = (struct reg_window32 __user *)((unsigned long)((u32)regs->u_regs[UREG_FP]));

arch/sparc/math-emu/math_64.c

330

struct reg_window __user *win;

arch/sparc/math-emu/math_64.c

332

win = (struct reg_window __user *)(regs->u_regs[UREG_FP] + STACK_BIAS);

arch/sparc/mm/fault_32.c

86

force_sig_fault(sig, code, (void __user *) addr);

arch/sparc/mm/fault_64.c

182

force_sig_fault(sig, code, (void __user *) addr);

arch/sparc/vdso/vma.c

152

current->mm->context.vdso = (void __user *)text_start;

arch/um/drivers/harddog_kern.c

113

static ssize_t harddog_write(struct file *file, const char __user *data, size_t len,

arch/um/drivers/harddog_kern.c

127

void __user *argp= (void __user *)arg;

arch/um/drivers/harddog_kern.c

142

return put_user(0,(int __user *)argp);

arch/um/drivers/hostaudio_kern.c

151

if (get_user(data, (int __user *) arg))

arch/um/drivers/hostaudio_kern.c

167

if (put_user(data, (int __user *) arg))

arch/um/drivers/hostaudio_kern.c

72

static ssize_t hostaudio_read(struct file *file, char __user *buffer,

arch/um/drivers/hostaudio_kern.c

99

static ssize_t hostaudio_write(struct file *file, const char __user *buffer,

arch/um/drivers/mconsole_kern.c

770

const char __user *buffer, size_t count, loff_t *pos)

arch/um/drivers/ubd_kern.c

1346

if(copy_to_user((char __user *) arg, (char *) &ubd_id,

arch/um/drivers/ubd_kern.c

1352

if(copy_from_user(&volume, (char __user *) arg, sizeof(volume)))

arch/um/drivers/ubd_kern.c

1358

if(copy_to_user((char __user *) arg, &volume, sizeof(volume)))

arch/um/include/asm/futex.h

10

int arch_futex_atomic_op_inuser(int op, u32 oparg, int *oval, u32 __user *uaddr);

arch/um/include/asm/futex.h

11

int futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/um/include/asm/uaccess.h

21

extern unsigned long raw_copy_from_user(void *to, const void __user *from, unsigned long n);

arch/um/include/asm/uaccess.h

22

extern unsigned long raw_copy_to_user(void __user *to, const void *from, unsigned long n);

arch/um/include/asm/uaccess.h

23

extern unsigned long __clear_user(void __user *mem, unsigned long len);

arch/um/include/asm/uaccess.h

24

static inline int __access_ok(const void __user *ptr, unsigned long size);

arch/um/include/asm/uaccess.h

34

static inline int __access_ok(const void __user *ptr, unsigned long size)

arch/um/kernel/exitcode.c

40

const char __user *buffer, size_t count, loff_t *pos)

arch/um/kernel/process.c

253

int copy_from_user_proc(void *to, void __user *from, int size)

arch/um/kernel/ptrace.c

117

UPT_IS_USER(regs) ? (void __user *) UPT_IP(regs) : NULL);

arch/um/kernel/ptrace.c

45

unsigned long __user *p = (void __user *)data;

arch/um/kernel/ptrace.c

46

void __user *vp = p;

arch/um/kernel/skas/uaccess.c

147

unsigned long raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/um/kernel/skas/uaccess.c

162

unsigned long raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/um/kernel/skas/uaccess.c

182

long strncpy_from_user(char *dst, const char __user *src, long count)

arch/um/kernel/skas/uaccess.c

203

unsigned long __clear_user(void __user *mem, unsigned long len)

arch/um/kernel/skas/uaccess.c

221

long strnlen_user(const char __user *str, long len)

arch/um/kernel/skas/uaccess.c

251

int arch_futex_atomic_op_inuser(int op, u32 oparg, int *oval, u32 __user *uaddr)

arch/um/kernel/skas/uaccess.c

330

int futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/um/kernel/trap.c

263

force_sig_fault(SIGSEGV, SEGV_ACCERR, (void __user *) FAULT_ADDRESS(fi));

arch/um/kernel/trap.c

383

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *)address);

arch/um/kernel/trap.c

387

force_sig_fault(SIGSEGV, si_code, (void __user *) address);

arch/um/kernel/trap.c

418

force_sig_fault(sig, code, (void __user *)FAULT_ADDRESS(*fi));

arch/x86/coco/sev/vc-handle.c

1028

force_sig_fault(SIGBUS, BUS_OBJERR, (void __user *)0);

arch/x86/coco/sev/vc-handle.c

224

u8 __user *target = (u8 __user *)dst;

arch/x86/coco/sev/vc-handle.c

233

u16 __user *target = (u16 __user *)dst;

arch/x86/coco/sev/vc-handle.c

242

u32 __user *target = (u32 __user *)dst;

arch/x86/coco/sev/vc-handle.c

251

u64 __user *target = (u64 __user *)dst;

arch/x86/coco/sev/vc-handle.c

303

u8 __user *s = (u8 __user *)src;

arch/x86/coco/sev/vc-handle.c

312

u16 __user *s = (u16 __user *)src;

arch/x86/coco/sev/vc-handle.c

321

u32 __user *s = (u32 __user *)src;

arch/x86/coco/sev/vc-handle.c

330

u64 __user *s = (u64 __user *)src;

arch/x86/coco/sev/vc-handle.c

487

void __user *ref;

arch/x86/coco/sev/vc-handle.c

490

if (ref == (void __user *)-1L)

arch/x86/entry/syscall_32.c

288

(u32 __user __force *)(unsigned long)(u32)regs->sp);

arch/x86/entry/syscall_32.c

291

(u32 __user __force *)(unsigned long)(u32)regs->sp);

arch/x86/entry/vdso/vma.c

108

current->mm->context.vdso = (void __user *)new_vma->vm_start;

arch/x86/entry/vdso/vma.c

212

current->mm->context.vdso = (void __user *)text_start;

arch/x86/entry/vsyscall/vsyscall_64.c

105

if (!access_ok((void __user *)ptr, size)) {

arch/x86/entry/vsyscall/vsyscall_64.c

112

force_sig_fault(SIGSEGV, SEGV_MAPERR, (void __user *)ptr);

arch/x86/entry/vsyscall/vsyscall_64.c

146

if (get_user(caller, (unsigned long __user *)regs->sp) != 0) {

arch/x86/events/core.c

2882

valid_user_frame(const void __user *fp, unsigned long size)

arch/x86/events/core.c

2932

const struct stack_frame_ia32 __user *fp;

arch/x86/events/core.c

2946

!get_user(ret_addr, (const u32 __user *)regs->sp))

arch/x86/events/core.c

2976

const struct stack_frame __user *fp;

arch/x86/events/core.c

2990

fp = (void __user *)regs->bp;

arch/x86/events/core.c

3011

!get_user(ret_addr, (const unsigned long __user *)regs->sp))

arch/x86/events/core.c

3024

fp = (void __user *)frame.next_frame;

arch/x86/events/intel/ds.c

2057

bytes = copy_from_user_nmi(buf, (void __user *)to, size);

arch/x86/events/utils.c

125

bytes_left = copy_from_user_nmi(buf, (void __user *)from,

arch/x86/include/asm/checksum_32.h

172

void __user *dst,

arch/x86/include/asm/checksum_32.h

44

static inline __wsum csum_and_copy_from_user(const void __user *src,

arch/x86/include/asm/checksum_64.h

135

extern __wsum csum_and_copy_from_user(const void __user *src, void *dst, int len);

arch/x86/include/asm/checksum_64.h

136

extern __wsum csum_and_copy_to_user(const void *src, void __user *dst, int len);

arch/x86/include/asm/compat.h

109

int copy_siginfo_to_user32(struct compat_siginfo __user *to,

arch/x86/include/asm/fpu/signal.h

32

extern bool copy_fpstate_to_sigframe(void __user *buf, void __user *fp, int size, u32 pkru);

arch/x86/include/asm/fpu/signal.h

34

extern bool fpu__restore_sig(void __user *buf, int ia32_frame);

arch/x86/include/asm/futex.h

49

u32 __user *uaddr)

arch/x86/include/asm/futex.h

77

static inline int futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/x86/include/asm/futex_robust.h

13

return regs->flags & X86_EFLAGS_ZF ? (void __user *)regs->dx : NULL;

arch/x86/include/asm/futex_robust.h

7

static __always_inline void __user *x86_futex_robust_unlock_get_pop(struct pt_regs *regs)

arch/x86/include/asm/insn-eval.h

21

void __user *insn_get_addr_ref(struct insn *insn, struct pt_regs *regs);

arch/x86/include/asm/kvm_host.h

1980

int (*mem_enc_ioctl)(struct kvm *kvm, void __user *argp);

arch/x86/include/asm/kvm_host.h

1981

int (*vcpu_mem_enc_ioctl)(struct kvm_vcpu *vcpu, void __user *argp);

arch/x86/include/asm/kvm_host.h

1982

int (*vcpu_mem_enc_unlocked_ioctl)(struct kvm_vcpu *vcpu, void __user *argp);

arch/x86/include/asm/kvm_host.h

2023

struct kvm_nested_state __user *user_kvm_nested_state,

arch/x86/include/asm/kvm_host.h

2026

struct kvm_nested_state __user *user_kvm_nested_state,

arch/x86/include/asm/kvm_host.h

2506

void __user *__x86_set_memory_region(struct kvm *kvm, int id, gpa_t gpa,

arch/x86/include/asm/mmu.h

60

void __user *vdso; /* vdso base address */

arch/x86/include/asm/ptrace.h

462

struct user_desc __user *info);

arch/x86/include/asm/ptrace.h

464

struct user_desc __user *info, int can_allocate);

arch/x86/include/asm/sgx.h

421

int sgx_virt_ecreate(struct sgx_pageinfo *pageinfo, void __user *secs,

arch/x86/include/asm/sgx.h

423

int sgx_virt_einit(void __user *sigstruct, void __user *token,

arch/x86/include/asm/sgx.h

424

void __user *secs, u64 *lepubkeyhash, int *trapnr);

arch/x86/include/asm/sigframe.h

60

char __user *pretcode;

arch/x86/include/asm/sighandling.h

16

void signal_fault(struct pt_regs *regs, void __user *frame, char *where);

arch/x86/include/asm/sighandling.h

18

void __user *

arch/x86/include/asm/sighandling.h

20

void __user **fpstate);

arch/x86/include/asm/special_insns.h

209

static inline int write_user_shstk_64(u64 __user *addr, u64 val)

arch/x86/include/asm/uaccess.h

173

void __user *__ptr_pu; \

arch/x86/include/asm/uaccess.h

261

const unsigned int __user *__gu_ptr; \

arch/x86/include/asm/uaccess.h

262

__gu_ptr = (const void __user *)(ptr); \

arch/x86/include/asm/uaccess.h

324

[highbits] "m" __m(((u32 __user *)(__ptr)) + 1), \

arch/x86/include/asm/uaccess.h

471

#define __m(x) (*(struct __large_struct __user *)(x))

arch/x86/include/asm/uaccess.h

486

copy_from_user_nmi(void *to, const void __user *from, unsigned long n);

arch/x86/include/asm/uaccess.h

488

strncpy_from_user(char *dst, const char __user *src, long count);

arch/x86/include/asm/uaccess.h

490

extern __must_check long strnlen_user(const char __user *str, long n);

arch/x86/include/asm/uaccess.h

498

copy_mc_to_user(void __user *to, const void *from, unsigned len);

arch/x86/include/asm/uaccess.h

518

static __must_check __always_inline bool user_access_begin(const void __user *ptr, size_t len)

arch/x86/include/asm/uaccess.h

603

unsafe_put_user(*(type *)(src),(type __user *)(dst),label); \

arch/x86/include/asm/uaccess.h

611

char __user *__ucu_dst = (_dst); \

arch/x86/include/asm/uaccess.h

622

__get_user_size(*((type *)(dst)), (__force type __user *)(src), \

arch/x86/include/asm/uaccess.h

629

__get_user_size(*((type *)(dst)), (__force type __user *)(src), \

arch/x86/include/asm/uaccess.h

637

__put_user_size(*((type *)(src)), (__force type __user *)(dst), \

arch/x86/include/asm/uaccess_32.h

15

(void *to, const void __user *from, unsigned long n);

arch/x86/include/asm/uaccess_32.h

18

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/x86/include/asm/uaccess_32.h

24

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/x86/include/asm/uaccess_32.h

29

unsigned long __must_check copy_from_user_inatomic_nontemporal(void *, const void __user *, unsigned long n);

arch/x86/include/asm/uaccess_32.h

30

unsigned long __must_check clear_user(void __user *mem, unsigned long len);

arch/x86/include/asm/uaccess_32.h

31

unsigned long __must_check __clear_user(void __user *mem, unsigned long len);

arch/x86/include/asm/uaccess_64.h

139

raw_copy_from_user(void *dst, const void __user *src, unsigned long size)

arch/x86/include/asm/uaccess_64.h

145

raw_copy_to_user(void __user *dst, const void *src, unsigned long size)

arch/x86/include/asm/uaccess_64.h

152

extern size_t copy_user_flushcache(void *dst, const void __user *src, size_t size);

arch/x86/include/asm/uaccess_64.h

155

copy_from_user_inatomic_nontemporal(void *dst, const void __user *src,

arch/x86/include/asm/uaccess_64.h

168

copy_from_user_flushcache(void *dst, const void __user *src, size_t size)

arch/x86/include/asm/uaccess_64.h

179

rep_stos_alternative(void __user *addr, unsigned long len);

arch/x86/include/asm/uaccess_64.h

181

static __always_inline __must_check unsigned long __clear_user(void __user *addr, unsigned long size)

arch/x86/include/asm/uaccess_64.h

204

static __always_inline unsigned long clear_user(void __user *to, unsigned long n)

arch/x86/include/asm/uaccess_64.h

64

static inline void __user *mask_user_address(const void __user *ptr)

arch/x86/include/asm/uaccess_64.h

66

void __user *ret;

arch/x86/include/asm/uaccess_64.h

98

static inline bool __access_ok(const void __user *ptr, unsigned long size)

arch/x86/include/asm/vm86.h

32

struct vm86plus_struct __user *user_vm86;

arch/x86/include/uapi/asm/sigcontext.h

320

struct _fpstate __user *fpstate;

arch/x86/include/uapi/asm/sigcontext.h

380

struct _fpstate __user *fpstate; /* Zero when no FPU context */

arch/x86/include/uapi/asm/signal.h

104

void __user *ss_sp;

arch/x86/kernel/amd_node.c

144

static ssize_t smn_node_write(struct file *file, const char __user *userbuf,

arch/x86/kernel/amd_node.c

167

static ssize_t smn_address_write(struct file *file, const char __user *userbuf,

arch/x86/kernel/amd_node.c

198

static ssize_t smn_value_write(struct file *file, const char __user *userbuf,

arch/x86/kernel/apm_32.c

1433

static ssize_t do_read(struct file *fp, char __user *buf, size_t count, loff_t *ppos)

arch/x86/kernel/cet.c

79

force_sig_fault(SIGSEGV, SEGV_CPERR, (void __user *)0);

arch/x86/kernel/cpu/mce/dev-mcelog.c

162

static int __mce_read_apei(char __user **ubuf, size_t usize)

arch/x86/kernel/cpu/mce/dev-mcelog.c

202

static ssize_t mce_chrdev_read(struct file *filp, char __user *ubuf,

arch/x86/kernel/cpu/mce/dev-mcelog.c

205

char __user *buf = ubuf;

arch/x86/kernel/cpu/mce/dev-mcelog.c

257

int __user *p = (int __user *)arg;

arch/x86/kernel/cpu/mce/dev-mcelog.c

286

static ssize_t mce_chrdev_write(struct file *filp, const char __user *ubuf,

arch/x86/kernel/cpu/mce/inject.c

353

static ssize_t flags_read(struct file *filp, char __user *ubuf,

arch/x86/kernel/cpu/mce/inject.c

364

static ssize_t flags_write(struct file *filp, const char __user *ubuf,

arch/x86/kernel/cpu/mce/inject.c

690

inj_readme_read(struct file *filp, char __user *ubuf,

arch/x86/kernel/cpu/mce/severity.c

270

current->mce_vaddr = (void __user *)addr;

arch/x86/kernel/cpu/mce/severity.c

461

const char __user *ubuf,

arch/x86/kernel/cpu/mtrr/if.c

161

void __user *arg = (void __user *) __arg;

arch/x86/kernel/cpu/mtrr/if.c

191

struct mtrr_sentry32 __user *s32;

arch/x86/kernel/cpu/mtrr/if.c

193

s32 = (struct mtrr_sentry32 __user *)__arg;

arch/x86/kernel/cpu/mtrr/if.c

203

struct mtrr_gentry32 __user *g32;

arch/x86/kernel/cpu/mtrr/if.c

205

g32 = (struct mtrr_gentry32 __user *)__arg;

arch/x86/kernel/cpu/mtrr/if.c

322

struct mtrr_gentry32 __user *g32;

arch/x86/kernel/cpu/mtrr/if.c

324

g32 = (struct mtrr_gentry32 __user *)__arg;

arch/x86/kernel/cpu/mtrr/if.c

94

mtrr_write(struct file *file, const char __user *buf, size_t len, loff_t * ppos)

arch/x86/kernel/cpu/sgx/ioctl.c

1033

void __user *arg)

arch/x86/kernel/cpu/sgx/ioctl.c

1180

void __user *arg)

arch/x86/kernel/cpu/sgx/ioctl.c

1216

ret = sgx_ioc_enclave_create(encl, (void __user *)arg);

arch/x86/kernel/cpu/sgx/ioctl.c

1219

ret = sgx_ioc_enclave_add_pages(encl, (void __user *)arg);

arch/x86/kernel/cpu/sgx/ioctl.c

1222

ret = sgx_ioc_enclave_init(encl, (void __user *)arg);

arch/x86/kernel/cpu/sgx/ioctl.c

1225

ret = sgx_ioc_enclave_provision(encl, (void __user *)arg);

arch/x86/kernel/cpu/sgx/ioctl.c

1229

(void __user *)arg);

arch/x86/kernel/cpu/sgx/ioctl.c

1232

ret = sgx_ioc_enclave_modify_types(encl, (void __user *)arg);

arch/x86/kernel/cpu/sgx/ioctl.c

1235

ret = sgx_ioc_enclave_remove_pages(encl, (void __user *)arg);

arch/x86/kernel/cpu/sgx/ioctl.c

155

static long sgx_ioc_enclave_create(struct sgx_encl *encl, void __user *arg)

arch/x86/kernel/cpu/sgx/ioctl.c

171

if (copy_from_user(secs, (void __user *)create_arg.src, PAGE_SIZE))

arch/x86/kernel/cpu/sgx/ioctl.c

415

static long sgx_ioc_enclave_add_pages(struct sgx_encl *encl, void __user *arg)

arch/x86/kernel/cpu/sgx/ioctl.c

435

if (copy_from_user(&secinfo, (void __user *)add_arg.secinfo,

arch/x86/kernel/cpu/sgx/ioctl.c

573

static long sgx_ioc_enclave_init(struct sgx_encl *encl, void __user *arg)

arch/x86/kernel/cpu/sgx/ioctl.c

599

if (copy_from_user(sigstruct, (void __user *)init_arg.sigstruct,

arch/x86/kernel/cpu/sgx/ioctl.c

637

static long sgx_ioc_enclave_provision(struct sgx_encl *encl, void __user *arg)

arch/x86/kernel/cpu/sgx/ioctl.c

824

void __user *arg)

arch/x86/kernel/cpu/sgx/virt.c

353

int sgx_virt_ecreate(struct sgx_pageinfo *pageinfo, void __user *secs,

arch/x86/kernel/cpu/sgx/virt.c

387

static int __sgx_virt_einit(void __user *sigstruct, void __user *token,

arch/x86/kernel/cpu/sgx/virt.c

388

void __user *secs)

arch/x86/kernel/cpu/sgx/virt.c

427

int sgx_virt_einit(void __user *sigstruct, void __user *token,

arch/x86/kernel/cpu/sgx/virt.c

428

void __user *secs, u64 *lepubkeyhash, int *trapnr)

arch/x86/kernel/cpuid.c

62

static ssize_t cpuid_read_f(struct file *file, char __user *buf, size_t count, loff_t *ppos)

arch/x86/kernel/cpuid.c

64

char __user *tmp = buf;

arch/x86/kernel/dumpstack.c

89

return copy_from_user_nmi(buf, (void __user *)src, nbytes);

arch/x86/kernel/fpu/legacy.h

50

static inline int fnsave_to_user_sigframe(struct fregs_state __user *fx)

arch/x86/kernel/fpu/legacy.h

55

static inline int fxsave_to_user_sigframe(struct fxregs_state __user *fx)

arch/x86/kernel/fpu/legacy.h

80

static inline int fxrstor_from_user_sigframe(struct fxregs_state __user *fx)

arch/x86/kernel/fpu/legacy.h

98

static inline int frstor_from_user_sigframe(struct fregs_state __user *fx)

arch/x86/kernel/fpu/regset.c

144

const void *kbuf, const void __user *ubuf)

arch/x86/kernel/fpu/regset.c

215

const void *kbuf, const void __user *ubuf)

arch/x86/kernel/fpu/regset.c

434

const void *kbuf, const void __user *ubuf)

arch/x86/kernel/fpu/regset.c

92

const void *kbuf, const void __user *ubuf)

arch/x86/kernel/fpu/signal.c

117

static inline bool save_xstate_epilog(void __user *buf, int ia32_frame,

arch/x86/kernel/fpu/signal.c

120

struct xregs_state __user *x = buf;

arch/x86/kernel/fpu/signal.c

132

(__u32 __user *)(buf + fpstate->user_size));

arch/x86/kernel/fpu/signal.c

150

static inline int copy_fpregs_to_sigframe(struct xregs_state __user *buf, u32 pkru)

arch/x86/kernel/fpu/signal.c

156

return fxsave_to_user_sigframe((struct fxregs_state __user *) buf);

arch/x86/kernel/fpu/signal.c

158

return fnsave_to_user_sigframe((struct fregs_state __user *) buf);

arch/x86/kernel/fpu/signal.c

180

bool copy_fpstate_to_sigframe(void __user *buf, void __user *buf_fx, int size, u32 pkru)

arch/x86/kernel/fpu/signal.c

202

struct xregs_state __user *xbuf = buf_fx;

arch/x86/kernel/fpu/signal.c

243

static int __restore_fpregs_from_user(void __user *buf, u64 ufeatures,

arch/x86/kernel/fpu/signal.c

269

static bool restore_fpregs_from_user(void __user *buf, u64 xrestore, bool fx_only)

arch/x86/kernel/fpu/signal.c

27

static inline bool check_xstate_in_sigframe(struct fxregs_state __user *fxbuf,

arch/x86/kernel/fpu/signal.c

32

void __user *fpstate = fxbuf;

arch/x86/kernel/fpu/signal.c

327

static bool __fpu_restore_sig(void __user *buf, void __user *buf_fx,

arch/x86/kernel/fpu/signal.c

449

bool fpu__restore_sig(void __user *buf, int ia32_frame)

arch/x86/kernel/fpu/signal.c

452

void __user *buf_fx = buf;

arch/x86/kernel/fpu/signal.c

51

if (__get_user(magic2, (__u32 __user *)(fpstate + fx_sw->xstate_size)))

arch/x86/kernel/fpu/signal.c

69

static inline bool save_fsave_header(struct task_struct *tsk, void __user *buf)

arch/x86/kernel/fpu/signal.c

74

struct _fpstate_32 __user *fp = buf;

arch/x86/kernel/fpu/signal.c

88

struct fregs_state __user *fp = buf;

arch/x86/kernel/fpu/xstate.c

1069

void __user *get_xsave_addr_user(struct xregs_state __user *xsave, int xfeature_nr)

arch/x86/kernel/fpu/xstate.c

1074

return (void __user *)xsave + xstate_offsets[xfeature_nr];

arch/x86/kernel/fpu/xstate.c

1277

const void *kbuf, const void __user *ubuf)

arch/x86/kernel/fpu/xstate.c

1318

const void __user *ubuf, u32 *pkru)

arch/x86/kernel/fpu/xstate.c

1410

const void __user *ubuf)

arch/x86/kernel/fpu/xstate.c

1842

u64 __user *uptr = (u64 __user *)arg2;

arch/x86/kernel/fpu/xstate.h

102

return __put_user(pkru, (unsigned int __user *)get_xsave_addr_user(buf, XFEATURE_PKRU));

arch/x86/kernel/fpu/xstate.h

295

static inline int xsave_to_user_sigframe(struct xregs_state __user *buf, u32 pkru)

arch/x86/kernel/fpu/xstate.h

329

static inline int xrstor_from_user_sigframe(struct xregs_state __user *buf, u64 mask)

arch/x86/kernel/fpu/xstate.h

52

extern int copy_sigframe_from_user_to_xstate(struct task_struct *tsk, const void __user *ubuf);

arch/x86/kernel/fpu/xstate.h

58

extern void __user *get_xsave_addr_user(struct xregs_state __user *xsave, int xfeature_nr);

arch/x86/kernel/fpu/xstate.h

73

static inline int set_xfeature_in_sigframe(struct xregs_state __user *xbuf, u64 mask)

arch/x86/kernel/fpu/xstate.h

89

static inline int update_pkru_in_sigframe(struct xregs_state __user *buf, u32 pkru)

arch/x86/kernel/itmt.c

43

const char __user *ubuf,

arch/x86/kernel/kdebugfs.c

29

static ssize_t setup_data_read(struct file *file, char __user *user_buf,

arch/x86/kernel/ldt.c

502

static int read_ldt(void __user *ptr, unsigned long bytecount)

arch/x86/kernel/ldt.c

541

static int read_default_ldt(void __user *ptr, unsigned long bytecount)

arch/x86/kernel/ldt.c

578

static int write_ldt(void __user *ptr, unsigned long bytecount, int oldmode)

arch/x86/kernel/ldt.c

667

SYSCALL_DEFINE3(modify_ldt, int , func , void __user * , ptr ,

arch/x86/kernel/msr.c

108

static ssize_t msr_write(struct file *file, const char __user *buf,

arch/x86/kernel/msr.c

111

const u32 __user *tmp = (const u32 __user *)buf;

arch/x86/kernel/msr.c

150

u32 __user *uregs = (u32 __user *)arg;

arch/x86/kernel/msr.c

52

static ssize_t msr_read(struct file *file, char __user *buf,

arch/x86/kernel/msr.c

55

u32 __user *tmp = (u32 __user *) buf;

arch/x86/kernel/process.c

143

struct user_desc __user *utls = (struct user_desc __user *)tls;

arch/x86/kernel/process.c

328

return put_user(val, (unsigned int __user *)adr);

arch/x86/kernel/process_64.c

931

ret = put_user(base, (unsigned long __user *)arg2);

arch/x86/kernel/process_64.c

937

ret = put_user(base, (unsigned long __user *)arg2);

arch/x86/kernel/process_64.c

956

(unsigned long __user *)arg2);

arch/x86/kernel/process_64.c

966

return put_user(0, (unsigned long __user *)arg2);

arch/x86/kernel/process_64.c

968

return put_user(LAM_U57_BITS, (unsigned long __user *)arg2);

arch/x86/kernel/ptrace.c

1039

const void *kbuf, const void __user *ubuf)

arch/x86/kernel/ptrace.c

1050

const compat_ulong_t __user *u = ubuf;

arch/x86/kernel/ptrace.c

1069

void __user *datap = compat_ptr(data);

arch/x86/kernel/ptrace.c

1077

ret = put_user(val, (__u32 __user *)datap);

arch/x86/kernel/ptrace.c

1138

void __user *datap = compat_ptr(data);

arch/x86/kernel/ptrace.c

1160

ret = put_user(tmp, (__u32 __user *)datap);

arch/x86/kernel/ptrace.c

1417

user_mode(regs) ? (void __user *)regs->ip : NULL);

arch/x86/kernel/ptrace.c

446

const void *kbuf, const void __user *ubuf)

arch/x86/kernel/ptrace.c

457

const unsigned long __user *u = ubuf;

arch/x86/kernel/ptrace.c

734

unsigned long __user *datap = (unsigned long __user *)data;

arch/x86/kernel/ptrace.c

827

(struct user_desc __user *)data);

arch/x86/kernel/ptrace.c

834

(struct user_desc __user *)data, 0);

arch/x86/kernel/shstk.c

252

if (val && get_user(*val, (__user u64 *)ssp))

arch/x86/kernel/shstk.c

273

ret = write_user_shstk_64((__user void *)ssp, val);

arch/x86/kernel/shstk.c

283

static int put_shstk_data(u64 __user *addr, u64 data)

arch/x86/kernel/shstk.c

297

static int get_shstk_data(unsigned long *data, unsigned long __user *addr)

arch/x86/kernel/shstk.c

321

if (put_shstk_data((void __user *)*ssp, target_ssp))

arch/x86/kernel/shstk.c

366

err = get_shstk_data(&token_addr, (unsigned long __user *)*ssp);

arch/x86/kernel/shstk.c

386

void __user *restorer = ksig->ka.sa.sa_restorer;

arch/x86/kernel/shstk.c

407

err = write_user_shstk_64((u64 __user *)ssp, (u64)restorer);

arch/x86/kernel/shstk.c

577

return put_user(task->thread.features, (unsigned long __user *)arg2);

arch/x86/kernel/shstk.c

626

return write_user_shstk_64((u64 __user *)ssp, (u64)val);

arch/x86/kernel/shstk.c

66

if (write_user_shstk_64((u64 __user *)addr, (u64)ssp))

arch/x86/kernel/signal.c

133

*fpstate = (void __user *)sp;

arch/x86/kernel/signal.c

157

return (void __user *)-1L;

arch/x86/kernel/signal.c

163

if (!copy_fpstate_to_sigframe(*fpstate, (void __user *)buf_fx, math_size, pkru)) {

arch/x86/kernel/signal.c

169

return (void __user *)-1L;

arch/x86/kernel/signal.c

172

return (void __user *)sp;

arch/x86/kernel/signal.c

368

void signal_fault(struct pt_regs *regs, void __user *frame, char *where)

arch/x86/kernel/signal.c

93

void __user *

arch/x86/kernel/signal.c

95

void __user **fpstate)

arch/x86/kernel/signal_32.c

108

struct sigcontext_32 __user *usc)

arch/x86/kernel/signal_32.c

152

struct sigframe_ia32 __user *frame = (struct sigframe_ia32 __user *)(regs->sp-8);

arch/x86/kernel/signal_32.c

177

struct rt_sigframe_ia32 __user *frame;

arch/x86/kernel/signal_32.c

182

frame = (struct rt_sigframe_ia32 __user *)(regs->sp - 4);

arch/x86/kernel/signal_32.c

186

if (__get_user(*(__u64 *)&set, (__u64 __user *)&frame->uc.uc_sigmask))

arch/x86/kernel/signal_32.c

211

__unsafe_setup_sigcontext32(struct sigcontext_32 __user *sc,

arch/x86/kernel/signal_32.c

212

void __user *fpstate,

arch/x86/kernel/signal_32.c

215

unsafe_put_user(get_user_seg(gs), (unsigned int __user *)&sc->gs, Efault);

arch/x86/kernel/signal_32.c

217

unsafe_put_user(get_user_seg(fs), (unsigned int __user *)&sc->fs, Efault);

arch/x86/kernel/signal_32.c

218

unsafe_put_user(get_user_seg(ds), (unsigned int __user *)&sc->ds, Efault);

arch/x86/kernel/signal_32.c

219

unsafe_put_user(get_user_seg(es), (unsigned int __user *)&sc->es, Efault);

arch/x86/kernel/signal_32.c

221

unsafe_put_user(regs->fs, (unsigned int __user *)&sc->fs, Efault);

arch/x86/kernel/signal_32.c

222

unsafe_put_user(regs->es, (unsigned int __user *)&sc->es, Efault);

arch/x86/kernel/signal_32.c

223

unsafe_put_user(regs->ds, (unsigned int __user *)&sc->ds, Efault);

arch/x86/kernel/signal_32.c

237

unsafe_put_user(regs->cs, (unsigned int __user *)&sc->cs, Efault);

arch/x86/kernel/signal_32.c

240

unsafe_put_user(regs->ss, (unsigned int __user *)&sc->ss, Efault);

arch/x86/kernel/signal_32.c

262

struct sigframe_ia32 __user *frame;

arch/x86/kernel/signal_32.c

263

void __user *restorer;

arch/x86/kernel/signal_32.c

264

void __user *fp = NULL;

arch/x86/kernel/signal_32.c

301

unsafe_put_user(*((u64 *)&code), (u64 __user *)frame->retcode, Efault);

arch/x86/kernel/signal_32.c

333

struct rt_sigframe_ia32 __user *frame;

arch/x86/kernel/signal_32.c

334

void __user *restorer;

arch/x86/kernel/signal_32.c

335

void __user *fp = NULL;

arch/x86/kernel/signal_32.c

378

unsafe_put_user(*((u64 *)&code), (u64 __user *)frame->retcode, Efault);

arch/x86/kernel/signal_32.c

380

unsafe_put_user(*(__u64 *)set, (__u64 __user *)&frame->uc.uc_sigmask, Efault);

arch/x86/kernel/signal_64.c

128

unsafe_put_user(fpstate, (unsigned long __user *)&sc->fpstate, Efault);

arch/x86/kernel/signal_64.c

146

(__u64 __user *)&(frame)->uc.uc_sigmask, \

arch/x86/kernel/signal_64.c

167

struct rt_sigframe __user *frame;

arch/x86/kernel/signal_64.c

168

void __user *fp = NULL;

arch/x86/kernel/signal_64.c

249

struct rt_sigframe __user *frame;

arch/x86/kernel/signal_64.c

255

frame = (struct rt_sigframe __user *)(regs->sp - sizeof(long));

arch/x86/kernel/signal_64.c

258

if (__get_user(*(__u64 *)&set, (__u64 __user *)&frame->uc.uc_sigmask))

arch/x86/kernel/signal_64.c

282

static int x32_copy_siginfo_to_user(struct compat_siginfo __user *to,

arch/x86/kernel/signal_64.c

297

int copy_siginfo_to_user32(struct compat_siginfo __user *to,

arch/x86/kernel/signal_64.c

308

struct rt_sigframe_x32 __user *frame;

arch/x86/kernel/signal_64.c

310

void __user *restorer;

arch/x86/kernel/signal_64.c

311

void __user *fp = NULL;

arch/x86/kernel/signal_64.c

332

unsafe_put_user(restorer, (unsigned long __user *)&frame->pretcode, Efault);

arch/x86/kernel/signal_64.c

367

struct rt_sigframe_x32 __user *frame;

arch/x86/kernel/signal_64.c

373

frame = (struct rt_sigframe_x32 __user *)(regs->sp - 8);

arch/x86/kernel/signal_64.c

377

if (__get_user(set.sig[0], (__u64 __user *)&frame->uc.uc_sigmask))

arch/x86/kernel/signal_64.c

51

struct sigcontext __user *usc,

arch/x86/kernel/signal_64.c

95

return fpu__restore_sig((void __user *)sc.fpstate, 0);

arch/x86/kernel/signal_64.c

99

__unsafe_setup_sigcontext(struct sigcontext __user *sc, void __user *fpstate,

arch/x86/kernel/stacktrace.c

109

const void __user *fp = (const void __user *)regs->bp;

arch/x86/kernel/stacktrace.c

83

const void __user *next_fp;

arch/x86/kernel/stacktrace.c

88

copy_stack_frame(const struct stack_frame_user __user *fp,

arch/x86/kernel/sys_ia32.c

133

static int cp_stat64(struct stat64 __user *ubuf, struct kstat *stat)

arch/x86/kernel/sys_ia32.c

165

COMPAT_SYSCALL_DEFINE2(ia32_stat64, const char __user *, filename,

arch/x86/kernel/sys_ia32.c

166

struct stat64 __user *, statbuf)

arch/x86/kernel/sys_ia32.c

176

COMPAT_SYSCALL_DEFINE2(ia32_lstat64, const char __user *, filename,

arch/x86/kernel/sys_ia32.c

177

struct stat64 __user *, statbuf)

arch/x86/kernel/sys_ia32.c

187

struct stat64 __user *, statbuf)

arch/x86/kernel/sys_ia32.c

197

const char __user *, filename,

arch/x86/kernel/sys_ia32.c

198

struct stat64 __user *, statbuf, int, flag)

arch/x86/kernel/sys_ia32.c

224

COMPAT_SYSCALL_DEFINE1(ia32_mmap, struct mmap_arg_struct32 __user *, arg)

arch/x86/kernel/sys_ia32.c

242

unsigned long, newsp, int __user *, parent_tidptr,

arch/x86/kernel/sys_ia32.c

243

unsigned long, tls_val, int __user *, child_tidptr)

arch/x86/kernel/sys_ia32.c

54

SYSCALL_DEFINE3(ia32_truncate64, const char __user *, filename,

arch/x86/kernel/sys_ia32.c

69

SYSCALL_DEFINE5(ia32_pread64, unsigned int, fd, char __user *, ubuf,

arch/x86/kernel/sys_ia32.c

76

SYSCALL_DEFINE5(ia32_pwrite64, unsigned int, fd, const char __user *, ubuf,

arch/x86/kernel/tboot.c

358

static ssize_t tboot_log_read(struct file *file, char __user *user_buf, size_t count, loff_t *ppos)

arch/x86/kernel/tls.c

116

struct user_desc __user *u_info,

arch/x86/kernel/tls.c

188

SYSCALL_DEFINE1(set_thread_area, struct user_desc __user *, u_info)

arch/x86/kernel/tls.c

218

struct user_desc __user *u_info)

arch/x86/kernel/tls.c

240

SYSCALL_DEFINE1(get_thread_area, struct user_desc __user *, u_info)

arch/x86/kernel/tls.c

271

const void *kbuf, const void __user *ubuf)

arch/x86/kernel/traps.c

1466

(void __user *)uprobe_get_trap_addr(regs));

arch/x86/kernel/traps.c

1655

ILL_BADSTK, (void __user *)NULL);

arch/x86/kernel/traps.c

336

long error_code, int sicode, void __user *addr)

arch/x86/kernel/traps.c

353

unsigned long trapnr, int signr, int sicode, void __user *addr)

arch/x86/kernel/traps.c

375

static __always_inline void __user *error_get_trap_addr(struct pt_regs *regs)

arch/x86/kernel/traps.c

377

return (void __user *)uprobe_get_trap_addr(regs);

arch/x86/kernel/traps.c

815

if (get_user(byte, (const char __user *)ip))

arch/x86/kernel/umip.c

312

static void force_sig_info_umip_fault(void __user *addr, struct pt_regs *regs)

arch/x86/kernel/umip.c

354

void __user *uaddr;

arch/x86/kernel/uprobes.c

1216

if (copy_to_user((void __user *)new_sp, &val, sizeof_long(regs)))

arch/x86/kernel/uprobes.c

1770

if (copy_from_user(&orig_ret_vaddr, (void __user *)regs->sp, rasize))

arch/x86/kernel/uprobes.c

1777

nleft = copy_to_user((void __user *)regs->sp, &trampoline_vaddr, rasize);

arch/x86/kernel/uprobes.c

388

err = copy_from_user(&args, (void __user *)regs->sp, sizeof(args));

arch/x86/kernel/uprobes.c

426

err = copy_to_user((void __user *)regs->sp, &args, sizeof(args));

arch/x86/kernel/uprobes.c

815

err = copy_from_user(&args, (void __user *)regs->sp, sizeof(args));

arch/x86/kernel/uprobes.c

868

err = copy_to_user((void __user *)regs->sp, &args, sizeof(args));

arch/x86/kernel/vm86_32.c

168

static long do_sys_vm86(struct vm86plus_struct __user *user_vm86, bool plus);

arch/x86/kernel/vm86_32.c

170

SYSCALL_DEFINE1(vm86old, struct vm86_struct __user *, user_vm86)

arch/x86/kernel/vm86_32.c

172

return do_sys_vm86((struct vm86plus_struct __user *) user_vm86, false);

arch/x86/kernel/vm86_32.c

195

return do_sys_vm86((struct vm86plus_struct __user *) arg, true);

arch/x86/kernel/vm86_32.c

199

static long do_sys_vm86(struct vm86plus_struct __user *user_vm86, bool plus)

arch/x86/kernel/vm86_32.c

495

unsigned char __user *ssp, unsigned short sp)

arch/x86/kernel/vm86_32.c

497

unsigned long __user *intr_ptr;

arch/x86/kernel/vm86_32.c

507

intr_ptr = (unsigned long __user *) (i << 2);

arch/x86/kernel/vm86_32.c

536

do_int(regs, trapno, (unsigned char __user *) (regs->pt.ss << 4), SP(regs));

arch/x86/kernel/vm86_32.c

550

unsigned char __user *csp;

arch/x86/kernel/vm86_32.c

551

unsigned char __user *ssp;

arch/x86/kernel/vm86_32.c

562

csp = (unsigned char __user *) (regs->pt.cs << 4);

arch/x86/kernel/vm86_32.c

563

ssp = (unsigned char __user *) (regs->pt.ss << 4);

arch/x86/kernel/vm86_32.c

99

struct vm86plus_struct __user *user;

arch/x86/kvm/cpuid.c

1950

static bool sanity_check_entries(struct kvm_cpuid_entry2 __user *entries,

arch/x86/kvm/cpuid.c

1978

struct kvm_cpuid_entry2 __user *entries,

arch/x86/kvm/cpuid.c

591

struct kvm_cpuid_entry __user *entries)

arch/x86/kvm/cpuid.c

636

struct kvm_cpuid_entry2 __user *entries)

arch/x86/kvm/cpuid.c

659

struct kvm_cpuid_entry2 __user *entries)

arch/x86/kvm/cpuid.h

53

struct kvm_cpuid_entry2 __user *entries,

arch/x86/kvm/cpuid.h

57

struct kvm_cpuid_entry __user *entries);

arch/x86/kvm/cpuid.h

60

struct kvm_cpuid_entry2 __user *entries);

arch/x86/kvm/cpuid.h

63

struct kvm_cpuid_entry2 __user *entries);

arch/x86/kvm/hyperv.c

1571

if (put_user(0, (u32 __user *)addr))

arch/x86/kvm/hyperv.c

2774

struct kvm_cpuid_entry2 __user *entries)

arch/x86/kvm/hyperv.h

195

struct kvm_cpuid_entry2 __user *entries);

arch/x86/kvm/lapic.c

2903

void __user *hva;

arch/x86/kvm/mmu/mmu.c

3536

send_sig_mceerr(BUS_MCEERR_AR, (void __user *)hva, PAGE_SHIFT, current);

arch/x86/kvm/mmu/paging_tmpl.h

215

pt_element_t __user *ptep_user;

arch/x86/kvm/mmu/paging_tmpl.h

319

pt_element_t __user *ptep_user;

arch/x86/kvm/mmu/paging_tmpl.h

412

ptep_user = (pt_element_t __user *)((void *)host_addr + offset);

arch/x86/kvm/mmu/paging_tmpl.h

87

pt_element_t __user *ptep_user[PT_MAX_FULL_LEVELS];

arch/x86/kvm/pmu.c

1241

int kvm_vm_ioctl_set_pmu_event_filter(struct kvm *kvm, void __user *argp)

arch/x86/kvm/pmu.c

1243

struct kvm_pmu_event_filter __user *user_filter = argp;

arch/x86/kvm/pmu.h

284

int kvm_vm_ioctl_set_pmu_event_filter(struct kvm *kvm, void __user *argp);

arch/x86/kvm/svm/nested.c

1881

struct kvm_nested_state __user *user_kvm_nested_state,

arch/x86/kvm/svm/nested.c

1892

struct vmcb __user *user_vmcb = (struct vmcb __user *)

arch/x86/kvm/svm/nested.c

1951

struct kvm_nested_state __user *user_kvm_nested_state,

arch/x86/kvm/svm/nested.c

1955

struct vmcb __user *user_vmcb = (struct vmcb __user *)

arch/x86/kvm/svm/sev.c

1145

void __user *measure = u64_to_user_ptr(argp->data);

arch/x86/kvm/svm/sev.c

1148

void __user *p = NULL;

arch/x86/kvm/svm/sev.c

1305

if (copy_to_user((void __user *)dst, buf + (src & 15), len))

arch/x86/kvm/svm/sev.c

1335

if (copy_from_user(buf + (dst & 15), (void __user *)src, len))

arch/x86/kvm/svm/sev.c

1497

void __user *report = u64_to_user_ptr(argp->data);

arch/x86/kvm/svm/sev.c

1500

void __user *p;

arch/x86/kvm/svm/sev.c

2407

void __user *src;

arch/x86/kvm/svm/sev.c

2625

int sev_mem_enc_ioctl(struct kvm *kvm, void __user *argp)

arch/x86/kvm/svm/svm.h

981

int sev_mem_enc_ioctl(struct kvm *kvm, void __user *argp);

arch/x86/kvm/vmx/main.c

831

static int vt_mem_enc_ioctl(struct kvm *kvm, void __user *argp)

arch/x86/kvm/vmx/main.c

839

static int vt_vcpu_mem_enc_ioctl(struct kvm_vcpu *vcpu, void __user *argp)

arch/x86/kvm/vmx/main.c

847

static int vt_vcpu_mem_enc_unlocked_ioctl(struct kvm_vcpu *vcpu, void __user *argp)

arch/x86/kvm/vmx/nested.c

6745

struct kvm_nested_state __user *user_kvm_nested_state,

arch/x86/kvm/vmx/nested.c

6759

struct kvm_vmx_nested_state_data __user *user_vmx_nested_state =

arch/x86/kvm/vmx/nested.c

6899

struct kvm_nested_state __user *user_kvm_nested_state,

arch/x86/kvm/vmx/nested.c

6904

struct kvm_vmx_nested_state_data __user *user_vmx_nested_state =

arch/x86/kvm/vmx/sgx.c

209

ret = sgx_virt_ecreate(pageinfo, (void __user *)secs_hva, &trapnr);

arch/x86/kvm/vmx/sgx.c

331

ret = sgx_virt_einit((void __user *)sig_hva, (void __user *)token_hva,

arch/x86/kvm/vmx/sgx.c

332

(void __user *)secs_hva,

arch/x86/kvm/vmx/sgx.c

67

if (__copy_from_user(data, (void __user *)hva, size)) {

arch/x86/kvm/vmx/tdx.c

2267

struct kvm_tdx_capabilities __user *user_caps;

arch/x86/kvm/vmx/tdx.c

2768

struct kvm_tdx_init_vm __user *user_data = u64_to_user_ptr(cmd->data);

arch/x86/kvm/vmx/tdx.c

2897

static int tdx_get_cmd(void __user *argp, struct kvm_tdx_cmd *cmd)

arch/x86/kvm/vmx/tdx.c

2912

int tdx_vm_ioctl(struct kvm *kvm, void __user *argp)

arch/x86/kvm/vmx/tdx.c

3072

struct kvm_cpuid2 __user *output;

arch/x86/kvm/vmx/tdx.c

3287

int tdx_vcpu_unlocked_ioctl(struct kvm_vcpu *vcpu, void __user *argp)

arch/x86/kvm/vmx/tdx.c

3324

int tdx_vcpu_ioctl(struct kvm_vcpu *vcpu, void __user *argp)

arch/x86/kvm/vmx/vmx.c

3988

static int init_rmode_tss(struct kvm *kvm, void __user *ua)

arch/x86/kvm/vmx/vmx.c

4014

void __user *uaddr;

arch/x86/kvm/vmx/vmx.c

5256

void __user *ret;

arch/x86/kvm/vmx/x86_ops.h

134

int tdx_vm_ioctl(struct kvm *kvm, void __user *argp);

arch/x86/kvm/vmx/x86_ops.h

156

int tdx_vcpu_ioctl(struct kvm_vcpu *vcpu, void __user *argp);

arch/x86/kvm/vmx/x86_ops.h

157

int tdx_vcpu_unlocked_ioctl(struct kvm_vcpu *vcpu, void __user *argp);

arch/x86/kvm/x86.c

106

#define ERR_PTR_USR(e) ((void __user *)ERR_PTR(e))

arch/x86/kvm/x86.c

13371

void __user * __x86_set_memory_region(struct kvm *kvm, int id, gpa_t gpa,

arch/x86/kvm/x86.c

13396

return (void __user *)hva;

arch/x86/kvm/x86.c

13421

return (void __user *)hva;

arch/x86/kvm/x86.c

3723

struct kvm_steal_time __user *st;

arch/x86/kvm/x86.c

3753

st = (struct kvm_steal_time __user *)ghc->hva;

arch/x86/kvm/x86.c

4676

static int msr_io(struct kvm_vcpu *vcpu, struct kvm_msrs __user *user_msrs,

arch/x86/kvm/x86.c

4737

struct kvm_cpuid2 __user *cpuid_arg)

arch/x86/kvm/x86.c

5001

u64 __user *uaddr = u64_to_user_ptr(attr->addr);

arch/x86/kvm/x86.c

5025

void __user *argp = (void __user *)arg;

arch/x86/kvm/x86.c

5030

struct kvm_msr_list __user *user_msr_list = argp;

arch/x86/kvm/x86.c

5057

struct kvm_cpuid2 __user *cpuid_arg = argp;

arch/x86/kvm/x86.c

5083

struct kvm_msr_list __user *user_msr_list = argp;

arch/x86/kvm/x86.c

5115

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

arch/x86/kvm/x86.c

5123

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

arch/x86/kvm/x86.c

5226

struct kvm_steal_time __user *st;

arch/x86/kvm/x86.c

5261

st = (struct kvm_steal_time __user *)ghc->hva;

arch/x86/kvm/x86.c

5924

u64 __user *uaddr = u64_to_user_ptr(attr->addr);

arch/x86/kvm/x86.c

5944

u64 __user *uaddr = u64_to_user_ptr(attr->addr);

arch/x86/kvm/x86.c

5982

void __user *argp)

arch/x86/kvm/x86.c

6030

void __user *user_ptr;

arch/x86/kvm/x86.c

6036

user_ptr = (void __user *)(uintptr_t)cap->args[0];

arch/x86/kvm/x86.c

6093

static int kvm_get_one_msr(struct kvm_vcpu *vcpu, u32 msr, u64 __user *user_val)

arch/x86/kvm/x86.c

6106

static int kvm_set_one_msr(struct kvm_vcpu *vcpu, u32 msr, u64 __user *user_val)

arch/x86/kvm/x86.c

6120

void __user *argp)

arch/x86/kvm/x86.c

6124

u64 __user *user_val;

arch/x86/kvm/x86.c

6168

struct kvm_reg_list __user *user_list)

arch/x86/kvm/x86.c

6193

void __user *argp = (void __user *)arg;

arch/x86/kvm/x86.c

6256

struct kvm_cpuid __user *cpuid_arg = argp;

arch/x86/kvm/x86.c

6266

struct kvm_cpuid2 __user *cpuid_arg = argp;

arch/x86/kvm/x86.c

6277

struct kvm_cpuid2 __user *cpuid_arg = argp;

arch/x86/kvm/x86.c

6528

struct kvm_nested_state __user *user_kvm_nested_state = argp;

arch/x86/kvm/x86.c

6557

struct kvm_nested_state __user *user_kvm_nested_state = argp;

arch/x86/kvm/x86.c

7041

bitmap = memdup_user((__user u8*)user_range->bitmap, bitmap_size);

arch/x86/kvm/x86.c

7123

void __user *argp = (void __user *)arg;

arch/x86/kvm/x86.c

7129

struct kvm_msr_filter __user *user_msr_filter = argp;

arch/x86/kvm/x86.c

7188

static int kvm_vm_ioctl_get_clock(struct kvm *kvm, void __user *argp)

arch/x86/kvm/x86.c

7199

static int kvm_vm_ioctl_set_clock(struct kvm *kvm, void __user *argp)

arch/x86/kvm/x86.c

7249

void __user *argp = (void __user *)arg;

arch/x86/kvm/x86.c

7261

void __user *argp = (void __user *)arg;

arch/x86/kvm/x86.c

7608

struct kvm_msr_filter __user *user_msr_filter = argp;

arch/x86/kvm/x86.c

8305

(__try_cmpxchg_user((t __user *)(ptr), (t *)(old), *(t *)(new), efault ## t))

arch/x86/kvm/xen.c

1350

page = memdup_user((u8 __user *)blob_addr, PAGE_SIZE);

arch/x86/kvm/xen.c

790

void __user * hva = u64_to_user_ptr(data->u.shared_info.hva);

arch/x86/lib/copy_mc.c

84

unsigned long __must_check copy_mc_to_user(void __user *dst, const void *src, unsigned len)

arch/x86/lib/csum-wrappers_64.c

22

csum_and_copy_from_user(const void __user *src, void *dst, int len)

arch/x86/lib/csum-wrappers_64.c

44

csum_and_copy_to_user(const void *src, void __user *dst, int len)

arch/x86/lib/insn-eval.c

1241

static void __user *get_addr_ref_16(struct insn *insn, struct pt_regs *regs)

arch/x86/lib/insn-eval.c

1286

return (void __user *)linear_addr;

arch/x86/lib/insn-eval.c

1305

static void __user *get_addr_ref_32(struct insn *insn, struct pt_regs *regs)

arch/x86/lib/insn-eval.c

1375

return (void __user *)linear_addr;

arch/x86/lib/insn-eval.c

1394

static void __user *get_addr_ref_64(struct insn *insn, struct pt_regs *regs)

arch/x86/lib/insn-eval.c

1396

return (void __user *)-1L;

arch/x86/lib/insn-eval.c

1399

static void __user *get_addr_ref_64(struct insn *insn, struct pt_regs *regs)

arch/x86/lib/insn-eval.c

1433

return (void __user *)linear_addr;

arch/x86/lib/insn-eval.c

1452

void __user *insn_get_addr_ref(struct insn *insn, struct pt_regs *regs)

arch/x86/lib/insn-eval.c

1455

return (void __user *)-1L;

arch/x86/lib/insn-eval.c

1458

return (void __user *)-1L;

arch/x86/lib/insn-eval.c

1468

return (void __user *)-1L;

arch/x86/lib/insn-eval.c

1515

not_copied = copy_from_user(buf, (void __user *)ip, MAX_INSN_SIZE);

arch/x86/lib/insn-eval.c

1543

not_copied = __copy_from_user_inatomic(buf, (void __user *)ip, MAX_INSN_SIZE);

arch/x86/lib/usercopy.c

32

copy_from_user_nmi(void *to, const void __user *from, unsigned long n)

arch/x86/lib/usercopy_32.c

192

const void __user *from, unsigned long size)

arch/x86/lib/usercopy_32.c

281

unsigned long __copy_user_intel(void __user *to, const void *from,

arch/x86/lib/usercopy_32.c

325

unsigned long copy_from_user_inatomic_nontemporal(void *to, const void __user *from,

arch/x86/lib/usercopy_32.c

62

clear_user(void __user *to, unsigned long n)

arch/x86/lib/usercopy_32.c

83

__clear_user(void __user *to, unsigned long n)

arch/x86/lib/usercopy_32.c

92

__copy_user_intel(void __user *to, const void *from, unsigned long size)

arch/x86/lib/usercopy_64.c

46

size_t copy_user_flushcache(void *dst, const void __user *src, size_t size)

arch/x86/mm/fault.c

155

if (get_user(opcode, (unsigned char __user *) instr))

arch/x86/mm/fault.c

830

force_sig_pkuerr((void __user *)address, pkey);

arch/x86/mm/fault.c

832

force_sig_fault(SIGSEGV, si_code, (void __user *)address);

arch/x86/mm/fault.c

949

force_sig_mceerr(BUS_MCEERR_AR, (void __user *)address, lsb);

arch/x86/mm/fault.c

953

force_sig_fault(SIGBUS, BUS_ADRERR, (void __user *)address);

arch/x86/mm/pkeys.c

129

static ssize_t init_pkru_read_file(struct file *file, char __user *user_buf,

arch/x86/mm/pkeys.c

140

const char __user *user_buf, size_t count, loff_t *ppos)

arch/x86/mm/tlb.c

1771

static ssize_t tlbflush_read_file(struct file *file, char __user *user_buf,

arch/x86/mm/tlb.c

1781

static ssize_t tlbflush_write_file(struct file *file, const char __user *user_buf,

arch/x86/um/asm/ptrace.h

62

struct user_desc __user *user_desc);

arch/x86/um/asm/ptrace.h

65

struct user_desc __user *user_desc);

arch/x86/um/asm/ptrace.h

83

struct user_desc __user *user_desc)

arch/x86/um/asm/ptrace.h

89

struct user_desc __user *user_desc)

arch/x86/um/asm/ptrace.h

95

unsigned long __user *addr);

arch/x86/um/ptrace.c

150

const void *kbuf, const void __user *ubuf)

arch/x86/um/ptrace.c

182

const void *kbuf, const void __user *ubuf)

arch/x86/um/ptrace.c

195

const unsigned long __user *u = ubuf;

arch/x86/um/ptrace.c

229

const void *kbuf, const void __user *ubuf)

arch/x86/um/ptrace_32.c

169

return put_user(tmp, (unsigned long __user *) data);

arch/x86/um/ptrace_32.c

176

void __user *datap = (void __user *) data;

arch/x86/um/ptrace_64.c

196

void __user *datap = (void __user *) data;

arch/x86/um/ptrace_64.c

211

ret = arch_prctl(child, data, (void __user *) addr);

arch/x86/um/signal.c

101

(void __user *)sc.fpstate);

arch/x86/um/signal.c

109

static int copy_sc_to_user(struct sigcontext __user *to,

arch/x86/um/signal.c

110

struct _xstate __user *to_fp, struct pt_regs *regs,

arch/x86/um/signal.c

113

struct _xstate_64 __user *to_fp64;

arch/x86/um/signal.c

177

to_fp64 = (void __user *)to_fp +

arch/x86/um/signal.c

209

(int __user *)((void __user *)to_fp64 + host_fp_size));

arch/x86/um/signal.c

215

static int copy_ucontext_to_user(struct ucontext __user *uc,

arch/x86/um/signal.c

216

struct _xstate __user *fp, sigset_t *set,

arch/x86/um/signal.c

232

struct sigframe __user *frame;

arch/x86/um/signal.c

233

void __user *restorer;

arch/x86/um/signal.c

239

frame = (struct sigframe __user *) stack_top - 1;

arch/x86/um/signal.c

244

frame = (struct sigframe __user *)((unsigned long)frame - math_size);

arch/x86/um/signal.c

250

err |= __put_user(restorer, (void __user * __user *)&frame->pretcode);

arch/x86/um/signal.c

256

(struct _xstate __user *)fp_to,

arch/x86/um/signal.c

269

err |= __put_user(0xb858, (short __user *)(frame->retcode+0));

arch/x86/um/signal.c

270

err |= __put_user(__NR_sigreturn, (int __user *)(frame->retcode+2));

arch/x86/um/signal.c

271

err |= __put_user(0x80cd, (short __user *)(frame->retcode+6));

arch/x86/um/signal.c

289

struct rt_sigframe __user *frame;

arch/x86/um/signal.c

290

void __user *restorer;

arch/x86/um/signal.c

295

frame = (struct rt_sigframe __user *) stack_top - 1;

arch/x86/um/signal.c

300

frame = (struct rt_sigframe __user *)((unsigned long)frame - math_size);

arch/x86/um/signal.c

306

err |= __put_user(restorer, (void __user * __user *)&frame->pretcode);

arch/x86/um/signal.c

308

err |= __put_user(&frame->info, (void __user * __user *)&frame->pinfo);

arch/x86/um/signal.c

309

err |= __put_user(&frame->uc, (void __user * __user *)&frame->puc);

arch/x86/um/signal.c

314

err |= copy_ucontext_to_user(&frame->uc, (struct _xstate __user *)fp_to,

arch/x86/um/signal.c

324

err |= __put_user(0xb8, (char __user *)(frame->retcode+0));

arch/x86/um/signal.c

325

err |= __put_user(__NR_rt_sigreturn, (int __user *)(frame->retcode+1));

arch/x86/um/signal.c

326

err |= __put_user(0x80cd, (short __user *)(frame->retcode+5));

arch/x86/um/signal.c

34

struct sigcontext __user *from)

arch/x86/um/signal.c

342

struct sigframe __user *frame = (struct sigframe __user *)(sp - 8);

arch/x86/um/signal.c

344

struct sigcontext __user *sc = &frame->sc;

arch/x86/um/signal.c

36

struct _xstate_64 __user *from_fp64;

arch/x86/um/signal.c

371

struct rt_sigframe __user *frame;

arch/x86/um/signal.c

375

frame = (void __user *)stack_top - sizeof(struct rt_sigframe);

arch/x86/um/signal.c

378

frame = (void __user *)((unsigned long)frame - math_size);

arch/x86/um/signal.c

381

frame = (void __user *)round_down((unsigned long)frame, 16);

arch/x86/um/signal.c

384

frame = (struct rt_sigframe __user *) ((unsigned long) frame - 128 - 8);

arch/x86/um/signal.c

403

(struct _xstate __user *)fp_to,

arch/x86/um/signal.c

421

err |= __put_user((void __user *)ksig->ka.sa.sa_restorer,

arch/x86/um/signal.c

450

struct rt_sigframe __user *frame =

arch/x86/um/signal.c

451

(struct rt_sigframe __user *)(sp - sizeof(long));

arch/x86/um/signal.c

452

struct ucontext __user *uc = &frame->uc;

arch/x86/um/signal.c

85

from_fp64 = ((void __user *)sc.fpstate) +

arch/x86/um/signal.c

88

from_fp64 = (void __user *)sc.fpstate;

arch/x86/um/syscalls_64.c

17

unsigned long __user *arg2)

arch/x86/um/syscalls_64.c

45

return arch_prctl(current, option, (unsigned long __user *) arg2);

arch/x86/um/tls_32.c

217

if (copy_from_user(&info, (void __user *) tls, sizeof(info)))

arch/x86/um/tls_32.c

267

SYSCALL_DEFINE1(set_thread_area, struct user_desc __user *, user_desc)

arch/x86/um/tls_32.c

302

struct user_desc __user *user_desc)

arch/x86/um/tls_32.c

315

SYSCALL_DEFINE1(get_thread_area, struct user_desc __user *, user_desc)

arch/x86/um/tls_32.c

341

struct user_desc __user *user_desc)

arch/xtensa/include/asm/checksum.h

241

void __user *dst, int len)

arch/xtensa/include/asm/checksum.h

55

__wsum csum_and_copy_from_user(const void __user *src, void *dst,

arch/xtensa/include/asm/flat.h

13

static inline int flat_put_addr_at_rp(u32 __user *rp, u32 addr, u32 rel)

arch/xtensa/include/asm/flat.h

7

static inline int flat_get_addr_from_rp(u32 __user *rp, u32 relval, u32 flags,

arch/xtensa/include/asm/futex.h

117

futex_atomic_cmpxchg_inatomic(u32 *uval, u32 __user *uaddr,

arch/xtensa/include/asm/futex.h

74

u32 __user *uaddr)

arch/xtensa/include/asm/syscall.h

89

asmlinkage long xtensa_shmat(int, char __user *, int);

arch/xtensa/include/asm/uaccess.h

159

const __typeof__(*(ptr)) __user *__gu_addr = (ptr); \

arch/xtensa/include/asm/uaccess.h

229

raw_copy_from_user(void *to, const void __user *from, unsigned long n)

arch/xtensa/include/asm/uaccess.h

235

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

arch/xtensa/include/asm/uaccess.h

250

__xtensa_clear_user(void __user *addr, unsigned long size)

arch/xtensa/include/asm/uaccess.h

258

clear_user(void __user *addr, unsigned long size)

arch/xtensa/include/asm/uaccess.h

269

extern long __strncpy_user(char *dst, const char __user *src, long count);

arch/xtensa/include/asm/uaccess.h

272

strncpy_from_user(char *dst, const char __user *src, long count)

arch/xtensa/include/asm/uaccess.h

279

long strncpy_from_user(char *dst, const char __user *src, long count);

arch/xtensa/include/asm/uaccess.h

285

extern long __strnlen_user(const char __user *str, long len);

arch/xtensa/include/asm/uaccess.h

287

static inline long strnlen_user(const char __user *str, long len)

arch/xtensa/include/asm/uaccess.h

63

__typeof__(*(ptr)) __user *__pu_addr = (ptr); \

arch/xtensa/kernel/process.c

324

(unsigned __user*)(usp - 12));

arch/xtensa/kernel/ptrace.c

154

const void *kbuf, const void __user *ubuf)

arch/xtensa/kernel/ptrace.c

244

static int ptrace_getregs(struct task_struct *child, void __user *uregs)

arch/xtensa/kernel/ptrace.c

250

static int ptrace_setregs(struct task_struct *child, void __user *uregs)

arch/xtensa/kernel/ptrace.c

256

static int ptrace_getxregs(struct task_struct *child, void __user *uregs)

arch/xtensa/kernel/ptrace.c

262

static int ptrace_setxregs(struct task_struct *child, void __user *uregs)

arch/xtensa/kernel/ptrace.c

269

long __user *ret)

arch/xtensa/kernel/ptrace.c

383

force_sig_ptrace_errno_trap(i, (void __user *)bkpt->address);

arch/xtensa/kernel/ptrace.c

415

long __user *datap)

arch/xtensa/kernel/ptrace.c

449

long __user *datap)

arch/xtensa/kernel/ptrace.c

501

void __user *datap = (void __user *) data;

arch/xtensa/kernel/ptrace.c

70

const void *kbuf, const void __user *ubuf)

arch/xtensa/kernel/signal.c

144

setup_sigcontext(struct rt_sigframe __user *frame, struct pt_regs *regs)

arch/xtensa/kernel/signal.c

146

struct sigcontext __user *sc = &frame->uc.uc_mcontext;

arch/xtensa/kernel/signal.c

182

restore_sigcontext(struct pt_regs *regs, struct rt_sigframe __user *frame)

arch/xtensa/kernel/signal.c

184

struct sigcontext __user *sc = &frame->uc.uc_mcontext;

arch/xtensa/kernel/signal.c

251

struct rt_sigframe __user *frame;

arch/xtensa/kernel/signal.c

261

frame = (struct rt_sigframe __user *) regs->areg[1];

arch/xtensa/kernel/signal.c

355

unsigned long __user *fdpic_func_desc =

arch/xtensa/kernel/signal.c

356

(unsigned long __user *)handler;

arch/xtensa/kernel/signal.c

391

unsigned long __user *fdpic_func_desc =

arch/xtensa/kernel/signal.c

392

(unsigned long __user *)ksig->ka.sa.sa_restorer;

arch/xtensa/kernel/syscall.c

39

asmlinkage long xtensa_shmat(int shmid, char __user *shmaddr, int shmflg)

arch/xtensa/kernel/traps.c

185

if (copy_from_user(buf, (void __user *)(regs->pc & -16), sizeof(buf)) == 0) {

arch/xtensa/kernel/traps.c

327

if (copy_from_user(buf, (void __user *)regs->pc + 2, 5))

arch/xtensa/kernel/traps.c

373

force_sig_fault(SIGFPE, FPE_INTDIV, (void __user *)regs->pc);

arch/xtensa/platforms/iss/simdisk.c

209

static ssize_t proc_read_simdisk(struct file *file, char __user *buf,

arch/xtensa/platforms/iss/simdisk.c

231

static ssize_t proc_write_simdisk(struct file *file, const char __user *buf,

block/blk-crypto-internal.h

143

void __user *argp)

block/blk-crypto-internal.h

87

void __user *argp);

block/blk-crypto.c

444

void __user *argp)

block/blk-crypto.c

488

void __user *argp)

block/blk-crypto.c

522

void __user *argp)

block/blk-crypto.c

566

void __user *argp)

block/blk-integrity.c

123

int blk_rq_integrity_map_user(struct request *rq, void __user *ubuf,

block/blk-integrity.c

59

struct logical_block_metadata_cap __user *argp)

block/blk-map.c

556

struct rq_map_data *map_data, void __user *ubuf,

block/blk-map.c

570

void __user *ubuf, unsigned long buf_len, gfp_t gfp_mask,

block/blk-mq-debugfs.c

119

static ssize_t queue_state_write(void *data, const char __user *buf,

block/blk-mq-debugfs.c

544

static ssize_t blk_mq_debugfs_write(struct file *file, const char __user *buf,

block/blk-mq-debugfs.h

15

ssize_t (*write)(void *, const char __user *, size_t, loff_t *);

block/blk-zoned.c

351

struct blk_zone __user *zones;

block/blk-zoned.c

376

void __user *argp = (void __user *)arg;

block/blk-zoned.c

455

void __user *argp = (void __user *)arg;

block/bsg-lib.c

19

#define uptr64(val) ((void __user *)(uintptr_t)(val))

block/bsg.c

110

void __user *uarg = (void __user *) arg;

block/bsg.c

111

int __user *intp = uarg;

block/bsg.c

60

void __user *uarg)

block/bsg.c

89

static int bsg_get_command_q(struct bsg_device *bd, int __user *uarg)

block/bsg.c

94

static int bsg_set_command_q(struct bsg_device *bd, int __user *uarg)

block/error-injection.c

255

const char __user *ubuf, size_t count, loff_t *pos)

block/ioctl.c

130

if (copy_from_user(range, (void __user *)arg, sizeof(range)))

block/ioctl.c

177

void __user *argp)

block/ioctl.c

22

struct blkpg_partition __user *upart, int op)

block/ioctl.c

220

if (copy_from_user(range, (void __user *)arg, sizeof(range)))

block/ioctl.c

252

static int put_ushort(unsigned short __user *argp, unsigned short val)

block/ioctl.c

257

static int put_int(int __user *argp, int val)

block/ioctl.c

262

static int put_uint(unsigned int __user *argp, unsigned int val)

block/ioctl.c

267

static int put_long(long __user *argp, long val)

block/ioctl.c

272

static int put_ulong(unsigned long __user *argp, unsigned long val)

block/ioctl.c

277

static int put_u64(u64 __user *argp, u64 val)

block/ioctl.c

283

static int compat_put_long(compat_long_t __user *argp, long val)

block/ioctl.c

288

static int compat_put_ulong(compat_ulong_t __user *argp, compat_ulong_t val)

block/ioctl.c

342

struct pr_registration __user *arg)

block/ioctl.c

360

struct pr_reservation __user *arg)

block/ioctl.c

378

struct pr_reservation __user *arg)

block/ioctl.c

396

struct pr_preempt __user *arg, bool abort)

block/ioctl.c

414

struct pr_clear __user *arg)

block/ioctl.c

432

struct pr_read_keys __user *arg)

block/ioctl.c

437

u64 __user *keys_ptr;

block/ioctl.c

487

blk_mode_t mode, struct pr_read_reservation __user *arg)

block/ioctl.c

538

if (get_user(n, (int __user *)arg))

block/ioctl.c

553

struct hd_geometry __user *argp)

block/ioctl.c

587

struct compat_hd_geometry __user *ugeo)

block/ioctl.c

619

int __user *argp)

block/ioctl.c

652

void __user *argp)

block/ioctl.c

68

struct blkpg_ioctl_arg __user *arg)

block/ioctl.c

70

struct blkpg_partition __user *udata;

block/ioctl.c

752

void __user *argp = (void __user *)arg;

block/ioctl.c

812

void __user *argp = compat_ptr(arg);

block/ioctl.c

88

struct compat_blkpg_ioctl_arg __user *arg)

block/sed-opal.c

1404

const u8 __user *src = (u8 __user *)(uintptr_t)data;

block/sed-opal.c

2465

u8 __user *dst;

block/sed-opal.c

2515

dst = (u8 __user *)(uintptr_t)read_tbl->data;

block/sed-opal.c

3148

void __user *data)

block/sed-opal.c

3361

static int opal_get_status(struct opal_dev *dev, void __user *data)

block/sed-opal.c

3378

static int opal_get_geometry(struct opal_dev *dev, void __user *data)

block/sed-opal.c

3514

void __user *data)

block/sed-opal.c

3592

int sed_ioctl(struct opal_dev *dev, unsigned int cmd, void __user *arg)

block/sed-opal.c

574

u8 __user *buf_out;

block/sed-opal.c

592

buf_out = (u8 __user *)(uintptr_t)discv_out->data;

crypto/jitterentropy-testing.c

180

static int jent_testing_extract_user(struct file *file, char __user *buf,

crypto/jitterentropy-testing.c

267

static ssize_t jent_raw_hires_read(struct file *file, char __user *to,

drivers/accel/amdxdna/aie2_message.c

366

int aie2_query_status(struct amdxdna_dev_hdl *ndev, char __user *buf,

drivers/accel/amdxdna/aie2_message.c

422

char __user *buf, u32 size,

drivers/accel/amdxdna/aie2_pci.c

809

struct amdxdna_drm_hwctx_entry __user *buf;

drivers/accel/amdxdna/aie2_pci.h

272

int aie2_query_status(struct amdxdna_dev_hdl *ndev, char __user *buf, u32 size, u32 *cols_filled);

drivers/accel/amdxdna/aie2_pci.h

274

char __user *buf, u32 size,

drivers/accel/amdxdna/amdxdna_debugfs.c

42

static ssize_t amdxdna_carveout_write(struct file *file, const char __user *buf,

drivers/accel/amdxdna/amdxdna_gem.c

1335

char __user *buf = u64_to_user_ptr(args->buffer);

drivers/accel/amdxdna/amdxdna_ubuf.c

79

u32 num_entries, void __user *va_entries)

drivers/accel/amdxdna/amdxdna_ubuf.h

12

u32 num_entries, void __user *va_entries);

drivers/accel/ethosu/ethosu_gem.c

386

u32 __user *ucmds,

drivers/accel/ethosu/ethosu_gem.c

729

(void __user *)(uintptr_t)data,

drivers/accel/ethosu/ethosu_job.c

505

(void __user *)(uintptr_t)args->jobs,

drivers/accel/habanalabs/common/command_submission.c

1409

void __user *chunks, u32 num_chunks,

drivers/accel/habanalabs/common/command_submission.c

1487

static int cs_ioctl_default(struct hl_fpriv *hpriv, void __user *chunks,

drivers/accel/habanalabs/common/command_submission.c

1692

void __user *chunks;

drivers/accel/habanalabs/common/command_submission.c

1727

chunks = (void __user *) (uintptr_t) args->in.chunks_restore;

drivers/accel/habanalabs/common/command_submission.c

2197

void __user *chunks, u32 num_chunks,

drivers/accel/habanalabs/common/command_submission.c

2464

void __user *engine_cores_arr;

drivers/accel/habanalabs/common/command_submission.c

2481

engine_cores_arr = (void __user *) (uintptr_t) engine_cores;

drivers/accel/habanalabs/common/command_submission.c

2503

void __user *engines_arr;

drivers/accel/habanalabs/common/command_submission.c

2523

engines_arr = (void __user *) (uintptr_t) engines_arr_user_addr;

drivers/accel/habanalabs/common/command_submission.c

2561

void __user *chunks;

drivers/accel/habanalabs/common/command_submission.c

2577

chunks = (void __user *) (uintptr_t) args->in.chunks_execute;

drivers/accel/habanalabs/common/command_submission.c

3013

void __user *seq_arr;

drivers/accel/habanalabs/common/command_submission.c

3045

seq_arr = (void __user *) (uintptr_t) args->in.seq;

drivers/accel/habanalabs/common/debugfs.c

1138

static ssize_t hl_data_read32(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1167

static ssize_t hl_data_write32(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1193

static ssize_t hl_data_read64(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1220

static ssize_t hl_data_write64(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1245

static ssize_t hl_dma_size_write(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1302

static ssize_t hl_monitor_dump_trigger(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1346

static ssize_t hl_get_power_state(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1370

static ssize_t hl_set_power_state(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1400

static ssize_t hl_i2c_data_read(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1428

static ssize_t hl_i2c_data_write(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1452

static ssize_t hl_led0_write(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1471

static ssize_t hl_led1_write(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1490

static ssize_t hl_led2_write(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1509

static ssize_t hl_device_read(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1517

static ssize_t hl_device_write(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1549

static ssize_t hl_clk_gate_read(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1555

static ssize_t hl_clk_gate_write(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1561

static ssize_t hl_stop_on_err_read(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1582

static ssize_t hl_stop_on_err_write(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1610

static ssize_t hl_security_violations_read(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1621

static ssize_t hl_state_dump_read(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1640

static ssize_t hl_state_dump_write(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1675

static ssize_t hl_timeout_locked_read(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1694

static ssize_t hl_timeout_locked_write(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1714

static ssize_t hl_check_razwi_happened(struct file *f, char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

1845

static ssize_t hl_debugfs_write(struct file *file, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

402

static ssize_t userptr_lookup_write(struct file *file, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

476

static ssize_t mmu_asid_va_write(struct file *file, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

538

const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

626

static ssize_t dio_ssd2hl_write(struct file *file, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

708

static ssize_t dio_hl2ssd_write(struct file *file, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

760

static ssize_t dio_reset_write(struct file *file, const char __user *buf,

drivers/accel/habanalabs/common/debugfs.c

798

static ssize_t hl_memory_scrub(struct file *f, const char __user *buf,

drivers/accel/habanalabs/common/habanalabs.h

2367

ssize_t (*write)(struct file *file, const char __user *buf,

drivers/accel/habanalabs/common/habanalabs_ioctl.c

123

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

1274

if (copy_from_user(kdata, (void __user *)arg, usize)) {

drivers/accel/habanalabs/common/habanalabs_ioctl.c

1282

if ((cmd & IOC_OUT) && copy_to_user((void __user *)arg, kdata, usize))

drivers/accel/habanalabs/common/habanalabs_ioctl.c

142

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

160

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

183

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

247

if (output && copy_to_user((void __user *) (uintptr_t) args->output_ptr,

drivers/accel/habanalabs/common/habanalabs_ioctl.c

267

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

285

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

303

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

319

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

337

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

353

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

38

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

392

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

447

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

472

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

492

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

511

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

53

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

530

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

550

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

569

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

587

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

602

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

615

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

636

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

655

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

676

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

725

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

809

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

845

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

863

void __user *out = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

887

void __user *user_buf = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

909

void __user *user_buf = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

931

void __user *user_buf = (void __user *) (uintptr_t) args->return_pointer;

drivers/accel/habanalabs/common/habanalabs_ioctl.c

953

void __user *buff = (void __user *) (uintptr_t) info_args->return_pointer;

drivers/accel/habanalabs/common/memory.c

1477

if (!access_ok((void __user *) (uintptr_t) vma->vm_start, block_size)) {

drivers/accel/habanalabs/common/memory.c

2321

if (!access_ok((void __user *) (uintptr_t) addr, size)) {

drivers/accel/habanalabs/common/memory_mgr.c

262

if (!access_ok((void __user *)(uintptr_t)vma->vm_start,

drivers/accel/ivpu/ivpu_debugfs.c

170

fw_dyndbg_fops_write(struct file *file, const char __user *user_buf, size_t size, loff_t *pos)

drivers/accel/ivpu/ivpu_debugfs.c

208

fw_log_fops_write(struct file *file, const char __user *user_buf, size_t size, loff_t *pos)

drivers/accel/ivpu/ivpu_debugfs.c

230

fw_profiling_freq_fops_write(struct file *file, const char __user *user_buf,

drivers/accel/ivpu/ivpu_debugfs.c

257

fw_trace_destination_mask_fops_write(struct file *file, const char __user *user_buf,

drivers/accel/ivpu/ivpu_debugfs.c

284

fw_trace_hw_comp_mask_fops_write(struct file *file, const char __user *user_buf,

drivers/accel/ivpu/ivpu_debugfs.c

311

fw_trace_level_fops_write(struct file *file, const char __user *user_buf, size_t size, loff_t *pos)

drivers/accel/ivpu/ivpu_debugfs.c

337

ivpu_force_recovery_fn(struct file *file, const char __user *user_buf, size_t size, loff_t *pos)

drivers/accel/ivpu/ivpu_debugfs.c

442

priority_bands_fops_write(struct file *file, const char __user *user_buf, size_t size, loff_t *pos)

drivers/accel/ivpu/ivpu_gem_userptr.c

139

ivpu_bo_create_from_userptr(struct ivpu_device *vdev, void __user *user_ptr,

drivers/accel/ivpu/ivpu_gem_userptr.c

169

void __user *user_ptr = u64_to_user_ptr(args->user_ptr);

drivers/accel/ivpu/ivpu_gem_userptr.c

65

ivpu_create_userptr_dmabuf(struct ivpu_device *vdev, void __user *user_ptr,

drivers/accel/ivpu/ivpu_job.c

1004

(void __user *)args->buffers_ptr, args->commands_offset,

drivers/accel/ivpu/ivpu_job.c

860

u32 buffer_count, u32 engine, void __user *buffers_ptr, u32 cmds_offset,

drivers/accel/ivpu/ivpu_job.c

958

(void __user *)args->buffers_ptr, args->commands_offset, 0, priority);

drivers/accel/ivpu/ivpu_ms.c

119

void __user *user_ptr, u64 user_size, u64 *user_bytes_copied)

drivers/accel/ivpu/ivpu_ms.c

138

void __user *user_ptr, u64 user_size, u64 *user_bytes_copied)

drivers/accel/qaic/qaic_control.c

1298

u8 __user *user_data;

drivers/accel/qaic/qaic_data.c

997

u8 __user *user_data;

drivers/accessibility/speakup/devsynth.c

14

static ssize_t speakup_file_write(struct file *fp, const char __user *buffer,

drivers/accessibility/speakup/devsynth.c

18

const char __user *ptr = buffer;

drivers/accessibility/speakup/devsynth.c

39

static ssize_t speakup_file_writeu(struct file *fp, const char __user *buffer,

drivers/accessibility/speakup/devsynth.c

43

const char __user *ptr = buffer;

drivers/accessibility/speakup/devsynth.c

97

static ssize_t speakup_file_read(struct file *fp, char __user *buf,

drivers/accessibility/speakup/speakup_soft.c

218

static ssize_t softsynthx_read(struct file *fp, char __user *buf, size_t count,

drivers/accessibility/speakup/speakup_soft.c

222

char __user *cp;

drivers/accessibility/speakup/speakup_soft.c

323

static ssize_t softsynth_read(struct file *fp, char __user *buf, size_t count,

drivers/accessibility/speakup/speakup_soft.c

329

static ssize_t softsynthu_read(struct file *fp, char __user *buf, size_t count,

drivers/accessibility/speakup/speakup_soft.c

337

static ssize_t softsynth_write(struct file *fp, const char __user *buf,

drivers/acpi/acpi_dbg.c

572

static ssize_t acpi_aml_read_user(char __user *buf, size_t len)

drivers/acpi/acpi_dbg.c

599

static ssize_t acpi_aml_read(struct file *file, char __user *buf,

drivers/acpi/acpi_dbg.c

642

static ssize_t acpi_aml_write_user(const char __user *buf, size_t len)

drivers/acpi/acpi_dbg.c

669

static ssize_t acpi_aml_write(struct file *file, const char __user *buf,

drivers/acpi/apei/einj-core.c

847

static ssize_t error_type_get(struct file *file, char __user *buf,

drivers/acpi/apei/einj-core.c

883

static ssize_t error_type_set(struct file *file, const char __user *buf,

drivers/acpi/apei/einj-core.c

953

static ssize_t u128_read(struct file *f, char __user *buf, size_t count, loff_t *off)

drivers/acpi/apei/einj-core.c

969

static ssize_t u128_write(struct file *f, const char __user *buf, size_t count, loff_t *off)

drivers/acpi/apei/erst-dbg.c

151

static ssize_t erst_dbg_write(struct file *filp, const char __user *ubuf,

drivers/acpi/apei/erst-dbg.c

63

if (copy_from_user(&record_id, (void __user *)arg,

drivers/acpi/apei/erst-dbg.c

72

rc = put_user(record_count, (u32 __user *)arg);

drivers/acpi/apei/erst-dbg.c

81

static ssize_t erst_dbg_read(struct file *filp, char __user *ubuf,

drivers/acpi/ec_sys.c

30

static ssize_t acpi_ec_read_io(struct file *f, char __user *buf,

drivers/acpi/ec_sys.c

64

static ssize_t acpi_ec_write_io(struct file *f, const char __user *buf,

drivers/acpi/pfr_telemetry.c

247

void __user *p;

drivers/acpi/pfr_telemetry.c

250

p = (void __user *)arg;

drivers/acpi/pfr_update.c

424

void __user *p = (void __user *)arg;

drivers/acpi/pfr_update.c

464

static ssize_t pfru_write(struct file *file, const char __user *buf,

drivers/acpi/pfr_update.c

485

iov.iov_base = (void __user *)buf;

drivers/acpi/proc.c

89

const char __user * buffer,

drivers/android/binder.c

1798

const void __user *u,

drivers/android/binder.c

2462

const void __user *sender_uaddr;

drivers/android/binder.c

2597

const void __user *sender_uaddr, size_t length)

drivers/android/binder.c

2672

const void __user *sender_ubuffer,

drivers/android/binder.c

2681

const void __user *sender_ufda_base;

drivers/android/binder.c

2710

sender_ufda_base = (void __user *)(uintptr_t)sender_uparent->buffer +

drivers/android/binder.c

3103

const void __user *user_buffer = (const void __user *)

drivers/android/binder.c

3440

(const void __user *)

drivers/android/binder.c

3686

(const void __user *)(uintptr_t)bp->buffer,

drivers/android/binder.c

4137

void __user *buffer = (void __user *)(uintptr_t)binder_buffer;

drivers/android/binder.c

4138

void __user *ptr = buffer + *consumed;

drivers/android/binder.c

4139

void __user *end = buffer + size;

drivers/android/binder.c

4144

if (get_user(cmd, (uint32_t __user *)ptr))

drivers/android/binder.c

4164

if (get_user(target, (uint32_t __user *)ptr))

drivers/android/binder.c

4231

if (get_user(node_ptr, (binder_uintptr_t __user *)ptr))

drivers/android/binder.c

4234

if (get_user(cookie, (binder_uintptr_t __user *)ptr))

drivers/android/binder.c

4303

if (get_user(data_ptr, (binder_uintptr_t __user *)ptr))

drivers/android/binder.c

4401

if (get_user(target, (uint32_t __user *)ptr))

drivers/android/binder.c

4404

if (get_user(cookie, (binder_uintptr_t __user *)ptr))

drivers/android/binder.c

4523

if (get_user(cookie, (binder_uintptr_t __user *)ptr))

drivers/android/binder.c

4597

if (get_user(cookie, (binder_uintptr_t __user *)ptr))

drivers/android/binder.c

4629

void __user **ptrp,

drivers/android/binder.c

4635

void __user *ptr = *ptrp;

drivers/android/binder.c

4637

if (put_user(cmd, (uint32_t __user *)ptr))

drivers/android/binder.c

4641

if (put_user(node_ptr, (binder_uintptr_t __user *)ptr))

drivers/android/binder.c

4645

if (put_user(node_cookie, (binder_uintptr_t __user *)ptr))

drivers/android/binder.c

4749

void __user *buffer = (void __user *)(uintptr_t)binder_buffer;

drivers/android/binder.c

4750

void __user *ptr = buffer + *consumed;

drivers/android/binder.c

4751

void __user *end = buffer + size;

drivers/android/binder.c

4757

if (put_user(BR_NOOP, (uint32_t __user *)ptr))

drivers/android/binder.c

4839

if (put_user(e->cmd, (uint32_t __user *)ptr))

drivers/android/binder.c

4860

if (put_user(cmd, (uint32_t __user *)ptr))

drivers/android/binder.c

4877

void __user *orig_ptr = ptr;

drivers/android/binder.c

4986

if (put_user(cmd, (uint32_t __user *)ptr))

drivers/android/binder.c

4990

(binder_uintptr_t __user *)ptr))

drivers/android/binder.c

5010

if (put_user(BR_FROZEN_BINDER, (uint32_t __user *)ptr))

drivers/android/binder.c

5028

if (put_user(BR_CLEAR_FREEZE_NOTIFICATION_DONE, (uint32_t __user *)ptr))

drivers/android/binder.c

5031

if (put_user(cookie, (binder_uintptr_t __user *)ptr))

drivers/android/binder.c

5101

if (put_user(cmd, (uint32_t __user *)ptr))

drivers/android/binder.c

5121

if (put_user(cmd, (uint32_t __user *)ptr)) {

drivers/android/binder.c

5184

if (put_user(BR_SPAWN_LOOPER, (uint32_t __user *)buffer))

drivers/android/binder.c

5474

void __user *ubuf = (void __user *)arg;

drivers/android/binder.c

5773

void __user *ubuf)

drivers/android/binder.c

5793

void __user *ubuf = (void __user *)arg;

drivers/android/binder.c

5850

struct binder_version __user *ver = ubuf;

drivers/android/binder/rust_binderfs.c

115

struct binderfs_device __user *userp,

drivers/android/binder/rust_binderfs.c

222

struct binderfs_device __user *device = (struct binderfs_device __user *)arg;

drivers/android/binder_alloc.c

1332

const void __user *from,

drivers/android/binder_alloc.h

167

const void __user *from,

drivers/android/binderfs.c

115

struct binderfs_device __user *userp,

drivers/android/binderfs.c

230

struct binderfs_device __user *device = (struct binderfs_device __user *)arg;

drivers/ata/libata-scsi.c

422

void __user *arg)

drivers/ata/libata-scsi.c

425

u16 __user *dst = arg;

drivers/ata/libata-scsi.c

460

int ata_cmd_ioctl(struct scsi_device *scsidev, void __user *arg)

drivers/ata/libata-scsi.c

568

int ata_task_ioctl(struct scsi_device *scsidev, void __user *arg)

drivers/ata/libata-scsi.c

658

unsigned int cmd, void __user *arg)

drivers/ata/libata-scsi.c

671

return put_user(val, (compat_ulong_t __user *)arg);

drivers/ata/libata-scsi.c

673

return put_user(val, (unsigned long __user *)arg);

drivers/ata/libata-scsi.c

714

void __user *arg)

drivers/ata/libata.h

102

extern int ata_task_ioctl(struct scsi_device *scsidev, void __user *arg);

drivers/ata/libata.h

103

extern int ata_cmd_ioctl(struct scsi_device *scsidev, void __user *arg);

drivers/auxdisplay/charlcd.c

468

static ssize_t charlcd_write(struct file *file, const char __user *buf,

drivers/auxdisplay/charlcd.c

471

const char __user *tmp = buf;

drivers/auxdisplay/panel.c

1019

char __user *buf, size_t count, loff_t *ppos)

drivers/auxdisplay/panel.c

1022

char __user *tmp = buf;

drivers/base/regmap/regmap-debugfs.c

217

unsigned int to, char __user *user_buf,

drivers/base/regmap/regmap-debugfs.c

285

static ssize_t regmap_map_read_file(struct file *file, char __user *user_buf,

drivers/base/regmap/regmap-debugfs.c

303

const char __user *user_buf,

drivers/base/regmap/regmap-debugfs.c

345

static ssize_t regmap_range_read_file(struct file *file, char __user *user_buf,

drivers/base/regmap/regmap-debugfs.c

36

char __user *user_buf, size_t count,

drivers/base/regmap/regmap-debugfs.c

362

char __user *user_buf, size_t count,

drivers/base/regmap/regmap-debugfs.c

461

const char __user *user_buf,

drivers/base/regmap/regmap-debugfs.c

503

const char __user *user_buf,

drivers/block/amiflop.c

1542

void __user *argp = (void __user *)param;

drivers/block/aoe/aoe.h

239

int aoedev_flush(const char __user *str, size_t size);

drivers/block/aoe/aoe.h

247

int set_aoe_iflist(const char __user *str, size_t size);

drivers/block/aoe/aoeblk.c

302

if (!copy_to_user((void __user *) arg, &d->ident,

drivers/block/aoe/aoechr.c

170

aoechr_write(struct file *filp, const char __user *buf, size_t cnt, loff_t *offp)

drivers/block/aoe/aoechr.c

221

aoechr_read(struct file *filp, char __user *buf, size_t cnt, loff_t *off)

drivers/block/aoe/aoechr.c

79

interfaces(const char __user *str, size_t size)

drivers/block/aoe/aoechr.c

90

revalidate(const char __user *str, size_t size)

drivers/block/aoe/aoedev.c

315

flush(const char __user *str, size_t cnt, int exiting)

drivers/block/aoe/aoedev.c

405

aoedev_flush(const char __user *str, size_t cnt)

drivers/block/aoe/aoenet.c

99

set_aoe_iflist(const char __user *user_str, size_t size)

drivers/block/ataflop.c

1597

void __user *argp = (void __user *)param;

drivers/block/floppy.c

2951

static inline int fd_copyout(void __user *param, const void *address,

drivers/block/floppy.c

2957

static inline int fd_copyin(void __user *param, void *address,

drivers/block/floppy.c

3032

static int raw_cmd_copyout(int cmd, void __user *param,

drivers/block/floppy.c

3082

static int raw_cmd_copyin(int cmd, void __user *param,

drivers/block/floppy.c

3129

static int raw_cmd_ioctl(int cmd, void __user *param)

drivers/block/floppy.c

3180

void __user *param)

drivers/block/floppy.c

3201

void __user *param)

drivers/block/floppy.c

3439

ret = fd_copyin((void __user *)param, &inparam, size);

drivers/block/floppy.c

3550

return floppy_raw_cmd_ioctl(type, drive, cmd, (void __user *)param);

drivers/block/floppy.c

3562

return fd_copyout((void __user *)param, outparam, size);

drivers/block/floppy.c

3656

unsigned int cmd, struct compat_floppy_struct __user *arg)

drivers/block/floppy.c

3682

struct compat_floppy_struct __user *arg)

drivers/block/floppy.c

3704

struct compat_floppy_drive_params __user *arg)

drivers/block/floppy.c

3740

struct compat_floppy_drive_params __user *arg)

drivers/block/floppy.c

3774

struct compat_floppy_drive_struct __user *arg)

drivers/block/floppy.c

3813

struct compat_floppy_fdc_state __user *arg)

drivers/block/floppy.c

3842

struct compat_floppy_write_errors __user *arg)

drivers/block/loop.c

1346

loop_set_status_old(struct loop_device *lo, const struct loop_info __user *arg)

drivers/block/loop.c

1358

loop_set_status64(struct loop_device *lo, const struct loop_info64 __user *arg)

drivers/block/loop.c

1368

loop_get_status_old(struct loop_device *lo, struct loop_info __user *arg) {

drivers/block/loop.c

1385

loop_get_status64(struct loop_device *lo, struct loop_info64 __user *arg) {

drivers/block/loop.c

1511

void __user *argp = (void __user *) arg;

drivers/block/loop.c

1592

loop_info64_from_compat(const struct compat_loop_info __user *arg,

drivers/block/loop.c

1618

struct compat_loop_info __user *arg)

drivers/block/loop.c

1645

const struct compat_loop_info __user *arg)

drivers/block/loop.c

1658

struct compat_loop_info __user *arg)

drivers/block/loop.c

1680

(const struct compat_loop_info __user *)arg);

drivers/block/loop.c

1684

(struct compat_loop_info __user *)arg);

drivers/block/mtip32xx/mtip32xx.c

1118

static int mtip_get_identify(struct mtip_port *port, void __user *user_buffer)

drivers/block/mtip32xx/mtip32xx.c

1546

void __user *user_buffer)

drivers/block/mtip32xx/mtip32xx.c

1693

void __user *buf,

drivers/block/mtip32xx/mtip32xx.c

1948

if (copy_to_user((void __user *)arg, dd->port->identify,

drivers/block/mtip32xx/mtip32xx.c

1959

(void __user *) arg,

drivers/block/mtip32xx/mtip32xx.c

1966

(void __user *) (arg+4)))

drivers/block/mtip32xx/mtip32xx.c

1970

if (copy_to_user((void __user *) arg,

drivers/block/mtip32xx/mtip32xx.c

1983

(void __user *) arg,

drivers/block/mtip32xx/mtip32xx.c

1992

if (copy_to_user((void __user *) arg,

drivers/block/mtip32xx/mtip32xx.c

2003

if (copy_from_user(&req_task, (void __user *) arg,

drivers/block/mtip32xx/mtip32xx.c

2009

ret = exec_drive_taskfile(dd, (void __user *) arg,

drivers/block/mtip32xx/mtip32xx.c

2012

if (copy_to_user((void __user *) arg, &req_task,

drivers/block/mtip32xx/mtip32xx.c

2170

static ssize_t mtip_hw_read_registers(struct file *f, char __user *ubuf,

drivers/block/mtip32xx/mtip32xx.c

2234

static ssize_t mtip_hw_read_flags(struct file *f, char __user *ubuf,

drivers/block/mtip32xx/mtip32xx.c

3096

struct mtip_compat_ide_task_request_s __user *compat_req_task;

drivers/block/mtip32xx/mtip32xx.c

3104

(struct mtip_compat_ide_task_request_s __user *) arg;

drivers/block/mtip32xx/mtip32xx.c

3106

if (copy_from_user(&req_task, (void __user *) arg,

drivers/block/mtip32xx/mtip32xx.c

3118

ret = exec_drive_taskfile(dd, (void __user *) arg,

drivers/block/mtip32xx/mtip32xx.c

3121

if (copy_to_user((void __user *) arg, &req_task,

drivers/block/sunvdc.c

151

if (put_user(0, (char __user *)(argument + i)))

drivers/block/swim.c

706

if (copy_to_user((void __user *) param, (void *) &floppy_type,

drivers/block/swim3.c

906

if (copy_to_user((void __user *) param, &floppy_type,

drivers/block/ublk_drv.c

3585

void __user *uaddr;

drivers/block/ublk_drv.c

4600

void __user *argp = (void __user *)(unsigned long)header->addr;

drivers/block/ublk_drv.c

4650

void __user *argp = (void __user *)(unsigned long)header->addr;

drivers/block/ublk_drv.c

4951

void __user *argp = (void __user *)(unsigned long)header->addr;

drivers/block/ublk_drv.c

4997

void __user *argp = (void __user *)(unsigned long)header->addr;

drivers/block/ublk_drv.c

5027

void __user *argp = (void __user *)(unsigned long)header->addr;

drivers/block/ublk_drv.c

5142

void __user *argp = (void __user *)(unsigned long)header->addr;

drivers/block/ublk_drv.c

5408

void __user *argp = (void __user *)(unsigned long)header->addr;

drivers/block/ublk_drv.c

5658

void __user *argp = (void __user *)(unsigned long)header->addr;

drivers/block/ublk_drv.c

846

void __user *buf, const u16 *tag_buf,

drivers/block/xen-blkfront.c

521

if (put_user(0, (char __user *)(argument + i)))

drivers/block/zloop.c

1643

static ssize_t zloop_ctl_write(struct file *file, const char __user *ubuf,

drivers/block/zram/zram_drv.c

1546

static ssize_t read_block_state(struct file *file, char __user *buf,

drivers/bluetooth/btmrvl_debugfs.c

101

static ssize_t btmrvl_hscmd_write(struct file *file, const char __user *ubuf,

drivers/bluetooth/btmrvl_debugfs.c

120

static ssize_t btmrvl_hscmd_read(struct file *file, char __user *userbuf,

drivers/bluetooth/btmrvl_debugfs.c

22

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/bluetooth/btmrvl_debugfs.c

41

static ssize_t btmrvl_hscfgcmd_read(struct file *file, char __user *userbuf,

drivers/bluetooth/btmrvl_debugfs.c

61

static ssize_t btmrvl_pscmd_write(struct file *file, const char __user *ubuf,

drivers/bluetooth/btmrvl_debugfs.c

82

static ssize_t btmrvl_pscmd_read(struct file *file, char __user *userbuf,

drivers/bluetooth/btusb.c

3892

static ssize_t force_poll_sync_read(struct file *file, char __user *user_buf,

drivers/bluetooth/btusb.c

3905

const char __user *user_buf,

drivers/bluetooth/hci_vhci.c

112

static ssize_t force_suspend_read(struct file *file, char __user *user_buf,

drivers/bluetooth/hci_vhci.c

136

const char __user *user_buf,

drivers/bluetooth/hci_vhci.c

164

static ssize_t force_wakeup_read(struct file *file, char __user *user_buf,

drivers/bluetooth/hci_vhci.c

177

const char __user *user_buf, size_t count,

drivers/bluetooth/hci_vhci.c

230

static ssize_t aosp_capable_read(struct file *file, char __user *user_buf,

drivers/bluetooth/hci_vhci.c

243

const char __user *user_buf, size_t count,

drivers/bluetooth/hci_vhci.c

323

static ssize_t force_devcd_write(struct file *file, const char __user *user_buf,

drivers/bluetooth/hci_vhci.c

559

char __user *buf, int count)

drivers/bluetooth/hci_vhci.c

561

char __user *ptr = buf;

drivers/bluetooth/hci_vhci.c

590

char __user *buf, size_t count, loff_t *pos)

drivers/bus/fsl-mc/fsl-mc-uapi.c

458

error = copy_from_user(&mc_cmd, (void __user *)arg, sizeof(mc_cmd));

drivers/bus/fsl-mc/fsl-mc-uapi.c

470

error = copy_to_user((void __user *)arg, &mc_cmd, sizeof(mc_cmd));

drivers/bus/mhi/host/debugfs.c

250

const char __user *ubuf,

drivers/bus/mhi/host/debugfs.c

282

const char __user *ubuf,

drivers/bus/moxtet.c

464

static ssize_t input_read(struct file *file, char __user *buf, size_t len,

drivers/bus/moxtet.c

490

static ssize_t output_read(struct file *file, char __user *buf, size_t len,

drivers/bus/moxtet.c

510

static ssize_t output_write(struct file *file, const char __user *buf,

drivers/cache/sifive_ccache.c

76

static ssize_t ccache_write(struct file *file, const char __user *data,

drivers/cdrom/cdrom.c

2119

static int cdrom_read_cdda_old(struct cdrom_device_info *cdi, __u8 __user *ubuf,

drivers/cdrom/cdrom.c

2165

static int cdrom_read_cdda_bpc(struct cdrom_device_info *cdi, __u8 __user *ubuf,

drivers/cdrom/cdrom.c

2193

static int cdrom_read_cdda(struct cdrom_device_info *cdi, __u8 __user *ubuf,

drivers/cdrom/cdrom.c

2255

void __user *argp)

drivers/cdrom/cdrom.c

2363

struct cdrom_timed_media_change_info __user *info;

drivers/cdrom/cdrom.c

2369

info = (struct cdrom_timed_media_change_info __user *)arg;

drivers/cdrom/cdrom.c

2511

void __user *argp)

drivers/cdrom/cdrom.c

2599

void __user *argp)

drivers/cdrom/cdrom.c

2630

void __user *argp)

drivers/cdrom/cdrom.c

2670

void __user *argp)

drivers/cdrom/cdrom.c

2684

void __user *argp)

drivers/cdrom/cdrom.c

2698

void __user *argp)

drivers/cdrom/cdrom.c

2716

void __user *argp)

drivers/cdrom/cdrom.c

2730

void __user *argp)

drivers/cdrom/cdrom.c

2946

void __user *arg,

drivers/cdrom/cdrom.c

2967

if (copy_from_user(&msf, (struct cdrom_msf __user *)arg, sizeof(msf)))

drivers/cdrom/cdrom.c

3007

void __user *arg)

drivers/cdrom/cdrom.c

3033

if (copy_from_user(&ra, (struct cdrom_read_audio __user *)arg,

drivers/cdrom/cdrom.c

3055

void __user *arg)

drivers/cdrom/cdrom.c

3060

if (copy_from_user(&q, (struct cdrom_subchnl __user *)arg, sizeof(q)))

drivers/cdrom/cdrom.c

3073

if (copy_to_user((struct cdrom_subchnl __user *)arg, &q, sizeof(q)))

drivers/cdrom/cdrom.c

3080

void __user *arg,

drivers/cdrom/cdrom.c

3086

if (copy_from_user(&msf, (struct cdrom_msf __user *)arg, sizeof(msf)))

drivers/cdrom/cdrom.c

3100

void __user *arg,

drivers/cdrom/cdrom.c

3106

if (copy_from_user(&blk, (struct cdrom_blk __user *)arg, sizeof(blk)))

drivers/cdrom/cdrom.c

3120

void __user *arg,

drivers/cdrom/cdrom.c

3132

if (copy_from_user(&volctrl, (struct cdrom_volctrl __user *)arg,

drivers/cdrom/cdrom.c

3171

if (copy_to_user((struct cdrom_volctrl __user *)arg, &volctrl,

drivers/cdrom/cdrom.c

3221

void __user *arg,

drivers/cdrom/cdrom.c

3249

void __user *arg)

drivers/cdrom/cdrom.c

3256

if (copy_from_user(&ai, (dvd_authinfo __user *)arg, sizeof(ai)))

drivers/cdrom/cdrom.c

3261

if (copy_to_user((dvd_authinfo __user *)arg, &ai, sizeof(ai)))

drivers/cdrom/cdrom.c

3267

void __user *arg)

drivers/cdrom/cdrom.c

3275

if (copy_to_user((long __user *)arg, &next, sizeof(next)))

drivers/cdrom/cdrom.c

3281

void __user *arg)

drivers/cdrom/cdrom.c

3290

return put_user(last, (__s32 __user *)arg);

drivers/cdrom/cdrom.c

3292

return put_user(last, (long __user *)arg);

drivers/cdrom/cdrom.c

3299

void __user *userptr = (void __user *)arg;

drivers/cdrom/cdrom.c

3348

void __user *argp = (void __user *)arg;

drivers/char/adi.c

125

static ssize_t adi_write(struct file *file, const char __user *buf,

drivers/char/adi.c

48

static ssize_t adi_read(struct file *file, char __user *buf,

drivers/char/apm-emulation.c

192

static ssize_t apm_read(struct file *fp, char __user *buf, size_t count, loff_t *ppos)

drivers/char/ds1620.c

220

ds1620_read(struct file *file, char __user *buf, size_t count, loff_t *ptr)

drivers/char/ds1620.c

241

struct therm __user *therm;

drivers/char/ds1620.c

242

int __user *i;

drivers/char/ds1620.c

246

uarg.i = (int __user *)arg;

drivers/char/dsp56k.c

127

static int dsp56k_upload(u_char __user *bin, int len)

drivers/char/dsp56k.c

183

static ssize_t dsp56k_read(struct file *file, char __user *buf, size_t count,

drivers/char/dsp56k.c

209

short __user *data;

drivers/char/dsp56k.c

212

data = (short __user *) buf;

drivers/char/dsp56k.c

228

long __user *data;

drivers/char/dsp56k.c

231

data = (long __user *) buf;

drivers/char/dsp56k.c

246

static ssize_t dsp56k_write(struct file *file, const char __user *buf, size_t count,

drivers/char/dsp56k.c

271

const short __user *data;

drivers/char/dsp56k.c

274

data = (const short __user *)buf;

drivers/char/dsp56k.c

290

const long __user *data;

drivers/char/dsp56k.c

293

data = (const long __user *)buf;

drivers/char/dsp56k.c

312

void __user *argp = (void __user *)arg;

drivers/char/dsp56k.c

321

char __user *bin;

drivers/char/dsp56k.c

323

struct dsp56k_upload __user *binary = argp;

drivers/char/dsp56k.c

362

struct dsp56k_host_flags __user *hf = argp;

drivers/char/hpet.c

263

hpet_read(struct file *file, char __user *buf, size_t count, loff_t * ppos)

drivers/char/hpet.c

305

retval = put_user(data, (compat_ulong_t __user *)buf);

drivers/char/hpet.c

309

retval = put_user(data, (unsigned long __user *)buf);

drivers/char/hpet.c

656

(copy_to_user((void __user *)arg, &info, sizeof(info))))

drivers/char/hpet.c

693

struct compat_hpet_info __user *u = compat_ptr(arg);

drivers/char/hw_random/core.c

240

static ssize_t rng_dev_read(struct file *filp, char __user *buf,

drivers/char/hw_random/s390-trng.c

56

static ssize_t trng_read(struct file *file, char __user *ubuf,

drivers/char/ipmi/bt-bmc.c

175

static ssize_t bt_bmc_read(struct file *file, char __user *buf,

drivers/char/ipmi/bt-bmc.c

241

static ssize_t bt_bmc_write(struct file *file, const char __user *buf,

drivers/char/ipmi/ipmb_dev_int.c

135

static ssize_t ipmb_write(struct file *file, const char __user *buf,

drivers/char/ipmi/ipmb_dev_int.c

74

static ssize_t ipmb_read(struct file *file, char __user *buf, size_t count,

drivers/char/ipmi/ipmi_devintf.c

197

int (*copyout)(struct ipmi_recv *, void __user *),

drivers/char/ipmi/ipmi_devintf.c

198

void __user *to)

drivers/char/ipmi/ipmi_devintf.c

286

static int copyout_recv(struct ipmi_recv *rsp, void __user *to)

drivers/char/ipmi/ipmi_devintf.c

297

void __user *arg = (void __user *)data;

drivers/char/ipmi/ipmi_devintf.c

698

static int copyout_recv32(struct ipmi_recv *p64, void __user *to)

drivers/char/ipmi/ipmi_watchdog.c

634

void __user *argp = (void __user *)arg;

drivers/char/ipmi/ipmi_watchdog.c

714

const char __user *buf,

drivers/char/ipmi/ipmi_watchdog.c

744

char __user *buf,

drivers/char/ipmi/kcs_bmc_cdev_ipmi.c

320

static ssize_t kcs_bmc_ipmi_read(struct file *filp, char __user *buf,

drivers/char/ipmi/kcs_bmc_cdev_ipmi.c

382

static ssize_t kcs_bmc_ipmi_write(struct file *filp, const char __user *buf,

drivers/char/ipmi/ssif_bmc.c

136

static ssize_t ssif_bmc_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

drivers/char/ipmi/ssif_bmc.c

177

static ssize_t ssif_bmc_write(struct file *file, const char __user *buf, size_t count,

drivers/char/lp.c

301

static ssize_t lp_write(struct file *file, const char __user *buf,

drivers/char/lp.c

419

static ssize_t lp_read(struct file *file, char __user *buf,

drivers/char/lp.c

583

unsigned long arg, void __user *argp)

drivers/char/lp.c

700

static int lp_set_timeout32(unsigned int minor, void __user *arg)

drivers/char/lp.c

710

static int lp_set_timeout64(unsigned int minor, void __user *arg)

drivers/char/lp.c

735

ret = lp_set_timeout32(minor, (void __user *)arg);

drivers/char/lp.c

740

ret = lp_set_timeout64(minor, (void __user *)arg);

drivers/char/lp.c

743

ret = lp_do_ioctl(minor, cmd, arg, (void __user *)arg);

drivers/char/lp.c

763

ret = lp_set_timeout32(minor, (void __user *)arg);

drivers/char/lp.c

768

ret = lp_set_timeout64(minor, (void __user *)arg);

drivers/char/mem.c

169

static ssize_t write_mem(struct file *file, const char __user *buf,

drivers/char/mem.c

366

static ssize_t read_port(struct file *file, char __user *buf,

drivers/char/mem.c

370

char __user *tmp = buf;

drivers/char/mem.c

384

static ssize_t write_port(struct file *file, const char __user *buf,

drivers/char/mem.c

388

const char __user *tmp = buf;

drivers/char/mem.c

409

static ssize_t read_null(struct file *file, char __user *buf,

drivers/char/mem.c

415

static ssize_t write_null(struct file *file, const char __user *buf,

drivers/char/mem.c

474

static ssize_t read_zero(struct file *file, char __user *buf,

drivers/char/mem.c

553

static ssize_t write_full(struct file *file, const char __user *buf,

drivers/char/mem.c

82

static ssize_t read_mem(struct file *file, char __user *buf,

drivers/char/nsc_gpio.c

105

ssize_t nsc_gpio_read(struct file *file, char __user * buf,

drivers/char/nsc_gpio.c

42

ssize_t nsc_gpio_write(struct file *file, const char __user *data,

drivers/char/nvram.c

227

static ssize_t nvram_misc_read(struct file *file, char __user *buf,

drivers/char/nvram.c

258

static ssize_t nvram_misc_write(struct file *file, const char __user *buf,

drivers/char/nvram.c

295

if (copy_from_user(&part, (void __user *)arg,

drivers/char/nvram.c

303

if (copy_to_user((void __user *)arg,

drivers/char/nwbutton.c

168

static int button_read (struct file *filp, char __user *buffer,

drivers/char/nwflash.c

123

static ssize_t flash_read(struct file *file, char __user *buf, size_t size,

drivers/char/nwflash.c

143

static ssize_t flash_write(struct file *file, const char __user *buf,

drivers/char/nwflash.c

397

static int write_block(unsigned long p, const char __user *buf, int count)

drivers/char/nwflash.c

46

static int write_block(unsigned long p, const char __user *buf, int count);

drivers/char/powernv-op-panel.c

43

static ssize_t oppanel_read(struct file *filp, char __user *userbuf, size_t len,

drivers/char/powernv-op-panel.c

89

static ssize_t oppanel_write(struct file *filp, const char __user *userbuf,

drivers/char/ppdev.c

115

static ssize_t pp_read(struct file *file, char __user *buf, size_t count,

drivers/char/ppdev.c

193

static ssize_t pp_write(struct file *file, const char __user *buf,

drivers/char/ppdev.c

364

void __user *argp = (void __user *)arg;

drivers/char/ppdev.c

574

if (copy_from_user(&reg, 1 + (unsigned char __user *) arg,

drivers/char/ps3flash.c

162

static ssize_t ps3flash_write(const char __user *userbuf,

drivers/char/ps3flash.c

237

static ssize_t ps3flash_user_read(struct file *file, char __user *buf,

drivers/char/ps3flash.c

243

static ssize_t ps3flash_user_write(struct file *file, const char __user *buf,

drivers/char/ps3flash.c

93

static ssize_t ps3flash_read(char __user *userbuf, void *kernelbuf,

drivers/char/random.c

1380

SYSCALL_DEFINE3(getrandom, char __user *, ubuf, size_t, len, unsigned int, flags)

drivers/char/random.c

1489

int __user *p = (int __user *)arg;

drivers/char/sonypi.c

900

static ssize_t sonypi_misc_read(struct file *file, char __user *buf,

drivers/char/sonypi.c

943

void __user *argp = (void __user *)arg;

drivers/char/tlclk.c

244

static ssize_t tlclk_read(struct file *filp, char __user *buf, size_t count,

drivers/char/toshiba.c

247

SMMRegisters __user *argp = (SMMRegisters __user *)arg;

drivers/char/tpm/tpm-dev-common.c

130

ssize_t tpm_common_read(struct file *file, char __user *buf,

drivers/char/tpm/tpm-dev-common.c

170

ssize_t tpm_common_write(struct file *file, const char __user *buf,

drivers/char/tpm/tpm-dev.h

26

ssize_t tpm_common_read(struct file *file, char __user *buf,

drivers/char/tpm/tpm-dev.h

28

ssize_t tpm_common_write(struct file *file, const char __user *buf,

drivers/char/tpm/tpm_vtpm_proxy.c

127

static ssize_t vtpm_proxy_fops_write(struct file *filp, const char __user *buf,

drivers/char/tpm/tpm_vtpm_proxy.c

628

void __user *argp = (void __user *)arg;

drivers/char/tpm/tpm_vtpm_proxy.c

629

struct vtpm_proxy_new_dev __user *vtpm_new_dev_p;

drivers/char/tpm/tpm_vtpm_proxy.c

72

static ssize_t vtpm_proxy_fops_read(struct file *filp, char __user *buf,

drivers/char/uv_mmtimer.c

106

if (copy_to_user((unsigned long __user *)arg,

drivers/char/uv_mmtimer.c

112

if (copy_to_user((unsigned long __user *)arg,

drivers/char/uv_mmtimer.c

127

if (copy_to_user((unsigned long __user *)arg,

drivers/char/virtio_console.c

1146

return fill_readbuf(port, (__force u8 __user *)buf, count, false);

drivers/char/virtio_console.c

654

static ssize_t fill_readbuf(struct port *port, u8 __user *out_buf,

drivers/char/virtio_console.c

729

static ssize_t port_fops_read(struct file *filp, char __user *ubuf,

drivers/char/virtio_console.c

796

static ssize_t port_fops_write(struct file *filp, const char __user *ubuf,

drivers/char/xilinx_hwicap/xilinx_hwicap.c

353

hwicap_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

drivers/char/xilinx_hwicap/xilinx_hwicap.c

438

hwicap_write(struct file *file, const char __user *buf,

drivers/char/xillybus/xillybus_core.c

1201

static ssize_t xillybus_write(struct file *filp, const char __user *userbuf,

drivers/char/xillybus/xillybus_core.c

690

static ssize_t xillybus_read(struct file *filp, char __user *userbuf,

drivers/char/xillybus/xillyusb.c

1431

static ssize_t xillyusb_read(struct file *filp, char __user *userbuf,

drivers/char/xillybus/xillyusb.c

1642

static ssize_t xillyusb_write(struct file *filp, const char __user *userbuf,

drivers/char/xillybus/xillyusb.c

348

if (copy_from_user(dst, (const void __user *)src, n))

drivers/char/xillybus/xillyusb.c

356

if (copy_to_user((void __user *)dst, src, n))

drivers/clk/clk.c

3617

static ssize_t current_parent_write(struct file *file, const char __user *ubuf,

drivers/comedi/comedi_fops.c

1009

struct comedi_devinfo __user *arg,

drivers/comedi/comedi_fops.c

1056

struct comedi_subdinfo __user *arg, void *file)

drivers/comedi/comedi_fops.c

1186

struct comedi_bufinfo __user *arg, void *file)

drivers/comedi/comedi_fops.c

1862

unsigned int __user *user_chanlist,

drivers/comedi/comedi_fops.c

1906

unsigned int __user *user_chanlist;

drivers/comedi/comedi_fops.c

1917

user_chanlist = (unsigned int __user *)cmd->chanlist;

drivers/comedi/comedi_fops.c

2016

unsigned int __user *user_chanlist;

drivers/comedi/comedi_fops.c

2027

user_chanlist = (unsigned int __user *)cmd->chanlist;

drivers/comedi/comedi_fops.c

2286

(struct comedi_bufinfo __user *)arg,

drivers/comedi/comedi_fops.c

2303

(struct comedi_devconfig __user *)arg);

drivers/comedi/comedi_fops.c

2330

(struct comedi_bufconfig __user *)arg);

drivers/comedi/comedi_fops.c

2333

rc = do_devinfo_ioctl(dev, (struct comedi_devinfo __user *)arg,

drivers/comedi/comedi_fops.c

2338

(struct comedi_subdinfo __user *)arg,

drivers/comedi/comedi_fops.c

2344

if (copy_from_user(&it, (void __user *)arg, sizeof(it)))

drivers/comedi/comedi_fops.c

2353

if (copy_from_user(&it, (void __user *)arg, sizeof(it)))

drivers/comedi/comedi_fops.c

2372

if (copy_from_user(&cmd, (void __user *)arg, sizeof(cmd))) {

drivers/comedi/comedi_fops.c

2377

if (copy && copy_to_user((void __user *)arg, &cmd, sizeof(cmd)))

drivers/comedi/comedi_fops.c

2385

if (copy_from_user(&cmd, (void __user *)arg, sizeof(cmd))) {

drivers/comedi/comedi_fops.c

2390

if (copy && copy_to_user((void __user *)arg, &cmd, sizeof(cmd)))

drivers/comedi/comedi_fops.c

2398

if (copy_from_user(&insnlist, (void __user *)arg,

drivers/comedi/comedi_fops.c

2419

if (copy_from_user(&insn, (void __user *)arg, sizeof(insn)))

drivers/comedi/comedi_fops.c

2651

void __user *dest, unsigned int src_offset, unsigned int n)

drivers/comedi/comedi_fops.c

2679

unsigned int dst_offset, const void __user *src, unsigned int n)

drivers/comedi/comedi_fops.c

2706

static ssize_t comedi_write(struct file *file, const char __user *buf,

drivers/comedi/comedi_fops.c

2834

static ssize_t comedi_read(struct file *file, char __user *buf, size_t nbytes,

drivers/comedi/comedi_fops.c

3178

struct comedi32_cmd_struct __user *cmd32)

drivers/comedi/comedi_fops.c

3205

static int put_compat_cmd(struct comedi32_cmd_struct __user *cmd32,

drivers/comedi/comedi_fops.c

3224

v32.chanlist = ptr_to_compat((unsigned int __user *)cmd->chanlist);

drivers/comedi/comedi_fops.c

3294

struct comedi32_insn_struct __user *insn32)

drivers/comedi/comedi_fops.c

3316

struct comedi32_insn_struct __user *insn32;

drivers/comedi/comedi_fops.c

3361

rc = get_compat_insn(&insn, (void __user *)arg);

drivers/comedi/comedi_fops.c

887

struct comedi_devconfig __user *arg)

drivers/comedi/comedi_fops.c

947

struct comedi_bufconfig __user *arg)

drivers/counter/counter-chrdev.c

267

void __user *const uwatch = (void __user *)arg;

drivers/counter/counter-chrdev.c

65

static ssize_t counter_chrdev_read(struct file *filp, char __user *buf,

drivers/crypto/bcm/util.c

350

static ssize_t spu_debugfs_read(struct file *filp, char __user *ubuf,

drivers/crypto/ccp/ccp-debugfs.c

175

const char __user *ubuf,

drivers/crypto/ccp/ccp-debugfs.c

191

static ssize_t ccp5_debugfs_queue_read(struct file *filp, char __user *ubuf,

drivers/crypto/ccp/ccp-debugfs.c

246

const char __user *ubuf,

drivers/crypto/ccp/ccp-debugfs.c

42

static ssize_t ccp5_debugfs_info_read(struct file *filp, char __user *ubuf,

drivers/crypto/ccp/ccp-debugfs.c

97

static ssize_t ccp5_debugfs_stats_read(struct file *filp, char __user *ubuf,

drivers/crypto/ccp/dbc.c

134

void __user *argp = (void __user *)arg;

drivers/crypto/ccp/sev-dev.c

1778

if (copy_to_user((void __user *)argp->data, &data, sizeof(data)))

drivers/crypto/ccp/sev-dev.c

1813

void __user *input_address;

drivers/crypto/ccp/sev-dev.c

1820

if (copy_from_user(&input, (void __user *)argp->data, sizeof(input)))

drivers/crypto/ccp/sev-dev.c

1830

input_address = (void __user *)input.address;

drivers/crypto/ccp/sev-dev.c

1856

if (copy_to_user((void __user *)argp->data, &input, sizeof(input))) {

drivers/crypto/ccp/sev-dev.c

1886

return memdup_user((void __user *)uaddr, len);

drivers/crypto/ccp/sev-dev.c

2123

if (copy_from_user(&input, (void __user *)argp->data, sizeof(input)))

drivers/crypto/ccp/sev-dev.c

2168

void __user *input_address;

drivers/crypto/ccp/sev-dev.c

2176

if (copy_from_user(&input, (void __user *)argp->data, sizeof(input)))

drivers/crypto/ccp/sev-dev.c

2179

input_address = (void __user *)input.address;

drivers/crypto/ccp/sev-dev.c

2208

if (copy_to_user((void __user *)argp->data, &input, sizeof(input))) {

drivers/crypto/ccp/sev-dev.c

2260

if (copy_to_user((void __user *)argp->data, id_blob, data->len))

drivers/crypto/ccp/sev-dev.c

2275

void __user *input_cert_chain_address;

drivers/crypto/ccp/sev-dev.c

2276

void __user *input_pdh_cert_address;

drivers/crypto/ccp/sev-dev.c

2280

if (copy_from_user(&input, (void __user *)argp->data, sizeof(input)))

drivers/crypto/ccp/sev-dev.c

2285

input_pdh_cert_address = (void __user *)input.pdh_cert_address;

drivers/crypto/ccp/sev-dev.c

2286

input_cert_chain_address = (void __user *)input.cert_chain_address;

drivers/crypto/ccp/sev-dev.c

2340

if (copy_to_user((void __user *)argp->data, &input, sizeof(input))) {

drivers/crypto/ccp/sev-dev.c

2437

if (copy_to_user((void __user *)argp->data, &status,

drivers/crypto/ccp/sev-dev.c

2470

if (copy_from_user(&config, (void __user *)argp->data, sizeof(config)))

drivers/crypto/ccp/sev-dev.c

2513

void __user *argp = (void __user *)arg;

drivers/crypto/ccp/sfs.c

107

struct sfs_user_get_fw_versions __user *sfs_get_fw_versions;

drivers/crypto/ccp/sfs.c

108

struct sfs_user_update_package __user *sfs_update_package;

drivers/crypto/ccp/sfs.c

125

sfs_get_fw_versions = (struct sfs_user_get_fw_versions __user *)arg;

drivers/crypto/ccp/sfs.c

150

sfs_update_package = (struct sfs_user_update_package __user *)arg;

drivers/crypto/hisilicon/debugfs.c

1129

static ssize_t qm_status_read(struct file *filp, char __user *buffer,

drivers/crypto/hisilicon/debugfs.c

141

static ssize_t qm_cmd_read(struct file *filp, char __user *buffer,

drivers/crypto/hisilicon/debugfs.c

513

static ssize_t qm_cmd_write(struct file *filp, const char __user *buffer,

drivers/crypto/hisilicon/debugfs.c

715

static ssize_t qm_debug_read(struct file *filp, char __user *buf,

drivers/crypto/hisilicon/debugfs.c

755

static ssize_t qm_debug_write(struct file *filp, const char __user *buf,

drivers/crypto/hisilicon/hpre/hpre_main.c

901

static ssize_t hpre_ctrl_debug_read(struct file *filp, char __user *buf,

drivers/crypto/hisilicon/hpre/hpre_main.c

937

static ssize_t hpre_ctrl_debug_write(struct file *filp, const char __user *buf,

drivers/crypto/hisilicon/qm.c

2733

if (copy_from_user(&qp_ctx, (void __user *)arg,

drivers/crypto/hisilicon/qm.c

2743

if (copy_to_user((void __user *)arg, &qp_ctx,

drivers/crypto/hisilicon/qm.c

2749

if (copy_from_user(&qp_info, (void __user *)arg,

drivers/crypto/hisilicon/qm.c

2757

if (copy_to_user((void __user *)arg, &qp_info,

drivers/crypto/hisilicon/qm.c

4115

static ssize_t qm_algqos_read(struct file *filp, char __user *buf,

drivers/crypto/hisilicon/qm.c

4195

static ssize_t qm_algqos_write(struct file *filp, const char __user *buf,

drivers/crypto/hisilicon/sec2/sec_main.c

804

static ssize_t sec_debug_read(struct file *filp, char __user *buf,

drivers/crypto/hisilicon/sec2/sec_main.c

839

static ssize_t sec_debug_write(struct file *filp, const char __user *buf,

drivers/crypto/hisilicon/zip/zip_main.c

752

static ssize_t hisi_zip_ctrl_debug_read(struct file *filp, char __user *buf,

drivers/crypto/hisilicon/zip/zip_main.c

786

const char __user *buf,

drivers/crypto/intel/qat/qat_common/adf_accel_devices.h

445

char __user *buf, size_t count, loff_t *pos);

drivers/crypto/intel/qat/qat_common/adf_cnv_dbgfs.c

263

static ssize_t no_comp_file_read(struct file *f, char __user *buf, size_t count,

drivers/crypto/intel/qat/qat_common/adf_gen4_pm_debugfs.c

86

char __user *buf, size_t count,

drivers/crypto/intel/qat/qat_common/adf_gen6_pm_dbgfs.c

41

char __user *buf, size_t count,

drivers/crypto/intel/qat/qat_common/adf_heartbeat_dbgfs.c

159

const char __user *user_buf,

drivers/crypto/intel/qat/qat_common/adf_heartbeat_dbgfs.c

22

static ssize_t adf_hb_stats_read(struct file *file, char __user *user_buffer,

drivers/crypto/intel/qat/qat_common/adf_heartbeat_dbgfs.c

44

static ssize_t adf_hb_status_read(struct file *file, char __user *user_buf,

drivers/crypto/intel/qat/qat_common/adf_heartbeat_dbgfs.c

75

static ssize_t adf_hb_cfg_read(struct file *file, char __user *user_buf,

drivers/crypto/intel/qat/qat_common/adf_heartbeat_dbgfs.c

94

static ssize_t adf_hb_cfg_write(struct file *file, const char __user *user_buf,

drivers/crypto/intel/qat/qat_common/adf_pm_dbgfs.c

10

static ssize_t pm_status_read(struct file *f, char __user *buf, size_t count,

drivers/crypto/intel/qat/qat_common/adf_tl_debugfs.c

468

static ssize_t tl_control_write(struct file *file, const char __user *userbuf,

drivers/crypto/intel/qat/qat_common/adf_tl_debugfs.c

662

static ssize_t tl_rp_data_write(struct file *file, const char __user *userbuf,

drivers/cxl/core/core.h

96

struct cxl_mem_query_commands __user *q);

drivers/cxl/core/core.h

97

int cxl_send_cmd(struct cxl_mailbox *cxl_mbox, struct cxl_send_command __user *s);

drivers/cxl/core/mbox.c

535

struct cxl_mem_query_commands __user *q)

drivers/cxl/core/mbox.c

638

int cxl_send_cmd(struct cxl_mailbox *cxl_mbox, struct cxl_send_command __user *s)

drivers/cxl/core/memdev.c

746

return cxl_query_cmd(cxl_mbox, (void __user *)arg);

drivers/cxl/core/memdev.c

748

return cxl_send_cmd(cxl_mbox, (void __user *)arg);

drivers/dma-buf/dma-buf.c

420

static long dma_buf_set_name(struct dma_buf *dmabuf, const char __user *buf)

drivers/dma-buf/dma-buf.c

437

void __user *user_data)

drivers/dma-buf/dma-buf.c

493

const void __user *user_data)

drivers/dma-buf/dma-buf.c

552

if (copy_from_user(&sync, (void __user *) arg, sizeof(sync)))

drivers/dma-buf/dma-buf.c

581

return dma_buf_set_name(dmabuf, (const char __user *)arg);

drivers/dma-buf/dma-buf.c

585

return dma_buf_export_sync_file(dmabuf, (void __user *)arg);

drivers/dma-buf/dma-buf.c

587

return dma_buf_import_sync_file(dmabuf, (const void __user *)arg);

drivers/dma-buf/dma-heap.c

166

if (copy_from_user(kdata, (void __user *)arg, in_size) != 0) {

drivers/dma-buf/dma-heap.c

184

if (copy_to_user((void __user *)arg, kdata, out_size) != 0)

drivers/dma-buf/sw_sync.c

359

if (copy_from_user(&data, (void __user *)arg, sizeof(data))) {

drivers/dma-buf/sw_sync.c

378

if (copy_to_user((void __user *)arg, &data, sizeof(data))) {

drivers/dma-buf/sw_sync.c

397

if (copy_from_user(&value, (void __user *)arg, sizeof(value)))

drivers/dma-buf/sw_sync.c

418

if (copy_from_user(&data, (void __user *)arg, sizeof(data)))

drivers/dma-buf/sw_sync.c

447

if (copy_to_user((void __user *)arg, &data, sizeof(data)))

drivers/dma-buf/sync_file.c

224

if (copy_from_user(&data, (void __user *)arg, sizeof(data))) {

drivers/dma-buf/sync_file.c

248

if (copy_to_user((void __user *)arg, &data, sizeof(data))) {

drivers/dma-buf/sync_file.c

306

if (copy_from_user(&info, (void __user *)arg, sizeof(info)))

drivers/dma-buf/sync_file.c

355

if (copy_to_user((void __user *)arg, &info, sizeof(info)))

drivers/dma-buf/sync_file.c

371

if (copy_from_user(&ts, (void __user *)arg, sizeof(ts)))

drivers/dma-buf/udmabuf.c

455

if (copy_from_user(&create, (void __user *)arg,

drivers/dma-buf/udmabuf.c

475

if (copy_from_user(&head, (void __user *)arg, sizeof(head)))

drivers/dma-buf/udmabuf.c

480

list = memdup_user((void __user *)(arg + sizeof(head)), lsize);

drivers/dma/idxd/cdev.c

426

struct dsa_hw_desc __user *udesc)

drivers/dma/idxd/cdev.c

471

static ssize_t idxd_cdev_write(struct file *filp, const char __user *buf, size_t len,

drivers/dma/idxd/cdev.c

474

struct dsa_hw_desc __user *udesc = (struct dsa_hw_desc __user *)buf;

drivers/dma/idxd/cdev.c

754

left = copy_to_user((void __user *)addr + status_size, cr + status_size,

drivers/dma/idxd/cdev.c

772

if (put_user(status, (u8 __user *)addr))

drivers/dma/xilinx/xilinx_dpdma.c

358

static ssize_t xilinx_dpdma_debugfs_read(struct file *f, char __user *buf,

drivers/dma/xilinx/xilinx_dpdma.c

398

const char __user *buf, size_t size,

drivers/edac/altera_edac.c

119

const char __user *data,

drivers/edac/altera_edac.c

1743

altr_edac_a10_device_trig(struct file *file, const char __user *user_buf,

drivers/edac/altera_edac.c

1775

altr_edac_a10_device_trig2(struct file *file, const char __user *user_buf,

drivers/edac/altera_edac.c

573

altr_edac_device_trig(struct file *file, const char __user *user_buf,

drivers/edac/altera_edac.c

650

altr_edac_a10_device_trig(struct file *file, const char __user *user_buf,

drivers/edac/altera_edac.c

660

altr_edac_a10_device_trig2(struct file *file, const char __user *user_buf,

drivers/edac/debugfs.c

10

const char __user *data,

drivers/edac/i5100_edac.c

942

static ssize_t inject_enable_write(struct file *file, const char __user *data,

drivers/edac/npcm_edac.c

198

static ssize_t force_ecc_error(struct file *file, const char __user *data,

drivers/edac/thunderx_edac.c

224

char __user *data, \

drivers/edac/thunderx_edac.c

236

const char __user *data, \

drivers/edac/thunderx_edac.c

253

char __user *data, \

drivers/edac/thunderx_edac.c

265

const char __user *data, \

drivers/edac/thunderx_edac.c

298

const char __user *data,

drivers/edac/thunderx_edac.c

317

char __user *data,

drivers/edac/thunderx_edac.c

401

const char __user *data,

drivers/edac/versal_edac.c

784

static ssize_t inject_data_ce_store(struct file *file, const char __user *data,

drivers/edac/versal_edac.c

848

static ssize_t inject_data_ue_store(struct file *file, const char __user *data,

drivers/edac/xgene_edac.c

1148

const char __user *data,

drivers/edac/xgene_edac.c

142

const char __user *data,

drivers/edac/xgene_edac.c

808

const char __user *data,

drivers/edac/xgene_edac.c

834

const char __user *data,

drivers/edac/zynqmp_edac.c

250

static ssize_t inject_ce_write(struct file *file, const char __user *data,

drivers/edac/zynqmp_edac.c

294

static ssize_t inject_ue_write(struct file *file, const char __user *data,

drivers/firewire/core-cdev.c

1133

struct fw_cdev_iso_packet __user *p, *end, *next;

drivers/firewire/core-cdev.c

1163

p = (struct fw_cdev_iso_packet __user *)u64_to_uptr(a->packets);

drivers/firewire/core-cdev.c

1165

end = (void __user *)p + a->size;

drivers/firewire/core-cdev.c

1197

next = (struct fw_cdev_iso_packet __user *)

drivers/firewire/core-cdev.c

1820

unsigned int cmd, void __user *arg)

drivers/firewire/core-cdev.c

1853

return dispatch_ioctl(file->private_data, cmd, (void __user *)arg);

drivers/firewire/core-cdev.c

271

static void __user *u64_to_uptr(u64 value)

drivers/firewire/core-cdev.c

276

return (void __user *)(unsigned long)value;

drivers/firewire/core-cdev.c

279

static u64 uptr_to_u64(void __user *ptr)

drivers/firewire/core-cdev.c

287

static inline void __user *u64_to_uptr(u64 value)

drivers/firewire/core-cdev.c

289

return (void __user *)(unsigned long)value;

drivers/firewire/core-cdev.c

292

static inline u64 uptr_to_u64(void __user *ptr)

drivers/firewire/core-cdev.c

353

char __user *buffer, size_t count)

drivers/firewire/core-cdev.c

391

static ssize_t fw_device_op_read(struct file *file, char __user *buffer,

drivers/firewire/nosy.c

139

packet_buffer_get(struct client *client, char __user *data, size_t user_length)

drivers/firewire/nosy.c

340

nosy_read(struct file *file, char __user *buffer, size_t count, loff_t *offset)

drivers/firewire/nosy.c

362

if (copy_to_user((void __user *) arg, &stats, sizeof stats))

drivers/firmware/arm_scmi/driver.c

3002

static ssize_t reset_all_on_write(struct file *filp, const char __user *buf,

drivers/firmware/arm_scmi/raw_mode.c

1013

const char __user *buf,

drivers/firmware/arm_scmi/raw_mode.c

1030

char __user *buf,

drivers/firmware/arm_scmi/raw_mode.c

1053

char __user *buf,

drivers/firmware/arm_scmi/raw_mode.c

783

char __user *buf,

drivers/firmware/arm_scmi/raw_mode.c

816

const char __user *buf,

drivers/firmware/arm_scmi/raw_mode.c

881

char __user *buf,

drivers/firmware/arm_scmi/raw_mode.c

889

const char __user *buf,

drivers/firmware/arm_scmi/raw_mode.c

952

const char __user *buf,

drivers/firmware/arm_scmi/raw_mode.c

979

const char __user *buf,

drivers/firmware/arm_scmi/raw_mode.c

996

const char __user *buf,

drivers/firmware/cirrus/cs_dsp.c

415

char __user *user_buf,

drivers/firmware/cirrus/cs_dsp.c

439

char __user *user_buf,

drivers/firmware/cirrus/cs_dsp.c

449

char __user *user_buf,

drivers/firmware/efi/capsule-loader.c

168

static ssize_t efi_capsule_write(struct file *file, const char __user *buff,

drivers/firmware/efi/test/efi_test.c

111

copy_ucs2_from_user(efi_char16_t **dst, efi_char16_t __user *src)

drivers/firmware/efi/test/efi_test.c

131

copy_ucs2_to_user_len(efi_char16_t __user *dst, efi_char16_t *src, size_t len)

drivers/firmware/efi/test/efi_test.c

141

struct efi_getvariable __user *getvariable_user;

drivers/firmware/efi/test/efi_test.c

151

getvariable_user = (struct efi_getvariable __user *)arg;

drivers/firmware/efi/test/efi_test.c

231

struct efi_setvariable __user *setvariable_user;

drivers/firmware/efi/test/efi_test.c

239

setvariable_user = (struct efi_setvariable __user *)arg;

drivers/firmware/efi/test/efi_test.c

279

struct efi_gettime __user *gettime_user;

drivers/firmware/efi/test/efi_test.c

285

gettime_user = (struct efi_gettime __user *)arg;

drivers/firmware/efi/test/efi_test.c

299

efi_time_cap_t __user *cap_local;

drivers/firmware/efi/test/efi_test.c

317

struct efi_settime __user *settime_user;

drivers/firmware/efi/test/efi_test.c

322

settime_user = (struct efi_settime __user *)arg;

drivers/firmware/efi/test/efi_test.c

33

static inline size_t user_ucs2_strsize(efi_char16_t __user *str)

drivers/firmware/efi/test/efi_test.c

338

struct efi_getwakeuptime __user *getwakeuptime_user;

drivers/firmware/efi/test/efi_test.c

344

getwakeuptime_user = (struct efi_getwakeuptime __user *)arg;

drivers/firmware/efi/test/efi_test.c

379

struct efi_setwakeuptime __user *setwakeuptime_user;

drivers/firmware/efi/test/efi_test.c

385

setwakeuptime_user = (struct efi_setwakeuptime __user *)arg;

drivers/firmware/efi/test/efi_test.c

409

struct efi_getnextvariablename __user *getnextvariablename_user;

drivers/firmware/efi/test/efi_test.c

418

getnextvariablename_user = (struct efi_getnextvariablename __user *)arg;

drivers/firmware/efi/test/efi_test.c

510

struct efi_getnexthighmonotoniccount __user *getnexthighmonocount_user;

drivers/firmware/efi/test/efi_test.c

516

efi_getnexthighmonotoniccount __user *)arg;

drivers/firmware/efi/test/efi_test.c

541

struct efi_resetsystem __user *resetsystem_user;

drivers/firmware/efi/test/efi_test.c

545

resetsystem_user = (struct efi_resetsystem __user *)arg;

drivers/firmware/efi/test/efi_test.c

565

struct efi_queryvariableinfo __user *queryvariableinfo_user;

drivers/firmware/efi/test/efi_test.c

570

queryvariableinfo_user = (struct efi_queryvariableinfo __user *)arg;

drivers/firmware/efi/test/efi_test.c

601

struct efi_querycapsulecapabilities __user *qcaps_user;

drivers/firmware/efi/test/efi_test.c

609

qcaps_user = (struct efi_querycapsulecapabilities __user *)arg;

drivers/firmware/efi/test/efi_test.c

63

copy_ucs2_from_user_len(efi_char16_t **dst, efi_char16_t __user *src,

drivers/firmware/efi/test/efi_test.c

671

unsigned int __user *supported_mask;

drivers/firmware/efi/test/efi_test.c

89

get_ucs2_strsize_from_user(efi_char16_t __user *src, size_t *len)

drivers/firmware/tegra/bpmp-debugfs.c

368

static ssize_t bpmp_debug_store(struct file *file, const char __user *buf,

drivers/firmware/tegra/bpmp-debugfs.c

635

static ssize_t debugfs_store(struct file *file, const char __user *buf,

drivers/firmware/xilinx/zynqmp-debug.c

320

const char __user *ptr, size_t len,

drivers/firmware/xilinx/zynqmp-debug.c

377

static ssize_t zynqmp_pm_debugfs_api_read(struct file *file, char __user *ptr,

drivers/fpga/dfl-afu-main.c

654

afu_ioctl_get_info(struct dfl_feature_dev_data *fdata, void __user *arg)

drivers/fpga/dfl-afu-main.c

682

void __user *arg)

drivers/fpga/dfl-afu-main.c

712

afu_ioctl_dma_map(struct dfl_feature_dev_data *fdata, void __user *arg)

drivers/fpga/dfl-afu-main.c

747

afu_ioctl_dma_unmap(struct dfl_feature_dev_data *fdata, void __user *arg)

drivers/fpga/dfl-afu-main.c

780

return afu_ioctl_get_info(fdata, (void __user *)arg);

drivers/fpga/dfl-afu-main.c

782

return afu_ioctl_get_region_info(fdata, (void __user *)arg);

drivers/fpga/dfl-afu-main.c

784

return afu_ioctl_dma_map(fdata, (void __user *)arg);

drivers/fpga/dfl-afu-main.c

786

return afu_ioctl_dma_unmap(fdata, (void __user *)arg);

drivers/fpga/dfl-fme-main.c

150

if (get_user(port_id, (int __user *)arg))

drivers/fpga/dfl-fme-main.c

162

if (get_user(port_id, (int __user *)arg))

drivers/fpga/dfl-fme-pr.c

110

(void __user *)(unsigned long)port_pr.buffer_address,

drivers/fpga/dfl-fme-pr.c

69

void __user *argp = (void __user *)arg;

drivers/fpga/dfl.c

1970

return put_user(feature->nr_irqs, (__u32 __user *)arg);

drivers/fpga/dfl.c

1994

if (copy_from_user(&hdr, (void __user *)arg, sizeof(hdr)))

drivers/fpga/dfl.c

2001

fds = memdup_array_user((void __user *)(arg + sizeof(hdr)),

drivers/fsi/fsi-core.c

715

static ssize_t cfam_read(struct file *filep, char __user *buf, size_t count,

drivers/fsi/fsi-core.c

751

static ssize_t cfam_write(struct file *filep, const char __user *buf,

drivers/fsi/fsi-occ.c

103

static ssize_t occ_read(struct file *file, char __user *buf, size_t len,

drivers/fsi/fsi-occ.c

136

static ssize_t occ_write(struct file *file, const char __user *buf,

drivers/fsi/fsi-sbefifo.c

813

static ssize_t sbefifo_user_read(struct file *file, char __user *buf,

drivers/fsi/fsi-sbefifo.c

868

static ssize_t sbefifo_user_write(struct file *file, const char __user *buf,

drivers/fsi/fsi-sbefifo.c

945

static int sbefifo_cmd_timeout(struct sbefifo_user *user, void __user *argp)

drivers/fsi/fsi-sbefifo.c

950

if (get_user(timeout, (__u32 __user *)argp))

drivers/fsi/fsi-sbefifo.c

964

static int sbefifo_read_timeout(struct sbefifo_user *user, void __user *argp)

drivers/fsi/fsi-sbefifo.c

969

if (get_user(timeout, (__u32 __user *)argp))

drivers/fsi/fsi-sbefifo.c

994

rc = sbefifo_cmd_timeout(user, (void __user *)arg);

drivers/fsi/fsi-sbefifo.c

997

rc = sbefifo_read_timeout(user, (void __user *)arg);

drivers/fsi/fsi-scom.c

312

static ssize_t scom_read(struct file *filep, char __user *buf, size_t len,

drivers/fsi/fsi-scom.c

341

static ssize_t scom_write(struct file *filep, const char __user *buf,

drivers/fsi/fsi-scom.c

403

static int scom_raw_read(struct scom_device *scom, void __user *argp)

drivers/fsi/fsi-scom.c

421

static int scom_raw_write(struct scom_device *scom, void __user *argp)

drivers/fsi/fsi-scom.c

452

static int scom_reset(struct scom_device *scom, void __user *argp)

drivers/fsi/fsi-scom.c

457

if (get_user(flags, (__u32 __user *)argp))

drivers/fsi/fsi-scom.c

468

static int scom_check(struct scom_device *scom, void __user *argp)

drivers/fsi/fsi-scom.c

471

return put_user(SCOM_CHECK_SUPPORTED, (__u32 __user *)argp);

drivers/fsi/fsi-scom.c

477

void __user *argp = (void __user *)arg;

drivers/fsi/i2cr-scom.c

34

static ssize_t i2cr_scom_read(struct file *filep, char __user *buf, size_t len, loff_t *offset)

drivers/fsi/i2cr-scom.c

54

static ssize_t i2cr_scom_write(struct file *filep, const char __user *buf, size_t len,

drivers/fwctl/main.c

188

ucmd.ubuffer = (void __user *)arg;

drivers/fwctl/main.c

189

ret = get_user(ucmd.user_size, (u32 __user *)ucmd.ubuffer);

drivers/fwctl/main.c

28

void __user *ubuffer;

drivers/fwctl/main.c

41

static int copy_to_user_zero_pad(void __user *to, const void *from,

drivers/gnss/core.c

123

static ssize_t gnss_write(struct file *file, const char __user *buf,

drivers/gnss/core.c

88

static ssize_t gnss_read(struct file *file, char __user *buf,

drivers/gpib/common/gpib_os.c

1022

fault = copy_to_user((void __user *)arg, &cmd, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1045

u8 __user *userbuf;

drivers/gpib/common/gpib_os.c

1051

fault = copy_from_user(&write_cmd, (void __user *)arg, sizeof(write_cmd));

drivers/gpib/common/gpib_os.c

1058

userbuf = (u8 __user *)(unsigned long)write_cmd.buffer_ptr;

drivers/gpib/common/gpib_os.c

1109

fault = copy_to_user((void __user *)arg, &write_cmd, sizeof(write_cmd));

drivers/gpib/common/gpib_os.c

1127

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1137

retval = copy_to_user((void __user *)arg, &cmd, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1247

retval = copy_from_user(&open_dev_cmd, (void __user *)arg, sizeof(open_dev_cmd));

drivers/gpib/common/gpib_os.c

1284

retval = copy_to_user((void __user *)arg, &open_dev_cmd, sizeof(open_dev_cmd));

drivers/gpib/common/gpib_os.c

1300

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1334

retval = copy_from_user(&serial_cmd, (void __user *)arg, sizeof(serial_cmd));

drivers/gpib/common/gpib_os.c

1343

retval = copy_to_user((void __user *)arg, &serial_cmd, sizeof(serial_cmd));

drivers/gpib/common/gpib_os.c

1357

retval = copy_from_user(&wait_cmd, (void __user *)arg, sizeof(wait_cmd));

drivers/gpib/common/gpib_os.c

1383

retval = copy_to_user((void __user *)arg, &wait_cmd, sizeof(wait_cmd));

drivers/gpib/common/gpib_os.c

1399

retval = copy_to_user((void __user *)arg, &poll_byte, sizeof(poll_byte));

drivers/gpib/common/gpib_os.c

1410

void __user *init_data = NULL;

drivers/gpib/common/gpib_os.c

1417

retval = copy_from_user(&online_cmd, (void __user *)arg, sizeof(online_cmd));

drivers/gpib/common/gpib_os.c

1426

init_data = (void __user *)(unsigned long)(online_cmd.init_data_ptr);

drivers/gpib/common/gpib_os.c

1455

retval = copy_from_user(&enable, (void __user *)arg, sizeof(enable));

drivers/gpib/common/gpib_os.c

1467

retval = copy_from_user(&synchronous, (void __user *)arg, sizeof(synchronous));

drivers/gpib/common/gpib_os.c

1483

retval = copy_to_user((void __user *)arg, &lines, sizeof(lines));

drivers/gpib/common/gpib_os.c

1497

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1533

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1566

retval = copy_from_user(&eos_cmd, (void __user *)arg, sizeof(eos_cmd));

drivers/gpib/common/gpib_os.c

1578

retval = copy_from_user(&status_byte, (void __user *)arg, sizeof(status_byte));

drivers/gpib/common/gpib_os.c

1590

retval = copy_from_user(&request_service2_cmd, (void __user *)arg,

drivers/gpib/common/gpib_os.c

1607

retval = copy_from_user(&base_addr, (void __user *)arg, sizeof(base_addr));

drivers/gpib/common/gpib_os.c

1626

retval = copy_from_user(&irq, (void __user *)arg, sizeof(irq));

drivers/gpib/common/gpib_os.c

1643

retval = copy_from_user(&dma_channel, (void __user *)arg, sizeof(dma_channel));

drivers/gpib/common/gpib_os.c

1659

retval = copy_from_user(&enable, (void __user *)arg, sizeof(enable));

drivers/gpib/common/gpib_os.c

1695

retval = copy_from_user(&lock_mutex, (void __user *)arg, sizeof(lock_mutex));

drivers/gpib/common/gpib_os.c

1735

retval = copy_from_user(&timeout, (void __user *)arg, sizeof(timeout));

drivers/gpib/common/gpib_os.c

1750

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1776

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1794

retval = copy_to_user((void __user *)arg, &cmd, sizeof(cmd));

drivers/gpib/common/gpib_os.c

1808

retval = copy_to_user((void __user *)arg, &status, sizeof(status));

drivers/gpib/common/gpib_os.c

1831

retval = copy_to_user((void __user *)arg, &info, sizeof(info));

drivers/gpib/common/gpib_os.c

1843

retval = copy_from_user(&usec_duration, (void __user *)arg, sizeof(usec_duration));

drivers/gpib/common/gpib_os.c

1858

retval = copy_from_user(&selection, (void __user *)arg, sizeof(selection));

drivers/gpib/common/gpib_os.c

1880

retval = copy_from_user(selection, (void __user *)arg,

drivers/gpib/common/gpib_os.c

2016

retval = copy_to_user((void __user *)arg, &user_event, sizeof(user_event));

drivers/gpib/common/gpib_os.c

2028

retval = copy_from_user(&request_control, (void __user *)arg, sizeof(request_control));

drivers/gpib/common/gpib_os.c

2044

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

823

retval = copy_from_user(&cmd, (void __user *)arg,

drivers/gpib/common/gpib_os.c

868

u8 __user *userbuf;

drivers/gpib/common/gpib_os.c

876

retval = copy_from_user(&read_cmd, (void __user *)arg, sizeof(read_cmd));

drivers/gpib/common/gpib_os.c

886

userbuf = (u8 __user *)(unsigned long)read_cmd.buffer_ptr;

drivers/gpib/common/gpib_os.c

936

retval = copy_to_user((void __user *)arg, &read_cmd, sizeof(read_cmd));

drivers/gpib/common/gpib_os.c

952

u8 __user *userbuf;

drivers/gpib/common/gpib_os.c

960

retval = copy_from_user(&cmd, (void __user *)arg, sizeof(cmd));

drivers/gpib/common/gpib_os.c

967

userbuf = (u8 __user *)(unsigned long)cmd.buffer_ptr;

drivers/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c

1776

static ssize_t lpvo_read(struct file *file, char __user *buffer, size_t count,

drivers/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c

1805

static ssize_t lpvo_write(struct file *file, const char __user *user_buffer,

drivers/gpio/gpio-mockup.c

273

char __user *usr_buf,

drivers/gpio/gpio-mockup.c

298

const char __user *usr_buf,

drivers/gpio/gpio-sloppy-logic-analyzer.c

201

static ssize_t trigger_write(struct file *file, const char __user *ubuf,

drivers/gpio/gpio-virtuser.c

150

char __user *user_buf,

drivers/gpio/gpio-virtuser.c

228

const char __user *user_buf,

drivers/gpio/gpio-virtuser.c

264

char __user *user_buf,

drivers/gpio/gpio-virtuser.c

272

const char __user *user_buf,

drivers/gpio/gpio-virtuser.c

288

gpio_virtuser_value_array_atomic_read(struct file *file, char __user *user_buf,

drivers/gpio/gpio-virtuser.c

297

const char __user *user_buf,

drivers/gpio/gpio-virtuser.c

335

char __user *user_buf,

drivers/gpio/gpio-virtuser.c

390

const char __user *user_buf,

drivers/gpio/gpio-virtuser.c

432

char __user *user_buf,

drivers/gpio/gpio-virtuser.c

440

const char __user *user_buf,

drivers/gpio/gpio-virtuser.c

456

char __user *user_buf,

drivers/gpio/gpio-virtuser.c

464

const char __user *user_buf,

drivers/gpio/gpio-virtuser.c

601

char __user *user_buf,

drivers/gpio/gpio-virtuser.c

617

const char __user *user_buf,

drivers/gpio/gpiolib-cdev.c

1262

static long linereq_get_values(struct linereq *lr, void __user *ip)

drivers/gpio/gpiolib-cdev.c

1334

static long linereq_set_values(struct linereq *lr, void __user *ip)

drivers/gpio/gpiolib-cdev.c

1389

static long linereq_set_config(struct linereq *lr, void __user *ip)

drivers/gpio/gpiolib-cdev.c

1447

void __user *ip = (void __user *)arg;

drivers/gpio/gpiolib-cdev.c

1494

static ssize_t linereq_read(struct file *file, char __user *buf,

drivers/gpio/gpiolib-cdev.c

1604

static int linereq_create(struct gpio_device *gdev, void __user *ip)

drivers/gpio/gpiolib-cdev.c

164

void __user *ip)

drivers/gpio/gpiolib-cdev.c

1805

static ssize_t lineevent_read(struct file *file, char __user *buf,

drivers/gpio/gpiolib-cdev.c

1893

void __user *ip = (void __user *)arg;

drivers/gpio/gpiolib-cdev.c

2006

static int lineevent_create(struct gpio_device *gdev, void __user *ip)

drivers/gpio/gpiolib-cdev.c

208

void __user *ip = (void __user *)arg;

drivers/gpio/gpiolib-cdev.c

2276

static int chipinfo_get(struct gpio_chardev_data *cdev, void __user *ip)

drivers/gpio/gpiolib-cdev.c

2306

static int lineinfo_get_v1(struct gpio_chardev_data *cdev, void __user *ip,

drivers/gpio/gpiolib-cdev.c

2342

static int lineinfo_get(struct gpio_chardev_data *cdev, void __user *ip,

drivers/gpio/gpiolib-cdev.c

2377

static int lineinfo_unwatch(struct gpio_chardev_data *cdev, void __user *ip)

drivers/gpio/gpiolib-cdev.c

2400

void __user *ip = (void __user *)arg;

drivers/gpio/gpiolib-cdev.c

2565

static ssize_t lineinfo_watch_read(struct file *file, char __user *buf,

drivers/gpio/gpiolib-cdev.c

303

static int linehandle_create(struct gpio_device *gdev, void __user *ip)

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_arcturus.c

124

uint32_t __user *wptr, struct mm_struct *mm)

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_arcturus.c

131

uint64_t __user *wptr64 = (uint64_t __user *)wptr;

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_arcturus.h

24

uint32_t __user *wptr, struct mm_struct *mm);

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gc_9_4_3.c

286

uint32_t __user *wptr, uint32_t wptr_shift,

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gc_9_4_3.c

60

uint32_t __user *wptr, struct mm_struct *mm)

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gc_9_4_3.c

67

uint64_t __user *wptr64 = (uint64_t __user *)wptr;

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v10.c

210

uint32_t __user *wptr, uint32_t wptr_shift,

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v10.c

374

uint32_t __user *wptr, struct mm_struct *mm)

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v10.c

381

uint64_t __user *wptr64 = (uint64_t __user *)wptr;

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v10_3.c

181

uint32_t __user *wptr, uint32_t wptr_shift,

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v10_3.c

360

uint32_t __user *wptr, struct mm_struct *mm)

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v10_3.c

367

uint64_t __user *wptr64 = (uint64_t __user *)wptr;

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v11.c

165

uint32_t queue_id, uint32_t __user *wptr,

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v11.c

345

uint32_t __user *wptr, struct mm_struct *mm)

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v11.c

352

uint64_t __user *wptr64 = (uint64_t __user *)wptr;

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v7.c

161

uint32_t __user *wptr, uint32_t wptr_shift,

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v7.c

240

uint32_t __user *wptr, struct mm_struct *mm)

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v8.c

156

uint32_t __user *wptr, uint32_t wptr_shift,

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v8.c

264

uint32_t __user *wptr, struct mm_struct *mm)

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v9.c

224

uint32_t __user *wptr, uint32_t wptr_shift,

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v9.c

385

uint32_t __user *wptr, struct mm_struct *mm)

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v9.c

392

uint64_t __user *wptr64 = (uint64_t __user *)wptr;

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v9.h

32

uint32_t queue_id, uint32_t __user *wptr,

drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c

187

const void __user *uptr = u64_to_user_ptr(in->bo_info_ptr);

drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c

190

struct drm_amdgpu_cs_chunk __user *chunk_ptr = NULL;

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

1073

static ssize_t amdgpu_debugfs_sensor_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

1157

static ssize_t amdgpu_debugfs_wave_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

1248

static ssize_t amdgpu_debugfs_gpr_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

1334

static ssize_t amdgpu_debugfs_gfxoff_residency_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

1384

static ssize_t amdgpu_debugfs_gfxoff_residency_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

1431

static ssize_t amdgpu_debugfs_gfxoff_count_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

1481

static ssize_t amdgpu_debugfs_gfxoff_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

1528

static ssize_t amdgpu_debugfs_gfxoff_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

1564

static ssize_t amdgpu_debugfs_gfxoff_status_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

196

static ssize_t amdgpu_debugfs_regs_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

205

static ssize_t amdgpu_debugfs_regs_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

208

return amdgpu_debugfs_process_reg_op(false, f, (char __user *)buf, size, pos);

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

234

static ssize_t amdgpu_debugfs_regs2_op(struct file *f, char __user *buf, u32 offset, size_t size, int write_en)

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

366

static ssize_t amdgpu_debugfs_regs2_read(struct file *f, char __user *buf, size_t size, loff_t *pos)

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

371

static ssize_t amdgpu_debugfs_regs2_write(struct file *f, const char __user *buf, size_t size, loff_t *pos)

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

373

return amdgpu_debugfs_regs2_op(f, (char __user *)buf, *pos, size, 1);

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

399

static ssize_t amdgpu_debugfs_gprwave_read(struct file *f, char __user *buf, size_t size, loff_t *pos)

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

519

static ssize_t amdgpu_debugfs_regs_pcie_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

578

static ssize_t amdgpu_debugfs_regs_pcie_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

633

static ssize_t amdgpu_debugfs_regs_pcie64_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

685

static ssize_t amdgpu_debugfs_regs_pcie64_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

741

static ssize_t amdgpu_debugfs_regs_didt_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

79

char __user *buf, size_t size, loff_t *pos)

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

799

static ssize_t amdgpu_debugfs_regs_didt_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

858

static ssize_t amdgpu_debugfs_regs_smc_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

916

static ssize_t amdgpu_debugfs_regs_smc_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c

977

static ssize_t amdgpu_debugfs_gca_config_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_fw_attestation.c

54

char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c

1046

void __user *out = u64_to_user_ptr(args->value);

drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c

513

if (!access_ok((void __user *)(uintptr_t)args->addr, args->size))

drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c

657

void __user *out = (void __user *)(uintptr_t)info->return_pointer;

drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c

4887

static ssize_t psp_read_spirom_debugfs_read(struct file *filp, char __user *buf, size_t size,

drivers/gpu/drm/amd/amdgpu/amdgpu_rap.c

43

static ssize_t amdgpu_rap_debugfs_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c

289

static ssize_t amdgpu_ras_debugfs_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c

347

const char __user *buf, size_t size,

drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c

570

const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c

657

const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c

1211

amdgpu_ras_debugfs_eeprom_size_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c

1280

static ssize_t amdgpu_ras_debugfs_table_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c

1399

amdgpu_ras_debugfs_eeprom_table_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c

484

static ssize_t amdgpu_ras_cper_debugfs_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c

499

char __user *data_buf = buf;

drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c

605

static ssize_t amdgpu_debugfs_ring_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c

702

static ssize_t amdgpu_debugfs_virt_ring_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c

728

static ssize_t amdgpu_debugfs_mqd_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_securedisplay.c

91

static ssize_t amdgpu_securedisplay_debugfs_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c

2733

static ssize_t amdgpu_ttm_vram_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c

2768

static ssize_t amdgpu_ttm_vram_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c

2816

static ssize_t amdgpu_iomem_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c

2872

static ssize_t amdgpu_iomem_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_umsch_mm.c

450

static ssize_t amdgpu_debugfs_umsch_fwlog_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c

467

void __user *ptr;

drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c

914

void __user *ptr;

drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c

1162

static ssize_t amdgpu_debugfs_vcn_fwlog_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

1565

r = copy_to_user((void __user *)args->metadata_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

1880

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

1909

uint8_t __user *user_addr,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

1910

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2033

uint8_t __user *user_bos,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2034

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2235

ret = criu_checkpoint_process(p, (uint8_t __user *)args->priv_data, &priv_offset);

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2239

ret = criu_checkpoint_devices(p, num_devices, (uint8_t __user *)args->devices,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2240

(uint8_t __user *)args->priv_data, &priv_offset);

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2252

ret = kfd_criu_checkpoint_queues(p, (uint8_t __user *)args->priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2257

ret = kfd_criu_checkpoint_events(p, (uint8_t __user *)args->priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2262

ret = kfd_criu_checkpoint_svm(p, (uint8_t __user *)args->priv_data, &priv_offset);

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2270

ret = criu_checkpoint_bos(p, num_bos, (uint8_t __user *)args->bos,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2271

(uint8_t __user *)args->priv_data, &bo_priv_offset);

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

228

(!access_ok((const void __user *) args->ring_base_address,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2295

(void __user *)(args->priv_data + *priv_offset),

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

249

if (!access_ok((const void __user *) args->read_pointer_address,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

255

if (!access_ok((const void __user *) args->write_pointer_address,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2590

ret = copy_from_user(bo_buckets, (void __user *)args->bos,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2604

ret = copy_from_user(bo_privs, (void __user *)args->priv_data + *priv_offset,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

262

!access_ok((const void __user *) args->eop_buffer_address,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2623

ret = copy_to_user((void __user *)args->bos,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2658

ret = get_user(object_type, (uint32_t __user *)(args->priv_data + *priv_offset));

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2666

ret = kfd_criu_restore_queue(p, (uint8_t __user *)args->priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2672

ret = kfd_criu_restore_event(filep, p, (uint8_t __user *)args->priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

2678

ret = kfd_criu_restore_svm(p, (uint8_t __user *)args->priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

269

!access_ok((const void __user *) args->ctx_save_restore_address,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

286

q_properties->read_ptr = (void __user *)args->read_pointer_address;

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

287

q_properties->write_ptr = (void __user *)args->write_pointer_address;

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

3169

(void __user *)args->enable.rinfo_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

3238

(void __user *)args->query_exception_info.info_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

3244

(void __user *)args->queue_snapshot.snapshot_buf_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

3251

(void __user *)args->device_snapshot.snapshot_buf_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

3646

if (copy_from_user(kdata, (void __user *)arg, usize) != 0) {

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

3663

if (copy_to_user((void __user *)arg, kdata, usize) != 0)

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

490

(!access_ok((const void __user *) args->ring_base_address,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

532

uint32_t __user *cu_mask_ptr = (uint32_t __user *)args->cu_mask_ptr;

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

582

(void __user *)args->ctl_stack_address,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

634

(void __user *)args->alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

850

(void __user *)args->kfd_process_device_apertures_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

919

(void __user *)args->events_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

984

err = copy_to_user((void __user *)args->tile_config_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_chardev.c

995

err = copy_to_user((void __user *)args->macro_tile_config_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_debug.c

1072

void __user *user_info,

drivers/gpu/drm/amd/amdkfd/kfd_debug.c

789

void __user *runtime_info, uint32_t *runtime_size)

drivers/gpu/drm/amd/amdkfd/kfd_debug.c

954

void __user *info,

drivers/gpu/drm/amd/amdkfd/kfd_debug.h

48

void __user *runtime_info,

drivers/gpu/drm/amd/amdkfd/kfd_debug.h

70

void __user *info,

drivers/gpu/drm/amd/amdkfd/kfd_debug.h

89

void __user *user_info,

drivers/gpu/drm/amd/amdkfd/kfd_debugfs.c

126

static ssize_t kfd_debugfs_pasid_read(struct file *file, char __user *buf,

drivers/gpu/drm/amd/amdkfd/kfd_debugfs.c

54

const char __user *user_buf, size_t size, loff_t *ppos)

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c

1067

retval = read_sdma_queue_counter((uint64_t __user *)q->properties.read_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c

2706

retval = read_sdma_queue_counter((uint64_t __user *)q->properties.read_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c

2792

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c

2877

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c

3471

(void __user *) q->properties.ctx_save_restore_area_address,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c

3587

if (copy_to_user((void __user *)usr_queue_id_array, queue_ids,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c

3704

if (copy_to_user((void __user *)usr_queue_id_array, queue_ids,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.h

174

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.h

188

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.h

213

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.h

365

static inline int read_sdma_queue_counter(uint64_t __user *q_rptr, uint64_t *val)

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_cik.c

42

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_cik.c

91

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_v10.c

38

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_v10.c

64

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_v11.c

37

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_v11.c

63

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_v12.c

37

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_v12.c

63

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_v9.c

37

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_v9.c

63

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_vi.c

42

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager_vi.c

92

void __user *alternate_aperture_base,

drivers/gpu/drm/amd/amdkfd/kfd_events.c

1125

page->user_address = (uint64_t __user *)vma->vm_start;

drivers/gpu/drm/amd/amdkfd/kfd_events.c

459

uint8_t __user *user_priv_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_events.c

543

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_events.c

56

uint64_t __user *user_address;

drivers/gpu/drm/amd/amdkfd/kfd_events.c

902

struct kfd_event_data __user *data)

drivers/gpu/drm/amd/amdkfd/kfd_events.c

905

void __user *dst;

drivers/gpu/drm/amd/amdkfd/kfd_events.c

976

uint32_t num_events, void __user *data,

drivers/gpu/drm/amd/amdkfd/kfd_events.c

980

struct kfd_event_data __user *events =

drivers/gpu/drm/amd/amdkfd/kfd_events.c

981

(struct kfd_event_data __user *) data;

drivers/gpu/drm/amd/amdkfd/kfd_events.h

67

uint64_t __user *user_signal_address;

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.c

250

(uint32_t __user *)p->write_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h

101

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_cik.c

168

(uint32_t __user *)p->write_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c

164

(uint32_t __user *)p->write_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c

250

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c

203

(uint32_t __user *)p->write_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c

287

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12.c

178

(uint32_t __user *)p->write_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12.c

256

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c

234

(uint32_t __user *)p->write_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c

331

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c

574

(uint32_t __user *)p->write_ptr, wptr_shift, 0, mms,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c

588

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c

594

void __user *xcc_ctl_stack;

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c

600

xcc_ctl_stack = (void __user *)((uintptr_t)ctl_stack +

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c

267

(uint32_t __user *)p->write_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c

373

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c

920

(uint32_t __user *)p->write_ptr, wptr_shift, 0, mms,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c

934

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c

940

void __user *xcc_ctl_stack;

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c

946

xcc_ctl_stack = (void __user *)((uintptr_t)ctl_stack +

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c

171

(uint32_t __user *)p->write_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c

267

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_priv.h

1322

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_priv.h

1326

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_priv.h

1331

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_priv.h

1336

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_priv.h

1346

int kfd_queue_buffer_get(struct amdgpu_vm *vm, void __user *addr, struct amdgpu_bo **pbo,

drivers/gpu/drm/amd/amdkfd/kfd_priv.h

1408

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_priv.h

1413

void __user *buf,

drivers/gpu/drm/amd/amdkfd/kfd_priv.h

1531

uint32_t num_events, void __user *data,

drivers/gpu/drm/amd/amdkfd/kfd_priv.h

519

void __user *read_ptr;

drivers/gpu/drm/amd/amdkfd/kfd_priv.h

520

void __user *write_ptr;

drivers/gpu/drm/amd/amdkfd/kfd_process.c

163

sdma_q->rptr = (uint64_t __user *)q->properties.read_ptr;

drivers/gpu/drm/amd/amdkfd/kfd_process.c

222

if (((uint64_t __user *)q->properties.read_ptr == sdma_q->rptr) &&

drivers/gpu/drm/amd/amdkfd/kfd_process.c

2280

struct kfd_context_save_area_header __user *csa_header;

drivers/gpu/drm/amd/amdkfd/kfd_process.c

2281

uint64_t __user *err_payload_ptr;

drivers/gpu/drm/amd/amdkfd/kfd_process.c

2302

csa_header = (void __user *)q->properties.ctx_save_restore_area_address;

drivers/gpu/drm/amd/amdkfd/kfd_process.c

2304

get_user(err_payload_ptr, (uint64_t __user **)&csa_header->err_payload_addr);

drivers/gpu/drm/amd/amdkfd/kfd_process.c

93

uint64_t __user *rptr;

drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c

680

void __user *ctl_stack,

drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c

702

void __user *buf,

drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c

867

uint8_t __user *user_priv,

drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c

940

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c

970

qp->read_ptr = (void __user *)q_data->read_ptr_addr;

drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c

971

qp->write_ptr = (void __user *)q_data->write_ptr_addr;

drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c

986

uint8_t __user *user_priv_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_queue.c

197

int kfd_queue_buffer_get(struct amdgpu_vm *vm, void __user *addr, struct amdgpu_bo **pbo,

drivers/gpu/drm/amd/amdkfd/kfd_smi_events.c

126

static ssize_t kfd_smi_ev_write(struct file *filep, const char __user *user,

drivers/gpu/drm/amd/amdkfd/kfd_smi_events.c

50

static ssize_t kfd_smi_ev_read(struct file *, char __user *, size_t, loff_t *);

drivers/gpu/drm/amd/amdkfd/kfd_smi_events.c

51

static ssize_t kfd_smi_ev_write(struct file *, const char __user *, size_t,

drivers/gpu/drm/amd/amdkfd/kfd_smi_events.c

81

static ssize_t kfd_smi_ev_read(struct file *filep, char __user *user,

drivers/gpu/drm/amd/amdkfd/kfd_svm.c

4128

uint8_t __user *user_priv_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_svm.c

4237

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_svm.h

189

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_svm.h

192

uint8_t __user *user_priv_ptr,

drivers/gpu/drm/amd/amdkfd/kfd_svm.h

248

uint8_t __user *user_priv_data,

drivers/gpu/drm/amd/amdkfd/kfd_svm.h

255

uint8_t __user *user_priv_ptr,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

1203

static ssize_t dp_dsc_passthrough_set(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

1333

static ssize_t dp_sdp_message_debugfs_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

1444

static ssize_t trigger_hotplug(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

1565

static ssize_t dp_dsc_clock_en_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

1644

static ssize_t dp_dsc_clock_en_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

1751

static ssize_t dp_dsc_slice_width_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

1828

static ssize_t dp_dsc_slice_width_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

190

static ssize_t dp_link_settings_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

1935

static ssize_t dp_dsc_slice_height_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

2012

static ssize_t dp_dsc_slice_height_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

2115

static ssize_t dp_dsc_bits_per_pixel_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

2189

static ssize_t dp_dsc_bits_per_pixel_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

2290

static ssize_t dp_dsc_pic_width_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

2344

static ssize_t dp_dsc_pic_height_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

2413

static ssize_t dp_dsc_chunk_size_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

2482

static ssize_t dp_dsc_slice_bpg_offset_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

2545

static ssize_t dp_max_bpc_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

258

static ssize_t dp_link_settings_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

2620

static ssize_t dp_max_bpc_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

2951

static ssize_t hdmi_cec_state_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

3689

static ssize_t edp_ilr_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

392

static ssize_t dp_mst_link_setting(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

4123

char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

4162

const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

4492

char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

536

static ssize_t dp_phy_settings_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

613

static ssize_t dp_phy_settings_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

756

static ssize_t dp_phy_test_pattern_debugfs_write(struct file *f, const char __user *buf,

drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c

79

long *param, const char __user *buf,

drivers/gpu/drm/amd/include/kgd_kfd_interface.h

235

uint32_t queue_id, uint32_t __user *wptr,

drivers/gpu/drm/amd/include/kgd_kfd_interface.h

244

uint32_t __user *wptr, struct mm_struct *mm);

drivers/gpu/drm/amd/pm/amdgpu_pm.c

5086

static ssize_t amdgpu_pm_prv_buffer_read(struct file *f, char __user *buf,

drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c

4078

static ssize_t smu_stb_debugfs_read(struct file *filp, char __user *buf, size_t size,

drivers/gpu/drm/arm/malidp_drv.c

527

static ssize_t malidp_debugfs_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/armada/armada_debugfs.c

54

const char __user *ptr, size_t len, loff_t *off)

drivers/gpu/drm/armada/armada_gem.c

341

char __user *ptr;

drivers/gpu/drm/armada/armada_gem.c

350

ptr = (char __user *)(uintptr_t)args->ptr;

drivers/gpu/drm/bridge/ite-it6505.c

3395

static ssize_t receive_timing_debugfs_show(struct file *file, char __user *buf,

drivers/gpu/drm/drm_atomic_uapi.c

1392

s32 __user *out_fence_ptr;

drivers/gpu/drm/drm_atomic_uapi.c

1431

s32 __user *fence_ptr;

drivers/gpu/drm/drm_atomic_uapi.c

1494

s32 __user *fence_ptr;

drivers/gpu/drm/drm_atomic_uapi.c

1605

uint32_t __user *objs_ptr = (uint32_t __user *)(unsigned long)(arg->objs_ptr);

drivers/gpu/drm/drm_atomic_uapi.c

1606

uint32_t __user *count_props_ptr = (uint32_t __user *)(unsigned long)(arg->count_props_ptr);

drivers/gpu/drm/drm_atomic_uapi.c

1607

uint32_t __user *props_ptr = (uint32_t __user *)(unsigned long)(arg->props_ptr);

drivers/gpu/drm/drm_atomic_uapi.c

1608

uint64_t __user *prop_values_ptr = (uint64_t __user *)(unsigned long)(arg->prop_values_ptr);

drivers/gpu/drm/drm_atomic_uapi.c

359

struct drm_crtc *crtc, s32 __user *fence_ptr)

drivers/gpu/drm/drm_atomic_uapi.c

364

static s32 __user *get_out_fence_for_crtc(struct drm_atomic_commit *state,

drivers/gpu/drm/drm_atomic_uapi.c

367

s32 __user *fence_ptr;

drivers/gpu/drm/drm_atomic_uapi.c

377

s32 __user *fence_ptr)

drivers/gpu/drm/drm_atomic_uapi.c

392

static s32 __user *get_out_fence_for_connector(struct drm_atomic_commit *state,

drivers/gpu/drm/drm_atomic_uapi.c

396

s32 __user *fence_ptr;

drivers/gpu/drm/drm_atomic_uapi.c

468

s32 __user *fence_ptr = u64_to_user_ptr(val);

drivers/gpu/drm/drm_atomic_uapi.c

953

s32 __user *fence_ptr = u64_to_user_ptr(val);

drivers/gpu/drm/drm_color_mgmt.c

389

if (copy_from_user(r_base, (void __user *)(unsigned long)crtc_lut->red, size)) {

drivers/gpu/drm/drm_color_mgmt.c

395

if (copy_from_user(g_base, (void __user *)(unsigned long)crtc_lut->green, size)) {

drivers/gpu/drm/drm_color_mgmt.c

401

if (copy_from_user(b_base, (void __user *)(unsigned long)crtc_lut->blue, size)) {

drivers/gpu/drm/drm_color_mgmt.c

453

if (copy_to_user((void __user *)(unsigned long)crtc_lut->red, r_base, size)) {

drivers/gpu/drm/drm_color_mgmt.c

459

if (copy_to_user((void __user *)(unsigned long)crtc_lut->green, g_base, size)) {

drivers/gpu/drm/drm_color_mgmt.c

465

if (copy_to_user((void __user *)(unsigned long)crtc_lut->blue, b_base, size)) {

drivers/gpu/drm/drm_connector.c

3338

struct drm_mode_modeinfo __user *mode_ptr;

drivers/gpu/drm/drm_connector.c

3339

uint32_t __user *encoder_ptr;

drivers/gpu/drm/drm_connector.c

3355

encoder_ptr = (uint32_t __user *)(unsigned long)(out_resp->encoders_ptr);

drivers/gpu/drm/drm_connector.c

3406

mode_ptr = (struct drm_mode_modeinfo __user *)(unsigned long)out_resp->modes_ptr;

drivers/gpu/drm/drm_connector.c

3459

(uint32_t __user *)(unsigned long)(out_resp->props_ptr),

drivers/gpu/drm/drm_connector.c

3460

(uint64_t __user *)(unsigned long)(out_resp->prop_values_ptr),

drivers/gpu/drm/drm_crtc.c

720

uint32_t __user *set_connectors_ptr;

drivers/gpu/drm/drm_crtc.c

855

set_connectors_ptr = (uint32_t __user *)(unsigned long)crtc_req->set_connectors_ptr;

drivers/gpu/drm/drm_crtc_internal.h

167

uint32_t __user *prop_ptr,

drivers/gpu/drm/drm_crtc_internal.h

168

uint64_t __user *prop_values,

drivers/gpu/drm/drm_debugfs.c

519

static ssize_t connector_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/drm_debugfs.c

560

static ssize_t edid_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/drm_debugfs.c

637

audio_infoframe_read(struct file *filp, char __user *ubuf, size_t count, loff_t *ppos)

drivers/gpu/drm/drm_debugfs.c

688

char __user *ubuf, \

drivers/gpu/drm/drm_debugfs_crc.c

121

static ssize_t crc_control_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/drm_debugfs_crc.c

285

static ssize_t crtc_crc_read(struct file *filep, char __user *user_buf,

drivers/gpu/drm/drm_file.c

540

ssize_t drm_read(struct file *filp, char __user *buffer,

drivers/gpu/drm/drm_framebuffer.c

714

struct drm_clip_rect __user *clips_ptr;

drivers/gpu/drm/drm_framebuffer.c

730

clips_ptr = (struct drm_clip_rect __user *)(unsigned long)r->clips_ptr;

drivers/gpu/drm/drm_gem.c

833

int drm_gem_objects_lookup(struct drm_file *filp, void __user *bo_handles,

drivers/gpu/drm/drm_ioc32.c

123

if (copy_to_user((void __user *)arg, &v32, sizeof(v32)))

drivers/gpu/drm/drm_ioc32.c

140

if (copy_from_user(&uq32, (void __user *)arg, sizeof(uq32)))

drivers/gpu/drm/drm_ioc32.c

155

if (copy_to_user((void __user *)arg, &uq32, sizeof(uq32)))

drivers/gpu/drm/drm_ioc32.c

180

drm_client32_t __user *argp = (void __user *)arg;

drivers/gpu/drm/drm_ioc32.c

218

drm_stats32_t __user *argp = (void __user *)arg;

drivers/gpu/drm/drm_ioc32.c

264

drm_wait_vblank32_t __user *argp = (void __user *)arg;

drivers/gpu/drm/drm_ioc32.c

305

struct drm_mode_fb_cmd232 __user *argp = (void __user *)arg;

drivers/gpu/drm/drm_ioc32.c

99

if (copy_from_user(&v32, (void __user *)arg, sizeof(v32)))

drivers/gpu/drm/drm_ioctl.c

503

static int drm_copy_field(char __user *buf, size_t *buf_len, const char *value)

drivers/gpu/drm/drm_ioctl.c

582

void __user *user_ptr;

drivers/gpu/drm/drm_ioctl.c

906

if (copy_from_user(kdata, (void __user *)arg, in_size) != 0) {

drivers/gpu/drm/drm_ioctl.c

915

if (copy_to_user((void __user *)arg, kdata, out_size) != 0)

drivers/gpu/drm/drm_lease.c

592

__u32 __user *lessee_ids = (__u32 __user *) (uintptr_t) (arg->lessees_ptr);

drivers/gpu/drm/drm_lease.c

640

__u32 __user *object_ids = (__u32 __user *) (uintptr_t) (arg->objects_ptr);

drivers/gpu/drm/drm_mipi_dbi.c

1242

const char __user *ubuf,

drivers/gpu/drm/drm_mode_config.c

102

uint32_t __user *fb_id;

drivers/gpu/drm/drm_mode_config.c

103

uint32_t __user *crtc_id;

drivers/gpu/drm/drm_mode_config.c

104

uint32_t __user *connector_id;

drivers/gpu/drm/drm_mode_config.c

105

uint32_t __user *encoder_id;

drivers/gpu/drm/drm_mode_object.c

416

uint32_t __user *prop_ptr,

drivers/gpu/drm/drm_mode_object.c

417

uint64_t __user *prop_values,

drivers/gpu/drm/drm_mode_object.c

503

(uint32_t __user *)(unsigned long)(arg->props_ptr),

drivers/gpu/drm/drm_mode_object.c

504

(uint64_t __user *)(unsigned long)(arg->prop_values_ptr),

drivers/gpu/drm/drm_panic.c

973

static ssize_t debugfs_trigger_write(struct file *file, const char __user *user_buf,

drivers/gpu/drm/drm_plane.c

807

uint32_t __user *plane_ptr;

drivers/gpu/drm/drm_plane.c

858

uint32_t __user *format_ptr;

drivers/gpu/drm/drm_plane.c

895

format_ptr = (uint32_t __user *)(unsigned long)plane_resp->format_type_ptr;

drivers/gpu/drm/drm_property.c

467

struct drm_mode_property_enum __user *enum_ptr;

drivers/gpu/drm/drm_property.c

468

uint64_t __user *values_ptr;

drivers/gpu/drm/drm_syncobj.c

1036

void __user *user_points,

drivers/gpu/drm/drm_syncobj.c

1266

void __user *user_handles,

drivers/gpu/drm/drm_syncobj.c

1659

uint64_t __user *points = u64_to_user_ptr(args->points);

drivers/gpu/drm/etnaviv/etnaviv_drv.c

399

if (!access_ok((void __user *)(unsigned long)args->user_ptr,

drivers/gpu/drm/exynos/exynos_drm_g2d.c

1241

(void __user *)cmd,

drivers/gpu/drm/exynos/exynos_drm_g2d.c

1260

(void __user *)cmd_buf,

drivers/gpu/drm/exynos/exynos_drm_g2d.c

734

if (copy_from_user(&g2d_userptr, (void __user *)handle,

drivers/gpu/drm/exynos/exynos_drm_ipp.c

110

uint32_t __user *ipp_ptr = (uint32_t __user *)

drivers/gpu/drm/exynos/exynos_drm_ipp.c

157

void __user *ptr = (void __user *)(unsigned long)resp->formats_ptr;

drivers/gpu/drm/exynos/exynos_drm_ipp.c

223

void __user *ptr = (void __user *)(unsigned long)resp->limits_ptr;

drivers/gpu/drm/exynos/exynos_drm_ipp.c

245

if (copy_to_user((void __user *)ptr, format->limits,

drivers/gpu/drm/exynos/exynos_drm_ipp.c

318

void __user *params = (void __user *)(unsigned long)arg->params_ptr;

drivers/gpu/drm/exynos/exynos_drm_ipp.c

324

if (get_user(id, (uint32_t __user *)params))

drivers/gpu/drm/exynos/exynos_drm_vidi.c

266

const void __user *edid_userptr = u64_to_user_ptr(vidi->edid);

drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_debugfs.c

18

static ssize_t hibmc_control_write(struct file *file, const char __user *user_buf,

drivers/gpu/drm/i915/display/intel_display_debugfs.c

1046

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_display_debugfs.c

1113

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_display_debugfs.c

1181

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_display_debugfs.c

1270

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_display_debugfs.c

505

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_display_debugfs.c

765

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_display_debugfs.c

970

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_display_debugfs_params.c

31

const char __user *ubuf, size_t len,

drivers/gpu/drm/i915/display/intel_display_debugfs_params.c

84

const char __user *ubuf, size_t len,

drivers/gpu/drm/i915/display/intel_dp_link_training.c

1903

static int parse_link_rate(struct intel_dp *intel_dp, const char __user *ubuf, size_t len)

drivers/gpu/drm/i915/display/intel_dp_link_training.c

1936

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_dp_link_training.c

2001

static int parse_lane_count(const char __user *ubuf, size_t len)

drivers/gpu/drm/i915/display/intel_dp_link_training.c

2038

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_dp_test.c

551

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_hdcp.c

2814

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_hotplug.c

1196

const char __user *ubuf, size_t len,

drivers/gpu/drm/i915/display/intel_hotplug.c

1277

const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_link_bw.c

401

static int user_str_to_fxp_q4_nonneg(const char __user *ubuf, size_t len, int *val_x16)

drivers/gpu/drm/i915/display/intel_link_bw.c

435

force_link_bpp_write(struct file *file, const char __user *ubuf, size_t len, loff_t *offp)

drivers/gpu/drm/i915/display/intel_wm.c

284

static ssize_t wm_latency_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_wm.c

318

static ssize_t pri_wm_latency_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_wm.c

333

static ssize_t spr_wm_latency_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/i915/display/intel_wm.c

348

static ssize_t cur_wm_latency_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/i915/display/skl_watermark.c

4016

const char __user *ubuf,

drivers/gpu/drm/i915/gem/i915_gem_context.c

2272

static int create_setparam(struct i915_user_extension __user *ext, void *data)

drivers/gpu/drm/i915/gem/i915_gem_context.c

2286

static int invalid_ext(struct i915_user_extension __user *ext, void *data)

drivers/gpu/drm/i915/gem/i915_gem_context.c

400

set_proto_ctx_engines_balance(struct i915_user_extension __user *base,

drivers/gpu/drm/i915/gem/i915_gem_context.c

403

struct i915_context_engines_load_balance __user *ext =

drivers/gpu/drm/i915/gem/i915_gem_context.c

488

set_proto_ctx_engines_bond(struct i915_user_extension __user *base, void *data)

drivers/gpu/drm/i915/gem/i915_gem_context.c

490

struct i915_context_engines_bond __user *ext =

drivers/gpu/drm/i915/gem/i915_gem_context.c

580

set_proto_ctx_engines_parallel_submit(struct i915_user_extension __user *base,

drivers/gpu/drm/i915/gem/i915_gem_context.c

583

struct i915_context_engines_parallel_submit __user *ext =

drivers/gpu/drm/i915/gem/i915_gem_context.c

740

struct i915_context_param_engines __user *user =

drivers/gpu/drm/i915/gem/i915_gem_create.c

276

struct drm_i915_gem_memory_class_instance __user *uregions =

drivers/gpu/drm/i915/gem/i915_gem_create.c

367

static int ext_set_placements(struct i915_user_extension __user *base,

drivers/gpu/drm/i915/gem/i915_gem_create.c

378

static int ext_set_protected(struct i915_user_extension __user *base, void *data)

drivers/gpu/drm/i915/gem/i915_gem_create.c

397

static int ext_set_pat(struct i915_user_extension __user *base, void *data)

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

1516

struct drm_i915_gem_relocation_entry __user *urelocs =

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

1620

const char __user *addr, *end;

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

1654

struct drm_i915_gem_relocation_entry __user *urelocs;

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

1681

(char __user *)urelocs + copied,

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

2789

struct drm_i915_gem_exec_fence __user *user_fences;

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

2790

u64 __user *user_values;

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

2922

struct drm_i915_gem_exec_fence __user *user;

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

3048

parse_timeline_fences(struct i915_user_extension __user *ext, void *data)

drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c

3608

struct drm_i915_gem_exec_object2 __user *user_exec_list =

drivers/gpu/drm/i915/gem/i915_gem_phys.c

154

char __user *user_data = u64_to_user_ptr(args->data_ptr);

drivers/gpu/drm/i915/gem/i915_gem_phys.c

185

char __user *user_data = u64_to_user_ptr(args->data_ptr);

drivers/gpu/drm/i915/gem/i915_gem_shmem.c

411

char __user *user_data = u64_to_user_ptr(arg->data_ptr);

drivers/gpu/drm/i915/gem/i915_gem_shmem.c

447

iov_iter_ubuf(&iter, ITER_SOURCE, (void __user *)user_data, size);

drivers/gpu/drm/i915/gem/i915_gem_userptr.c

494

if (!access_ok((char __user *)(unsigned long)args->user_ptr, args->user_size))

drivers/gpu/drm/i915/gem/selftests/i915_gem_mman.c

1107

u32 __user *ux = u64_to_user_ptr((u64)(addr + i * sizeof(*ux)));

drivers/gpu/drm/i915/gem/selftests/i915_gem_mman.c

1446

unsigned long __user *ptr;

drivers/gpu/drm/i915/gem/selftests/i915_gem_mman.c

1466

ptr = (unsigned long __user *)addr;

drivers/gpu/drm/i915/gem/selftests/i915_gem_mman.c

1557

u32 __user *ux;

drivers/gpu/drm/i915/gem/selftests/i915_gem_mman.c

1733

const char __user *addr, *end;

drivers/gpu/drm/i915/gem/selftests/i915_gem_mman.c

936

u32 __user *ux = u64_to_user_ptr((u64)(addr + i * sizeof(*ux)));

drivers/gpu/drm/i915/gt/intel_sseu.c

130

int intel_sseu_copy_ssmask_to_user(void __user *to,

drivers/gpu/drm/i915/gt/intel_sseu.c

96

int intel_sseu_copy_eumask_to_user(void __user *to,

drivers/gpu/drm/i915/gt/intel_sseu.h

173

int intel_sseu_copy_eumask_to_user(void __user *to,

drivers/gpu/drm/i915/gt/intel_sseu.h

175

int intel_sseu_copy_ssmask_to_user(void __user *to,

drivers/gpu/drm/i915/gt/uc/intel_guc_log_debugfs.c

122

const char __user *ubuf,

drivers/gpu/drm/i915/gvt/kvmgt.c

1272

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/gpu/drm/i915/gvt/kvmgt.c

1284

return copy_to_user((void __user *)arg, &info, minsz) ?

drivers/gpu/drm/i915/gvt/kvmgt.c

1292

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/gpu/drm/i915/gvt/kvmgt.c

1316

return copy_to_user((void __user *)arg, &info, minsz) ?

drivers/gpu/drm/i915/gvt/kvmgt.c

1326

if (copy_from_user(&hdr, (void __user *)arg, minsz))

drivers/gpu/drm/i915/gvt/kvmgt.c

1346

data = memdup_user((void __user *)(arg + minsz),

drivers/gpu/drm/i915/gvt/kvmgt.c

1366

if (copy_from_user(&dmabuf, (void __user *)arg, minsz))

drivers/gpu/drm/i915/gvt/kvmgt.c

1375

return copy_to_user((void __user *)arg, &dmabuf, minsz) ?

drivers/gpu/drm/i915/gvt/kvmgt.c

1380

if (get_user(dmabuf_id, (__u32 __user *)arg))

drivers/gpu/drm/i915/gvt/kvmgt.c

866

static ssize_t intel_vgpu_read(struct vfio_device *vfio_dev, char __user *buf,

drivers/gpu/drm/i915/gvt/kvmgt.c

941

const char __user *buf,

drivers/gpu/drm/i915/i915_debugfs_params.c

107

const char __user *ubuf, size_t len,

drivers/gpu/drm/i915/i915_debugfs_params.c

170

const char __user *ubuf, size_t len,

drivers/gpu/drm/i915/i915_debugfs_params.c

54

const char __user *ubuf, size_t len,

drivers/gpu/drm/i915/i915_gem.c

207

shmem_pread(struct page *page, int offset, int len, char __user *user_data,

drivers/gpu/drm/i915/i915_gem.c

230

char __user *user_data;

drivers/gpu/drm/i915/i915_gem.c

281

char __user *user_data, int length)

drivers/gpu/drm/i915/i915_gem.c

388

void __user *user_data;

drivers/gpu/drm/i915/i915_gem.c

516

char __user *user_data, int length)

drivers/gpu/drm/i915/i915_gem.c

553

void __user *user_data;

drivers/gpu/drm/i915/i915_gem.c

643

shmem_pwrite(struct page *page, int offset, int len, char __user *user_data,

drivers/gpu/drm/i915/i915_gem.c

670

void __user *user_data;

drivers/gpu/drm/i915/i915_gpu_error.c

2443

static ssize_t gpu_state_read(struct file *file, char __user *ubuf,

drivers/gpu/drm/i915/i915_gpu_error.c

2506

const char __user *ubuf,

drivers/gpu/drm/i915/i915_ioc32.c

53

if (copy_from_user(&req32, (void __user *)arg, sizeof(req32)))

drivers/gpu/drm/i915/i915_perf.c

1039

char __user *buf,

drivers/gpu/drm/i915/i915_perf.c

1153

char __user *buf,

drivers/gpu/drm/i915/i915_perf.c

1275

char __user *buf,

drivers/gpu/drm/i915/i915_perf.c

3429

char __user *buf,

drivers/gpu/drm/i915/i915_perf.c

3967

u64 __user *uprops,

drivers/gpu/drm/i915/i915_perf.c

3973

u64 __user *uprop = uprops;

drivers/gpu/drm/i915/i915_perf.c

4493

u32 __user *regs,

drivers/gpu/drm/i915/i915_perf.c

629

char __user *buf,

drivers/gpu/drm/i915/i915_perf.c

665

char __user *buf,

drivers/gpu/drm/i915/i915_perf.c

729

char __user *buf,

drivers/gpu/drm/i915/i915_perf.c

948

char __user *buf,

drivers/gpu/drm/i915/i915_perf_types.h

152

char __user *buf,

drivers/gpu/drm/i915/i915_perf_types.h

397

char __user *buf,

drivers/gpu/drm/i915/i915_ptr_util.h

60

void __user *__mptr = (void __user *)(ptr); \

drivers/gpu/drm/i915/i915_ptr_util.h

64

((type __user *)(__mptr - offsetof(type, member))); })

drivers/gpu/drm/i915/i915_query.c

133

struct drm_i915_query_engine_info __user *query_ptr =

drivers/gpu/drm/i915/i915_query.c

135

struct drm_i915_engine_info __user *info_ptr;

drivers/gpu/drm/i915/i915_query.c

202

u32 __user *p = u64_to_user_ptr(user_regs_ptr);

drivers/gpu/drm/i915/i915_query.c

231

struct drm_i915_query_perf_config __user *user_query_config_ptr =

drivers/gpu/drm/i915/i915_query.c

233

struct drm_i915_perf_oa_config __user *user_config_ptr =

drivers/gpu/drm/i915/i915_query.c

377

struct drm_i915_query_perf_config __user *user_query_config_ptr =

drivers/gpu/drm/i915/i915_query.c

465

struct drm_i915_query_memory_regions __user *query_ptr =

drivers/gpu/drm/i915/i915_query.c

467

struct drm_i915_memory_region_info __user *info_ptr =

drivers/gpu/drm/i915/i915_query.c

560

struct drm_i915_query_guc_submission_version __user *query_ptr =

drivers/gpu/drm/i915/i915_query.c

603

struct drm_i915_query_item __user *user_item_ptr =

drivers/gpu/drm/i915/i915_user_extensions.c

16

int i915_user_extensions(struct i915_user_extension __user *ext,

drivers/gpu/drm/i915/i915_user_extensions.h

12

typedef int (*i915_user_extension_fn)(struct i915_user_extension __user *ext,

drivers/gpu/drm/i915/i915_user_extensions.h

15

int i915_user_extensions(struct i915_user_extension __user *ext,

drivers/gpu/drm/imagination/pvr_drv.c

1214

void __user *in_ptr = u64_to_user_ptr(in->array);

drivers/gpu/drm/imagination/pvr_drv.c

1252

void __user *out_ptr = u64_to_user_ptr(out->array);

drivers/gpu/drm/loongson/lsdc_crtc.c

634

const char __user *ubuf,

drivers/gpu/drm/mediatek/mtk_dpi.c

936

static ssize_t mtk_dpi_debug_tp_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/mediatek/mtk_hdmi_v2.c

1276

const char __user *ubuf,

drivers/gpu/drm/msm/disp/dpu1/dpu_core_perf.c

413

const char __user *user_buf, size_t count, loff_t *ppos)

drivers/gpu/drm/msm/disp/dpu1/dpu_core_perf.c

441

char __user *buff, size_t count, loff_t *ppos)

drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c

113

char __user *buff, size_t count, loff_t *ppos)

drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c

148

const char __user *user_buf, size_t count, loff_t *ppos)

drivers/gpu/drm/msm/dp/dp_debug.c

126

const char __user *ubuf,

drivers/gpu/drm/msm/msm_drv.c

467

__user void *metadata,

drivers/gpu/drm/msm/msm_drv.c

509

__user void *metadata,

drivers/gpu/drm/msm/msm_gem_submit.c

138

void __user *userptr =

drivers/gpu/drm/msm/msm_gem_submit.c

204

void __user *userptr =

drivers/gpu/drm/msm/msm_gem_vma.c

1068

void __user *userptr =

drivers/gpu/drm/msm/msm_perfcntr.c

137

msm_perfcntrs_stream_read(struct file *file, char __user *buf,

drivers/gpu/drm/msm/msm_perfcntr.c

459

void __user *userptr =

drivers/gpu/drm/msm/msm_perfcntr.c

511

void __user *userptr = u64_to_user_ptr(g.countables);

drivers/gpu/drm/msm/msm_rd.c

133

static ssize_t rd_read(struct file *file, char __user *buf,

drivers/gpu/drm/nouveau/dispnv50/crc.c

657

const char __user *ubuf, size_t len,

drivers/gpu/drm/nouveau/nouveau_abi16.c

868

nouveau_abi16_ioctl(struct drm_file *filp, void __user *user, u32 size)

drivers/gpu/drm/nouveau/nouveau_abi16.h

43

int nouveau_abi16_ioctl(struct drm_file *, void __user *user, u32 size);

drivers/gpu/drm/nouveau/nouveau_debugfs.c

142

nouveau_debugfs_pstate_set(struct file *file, const char __user *ubuf,

drivers/gpu/drm/nouveau/nouveau_drm.c

1335

ret = nouveau_abi16_ioctl(filp, (void __user *)arg, _IOC_SIZE(cmd));

drivers/gpu/drm/nouveau/nouveau_drv.h

196

void __user *userptr = u64_to_user_ptr(user);

drivers/gpu/drm/nouveau/nouveau_gem.c

942

struct drm_nouveau_gem_pushbuf_bo __user *upbbo =

drivers/gpu/drm/panfrost/panfrost_drv.c

205

(void __user *)(uintptr_t)args->bo_handles,

drivers/gpu/drm/panfrost/panfrost_drv.c

268

(void __user *)(uintptr_t)args->in_syncs,

drivers/gpu/drm/panfrost/panfrost_drv.c

608

if (copy_from_user(ops, (void __user *)(uintptr_t)args->ops,

drivers/gpu/drm/panfrost/panfrost_perfcnt.c

248

void __user *user_ptr = (void __user *)(uintptr_t)req->buf_ptr;

drivers/gpu/drm/panthor/panthor_drv.c

119

void __user *in_ptr = u64_to_user_ptr(in->array);

drivers/gpu/drm/panthor/panthor_drv.c

1491

label = strndup_user((const char __user *)(uintptr_t)args->label,

drivers/gpu/drm/qxl/qxl_ioctl.c

206

struct drm_qxl_reloc __user *u = u64_to_user_ptr(cmd->relocs);

drivers/gpu/drm/qxl/qxl_ioctl.c

281

struct drm_qxl_command __user *commands =

drivers/gpu/drm/radeon/radeon.h

1013

void __user *user_ptr;

drivers/gpu/drm/radeon/radeon_cs.c

304

struct drm_radeon_cs_chunk __user **chunk_ptr = NULL;

drivers/gpu/drm/radeon/radeon_cs.c

306

uint32_t __user *cdata;

drivers/gpu/drm/radeon/radeon_cs.c

308

chunk_ptr = (void __user*)(unsigned long)p->chunks_array[i];

drivers/gpu/drm/radeon/radeon_cs.c

337

cdata = (void __user *)(unsigned long)user_chunk.chunk_data;

drivers/gpu/drm/radeon/radeon_ttm.c

791

static ssize_t radeon_ttm_vram_read(struct file *f, char __user *buf,

drivers/gpu/drm/radeon/radeon_ttm.c

815

r = put_user(value, (uint32_t __user *)buf);

drivers/gpu/drm/radeon/radeon_ttm.c

843

static ssize_t radeon_ttm_gtt_read(struct file *f, char __user *buf,

drivers/gpu/drm/tegra/drm.c

128

struct drm_tegra_reloc __user *src,

drivers/gpu/drm/tegra/drm.c

175

struct drm_tegra_cmdbuf __user *user_cmdbufs;

drivers/gpu/drm/tegra/drm.c

176

struct drm_tegra_reloc __user *user_relocs;

drivers/gpu/drm/tegra/drm.c

177

struct drm_tegra_syncpt __user *user_syncpt;

drivers/gpu/drm/tegra/submit.c

160

static void *alloc_copy_user_array(void __user *from, size_t count, size_t size)

drivers/gpu/drm/v3d/v3d_submit.c

203

struct drm_v3d_sem __user *handle = u64_to_user_ptr(se->in_syncs);

drivers/gpu/drm/v3d/v3d_submit.c

366

struct drm_v3d_sem __user *post_deps;

drivers/gpu/drm/v3d/v3d_submit.c

412

struct drm_v3d_extension __user *ext,

drivers/gpu/drm/v3d/v3d_submit.c

472

struct drm_v3d_extension __user *ext,

drivers/gpu/drm/v3d/v3d_submit.c

509

struct drm_v3d_extension __user *ext,

drivers/gpu/drm/v3d/v3d_submit.c

512

u32 __user *offsets, *syncs;

drivers/gpu/drm/v3d/v3d_submit.c

570

struct drm_v3d_extension __user *ext,

drivers/gpu/drm/v3d/v3d_submit.c

573

u32 __user *syncs;

drivers/gpu/drm/v3d/v3d_submit.c

623

struct drm_v3d_extension __user *ext,

drivers/gpu/drm/v3d/v3d_submit.c

626

u32 __user *offsets, *syncs;

drivers/gpu/drm/v3d/v3d_submit.c

692

u32 __user *syncs,

drivers/gpu/drm/v3d/v3d_submit.c

693

u64 __user *kperfmon_ids,

drivers/gpu/drm/v3d/v3d_submit.c

701

u32 __user *ids_pointer;

drivers/gpu/drm/v3d/v3d_submit.c

753

struct drm_v3d_extension __user *ext,

drivers/gpu/drm/v3d/v3d_submit.c

790

struct drm_v3d_extension __user *ext,

drivers/gpu/drm/v3d/v3d_submit.c

84

(void __user *)(uintptr_t)bo_handles,

drivers/gpu/drm/v3d/v3d_submit.c

846

struct drm_v3d_extension __user *user_ext;

drivers/gpu/drm/vc4/vc4_bo.c

878

(void __user *)(uintptr_t)args->data,

drivers/gpu/drm/vmwgfx/vmwgfx_drv.h

1006

struct drm_vmw_fence_rep __user

drivers/gpu/drm/vmwgfx/vmwgfx_drv.h

986

void __user *user_commands,

drivers/gpu/drm/vmwgfx/vmwgfx_drv.h

991

struct drm_vmw_fence_rep __user

drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c

3891

struct drm_vmw_fence_rep __user *user_fence_rep,

drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c

4024

void __user *user_commands,

drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c

4100

void __user *user_commands, void *kernel_commands,

drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c

4103

struct drm_vmw_fence_rep __user *user_fence_rep,

drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c

4515

(void __user *)(unsigned long)arg->commands,

drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c

4518

(void __user *)(unsigned long)arg->fence_rep,

drivers/gpu/drm/vmwgfx/vmwgfx_fence.c

678

struct drm_vmw_fence_rep __user *user_fence_rep =

drivers/gpu/drm/vmwgfx/vmwgfx_fence.c

679

(struct drm_vmw_fence_rep __user *)(unsigned long)

drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c

130

void __user *buffer = (void __user *)((unsigned long)(arg->buffer));

drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c

179

struct drm_vmw_rect __user *clips_ptr;

drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c

188

clips_ptr = (struct drm_vmw_rect __user *)(unsigned long)arg->clips_ptr;

drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c

254

struct drm_vmw_fence_rep __user *user_fence_rep =

drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c

255

(struct drm_vmw_fence_rep __user *)

drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c

257

struct drm_vmw_rect __user *clips_ptr;

drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c

265

clips_ptr = (struct drm_vmw_rect __user *)(unsigned long)arg->clips_ptr;

drivers/gpu/drm/vmwgfx/vmwgfx_kms.c

1408

const void __user *user_rects;

drivers/gpu/drm/vmwgfx/vmwgfx_kms.c

1429

user_rects = (void __user *)(unsigned long)arg->rects;

drivers/gpu/drm/vmwgfx/vmwgfx_kms.c

1625

struct drm_vmw_fence_rep __user *

drivers/gpu/drm/vmwgfx/vmwgfx_kms.c

461

struct drm_vmw_fence_rep __user *user_fence_rep,

drivers/gpu/drm/vmwgfx/vmwgfx_kms.h

389

struct drm_vmw_fence_rep __user *

drivers/gpu/drm/vmwgfx/vmwgfx_kms.h

394

struct drm_vmw_fence_rep __user *user_fence_rep,

drivers/gpu/drm/vmwgfx/vmwgfx_kms.h

470

struct drm_vmw_fence_rep __user *user_fence_rep,

drivers/gpu/drm/vmwgfx/vmwgfx_kms.h

492

struct drm_vmw_fence_rep __user *user_fence_rep,

drivers/gpu/drm/vmwgfx/vmwgfx_msg.c

547

length = strncpy_from_user(msg, (void __user *)((unsigned long)arg->send),

drivers/gpu/drm/vmwgfx/vmwgfx_msg.c

575

if (copy_to_user((void __user *)((unsigned long)arg->receive),

drivers/gpu/drm/vmwgfx/vmwgfx_scrn.c

1323

struct drm_vmw_fence_rep __user *user_fence_rep,

drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c

558

struct drm_vmw_fence_rep __user *user_fence_rep,

drivers/gpu/drm/vmwgfx/vmwgfx_surface.c

1078

struct drm_vmw_size __user *user_sizes;

drivers/gpu/drm/vmwgfx/vmwgfx_surface.c

1095

user_sizes = (struct drm_vmw_size __user *)(unsigned long)

drivers/gpu/drm/vmwgfx/vmwgfx_surface.c

763

memdup_array_user((struct drm_vmw_size __user *)(unsigned long)

drivers/gpu/drm/xe/xe_bo.c

3286

u64 __user *address = u64_to_user_ptr(extension);

drivers/gpu/drm/xe/xe_bo.c

3320

u64 __user *address = u64_to_user_ptr(extensions);

drivers/gpu/drm/xe/xe_debugfs.c

280

static ssize_t wedged_mode_show(struct file *f, char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

344

static ssize_t wedged_mode_set(struct file *f, const char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

376

static ssize_t page_reclaim_hw_assist_show(struct file *f, char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

387

static ssize_t page_reclaim_hw_assist_set(struct file *f, const char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

409

static ssize_t atomic_svm_timeslice_ms_show(struct file *f, char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

422

const char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

444

static ssize_t min_run_period_lr_ms_show(struct file *f, char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

456

static ssize_t min_run_period_lr_ms_set(struct file *f, const char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

478

static ssize_t min_run_period_pf_ms_show(struct file *f, char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

490

static ssize_t min_run_period_pf_ms_set(struct file *f, const char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

512

static ssize_t disable_late_binding_show(struct file *f, char __user *ubuf,

drivers/gpu/drm/xe/xe_debugfs.c

525

static ssize_t disable_late_binding_set(struct file *f, const char __user *ubuf,

drivers/gpu/drm/xe/xe_eu_stall.c

309

u64 __user *address = u64_to_user_ptr(extension);

drivers/gpu/drm/xe/xe_eu_stall.c

336

u64 __user *address = u64_to_user_ptr(extension);

drivers/gpu/drm/xe/xe_eu_stall.c

465

char __user *buf, size_t count,

drivers/gpu/drm/xe/xe_eu_stall.c

549

struct file *file, char __user *buf,

drivers/gpu/drm/xe/xe_eu_stall.c

595

static ssize_t xe_eu_stall_stream_read(struct file *file, char __user *buf,

drivers/gpu/drm/xe/xe_exec.c

116

struct drm_xe_sync __user *syncs_user = u64_to_user_ptr(args->syncs);

drivers/gpu/drm/xe/xe_exec.c

117

u64 __user *addresses_user = u64_to_user_ptr(args->address);

drivers/gpu/drm/xe/xe_exec_queue.c

1087

u64 __user *address = u64_to_user_ptr(extension);

drivers/gpu/drm/xe/xe_exec_queue.c

1132

u64 __user *address = u64_to_user_ptr(extensions);

drivers/gpu/drm/xe/xe_exec_queue.c

1266

struct drm_xe_engine_class_instance __user *user_eci =

drivers/gpu/drm/xe/xe_exec_queue.c

805

u64 __user *address = u64_to_user_ptr(value);

drivers/gpu/drm/xe/xe_gt_debugfs.c

251

static ssize_t write_to_gt_call(const char __user *userbuf, size_t count, loff_t *ppos,

drivers/gpu/drm/xe/xe_gt_debugfs.c

267

static ssize_t stats_write(struct file *file, const char __user *userbuf,

drivers/gpu/drm/xe/xe_gt_debugfs.c

294

const char __user *userbuf,

drivers/gpu/drm/xe/xe_gt_debugfs.c

321

const char __user *userbuf,

drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c

225

static ssize_t sched_groups_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c

294

static ssize_t sched_groups_config_write(struct file *file, const char __user *ubuf,

drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c

348

const char __user *ubuf, \

drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c

367

static ssize_t sched_group_engines_read(struct file *file, char __user *buf,

drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c

624

static ssize_t control_write(struct file *file, const char __user *buf, size_t count, loff_t *pos)

drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c

662

static ssize_t control_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c

728

static ssize_t config_blob_read(struct file *file, char __user *buf,

drivers/gpu/drm/xe/xe_gt_sriov_pf_debugfs.c

736

static ssize_t config_blob_write(struct file *file, const char __user *buf,

drivers/gpu/drm/xe/xe_oa.c

101

struct drm_xe_sync __user *syncs_user;

drivers/gpu/drm/xe/xe_oa.c

1366

u64 __user *address = u64_to_user_ptr(extension);

drivers/gpu/drm/xe/xe_oa.c

1400

u64 __user *address = u64_to_user_ptr(extension);

drivers/gpu/drm/xe/xe_oa.c

1608

void __user *uaddr = (void __user *)arg;

drivers/gpu/drm/xe/xe_oa.c

1629

void __user *uaddr = (void __user *)arg;

drivers/gpu/drm/xe/xe_oa.c

2274

u32 __user *regs, u32 n_regs)

drivers/gpu/drm/xe/xe_oa.c

329

xe_oa_copy_to_user(struct xe_oa_stream *stream, void __user *dst, u32 report_offset, u32 len)

drivers/gpu/drm/xe/xe_oa.c

338

static int xe_oa_append_report(struct xe_oa_stream *stream, char __user *buf,

drivers/gpu/drm/xe/xe_oa.c

367

static int xe_oa_append_reports(struct xe_oa_stream *stream, char __user *buf,

drivers/gpu/drm/xe/xe_oa.c

542

static int __xe_oa_read(struct xe_oa_stream *stream, char __user *buf,

drivers/gpu/drm/xe/xe_oa.c

558

static ssize_t xe_oa_read(struct file *file, char __user *buf,

drivers/gpu/drm/xe/xe_query.c

118

struct drm_xe_query_engine_cycles __user *query_ptr;

drivers/gpu/drm/xe/xe_query.c

184

struct drm_xe_query_engines __user *query_ptr =

drivers/gpu/drm/xe/xe_query.c

249

struct drm_xe_query_mem_regions __user *query_ptr =

drivers/gpu/drm/xe/xe_query.c

321

struct drm_xe_query_config __user *query_ptr =

drivers/gpu/drm/xe/xe_query.c

374

struct drm_xe_query_gt_list __user *query_ptr =

drivers/gpu/drm/xe/xe_query.c

447

void __user *query_ptr = u64_to_user_ptr(query->data);

drivers/gpu/drm/xe/xe_query.c

493

static int copy_mask(void __user **ptr,

drivers/gpu/drm/xe/xe_query.c

513

void __user *query_ptr = u64_to_user_ptr(query->data);

drivers/gpu/drm/xe/xe_query.c

572

struct drm_xe_query_uc_fw_version __user *query_ptr = u64_to_user_ptr(query->data);

drivers/gpu/drm/xe/xe_query.c

662

void __user *query_ptr = u64_to_user_ptr(query->data);

drivers/gpu/drm/xe/xe_query.c

724

struct drm_xe_query_pxp_status __user *query_ptr = u64_to_user_ptr(query->data);

drivers/gpu/drm/xe/xe_query.c

752

void __user *query_ptr = u64_to_user_ptr(query->data);

drivers/gpu/drm/xe/xe_sriov_packet.c

201

char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sriov_packet.c

220

char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sriov_packet.c

234

unsigned int vfid, char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sriov_packet.c

263

char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sriov_packet.c

276

const char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sriov_packet.c

299

const char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sriov_packet.c

323

const char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sriov_packet.h

23

char __user *buf, size_t len);

drivers/gpu/drm/xe/xe_sriov_packet.h

25

const char __user *buf, size_t len);

drivers/gpu/drm/xe/xe_sriov_pf_debugfs.c

194

static ssize_t from_file_write_to_vf_call(struct file *file, const char __user *userbuf,

drivers/gpu/drm/xe/xe_sriov_pf_debugfs.c

223

static ssize_t OP##_write(struct file *file, const char __user *userbuf, \

drivers/gpu/drm/xe/xe_sriov_pf_debugfs.c

237

static ssize_t OP##_write(struct file *file, const char __user *userbuf, \

drivers/gpu/drm/xe/xe_sriov_pf_debugfs.c

252

static ssize_t data_write(struct file *file, const char __user *buf, size_t count, loff_t *pos)

drivers/gpu/drm/xe/xe_sriov_pf_debugfs.c

264

static ssize_t data_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

drivers/gpu/drm/xe/xe_sriov_pf_debugfs.c

284

static ssize_t size_read(struct file *file, char __user *ubuf, size_t count, loff_t *ppos)

drivers/gpu/drm/xe/xe_sriov_pf_debugfs.c

57

static ssize_t from_file_write_to_xe_call(struct file *file, const char __user *userbuf,

drivers/gpu/drm/xe/xe_sriov_pf_debugfs.c

85

static ssize_t OP##_write(struct file *file, const char __user *userbuf, \

drivers/gpu/drm/xe/xe_sriov_pf_migration.c

283

char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sriov_pf_migration.c

317

const char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sriov_pf_migration.h

26

char __user *buf, size_t len);

drivers/gpu/drm/xe/xe_sriov_pf_migration.h

28

const char __user *buf, size_t len);

drivers/gpu/drm/xe/xe_sriov_vfio.c

56

char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sriov_vfio.c

70

const char __user *buf, size_t len)

drivers/gpu/drm/xe/xe_sync.c

115

struct drm_xe_sync __user *sync_user,

drivers/gpu/drm/xe/xe_sync.c

28

u64 __user *addr;

drivers/gpu/drm/xe/xe_sync.c

56

u64 __user *ptr = u64_to_user_ptr(addr);

drivers/gpu/drm/xe/xe_sync.h

24

struct drm_xe_sync __user *sync_user,

drivers/gpu/drm/xe/xe_vm.c

2216

u64 __user *attrs_user = u64_to_user_ptr(args->vector_of_mem_attr);

drivers/gpu/drm/xe/xe_vm.c

3624

u64 __user *bind_user =

drivers/gpu/drm/xe/xe_vm.c

3873

struct drm_xe_sync __user *syncs_user;

drivers/gpu/drm/xe/xe_vm.c

4129

struct xe_vm_fault __user *usr_ptr = u64_to_user_ptr(args->data);

drivers/gpu/drm/xe/xe_vm.c

4577

void __user *userptr = (void __user *)(size_t)snap->snap[i].bo_ofs;

drivers/gpu/drm/xe/xe_vm_madvise.c

490

if (put_user(retained, (u32 __user *)u64_to_user_ptr(details->retained_ptr)))

drivers/gpu/drm/xe/xe_vm_madvise.c

616

u32 __user *retained_ptr;

drivers/gpu/drm/xlnx/zynqmp_dp.c

1868

static ssize_t zynqmp_dp_pattern_read(struct file *file, char __user *user_buf,

drivers/gpu/drm/xlnx/zynqmp_dp.c

1883

const char __user *user_buf,

drivers/gpu/drm/xlnx/zynqmp_dp.c

2010

static ssize_t zynqmp_dp_custom_read(struct file *file, char __user *user_buf,

drivers/gpu/drm/xlnx/zynqmp_dp.c

2024

const char __user *user_buf,

drivers/gpu/vga/vga_switcheroo.c

775

vga_switcheroo_debugfs_write(struct file *filp, const char __user *ubuf,

drivers/greybus/es2.c

1108

static ssize_t apb_log_read(struct file *f, char __user *buf,

drivers/greybus/es2.c

1162

static ssize_t apb_log_enable_read(struct file *f, char __user *buf,

drivers/greybus/es2.c

1173

static ssize_t apb_log_enable_write(struct file *f, const char __user *buf,

drivers/greybus/svc.c

677

static ssize_t pwr_debugfs_voltage_read(struct file *file, char __user *buf,

drivers/greybus/svc.c

701

static ssize_t pwr_debugfs_current_read(struct file *file, char __user *buf,

drivers/greybus/svc.c

725

static ssize_t pwr_debugfs_power_read(struct file *file, char __user *buf,

drivers/hid/hid-debug.c

3713

static ssize_t hid_debug_events_read(struct file *file, char __user *buffer,

drivers/hid/hid-picolcd_debugfs.c

112

static ssize_t picolcd_debug_eeprom_write(struct file *f, const char __user *u,

drivers/hid/hid-picolcd_debugfs.c

181

char __user *u, size_t s, loff_t *off)

drivers/hid/hid-picolcd_debugfs.c

216

static ssize_t picolcd_debug_flash_read(struct file *f, char __user *u,

drivers/hid/hid-picolcd_debugfs.c

263

const char __user *u, size_t s, loff_t *off)

drivers/hid/hid-picolcd_debugfs.c

299

static ssize_t picolcd_debug_flash_write(struct file *f, const char __user *u,

drivers/hid/hid-picolcd_debugfs.c

38

static ssize_t picolcd_debug_reset_write(struct file *f, const char __user *user_buf,

drivers/hid/hid-picolcd_debugfs.c

73

static ssize_t picolcd_debug_eeprom_read(struct file *f, char __user *u,

drivers/hid/hid-roccat.c

399

if (put_user(device->report_size, (int __user *)arg))

drivers/hid/hid-roccat.c

73

static ssize_t roccat_read(struct file *file, char __user *buffer,

drivers/hid/hid-sensor-custom.c

639

static ssize_t hid_sensor_custom_read(struct file *file, char __user *buf,

drivers/hid/hid-wiimote-debug.c

124

static ssize_t wiidebug_drm_write(struct file *f, const char __user *u,

drivers/hid/hid-wiimote-debug.c

23

static ssize_t wiidebug_eeprom_read(struct file *f, char __user *u, size_t s,

drivers/hid/hidraw.c

113

static ssize_t hidraw_send_report(struct file *file, const char __user *buffer, size_t count, unsigned char report_type)

drivers/hid/hidraw.c

170

static ssize_t hidraw_write(struct file *file, const char __user *buffer, size_t count, loff_t *ppos)

drivers/hid/hidraw.c

191

static ssize_t hidraw_get_report(struct file *file, char __user *buffer, size_t count, unsigned char report_type)

drivers/hid/hidraw.c

398

void __user *arg)

drivers/hid/hidraw.c

404

if (put_user(hid->rsize, (int __user *)arg))

drivers/hid/hidraw.c

412

if (get_user(len, (int __user *)arg))

drivers/hid/hidraw.c

46

static ssize_t hidraw_read(struct file *file, char __user *buffer, size_t count, loff_t *ppos)

drivers/hid/hidraw.c

460

void __user *user_arg)

drivers/hid/hidraw.c

483

void __user *user_arg)

drivers/hid/hidraw.c

516

void __user *user_arg = (void __user *)arg;

drivers/hid/uhid.c

419

static int uhid_event_from_user(const char __user *buffer, size_t len,

drivers/hid/uhid.c

479

static int uhid_event_from_user(const char __user *buffer, size_t len,

drivers/hid/uhid.c

672

static ssize_t uhid_char_read(struct file *file, char __user *buffer,

drivers/hid/uhid.c

720

static ssize_t uhid_char_write(struct file *file, const char __user *buffer,

drivers/hid/usbhid/hiddev.c

311

static ssize_t hiddev_write(struct file * file, const char __user * buffer, size_t count, loff_t *ppos)

drivers/hid/usbhid/hiddev.c

319

static ssize_t hiddev_read(struct file * file, char __user * buffer, size_t count, loff_t *ppos)

drivers/hid/usbhid/hiddev.c

427

static noinline int hiddev_ioctl_usage(struct hiddev *hiddev, unsigned int cmd, void __user *user_arg)

drivers/hid/usbhid/hiddev.c

566

static noinline int hiddev_ioctl_string(struct hiddev *hiddev, unsigned int cmd, void __user *user_arg)

drivers/hid/usbhid/hiddev.c

573

if (get_user(idx, (int __user *)user_arg))

drivers/hid/usbhid/hiddev.c

605

void __user *user_arg = (void __user *)arg;

drivers/hid/usbhid/hiddev.c

621

r = put_user(HID_VERSION, (int __user *)arg) ?

drivers/hid/usbhid/hiddev.c

660

r = put_user(list->flags, (int __user *)arg) ?

drivers/hid/usbhid/hiddev.c

668

if (get_user(newflags, (int __user *)arg)) {

drivers/hsi/clients/cmt_speech.c

1129

static ssize_t cs_char_read(struct file *file, char __user *buf, size_t count,

drivers/hsi/clients/cmt_speech.c

1168

retval = put_user(data, (u32 __user *)buf);

drivers/hsi/clients/cmt_speech.c

1176

static ssize_t cs_char_write(struct file *file, const char __user *buf,

drivers/hsi/clients/cmt_speech.c

1187

if (get_user(data, (u32 __user *)buf))

drivers/hsi/clients/cmt_speech.c

1210

if (copy_to_user((void __user *)arg, &state, sizeof(state)))

drivers/hsi/clients/cmt_speech.c

1218

if (copy_from_user(&state, (void __user *)arg, sizeof(state))) {

drivers/hsi/clients/cmt_speech.c

1235

if (copy_to_user((void __user *)arg, &ifver, sizeof(ifver)))

drivers/hsi/clients/cmt_speech.c

1243

if (copy_from_user(&buf_cfg, (void __user *)arg,

drivers/hsi/clients/hsi_char.c

412

static ssize_t hsc_read(struct file *file, char __user *buf, size_t len,

drivers/hsi/clients/hsi_char.c

454

ret = copy_to_user((void __user *)buf,

drivers/hsi/clients/hsi_char.c

471

static ssize_t hsc_write(struct file *file, const char __user *buf, size_t len,

drivers/hsi/clients/hsi_char.c

491

if (copy_from_user(sg_virt(msg->sgt.sgl), (void __user *)buf, len)) {

drivers/hsi/clients/hsi_char.c

538

if (copy_from_user(&state, (void __user *)arg, sizeof(state)))

drivers/hsi/clients/hsi_char.c

555

if (copy_from_user(&rxc, (void __user *)arg, sizeof(rxc)))

drivers/hsi/clients/hsi_char.c

560

if (copy_to_user((void __user *)arg, &rxc, sizeof(rxc)))

drivers/hsi/clients/hsi_char.c

564

if (copy_from_user(&txc, (void __user *)arg, sizeof(txc)))

drivers/hsi/clients/hsi_char.c

569

if (copy_to_user((void __user *)arg, &txc, sizeof(txc)))

drivers/hv/hv_utils_transport.c

27

static ssize_t hvt_op_read(struct file *file, char __user *buf,

drivers/hv/hv_utils_transport.c

74

static ssize_t hvt_op_write(struct file *file, const char __user *buf,

drivers/hv/mshv_root_main.c

1069

void __user *arg)

drivers/hv/mshv_root_main.c

1370

!access_ok((const void __user *)mem->userspace_addr, mem->size))

drivers/hv/mshv_root_main.c

1465

struct mshv_user_mem_region __user *user_mem)

drivers/hv/mshv_root_main.c

1487

void __user *user_args)

drivers/hv/mshv_root_main.c

1499

void __user *user_args)

drivers/hv/mshv_root_main.c

1511

void __user *user_args)

drivers/hv/mshv_root_main.c

1585

if (copy_to_user((void __user *)args.bitmap_ptr, states, bitmap_buf_sz))

drivers/hv/mshv_root_main.c

1595

void __user *user_args)

drivers/hv/mshv_root_main.c

1609

struct mshv_user_irq_table __user *urouting = user_args;

drivers/hv/mshv_root_main.c

1656

void __user *uarg = (void __user *)arg;

drivers/hv/mshv_root_main.c

172

void __user *user_args)

drivers/hv/mshv_root_main.c

1950

static long mshv_ioctl_process_pt_flags(void __user *user_arg, u64 *pt_flags,

drivers/hv/mshv_root_main.c

2048

mshv_ioctl_create_partition(void __user *user_arg, struct device *module_dev)

drivers/hv/mshv_root_main.c

2136

return mshv_ioctl_create_partition((void __user *)arg,

drivers/hv/mshv_root_main.c

2140

(void __user *)arg);

drivers/hv/mshv_root_main.c

219

if (copy_from_user(input_pg, (void __user *)args.in_ptr,

drivers/hv/mshv_root_main.c

266

copy_to_user((void __user *)args.out_ptr, output_pg, args.out_sz))

drivers/hv/mshv_root_main.c

708

static long mshv_vp_ioctl_run_vp(struct mshv_vp *vp, void __user *ret_msg)

drivers/hv/mshv_root_main.c

794

struct mshv_get_set_vp_state __user *user_args,

drivers/hv/mshv_root_main.c

811

if (!access_ok((void __user *)args.buf_ptr, args.buf_sz))

drivers/hv/mshv_root_main.c

881

if (copy_from_user(&vp_state, (__user void *)args.buf_ptr, data_sz))

drivers/hv/mshv_root_main.c

895

if (copy_to_user((void __user *)args.buf_ptr, &vp_state, data_sz))

drivers/hv/mshv_root_main.c

912

r = mshv_vp_ioctl_run_vp(vp, (void __user *)arg);

drivers/hv/mshv_root_main.c

915

r = mshv_vp_ioctl_get_set_state(vp, (void __user *)arg, false);

drivers/hv/mshv_root_main.c

918

r = mshv_vp_ioctl_get_set_state(vp, (void __user *)arg, true);

drivers/hv/mshv_root_main.c

922

(void __user *)arg);

drivers/hv/mshv_vtl_main.c

1002

static int mshv_vtl_sint_ioctl_pause_msg_stream(struct mshv_sint_mask __user *arg)

drivers/hv/mshv_vtl_main.c

1022

return mshv_vtl_sint_ioctl_post_msg((struct mshv_vtl_sint_post_msg __user *)arg);

drivers/hv/mshv_vtl_main.c

1024

return mshv_vtl_sint_ioctl_signal_event((struct mshv_vtl_signal_event __user *)arg);

drivers/hv/mshv_vtl_main.c

1026

return mshv_vtl_sint_ioctl_set_eventfd((struct mshv_vtl_set_eventfd __user *)arg);

drivers/hv/mshv_vtl_main.c

1028

return mshv_vtl_sint_ioctl_pause_msg_stream((struct mshv_sint_mask __user *)arg);

drivers/hv/mshv_vtl_main.c

1080

struct mshv_vtl_hvcall_setup __user *hvcall_setup_user)

drivers/hv/mshv_vtl_main.c

1101

(void __user *)hvcall_setup.allow_bitmap_ptr,

drivers/hv/mshv_vtl_main.c

1118

struct mshv_vtl_hvcall __user *hvcall_user)

drivers/hv/mshv_vtl_main.c

114

mshv_ioctl_create_vtl(void __user *user_arg, struct device *module_dev)

drivers/hv/mshv_vtl_main.c

1157

if (copy_from_user(in, (void __user *)hvcall.input_ptr, hvcall.input_size)) {

drivers/hv/mshv_vtl_main.c

1170

if (copy_to_user((void __user *)hvcall.output_ptr, out, hvcall.output_size)) {

drivers/hv/mshv_vtl_main.c

1188

return mshv_vtl_hvcall_do_setup(fd, (struct mshv_vtl_hvcall_setup __user *)arg);

drivers/hv/mshv_vtl_main.c

1190

return mshv_vtl_hvcall_call(fd, (struct mshv_vtl_hvcall __user *)arg);

drivers/hv/mshv_vtl_main.c

143

mshv_ioctl_check_extension(void __user *user_arg)

drivers/hv/mshv_vtl_main.c

171

return mshv_ioctl_check_extension((void __user *)arg);

drivers/hv/mshv_vtl_main.c

173

return mshv_ioctl_create_vtl((void __user *)arg, misc->this_device);

drivers/hv/mshv_vtl_main.c

382

static int mshv_vtl_ioctl_add_vtl0_mem(struct mshv_vtl *vtl, void __user *arg)

drivers/hv/mshv_vtl_main.c

466

static int mshv_vtl_ioctl_set_poll_file(struct mshv_vtl_set_poll_file __user *user_input)

drivers/hv/mshv_vtl_main.c

713

mshv_vtl_ioctl_get_regs(void __user *user_args)

drivers/hv/mshv_vtl_main.c

726

if (copy_from_user(&reg, (void __user *)args.regs_ptr,

drivers/hv/mshv_vtl_main.c

738

if (copy_to_user((void __user *)args.regs_ptr, &reg, sizeof(reg)))

drivers/hv/mshv_vtl_main.c

745

mshv_vtl_ioctl_set_regs(void __user *user_args)

drivers/hv/mshv_vtl_main.c

758

if (copy_from_user(&reg, (void __user *)args.regs_ptr, sizeof(reg)))

drivers/hv/mshv_vtl_main.c

777

ret = mshv_vtl_ioctl_set_poll_file((struct mshv_vtl_set_poll_file __user *)arg);

drivers/hv/mshv_vtl_main.c

780

ret = mshv_vtl_ioctl_get_regs((void __user *)arg);

drivers/hv/mshv_vtl_main.c

783

ret = mshv_vtl_ioctl_set_regs((void __user *)arg);

drivers/hv/mshv_vtl_main.c

789

ret = mshv_vtl_ioctl_add_vtl0_mem(vtl, (void __user *)arg);

drivers/hv/mshv_vtl_main.c

891

static ssize_t mshv_vtl_sint_read(struct file *filp, char __user *arg, size_t size, loff_t *offset)

drivers/hv/mshv_vtl_main.c

940

static int mshv_vtl_sint_ioctl_post_msg(struct mshv_vtl_sint_post_msg __user *arg)

drivers/hv/mshv_vtl_main.c

949

if (copy_from_user(payload, (void __user *)message.payload_ptr,

drivers/hv/mshv_vtl_main.c

958

static int mshv_vtl_sint_ioctl_signal_event(struct mshv_vtl_signal_event __user *arg)

drivers/hv/mshv_vtl_main.c

973

static int mshv_vtl_sint_ioctl_set_eventfd(struct mshv_vtl_set_eventfd __user *arg)

drivers/hwmon/asus_atk0110.c

768

static ssize_t atk_debugfs_ggrp_read(struct file *file, char __user *buf,

drivers/hwmon/dell-smm-hwmon.c

555

int __user *argp = (int __user *)arg;

drivers/hwmon/fschmd.c

851

static ssize_t watchdog_write(struct file *filp, const char __user *buf,

drivers/hwmon/fschmd.c

895

if (copy_to_user((void __user *)arg, &ident, sizeof(ident)))

drivers/hwmon/fschmd.c

900

ret = put_user(0, (int __user *)arg);

drivers/hwmon/fschmd.c

905

ret = put_user(WDIOF_CARDRESET, (int __user *)arg);

drivers/hwmon/fschmd.c

907

ret = put_user(0, (int __user *)arg);

drivers/hwmon/fschmd.c

916

ret = put_user(i, (int __user *)arg);

drivers/hwmon/fschmd.c

920

if (get_user(i, (int __user *)arg)) {

drivers/hwmon/fschmd.c

926

ret = put_user(ret, (int __user *)arg);

drivers/hwmon/fschmd.c

930

if (get_user(i, (int __user *)arg)) {

drivers/hwmon/mr75203.c

183

static ssize_t pvt_ts_coeff_j_read(struct file *file, char __user *user_buf,

drivers/hwmon/mr75203.c

196

const char __user *user_buf,

drivers/hwmon/pmbus/acbel-fsg032.c

18

static ssize_t acbel_fsg032_debugfs_read(struct file *file, char __user *buf, size_t count,

drivers/hwmon/pmbus/adm1266.c

412

static ssize_t adm1266_clear_blackbox_write(struct file *file, const char __user *ubuf,

drivers/hwmon/pmbus/ibm-cffps.c

130

static ssize_t ibm_cffps_debugfs_read(struct file *file, char __user *buf,

drivers/hwmon/pmbus/ibm-cffps.c

212

const char __user *buf, size_t count,

drivers/hwmon/pmbus/ibm-cffps.c

78

static ssize_t ibm_cffps_debugfs_read_input_history(struct file *file, char __user *buf,

drivers/hwmon/pmbus/max20730.c

107

static ssize_t max20730_debugfs_read(struct file *file, char __user *buf,

drivers/hwmon/pmbus/pmbus_core.c

3549

static ssize_t pmbus_debugfs_block_read(struct file *file, char __user *buf,

drivers/hwmon/pmbus/q54sj108a2.c

177

static ssize_t q54sj108a2_debugfs_write(struct file *file, const char __user *buf,

drivers/hwmon/pmbus/q54sj108a2.c

74

static ssize_t q54sj108a2_debugfs_read(struct file *file, char __user *buf,

drivers/hwmon/pmbus/ucd9000.c

420

char __user *buf, size_t count,

drivers/hwmon/pt5161l.c

493

static ssize_t pt5161l_debugfs_read_fw_ver(struct file *file, char __user *buf,

drivers/hwmon/pt5161l.c

518

char __user *buf, size_t count,

drivers/hwmon/pt5161l.c

543

static ssize_t pt5161l_debugfs_read_hb_sts(struct file *file, char __user *buf,

drivers/hwmon/w83793.c

1355

static ssize_t watchdog_write(struct file *filp, const char __user *buf,

drivers/hwmon/w83793.c

1400

if (copy_to_user((void __user *)arg, &ident, sizeof(ident)))

drivers/hwmon/w83793.c

1406

ret = put_user(val, (int __user *)arg);

drivers/hwmon/w83793.c

1410

ret = put_user(0, (int __user *)arg);

drivers/hwmon/w83793.c

1419

ret = put_user(val, (int __user *)arg);

drivers/hwmon/w83793.c

1423

if (get_user(val, (int __user *)arg)) {

drivers/hwmon/w83793.c

1429

ret = put_user(ret, (int __user *)arg);

drivers/hwmon/w83793.c

1433

if (get_user(val, (int __user *)arg)) {

drivers/hwtracing/coresight/coresight-cpu-debug.c

474

const char __user *buf, size_t count, loff_t *ppos)

drivers/hwtracing/coresight/coresight-cpu-debug.c

508

char __user *ubuf, size_t count, loff_t *ppos)

drivers/hwtracing/coresight/coresight-etb10.c

611

static ssize_t etb_read(struct file *file, char __user *data,

drivers/hwtracing/coresight/coresight-tmc-core.c

301

static ssize_t tmc_read(struct file *file, char __user *data, size_t len,

drivers/hwtracing/coresight/coresight-tmc-core.c

373

static ssize_t tmc_crashdata_read(struct file *file, char __user *data,

drivers/hwtracing/coresight/ultrasoc-smb.c

112

static ssize_t smb_read(struct file *file, char __user *data, size_t len,

drivers/hwtracing/intel_th/msu.c

1443

char __user *buf;

drivers/hwtracing/intel_th/msu.c

1502

msc_single_to_user(struct msc *msc, char __user *buf, loff_t off, size_t len)

drivers/hwtracing/intel_th/msu.c

1537

static ssize_t intel_th_msc_read(struct file *file, char __user *buf,

drivers/hwtracing/stm/core.c

618

static ssize_t stm_char_write(struct file *file, const char __user *buf,

drivers/hwtracing/stm/core.c

736

static int stm_char_policy_set_ioctl(struct stm_file *stmf, void __user *arg)

drivers/hwtracing/stm/core.c

794

static int stm_char_policy_get_ioctl(struct stm_file *stmf, void __user *arg)

drivers/hwtracing/stm/core.c

818

err = stm_char_policy_set_ioctl(stmf, (void __user *)arg);

drivers/hwtracing/stm/core.c

822

return stm_char_policy_get_ioctl(stmf, (void __user *)arg);

drivers/hwtracing/stm/core.c

825

return stm_char_policy_get_ioctl(stmf, (void __user *)arg);

drivers/hwtracing/stm/core.c

828

if (copy_from_user(&options, (u64 __user *)arg, sizeof(u64)))

drivers/i2c/i2c-dev.c

134

static ssize_t i2cdev_read(struct file *file, char __user *buf, size_t count,

drivers/i2c/i2c-dev.c

163

static ssize_t i2cdev_write(struct file *file, const char __user *buf,

drivers/i2c/i2c-dev.c

246

u8 __user **data_ptrs;

drivers/i2c/i2c-dev.c

253

data_ptrs = kmalloc_array(nmsgs, sizeof(u8 __user *), GFP_KERNEL);

drivers/i2c/i2c-dev.c

265

data_ptrs[i] = (u8 __user *)msgs[i].buf;

drivers/i2c/i2c-dev.c

321

union i2c_smbus_data __user *data)

drivers/i2c/i2c-dev.c

440

return put_user(funcs, (unsigned long __user *)arg);

drivers/i2c/i2c-dev.c

448

(struct i2c_rdwr_ioctl_data __user *)arg,

drivers/i2c/i2c-dev.c

475

(struct i2c_smbus_ioctl_data __user *) arg,

drivers/i2c/i2c-dev.c

538

return put_user(funcs, (compat_ulong_t __user *)arg);

drivers/i2c/i2c-dev.c

541

struct i2c_msg32 __user *p;

drivers/i2c/i2c-dev.c

546

(struct i2c_rdwr_ioctl_data32 __user *)arg,

drivers/i2c/i2c-dev.c

582

(void __user *) arg,

drivers/iio/adc/ad9467.c

1123

char __user *userbuf, size_t count,

drivers/iio/adc/ad9467.c

1157

const char __user *userbuf,

drivers/iio/adc/ad9467.c

1245

char __user *userbuf,

drivers/iio/buffer/industrialio-buffer-dma.c

554

char __user *user_buffer, bool is_from_user)

drivers/iio/buffer/industrialio-buffer-dma.c

609

char __user *user_buffer)

drivers/iio/buffer/industrialio-buffer-dma.c

625

const char __user *user_buffer)

drivers/iio/buffer/industrialio-buffer-dma.c

628

(__force __user char *)user_buffer, true);

drivers/iio/buffer/kfifo_buf.c

101

static int iio_read_kfifo(struct iio_buffer *r, size_t n, char __user *buf)

drivers/iio/buffer/kfifo_buf.c

171

const char __user *buf)

drivers/iio/dac/ad3552r-hs.c

512

static ssize_t ad3552r_hs_show_data_source(struct file *f, char __user *userbuf,

drivers/iio/dac/ad3552r-hs.c

542

const char __user *userbuf,

drivers/iio/dac/ad3552r-hs.c

585

char __user *userbuf,

drivers/iio/gyro/adis16136.c

69

char __user *userbuf, size_t count, loff_t *ppos)

drivers/iio/iio_core.h

70

ssize_t iio_buffer_read_wrapper(struct file *filp, char __user *buf,

drivers/iio/iio_core.h

72

ssize_t iio_buffer_write_wrapper(struct file *filp, const char __user *buf,

drivers/iio/imu/adis16400.c

206

char __user *userbuf, size_t count, loff_t *ppos)

drivers/iio/imu/adis16475.c

167

char __user *userbuf,

drivers/iio/imu/adis16475.c

193

char __user *userbuf,

drivers/iio/imu/adis16480.c

196

char __user *userbuf, size_t count, loff_t *ppos)

drivers/iio/imu/adis16480.c

221

char __user *userbuf, size_t count, loff_t *ppos)

drivers/iio/imu/adis16550.c

292

char __user *userbuf,

drivers/iio/imu/adis16550.c

318

char __user *userbuf,

drivers/iio/imu/bno055/bno055.c

1301

static ssize_t bno055_show_fw_version(struct file *file, char __user *userbuf,

drivers/iio/industrialio-backend.c

131

char __user *userbuf,

drivers/iio/industrialio-backend.c

150

const char __user *userbuf,

drivers/iio/industrialio-backend.c

191

char __user *userbuf,

drivers/iio/industrialio-buffer.c

140

static ssize_t iio_buffer_read(struct file *filp, char __user *buf,

drivers/iio/industrialio-buffer.c

1683

int __user *user_fd, bool nonblock)

drivers/iio/industrialio-buffer.c

1789

int __user *user_req, bool nonblock)

drivers/iio/industrialio-buffer.c

1845

struct iio_dmabuf __user *iio_dmabuf_req,

drivers/iio/industrialio-buffer.c

2014

void __user *_arg = (void __user *)arg;

drivers/iio/industrialio-buffer.c

2043

int __user *ival = (int __user *)arg;

drivers/iio/industrialio-buffer.c

209

static ssize_t iio_buffer_write(struct file *filp, const char __user *buf,

drivers/iio/industrialio-buffer.c

300

ssize_t iio_buffer_read_wrapper(struct file *filp, char __user *buf,

drivers/iio/industrialio-buffer.c

313

ssize_t iio_buffer_write_wrapper(struct file *filp, const char __user *buf,

drivers/iio/industrialio-core.c

384

static ssize_t iio_debugfs_read_reg(struct file *file, char __user *userbuf,

drivers/iio/industrialio-core.c

415

const char __user *userbuf, size_t count, loff_t *ppos)

drivers/iio/industrialio-event.c

119

char __user *buf,

drivers/iio/industrialio-event.c

558

int __user *ip = (int __user *)arg;

drivers/infiniband/core/ucma.c

1025

void __user *response, int out_len)

drivers/infiniband/core/ucma.c

1062

const char __user *inbuf,

drivers/infiniband/core/ucma.c

1067

void __user *response;

drivers/infiniband/core/ucma.c

1118

static ssize_t ucma_connect(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

1154

static ssize_t ucma_listen(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

1179

static ssize_t ucma_accept(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

1226

static ssize_t ucma_reject(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

1259

static ssize_t ucma_disconnect(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

1281

const char __user *inbuf,

drivers/infiniband/core/ucma.c

1447

static ssize_t ucma_set_option(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

1481

static ssize_t ucma_notify(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

1590

const char __user *inbuf,

drivers/infiniband/core/ucma.c

1613

const char __user *inbuf,

drivers/infiniband/core/ucma.c

1628

const char __user *inbuf,

drivers/infiniband/core/ucma.c

1679

const char __user *inbuf,

drivers/infiniband/core/ucma.c

1749

const char __user *inbuf, int in_len,

drivers/infiniband/core/ucma.c

1798

const char __user *inbuf,

drivers/infiniband/core/ucma.c

1827

static ssize_t ucma_write(struct file *filp, const char __user *buf,

drivers/infiniband/core/ucma.c

375

static ssize_t ucma_get_event(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

445

static ssize_t ucma_create_id(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

597

static ssize_t ucma_destroy_id(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

631

static ssize_t ucma_bind_ip(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

656

static ssize_t ucma_bind(struct ucma_file *file, const char __user *inbuf,

drivers/infiniband/core/ucma.c

682

const char __user *inbuf,

drivers/infiniband/core/ucma.c

709

const char __user *inbuf,

drivers/infiniband/core/ucma.c

737

const char __user *inbuf, int in_len,

drivers/infiniband/core/ucma.c

759

const char __user *inbuf,

drivers/infiniband/core/ucma.c

845

const char __user *inbuf,

drivers/infiniband/core/ucma.c

912

void __user *response, int out_len)

drivers/infiniband/core/ucma.c

940

void __user *response, int out_len)

drivers/infiniband/core/ucma.c

979

void __user *response, int out_len)

drivers/infiniband/core/user_mad.c

304

static ssize_t copy_recv_mad(struct ib_umad_file *file, char __user *buf,

drivers/infiniband/core/user_mad.c

360

static ssize_t copy_send_mad(struct ib_umad_file *file, char __user *buf,

drivers/infiniband/core/user_mad.c

382

static ssize_t ib_umad_read(struct file *filp, char __user *buf,

drivers/infiniband/core/user_mad.c

442

static int copy_rmpp_mad(struct ib_mad_send_buf *msg, const char __user *buf)

drivers/infiniband/core/user_mad.c

507

static ssize_t ib_umad_write(struct file *filp, const char __user *buf,

drivers/infiniband/core/user_mad.c

696

static int ib_umad_reg_agent(struct ib_umad_file *file, void __user *arg,

drivers/infiniband/core/user_mad.c

768

(u32 __user *) (arg + offsetof(struct ib_user_mad_reg_req, id)))) {

drivers/infiniband/core/user_mad.c

798

static int ib_umad_reg_agent2(struct ib_umad_file *file, void __user *arg)

drivers/infiniband/core/user_mad.c

834

(u32 __user *) (arg + offsetof(struct

drivers/infiniband/core/user_mad.c

882

(u32 __user *)(arg +

drivers/infiniband/core/user_mad.c

908

static int ib_umad_unreg_agent(struct ib_umad_file *file, u32 __user *arg)

drivers/infiniband/core/user_mad.c

961

return ib_umad_reg_agent(filp->private_data, (void __user *) arg, 0);

drivers/infiniband/core/user_mad.c

963

return ib_umad_unreg_agent(filp->private_data, (__u32 __user *) arg);

drivers/infiniband/core/user_mad.c

967

return ib_umad_reg_agent2(filp->private_data, (void __user *) arg);

drivers/infiniband/core/uverbs.h

250

struct ib_uverbs_attr __user *user_attrs;

drivers/infiniband/core/uverbs.h

56

const void __user *ibuf,

drivers/infiniband/core/uverbs.h

57

void __user *obuf,

drivers/infiniband/core/uverbs.h

68

const void __user *ibuf,

drivers/infiniband/core/uverbs.h

69

void __user *obuf,

drivers/infiniband/core/uverbs_cmd.c

116

const void __user *cur;

drivers/infiniband/core/uverbs_cmd.c

1161

static int copy_wc_to_user(struct ib_device *ib_dev, void __user *dest,

drivers/infiniband/core/uverbs_cmd.c

117

const void __user *end;

drivers/infiniband/core/uverbs_cmd.c

1195

u8 __user *header_ptr;

drivers/infiniband/core/uverbs_cmd.c

1196

u8 __user *data_ptr;

drivers/infiniband/core/uverbs_cmd.c

149

static const void __user *uverbs_request_next_ptr(struct uverbs_req_iter *iter,

drivers/infiniband/core/uverbs_cmd.c

152

const void __user *res = iter->cur;

drivers/infiniband/core/uverbs_cmd.c

155

return (void __force __user *)ERR_PTR(-ENOSPC);

drivers/infiniband/core/uverbs_cmd.c

2028

const struct ib_sge __user *sgls;

drivers/infiniband/core/uverbs_cmd.c

2029

const void __user *wqes;

drivers/infiniband/core/uverbs_cmd.c

2224

const struct ib_sge __user *sgls;

drivers/infiniband/core/uverbs_cmd.c

2225

const void __user *wqes;

drivers/infiniband/core/uverbs_ioctl.c

466

struct ib_uverbs_attr __user *user_attrs)

drivers/infiniband/core/uverbs_ioctl.c

534

struct ib_uverbs_ioctl_hdr __user *user_hdr =

drivers/infiniband/core/uverbs_ioctl.c

535

(struct ib_uverbs_ioctl_hdr __user *)arg;

drivers/infiniband/core/uverbs_main.c

170

struct file *filp, char __user *buf,

drivers/infiniband/core/uverbs_main.c

224

static ssize_t ib_uverbs_async_event_read(struct file *filp, char __user *buf,

drivers/infiniband/core/uverbs_main.c

233

static ssize_t ib_uverbs_comp_event_read(struct file *filp, char __user *buf,

drivers/infiniband/core/uverbs_main.c

512

static ssize_t ib_uverbs_write(struct file *filp, const char __user *buf,

drivers/infiniband/core/uverbs_main.c

583

ret = get_user(response, (const u64 __user *)buf);

drivers/infiniband/core/uverbs_std_types_device.c

318

void __user *user_entries;

drivers/infiniband/hw/bnxt_re/debugfs.c

202

static ssize_t bnxt_re_cc_config_get(struct file *filp, char __user *buffer,

drivers/infiniband/hw/bnxt_re/debugfs.c

304

static ssize_t bnxt_re_cc_config_set(struct file *filp, const char __user *buffer,

drivers/infiniband/hw/bnxt_re/debugfs.c

371

const char __user *buf,

drivers/infiniband/hw/bnxt_re/debugfs.c

86

char __user *buffer,

drivers/infiniband/hw/cxgb4/device.c

178

static ssize_t wr_log_clear(struct file *file, const char __user *buf,

drivers/infiniband/hw/cxgb4/device.c

518

static ssize_t stats_clear(struct file *file, const char __user *buf,

drivers/infiniband/hw/cxgb4/device.c

84

static ssize_t debugfs_read(struct file *file, char __user *buf, size_t count,

drivers/infiniband/hw/hfi1/debugfs.c

1018

static ssize_t exprom_wp_debugfs_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

1025

const char __user *buf, size_t count,

drivers/infiniband/hw/hfi1/debugfs.c

389

static ssize_t dev_counters_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

404

static ssize_t dev_names_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

429

static ssize_t portnames_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

444

static ssize_t portcntrs_debugfs_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

472

static ssize_t asic_flags_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

521

static ssize_t asic_flags_write(struct file *file, const char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

567

static ssize_t dc8051_memory_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

607

static ssize_t debugfs_lcb_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

634

if (put_user(data, (unsigned long __user *)(buf + total)))

drivers/infiniband/hw/hfi1/debugfs.c

641

static ssize_t debugfs_lcb_write(struct file *file, const char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

665

if (get_user(data, (unsigned long __user *)(buf + total)))

drivers/infiniband/hw/hfi1/debugfs.c

677

static ssize_t qsfp_debugfs_dump(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

697

static ssize_t __i2c_debugfs_write(struct file *file, const char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

737

static ssize_t i2c1_debugfs_write(struct file *file, const char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

744

static ssize_t i2c2_debugfs_write(struct file *file, const char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

751

static ssize_t __i2c_debugfs_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

797

static ssize_t i2c1_debugfs_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

804

static ssize_t i2c2_debugfs_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

811

static ssize_t __qsfp_debugfs_write(struct file *file, const char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

844

static ssize_t qsfp1_debugfs_write(struct file *file, const char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

851

static ssize_t qsfp2_debugfs_write(struct file *file, const char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

858

static ssize_t __qsfp_debugfs_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

902

static ssize_t qsfp1_debugfs_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/debugfs.c

909

static ssize_t qsfp2_debugfs_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/fault.c

159

static ssize_t fault_opcodes_read(struct file *file, char __user *buf,

drivers/infiniband/hw/hfi1/fault.c

89

static ssize_t fault_opcodes_write(struct file *file, const char __user *buf,

drivers/infiniband/hw/hfi1/file_ops.c

1163

if (copy_to_user((void __user *)arg, &cinfo, len))

drivers/infiniband/hw/hfi1/file_ops.c

1315

if (copy_to_user((void __user *)arg, &binfo, len))

drivers/infiniband/hw/hfi1/file_ops.c

1340

if (copy_from_user(&tinfo, (void __user *)arg, (sizeof(tinfo))))

drivers/infiniband/hw/hfi1/file_ops.c

1350

if (copy_to_user((void __user *)addr, &tinfo.tidcnt,

drivers/infiniband/hw/hfi1/file_ops.c

1355

if (!ret && copy_to_user((void __user *)addr, &tinfo.length,

drivers/infiniband/hw/hfi1/file_ops.c

1386

if (copy_from_user(&tinfo, (void __user *)arg, (sizeof(tinfo))))

drivers/infiniband/hw/hfi1/file_ops.c

1392

if (copy_to_user((void __user *)addr, &tinfo.tidcnt,

drivers/infiniband/hw/hfi1/file_ops.c

1422

if (copy_from_user(&tinfo, (void __user *)arg, (sizeof(tinfo))))

drivers/infiniband/hw/hfi1/file_ops.c

1430

if (copy_to_user((void __user *)addr, &tinfo.tidcnt,

drivers/infiniband/hw/hfi1/file_ops.c

1538

if (get_user(start_stop, (int __user *)arg))

drivers/infiniband/hw/hfi1/file_ops.c

1579

if (get_user(events, (unsigned long __user *)arg))

drivers/infiniband/hw/hfi1/file_ops.c

1602

if (get_user(pkey, (u16 __user *)arg))

drivers/infiniband/hw/hfi1/file_ops.c

229

if (get_user(uval, (int __user *)arg))

drivers/infiniband/hw/hfi1/file_ops.c

248

if (put_user(uval, (int __user *)arg))

drivers/infiniband/hw/hfi1/file_ops.c

788

if (copy_from_user(&uinfo, (void __user *)arg, sizeof(uinfo)))

drivers/infiniband/hw/hfi1/user_exp_rcv.c

545

if (copy_to_user((void __user *)tinfo->tidlist,

drivers/infiniband/hw/hns/hns_roce_debugfs.c

24

const char __user *buffer,

drivers/infiniband/hw/mlx5/cong.c

371

static ssize_t set_param(struct file *filp, const char __user *buf,

drivers/infiniband/hw/mlx5/cong.c

395

static ssize_t get_param(struct file *filp, char __user *buf, size_t count,

drivers/infiniband/hw/mlx5/devx.c

2764

static ssize_t devx_async_cmd_event_read(struct file *filp, char __user *buf,

drivers/infiniband/hw/mlx5/devx.c

2844

static ssize_t devx_async_event_read(struct file *filp, char __user *buf,

drivers/infiniband/hw/mlx5/main.c

3864

static ssize_t delay_drop_timeout_read(struct file *filp, char __user *buf,

drivers/infiniband/hw/mlx5/main.c

3875

static ssize_t delay_drop_timeout_write(struct file *filp, const char __user *buf,

drivers/infiniband/hw/ocrdma/ocrdma_stats.c

635

const char __user *buffer,

drivers/infiniband/hw/ocrdma/ocrdma_stats.c

686

static ssize_t ocrdma_dbgfs_ops_read(struct file *filp, char __user *buffer,

drivers/infiniband/hw/usnic/usnic_debugfs.c

45

static ssize_t usnic_debugfs_buildinfo_read(struct file *f, char __user *data,

drivers/infiniband/hw/usnic/usnic_debugfs.c

68

static ssize_t flowinfo_read(struct file *f, char __user *data,

drivers/infiniband/sw/rxe/rxe_cq.c

13

struct rxe_create_cq_resp __user *uresp)

drivers/infiniband/sw/rxe/rxe_cq.c

39

struct rxe_resize_cq_resp __user *uresp,

drivers/infiniband/sw/rxe/rxe_loc.h

105

struct rxe_create_qp_resp __user *uresp,

drivers/infiniband/sw/rxe/rxe_loc.h

162

struct rxe_create_srq_resp __user *uresp);

drivers/infiniband/sw/rxe/rxe_loc.h

23

struct rxe_create_cq_resp __user *uresp);

drivers/infiniband/sw/rxe/rxe_loc.h

26

struct rxe_resize_cq_resp __user *uresp,

drivers/infiniband/sw/rxe/rxe_qp.c

236

struct rxe_create_qp_resp __user *uresp)

drivers/infiniband/sw/rxe/rxe_qp.c

285

struct rxe_create_qp_resp __user *uresp)

drivers/infiniband/sw/rxe/rxe_qp.c

329

struct rxe_create_qp_resp __user *uresp)

drivers/infiniband/sw/rxe/rxe_qp.c

375

struct rxe_create_qp_resp __user *uresp)

drivers/infiniband/sw/rxe/rxe_qp.c

399

struct rxe_create_qp_resp __user *uresp,

drivers/infiniband/sw/rxe/rxe_queue.c

12

int do_mmap_info(struct rxe_dev *rxe, struct mminfo __user *outbuf,

drivers/infiniband/sw/rxe/rxe_queue.c

149

struct mminfo __user *outbuf, spinlock_t *producer_lock,

drivers/infiniband/sw/rxe/rxe_queue.h

79

int do_mmap_info(struct rxe_dev *rxe, struct mminfo __user *outbuf,

drivers/infiniband/sw/rxe/rxe_queue.h

90

struct mminfo __user *outbuf,

drivers/infiniband/sw/rxe/rxe_srq.c

156

struct mminfo __user *mi = NULL;

drivers/infiniband/sw/rxe/rxe_srq.c

46

struct rxe_create_srq_resp __user *uresp)

drivers/infiniband/sw/rxe/rxe_verbs.c

1067

struct rxe_create_cq_resp __user *uresp = NULL;

drivers/infiniband/sw/rxe/rxe_verbs.c

1117

struct rxe_resize_cq_resp __user *uresp = NULL;

drivers/infiniband/sw/rxe/rxe_verbs.c

282

struct rxe_create_ah_resp __user *uresp = NULL;

drivers/infiniband/sw/rxe/rxe_verbs.c

388

struct rxe_create_srq_resp __user *uresp = NULL;

drivers/infiniband/sw/rxe/rxe_verbs.c

539

struct rxe_create_qp_resp __user *uresp = NULL;

drivers/input/evdev.c

1015

if (put_user(0xffU, (u8 __user *)codes + i))

drivers/input/evdev.c

1028

void __user *p, int compat_mode)

drivers/input/evdev.c

1036

int __user *ip = (int __user *)p;

drivers/input/evdev.c

1097

void __user *codes_ptr;

drivers/input/evdev.c

1102

codes_ptr = (void __user *)(unsigned long)mask.codes_ptr;

drivers/input/evdev.c

1109

const void __user *codes_ptr;

drivers/input/evdev.c

1114

codes_ptr = (const void __user *)(unsigned long)mask.codes_ptr;

drivers/input/evdev.c

1185

if (put_user(effect.id, &(((struct ff_effect __user *)p)->id)))

drivers/input/evdev.c

1255

void __user *p, int compat_mode)

drivers/input/evdev.c

1279

return evdev_ioctl_handler(file, cmd, (void __user *)arg, 0);

drivers/input/evdev.c

493

static ssize_t evdev_write(struct file *file, const char __user *buffer,

drivers/input/evdev.c

556

static ssize_t evdev_read(struct file *file, char __user *buffer,

drivers/input/evdev.c

634

unsigned int maxlen, void __user *p, int compat)

drivers/input/evdev.c

644

if (copy_to_user((compat_long_t __user *) p + i,

drivers/input/evdev.c

662

unsigned int maxlen, const void __user *p, int compat)

drivers/input/evdev.c

677

(compat_long_t __user *) p + i,

drivers/input/evdev.c

701

unsigned int maxlen, void __user *p, int compat)

drivers/input/evdev.c

714

unsigned int maxlen, const void __user *p, int compat)

drivers/input/evdev.c

735

unsigned int maxlen, void __user *p, int compat)

drivers/input/evdev.c

746

unsigned int maxlen, const void __user *p, int compat)

drivers/input/evdev.c

762

static int str_to_user(const char *str, unsigned int maxlen, void __user *p)

drivers/input/evdev.c

778

void __user *p, int compat_mode)

drivers/input/evdev.c

800

static int evdev_handle_get_keycode(struct input_dev *dev, void __user *p)

drivers/input/evdev.c

806

int __user *ip = (int __user *)p;

drivers/input/evdev.c

823

static int evdev_handle_get_keycode_v2(struct input_dev *dev, void __user *p)

drivers/input/evdev.c

841

static int evdev_handle_set_keycode(struct input_dev *dev, void __user *p)

drivers/input/evdev.c

847

int __user *ip = (int __user *)p;

drivers/input/evdev.c

858

static int evdev_handle_set_keycode_v2(struct input_dev *dev, void __user *p)

drivers/input/evdev.c

887

unsigned int maxlen, void __user *p,

drivers/input/evdev.c

919

int __user *ip)

drivers/input/evdev.c

955

const void __user *codes,

drivers/input/evdev.c

991

void __user *codes,

drivers/input/input-compat.c

122

int input_event_from_user(const char __user *buffer,

drivers/input/input-compat.c

131

int input_event_to_user(char __user *buffer,

drivers/input/input-compat.c

140

int input_ff_effect_from_user(const char __user *buffer, size_t size,

drivers/input/input-compat.c

15

int input_event_from_user(const char __user *buffer,

drivers/input/input-compat.c

39

int input_event_to_user(char __user *buffer,

drivers/input/input-compat.c

63

int input_ff_effect_from_user(const char __user *buffer, size_t size,

drivers/input/input-compat.h

69

int input_event_from_user(const char __user *buffer,

drivers/input/input-compat.h

72

int input_event_to_user(char __user *buffer,

drivers/input/input-compat.h

75

int input_ff_effect_from_user(const char __user *buffer, size_t size,

drivers/input/joydev.c

342

char __user *buf)

drivers/input/joydev.c

383

static ssize_t joydev_read(struct file *file, char __user *buf,

drivers/input/joydev.c

445

void __user *argp, size_t len)

drivers/input/joydev.c

476

void __user *argp, size_t len)

drivers/input/joydev.c

511

unsigned int cmd, void __user *argp)

drivers/input/joydev.c

530

return get_user(joydev->glue.JS_TIMEOUT, (s32 __user *) argp);

drivers/input/joydev.c

533

return put_user(joydev->glue.JS_TIMEOUT, (s32 __user *) argp);

drivers/input/joydev.c

536

return put_user(JS_VERSION, (__u32 __user *) argp);

drivers/input/joydev.c

539

return put_user(joydev->nabs, (__u8 __user *) argp);

drivers/input/joydev.c

542

return put_user(joydev->nkey, (__u8 __user *) argp);

drivers/input/joydev.c

600

void __user *argp = (void __user *)arg;

drivers/input/joydev.c

617

retval = get_user(tmp32, (s32 __user *) arg);

drivers/input/joydev.c

624

retval = put_user(tmp32, (s32 __user *) arg);

drivers/input/joydev.c

667

void __user *argp = (void __user *)arg;

drivers/input/joydev.c

683

(long __user *) arg);

drivers/input/joydev.c

688

(long __user *) arg);

drivers/input/keyboard/applespi.c

979

static ssize_t applespi_tp_dim_read(struct file *file, char __user *buf,

drivers/input/misc/uinput.c

1111

return uinput_ioctl_handler(file, cmd, arg, (void __user *)arg);

drivers/input/misc/uinput.c

483

struct uinput_setup __user *arg)

drivers/input/misc/uinput.c

511

struct uinput_setup __user *arg, size_t size)

drivers/input/misc/uinput.c

546

const char __user *buffer, size_t count)

drivers/input/misc/uinput.c

637

const char __user *buffer, size_t count)

drivers/input/misc/uinput.c

668

static ssize_t uinput_write(struct file *file, const char __user *buffer,

drivers/input/misc/uinput.c

709

char __user *buffer, size_t count)

drivers/input/misc/uinput.c

726

static ssize_t uinput_read(struct file *file, char __user *buffer,

drivers/input/misc/uinput.c

793

static int uinput_ff_upload_to_user(char __user *buffer,

drivers/input/misc/uinput.c

825

static int uinput_ff_upload_from_user(const char __user *buffer,

drivers/input/misc/uinput.c

853

static int uinput_ff_upload_to_user(char __user *buffer,

drivers/input/misc/uinput.c

862

static int uinput_ff_upload_from_user(const char __user *buffer,

drivers/input/misc/uinput.c

884

static int uinput_str_to_user(void __user *dest, const char *str,

drivers/input/misc/uinput.c

887

char __user *p = dest;

drivers/input/misc/uinput.c

910

unsigned long arg, void __user *p)

drivers/input/misc/uinput.c

935

if (put_user(UINPUT_VERSION, (unsigned int __user *)p))

drivers/input/mousedev.c

674

static ssize_t mousedev_write(struct file *file, const char __user *buffer,

drivers/input/mousedev.c

716

static ssize_t mousedev_read(struct file *file, char __user *buffer,

drivers/input/serio/serio_raw.c

142

static ssize_t serio_raw_read(struct file *file, char __user *buffer,

drivers/input/serio/serio_raw.c

183

static ssize_t serio_raw_write(struct file *file, const char __user *buffer,

drivers/input/serio/serport.c

208

if (get_user(type, (unsigned long __user *) arg))

drivers/input/serio/serport.c

224

void __user *uarg = compat_ptr(arg);

drivers/input/serio/serport.c

227

if (get_user(compat_type, (compat_ulong_t __user *)uarg))

drivers/input/serio/userio.c

134

static ssize_t userio_char_read(struct file *file, char __user *user_buffer,

drivers/input/serio/userio.c

256

static ssize_t userio_char_write(struct file *file, const char __user *buffer,

drivers/input/touchscreen/edt-ft5x06.c

720

char __user *buf, size_t count,

drivers/iommu/amd/debugfs.c

135

static ssize_t devid_write(struct file *filp, const char __user *ubuf,

drivers/iommu/amd/debugfs.c

24

static ssize_t iommu_mmio_write(struct file *filp, const char __user *ubuf,

drivers/iommu/amd/debugfs.c

65

static ssize_t iommu_capability_write(struct file *filp, const char __user *ubuf,

drivers/iommu/intel/debugfs.c

688

const char __user *ubuf,

drivers/iommu/iommufd/device.c

1556

void __user *user_ptr = u64_to_user_ptr(cmd->data_uptr);

drivers/iommu/iommufd/eventq.c

124

static ssize_t iommufd_fault_fops_read(struct file *filep, char __user *buf,

drivers/iommu/iommufd/eventq.c

182

static ssize_t iommufd_fault_fops_write(struct file *filep, const char __user *buf,

drivers/iommu/iommufd/eventq.c

311

static ssize_t iommufd_veventq_fops_read(struct file *filep, char __user *buf,

drivers/iommu/iommufd/io_pagetable.c

456

unsigned long *iova, void __user *uptr,

drivers/iommu/iommufd/io_pagetable.h

233

void __user *uptr; /* IOPT_ADDRESS_USER */

drivers/iommu/iommufd/io_pagetable.h

266

struct iopt_pages *iopt_alloc_user_pages(void __user *uptr,

drivers/iommu/iommufd/ioas.c

117

struct iommu_iova_range __user *ranges,

drivers/iommu/iommufd/ioas.c

68

struct iommu_iova_range __user *ranges;

drivers/iommu/iommufd/iommufd_private.h

108

unsigned long *iova, void __user *uptr,

drivers/iommu/iommufd/iommufd_private.h

150

void __user *ubuffer;

drivers/iommu/iommufd/iova_bitmap.c

106

u8 __user *bitmap;

drivers/iommu/iommufd/iova_bitmap.c

169

u8 __user *addr;

drivers/iommu/iommufd/iova_bitmap.c

244

unsigned long page_size, u64 __user *data)

drivers/iommu/iommufd/iova_bitmap.c

256

bitmap->bitmap = (u8 __user *)data;

drivers/iommu/iommufd/main.c

409

if (copy_to_user(&((struct iommu_option __user *)ucmd->ubuffer)->val64,

drivers/iommu/iommufd/main.c

517

ucmd.ubuffer = (void __user *)arg;

drivers/iommu/iommufd/main.c

518

ret = get_user(ucmd.user_size, (u32 __user *)ucmd.ubuffer);

drivers/iommu/iommufd/pages.c

1398

struct iopt_pages *iopt_alloc_user_pages(void __user *uptr,

drivers/iommu/iommufd/pages.c

1403

void __user *uptr_down =

drivers/iommu/iommufd/pages.c

1404

(void __user *)ALIGN_DOWN((uintptr_t)uptr, PAGE_SIZE);

drivers/iommu/iommufd/selftest.c

1178

size_t length, void __user *uptr)

drivers/iommu/iommufd/selftest.c

1235

void __user *uptr, size_t length,

drivers/iommu/iommufd/selftest.c

1508

static int iommufd_test_check_pages(void __user *uptr, struct page **pages,

drivers/iommu/iommufd/selftest.c

1531

size_t length, void __user *uptr,

drivers/iommu/iommufd/selftest.c

1626

size_t length, void __user *ubuf,

drivers/iommu/iommufd/selftest.c

1685

unsigned long page_size, void __user *uptr,

drivers/iommu/iommufd/vfio_compat.c

160

void __user *arg)

drivers/iommu/iommufd/vfio_compat.c

198

void __user *arg)

drivers/iommu/iommufd/vfio_compat.c

373

struct vfio_info_cap_header __user *cur,

drivers/iommu/iommufd/vfio_compat.c

376

struct vfio_iommu_type1_info_cap_iova_range __user *ucap_iovas =

drivers/iommu/iommufd/vfio_compat.c

378

struct vfio_iommu_type1_info_cap_iova_range __user,

drivers/iommu/iommufd/vfio_compat.c

410

struct vfio_info_cap_header __user *cur,

drivers/iommu/iommufd/vfio_compat.c

435

void __user *arg)

drivers/iommu/iommufd/vfio_compat.c

438

struct vfio_info_cap_header __user *cur,

drivers/iommu/iommufd/vfio_compat.c

445

struct vfio_info_cap_header __user *last_cap = NULL;

drivers/iommu/iommufd/vfio_compat.c

516

void __user *uarg = (void __user *)arg;

drivers/iommu/omap-iommu-debug.c

83

static ssize_t debug_read_regs(struct file *file, char __user *userbuf,

drivers/leds/uleds.c

132

static ssize_t uleds_read(struct file *file, char __user *buffer, size_t count,

drivers/leds/uleds.c

73

static ssize_t uleds_write(struct file *file, const char __user *buffer,

drivers/macintosh/adb.c

716

static ssize_t adb_read(struct file *file, char __user *buf,

drivers/macintosh/adb.c

774

static ssize_t adb_write(struct file *file, const char __user *buf,

drivers/macintosh/ans-lcd.c

104

temp = (char __user *) arg;

drivers/macintosh/ans-lcd.c

57

anslcd_write( struct file * file, const char __user * buf,

drivers/macintosh/ans-lcd.c

60

const char __user *p = buf;

drivers/macintosh/ans-lcd.c

85

char ch, __user *temp;

drivers/macintosh/smu.c

1110

static ssize_t smu_write(struct file *file, const char __user *buf,

drivers/macintosh/smu.c

1169

char __user *buf, size_t count)

drivers/macintosh/smu.c

1225

char __user *buf, size_t count)

drivers/macintosh/smu.c

1233

static ssize_t smu_read(struct file *file, char __user *buf,

drivers/macintosh/via-pmu.c

2169

pmu_read(struct file *file, char __user *buf,

drivers/macintosh/via-pmu.c

2219

pmu_write(struct file *file, const char __user *buf,

drivers/macintosh/via-pmu.c

2354

__u32 __user *argp = (__u32 __user *)arg;

drivers/macintosh/via-pmu.c

921

const char __user *buffer, size_t count, loff_t *pos)

drivers/mailbox/bcm-pdc-mailbox.c

420

static ssize_t pdc_debugfs_read(struct file *filp, char __user *ubuf,

drivers/mailbox/mailbox-test.c

170

static ssize_t mbox_test_message_read(struct file *filp, char __user *userbuf,

drivers/mailbox/mailbox-test.c

49

const char __user *userbuf,

drivers/mailbox/mailbox-test.c

96

const char __user *userbuf,

drivers/md/bcache/debug.c

171

static ssize_t bch_dump_read(struct file *file, char __user *buf,

drivers/md/dm-ioctl.c

2042

static int check_version(unsigned int cmd, struct dm_ioctl __user *user,

drivers/md/dm-ioctl.c

2089

static int copy_params(struct dm_ioctl __user *user, struct dm_ioctl *param_kernel,

drivers/md/dm-ioctl.c

2098

(char __user *)user + sizeof(param_kernel->version),

drivers/md/dm-ioctl.c

2138

if (copy_from_user(&dmi->data, (char __user *)user + minimum_data_size,

drivers/md/dm-ioctl.c

2186

static int ctl_ioctl(struct file *file, uint command, struct dm_ioctl __user *user)

drivers/md/dm-ioctl.c

2262

return (long)ctl_ioctl(file, command, (struct dm_ioctl __user *)u);

drivers/md/md.c

7324

static int get_version(void __user *arg)

drivers/md/md.c

7338

static int get_array_info(struct mddev *mddev, void __user *arg)

drivers/md/md.c

7398

static int get_bitmap_file(struct mddev *mddev, void __user * arg)

drivers/md/md.c

7430

static int get_disk_info(struct mddev *mddev, void __user * arg)

drivers/md/md.c

8289

static int __md_set_array_info(struct mddev *mddev, void __user *argp)

drivers/md/md.c

8327

void __user *argp = (void __user *)arg;

drivers/media/cec/core/cec-api.c

122

bool block, __u16 __user *parg)

drivers/media/cec/core/cec-api.c

145

struct cec_log_addrs __user *parg)

drivers/media/cec/core/cec-api.c

168

bool block, struct cec_log_addrs __user *parg)

drivers/media/cec/core/cec-api.c

197

struct cec_log_addrs __user *parg)

drivers/media/cec/core/cec-api.c

212

bool block, struct cec_msg __user *parg)

drivers/media/cec/core/cec-api.c

291

bool block, struct cec_msg __user *parg)

drivers/media/cec/core/cec-api.c

309

bool block, struct cec_event __user *parg)

drivers/media/cec/core/cec-api.c

359

u32 __user *parg)

drivers/media/cec/core/cec-api.c

369

u32 __user *parg)

drivers/media/cec/core/cec-api.c

509

void __user *parg = (void __user *)arg;

drivers/media/cec/core/cec-api.c

76

struct cec_caps __user *parg)

drivers/media/cec/core/cec-api.c

92

__u16 __user *parg)

drivers/media/cec/core/cec-core.c

176

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/media/common/saa7146/saa7146_fops.c

183

static ssize_t fops_write(struct file *file, const char __user *data, size_t count, loff_t *ppos)

drivers/media/common/siano/smsdvb-debugfs.c

283

static ssize_t smsdvb_stats_read(struct file *file, char __user *user_buf,

drivers/media/common/videobuf2/videobuf2-core.c

2993

static ssize_t __vb2_perform_fileio(struct vb2_queue *q, char __user *data, size_t count,

drivers/media/common/videobuf2/videobuf2-core.c

3157

ssize_t vb2_read(struct vb2_queue *q, char __user *data, size_t count,

drivers/media/common/videobuf2/videobuf2-core.c

3164

ssize_t vb2_write(struct vb2_queue *q, const char __user *data, size_t count,

drivers/media/common/videobuf2/videobuf2-core.c

3167

return __vb2_perform_fileio(q, (char __user *) data, count,

drivers/media/common/videobuf2/videobuf2-v4l2.c

1177

ssize_t vb2_fop_write(struct file *file, const char __user *buf,

drivers/media/common/videobuf2/videobuf2-v4l2.c

1201

ssize_t vb2_fop_read(struct file *file, char __user *buf,

drivers/media/dvb-core/dmxdev.c

1025

dvb_demux_read(struct file *file, char __user *buf, size_t count,

drivers/media/dvb-core/dmxdev.c

245

static ssize_t dvb_dvr_write(struct file *file, const char __user *buf,

drivers/media/dvb-core/dmxdev.c

268

static ssize_t dvb_dvr_read(struct file *file, char __user *buf, size_t count,

drivers/media/dvb-core/dmxdev.c

54

int non_blocking, char __user *buf,

drivers/media/dvb-core/dmxdev.c

984

struct file *file, char __user *buf,

drivers/media/dvb-core/dvb_ca_en50221.c

1447

const char __user *buf, size_t count,

drivers/media/dvb-core/dvb_ca_en50221.c

1602

static ssize_t dvb_ca_en50221_io_read(struct file *file, char __user *buf,

drivers/media/dvb-core/dvb_demux.c

1145

static int dvbdmx_write(struct dmx_demux *demux, const char __user *buf, size_t count)

drivers/media/dvb-core/dvb_frontend.c

2225

if (copy_to_user((void __user *)compat_ptr(tvps->props), tvp,

drivers/media/dvb-core/dvb_frontend.c

2379

tvp = memdup_array_user((void __user *)tvps->props,

drivers/media/dvb-core/dvb_frontend.c

2402

if (copy_to_user((void __user *)tvps->props, tvp,

drivers/media/dvb-core/dvb_frontend.c

2458

tvp = memdup_array_user((void __user *)tvps->props,

drivers/media/dvb-core/dvb_ringbuffer.c

134

ssize_t dvb_ringbuffer_read_user(struct dvb_ringbuffer *rbuf, u8 __user *buf, size_t len)

drivers/media/dvb-core/dvb_ringbuffer.c

209

const u8 __user *buf, size_t len)

drivers/media/dvb-core/dvb_ringbuffer.c

255

int offset, u8 __user *buf, size_t len)

drivers/media/dvb-core/dvbdev.c

1007

if (copy_to_user((void __user *)arg, parg, _IOC_SIZE(cmd)))

drivers/media/dvb-core/dvbdev.c

990

if (copy_from_user(parg, (void __user *)arg, _IOC_SIZE(cmd)))

drivers/media/i2c/adv7511-v4l2.c

1718

struct file *filp, char __user *ubuf, size_t count, loff_t *ppos)

drivers/media/i2c/adv7604.c

2704

char __user *ubuf, size_t count, loff_t *ppos)

drivers/media/i2c/adv7842.c

3282

char __user *ubuf, size_t count, loff_t *ppos)

drivers/media/i2c/saa6588.c

170

unsigned char __user *buf_ptr = a->buffer;

drivers/media/i2c/tc358743.c

474

char __user *ubuf, size_t count, loff_t *ppos)

drivers/media/mc/mc-device.c

175

struct media_link_desc __user *ulink_desc = links->links;

drivers/media/mc/mc-device.c

237

struct media_v2_entity kentity, __user *uentity;

drivers/media/mc/mc-device.c

238

struct media_v2_interface kintf, __user *uintf;

drivers/media/mc/mc-device.c

239

struct media_v2_pad kpad, __user *upad;

drivers/media/mc/mc-device.c

240

struct media_v2_link klink, __user *ulink;

drivers/media/mc/mc-device.c

383

static long copy_arg_from_user(void *karg, void __user *uarg, unsigned int cmd)

drivers/media/mc/mc-device.c

392

static long copy_arg_to_user(void __user *uarg, void *karg, unsigned int cmd)

drivers/media/mc/mc-device.c

421

long (*arg_from_user)(void *karg, void __user *uarg, unsigned int cmd);

drivers/media/mc/mc-device.c

422

long (*arg_to_user)(void __user *uarg, void *karg, unsigned int cmd);

drivers/media/mc/mc-device.c

43

static inline void __user *media_get_uptr(__u64 arg)

drivers/media/mc/mc-device.c

440

void __user *arg = (void __user *)__arg;

drivers/media/mc/mc-device.c

45

return (void __user *)(uintptr_t)arg;

drivers/media/mc/mc-device.c

490

struct media_links_enum32 __user *ulinks)

drivers/media/mc/mc-device.c

529

(struct media_links_enum32 __user *)arg);

drivers/media/mc/mc-devnode.c

68

static ssize_t media_read(struct file *filp, char __user *buf,

drivers/media/mc/mc-devnode.c

80

static ssize_t media_write(struct file *filp, const char __user *buf,

drivers/media/pci/bt8xx/bttv-driver.c

2457

static ssize_t radio_read(struct file *file, char __user *data,

drivers/media/pci/bt8xx/dst_ca.c

210

static int ca_get_slot_caps(struct dst_state *state, struct ca_caps *p_ca_caps, void __user *arg)

drivers/media/pci/bt8xx/dst_ca.c

243

static int ca_get_slot_descr(struct dst_state *state, struct ca_msg *p_ca_message, void __user *arg)

drivers/media/pci/bt8xx/dst_ca.c

249

static int ca_get_slot_info(struct dst_state *state, struct ca_slot_info *p_ca_slot_info, void __user *arg)

drivers/media/pci/bt8xx/dst_ca.c

289

static int ca_get_message(struct dst_state *state, struct ca_msg *p_ca_message, void __user *arg)

drivers/media/pci/bt8xx/dst_ca.c

450

static int ca_send_message(struct dst_state *state, struct ca_msg *p_ca_message, void __user *arg)

drivers/media/pci/bt8xx/dst_ca.c

532

void __user *arg = (void __user *)ioctl_arg;

drivers/media/pci/bt8xx/dst_ca.c

625

static ssize_t dst_ca_read(struct file *file, char __user *buffer, size_t length, loff_t *offset)

drivers/media/pci/bt8xx/dst_ca.c

632

static ssize_t dst_ca_write(struct file *file, const char __user *buffer, size_t length, loff_t *offset)

drivers/media/pci/cx18/cx18-fileops.c

260

struct cx18_buffer *buf, char __user *ubuf, size_t ucount, bool *stop)

drivers/media/pci/cx18/cx18-fileops.c

364

struct cx18_mdl *mdl, char __user *ubuf, size_t ucount)

drivers/media/pci/cx18/cx18-fileops.c

405

static ssize_t cx18_read(struct cx18_stream *s, char __user *ubuf,

drivers/media/pci/cx18/cx18-fileops.c

470

static ssize_t cx18_read_pos(struct cx18_stream *s, char __user *ubuf,

drivers/media/pci/cx18/cx18-fileops.c

571

ssize_t cx18_v4l2_read(struct file *filp, char __user *buf, size_t count,

drivers/media/pci/cx18/cx18-fileops.h

12

ssize_t cx18_v4l2_read(struct file *filp, char __user *buf, size_t count,

drivers/media/pci/cx18/cx18-fileops.h

14

ssize_t cx18_v4l2_write(struct file *filp, const char __user *buf, size_t count,

drivers/media/pci/ddbridge/ddbridge-core.c

591

const __user u8 *buf, size_t count)

drivers/media/pci/ddbridge/ddbridge-core.c

664

__user u8 *buf, size_t count)

drivers/media/pci/ddbridge/ddbridge-core.c

706

static ssize_t ts_write(struct file *file, const __user char *buf,

drivers/media/pci/ddbridge/ddbridge-core.c

735

static ssize_t ts_read(struct file *file, __user char *buf,

drivers/media/pci/ivtv/ivtv-fileops.c

297

char __user *ubuf, size_t ucount)

drivers/media/pci/ivtv/ivtv-fileops.c

356

static ssize_t ivtv_read(struct ivtv_stream *s, char __user *ubuf, size_t tot_count, int non_block)

drivers/media/pci/ivtv/ivtv-fileops.c

413

static ssize_t ivtv_read_pos(struct ivtv_stream *s, char __user *ubuf, size_t count,

drivers/media/pci/ivtv/ivtv-fileops.c

503

ssize_t ivtv_v4l2_read(struct file * filp, char __user *buf, size_t count, loff_t * pos)

drivers/media/pci/ivtv/ivtv-fileops.c

565

static ssize_t ivtv_write(struct file *filp, const char __user *user_buf, size_t count, loff_t *pos)

drivers/media/pci/ivtv/ivtv-fileops.c

595

(const struct v4l2_sliced_vbi_data __user *)user_buf, elems);

drivers/media/pci/ivtv/ivtv-fileops.c

623

rc = ivtv_yuv_udma_stream_frame(itv, (void __user *)user_buf);

drivers/media/pci/ivtv/ivtv-fileops.c

720

ssize_t ivtv_v4l2_write(struct file *filp, const char __user *user_buf, size_t count, loff_t *pos)

drivers/media/pci/ivtv/ivtv-fileops.h

14

ssize_t ivtv_v4l2_read(struct file *filp, char __user *buf, size_t count,

drivers/media/pci/ivtv/ivtv-fileops.h

16

ssize_t ivtv_v4l2_write(struct file *filp, const char __user *buf, size_t count,

drivers/media/pci/ivtv/ivtv-queue.c

13

int ivtv_buf_copy_from_user(struct ivtv_stream *s, struct ivtv_buffer *buf, const char __user *src, int copybytes)

drivers/media/pci/ivtv/ivtv-queue.h

56

int ivtv_buf_copy_from_user(struct ivtv_stream *s, struct ivtv_buffer *buf, const char __user *src, int copybytes);

drivers/media/pci/ivtv/ivtv-udma.c

93

void __user *userbuf, int size_in_bytes)

drivers/media/pci/ivtv/ivtv-udma.h

17

void __user *userbuf, int size_in_bytes);

drivers/media/pci/ivtv/ivtv-vbi.c

150

const struct v4l2_sliced_vbi_data __user *sliced,

drivers/media/pci/ivtv/ivtv-vbi.h

13

const struct v4l2_sliced_vbi_data __user *sliced,

drivers/media/pci/ivtv/ivtv-yuv.c

1144

int ivtv_yuv_udma_stream_frame(struct ivtv *itv, void __user *src)

drivers/media/pci/ivtv/ivtv-yuv.h

26

int ivtv_yuv_udma_stream_frame(struct ivtv *itv, void __user *src);

drivers/media/pci/ivtv/ivtvfb.c

275

unsigned long ivtv_dest_addr, void __user *userbuf,

drivers/media/pci/ivtv/ivtvfb.c

322

static int ivtvfb_prep_frame(struct ivtv *itv, int cmd, void __user *source,

drivers/media/pci/ivtv/ivtvfb.c

368

static ssize_t ivtvfb_write(struct fb_info *info, const char __user *buf,

drivers/media/pci/ivtv/ivtvfb.c

427

p + lead + dma_offset, (void __user *)buf, dma_size);

drivers/media/pci/ivtv/ivtvfb.c

470

if (copy_to_user((void __user *)arg, &vblank, sizeof(vblank)))

drivers/media/pci/ivtv/ivtvfb.c

486

if (copy_from_user(&args, (void __user *)arg, sizeof(args)))

drivers/media/pci/ngene/ngene-dvb.c

36

static ssize_t ts_write(struct file *file, const char __user *buf,

drivers/media/pci/ngene/ngene-dvb.c

53

static ssize_t ts_read(struct file *file, char __user *buf,

drivers/media/pci/saa7134/saa7134-video.c

977

static ssize_t radio_read(struct file *file, char __user *data,

drivers/media/pci/saa7164/saa7164-encoder.c

786

static ssize_t fops_read(struct file *file, char __user *buffer,

drivers/media/pci/saa7164/saa7164-vbi.c

488

static ssize_t fops_read(struct file *file, char __user *buffer,

drivers/media/platform/amphion/vpu_dbg.c

370

const char __user *user_buf, size_t size, loff_t *ppos)

drivers/media/platform/amphion/vpu_dbg.c

381

const char __user *user_buf, size_t size, loff_t *ppos)

drivers/media/platform/mediatek/vcodec/common/mtk_vcodec_dbgfs.c

73

static ssize_t mtk_vdec_dbgfs_write(struct file *filp, const char __user *ubuf,

drivers/media/platform/mediatek/vcodec/common/mtk_vcodec_dbgfs.c

89

static ssize_t mtk_vdec_dbgfs_read(struct file *filp, char __user *ubuf,

drivers/media/platform/mediatek/vpu/mtk_vpu.c

651

static ssize_t vpu_debug_read(struct file *file, char __user *user_buf,

drivers/media/platform/synopsys/hdmirx/snps_hdmirx.c

1101

char __user *ubuf, size_t count, loff_t *ppos)

drivers/media/platform/ti/am437x/am437x-vpfe.c

2058

ret = vpfe_ccdc_set_params(&vpfe->ccdc, (void __user *)param);

drivers/media/platform/ti/am437x/am437x-vpfe.c

351

static int vpfe_ccdc_set_params(struct vpfe_ccdc *ccdc, void __user *params)

drivers/media/platform/ti/omap3isp/ispccdc.c

735

(__force void __user *)(long)fpc.fpcaddr,

drivers/media/platform/ti/omap3isp/isppreview.c

890

void __user *from = *(void __user **)

drivers/media/radio/radio-cadet.c

326

static ssize_t cadet_read(struct file *file, char __user *data, size_t count, loff_t *ppos)

drivers/media/radio/radio-si476x.c

1083

static ssize_t si476x_radio_fops_read(struct file *file, char __user *buf,

drivers/media/radio/radio-si476x.c

1182

char __user *user_buf,

drivers/media/radio/radio-si476x.c

1210

char __user *user_buf,

drivers/media/radio/radio-si476x.c

1239

char __user *user_buf,

drivers/media/radio/radio-si476x.c

1267

char __user *user_buf,

drivers/media/radio/radio-si476x.c

1302

char __user *user_buf,

drivers/media/radio/si470x/radio-si470x-common.c

459

static ssize_t si470x_fops_read(struct file *file, char __user *buf,

drivers/media/rc/bpf-lirc.c

295

int lirc_prog_query(const union bpf_attr *attr, union bpf_attr __user *uattr)

drivers/media/rc/bpf-lirc.c

297

__u32 __user *prog_ids = u64_to_user_ptr(attr->query.prog_ids);

drivers/media/rc/imon.c

1037

static ssize_t lcd_write(struct file *file, const char __user *buf,

drivers/media/rc/imon.c

63

static ssize_t vfd_write(struct file *file, const char __user *buf,

drivers/media/rc/imon.c

67

static ssize_t lcd_write(struct file *file, const char __user *buf,

drivers/media/rc/imon.c

950

static ssize_t vfd_write(struct file *file, const char __user *buf,

drivers/media/rc/lirc_dev.c

216

static ssize_t lirc_transmit(struct file *file, const char __user *buf,

drivers/media/rc/lirc_dev.c

366

u32 __user *argp = (u32 __user *)(arg);

drivers/media/rc/lirc_dev.c

605

static ssize_t lirc_read_mode2(struct file *file, char __user *buffer,

drivers/media/rc/lirc_dev.c

643

static ssize_t lirc_read_scancode(struct file *file, char __user *buffer,

drivers/media/rc/lirc_dev.c

682

static ssize_t lirc_read(struct file *file, char __user *buffer, size_t length,

drivers/media/test-drivers/vivid/vivid-core.c

458

static ssize_t vivid_radio_read(struct file *file, char __user *buf,

drivers/media/test-drivers/vivid/vivid-core.c

468

static ssize_t vivid_radio_write(struct file *file, const char __user *buf,

drivers/media/test-drivers/vivid/vivid-osd.c

87

if (copy_to_user((void __user *)arg, &vblank, sizeof(vblank)))

drivers/media/test-drivers/vivid/vivid-radio-rx.c

25

ssize_t vivid_radio_rx_read(struct file *file, char __user *buf,

drivers/media/test-drivers/vivid/vivid-radio-rx.h

11

ssize_t vivid_radio_rx_read(struct file *, char __user *, size_t, loff_t *);

drivers/media/test-drivers/vivid/vivid-radio-tx.c

23

ssize_t vivid_radio_tx_write(struct file *file, const char __user *buf,

drivers/media/test-drivers/vivid/vivid-radio-tx.h

11

ssize_t vivid_radio_tx_write(struct file *, const char __user *, size_t, loff_t *);

drivers/media/usb/hdpvr/hdpvr-video.c

410

static ssize_t hdpvr_read(struct file *file, char __user *buffer, size_t count,

drivers/media/usb/pvrusb2/pvrusb2-ioread.c

388

int pvr2_ioread_read(struct pvr2_ioread *cp,void __user *buf,unsigned int cnt)

drivers/media/usb/pvrusb2/pvrusb2-ioread.h

21

int pvr2_ioread_read(struct pvr2_ioread *,void __user *buf,unsigned int cnt);

drivers/media/usb/pvrusb2/pvrusb2-v4l2.c

1057

char __user *buff, size_t count, loff_t *ppos)

drivers/media/usb/uvc/uvc_debugfs.c

42

static ssize_t uvc_debugfs_stats_read(struct file *file, char __user *user_buf,

drivers/media/usb/uvc/uvc_v4l2.c

1090

const struct uvc_xu_control_mapping32 __user *up)

drivers/media/usb/uvc/uvc_v4l2.c

1109

struct uvc_xu_control_mapping32 __user *up)

drivers/media/usb/uvc/uvc_v4l2.c

1130

const struct uvc_xu_control_query32 __user *up)

drivers/media/usb/uvc/uvc_v4l2.c

1148

struct uvc_xu_control_query32 __user *up)

drivers/media/usb/uvc/uvc_v4l2.c

1166

void __user *up = compat_ptr(arg);

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

1027

void __user *user_ptr, size_t array_size,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

1047

struct v4l2_plane32 __user *p32 = user_ptr;

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

1070

struct v4l2_ext_control32 __user *ec32 = user_ptr;

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

1098

int v4l2_compat_put_array_args(struct file *file, void __user *user_ptr,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

1117

struct v4l2_plane32 __user *p32 = user_ptr;

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

1140

struct v4l2_ext_control32 __user *ec32 = user_ptr;

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

136

struct v4l2_format32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

175

struct v4l2_create_buffers32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

189

struct v4l2_format32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

225

struct v4l2_create_buffers32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

247

struct v4l2_standard32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

254

struct v4l2_standard32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

335

struct v4l2_plane32 __user *p32,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

369

struct v4l2_plane32 __user *p32,

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

401

struct v4l2_buffer32 __user *arg)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

447

struct v4l2_buffer32_time32 __user *arg)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

491

struct v4l2_buffer32 __user *arg)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

52

struct v4l2_window32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

536

struct v4l2_buffer32_time32 __user *arg)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

596

struct v4l2_framebuffer32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

608

struct v4l2_framebuffer32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

636

struct v4l2_input32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

644

struct v4l2_input32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

699

struct v4l2_ext_controls32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

719

struct v4l2_ext_controls32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

73

struct v4l2_window32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

761

struct v4l2_event32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

792

struct v4l2_event32_time32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

816

struct v4l2_edid32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

829

struct v4l2_edid32 __user *p32)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

930

int v4l2_compat_get_user(void __user *arg, void *parg, unsigned int cmd)

drivers/media/v4l2-core/v4l2-compat-ioctl32.c

974

int v4l2_compat_put_user(void __user *arg, void *parg, unsigned int cmd)

drivers/media/v4l2-core/v4l2-dev.c

307

static ssize_t v4l2_read(struct file *filp, char __user *buf,

drivers/media/v4l2-core/v4l2-dev.c

324

static ssize_t v4l2_write(struct file *filp, const char __user *buf,

drivers/media/v4l2-core/v4l2-dv-timings.c

1211

char __user *ubuf, size_t count, loff_t *ppos) \

drivers/media/v4l2-core/v4l2-ioctl.c

3170

void __user **user_ptr, void ***kernel_ptr)

drivers/media/v4l2-core/v4l2-ioctl.c

3186

*user_ptr = (void __user *)buf->m.planes;

drivers/media/v4l2-core/v4l2-ioctl.c

3203

*user_ptr = (void __user *)edid->edid;

drivers/media/v4l2-core/v4l2-ioctl.c

3221

*user_ptr = (void __user *)ctrls->controls;

drivers/media/v4l2-core/v4l2-ioctl.c

3272

static int video_get_user(void __user *arg, void *parg,

drivers/media/v4l2-core/v4l2-ioctl.c

3301

if (copy_from_user(parg, (void __user *)arg, n))

drivers/media/v4l2-core/v4l2-ioctl.c

3347

static int video_put_user(void __user *arg, void *parg,

drivers/media/v4l2-core/v4l2-ioctl.c

3429

void __user *user_ptr = NULL;

drivers/media/v4l2-core/v4l2-ioctl.c

3446

err = video_get_user((void __user *)arg, parg, cmd,

drivers/media/v4l2-core/v4l2-ioctl.c

3521

if (video_put_user((void __user *)arg, parg, cmd, orig_cmd))

drivers/message/fusion/mptctl.c

1228

struct mpt_ioctl_iocinfo __user *uarg = (void __user *) arg;

drivers/message/fusion/mptctl.c

126

static int mptctl_do_mpt_command(MPT_ADAPTER *iocp, struct mpt_ioctl_command karg, void __user *mfPtr);

drivers/message/fusion/mptctl.c

127

static int mptctl_do_fw_download(MPT_ADAPTER *iocp, char __user *ufwbuf, size_t fwlen);

drivers/message/fusion/mptctl.c

1340

if (copy_to_user((char __user *)arg, karg, data_size)) {

drivers/message/fusion/mptctl.c

1365

struct mpt_ioctl_targetinfo __user *uarg = (void __user *) arg;

drivers/message/fusion/mptctl.c

1440

if (copy_to_user((char __user *)arg, &karg,

drivers/message/fusion/mptctl.c

1475

struct mpt_ioctl_test __user *uarg = (void __user *) arg;

drivers/message/fusion/mptctl.c

1501

if (copy_to_user((char __user *)arg, &karg, sizeof(struct mpt_ioctl_test))) {

drivers/message/fusion/mptctl.c

1525

struct mpt_ioctl_eventquery __user *uarg = (void __user *) arg;

drivers/message/fusion/mptctl.c

1542

if (copy_to_user((char __user *)arg, &karg, sizeof(struct mpt_ioctl_eventquery))) {

drivers/message/fusion/mptctl.c

1555

struct mpt_ioctl_eventenable __user *uarg = (void __user *) arg;

drivers/message/fusion/mptctl.c

1594

struct mpt_ioctl_eventreport __user *uarg = (void __user *) arg;

drivers/message/fusion/mptctl.c

1640

struct mpt_ioctl_replace_fw __user *uarg = (void __user *) arg;

drivers/message/fusion/mptctl.c

1699

struct mpt_ioctl_command __user *uarg = (void __user *) arg;

drivers/message/fusion/mptctl.c

1729

mptctl_do_mpt_command (MPT_ADAPTER *ioc, struct mpt_ioctl_command karg, void __user *mfPtr)

drivers/message/fusion/mptctl.c

2322

hp_host_info_t __user *uarg = (void __user *) arg;

drivers/message/fusion/mptctl.c

2532

if (copy_to_user((char __user *)arg, &karg, sizeof(hp_host_info_t))) {

drivers/message/fusion/mptctl.c

2557

hp_target_info_t __user *uarg = (void __user *) arg;

drivers/message/fusion/mptctl.c

2680

if (copy_to_user((char __user *)arg, &karg, sizeof(hp_target_info_t))) {

drivers/message/fusion/mptctl.c

2723

if (copy_from_user(&kfw32, (char __user *)arg, sizeof(kfw32)))

drivers/message/fusion/mptctl.c

2756

struct mpt_ioctl_command32 __user *uarg = (struct mpt_ioctl_command32 __user *) arg;

drivers/message/fusion/mptctl.c

2763

if (copy_from_user(&karg32, (char __user *)arg, sizeof(karg32)))

drivers/message/fusion/mptctl.c

2791

karg.replyFrameBufPtr = (char __user *)(unsigned long)karg32.replyFrameBufPtr;

drivers/message/fusion/mptctl.c

2792

karg.dataInBufPtr = (char __user *)(unsigned long)karg32.dataInBufPtr;

drivers/message/fusion/mptctl.c

2793

karg.dataOutBufPtr = (char __user *)(unsigned long)karg32.dataOutBufPtr;

drivers/message/fusion/mptctl.c

2794

karg.senseDataPtr = (char __user *)(unsigned long)karg32.senseDataPtr;

drivers/message/fusion/mptctl.c

621

mpt_ioctl_header __user *uhdr = (void __user *) arg;

drivers/message/fusion/mptctl.c

706

struct mpt_ioctl_diag_reset __user *urinfo = (void __user *) arg;

drivers/message/fusion/mptctl.c

748

struct mpt_fw_xfer __user *ufwdl = (void __user *) arg;

drivers/message/fusion/mptctl.c

776

mptctl_do_fw_download(MPT_ADAPTER *iocp, char __user *ufwbuf, size_t fwlen)

drivers/message/fusion/mptctl.h

104

void __user *bufp; /* Pointer to firmware buffer */

drivers/message/fusion/mptctl.h

323

char __user *replyFrameBufPtr;

drivers/message/fusion/mptctl.h

324

char __user *dataInBufPtr;

drivers/message/fusion/mptctl.h

325

char __user *dataOutBufPtr;

drivers/message/fusion/mptctl.h

326

char __user *senseDataPtr;

drivers/mfd/aat2870-core.c

251

static ssize_t aat2870_reg_read_file(struct file *file, char __user *user_buf,

drivers/mfd/aat2870-core.c

272

const char __user *user_buf, size_t count,

drivers/misc/amd-sbi/rmi-core.c

467

struct apml_reg_xfer_msg __user *arg)

drivers/misc/amd-sbi/rmi-core.c

494

static int apml_mailbox_xfer(struct sbrmi_data *data, struct apml_mbox_msg __user *arg)

drivers/misc/amd-sbi/rmi-core.c

513

static int apml_cpuid_xfer(struct sbrmi_data *data, struct apml_cpuid_msg __user *arg)

drivers/misc/amd-sbi/rmi-core.c

532

static int apml_mcamsr_xfer(struct sbrmi_data *data, struct apml_mcamsr_msg __user *arg)

drivers/misc/amd-sbi/rmi-core.c

553

void __user *argp = (void __user *)arg;

drivers/misc/bcm-vk/bcm_vk.h

489

ssize_t bcm_vk_read(struct file *p_file, char __user *buf, size_t count,

drivers/misc/bcm-vk/bcm_vk.h

491

ssize_t bcm_vk_write(struct file *p_file, const char __user *buf,

drivers/misc/bcm-vk/bcm_vk_dev.c

1139

static long bcm_vk_reset(struct bcm_vk *vk, struct vk_reset __user *arg)

drivers/misc/bcm-vk/bcm_vk_dev.c

1232

void __user *argp = (void __user *)arg;

drivers/misc/bcm-vk/bcm_vk_dev.c

946

const struct vk_image __user *arg)

drivers/misc/bcm-vk/bcm_vk_msg.c

1002

char __user *buf,

drivers/misc/bcm-vk/bcm_vk_msg.c

1076

const char __user *buf,

drivers/misc/eeprom/idt_89hpesx.c

897

static ssize_t idt_dbgfs_csr_write(struct file *filep, const char __user *ubuf,

drivers/misc/eeprom/idt_89hpesx.c

984

static ssize_t idt_dbgfs_csr_read(struct file *filep, char __user *ubuf,

drivers/misc/fastrpc.c

1131

if (copy_from_user(dst, (void __user *)src,

drivers/misc/fastrpc.c

1187

if (copy_to_user((void __user *)dst, src, len)) {

drivers/misc/fastrpc.c

1339

char __user *argp)

drivers/misc/fastrpc.c

1460

char __user *argp)

drivers/misc/fastrpc.c

1688

static int fastrpc_dmabuf_alloc(struct fastrpc_user *fl, char __user *argp)

drivers/misc/fastrpc.c

1749

static int fastrpc_invoke(struct fastrpc_user *fl, char __user *argp)

drivers/misc/fastrpc.c

1766

if (copy_from_user(args, (void __user *)(uintptr_t)inv.args,

drivers/misc/fastrpc.c

1846

static int fastrpc_get_dsp_info(struct fastrpc_user *fl, char __user *argp)

drivers/misc/fastrpc.c

1903

static int fastrpc_req_munmap(struct fastrpc_user *fl, char __user *argp)

drivers/misc/fastrpc.c

1930

static int fastrpc_req_mmap(struct fastrpc_user *fl, char __user *argp)

drivers/misc/fastrpc.c

2016

if (copy_to_user((void __user *)argp, &req, sizeof(req))) {

drivers/misc/fastrpc.c

2076

static int fastrpc_req_mem_unmap(struct fastrpc_user *fl, char __user *argp)

drivers/misc/fastrpc.c

2086

static int fastrpc_req_mem_map(struct fastrpc_user *fl, char __user *argp)

drivers/misc/fastrpc.c

2147

if (copy_to_user((void __user *)argp, &req, sizeof(req))) {

drivers/misc/fastrpc.c

2167

char __user *argp = (char __user *)arg;

drivers/misc/genwqe/card_base.h

351

void __user *user_addr; /* user-space base-address */

drivers/misc/genwqe/card_base.h

369

void __user *user_addr, size_t user_size, int write);

drivers/misc/genwqe/card_ddcb.c

938

if (copy_to_user((struct genwqe_debug_data __user *)

drivers/misc/genwqe/card_ddcb.c

962

if (copy_to_user((struct genwqe_debug_data __user *)

drivers/misc/genwqe/card_dev.c

1022

if (copy_from_user(cmd, (void __user *)arg, sizeof(*cmd))) {

drivers/misc/genwqe/card_dev.c

1034

if (copy_to_user((void __user *)arg, cmd,

drivers/misc/genwqe/card_dev.c

1059

struct genwqe_reg_io __user *io;

drivers/misc/genwqe/card_dev.c

1073

put_user(cd->card_state, (enum genwqe_card_state __user *)arg);

drivers/misc/genwqe/card_dev.c

1078

io = (struct genwqe_reg_io __user *)arg;

drivers/misc/genwqe/card_dev.c

1092

io = (struct genwqe_reg_io __user *)arg;

drivers/misc/genwqe/card_dev.c

1114

io = (struct genwqe_reg_io __user *)arg;

drivers/misc/genwqe/card_dev.c

1128

io = (struct genwqe_reg_io __user *)arg;

drivers/misc/genwqe/card_dev.c

1159

if (copy_from_user(&load, (void __user *)arg,

drivers/misc/genwqe/card_dev.c

1165

if (copy_to_user((void __user *)arg, &load, sizeof(load)))

drivers/misc/genwqe/card_dev.c

1180

if (copy_from_user(&load, (void __user *)arg, sizeof(load)))

drivers/misc/genwqe/card_dev.c

1185

if (copy_to_user((void __user *)arg, &load, sizeof(load)))

drivers/misc/genwqe/card_dev.c

1195

if (copy_from_user(&m, (void __user *)arg, sizeof(m)))

drivers/misc/genwqe/card_dev.c

1204

if (copy_from_user(&m, (void __user *)arg, sizeof(m)))

drivers/misc/genwqe/card_dev.c

510

u8 __user *buf;

drivers/misc/genwqe/card_dev.c

539

buf = (u8 __user *)load->data_addr;

drivers/misc/genwqe/card_dev.c

646

u8 __user *buf;

drivers/misc/genwqe/card_dev.c

675

buf = (u8 __user *)load->data_addr;

drivers/misc/genwqe/card_dev.c

959

(void __user *)u_addr,

drivers/misc/genwqe/card_utils.c

292

void __user *user_addr, size_t user_size, int write)

drivers/misc/hpilo.c

434

static ssize_t ilo_read(struct file *fp, char __user *buf,

drivers/misc/hpilo.c

484

static ssize_t ilo_write(struct file *fp, const char __user *buf,

drivers/misc/ibmasm/ibmasmfs.c

259

static ssize_t command_file_read(struct file *file, char __user *buf, size_t count, loff_t *offset)

drivers/misc/ibmasm/ibmasmfs.c

296

static ssize_t command_file_write(struct file *file, const char __user *ubuff, size_t count, loff_t *offset)

drivers/misc/ibmasm/ibmasmfs.c

375

static ssize_t event_file_read(struct file *file, char __user *buf, size_t count, loff_t *offset)

drivers/misc/ibmasm/ibmasmfs.c

418

static ssize_t event_file_write(struct file *file, const char __user *buf, size_t count, loff_t *offset)

drivers/misc/ibmasm/ibmasmfs.c

459

static ssize_t r_heartbeat_file_read(struct file *file, char __user *buf, size_t count, loff_t *offset)

drivers/misc/ibmasm/ibmasmfs.c

487

static ssize_t r_heartbeat_file_write(struct file *file, const char __user *buf, size_t count, loff_t *offset)

drivers/misc/ibmasm/ibmasmfs.c

509

static ssize_t remote_settings_file_read(struct file *file, char __user *buf, size_t count, loff_t *offset)

drivers/misc/ibmasm/ibmasmfs.c

522

static ssize_t remote_settings_file_write(struct file *file, const char __user *ubuff, size_t count, loff_t *offset)

drivers/misc/ibmvmc.c

1209

unsigned char __user *new_hmc_id)

drivers/misc/ibmvmc.c

1273

struct ibmvmc_query_struct __user *ret_struct)

drivers/misc/ibmvmc.c

1302

u32 __user *ret_vmc_index)

drivers/misc/ibmvmc.c

1375

(unsigned char __user *)arg);

drivers/misc/ibmvmc.c

1378

(struct ibmvmc_query_struct __user *)arg);

drivers/misc/ibmvmc.c

1381

(unsigned int __user *)arg);

drivers/misc/lis3lv02d/lis3lv02d.c

599

static ssize_t lis3lv02d_misc_read(struct file *file, char __user *buf,

drivers/misc/lkdtm/core.c

228

const char __user *user_buf,

drivers/misc/lkdtm/core.c

267

static ssize_t lkdtm_debugfs_read(struct file *f, char __user *user_buf,

drivers/misc/lkdtm/core.c

304

static ssize_t direct_entry(struct file *f, const char __user *user_buf,

drivers/misc/lkdtm/core.c

34

static ssize_t lkdtm_debugfs_read(struct file *f, char __user *user_buf,

drivers/misc/lkdtm/core.c

36

static ssize_t direct_entry(struct file *f, const char __user *user_buf,

drivers/misc/lkdtm/core.c

42

const char __user *user_buf,

drivers/misc/lkdtm/perms.c

244

if (copy_to_user((void __user *)user_addr, &tmp, sizeof(tmp))) {

drivers/misc/lkdtm/usercopy.c

112

if (copy_from_user(good_stack, (void __user *)user_addr,

drivers/misc/lkdtm/usercopy.c

119

if (copy_from_user(bad_stack, (void __user *)user_addr,

drivers/misc/lkdtm/usercopy.c

138

void __user *test_user_addr;

drivers/misc/lkdtm/usercopy.c

160

test_user_addr = (void __user *)(user_addr + 16);

drivers/misc/lkdtm/usercopy.c

206

unsigned char __user *user_addr;

drivers/misc/lkdtm/usercopy.c

232

user_addr = (void __user *)user_alloc;

drivers/misc/lkdtm/usercopy.c

325

if (copy_to_user((void __user *)user_addr, test_text,

drivers/misc/lkdtm/usercopy.c

333

if (copy_to_user((void __user *)user_addr, vm_mmap,

drivers/misc/lkdtm/usercopy.c

370

if (copy_to_user((void __user *)uaddr, kaddr,

drivers/misc/lkdtm/usercopy.c

378

if (copy_to_user((void __user *)uaddr, kaddr, unconst + PAGE_SIZE)) {

drivers/misc/lkdtm/usercopy.c

91

if (copy_to_user((void __user *)user_addr, good_stack,

drivers/misc/lkdtm/usercopy.c

98

if (copy_to_user((void __user *)user_addr, bad_stack,

drivers/misc/mei/debugfs.c

137

const char __user *user_buf,

drivers/misc/mei/main.c

176

static ssize_t mei_read(struct file *file, char __user *ubuf,

drivers/misc/mei/main.c

318

static ssize_t mei_write(struct file *file, const char __user *ubuf,

drivers/misc/mei/main.c

697

if (copy_from_user(&conn, (char __user *)data, sizeof(conn))) {

drivers/misc/mei/main.c

718

if (copy_to_user((char __user *)data, &conn, sizeof(conn))) {

drivers/misc/mei/main.c

728

if (copy_from_user(&conn_vtag, (char __user *)data,

drivers/misc/mei/main.c

757

if (copy_to_user((char __user *)data, &conn_vtag,

drivers/misc/mei/main.c

769

(char __user *)data, sizeof(notify_req))) {

drivers/misc/mei/main.c

784

if (copy_to_user((char __user *)data,

drivers/misc/mrvl_cn10k_dpi.c

483

static int dpi_mps_mrrs_config(struct dpipf *dpi, void __user *arg)

drivers/misc/mrvl_cn10k_dpi.c

518

static int dpi_engine_config(struct dpipf *dpi, void __user *arg)

drivers/misc/mrvl_cn10k_dpi.c

556

void __user *arg = (void __user *)data;

drivers/misc/nsm.c

356

void __user *argp = u64_to_user_ptr((u64)arg);

drivers/misc/ntsync.c

1016

struct ntsync_wait_args __user *user_args = argp;

drivers/misc/ntsync.c

1031

static int ntsync_wait_all(struct ntsync_device *dev, void __user *argp)

drivers/misc/ntsync.c

1132

struct ntsync_wait_args __user *user_args = argp;

drivers/misc/ntsync.c

1175

void __user *argp = (void __user *)parm;

drivers/misc/ntsync.c

408

static int ntsync_sem_release(struct ntsync_obj *sem, void __user *argp)

drivers/misc/ntsync.c

411

__u32 __user *user_args = argp;

drivers/misc/ntsync.c

457

static int ntsync_mutex_unlock(struct ntsync_obj *mutex, void __user *argp)

drivers/misc/ntsync.c

459

struct ntsync_mutex_args __user *user_args = argp;

drivers/misc/ntsync.c

509

static int ntsync_mutex_kill(struct ntsync_obj *mutex, void __user *argp)

drivers/misc/ntsync.c

516

if (get_user(owner, (__u32 __user *)argp))

drivers/misc/ntsync.c

538

static int ntsync_event_set(struct ntsync_obj *event, void __user *argp, bool pulse)

drivers/misc/ntsync.c

559

if (put_user(prev_state, (__u32 __user *)argp))

drivers/misc/ntsync.c

565

static int ntsync_event_reset(struct ntsync_obj *event, void __user *argp)

drivers/misc/ntsync.c

581

if (put_user(prev_state, (__u32 __user *)argp))

drivers/misc/ntsync.c

587

static int ntsync_sem_read(struct ntsync_obj *sem, void __user *argp)

drivers/misc/ntsync.c

589

struct ntsync_sem_args __user *user_args = argp;

drivers/misc/ntsync.c

609

static int ntsync_mutex_read(struct ntsync_obj *mutex, void __user *argp)

drivers/misc/ntsync.c

611

struct ntsync_mutex_args __user *user_args = argp;

drivers/misc/ntsync.c

633

static int ntsync_event_read(struct ntsync_obj *event, void __user *argp)

drivers/misc/ntsync.c

635

struct ntsync_event_args __user *user_args = argp;

drivers/misc/ntsync.c

671

void __user *argp = (void __user *)parm;

drivers/misc/ntsync.c

733

static int ntsync_create_sem(struct ntsync_device *dev, void __user *argp)

drivers/misc/ntsync.c

757

static int ntsync_create_mutex(struct ntsync_device *dev, void __user *argp)

drivers/misc/ntsync.c

781

static int ntsync_create_event(struct ntsync_device *dev, void __user *argp)

drivers/misc/ntsync.c

947

static int ntsync_wait_any(struct ntsync_device *dev, void __user *argp)

drivers/misc/ocxl/file.c

113

struct ocxl_ioctl_p9_wait __user *uarg)

drivers/misc/ocxl/file.c

157

struct ocxl_ioctl_features __user *uarg)

drivers/misc/ocxl/file.c

222

(struct ocxl_ioctl_attach __user *) args);

drivers/misc/ocxl/file.c

229

rc = copy_to_user((u64 __user *) args, &irq_offset,

drivers/misc/ocxl/file.c

239

rc = copy_from_user(&irq_offset, (u64 __user *) args,

drivers/misc/ocxl/file.c

248

rc = copy_from_user(&irq_fd, (u64 __user *) args,

drivers/misc/ocxl/file.c

265

(struct ocxl_ioctl_metadata __user *) args);

drivers/misc/ocxl/file.c

271

(struct ocxl_ioctl_p9_wait __user *) args);

drivers/misc/ocxl/file.c

277

(struct ocxl_ioctl_features __user *) args);

drivers/misc/ocxl/file.c

355

char __user *buf)

drivers/misc/ocxl/file.c

394

static ssize_t afu_read(struct file *file, char __user *buf, size_t count,

drivers/misc/ocxl/file.c

72

struct ocxl_ioctl_attach __user *uarg)

drivers/misc/ocxl/file.c

91

struct ocxl_ioctl_metadata __user *uarg)

drivers/misc/open-dice.c

64

static ssize_t open_dice_read(struct file *filp, char __user *ptr, size_t len,

drivers/misc/open-dice.c

76

static ssize_t open_dice_write(struct file *filp, const char __user *ptr,

drivers/misc/pci_endpoint_test.c

715

ret = copy_from_user(&param, (void __user *)arg, sizeof(param));

drivers/misc/pci_endpoint_test.c

848

ret = copy_from_user(&param, (void __user *)arg, sizeof(param));

drivers/misc/pci_endpoint_test.c

945

ret = copy_from_user(&param, (void __user *)arg, sizeof(param));

drivers/misc/phantom.c

94

void __user *argp = (void __user *)arg;

drivers/misc/sgi-gru/grufault.c

699

if (copy_from_user(&excdet, (void __user *)arg, sizeof(excdet)))

drivers/misc/sgi-gru/grufault.c

734

if (!ret && copy_to_user((void __user *)arg, &excdet, sizeof(excdet)))

drivers/misc/sgi-gru/grufault.c

773

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grufault.c

803

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grufault.c

828

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grufault.c

844

if (copy_to_user((void __user *)arg, &req, sizeof(req)))

drivers/misc/sgi-gru/grufault.c

861

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grufile.c

128

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grufile.c

174

if (copy_to_user((void __user *)arg, &info, sizeof(info)))

drivers/misc/sgi-gru/grukdump.c

108

void __user *ubuf, void __user *ubufend, char data_opt,

drivers/misc/sgi-gru/grukdump.c

112

struct gru_dump_context_header __user *uhdr = ubuf;

drivers/misc/sgi-gru/grukdump.c

179

void __user *ubuf;

drivers/misc/sgi-gru/grukdump.c

180

void __user *ubufend;

drivers/misc/sgi-gru/grukdump.c

183

if (copy_from_user(&req, (void __user *)arg, sizeof(req)))

drivers/misc/sgi-gru/grukdump.c

217

if (copy_to_user((void __user *)arg, &req, sizeof(req)))

drivers/misc/sgi-gru/grukdump.c

27

static int gru_user_copy_handle(void __user **dp, void *s)

drivers/misc/sgi-gru/grukdump.c

37

void __user *ubuf, int ctxnum, int dsrcnt,

drivers/misc/sgi-gru/grukdump.c

68

void __user *ubuf, void __user *ubufend)

drivers/misc/sgi-gru/grukdump.c

88

void __user *ubuf, void __user *ubufend)

drivers/misc/sgi-gru/gruprocfs.c

107

static ssize_t statistics_write(struct file *file, const char __user *userbuf,

drivers/misc/sgi-gru/gruprocfs.c

134

const char __user *userbuf, size_t count, loff_t *data)

drivers/misc/sgi-gru/gruprocfs.c

147

static ssize_t options_write(struct file *file, const char __user *userbuf,

drivers/misc/tps6594-pfsm.c

143

void __user *argp = (void __user *)arg;

drivers/misc/tps6594-pfsm.c

56

static ssize_t tps6594_pfsm_read(struct file *f, char __user *buf,

drivers/misc/tps6594-pfsm.c

86

static ssize_t tps6594_pfsm_write(struct file *f, const char __user *buf,

drivers/misc/vmw_vmci/vmci_host.c

200

static int drv_cp_harray_to_user(void __user *user_buf_uva,

drivers/misc/vmw_vmci/vmci_host.c

263

unsigned int cmd, void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

266

int __user *vptr = uptr;

drivers/misc/vmw_vmci/vmci_host.c

298

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

362

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

388

dg = memdup_user((void __user *)(uintptr_t)send_info.addr,

drivers/misc/vmw_vmci/vmci_host.c

417

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

437

void __user *ubuf = (void __user *)(uintptr_t)recv_info.addr;

drivers/misc/vmw_vmci/vmci_host.c

449

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

453

int __user *retptr;

drivers/misc/vmw_vmci/vmci_host.c

462

struct vmci_qp_alloc_info_vmvm __user *info = uptr;

drivers/misc/vmw_vmci/vmci_host.c

483

struct vmci_qp_alloc_info __user *info = uptr;

drivers/misc/vmw_vmci/vmci_host.c

518

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

521

struct vmci_qp_set_va_info __user *info = uptr;

drivers/misc/vmw_vmci/vmci_host.c

559

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

562

struct vmci_qp_page_file_info __user *info = uptr;

drivers/misc/vmw_vmci/vmci_host.c

637

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

640

struct vmci_qp_dtch_info __user *info = uptr;

drivers/misc/vmw_vmci/vmci_host.c

663

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

666

struct vmci_ctx_info __user *info = uptr;

drivers/misc/vmw_vmci/vmci_host.c

686

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

689

struct vmci_ctx_info __user *info = uptr;

drivers/misc/vmw_vmci/vmci_host.c

710

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

729

void __user *ubuf = (void __user *)(uintptr_t)get_info.cpt_buf;

drivers/misc/vmw_vmci/vmci_host.c

742

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

757

cpt_buf = memdup_user((void __user *)(uintptr_t)set_info.cpt_buf,

drivers/misc/vmw_vmci/vmci_host.c

774

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

776

u32 __user *u32ptr = uptr;

drivers/misc/vmw_vmci/vmci_host.c

783

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

810

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

860

void __user *uptr)

drivers/misc/vmw_vmci/vmci_host.c

865

void __user *ubuf;

drivers/misc/vmw_vmci/vmci_host.c

894

ubuf = (void __user *)(uintptr_t)info.db_handle_buf_uva;

drivers/misc/vmw_vmci/vmci_host.c

898

ubuf = (void __user *)(uintptr_t)info.qp_handle_buf_uva;

drivers/misc/vmw_vmci/vmci_host.c

924

void __user *uptr = (void __user *)ioarg;

drivers/misc/xilinx_sdfec.c

294

static int xsdfec_get_status(struct xsdfec_dev *xsdfec, void __user *arg)

drivers/misc/xilinx_sdfec.c

314

static int xsdfec_get_config(struct xsdfec_dev *xsdfec, void __user *arg)

drivers/misc/xilinx_sdfec.c

382

static int xsdfec_set_irq(struct xsdfec_dev *xsdfec, void __user *arg)

drivers/misc/xilinx_sdfec.c

409

static int xsdfec_set_turbo(struct xsdfec_dev *xsdfec, void __user *arg)

drivers/misc/xilinx_sdfec.c

436

static int xsdfec_get_turbo(struct xsdfec_dev *xsdfec, void __user *arg)

drivers/misc/xilinx_sdfec.c

655

static int xsdfec_add_ldpc(struct xsdfec_dev *xsdfec, void __user *arg)

drivers/misc/xilinx_sdfec.c

731

static int xsdfec_set_order(struct xsdfec_dev *xsdfec, void __user *arg)

drivers/misc/xilinx_sdfec.c

737

err = get_user(order, (enum xsdfec_order __user *)arg);

drivers/misc/xilinx_sdfec.c

757

static int xsdfec_set_bypass(struct xsdfec_dev *xsdfec, bool __user *arg)

drivers/misc/xilinx_sdfec.c

780

static int xsdfec_is_active(struct xsdfec_dev *xsdfec, bool __user *arg)

drivers/misc/xilinx_sdfec.c

906

static int xsdfec_get_stats(struct xsdfec_dev *xsdfec, void __user *arg)

drivers/misc/xilinx_sdfec.c

939

void __user *arg = (void __user *)data;

drivers/misc/xilinx_sdfec.c

992

rval = xsdfec_is_active(xsdfec, (bool __user *)arg);

drivers/mmc/core/block.c

2659

(struct mmc_ioc_cmd __user *)arg,

drivers/mmc/core/block.c

2664

(struct mmc_ioc_multi_cmd __user *)arg,

drivers/mmc/core/block.c

3095

static ssize_t mmc_ext_csd_read(struct file *filp, char __user *ubuf,

drivers/mmc/core/block.c

420

struct mmc_ioc_cmd __user *user)

drivers/mmc/core/block.c

447

idata->buf = memdup_user((void __user *)(unsigned long)

drivers/mmc/core/block.c

462

static int mmc_blk_ioctl_copy_to_user(struct mmc_ioc_cmd __user *ic_ptr,

drivers/mmc/core/block.c

472

if (copy_to_user((void __user *)(unsigned long)ic->data_ptr,

drivers/mmc/core/block.c

667

struct mmc_ioc_cmd __user *ic_ptr,

drivers/mmc/core/block.c

717

struct mmc_ioc_multi_cmd __user *user,

drivers/mmc/core/block.c

721

struct mmc_ioc_cmd __user *cmds = user->cmds;

drivers/mmc/core/block.c

822

(struct mmc_ioc_cmd __user *)arg,

drivers/mmc/core/block.c

834

(struct mmc_ioc_multi_cmd __user *)arg,

drivers/mmc/core/debugfs.c

286

static ssize_t mmc_err_stats_write(struct file *filp, const char __user *ubuf,

drivers/mmc/core/mmc_test.c

3078

static ssize_t mtf_test_write(struct file *file, const char __user *buf,

drivers/most/most_cdev.c

185

static ssize_t comp_write(struct file *filp, const char __user *buf,

drivers/most/most_cdev.c

240

comp_read(struct file *filp, char __user *buf, size_t count, loff_t *offset)

drivers/mtd/mtdchar.c

1003

struct mtd_oob_buf64 __user *buf_user = argp;

drivers/mtd/mtdchar.c

1009

(void __user *)(uintptr_t)buf.usr_ptr,

drivers/mtd/mtdchar.c

1017

(struct mtd_write_req __user *)arg);

drivers/mtd/mtdchar.c

1024

(struct mtd_read_req __user *)arg);

drivers/mtd/mtdchar.c

1212

struct blkpg_ioctl_arg __user *blk_arg = argp;

drivers/mtd/mtdchar.c

1264

void __user *argp = compat_ptr(arg);

drivers/mtd/mtdchar.c

127

static ssize_t mtdchar_read(struct file *file, char __user *buf, size_t count,

drivers/mtd/mtdchar.c

1273

struct mtd_oob_buf32 __user *buf_user = argp;

drivers/mtd/mtdchar.c

1292

struct mtd_oob_buf32 __user *buf_user = argp;

drivers/mtd/mtdchar.c

1307

struct blkpg_compat_ioctl_arg __user *uarg = argp;

drivers/mtd/mtdchar.c

217

static ssize_t mtdchar_write(struct file *file, const char __user *buf, size_t count,

drivers/mtd/mtdchar.c

341

uint64_t start, uint32_t length, void __user *ptr,

drivers/mtd/mtdchar.c

342

uint32_t __user *retp)

drivers/mtd/mtdchar.c

383

uint64_t start, uint32_t length, void __user *ptr,

drivers/mtd/mtdchar.c

384

uint32_t __user *retp)

drivers/mtd/mtdchar.c

594

mtdchar_write_ioctl(struct mtd_info *mtd, struct mtd_write_req __user *argp)

drivers/mtd/mtdchar.c

598

const void __user *usr_data, *usr_oob;

drivers/mtd/mtdchar.c

607

usr_data = (const void __user *)(uintptr_t)req.usr_data;

drivers/mtd/mtdchar.c

608

usr_oob = (const void __user *)(uintptr_t)req.usr_oob;

drivers/mtd/mtdchar.c

693

mtdchar_read_ioctl(struct mtd_info *mtd, struct mtd_read_req __user *argp)

drivers/mtd/mtdchar.c

697

void __user *usr_data, *usr_oob;

drivers/mtd/mtdchar.c

710

usr_data = (void __user *)(uintptr_t)req.usr_data;

drivers/mtd/mtdchar.c

711

usr_oob = (void __user *)(uintptr_t)req.usr_oob;

drivers/mtd/mtdchar.c

829

void __user *argp = (void __user *)arg;

drivers/mtd/mtdchar.c

889

struct region_info_user __user *ur = argp;

drivers/mtd/mtdchar.c

961

struct mtd_oob_buf __user *buf_user = argp;

drivers/mtd/mtdchar.c

975

struct mtd_oob_buf __user *buf_user = argp;

drivers/mtd/mtdchar.c

989

struct mtd_oob_buf64 __user *buf_user = argp;

drivers/mtd/mtdchar.c

995

(void __user *)(uintptr_t)buf.usr_ptr,

drivers/mtd/ubi/cdev.c

1033

err = get_user(pnum, (__user int32_t *)argp);

drivers/mtd/ubi/cdev.c

1048

err = get_user(pnum, (__user int32_t *)argp);

drivers/mtd/ubi/cdev.c

1077

void __user *argp = (void __user *)arg;

drivers/mtd/ubi/cdev.c

1121

err = put_user(err, (__user int32_t *)argp);

drivers/mtd/ubi/cdev.c

1132

err = get_user(ubi_num, (__user int32_t *)argp);

drivers/mtd/ubi/cdev.c

171

static ssize_t vol_cdev_read(struct file *file, __user char *buf, size_t count,

drivers/mtd/ubi/cdev.c

248

static ssize_t vol_cdev_direct_write(struct file *file, const char __user *buf,

drivers/mtd/ubi/cdev.c

323

static ssize_t vol_cdev_write(struct file *file, const char __user *buf,

drivers/mtd/ubi/cdev.c

385

void __user *argp = (void __user *)arg;

drivers/mtd/ubi/cdev.c

467

err = get_user(lnum, (__user int32_t *)argp);

drivers/mtd/ubi/cdev.c

512

err = get_user(lnum, (__user int32_t *)argp);

drivers/mtd/ubi/cdev.c

526

err = get_user(lnum, (__user int32_t *)argp);

drivers/mtd/ubi/cdev.c

831

static int ubi_get_ec_info(struct ubi_device *ubi, struct ubi_ecinfo_req __user *ureq)

drivers/mtd/ubi/cdev.c

854

if (!access_ok((void __user *)ureq->erase_counters,

drivers/mtd/ubi/cdev.c

901

void __user *argp = (void __user *)arg;

drivers/mtd/ubi/cdev.c

933

err = put_user(req.vol_id, (__user int32_t *)argp);

drivers/mtd/ubi/cdev.c

946

err = get_user(vol_id, (__user int32_t *)argp);

drivers/mtd/ubi/debug.c

328

static ssize_t dfs_file_read(struct file *file, char __user *user_buf,

drivers/mtd/ubi/debug.c

395

static ssize_t dfs_file_write(struct file *file, const char __user *user_buf,

drivers/mtd/ubi/ubi.h

854

const void __user *buf, int count);

drivers/mtd/ubi/ubi.h

858

const void __user *buf, int count);

drivers/mtd/ubi/upd.c

266

const void __user *buf, int count)

drivers/mtd/ubi/upd.c

381

const void __user *buf, int count)

drivers/net/bonding/bond_main.c

4590

struct ifbond __user *u_binfo = NULL;

drivers/net/bonding/bond_main.c

4592

struct ifslave __user *u_sinfo = NULL;

drivers/net/bonding/bond_main.c

4601

u_binfo = (struct ifbond __user *)ifr->ifr_data;

drivers/net/bonding/bond_main.c

4612

u_sinfo = (struct ifslave __user *)ifr->ifr_data;

drivers/net/bonding/bond_main.c

4662

void __user *data, int cmd)

drivers/net/can/can327.c

1094

if (copy_to_user((void __user *)arg, elm->dev->name, tmp))

drivers/net/can/slcan/slcan-core.c

908

if (copy_to_user((void __user *)arg, sl->dev->name, tmp))

drivers/net/eql.c

136

void __user *data, int cmd);

drivers/net/eql.c

264

static int eql_enslave(struct net_device *dev, slaving_request_t __user *srq);

drivers/net/eql.c

265

static int eql_emancipate(struct net_device *dev, slaving_request_t __user *srq);

drivers/net/eql.c

267

static int eql_g_slave_cfg(struct net_device *dev, slave_config_t __user *sc);

drivers/net/eql.c

268

static int eql_s_slave_cfg(struct net_device *dev, slave_config_t __user *sc);

drivers/net/eql.c

270

static int eql_g_master_cfg(struct net_device *dev, master_config_t __user *mc);

drivers/net/eql.c

271

static int eql_s_master_cfg(struct net_device *dev, master_config_t __user *mc);

drivers/net/eql.c

274

void __user *data, int cmd)

drivers/net/eql.c

413

static int eql_enslave(struct net_device *master_dev, slaving_request_t __user *srqp)

drivers/net/eql.c

454

static int eql_emancipate(struct net_device *master_dev, slaving_request_t __user *srqp)

drivers/net/eql.c

482

static int eql_g_slave_cfg(struct net_device *dev, slave_config_t __user *scp)

drivers/net/eql.c

515

static int eql_s_slave_cfg(struct net_device *dev, slave_config_t __user *scp)

drivers/net/eql.c

548

static int eql_g_master_cfg(struct net_device *dev, master_config_t __user *mcp)

drivers/net/eql.c

566

static int eql_s_master_cfg(struct net_device *dev, master_config_t __user *mcp)

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

125

static ssize_t xpcs_mmd_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

133

static ssize_t xpcs_mmd_write(struct file *filp, const char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

142

static ssize_t xpcs_reg_addr_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

15

static ssize_t xgbe_common_read(char __user *buffer, size_t count,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

150

static ssize_t xpcs_reg_addr_write(struct file *filp, const char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

159

static ssize_t xpcs_reg_value_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

172

const char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

210

static ssize_t xprop_reg_addr_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

219

const char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

228

static ssize_t xprop_reg_value_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

240

const char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

270

static ssize_t xi2c_reg_addr_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

279

const char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

288

static ssize_t xi2c_reg_value_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

300

const char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

39

static ssize_t xgbe_common_write(const char __user *buffer, size_t count,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

65

static ssize_t xgmac_reg_addr_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

74

const char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

83

static ssize_t xgmac_reg_value_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/amd/xgbe/xgbe-debugfs.c

95

const char __user *buffer,

drivers/net/ethernet/broadcom/bnxt/bnxt_coredump.c

262

(char __user *)mm->arg_start, len)) {

drivers/net/ethernet/broadcom/bnxt/bnxt_debugfs.c

21

char __user *buffer,

drivers/net/ethernet/brocade/bna/bnad_debugfs.c

232

bnad_debugfs_read(struct file *file, char __user *buf,

drivers/net/ethernet/brocade/bna/bnad_debugfs.c

278

bnad_debugfs_read_regrd(struct file *file, char __user *buf,

drivers/net/ethernet/brocade/bna/bnad_debugfs.c

301

bnad_debugfs_write_regrd(struct file *file, const char __user *buf,

drivers/net/ethernet/brocade/bna/bnad_debugfs.c

362

bnad_debugfs_write_regwr(struct file *file, const char __user *buf,

drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c

2135

void __user *useraddr,

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

1278

static ssize_t mbox_write(struct file *file, const char __user *buf,

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

1411

static ssize_t mps_trc_write(struct file *file, const char __user *buf,

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

1619

static ssize_t flash_read(struct file *file, char __user *buf, size_t count,

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

2197

static ssize_t rss_key_write(struct file *file, const char __user *buf,

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

3268

static ssize_t mem_read(struct file *file, char __user *buf, size_t count,

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

3404

static ssize_t blocked_fl_read(struct file *filp, char __user *ubuf,

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

3425

static ssize_t blocked_fl_write(struct file *filp, const char __user *ubuf,

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

663

static ssize_t tp_la_write(struct file *file, const char __user *buf,

drivers/net/ethernet/chelsio/cxgb4/cxgb4_debugfs.c

802

static ssize_t pm_stats_clear(struct file *file, const char __user *buf,

drivers/net/ethernet/huawei/hinic/hinic_debugfs.c

136

static ssize_t hinic_dbg_cmd_read(struct file *filp, char __user *buffer, size_t count,

drivers/net/ethernet/intel/i40e/i40e_debugfs.c

1597

const char __user *buffer,

drivers/net/ethernet/intel/i40e/i40e_debugfs.c

712

const char __user *buffer,

drivers/net/ethernet/intel/ixgbe/ixgbe_debugfs.c

13

static ssize_t ixgbe_dbg_common_ops_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/intel/ixgbe/ixgbe_debugfs.c

131

static ssize_t ixgbe_dbg_netdev_ops_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/intel/ixgbe/ixgbe_debugfs.c

146

const char __user *buffer,

drivers/net/ethernet/intel/ixgbe/ixgbe_debugfs.c

48

static ssize_t ixgbe_dbg_reg_ops_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/intel/ixgbe/ixgbe_debugfs.c

63

const char __user *buffer,

drivers/net/ethernet/intel/libie/fwlog.c

416

libie_debugfs_module_write(struct file *filp, const char __user *buf,

drivers/net/ethernet/intel/libie/fwlog.c

487

char __user *buffer, size_t count,

drivers/net/ethernet/intel/libie/fwlog.c

507

libie_debugfs_nr_messages_write(struct file *filp, const char __user *buf,

drivers/net/ethernet/intel/libie/fwlog.c

568

char __user *buffer, size_t count,

drivers/net/ethernet/intel/libie/fwlog.c

589

libie_debugfs_enable_write(struct file *filp, const char __user *buf,

drivers/net/ethernet/intel/libie/fwlog.c

665

char __user *buffer, size_t count,

drivers/net/ethernet/intel/libie/fwlog.c

686

libie_debugfs_log_size_write(struct file *filp, const char __user *buf,

drivers/net/ethernet/intel/libie/fwlog.c

756

static ssize_t libie_debugfs_data_read(struct file *filp, char __user *buffer,

drivers/net/ethernet/intel/libie/fwlog.c

803

libie_debugfs_data_write(struct file *filp, const char __user *buf, size_t count,

drivers/net/ethernet/jme.h

69

void __user *uwbuf;

drivers/net/ethernet/jme.h

70

void __user *urbuf;

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

1028

const char __user *buffer, size_t count,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

1080

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

1337

const char __user *buffer, int *npalf,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

1375

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

1407

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

1422

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

1727

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

1984

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

2445

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

2495

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

2510

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

2525

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

2568

const char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

554

char __user *buffer,

drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c

718

char __user *buffer,

drivers/net/ethernet/mellanox/mlx4/cq.c

310

err = copy_to_user((void __user *)buf, init_ents, PAGE_SIZE) ?

drivers/net/ethernet/mellanox/mlx4/cq.c

324

err = copy_to_user((void __user *)buf, init_ents,

drivers/net/ethernet/mellanox/mlx5/core/cmd.c

1337

static ssize_t dbg_write(struct file *filp, const char __user *buf,

drivers/net/ethernet/mellanox/mlx5/core/cmd.c

1526

static ssize_t data_write(struct file *filp, const char __user *buf,

drivers/net/ethernet/mellanox/mlx5/core/cmd.c

1550

static ssize_t data_read(struct file *filp, char __user *buf, size_t count,

drivers/net/ethernet/mellanox/mlx5/core/cmd.c

1570

static ssize_t outlen_read(struct file *filp, char __user *buf, size_t count,

drivers/net/ethernet/mellanox/mlx5/core/cmd.c

1585

static ssize_t outlen_write(struct file *filp, const char __user *buf,

drivers/net/ethernet/mellanox/mlx5/core/debugfs.c

129

static ssize_t average_read(struct file *filp, char __user *buf, size_t count,

drivers/net/ethernet/mellanox/mlx5/core/debugfs.c

146

static ssize_t reset_write(struct file *filp, const char __user *buf,

drivers/net/ethernet/mellanox/mlx5/core/debugfs.c

179

static ssize_t slots_read(struct file *filp, char __user *buf, size_t count,

drivers/net/ethernet/mellanox/mlx5/core/debugfs.c

494

static ssize_t dbg_read(struct file *filp, char __user *buf, size_t count,

drivers/net/ethernet/mellanox/mlx5/core/lib/sd.c

755

static ssize_t dev_read(struct file *filp, char __user *buf, size_t count,

drivers/net/ethernet/microsoft/mana/mana_en.c

38

static ssize_t mana_dbg_q_read(struct file *filp, char __user *buf, size_t count,

drivers/net/ethernet/qualcomm/ppe/ppe_debugfs.c

716

const char __user *buf,

drivers/net/ethernet/tehuti/tehuti.c

641

void __user *udata, int cmd)

drivers/net/fddi/skfp/h/targetos.h

108

unsigned char __user *data; /* Pointer to the data buffer */

drivers/net/fddi/skfp/skfddi.c

109

void __user *data, int cmd);

drivers/net/fddi/skfp/skfddi.c

961

static int skfp_siocdevprivate(struct net_device *dev, struct ifreq *rq, void __user *data, int cmd)

drivers/net/ieee802154/ca8210.c

2445

const char __user *in_buf,

drivers/net/ieee802154/ca8210.c

2520

char __user *buf,

drivers/net/netdevsim/dev.c

139

char __user *data,

drivers/net/netdevsim/dev.c

174

const char __user *data,

drivers/net/netdevsim/dev.c

228

static ssize_t nsim_bus_dev_max_vfs_read(struct file *file, char __user *data,

drivers/net/netdevsim/dev.c

242

const char __user *data,

drivers/net/netdevsim/dev.c

376

char __user *data,

drivers/net/netdevsim/dev.c

98

const char __user *data,

drivers/net/netdevsim/fib.c

1365

const char __user *user_buf,

drivers/net/netdevsim/health.c

144

const char __user *data,

drivers/net/netdevsim/hwstats.c

337

const char __user *data,

drivers/net/netdevsim/ipsec.c

13

char __user *buffer,

drivers/net/netdevsim/netdev.c

862

nsim_qreset_write(struct file *file, const char __user *data,

drivers/net/netdevsim/netdev.c

905

nsim_pp_hold_read(struct file *file, char __user *data,

drivers/net/netdevsim/netdev.c

918

nsim_pp_hold_write(struct file *file, const char __user *data,

drivers/net/netdevsim/psample.c

172

const char __user *data,

drivers/net/netdevsim/psp.c

242

nsim_psp_rereg_write(struct file *file, const char __user *data, size_t count,

drivers/net/netdevsim/udp_tunnels.c

104

nsim_udp_tunnels_info_reset_write(struct file *file, const char __user *data,

drivers/net/netkit.c

818

int netkit_prog_query(const union bpf_attr *attr, union bpf_attr __user *uattr)

drivers/net/plip/plip.c

1217

void __user *data, int cmd)

drivers/net/plip/plip.c

155

void __user *data, int cmd);

drivers/net/ppp/ppp_async.c

288

int __user *p = (int __user *)arg;

drivers/net/ppp/ppp_async.c

397

void __user *argp = (void __user *)arg;

drivers/net/ppp/ppp_async.c

398

int __user *p = argp;

drivers/net/ppp/ppp_async.c

421

if (put_user(ap->xaccm[0], (u32 __user *)argp))

drivers/net/ppp/ppp_async.c

426

if (get_user(ap->xaccm[0], (u32 __user *)argp))

drivers/net/ppp/ppp_async.c

432

if (put_user(ap->raccm, (u32 __user *)argp))

drivers/net/ppp/ppp_async.c

437

if (get_user(ap->raccm, (u32 __user *)argp))

drivers/net/ppp/ppp_generic.c

1054

int __user *p = (int __user *)arg;

drivers/net/ppp/ppp_generic.c

1495

void __user *addr, int cmd)

drivers/net/ppp/ppp_generic.c

428

static ssize_t ppp_read(struct file *file, char __user *buf,

drivers/net/ppp/ppp_generic.c

507

static ssize_t ppp_write(struct file *file, const char __user *buf,

drivers/net/ppp/ppp_generic.c

602

static struct bpf_prog *ppp_get_filter(struct sock_fprog __user *p)

drivers/net/ppp/ppp_generic.c

620

static struct bpf_prog *compat_ppp_get_filter(struct sock_fprog32 __user *p)

drivers/net/ppp/ppp_generic.c

724

void __user *argp = (void __user *)arg;

drivers/net/ppp/ppp_generic.c

725

int __user *p = argp;

drivers/net/ppp/ppp_generic.c

988

void __user *argp = (void __user *)arg;

drivers/net/ppp/ppp_synctty.c

279

int __user *p = (int __user *)arg;

drivers/net/ppp/ppp_synctty.c

391

void __user *argp = (void __user *)arg;

drivers/net/ppp/ppp_synctty.c

392

u32 __user *p = argp;

drivers/net/ppp/ppp_synctty.c

398

if (put_user(val, (int __user *) argp))

drivers/net/ppp/ppp_synctty.c

403

if (get_user(val, (int __user *) argp))

drivers/net/ppp/ppp_synctty.c

449

if (put_user(ap->mru, (int __user *) argp))

drivers/net/ppp/ppp_synctty.c

454

if (get_user(val, (int __user *) argp))

drivers/net/ppp/pppoe.c

732

(int __user *)arg))

drivers/net/ppp/pppoe.c

743

if (get_user(val, (int __user *)arg))

drivers/net/ppp/pppoe.c

756

if (get_user(val, (int __user *)arg))

drivers/net/ppp/pppox.c

84

if (put_user(index , (int __user *) arg))

drivers/net/ppp/pptp.c

586

void __user *argp = (void __user *)arg;

drivers/net/ppp/pptp.c

587

int __user *p = argp;

drivers/net/slip/slip.c

1084

int __user *p = (int __user *)arg;

drivers/net/slip/slip.c

1093

if (copy_to_user((void __user *)arg, sl->dev->name, tmp))

drivers/net/slip/slip.c

112

static int sl_siocdevprivate(struct net_device *dev, struct ifreq *rq, void __user *data, int cmd);

drivers/net/slip/slip.c

1191

void __user *data, int cmd)

drivers/net/tap.c

921

void __user *argp = (void __user *)arg;

drivers/net/tap.c

923

struct ifreq __user *ifr = argp;

drivers/net/tap.c

924

unsigned int __user *up = argp;

drivers/net/tap.c

926

int __user *sp = argp;

drivers/net/tun.c

2988

void __user *data)

drivers/net/tun.c

3052

void __user* argp = (void __user*)arg;

drivers/net/tun.c

3075

TUN_FEATURES, (unsigned int __user*)argp);

drivers/net/tun.c

3230

ret = update_filter(&tun->txflt, (void __user *)arg);

drivers/net/tun.c

816

static int update_filter(struct tap_filter *filter, void __user *arg)

drivers/net/tun_vnet.h

19

static inline long tun_get_vnet_be(unsigned int flags, int __user *argp)

drivers/net/tun_vnet.h

32

static inline long tun_set_vnet_be(unsigned int *flags, int __user *argp)

drivers/net/tun_vnet.h

66

unsigned int cmd, int __user *sp)

drivers/net/usb/cdc-phonet.c

262

void __user *data, int cmd)

drivers/net/usb/pegasus.c

1026

void __user *udata, int cmd)

drivers/net/usb/rtl8150.c

849

void __user *udata, int cmd)

drivers/net/wan/c101.c

212

void __user *data, int cmd)

drivers/net/wan/c101.c

235

sync_serial_settings __user *line = ifs->ifs_ifsu.sync;

drivers/net/wan/farsync.c

1905

fst_siocdevprivate(struct net_device *dev, struct ifreq *ifr, void __user *data, int cmd)

drivers/net/wan/hdlc_cisco.c

311

cisco_proto __user *cisco_s = ifs->ifs_ifsu.cisco;

drivers/net/wan/hdlc_fr.c

1186

fr_proto __user *fr_s = ifs->ifs_ifsu.fr;

drivers/net/wan/hdlc_raw.c

38

raw_hdlc_proto __user *raw_s = ifs->ifs_ifsu.raw_hdlc;

drivers/net/wan/hdlc_raw_eth.c

53

raw_hdlc_proto __user *raw_s = ifs->ifs_ifsu.raw_hdlc;

drivers/net/wan/hdlc_x25.c

279

x25_hdlc_proto __user *x25_s = ifs->ifs_ifsu.x25;

drivers/net/wan/ixp4xx_hss.c

1311

sync_serial_settings __user *line = ifs->ifs_ifsu.sync;

drivers/net/wan/n2.c

231

void __user *data, int cmd)

drivers/net/wan/n2.c

246

sync_serial_settings __user *line = ifs->ifs_ifsu.sync;

drivers/net/wan/pc300too.c

178

void __user *data, int cmd)

drivers/net/wan/pc300too.c

193

sync_serial_settings __user *line = ifs->ifs_ifsu.sync;

drivers/net/wan/pci200syn.c

171

void __user *data, int cmd)

drivers/net/wan/pci200syn.c

186

sync_serial_settings __user *line = ifs->ifs_ifsu.sync;

drivers/net/wireless/ath/ath10k/debug.c

1022

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

1036

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

1303

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

1320

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

1353

static ssize_t ath10k_read_ani_enable(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

1381

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

1394

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

153

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

1677

static ssize_t ath10k_tpc_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

1764

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

1798

static ssize_t ath10k_read_dfs_stats(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

1853

const char __user *ubuf,

drivers/net/wireless/ath/ath10k/debug.c

1899

static ssize_t ath10k_read_pktlog_filter(struct file *file, char __user *ubuf,

drivers/net/wireless/ath/ath10k/debug.c

1921

const char __user *ubuf,

drivers/net/wireless/ath/ath10k/debug.c

1943

static ssize_t ath10k_read_quiet_period(struct file *file, char __user *ubuf,

drivers/net/wireless/ath/ath10k/debug.c

1965

const char __user *ubuf,

drivers/net/wireless/ath/ath10k/debug.c

2020

static ssize_t ath10k_read_btcoex(struct file *file, char __user *ubuf,

drivers/net/wireless/ath/ath10k/debug.c

2042

const char __user *ubuf,

drivers/net/wireless/ath/ath10k/debug.c

2074

char __user *ubuf,

drivers/net/wireless/ath/ath10k/debug.c

2097

const char __user *ubuf,

drivers/net/wireless/ath/ath10k/debug.c

2136

static ssize_t ath10k_read_peer_stats(struct file *file, char __user *ubuf,

drivers/net/wireless/ath/ath10k/debug.c

2159

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

2214

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

2226

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

2322

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

2340

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

2394

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

2438

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

2462

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

446

static ssize_t ath10k_fw_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

464

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

524

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

545

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

616

static ssize_t ath10k_read_chip_id(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

636

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

654

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

684

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

715

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

755

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

807

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

907

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

920

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

960

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debug.c

980

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debugfs_sta.c

177

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debugfs_sta.c

196

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debugfs_sta.c

239

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debugfs_sta.c

290

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debugfs_sta.c

340

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debugfs_sta.c

391

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debugfs_sta.c

411

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/debugfs_sta.c

454

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debugfs_sta.c

564

char __user *user_buf,

drivers/net/wireless/ath/ath10k/debugfs_sta.c

647

char __user *user_buf,

drivers/net/wireless/ath/ath10k/spectral.c

273

static ssize_t read_file_spec_scan_ctl(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath10k/spectral.c

302

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/spectral.c

365

char __user *user_buf,

drivers/net/wireless/ath/ath10k/spectral.c

382

const char __user *user_buf,

drivers/net/wireless/ath/ath10k/spectral.c

412

char __user *user_buf,

drivers/net/wireless/ath/ath10k/spectral.c

433

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/cfr.c

633

char __user *user_buf,

drivers/net/wireless/ath/ath11k/cfr.c

648

const char __user *ubuf,

drivers/net/wireless/ath/ath11k/cfr.c

691

const char __user *ubuf,

drivers/net/wireless/ath/ath11k/cfr.c

773

char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

1079

char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

1103

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

1122

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

1231

const char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

1283

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

1314

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

1348

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

1401

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

1447

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

1552

const char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

1628

const char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

1675

const char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

1714

const char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

179

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

250

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

334

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

352

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

371

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

440

const char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

471

char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

494

const char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

570

char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs.c

658

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

735

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

823

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs.c

947

const char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs_htt_stats.c

4605

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_htt_stats.c

4618

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_htt_stats.c

4816

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_htt_stats.c

4837

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_htt_stats.c

4850

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

136

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

244

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

342

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

377

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

526

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

547

const char __user *buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

587

char __user *ubuf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

614

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

665

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

715

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

766

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

786

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

831

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

890

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

916

char __user *user_buf,

drivers/net/wireless/ath/ath11k/debugfs_sta.c

951

char __user *user_buf,

drivers/net/wireless/ath/ath11k/spectral.c

270

char __user *user_buf,

drivers/net/wireless/ath/ath11k/spectral.c

299

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/spectral.c

364

char __user *user_buf,

drivers/net/wireless/ath/ath11k/spectral.c

381

const char __user *user_buf,

drivers/net/wireless/ath/ath11k/spectral.c

411

char __user *user_buf,

drivers/net/wireless/ath/ath11k/spectral.c

431

const char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

1026

char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

107

const char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

1308

char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

1375

char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

14

const char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

1436

char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

1455

const char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

37

char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

49

const char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

784

char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs.c

815

const char __user *ubuf,

drivers/net/wireless/ath/ath12k/debugfs.c

885

char __user *ubuf,

drivers/net/wireless/ath/ath12k/debugfs.c

998

char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs_htt_stats.c

6166

char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs_htt_stats.c

6184

const char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs_htt_stats.c

6352

char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs_htt_stats.c

6373

const char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs_sta.c

140

char __user *user_buf,

drivers/net/wireless/ath/ath12k/debugfs_sta.c

254

const char __user *buf,

drivers/net/wireless/ath/ath5k/debug.c

175

static ssize_t read_file_beacon(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath5k/debug.c

224

const char __user *userbuf,

drivers/net/wireless/ath/ath5k/debug.c

257

const char __user *userbuf,

drivers/net/wireless/ath/ath5k/debug.c

296

static ssize_t read_file_debug(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath5k/debug.c

325

const char __user *userbuf,

drivers/net/wireless/ath/ath5k/debug.c

358

static ssize_t read_file_antenna(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath5k/debug.c

430

const char __user *userbuf,

drivers/net/wireless/ath/ath5k/debug.c

471

static ssize_t read_file_misc(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath5k/debug.c

526

static ssize_t read_file_frameerrors(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath5k/debug.c

603

const char __user *userbuf,

drivers/net/wireless/ath/ath5k/debug.c

644

static ssize_t read_file_ani(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath5k/debug.c

753

const char __user *userbuf,

drivers/net/wireless/ath/ath5k/debug.c

809

static ssize_t read_file_queue(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath5k/debug.c

851

const char __user *userbuf,

drivers/net/wireless/ath/ath5k/debug.c

951

static ssize_t read_file_eeprom(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1004

static ssize_t ath6kl_regdump_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1026

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1046

char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1067

char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1081

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1161

static ssize_t ath6kl_roam_table_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1233

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1265

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1309

static ssize_t ath6kl_keepalive_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1322

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1354

char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1367

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1394

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1572

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1619

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1659

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1691

char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

1717

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

301

static ssize_t read_file_war_stats(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

399

static ssize_t ath6kl_fwlog_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

451

char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

526

static ssize_t ath6kl_fwlog_mask_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

539

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

566

static ssize_t read_file_tgt_stats(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

705

char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

783

char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

838

const char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

893

static ssize_t ath6kl_regread_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath6kl/debug.c

911

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-debug.c

124

static ssize_t read_file_recv(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-debug.c

188

static ssize_t read_file_phy_err(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-debug.c

20

static ssize_t read_file_modal_eeprom(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-debug.c

56

static ssize_t read_file_base_eeprom(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-spectral.c

690

static ssize_t read_file_spec_scan_ctl(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-spectral.c

791

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-spectral.c

842

char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-spectral.c

854

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-spectral.c

885

char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-spectral.c

897

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-spectral.c

927

char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-spectral.c

939

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-spectral.c

970

char __user *user_buf,

drivers/net/wireless/ath/ath9k/common-spectral.c

982

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

1014

static ssize_t read_file_btcoex(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

1049

static ssize_t read_file_ackto(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

1073

static ssize_t read_file_wow(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

1097

static ssize_t write_file_wow(struct file *file, const char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

1129

static ssize_t read_file_tpc(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

1154

static ssize_t write_file_tpc(struct file *file, const char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

1192

char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

1209

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

127

static ssize_t read_file_ani(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

183

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

221

char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

234

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

285

char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

71

static ssize_t ath9k_debugfs_read_buf(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

774

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

854

static ssize_t read_file_regidx(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

86

static ssize_t read_file_debug(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

865

static ssize_t write_file_regidx(struct file *file, const char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

888

static ssize_t read_file_regval(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

904

static ssize_t write_file_regval(struct file *file, const char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug.c

98

static ssize_t write_file_debug(struct file *file, const char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug_sta.c

168

static ssize_t read_file_node_recv(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/debug_sta.c

23

static ssize_t read_file_node_aggr(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/dfs_debug.c

114

const char __user *user_buf,

drivers/net/wireless/ath/ath9k/dfs_debug.c

34

static ssize_t read_file_dfs(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/dfs_debug.c

97

static ssize_t write_file_dfs(struct file *file, const char __user *user_buf,

drivers/net/wireless/ath/ath9k/htc_drv_debug.c

147

static ssize_t read_file_tgt_rx_stats(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/htc_drv_debug.c

19

static ssize_t read_file_tgt_int_stats(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/htc_drv_debug.c

193

static ssize_t read_file_xmit(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/htc_drv_debug.c

251

static ssize_t read_file_skb_rx(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/htc_drv_debug.c

289

static ssize_t read_file_slot(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/htc_drv_debug.c

313

static ssize_t read_file_queue(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/htc_drv_debug.c

360

static ssize_t read_file_debug(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/htc_drv_debug.c

372

static ssize_t write_file_debug(struct file *file, const char __user *user_buf,

drivers/net/wireless/ath/ath9k/htc_drv_debug.c

77

static ssize_t read_file_tgt_tx_stats(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/tx99.c

159

static ssize_t read_file_tx99(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/ath9k/tx99.c

170

static ssize_t write_file_tx99(struct file *file, const char __user *user_buf,

drivers/net/wireless/ath/ath9k/tx99.c

222

char __user *user_buf,

drivers/net/wireless/ath/ath9k/tx99.c

237

const char __user *user_buf,

drivers/net/wireless/ath/carl9170/debug.c

112

const char __user *userbuf, size_t count, loff_t *ppos)

drivers/net/wireless/ath/carl9170/debug.c

61

static ssize_t carl9170_debugfs_read(struct file *file, char __user *userbuf,

drivers/net/wireless/ath/wcn36xx/debug.c

100

const char __user *user_buf,

drivers/net/wireless/ath/wcn36xx/debug.c

141

char __user *user_buf,

drivers/net/wireless/ath/wcn36xx/debug.c

28

static ssize_t read_file_bool_bmps(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/wcn36xx/debug.c

53

const char __user *user_buf,

drivers/net/wireless/ath/wil6210/debugfs.c

1004

static ssize_t wil_write_file_wmi(struct file *file, const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

1487

static ssize_t wil_read_file_recovery(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/wil6210/debugfs.c

1506

const char __user *buf_,

drivers/net/wireless/ath/wil6210/debugfs.c

1769

static ssize_t wil_tx_latency_write(struct file *file, const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

1933

static ssize_t wil_link_stats_write(struct file *file, const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

2012

wil_link_stats_global_write(struct file *file, const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

2044

static ssize_t wil_read_file_led_cfg(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/wil6210/debugfs.c

2061

const char __user *buf_,

drivers/net/wireless/ath/wil6210/debugfs.c

2095

const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

2128

static ssize_t wil_read_led_blink_time(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/wil6210/debugfs.c

2184

const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

2195

char __user *user_buf,

drivers/net/wireless/ath/wil6210/debugfs.c

2244

const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

614

static ssize_t wil_read_file_ioblob(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/wil6210/debugfs.c

693

static ssize_t wil_write_file_rxon(struct file *file, const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

735

const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

777

static ssize_t wil_write_back(struct file *file, const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

850

static ssize_t wil_read_back(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/wil6210/debugfs.c

874

static ssize_t wil_write_pmccfg(struct file *file, const char __user *buf,

drivers/net/wireless/ath/wil6210/debugfs.c

924

static ssize_t wil_read_pmccfg(struct file *file, char __user *user_buf,

drivers/net/wireless/ath/wil6210/debugfs.c

966

static ssize_t wil_write_file_txmgmt(struct file *file, const char __user *buf,

drivers/net/wireless/ath/wil6210/pmc.c

312

ssize_t wil_pmc_read(struct file *filp, char __user *buf, size_t count,

drivers/net/wireless/ath/wil6210/pmc.h

13

ssize_t wil_pmc_read(struct file *, char __user *, size_t, loff_t *);

drivers/net/wireless/broadcom/b43/debugfs.c

489

static ssize_t b43_debugfs_read(struct file *file, char __user *userbuf,

drivers/net/wireless/broadcom/b43/debugfs.c

552

const char __user *userbuf,

drivers/net/wireless/broadcom/b43legacy/debugfs.c

186

static ssize_t b43legacy_debugfs_read(struct file *file, char __user *userbuf,

drivers/net/wireless/broadcom/b43legacy/debugfs.c

254

const char __user *userbuf,

drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c

1207

static ssize_t bus_reset_write(struct file *file, const char __user *user_buf,

drivers/net/wireless/intel/ipw2x00/libipw_module.c

224

const char __user *buffer, size_t count, loff_t *pos)

drivers/net/wireless/intel/iwlegacy/3945-debug.c

299

il3945_ucode_tx_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/3945-debug.c

34

il3945_ucode_rx_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/3945-debug.c

389

il3945_ucode_general_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/3945-rs.c

800

il3945_sta_dbgfs_stats_table_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/4965-debug.c

41

il4965_ucode_rx_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/4965-debug.c

453

il4965_ucode_tx_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/4965-debug.c

619

il4965_ucode_general_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/4965-rs.c

2526

const char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/4965-rs.c

2562

il4965_rs_sta_dbgfs_scale_table_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/4965-rs.c

2670

il4965_rs_sta_dbgfs_stats_table_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/4965-rs.c

2716

char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/common.h

1532

ssize_t(*rx_stats_read) (struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/common.h

1534

ssize_t(*tx_stats_read) (struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/common.h

1537

char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

1014

il_dbgfs_chain_noise_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

1085

il_dbgfs_power_save_status_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

1110

const char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

1134

il_dbgfs_rxon_flags_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

1147

il_dbgfs_rxon_filter_flags_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

1161

il_dbgfs_fh_reg_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

1183

il_dbgfs_missed_beacon_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

1200

il_dbgfs_missed_beacon_write(struct file *file, const char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

1225

il_dbgfs_force_reset_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

124

char __user *user_buf, \

drivers/net/wireless/intel/iwlegacy/debug.c

1256

il_dbgfs_force_reset_write(struct file *file, const char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

1269

il_dbgfs_wd_timeout_write(struct file *file, const char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

129

const char __user *user_buf, \

drivers/net/wireless/intel/iwlegacy/debug.c

200

il_dbgfs_tx_stats_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

241

const char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

261

il_dbgfs_rx_stats_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

305

il_dbgfs_sram_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

364

il_dbgfs_sram_write(struct file *file, const char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

389

il_dbgfs_stations_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

453

il_dbgfs_nvm_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

497

il_dbgfs_channels_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

576

il_dbgfs_status_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

637

il_dbgfs_interrupt_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

716

il_dbgfs_interrupt_write(struct file *file, const char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

737

il_dbgfs_qos_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

762

il_dbgfs_disable_ht40_write(struct file *file, const char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

788

il_dbgfs_disable_ht40_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

812

il_dbgfs_tx_queue_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

859

il_dbgfs_rx_queue_read(struct file *file, char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlegacy/debug.c

888

il_dbgfs_ucode_rx_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

897

il_dbgfs_ucode_tx_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

906

il_dbgfs_ucode_general_stats_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlegacy/debug.c

915

il_dbgfs_sensitivity_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1100

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1297

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1417

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

142

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1505

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1647

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

170

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1726

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1782

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1805

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1829

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

183

static ssize_t iwl_dbgfs_stations_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1850

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1880

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1893

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1906

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1921

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1947

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1962

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

1986

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2011

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2022

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2046

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2091

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2113

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2155

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2173

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2188

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2214

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2242

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

2263

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

240

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

278

static ssize_t iwl_dbgfs_channels_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

344

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

378

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

407

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

429

static ssize_t iwl_dbgfs_qos_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

457

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

489

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

512

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

52

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

527

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

541

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

583

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

601

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c

667

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/dvm/rs.c

3036

const char __user *user_buf, size_t count, loff_t *ppos)

drivers/net/wireless/intel/iwlwifi/dvm/rs.c

3062

char __user *user_buf, size_t count, loff_t *ppos)

drivers/net/wireless/intel/iwlwifi/dvm/rs.c

3170

char __user *user_buf, size_t count, loff_t *ppos)

drivers/net/wireless/intel/iwlwifi/dvm/rs.c

3214

char __user *user_buf, size_t count, loff_t *ppos)

drivers/net/wireless/intel/iwlwifi/fw/debugfs.c

38

char __user *user_buf, \

drivers/net/wireless/intel/iwlwifi/fw/debugfs.c

75

const char __user *user_buf, \

drivers/net/wireless/intel/iwlwifi/mei/main.c

1881

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mei/main.c

1907

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mld/debugfs.h

102

const char __user *user_buf, \

drivers/net/wireless/intel/iwlwifi/mld/debugfs.h

147

const char __user *user_buf, \

drivers/net/wireless/intel/iwlwifi/mld/debugfs.h

163

char __user *user_buf, \

drivers/net/wireless/intel/iwlwifi/mld/debugfs.h

219

const char __user *user_buf, \

drivers/net/wireless/intel/iwlwifi/mld/debugfs.h

36

char __user *user_buf, \

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

136

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

151

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

167

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

393

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

442

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

490

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

540

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

555

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

583

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

662

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

716

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs-vif.c

749

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1050

char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1117

char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1169

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1426

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1555

char __user *,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1558

char __user *user_buf, size_t count, loff_t *ppos)

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

156

static ssize_t iwl_dbgfs_sram_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1584

const char __user *user_buf, \

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1600

char __user *user_buf, \

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1642

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1775

iwl_dbgfs_he_sniffer_params_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1792

iwl_dbgfs_uapsd_noagg_bssids_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1874

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

1956

static ssize_t iwl_dbgfs_mem_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

2017

const char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

223

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

25

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

290

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

315

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

357

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

375

static ssize_t iwl_dbgfs_stations_read(struct file *file, char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

408

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

483

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

498

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

542

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

729

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

758

char __user *user_buf, size_t count,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.c

955

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/debugfs.h

16

const char __user *user_buf, \

drivers/net/wireless/intel/iwlwifi/mvm/rs.c

3730

const char __user *user_buf, size_t count, loff_t *ppos)

drivers/net/wireless/intel/iwlwifi/mvm/rs.c

3755

char __user *user_buf, size_t count, loff_t *ppos)

drivers/net/wireless/intel/iwlwifi/mvm/rs.c

3861

char __user *user_buf, size_t count, loff_t *ppos)

drivers/net/wireless/intel/iwlwifi/mvm/rs.c

3909

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/rs.c

3982

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/mvm/rs.c

3999

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

2880

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

2932

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

2990

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

3009

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

3020

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

3038

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

3055

const char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

3106

static bool iwl_write_to_user_buf(char __user *user_buf, ssize_t count,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

3125

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

3208

char __user *user_buf,

drivers/net/wireless/intel/iwlwifi/pcie/gen1_2/trans.c

3223

const char __user *user_buf,

drivers/net/wireless/marvell/libertas/debugfs.c

121

const char __user *user_buf, size_t count,

drivers/net/wireless/marvell/libertas/debugfs.c

162

static ssize_t lbs_host_sleep_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

218

struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

25

static ssize_t write_file_dummy(struct file *file, const char __user *buf,

drivers/net/wireless/marvell/libertas/debugfs.c

271

const char __user *userbuf, size_t count,

drivers/net/wireless/marvell/libertas/debugfs.c

33

static ssize_t lbs_dev_info(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

338

static ssize_t lbs_lowrssi_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

346

static ssize_t lbs_lowrssi_write(struct file *file, const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

354

static ssize_t lbs_lowsnr_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

362

static ssize_t lbs_lowsnr_write(struct file *file, const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

370

static ssize_t lbs_failcount_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

378

static ssize_t lbs_failcount_write(struct file *file, const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

386

static ssize_t lbs_highrssi_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

394

static ssize_t lbs_highrssi_write(struct file *file, const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

402

static ssize_t lbs_highsnr_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

410

static ssize_t lbs_highsnr_write(struct file *file, const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

417

static ssize_t lbs_bcnmiss_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

425

static ssize_t lbs_bcnmiss_write(struct file *file, const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

433

static ssize_t lbs_rdmac_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

458

const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

474

const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

503

static ssize_t lbs_rdbbp_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

529

const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

546

const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

56

const char __user *user_buf, size_t count,

drivers/net/wireless/marvell/libertas/debugfs.c

575

static ssize_t lbs_rdrf_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

601

const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

617

const char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

806

static ssize_t lbs_debugfs_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/libertas/debugfs.c

853

static ssize_t lbs_debugfs_write(struct file *f, const char __user *buf,

drivers/net/wireless/marvell/libertas/debugfs.c

92

static ssize_t lbs_sleepparams_read(struct file *file, char __user *userbuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

166

mwifiex_getlog_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

242

mwifiex_histogram_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

321

mwifiex_histogram_write(struct file *file, const char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

381

mwifiex_debug_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

418

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/net/wireless/marvell/mwifiex/debugfs.c

455

mwifiex_regrdwr_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

509

mwifiex_debug_mask_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

535

mwifiex_debug_mask_write(struct file *file, const char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

563

mwifiex_verext_write(struct file *file, const char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

584

mwifiex_verext_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

604

mwifiex_memrw_write(struct file *file, const char __user *ubuf, size_t count,

drivers/net/wireless/marvell/mwifiex/debugfs.c

62

mwifiex_info_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

651

mwifiex_memrw_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

681

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/net/wireless/marvell/mwifiex/debugfs.c

717

mwifiex_rdeeprom_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

760

mwifiex_hscfg_write(struct file *file, const char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

819

mwifiex_hscfg_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

844

mwifiex_timeshare_coex_read(struct file *file, char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

866

mwifiex_timeshare_coex_write(struct file *file, const char __user *ubuf,

drivers/net/wireless/marvell/mwifiex/debugfs.c

890

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/net/wireless/mediatek/mt76/mt7615/debugfs.c

440

mt7615_ext_mac_addr_read(struct file *file, char __user *userbuf,

drivers/net/wireless/mediatek/mt76/mt7615/debugfs.c

474

mt7615_ext_mac_addr_write(struct file *file, const char __user *userbuf,

drivers/net/wireless/mediatek/mt76/mt7915/debugfs.c

1071

mt7915_rate_txpower_set(struct file *file, const char __user *user_buf,

drivers/net/wireless/mediatek/mt76/mt7915/debugfs.c

125

mt7915_sys_recovery_get(struct file *file, char __user *user_buf,

drivers/net/wireless/mediatek/mt76/mt7915/debugfs.c

1402

const char __user *user_buf,

drivers/net/wireless/mediatek/mt76/mt7915/debugfs.c

49

mt7915_sys_recovery_set(struct file *file, const char __user *user_buf,

drivers/net/wireless/mediatek/mt76/mt7915/debugfs.c

994

mt7915_rate_txpower_get(struct file *file, char __user *user_buf,

drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c

129

mt7996_sys_recovery_get(struct file *file, char __user *user_buf,

drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c

51

mt7996_sys_recovery_set(struct file *file, const char __user *user_buf,

drivers/net/wireless/mediatek/mt76/mt7996/debugfs.c

992

const char __user *user_buf,

drivers/net/wireless/ralink/rt2x00/rt2x00debug.c

242

char __user *buf,

drivers/net/wireless/ralink/rt2x00/rt2x00debug.c

298

char __user *buf,

drivers/net/wireless/ralink/rt2x00/rt2x00debug.c

357

char __user *buf,

drivers/net/wireless/ralink/rt2x00/rt2x00debug.c

411

char __user *buf, \

drivers/net/wireless/ralink/rt2x00/rt2x00debug.c

443

const char __user *buf,\

drivers/net/wireless/ralink/rt2x00/rt2x00debug.c

502

char __user *buf,

drivers/net/wireless/ralink/rt2x00/rt2x00debug.c

527

char __user *buf,

drivers/net/wireless/ralink/rt2x00/rt2x00debug.c

552

const char __user *buf,

drivers/net/wireless/realtek/rtl8xxxu/core.c

1903

static ssize_t read_file_efuse(struct file *file, char __user *user_buf,

drivers/net/wireless/realtek/rtlwifi/debug.c

266

const char __user *buffer,

drivers/net/wireless/realtek/rtlwifi/debug.c

315

const char __user *buffer,

drivers/net/wireless/realtek/rtlwifi/debug.c

361

const char __user *buffer,

drivers/net/wireless/realtek/rtlwifi/debug.c

407

const char __user *buffer,

drivers/net/wireless/realtek/rtlwifi/debug.c

48

ssize_t (*cb_write)(struct file *filp, const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

1001

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

1041

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

1074

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

115

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

124

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

22

ssize_t (*cb_write)(struct file *filp, const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

230

const char __user *buffer, size_t count,

drivers/net/wireless/realtek/rtw88/debug.c

251

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

341

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

370

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

388

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

434

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

464

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

496

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

526

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

935

const char __user *buffer,

drivers/net/wireless/realtek/rtw88/debug.c

969

const char __user *buffer,

drivers/net/wireless/realtek/rtw89/debug.c

150

static ssize_t rtw89_debugfs_file_read(struct file *file, char __user *userbuf,

drivers/net/wireless/realtek/rtw89/debug.c

200

const char __user *userbuf,

drivers/net/wireless/rsi/rsi_91x_debugfs.c

233

const char __user *buff,

drivers/net/wireless/silabs/wfx/debug.c

205

static ssize_t wfx_send_pds_write(struct file *file, const char __user *user_buf,

drivers/net/wireless/silabs/wfx/debug.c

239

static ssize_t wfx_send_hif_msg_write(struct file *file, const char __user *user_buf,

drivers/net/wireless/silabs/wfx/debug.c

272

static ssize_t wfx_send_hif_msg_read(struct file *file, char __user *user_buf,

drivers/net/wireless/st/cw1200/debug.c

336

const char __user *user_buf, size_t count, loff_t *ppos)

drivers/net/wireless/ti/wl1251/debugfs.c

197

static ssize_t tx_queue_len_read(struct file *file, char __user *userbuf,

drivers/net/wireless/ti/wl1251/debugfs.c

217

static ssize_t tx_queue_status_read(struct file *file, char __user *userbuf,

drivers/net/wireless/ti/wl1251/debugfs.c

23

static ssize_t name## _read(struct file *file, char __user *userbuf, \

drivers/net/wireless/ti/wl1251/debugfs.c

52

char __user *userbuf, \

drivers/net/wireless/ti/wl18xx/debugfs.c

178

static ssize_t conf_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wl18xx/debugfs.c

221

const char __user *user_buf,

drivers/net/wireless/ti/wl18xx/debugfs.c

249

const char __user *user_buf,

drivers/net/wireless/ti/wl18xx/debugfs.c

288

const char __user *user_buf,

drivers/net/wireless/ti/wl18xx/debugfs.c

321

char __user *userbuf,

drivers/net/wireless/ti/wl18xx/debugfs.c

338

const char __user *user_buf,

drivers/net/wireless/ti/wl18xx/debugfs.c

382

char __user *userbuf,

drivers/net/wireless/ti/wlcore/debugfs.c

1025

char __user *user_buf, size_t count,

drivers/net/wireless/ti/wlcore/debugfs.c

1106

static ssize_t dev_mem_write(struct file *file, const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

1195

static ssize_t fw_logger_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

1206

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

122

char __user *user_buf, \

drivers/net/wireless/ti/wlcore/debugfs.c

132

const char __user *user_buf, \

drivers/net/wireless/ti/wlcore/debugfs.c

173

static ssize_t gpio_power_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

188

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

220

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

238

static ssize_t dynamic_ps_timeout_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

249

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

302

static ssize_t forced_ps_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

31

int wl1271_format_buffer(char __user *userbuf, size_t count,

drivers/net/wireless/ti/wlcore/debugfs.c

313

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

371

static ssize_t split_scan_timeout_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

382

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

413

static ssize_t driver_state_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

512

static ssize_t vifs_state_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

622

static ssize_t dtim_interval_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

638

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

683

char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

699

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

738

static ssize_t beacon_interval_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

754

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

77

static ssize_t tx_queue_len_read(struct file *file, char __user *userbuf,

drivers/net/wireless/ti/wlcore/debugfs.c

797

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

836

char __user *userbuf,

drivers/net/wireless/ti/wlcore/debugfs.c

852

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

891

char __user *userbuf,

drivers/net/wireless/ti/wlcore/debugfs.c

907

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

944

char __user *userbuf,

drivers/net/wireless/ti/wlcore/debugfs.c

962

static ssize_t sleep_auth_read(struct file *file, char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.c

973

const char __user *user_buf,

drivers/net/wireless/ti/wlcore/debugfs.h

15

__printf(4, 5) int wl1271_format_buffer(char __user *userbuf, size_t count,

drivers/net/wireless/ti/wlcore/debugfs.h

26

static ssize_t name## _read(struct file *file, char __user *userbuf, \

drivers/net/wireless/ti/wlcore/debugfs.h

55

char __user *userbuf, \

drivers/net/wireless/ti/wlcore/debugfs.h

75

char __user *userbuf, \

drivers/net/wireless/virtual/mac80211_hwsim_main.c

1123

const char __user *user_buf,

drivers/net/wireless/virtual/mac80211_hwsim_main.c

1175

const char __user *ubuf,

drivers/net/wwan/iosm/iosm_ipc_trace.c

72

static ssize_t ipc_trace_ctrl_file_read(struct file *filp, char __user *buffer,

drivers/net/wwan/iosm/iosm_ipc_trace.c

88

const char __user *buffer,

drivers/net/wwan/wwan_core.c

1006

if (copy_from_user(&port->at_data.termios, (void __user *)arg,

drivers/net/wwan/wwan_core.c

1013

ret = put_user(port->at_data.mdmbits, (int __user *)arg);

drivers/net/wwan/wwan_core.c

1021

if (copy_from_user(&mdmbits, (int __user *)arg, sizeof(int))) {

drivers/net/wwan/wwan_core.c

1066

return put_user(amount, (int __user *)arg);

drivers/net/wwan/wwan_core.c

865

static ssize_t wwan_port_fops_read(struct file *filp, char __user *buf,

drivers/net/wwan/wwan_core.c

897

static ssize_t wwan_port_fops_write(struct file *filp, const char __user *buf,

drivers/net/wwan/wwan_core.c

983

if (copy_to_user((void __user *)arg, &port->at_data.termios,

drivers/net/wwan/wwan_core.c

991

if (copy_from_user(&port->at_data.termios, (void __user *)arg,

drivers/net/wwan/wwan_core.c

998

if (copy_to_user((void __user *)arg, &port->at_data.termios,

drivers/net/wwan/wwan_hwsim.c

488

const char __user *usrbuf,

drivers/net/wwan/wwan_hwsim.c

509

const char __user *usrbuf,

drivers/net/wwan/wwan_hwsim.c

533

const char __user *usrbuf,

drivers/net/wwan/wwan_hwsim.c

554

const char __user *usrbuf,

drivers/net/xen-netback/xenbus.c

106

xenvif_write_io_ring(struct file *filp, const char __user *buf, size_t count,

drivers/nfc/virtual_ncidev.c

114

const char __user *buf,

drivers/nfc/virtual_ncidev.c

181

void __user *p = (void __user *)arg;

drivers/nfc/virtual_ncidev.c

82

static ssize_t virtual_ncidev_read(struct file *file, char __user *buf,

drivers/ntb/hw/amd/ntb_hw_amd.c

847

static ssize_t ndev_debugfs_read(struct file *filp, char __user *ubuf,

drivers/ntb/hw/idt/ntb_hw_idt.c

2311

static ssize_t idt_dbgfs_info_read(struct file *filp, char __user *ubuf,

drivers/ntb/hw/idt/ntb_hw_idt.c

2330

static ssize_t idt_dbgfs_info_read(struct file *filp, char __user *ubuf,

drivers/ntb/hw/intel/ntb_hw_gen1.c

491

static ssize_t ndev_ntb_debugfs_read(struct file *filp, char __user *ubuf,

drivers/ntb/hw/intel/ntb_hw_gen1.c

757

static ssize_t ndev_debugfs_read(struct file *filp, char __user *ubuf,

drivers/ntb/hw/intel/ntb_hw_gen3.c

258

ssize_t ndev_ntb3_debugfs_read(struct file *filp, char __user *ubuf,

drivers/ntb/hw/intel/ntb_hw_gen3.h

104

ssize_t ndev_ntb3_debugfs_read(struct file *filp, char __user *ubuf,

drivers/ntb/hw/intel/ntb_hw_gen4.c

229

ssize_t ndev_ntb4_debugfs_read(struct file *filp, char __user *ubuf,

drivers/ntb/hw/intel/ntb_hw_gen4.h

108

ssize_t ndev_ntb4_debugfs_read(struct file *filp, char __user *ubuf,

drivers/ntb/hw/intel/ntb_hw_gen4.h

111

ssize_t ndev_ntb4_debugfs_read(struct file *filp, char __user *ubuf,

drivers/ntb/test/ntb_perf.c

1180

static ssize_t perf_dbgfs_read_info(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_perf.c

1263

static ssize_t perf_dbgfs_read_run(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_perf.c

1285

static ssize_t perf_dbgfs_write_run(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_perf.c

1314

static ssize_t perf_dbgfs_read_tcnt(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_perf.c

1327

const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1025

static ssize_t tool_db_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1033

static ssize_t tool_db_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1046

static ssize_t tool_db_valid_mask_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1058

static ssize_t tool_db_mask_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1066

static ssize_t tool_db_mask_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1079

static ssize_t tool_peer_db_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1087

static ssize_t tool_peer_db_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1100

static ssize_t tool_peer_db_mask_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1110

const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1125

const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1151

static ssize_t tool_spad_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1167

static ssize_t tool_spad_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1192

static ssize_t tool_peer_spad_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1208

static ssize_t tool_peer_spad_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1274

static ssize_t tool_inmsg_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1295

const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1315

static ssize_t tool_msg_sts_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1323

static ssize_t tool_msg_sts_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1336

static ssize_t tool_msg_inbits_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1348

static ssize_t tool_msg_outbits_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1360

static ssize_t tool_msg_mask_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

1375

const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

341

static ssize_t tool_fn_read(struct tool_ctx *tc, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

360

const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

405

static ssize_t tool_port_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

421

static ssize_t tool_peer_port_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

462

static ssize_t tool_link_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

488

static ssize_t tool_peer_link_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

510

const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

541

static ssize_t tool_mw_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

553

static ssize_t tool_mw_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

637

static ssize_t tool_mw_trans_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

699

static ssize_t tool_mw_trans_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

724

static ssize_t tool_peer_mw_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

762

static ssize_t tool_peer_mw_write(struct file *filep, const char __user *ubuf,

drivers/ntb/test/ntb_tool.c

865

static ssize_t tool_peer_mw_trans_read(struct file *filep, char __user *ubuf,

drivers/ntb/test/ntb_tool.c

923

const char __user *ubuf,

drivers/nvdimm/bus.c

1031

void __user *p = (void __user *) arg;

drivers/nvme/host/fabrics.c

1385

static ssize_t nvmf_dev_write(struct file *file, const char __user *ubuf,

drivers/nvme/host/ioctl.c

125

unsigned bufflen, void __user *meta_buffer, unsigned meta_len,

drivers/nvme/host/ioctl.c

163

void __user *meta_buffer, unsigned meta_len,

drivers/nvme/host/ioctl.c

205

static int nvme_submit_io(struct nvme_ns *ns, struct nvme_user_io __user *uio)

drivers/nvme/host/ioctl.c

210

void __user *metadata;

drivers/nvme/host/ioctl.c

281

struct nvme_passthru_cmd __user *ucmd, unsigned int flags,

drivers/nvme/host/ioctl.c

329

struct nvme_passthru_cmd64 __user *ucmd, unsigned int flags,

drivers/nvme/host/ioctl.c

550

void __user *argp, bool open_for_write)

drivers/nvme/host/ioctl.c

581

void __user *argp, unsigned int flags, bool open_for_write)

drivers/nvme/host/ioctl.c

615

void __user *argp = (void __user *)arg;

drivers/nvme/host/ioctl.c

631

void __user *argp = (void __user *)arg;

drivers/nvme/host/ioctl.c

693

void __user *argp, struct nvme_ns_head *head, int srcu_idx,

drivers/nvme/host/ioctl.c

713

void __user *argp = (void __user *)arg;

drivers/nvme/host/ioctl.c

748

void __user *argp = (void __user *)arg;

drivers/nvme/host/ioctl.c

806

static int nvme_dev_user_cmd(struct nvme_ctrl *ctrl, void __user *argp,

drivers/nvme/host/ioctl.c

848

void __user *argp = (void __user *)arg;

drivers/nvme/host/ioctl.c

94

static void __user *nvme_to_user_ptr(uintptr_t ptrval)

drivers/nvme/host/ioctl.c

98

return (void __user *)ptrval;

drivers/nvme/target/debugfs.c

99

static ssize_t nvmet_ctrl_state_write(struct file *file, const char __user *buf,

drivers/opp/debugfs.c

36

static ssize_t bw_name_read(struct file *fp, char __user *userbuf,

drivers/parisc/eisa_eeprom.c

24

char __user *buf, size_t count, loff_t *ppos )

drivers/pci/controller/dwc/pcie-designware-debugfs.c

236

static ssize_t lane_detect_read(struct file *file, char __user *buf,

drivers/pci/controller/dwc/pcie-designware-debugfs.c

255

static ssize_t lane_detect_write(struct file *file, const char __user *buf,

drivers/pci/controller/dwc/pcie-designware-debugfs.c

274

static ssize_t rx_valid_read(struct file *file, char __user *buf,

drivers/pci/controller/dwc/pcie-designware-debugfs.c

293

static ssize_t rx_valid_write(struct file *file, const char __user *buf,

drivers/pci/controller/dwc/pcie-designware-debugfs.c

299

static ssize_t err_inj_write(struct file *file, const char __user *buf,

drivers/pci/controller/dwc/pcie-designware-debugfs.c

366

static ssize_t counter_enable_read(struct file *file, char __user *buf,

drivers/pci/controller/dwc/pcie-designware-debugfs.c

389

static ssize_t counter_enable_write(struct file *file, const char __user *buf,

drivers/pci/controller/dwc/pcie-designware-debugfs.c

431

static ssize_t counter_lane_read(struct file *file, char __user *buf,

drivers/pci/controller/dwc/pcie-designware-debugfs.c

451

static ssize_t counter_lane_write(struct file *file, const char __user *buf,

drivers/pci/controller/dwc/pcie-designware-debugfs.c

474

static ssize_t counter_value_read(struct file *file, char __user *buf,

drivers/pci/hotplug/cpqphp_sysfs.c

159

static ssize_t read(struct file *file, char __user *buf,

drivers/pci/pcie/aer_inject.c

486

static ssize_t aer_inject_write(struct file *filp, const char __user *ubuf,

drivers/pci/pcie/ptm.c

285

static ssize_t context_update_write(struct file *file, const char __user *ubuf,

drivers/pci/pcie/ptm.c

321

static ssize_t context_update_read(struct file *file, char __user *ubuf,

drivers/pci/proc.c

112

static ssize_t proc_bus_pci_write(struct file *file, const char __user *buf,

drivers/pci/proc.c

149

__get_user(val, (__le16 __user *) buf);

drivers/pci/proc.c

158

__get_user(val, (__le32 __user *) buf);

drivers/pci/proc.c

167

__get_user(val, (__le16 __user *) buf);

drivers/pci/proc.c

29

static ssize_t proc_bus_pci_read(struct file *file, char __user *buf,

drivers/pci/proc.c

74

__put_user(cpu_to_le16(val), (__le16 __user *) buf);

drivers/pci/proc.c

83

__put_user(cpu_to_le32(val), (__le32 __user *) buf);

drivers/pci/proc.c

93

__put_user(cpu_to_le16(val), (__le16 __user *) buf);

drivers/pci/switch/switchtec.c

1072

struct switchtec_ioctl_event_ctl __user *uctl)

drivers/pci/switch/switchtec.c

1118

struct switchtec_ioctl_pff_port __user *up)

drivers/pci/switch/switchtec.c

1165

struct switchtec_ioctl_pff_port __user *up)

drivers/pci/switch/switchtec.c

1208

void __user *argp = (void __user *)arg;

drivers/pci/switch/switchtec.c

507

static ssize_t switchtec_dev_write(struct file *filp, const char __user *data,

drivers/pci/switch/switchtec.c

559

static ssize_t switchtec_dev_read(struct file *filp, char __user *data,

drivers/pci/switch/switchtec.c

659

struct switchtec_ioctl_flash_info __user *uinfo)

drivers/pci/switch/switchtec.c

862

struct switchtec_ioctl_flash_part_info __user *uinfo)

drivers/pci/switch/switchtec.c

890

struct switchtec_ioctl_event_summary __user *usum,

drivers/pci/syscall.c

105

err = get_user(byte, (u8 __user *)buf);

drivers/pci/syscall.c

114

err = get_user(word, (u16 __user *)buf);

drivers/pci/syscall.c

123

err = get_user(dword, (u32 __user *)buf);

drivers/pci/syscall.c

16

unsigned long, off, unsigned long, len, void __user *, buf)

drivers/pci/syscall.c

55

err = put_user(byte, (u8 __user *)buf);

drivers/pci/syscall.c

58

err = put_user(word, (u16 __user *)buf);

drivers/pci/syscall.c

61

err = put_user(dword, (u32 __user *)buf);

drivers/pci/syscall.c

73

put_user(-1, (u8 __user *)buf);

drivers/pci/syscall.c

76

put_user(-1, (u16 __user *)buf);

drivers/pci/syscall.c

79

put_user(-1, (u32 __user *)buf);

drivers/pci/syscall.c

87

unsigned long, off, unsigned long, len, void __user *, buf)

drivers/pci/vgaarb.c

1070

static ssize_t vga_arb_read(struct file *file, char __user *buf,

drivers/pci/vgaarb.c

1134

static ssize_t vga_arb_write(struct file *file, const char __user *buf,

drivers/perf/arm_brbe.c

716

bool from_user = access_ok((void __user *)(unsigned long)entry->from, 4);

drivers/perf/arm_brbe.c

717

bool to_user = access_ok((void __user *)(unsigned long)entry->to, 4);

drivers/phy/mediatek/phy-mtk-tphy.c

448

static ssize_t u2_phy_params_write(struct file *file, const char __user *ubuf,

drivers/phy/mediatek/phy-mtk-tphy.c

564

static ssize_t u3_phy_params_write(struct file *file, const char __user *ubuf,

drivers/pinctrl/pinmux.c

720

static ssize_t pinmux_select_write(struct file *file, const char __user *user_buf,

drivers/platform/chrome/cros_ec_chardev.c

243

static ssize_t cros_ec_chardev_read(struct file *filp, char __user *buffer,

drivers/platform/chrome/cros_ec_chardev.c

320

static long cros_ec_chardev_ioctl_xcmd(struct chardev_priv *priv, void __user *arg)

drivers/platform/chrome/cros_ec_chardev.c

362

static long cros_ec_chardev_ioctl_readmem(struct chardev_priv *priv, void __user *arg)

drivers/platform/chrome/cros_ec_chardev.c

383

if (copy_to_user((void __user *)arg, &s_mem, sizeof(s_mem)))

drivers/platform/chrome/cros_ec_chardev.c

403

return cros_ec_chardev_ioctl_xcmd(priv, (void __user *)arg);

drivers/platform/chrome/cros_ec_chardev.c

405

return cros_ec_chardev_ioctl_readmem(priv, (void __user *)arg);

drivers/platform/chrome/cros_ec_debugfs.c

135

static ssize_t cros_ec_console_log_read(struct file *file, char __user *buf,

drivers/platform/chrome/cros_ec_debugfs.c

202

char __user *user_buf,

drivers/platform/chrome/cros_ec_debugfs.c

263

static ssize_t cros_ec_uptime_read(struct file *file, char __user *user_buf,

drivers/platform/chrome/wilco_ec/debugfs.c

135

static ssize_t raw_read(struct file *file, char __user *user_buf, size_t count,

drivers/platform/chrome/wilco_ec/debugfs.c

95

static ssize_t raw_write(struct file *file, const char __user *user_buf,

drivers/platform/chrome/wilco_ec/event.c

356

static ssize_t event_read(struct file *filp, char __user *buf, size_t count,

drivers/platform/chrome/wilco_ec/telemetry.c

264

static ssize_t telem_write(struct file *filp, const char __user *buf,

drivers/platform/chrome/wilco_ec/telemetry.c

298

static ssize_t telem_read(struct file *filp, char __user *buf, size_t count,

drivers/platform/goldfish/goldfish_pipe.c

388

char __user *buffer,

drivers/platform/goldfish/goldfish_pipe.c

470

static ssize_t goldfish_pipe_read(struct file *filp, char __user *buffer,

drivers/platform/goldfish/goldfish_pipe.c

478

const char __user *buffer, size_t bufflen,

drivers/platform/goldfish/goldfish_pipe.c

482

char __user *no_const_buffer = (char __user *)buffer;

drivers/platform/olpc/olpc-ec.c

261

static ssize_t ec_dbgfs_cmd_write(struct file *file, const char __user *buf,

drivers/platform/olpc/olpc-ec.c

306

static ssize_t ec_dbgfs_cmd_read(struct file *file, char __user *buf,

drivers/platform/raspberrypi/vchiq-interface/vchiq_arm.c

654

void *cb_data, void __user *cb_userdata)

drivers/platform/raspberrypi/vchiq-interface/vchiq_arm.c

717

void *cb_data, void __user *cb_userdata)

drivers/platform/raspberrypi/vchiq-interface/vchiq_arm.c

754

void *cb_data, void __user *cb_userdata)

drivers/platform/raspberrypi/vchiq-interface/vchiq_arm.c

934

void *cb_data, void __user *cb_userdata)

drivers/platform/raspberrypi/vchiq-interface/vchiq_core.c

461

void __user *cb_userdata = NULL;

drivers/platform/raspberrypi/vchiq-interface/vchiq_debugfs.c

59

const char __user *buffer,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

1031

struct vchiq_queue_bulk_transfer32 __user *argp)

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

1067

struct vchiq_await_completion32 __user *argp)

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

1100

struct vchiq_dequeue_message32 __user *arg)

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

1129

struct vchiq_get_config32 __user *arg)

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

1133

void __user *ptr;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

1151

void __user *argp = compat_ptr(arg);

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

288

enum vchiq_bulk_mode __user *mode)

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

387

static inline int vchiq_get_user_ptr(void __user **buf, void __user *ubuf, int index)

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

393

compat_uptr_t __user *uptr = ubuf;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

401

uintptr_t ptr, __user *uptr = ubuf;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

408

*buf = (void __user *)ptr;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

421

static int vchiq_put_completion(struct vchiq_completion_data __user *buf,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

425

struct vchiq_completion_data32 __user *buf32 = (void __user *)buf;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

446

int __user *msgbufcountp)

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

509

void __user *msgbuf;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

644

struct vchiq_create_service __user *argp;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

647

argp = (void __user *)arg;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

725

if (copy_from_user(&args, (const void __user *)arg,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

751

struct vchiq_queue_bulk_transfer __user *argp;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

757

argp = (void __user *)arg;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

769

struct vchiq_await_completion __user *argp;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

771

argp = (void __user *)arg;

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

784

if (copy_from_user(&args, (const void __user *)arg,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

803

if (copy_from_user(&args, (const void __user *)arg,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

823

if (copy_from_user(&args, (const void __user *)arg,

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

913

struct vchiq_create_service32 __user *ptrargs32)

drivers/platform/raspberrypi/vchiq-interface/vchiq_dev.c

965

struct vchiq_queue_message32 __user *arg)

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

15

int __user (*callback)(enum vchiq_reason reason,

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

19

void __user *userdata;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

34

const struct vchiq_element __user *elements;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

39

void __user *data;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

41

void __user *userdata;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

47

struct vchiq_header __user *header;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

48

void __user *service_userdata;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

49

void __user *cb_userdata;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

54

struct vchiq_completion_data __user *buf;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

57

void * __user *msgbufs;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

64

void __user *buf;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

69

struct vchiq_config __user *pconfig;

drivers/platform/raspberrypi/vchiq-interface/vchiq_ioctl.h

79

void __user *virt_addr;

drivers/platform/raspberrypi/vchiq-mmal/mmal-vchiq.c

556

void __user *cb_userdata)

drivers/platform/surface/surface_aggregator_cdev.c

255

static long ssam_cdev_request(struct ssam_cdev_client *client, struct ssam_cdev_request __user *r)

drivers/platform/surface/surface_aggregator_cdev.c

260

const void __user *plddata;

drivers/platform/surface/surface_aggregator_cdev.c

261

void __user *rspdata;

drivers/platform/surface/surface_aggregator_cdev.c

371

const struct ssam_cdev_notifier_desc __user *d)

drivers/platform/surface/surface_aggregator_cdev.c

386

const struct ssam_cdev_notifier_desc __user *d)

drivers/platform/surface/surface_aggregator_cdev.c

401

const struct ssam_cdev_event_desc __user *d)

drivers/platform/surface/surface_aggregator_cdev.c

429

const struct ssam_cdev_event_desc __user *d)

drivers/platform/surface/surface_aggregator_cdev.c

534

return ssam_cdev_request(client, (struct ssam_cdev_request __user *)arg);

drivers/platform/surface/surface_aggregator_cdev.c

538

(struct ssam_cdev_notifier_desc __user *)arg);

drivers/platform/surface/surface_aggregator_cdev.c

542

(struct ssam_cdev_notifier_desc __user *)arg);

drivers/platform/surface/surface_aggregator_cdev.c

545

return ssam_cdev_event_enable(client, (struct ssam_cdev_event_desc __user *)arg);

drivers/platform/surface/surface_aggregator_cdev.c

548

return ssam_cdev_event_disable(client, (struct ssam_cdev_event_desc __user *)arg);

drivers/platform/surface/surface_aggregator_cdev.c

575

static ssize_t ssam_cdev_read(struct file *file, char __user *buf, size_t count, loff_t *offs)

drivers/platform/surface/surface_dtx.c

282

struct sdtx_base_info __user *buf)

drivers/platform/surface/surface_dtx.c

303

static int sdtx_ioctl_get_device_mode(struct sdtx_device *ddev, u16 __user *buf)

drivers/platform/surface/surface_dtx.c

317

static int sdtx_ioctl_get_latch_status(struct sdtx_device *ddev, u16 __user *buf)

drivers/platform/surface/surface_dtx.c

365

return sdtx_ioctl_get_base_info(ddev, (struct sdtx_base_info __user *)arg);

drivers/platform/surface/surface_dtx.c

368

return sdtx_ioctl_get_device_mode(ddev, (u16 __user *)arg);

drivers/platform/surface/surface_dtx.c

371

return sdtx_ioctl_get_latch_status(ddev, (u16 __user *)arg);

drivers/platform/surface/surface_dtx.c

460

static ssize_t surface_dtx_read(struct file *file, char __user *buf, size_t count, loff_t *offs)

drivers/platform/x86/amd/hsmp/hsmp.c

306

int __user *arguser = (int __user *)arg;

drivers/platform/x86/amd/pmc/mp1_stb.c

114

static ssize_t amd_stb_debugfs_read(struct file *filp, char __user *buf, size_t size, loff_t *pos)

drivers/platform/x86/amd/pmc/mp1_stb.c

220

static ssize_t amd_stb_debugfs_read_v2(struct file *filp, char __user *buf, size_t size,

drivers/platform/x86/amd/pmc/mp2_stb.c

175

static ssize_t amd_mp2_stb_debugfs_read(struct file *filp, char __user *buf, size_t size,

drivers/platform/x86/amd/pmf/tee-if.c

371

static ssize_t amd_pmf_get_pb_data(struct file *filp, const char __user *buf,

drivers/platform/x86/apple-gmux.c

695

const char __user *userbuf, size_t count, loff_t *ppos)

drivers/platform/x86/apple-gmux.c

723

char __user *userbuf, size_t count, loff_t *ppos)

drivers/platform/x86/dell/alienware-wmi-wmax.c

1446

static ssize_t awcc_gpio_pin_write(struct file *file, const char __user *buf,

drivers/platform/x86/dell/dell-smbios-wmi.c

120

static ssize_t dell_smbios_wmi_read(struct file *filp, char __user *buffer, size_t length,

drivers/platform/x86/dell/dell-smbios-wmi.c

130

struct dell_wmi_smbios_buffer __user *arg)

drivers/platform/x86/dell/dell-smbios-wmi.c

169

struct dell_wmi_smbios_buffer __user *input = (struct dell_wmi_smbios_buffer __user *)arg;

drivers/platform/x86/dell/dell-smo8800.c

48

static ssize_t smo8800_misc_read(struct file *file, char __user *buf,

drivers/platform/x86/intel/plr_tpmi.c

227

static ssize_t plr_status_write(struct file *filp, const char __user *ubuf,

drivers/platform/x86/intel/pmc/core.c

1143

const char __user *userbuf,

drivers/platform/x86/intel/pmc/core.c

519

const char __user *userbuf,

drivers/platform/x86/intel/pmc/core.c

535

const char __user *userbuf,

drivers/platform/x86/intel/pmc/core.c

551

const char __user *userbuf,

drivers/platform/x86/intel/speed_select_if/isst_if_common.c

256

static int isst_if_get_platform_info(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_if_common.c

526

static long isst_if_exec_multi_cmd(void __user *argp, struct isst_if_cmd_cb *cb)

drivers/platform/x86/intel/speed_select_if/isst_if_common.c

528

unsigned char __user *ptr;

drivers/platform/x86/intel/speed_select_if/isst_if_common.c

581

void __user *argp = (void __user *)arg;

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1090

static int isst_if_get_perf_level_info(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1189

static int isst_if_get_perf_level_fabric_info(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1251

static int isst_if_get_perf_level_mask(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1294

static int isst_if_get_base_freq_info(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1332

static int isst_if_get_base_freq_mask(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1360

static int isst_if_get_tpmi_instance_count(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1423

static int isst_if_get_turbo_freq_info(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

1501

void __user *argp = (void __user *)arg;

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

602

static long isst_if_core_power_state(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

652

static long isst_if_clos_param(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

706

static long isst_if_clos_assoc(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

709

unsigned char __user *ptr;

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

855

static int isst_if_get_perf_level(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

919

static int isst_if_set_perf_level(void __user *argp)

drivers/platform/x86/intel/speed_select_if/isst_tpmi_core.c

980

static int isst_if_set_perf_feature(void __user *argp)

drivers/platform/x86/intel/telemetry/debugfs.c

683

const char __user *userbuf,

drivers/platform/x86/intel/telemetry/debugfs.c

731

const char __user *userbuf,

drivers/platform/x86/intel/vsec_tpmi.c

472

static ssize_t mem_write(struct file *file, const char __user *userbuf, size_t len, loff_t *ppos)

drivers/platform/x86/intel_scu_ipcutil.c

82

void __user *argp = (void __user *)arg;

drivers/platform/x86/lenovo/thinkpad_acpi.c

884

const char __user *userbuf,

drivers/platform/x86/msi-wmi-platform.c

228

static ssize_t msi_wmi_platform_write(struct file *fp, const char __user *input, size_t length,

drivers/platform/x86/sony-laptop.c

3910

static ssize_t sonypi_misc_read(struct file *file, char __user *buf,

drivers/platform/x86/sony-laptop.c

3964

void __user *argp = (void __user *)arg;

drivers/platform/x86/toshiba_acpi.c

1486

static ssize_t lcd_proc_write(struct file *file, const char __user *buf,

drivers/platform/x86/toshiba_acpi.c

1557

static ssize_t video_proc_write(struct file *file, const char __user *buf,

drivers/platform/x86/toshiba_acpi.c

1668

static ssize_t fan_proc_write(struct file *file, const char __user *buf,

drivers/platform/x86/toshiba_acpi.c

1739

static ssize_t keys_proc_write(struct file *file, const char __user *buf,

drivers/platform/x86/toshiba_acpi.c

2617

SMMRegisters __user *argp = (SMMRegisters __user *)arg;

drivers/pnp/isapnp/proc.c

22

static ssize_t isapnp_proc_bus_read(struct file *file, char __user * buf,

drivers/pnp/pnpbios/proc.c

179

static ssize_t pnpbios_proc_write(struct file *file, const char __user *buf,

drivers/pps/generators/pps_gen.c

59

void __user *uarg = (void __user *) arg;

drivers/pps/generators/pps_gen.c

60

unsigned int __user *uiuarg = (unsigned int __user *) arg;

drivers/pps/pps.c

101

void __user *uarg = (void __user *) arg;

drivers/pps/pps.c

102

int __user *iuarg = (int __user *) arg;

drivers/pps/pps.c

261

void __user *uarg = (void __user *) arg;

drivers/ps3/ps3-lpm.c

972

int ps3_lpm_copy_tb_to_user(unsigned long offset, void __user *buf,

drivers/ptp/ptp_chardev.c

181

static long ptp_clock_getcaps(struct ptp_clock *ptp, void __user *arg)

drivers/ptp/ptp_chardev.c

201

static long ptp_extts_request(struct ptp_clock *ptp, unsigned int cmd, void __user *arg)

drivers/ptp/ptp_chardev.c

247

static long ptp_perout_request(struct ptp_clock *ptp, unsigned int cmd, void __user *arg)

drivers/ptp/ptp_chardev.c

317

static long ptp_sys_offset_precise(struct ptp_clock *ptp, void __user *arg,

drivers/ptp/ptp_chardev.c

350

static long ptp_sys_offset_extended(struct ptp_clock *ptp, void __user *arg,

drivers/ptp/ptp_chardev.c

407

static long ptp_sys_offset(struct ptp_clock *ptp, void __user *arg)

drivers/ptp/ptp_chardev.c

446

static long ptp_pin_getfunc(struct ptp_clock *ptp, unsigned int cmd, void __user *arg)

drivers/ptp/ptp_chardev.c

466

static long ptp_pin_setfunc(struct ptp_clock *ptp, unsigned int cmd, void __user *arg)

drivers/ptp/ptp_chardev.c

492

static long ptp_mask_en_single(struct timestamp_event_queue *tsevq, void __user *arg)

drivers/ptp/ptp_chardev.c

508

void __user *argptr;

drivers/ptp/ptp_chardev.c

512

argptr = (void __force __user *)arg;

drivers/ptp/ptp_chardev.c

602

char __user *buf, size_t cnt)

drivers/ptp/ptp_clock.c

252

char __user *buffer,

drivers/ptp/ptp_clock.c

270

const char __user *buffer,

drivers/ptp/ptp_private.h

158

ssize_t ptp_read(struct posix_clock_context *pccontext, uint flags, char __user *buf,

drivers/ptp/ptp_vmclock.c

386

static ssize_t vmclock_miscdev_read(struct file *fp, char __user *buf,

drivers/pwm/core.c

2268

(struct pwmchip_waveform __user *)arg,

drivers/pwm/core.c

2297

ret = copy_to_user((struct pwmchip_waveform __user *)arg,

drivers/pwm/core.c

2309

(struct pwmchip_waveform __user *)arg,

drivers/pwm/core.c

2332

ret = copy_to_user((struct pwmchip_waveform __user *)arg,

drivers/pwm/core.c

2345

(struct pwmchip_waveform __user *)arg,

drivers/rapidio/devices/rio_mport_cdev.c

1096

static int rio_mport_alloc_dma(struct file *filp, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1123

static int rio_mport_free_dma(struct file *filp, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1159

static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1164

static int rio_mport_alloc_dma(struct file *filp, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1169

static int rio_mport_free_dma(struct file *filp, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1264

static int rio_mport_map_inbound(struct file *filp, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1306

static int rio_mport_inbound_free(struct file *filp, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1341

static int maint_port_idx_get(struct mport_cdev_priv *priv, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1412

void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1458

void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1531

void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1588

void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1658

void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

1802

static int rio_mport_del_riodev(struct mport_cdev_priv *priv, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

2060

return rio_mport_maint_rd(data, (void __user *)arg, 1);

drivers/rapidio/devices/rio_mport_cdev.c

2062

return rio_mport_maint_wr(data, (void __user *)arg, 1);

drivers/rapidio/devices/rio_mport_cdev.c

2064

return rio_mport_maint_rd(data, (void __user *)arg, 0);

drivers/rapidio/devices/rio_mport_cdev.c

2066

return rio_mport_maint_wr(data, (void __user *)arg, 0);

drivers/rapidio/devices/rio_mport_cdev.c

2068

return maint_hdid_set(data, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2070

return maint_comptag_set(data, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2072

return maint_port_idx_get(data, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2075

if (copy_to_user((void __user *)arg, &(md->properties),

drivers/rapidio/devices/rio_mport_cdev.c

2080

return rio_mport_add_db_filter(data, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2082

return rio_mport_remove_db_filter(data, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2084

return rio_mport_add_pw_filter(data, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2086

return rio_mport_remove_pw_filter(data, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2091

if (copy_to_user((void __user *)arg, &data->event_mask,

drivers/rapidio/devices/rio_mport_cdev.c

2096

return rio_mport_obw_map(filp, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2098

return rio_mport_map_inbound(filp, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2100

return rio_mport_obw_free(filp, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2102

return rio_mport_inbound_free(filp, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2104

return rio_mport_alloc_dma(filp, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2106

return rio_mport_free_dma(filp, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2108

return rio_mport_wait_for_async_dma(filp, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2110

return rio_mport_transfer_ioctl(filp, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2112

return rio_mport_add_riodev(data, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2114

return rio_mport_del_riodev(data, (void __user *)arg);

drivers/rapidio/devices/rio_mport_cdev.c

2248

static ssize_t mport_read(struct file *filp, char __user *buf, size_t count,

drivers/rapidio/devices/rio_mport_cdev.c

2281

static ssize_t mport_write(struct file *filp, const char __user *buf,

drivers/rapidio/devices/rio_mport_cdev.c

240

static int rio_mport_maint_rd(struct mport_cdev_priv *priv, void __user *arg,

drivers/rapidio/devices/rio_mport_cdev.c

277

if (unlikely(copy_to_user((void __user *)(uintptr_t)maint_io.buffer,

drivers/rapidio/devices/rio_mport_cdev.c

285

static int rio_mport_maint_wr(struct mport_cdev_priv *priv, void __user *arg,

drivers/rapidio/devices/rio_mport_cdev.c

309

(void __user *)(uintptr_t)maint_io.buffer, length))) {

drivers/rapidio/devices/rio_mport_cdev.c

407

static int rio_mport_obw_map(struct file *filp, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

441

static int rio_mport_obw_free(struct file *filp, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

477

static int maint_hdid_set(struct mport_cdev_priv *priv, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

499

static int maint_comptag_set(struct mport_cdev_priv *priv, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

942

static int rio_mport_transfer_ioctl(struct file *filp, void __user *arg)

drivers/rapidio/devices/rio_mport_cdev.c

967

(void __user *)(uintptr_t)transaction.block,

drivers/rapidio/devices/rio_mport_cdev.c

979

if (unlikely(copy_to_user((void __user *)(uintptr_t)transaction.block,

drivers/rapidio/devices/rio_mport_cdev.c

989

static int rio_mport_wait_for_async_dma(struct file *filp, void __user *arg)

drivers/rapidio/rio_cm.c

1528

static int cm_ep_get_list_size(void __user *arg)

drivers/rapidio/rio_cm.c

1530

u32 __user *p = arg;

drivers/rapidio/rio_cm.c

1559

static int cm_ep_get_list(void __user *arg)

drivers/rapidio/rio_cm.c

1615

static int cm_mport_get_list(void __user *arg)

drivers/rapidio/rio_cm.c

1655

static int cm_chan_create(struct file *filp, void __user *arg)

drivers/rapidio/rio_cm.c

1657

u16 __user *p = arg;

drivers/rapidio/rio_cm.c

1681

static int cm_chan_close(struct file *filp, void __user *arg)

drivers/rapidio/rio_cm.c

1683

u16 __user *p = arg;

drivers/rapidio/rio_cm.c

1713

static int cm_chan_bind(void __user *arg)

drivers/rapidio/rio_cm.c

1729

static int cm_chan_listen(void __user *arg)

drivers/rapidio/rio_cm.c

1731

u16 __user *p = arg;

drivers/rapidio/rio_cm.c

1745

static int cm_chan_accept(struct file *filp, void __user *arg)

drivers/rapidio/rio_cm.c

1777

static int cm_chan_connect(void __user *arg)

drivers/rapidio/rio_cm.c

1832

static int cm_chan_msg_send(void __user *arg)

drivers/rapidio/rio_cm.c

1843

buf = memdup_user((void __user *)(uintptr_t)msg.msg, msg.size);

drivers/rapidio/rio_cm.c

1857

static int cm_chan_msg_rcv(void __user *arg)

drivers/rapidio/rio_cm.c

1883

if (copy_to_user((void __user *)(uintptr_t)msg.msg, buf, msg_size))

drivers/rapidio/rio_cm.c

1900

return cm_ep_get_list_size((void __user *)arg);

drivers/rapidio/rio_cm.c

1902

return cm_ep_get_list((void __user *)arg);

drivers/rapidio/rio_cm.c

1904

return cm_chan_create(filp, (void __user *)arg);

drivers/rapidio/rio_cm.c

1906

return cm_chan_close(filp, (void __user *)arg);

drivers/rapidio/rio_cm.c

1908

return cm_chan_bind((void __user *)arg);

drivers/rapidio/rio_cm.c

1910

return cm_chan_listen((void __user *)arg);

drivers/rapidio/rio_cm.c

1912

return cm_chan_accept(filp, (void __user *)arg);

drivers/rapidio/rio_cm.c

1914

return cm_chan_connect((void __user *)arg);

drivers/rapidio/rio_cm.c

1916

return cm_chan_msg_send((void __user *)arg);

drivers/rapidio/rio_cm.c

1918

return cm_chan_msg_rcv((void __user *)arg);

drivers/rapidio/rio_cm.c

1920

return cm_mport_get_list((void __user *)arg);

drivers/regulator/core.c

1938

char __user *user_buf,

drivers/remoteproc/remoteproc_cdev.c

21

static ssize_t rproc_cdev_write(struct file *filp, const char __user *buf, size_t len, loff_t *pos)

drivers/remoteproc/remoteproc_cdev.c

51

void __user *argp = (void __user *)arg;

drivers/remoteproc/remoteproc_debugfs.c

126

static ssize_t rproc_trace_read(struct file *filp, char __user *userbuf,

drivers/remoteproc/remoteproc_debugfs.c

155

static ssize_t rproc_name_read(struct file *filp, char __user *userbuf,

drivers/remoteproc/remoteproc_debugfs.c

175

static ssize_t rproc_recovery_read(struct file *filp, char __user *userbuf,

drivers/remoteproc/remoteproc_debugfs.c

209

rproc_recovery_write(struct file *filp, const char __user *user_buf,

drivers/remoteproc/remoteproc_debugfs.c

252

rproc_crash_write(struct file *filp, const char __user *user_buf,

drivers/remoteproc/remoteproc_debugfs.c

42

static ssize_t rproc_coredump_read(struct file *filp, char __user *userbuf,

drivers/remoteproc/remoteproc_debugfs.c

72

const char __user *user_buf, size_t count,

drivers/rpmsg/rpmsg_char.c

333

ret = put_user(eptdev->remote_flow_restricted, (int __user *)arg);

drivers/rpmsg/rpmsg_ctrl.c

78

void __user *argp = (void __user *)arg;

drivers/rtc/dev.c

142

rtc_dev_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

drivers/rtc/dev.c

182

ret = put_user(data, (unsigned int __user *)buf) ?:

drivers/rtc/dev.c

185

ret = put_user(data, (unsigned long __user *)buf) ?:

drivers/rtc/dev.c

221

void __user *uarg = (void __user *)arg;

drivers/rtc/dev.c

376

err = put_user(rtc->irq_freq, (unsigned long __user *)uarg);

drivers/rtc/dev.c

485

void __user *uarg = compat_ptr(arg);

drivers/rtc/dev.c

489

return put_user(rtc->irq_freq, (__u32 __user *)uarg);

drivers/rtc/rtc-abx80x.c

539

return put_user(tmp, (unsigned int __user *)arg);

drivers/rtc/rtc-gamecube.c

207

return put_user(value, (unsigned int __user *)arg);

drivers/rtc/rtc-isl12022.c

449

return put_user(user, (u32 __user *)arg);

drivers/rtc/rtc-m41t80.c

726

static ssize_t wdt_write(struct file *file, const char __user *buf,

drivers/rtc/rtc-m41t80.c

736

static ssize_t wdt_read(struct file *file, char __user *buf,

drivers/rtc/rtc-m41t80.c

765

return copy_to_user((struct watchdog_info __user *)arg, &ident,

drivers/rtc/rtc-m41t80.c

770

return put_user(boot_flag, (int __user *)arg);

drivers/rtc/rtc-m41t80.c

775

if (get_user(new_margin, (int __user *)arg))

drivers/rtc/rtc-m41t80.c

784

return put_user(wdt_margin, (int __user *)arg);

drivers/rtc/rtc-m41t80.c

787

if (copy_from_user(&rv, (int __user *)arg, sizeof(int)))

drivers/rtc/rtc-nct3018y.c

334

return put_user(flags, (unsigned int __user *)arg);

drivers/rtc/rtc-pcf2127.c

435

return put_user(touser, (unsigned int __user *)arg);

drivers/rtc/rtc-pcf85063.c

309

return put_user(status, (unsigned int __user *)arg);

drivers/rtc/rtc-pcf8523.c

331

return put_user(flags, (unsigned int __user *)arg);

drivers/rtc/rtc-pcf8563.c

238

(unsigned int __user *)arg);

drivers/rtc/rtc-rs5c372.c

527

return put_user(flags, (unsigned int __user *)arg);

drivers/rtc/rtc-rv3028.c

598

return put_user(status, (unsigned int __user *)arg);

drivers/rtc/rtc-rv3029c2.c

464

return put_user(vl, (unsigned int __user *)arg);

drivers/rtc/rtc-rv3032.c

479

return put_user(val, (unsigned int __user *)arg);

drivers/rtc/rtc-rv8803.c

516

return put_user(vl, (unsigned int __user *)arg);

drivers/rtc/rtc-rx8010.c

350

return put_user(tmp, (unsigned int __user *)arg);

drivers/rtc/rtc-rx8111.c

291

return put_user(vlval, (typeof(vlval) __user *)arg);

drivers/rtc/rtc-s35390a.c

396

if (copy_to_user((void __user *)arg, &err, sizeof(int)))

drivers/s390/block/dasd.c

895

char *dasd_get_user_string(const char __user *user_buf, size_t user_len)

drivers/s390/block/dasd.c

915

const char __user *user_buf,

drivers/s390/block/dasd_eckd.c

5199

void __user *argp)

drivers/s390/block/dasd_eckd.c

5265

dasd_eckd_performance(struct dasd_device *device, void __user *argp)

drivers/s390/block/dasd_eckd.c

5329

dasd_eckd_get_attrib(struct dasd_device *device, void __user *argp)

drivers/s390/block/dasd_eckd.c

5353

dasd_eckd_set_attrib(struct dasd_device *device, void __user *argp)

drivers/s390/block/dasd_eckd.c

5377

static int dasd_symm_io(struct dasd_device *device, void __user *argp)

drivers/s390/block/dasd_eckd.c

5413

(void __user *)(unsigned long) usrparm.psf_data,

drivers/s390/block/dasd_eckd.c

5457

if (copy_to_user((void __user *)(unsigned long) usrparm.rssd_result,

drivers/s390/block/dasd_eckd.c

5475

dasd_eckd_ioctl(struct dasd_block *block, unsigned int cmd, void __user *argp)

drivers/s390/block/dasd_eer.c

596

static ssize_t dasd_eer_read(struct file *filp, char __user *buf,

drivers/s390/block/dasd_int.h

378

int (*ioctl) (struct dasd_block *, unsigned int, void __user *);

drivers/s390/block/dasd_int.h

899

char *dasd_get_user_string(const char __user *, size_t);

drivers/s390/block/dasd_ioctl.c

250

dasd_ioctl_format(struct block_device *bdev, void __user *argp)

drivers/s390/block/dasd_ioctl.c

28

dasd_ioctl_api_version(void __user *argp)

drivers/s390/block/dasd_ioctl.c

287

static int dasd_ioctl_check_format(struct block_device *bdev, void __user *argp)

drivers/s390/block/dasd_ioctl.c

31

return put_user(ver, (int __user *)argp);

drivers/s390/block/dasd_ioctl.c

338

static int dasd_ioctl_release_space(struct block_device *bdev, void __user *argp)

drivers/s390/block/dasd_ioctl.c

381

dasd_ioctl_copy_pair_swap(struct block_device *bdev, void __user *argp)

drivers/s390/block/dasd_ioctl.c

440

static int dasd_ioctl_read_profile(struct dasd_block *block, void __user *argp)

drivers/s390/block/dasd_ioctl.c

489

static int dasd_ioctl_read_profile(struct dasd_block *block, void __user *argp)

drivers/s390/block/dasd_ioctl.c

557

static int dasd_ioctl_information(struct dasd_block *block, void __user *argp,

drivers/s390/block/dasd_ioctl.c

598

struct cmbdata __user *argp)

drivers/s390/block/dasd_ioctl.c

615

void __user *argp;

drivers/s390/block/dasd_ioctl.c

618

argp = (void __user *)arg;

drivers/s390/block/dasd_proc.c

255

const char __user *user_buf, size_t user_len, loff_t *pos)

drivers/s390/char/fs3270.c

237

static ssize_t fs3270_read(struct file *filp, char __user *data,

drivers/s390/char/fs3270.c

282

static ssize_t fs3270_write(struct file *filp, const char __user *data,

drivers/s390/char/fs3270.c

324

char __user *argp;

drivers/s390/char/fs3270.c

332

argp = (char __user *)arg;

drivers/s390/char/hmcdrv_dev.c

150

char __user *buf, size_t len)

drivers/s390/char/hmcdrv_dev.c

171

static ssize_t hmcdrv_dev_read(struct file *fp, char __user *ubuf,

drivers/s390/char/hmcdrv_dev.c

196

static ssize_t hmcdrv_dev_write(struct file *fp, const char __user *ubuf,

drivers/s390/char/hmcdrv_dev.c

214

*pos, (char __user *) ubuf, len);

drivers/s390/char/hmcdrv_dev.c

44

static ssize_t hmcdrv_dev_read(struct file *fp, char __user *ubuf,

drivers/s390/char/hmcdrv_dev.c

46

static ssize_t hmcdrv_dev_write(struct file *fp, const char __user *ubuf,

drivers/s390/char/hmcdrv_dev.c

49

char __user *buf, size_t len);

drivers/s390/char/hmcdrv_ftp.c

239

char __user *buf, size_t len)

drivers/s390/char/hmcdrv_ftp.h

62

char __user *buf, size_t len);

drivers/s390/char/keyboard.c

360

do_kdsk_ioctl(struct kbd_data *kbd, struct kbentry __user *user_kbe,

drivers/s390/char/keyboard.c

436

do_kdgkb_ioctl(struct kbd_data *kbd, struct kbsentry __user *u_kbs,

drivers/s390/char/keyboard.c

481

void __user *argp;

drivers/s390/char/keyboard.c

485

argp = (void __user *)arg;

drivers/s390/char/keyboard.c

497

return put_user(KB_101, (char __user *)argp);

drivers/s390/char/keyboard.c

506

struct kbdiacrs __user *a = argp;

drivers/s390/char/keyboard.c

523

struct kbdiacrsuc __user *a = argp;

drivers/s390/char/keyboard.c

535

struct kbdiacrs __user *a = argp;

drivers/s390/char/keyboard.c

557

struct kbdiacrsuc __user *a = argp;

drivers/s390/char/monreader.c

360

static ssize_t mon_read(struct file *filp, char __user *data,

drivers/s390/char/monwriter.c

222

static ssize_t monwrite_write(struct file *filp, const char __user *data,

drivers/s390/char/sclp_ctl.c

43

static void __user *u64_to_uptr(u64 value)

drivers/s390/char/sclp_ctl.c

45

return (void __user *)(unsigned long)value;

drivers/s390/char/sclp_ctl.c

51

static int sclp_ctl_ioctl_sccb(void __user *user_area)

drivers/s390/char/sclp_ctl.c

92

void __user *argp;

drivers/s390/char/sclp_ctl.c

94

argp = (void __user *)arg;

drivers/s390/char/tape_char.c

167

tapechar_write(struct file *filp, const char __user *data, size_t count, loff_t *ppos)

drivers/s390/char/tape_char.c

33

static ssize_t tapechar_read(struct file *, char __user *, size_t, loff_t *);

drivers/s390/char/tape_char.c

334

unsigned int no, void __user *data)

drivers/s390/char/tape_char.c

34

static ssize_t tapechar_write(struct file *, const char __user *, size_t, loff_t *);

drivers/s390/char/tape_char.c

428

rc = __tapechar_ioctl(device, no, (void __user *)data);

drivers/s390/char/tape_char.c

93

tapechar_read(struct file *filp, char __user *data, size_t count, loff_t *ppos)

drivers/s390/char/uvdevice.c

114

struct uvio_attest __user *user_uvio_attest = (void __user *)uv_ioctl->argument_addr;

drivers/s390/char/uvdevice.c

115

u32 __user *user_buf_add_len = (u32 __user *)&user_uvio_attest->add_data_len;

drivers/s390/char/uvdevice.c

116

void __user *user_buf_add = (void __user *)uvio_attest->add_data_addr;

drivers/s390/char/uvdevice.c

117

void __user *user_buf_meas = (void __user *)uvio_attest->meas_addr;

drivers/s390/char/uvdevice.c

118

void __user *user_buf_uid = &user_uvio_attest->config_uid;

drivers/s390/char/uvdevice.c

133

u8 __user *user_arg_buf = (u8 __user *)uv_ioctl->argument_addr;

drivers/s390/char/uvdevice.c

271

void __user *user_buf_arg = (void __user *)uv_ioctl->argument_addr;

drivers/s390/char/uvdevice.c

310

u8 __user *user_buf = (u8 __user *)uv_ioctl->argument_addr;

drivers/s390/char/uvdevice.c

438

u16 __user *user_index = (u16 __user *)uv_ioctl->argument_addr;

drivers/s390/char/uvdevice.c

462

if (copy_to_user((__user void *)uv_ioctl->argument_addr, buf, buf_len))

drivers/s390/char/uvdevice.c

474

static int uvio_copy_and_check_ioctl(struct uvio_ioctl_cb *ioctl, void __user *argp,

drivers/s390/char/uvdevice.c

502

void __user *argp = (void __user *)arg;

drivers/s390/char/uvdevice.c

76

void __user *user_buf_arg = (void __user *)uv_ioctl->argument_addr;

drivers/s390/char/uvdevice.c

90

void __user *user_buf_arcb = (void __user *)uvio_attest->arcb_addr;

drivers/s390/char/vmcp.c

131

vmcp_read(struct file *file, char __user *buff, size_t count, loff_t *ppos)

drivers/s390/char/vmcp.c

154

vmcp_write(struct file *file, const char __user *buff, size_t count,

drivers/s390/char/vmcp.c

203

int __user *argp;

drivers/s390/char/vmcp.c

206

argp = (int __user *)arg;

drivers/s390/char/vmlogrdr.c

475

static ssize_t vmlogrdr_read(struct file *filp, char __user *data,

drivers/s390/char/vmlogrdr.c

91

static ssize_t vmlogrdr_read (struct file *filp, char __user *data,

drivers/s390/char/vmur.c

214

static struct ccw1 *alloc_chan_prog(const char __user *ubuf, int rec_count,

drivers/s390/char/vmur.c

419

static ssize_t do_write(struct urdev *urd, const char __user *udata,

drivers/s390/char/vmur.c

445

static ssize_t ur_write(struct file *file, const char __user *udata,

drivers/s390/char/vmur.c

513

static ssize_t diag14_read(struct file *file, char __user *ubuf, size_t count,

drivers/s390/char/vmur.c

563

static ssize_t ur_read(struct file *file, char __user *ubuf, size_t count,

drivers/s390/char/zcore.c

134

static ssize_t zcore_reipl_write(struct file *filp, const char __user *buf,

drivers/s390/char/zcore.c

167

static ssize_t zcore_hsa_read(struct file *filp, char __user *buf,

drivers/s390/char/zcore.c

179

static ssize_t zcore_hsa_write(struct file *filp, const char __user *buf,

drivers/s390/cio/blacklist.c

358

cio_ignore_write(struct file *file, const char __user *user_buf,

drivers/s390/cio/chsc_sch.c

285

static int chsc_ioctl_start(void __user *user_area)

drivers/s390/cio/chsc_sch.c

328

static int chsc_ioctl_on_close_set(void __user *user_area)

drivers/s390/cio/chsc_sch.c

390

static int chsc_ioctl_start_sync(void __user *user_area)

drivers/s390/cio/chsc_sch.c

421

static int chsc_ioctl_info_channel_path(void __user *user_cd)

drivers/s390/cio/chsc_sch.c

483

static int chsc_ioctl_info_cu(void __user *user_cd)

drivers/s390/cio/chsc_sch.c

545

static int chsc_ioctl_info_sch_cu(void __user *user_cud)

drivers/s390/cio/chsc_sch.c

609

static int chsc_ioctl_conf_info(void __user *user_ci)

drivers/s390/cio/chsc_sch.c

669

static int chsc_ioctl_conf_comp_list(void __user *user_ccl)

drivers/s390/cio/chsc_sch.c

752

static int chsc_ioctl_chpd(void __user *user_chpd)

drivers/s390/cio/chsc_sch.c

782

static int chsc_ioctl_dcal(void __user *user_dcal)

drivers/s390/cio/chsc_sch.c

844

void __user *argp;

drivers/s390/cio/chsc_sch.c

847

argp = (void __user *)arg;

drivers/s390/cio/cio_inject.c

127

static ssize_t enable_inject_write(struct file *file, const char __user *buf,

drivers/s390/cio/cio_inject.c

84

static ssize_t crw_inject_write(struct file *file, const char __user *buf,

drivers/s390/cio/css.c

1289

static ssize_t cio_settle_write(struct file *file, const char __user *buf,

drivers/s390/cio/qdio_debug.c

236

static ssize_t qperf_seq_write(struct file *file, const char __user *ubuf,

drivers/s390/cio/vfio_ccw_async.c

15

char __user *buf, size_t count,

drivers/s390/cio/vfio_ccw_async.c

37

const char __user *buf, size_t count,

drivers/s390/cio/vfio_ccw_chp.c

124

const char __user *buf, size_t count,

drivers/s390/cio/vfio_ccw_chp.c

16

char __user *buf, size_t count,

drivers/s390/cio/vfio_ccw_chp.c

51

const char __user *buf, size_t count,

drivers/s390/cio/vfio_ccw_chp.c

81

char __user *buf, size_t count,

drivers/s390/cio/vfio_ccw_ops.c

209

char __user *buf, size_t count,

drivers/s390/cio/vfio_ccw_ops.c

230

char __user *buf,

drivers/s390/cio/vfio_ccw_ops.c

254

const char __user *buf,

drivers/s390/cio/vfio_ccw_ops.c

282

const char __user *buf,

drivers/s390/cio/vfio_ccw_ops.c

382

void __user *data)

drivers/s390/cio/vfio_ccw_ops.c

414

if (get_user(trigger, (uint8_t __user *)data))

drivers/s390/cio/vfio_ccw_ops.c

425

if (get_user(fd, (int32_t __user *)data))

drivers/s390/cio/vfio_ccw_ops.c

506

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/s390/cio/vfio_ccw_ops.c

516

return copy_to_user((void __user *)arg, &info, minsz) ? -EFAULT : 0;

drivers/s390/cio/vfio_ccw_ops.c

524

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/s390/cio/vfio_ccw_ops.c

537

return copy_to_user((void __user *)arg, &info, minsz) ? -EFAULT : 0;

drivers/s390/cio/vfio_ccw_ops.c

543

void __user *data;

drivers/s390/cio/vfio_ccw_ops.c

547

if (copy_from_user(&hdr, (void __user *)arg, minsz))

drivers/s390/cio/vfio_ccw_ops.c

556

data = (void __user *)(arg + minsz);

drivers/s390/cio/vfio_ccw_private.h

38

ssize_t (*read)(struct vfio_ccw_private *private, char __user *buf,

drivers/s390/cio/vfio_ccw_private.h

41

const char __user *buf, size_t count, loff_t *ppos);

drivers/s390/crypto/pkey_api.c

116

static int pkey_ioctl_clr2seck(struct pkey_clr2seck __user *ucs)

drivers/s390/crypto/pkey_api.c

142

static int pkey_ioctl_sec2protk(struct pkey_sec2protk __user *usp)

drivers/s390/crypto/pkey_api.c

168

static int pkey_ioctl_clr2protk(struct pkey_clr2protk __user *ucp)

drivers/s390/crypto/pkey_api.c

215

static int pkey_ioctl_findcard(struct pkey_findcard __user *ufc)

drivers/s390/crypto/pkey_api.c

253

static int pkey_ioctl_skey2pkey(struct pkey_skey2pkey __user *usp)

drivers/s390/crypto/pkey_api.c

276

static int pkey_ioctl_verifykey(struct pkey_verifykey __user *uvk)

drivers/s390/crypto/pkey_api.c

305

static int pkey_ioctl_genprotk(struct pkey_genprotk __user *ugp)

drivers/s390/crypto/pkey_api.c

326

static int pkey_ioctl_verifyprotk(struct pkey_verifyprotk __user *uvp)

drivers/s390/crypto/pkey_api.c

366

static int pkey_ioctl_kblob2protk(struct pkey_kblob2pkey __user *utp)

drivers/s390/crypto/pkey_api.c

390

static int pkey_ioctl_genseck2(struct pkey_genseck2 __user *ugs)

drivers/s390/crypto/pkey_api.c

442

static int pkey_ioctl_clr2seck2(struct pkey_clr2seck2 __user *ucs)

drivers/s390/crypto/pkey_api.c

503

static int pkey_ioctl_verifykey2(struct pkey_verifykey2 __user *uvk)

drivers/s390/crypto/pkey_api.c

527

static int pkey_ioctl_kblob2protk2(struct pkey_kblob2pkey2 __user *utp)

drivers/s390/crypto/pkey_api.c

558

static int pkey_ioctl_apqns4k(struct pkey_apqns4key __user *uak)

drivers/s390/crypto/pkey_api.c

608

static int pkey_ioctl_apqns4kt(struct pkey_apqns4keytype __user *uat)

drivers/s390/crypto/pkey_api.c

652

static int pkey_ioctl_kblob2protk3(struct pkey_kblob2pkey3 __user *utp)

drivers/s390/crypto/pkey_api.c

710

rc = pkey_ioctl_genseck((struct pkey_genseck __user *)arg);

drivers/s390/crypto/pkey_api.c

713

rc = pkey_ioctl_clr2seck((struct pkey_clr2seck __user *)arg);

drivers/s390/crypto/pkey_api.c

716

rc = pkey_ioctl_sec2protk((struct pkey_sec2protk __user *)arg);

drivers/s390/crypto/pkey_api.c

719

rc = pkey_ioctl_clr2protk((struct pkey_clr2protk __user *)arg);

drivers/s390/crypto/pkey_api.c

722

rc = pkey_ioctl_findcard((struct pkey_findcard __user *)arg);

drivers/s390/crypto/pkey_api.c

725

rc = pkey_ioctl_skey2pkey((struct pkey_skey2pkey __user *)arg);

drivers/s390/crypto/pkey_api.c

728

rc = pkey_ioctl_verifykey((struct pkey_verifykey __user *)arg);

drivers/s390/crypto/pkey_api.c

731

rc = pkey_ioctl_genprotk((struct pkey_genprotk __user *)arg);

drivers/s390/crypto/pkey_api.c

734

rc = pkey_ioctl_verifyprotk((struct pkey_verifyprotk __user *)arg);

drivers/s390/crypto/pkey_api.c

737

rc = pkey_ioctl_kblob2protk((struct pkey_kblob2pkey __user *)arg);

drivers/s390/crypto/pkey_api.c

740

rc = pkey_ioctl_genseck2((struct pkey_genseck2 __user *)arg);

drivers/s390/crypto/pkey_api.c

743

rc = pkey_ioctl_clr2seck2((struct pkey_clr2seck2 __user *)arg);

drivers/s390/crypto/pkey_api.c

746

rc = pkey_ioctl_verifykey2((struct pkey_verifykey2 __user *)arg);

drivers/s390/crypto/pkey_api.c

749

rc = pkey_ioctl_kblob2protk2((struct pkey_kblob2pkey2 __user *)arg);

drivers/s390/crypto/pkey_api.c

752

rc = pkey_ioctl_apqns4k((struct pkey_apqns4key __user *)arg);

drivers/s390/crypto/pkey_api.c

755

rc = pkey_ioctl_apqns4kt((struct pkey_apqns4keytype __user *)arg);

drivers/s390/crypto/pkey_api.c

758

rc = pkey_ioctl_kblob2protk3((struct pkey_kblob2pkey3 __user *)arg);

drivers/s390/crypto/pkey_api.c

76

static void *_copy_key_from_user(void __user *ukey, size_t keylen)

drivers/s390/crypto/pkey_api.c

84

static void *_copy_apqns_from_user(void __user *uapqns, size_t nr_apqns)

drivers/s390/crypto/pkey_api.c

92

static int pkey_ioctl_genseck(struct pkey_genseck __user *ugs)

drivers/s390/crypto/vfio_ap_ops.c

2108

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/s390/crypto/vfio_ap_ops.c

2118

return copy_to_user((void __user *)arg, &info, minsz) ? -EFAULT : 0;

drivers/s390/crypto/vfio_ap_ops.c

2128

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/s390/crypto/vfio_ap_ops.c

2147

return copy_to_user((void __user *)arg, &info, minsz) ? -EFAULT : 0;

drivers/s390/crypto/vfio_ap_ops.c

2158

if (copy_from_user(irq_set, (void __user *)arg, minsz))

drivers/s390/crypto/vfio_ap_ops.c

2176

void __user *data;

drivers/s390/crypto/vfio_ap_ops.c

2181

data = (void __user *)(arg + minsz);

drivers/s390/crypto/vfio_ap_ops.c

2183

if (get_user(fd, (s32 __user *)data))

drivers/s390/crypto/vfio_ap_ops.c

2209

void __user *data;

drivers/s390/crypto/vfio_ap_ops.c

2214

data = (void __user *)(arg + minsz);

drivers/s390/crypto/vfio_ap_ops.c

2216

if (get_user(fd, (s32 __user *)data))

drivers/s390/crypto/zcrypt_api.c

1483

struct ica_rsa_modexpo __user *umex = (void __user *)arg;

drivers/s390/crypto/zcrypt_api.c

1512

struct ica_rsa_modexpo_crt __user *ucrt = (void __user *)arg;

drivers/s390/crypto/zcrypt_api.c

1542

struct ica_xcRB __user *uxcrb = (void __user *)arg;

drivers/s390/crypto/zcrypt_api.c

1573

struct ep11_urb __user *uxcrb = (void __user *)arg;

drivers/s390/crypto/zcrypt_api.c

1629

if (copy_to_user((char __user *)arg, device_status,

drivers/s390/crypto/zcrypt_api.c

1639

if (copy_to_user((char __user *)arg, status, sizeof(status)))

drivers/s390/crypto/zcrypt_api.c

1647

if (copy_to_user((char __user *)arg, qdepth, sizeof(qdepth)))

drivers/s390/crypto/zcrypt_api.c

1658

if (copy_to_user((int __user *)arg, reqcnt,

drivers/s390/crypto/zcrypt_api.c

1665

return put_user(zcrypt_requestq_count(), (int __user *)arg);

drivers/s390/crypto/zcrypt_api.c

1667

return put_user(zcrypt_pendingq_count(), (int __user *)arg);

drivers/s390/crypto/zcrypt_api.c

1670

(int __user *)arg);

drivers/s390/crypto/zcrypt_api.c

1672

return put_user(ap_domain_index, (int __user *)arg);

drivers/s390/crypto/zcrypt_api.c

1686

if (copy_to_user((char __user *)arg, device_status,

drivers/s390/crypto/zcrypt_api.c

1697

if (copy_to_user((char __user *)arg, status, sizeof(status)))

drivers/s390/crypto/zcrypt_api.c

1706

if (copy_to_user((char __user *)arg, qdepth, sizeof(qdepth)))

drivers/s390/crypto/zcrypt_api.c

1715

if (copy_to_user((int __user *)arg, reqcnt, sizeof(reqcnt)))

drivers/s390/crypto/zcrypt_api.c

481

static ssize_t zcrypt_read(struct file *filp, char __user *buf,

drivers/s390/crypto/zcrypt_api.c

492

static ssize_t zcrypt_write(struct file *filp, const char __user *buf,

drivers/s390/crypto/zcrypt_api.h

179

const void __user *from,

drivers/s390/crypto/zcrypt_api.h

189

void __user *to,

drivers/s390/crypto/zcrypt_ccamisc.c

1094

prepcblk->rpl_parmb = (u8 __user *)ptr;

drivers/s390/crypto/zcrypt_ccamisc.c

1324

prepcblk->rpl_parmb = (u8 __user *)ptr;

drivers/s390/crypto/zcrypt_ccamisc.c

1488

prepcblk->rpl_parmb = (u8 __user *)ptr;

drivers/s390/crypto/zcrypt_ccamisc.c

1595

prepcblk->rpl_parmb = (u8 __user *)ptr;

drivers/s390/crypto/zcrypt_ccamisc.c

270

((u8 __user *)preqcblk) + sizeof(struct CPRBX);

drivers/s390/crypto/zcrypt_ccamisc.c

272

((u8 __user *)prepcblk) + sizeof(struct CPRBX);

drivers/s390/crypto/zcrypt_ccamisc.c

312

pxcrb->request_control_blk_addr = (void __user *)preqcblk;

drivers/s390/crypto/zcrypt_ccamisc.c

314

pxcrb->reply_control_blk_addr = (void __user *)prepcblk;

drivers/s390/crypto/zcrypt_ccamisc.c

430

prepcblk->rpl_parmb = (u8 __user *)ptr;

drivers/s390/crypto/zcrypt_ccamisc.c

569

prepcblk->rpl_parmb = (u8 __user *)ptr;

drivers/s390/crypto/zcrypt_ccamisc.c

706

prepcblk->rpl_parmb = (u8 __user *)ptr;

drivers/s390/crypto/zcrypt_ccamisc.c

926

prepcblk->rpl_parmb = (u8 __user *)ptr;

drivers/s390/crypto/zcrypt_ep11misc.c

458

u->targets = (u8 __user *)t;

drivers/s390/crypto/zcrypt_ep11misc.c

460

u->req = (u8 __user *)req;

drivers/s390/crypto/zcrypt_ep11misc.c

462

u->resp = (u8 __user *)rep;

drivers/s390/crypto/zcrypt_msgtype50.c

347

char __user *outputdata,

drivers/s390/crypto/zcrypt_msgtype50.c

374

char __user *outputdata,

drivers/s390/crypto/zcrypt_msgtype6.c

501

(char __force __user *)xcrb->req, xcrb->req_len)) {

drivers/s390/crypto/zcrypt_msgtype6.c

565

char __user *outputdata,

drivers/s390/crypto/zcrypt_msgtype6.c

674

if (z_copy_to_user(userspace, (char __force __user *)xcrb->resp,

drivers/s390/crypto/zcrypt_msgtype6.c

700

char __user *outputdata,

drivers/s390/net/qeth_core.h

1080

void __user *data, int cmd);

drivers/s390/net/qeth_core_main.c

4687

static int qeth_snmp_command(struct qeth_card *card, char __user *udata)

drivers/s390/net/qeth_core_main.c

4689

struct qeth_snmp_ureq __user *ureq;

drivers/s390/net/qeth_core_main.c

4704

ureq = (struct qeth_snmp_ureq __user *) udata;

drivers/s390/net/qeth_core_main.c

4770

static int qeth_query_oat_command(struct qeth_card *card, char __user *udata)

drivers/s390/net/qeth_core_main.c

4778

void __user *tmp;

drivers/s390/net/qeth_core_main.c

6523

int qeth_siocdevprivate(struct net_device *dev, struct ifreq *rq, void __user *data, int cmd)

drivers/s390/net/qeth_l3_main.c

1400

static int qeth_l3_arp_query(struct qeth_card *card, char __user *udata)

drivers/s390/net/qeth_l3_main.c

1519

void __user *data, int cmd)

drivers/sbus/char/display7seg.c

118

if (get_user(ireg, (int __user *) arg)) {

drivers/sbus/char/display7seg.c

138

if (put_user(regs, (int __user *) arg)) {

drivers/sbus/char/envctrl.c

537

envctrl_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

drivers/sbus/char/envctrl.c

656

char __user *infobuf;

drivers/sbus/char/envctrl.c

675

infobuf = (char __user *) arg;

drivers/sbus/char/flash.c

102

flash_read(struct file * file, char __user * buf,

drivers/sbus/char/openprom.c

123

static int copyout(void __user *info, struct openpromio *opp, int len)

drivers/sbus/char/openprom.c

130

static int opromgetprop(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize)

drivers/sbus/char/openprom.c

147

static int opromnxtprop(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize)

drivers/sbus/char/openprom.c

185

static int opromnext(void __user *argp, unsigned int cmd, struct device_node *dp, struct openpromio *op, int bufsize, DATA *data)

drivers/sbus/char/openprom.c

232

static int oprompci2node(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize, DATA *data)

drivers/sbus/char/openprom.c

258

static int oprompath2node(void __user *argp, struct device_node *dp, struct openpromio *op, int bufsize, DATA *data)

drivers/sbus/char/openprom.c

272

static int opromgetbootargs(void __user *argp, struct openpromio *op, int bufsize)

drivers/sbus/char/openprom.c

297

void __user *argp = (void __user *)arg;

drivers/sbus/char/openprom.c

374

static char * copyin_string(char __user *user, size_t len)

drivers/sbus/char/openprom.c

385

static int opiocget(void __user *argp, DATA *data)

drivers/sbus/char/openprom.c

417

static int opiocnextprop(void __user *argp, DATA *data)

drivers/sbus/char/openprom.c

463

static int opiocset(void __user *argp, DATA *data)

drivers/sbus/char/openprom.c

495

static int opiocgetnext(unsigned int cmd, void __user *argp)

drivers/sbus/char/openprom.c

531

void __user *argp = (void __user *)arg;

drivers/sbus/char/openprom.c

60

static int copyin(struct openpromio __user *info, struct openpromio **opp_p)

drivers/sbus/char/openprom.c

90

static int getstrings(struct openpromio __user *info, struct openpromio **opp_p)

drivers/sbus/char/oradax.c

207

static ssize_t dax_read(struct file *filp, char __user *buf,

drivers/sbus/char/oradax.c

209

static ssize_t dax_write(struct file *filp, const char __user *buf,

drivers/sbus/char/oradax.c

223

static int dax_ccb_exec(struct dax_ctx *ctx, const char __user *buf,

drivers/sbus/char/oradax.c

544

static ssize_t dax_read(struct file *f, char __user *buf,

drivers/sbus/char/oradax.c

561

static ssize_t dax_write(struct file *f, const char __user *buf,

drivers/sbus/char/oradax.c

848

static int dax_ccb_exec(struct dax_ctx *ctx, const char __user *buf,

drivers/scsi/3w-9xxx.c

656

void __user *argp = (void __user *)arg;

drivers/scsi/3w-sas.c

727

void __user *argp = (void __user *)arg;

drivers/scsi/3w-xxxx.c

890

void __user *argp = (void __user *)arg;

drivers/scsi/aacraid/aachba.c

3257

static int query_disk(struct aac_dev *dev, void __user *arg)

drivers/scsi/aacraid/aachba.c

3298

static int force_delete_disk(struct aac_dev *dev, void __user *arg)

drivers/scsi/aacraid/aachba.c

3323

static int delete_disk(struct aac_dev *dev, void __user *arg)

drivers/scsi/aacraid/aachba.c

3352

int aac_dev_ioctl(struct aac_dev *dev, unsigned int cmd, void __user *arg)

drivers/scsi/aacraid/aacraid.h

2333

char __user *fib;

drivers/scsi/aacraid/aacraid.h

2718

int aac_dev_ioctl(struct aac_dev *dev, unsigned int cmd, void __user *arg);

drivers/scsi/aacraid/aacraid.h

2723

int aac_do_ioctl(struct aac_dev *dev, unsigned int cmd, void __user *arg);

drivers/scsi/aacraid/commctrl.c

1004

static int aac_get_pci_info(struct aac_dev* dev, void __user *arg)

drivers/scsi/aacraid/commctrl.c

1018

static int aac_get_hba_info(struct aac_dev *dev, void __user *arg)

drivers/scsi/aacraid/commctrl.c

1045

static int aac_send_reset_adapter(struct aac_dev *dev, void __user *arg)

drivers/scsi/aacraid/commctrl.c

1062

int aac_do_ioctl(struct aac_dev *dev, unsigned int cmd, void __user *arg)

drivers/scsi/aacraid/commctrl.c

167

static int open_getadapter_fib(struct aac_dev * dev, void __user *arg)

drivers/scsi/aacraid/commctrl.c

244

static int next_getadapter_fib(struct aac_dev * dev, void __user *arg)

drivers/scsi/aacraid/commctrl.c

400

static int close_getadapter_fib(struct aac_dev * dev, void __user *arg)

drivers/scsi/aacraid/commctrl.c

450

static int check_revision(struct aac_dev *dev, void __user *arg)

drivers/scsi/aacraid/commctrl.c

46

static int ioctl_send_fib(struct aac_dev * dev, void __user *arg)

drivers/scsi/aacraid/commctrl.c

479

static int aac_send_raw_srb(struct aac_dev* dev, void __user * arg)

drivers/scsi/aacraid/commctrl.c

486

struct user_aac_srb __user *user_srb = arg;

drivers/scsi/aacraid/commctrl.c

487

struct aac_srb_reply __user *user_reply;

drivers/scsi/aacraid/commctrl.c

493

void __user *sg_user[HBA_MAX_SG_EMBEDDED];

drivers/scsi/aacraid/commctrl.c

680

sg_user[i] = (void __user *)(uintptr_t)addr;

drivers/scsi/aacraid/commctrl.c

741

sg_user[i] = (void __user *)(uintptr_t)addr;

drivers/scsi/aacraid/commctrl.c

796

sg_user[i] = (void __user *)(uintptr_t)usg->sg[i].addr;

drivers/scsi/aacraid/commctrl.c

853

sg_user[i] = (void __user *)addr;

drivers/scsi/aacraid/commctrl.c

894

sg_user[i] = (void __user *)(uintptr_t)upsg->sg[i].addr;

drivers/scsi/aacraid/linit.c

1185

return aac_do_ioctl(aac, cmd, (void __user *)arg);

drivers/scsi/aacraid/linit.c

617

void __user *arg)

drivers/scsi/bfa/bfad_debugfs.c

171

bfad_debugfs_read(struct file *file, char __user *buf,

drivers/scsi/bfa/bfad_debugfs.c

214

bfad_debugfs_read_regrd(struct file *file, char __user *buf,

drivers/scsi/bfa/bfad_debugfs.c

238

bfad_debugfs_write_regrd(struct file *file, const char __user *buf,

drivers/scsi/bfa/bfad_debugfs.c

307

bfad_debugfs_write_regwr(struct file *file, const char __user *buf,

drivers/scsi/ch.c

544

static int ch_gstatus(scsi_changer *ch, int type, unsigned char __user *dest)

drivers/scsi/ch.c

637

void __user *argp = (void __user *)arg;

drivers/scsi/csiostor/csio_init.c

63

csio_mem_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

drivers/scsi/esas2r/esas2r.h

967

int esas2r_ioctl_handler(void *hostdata, unsigned int cmd, void __user *arg);

drivers/scsi/esas2r/esas2r.h

968

int esas2r_ioctl(struct scsi_device *dev, unsigned int cmd, void __user *arg);

drivers/scsi/esas2r/esas2r_ioctl.c

1268

int esas2r_ioctl_handler(void *hostdata, unsigned int cmd, void __user *arg)

drivers/scsi/esas2r/esas2r_ioctl.c

1523

int esas2r_ioctl(struct scsi_device *sd, unsigned int cmd, void __user *arg)

drivers/scsi/esas2r/esas2r_main.c

629

cmd, (void __user *)arg);

drivers/scsi/fnic/fnic_debugfs.c

102

char __user *ubuf,

drivers/scsi/fnic/fnic_debugfs.c

140

const char __user *ubuf,

drivers/scsi/fnic/fnic_debugfs.c

274

char __user *ubuf,

drivers/scsi/fnic/fnic_debugfs.c

466

char __user *ubuf,

drivers/scsi/fnic/fnic_debugfs.c

494

const char __user *ubuf,

drivers/scsi/fnic/fnic_debugfs.c

623

char __user *ubuf,

drivers/scsi/fnic/fnic_trace.h

20

extern ssize_t simple_read_from_buffer(void __user *to,

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

3994

const char __user *user_buf,

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4059

const char __user *buf,

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4133

const char __user *buf,

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4172

const char __user *buf,

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4206

const char __user *buf,

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4266

const char __user *buf,

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4304

const char __user *buf,

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4355

const char __user *buf,

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4380

const char __user *buf,

drivers/scsi/hisi_sas/hisi_sas_v3_hw.c

4507

const char __user *buf,

drivers/scsi/hpsa.c

256

void __user *arg);

drivers/scsi/hpsa.c

264

void __user *arg);

drivers/scsi/hpsa.c

6261

void __user *arg)

drivers/scsi/hpsa.c

6264

IOCTL32_Command_struct __user *arg32 = arg;

drivers/scsi/hpsa.c

6292

unsigned int cmd, void __user *arg)

drivers/scsi/hpsa.c

6295

BIG_IOCTL32_Command_struct __user *arg32 = arg;

drivers/scsi/hpsa.c

6323

void __user *arg)

drivers/scsi/hpsa.c

6354

static int hpsa_getpciinfo_ioctl(struct ctlr_info *h, void __user *argp)

drivers/scsi/hpsa.c

6369

static int hpsa_getdrivver_ioctl(struct ctlr_info *h, void __user *argp)

drivers/scsi/hpsa.c

6489

BYTE __user *data_ptr;

drivers/scsi/hpsa.c

6581

BYTE __user *ptr = ioc->buf;

drivers/scsi/hpsa.c

6617

void __user *argp)

drivers/scsi/libsas/sas_scsi_host.c

768

int sas_ioctl(struct scsi_device *sdev, unsigned int cmd, void __user *arg)

drivers/scsi/lpfc/lpfc_debugfs.c

2156

lpfc_debugfs_lockstat_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

2382

lpfc_debugfs_dif_err_read(struct file *file, char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

2440

lpfc_debugfs_dif_err_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

2586

lpfc_debugfs_read(struct file *file, char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

2634

lpfc_debugfs_multixripools_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

2714

lpfc_debugfs_nvmestat_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

2802

lpfc_debugfs_scsistat_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

2856

lpfc_debugfs_ioktime_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

2983

lpfc_debugfs_nvmeio_trc_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

3088

lpfc_debugfs_hdwqstat_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

3173

static int lpfc_idiag_cmd_get(const char __user *buf, size_t nbytes,

drivers/scsi/lpfc/lpfc_debugfs.c

3324

lpfc_idiag_pcicfg_read(struct file *file, char __user *buf, size_t nbytes,

drivers/scsi/lpfc/lpfc_debugfs.c

3445

lpfc_idiag_pcicfg_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

3619

lpfc_idiag_baracc_read(struct file *file, char __user *buf, size_t nbytes,

drivers/scsi/lpfc/lpfc_debugfs.c

3770

lpfc_idiag_baracc_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

4075

lpfc_idiag_queinfo_read(struct file *file, char __user *buf, size_t nbytes,

drivers/scsi/lpfc/lpfc_debugfs.c

4284

lpfc_idiag_queacc_read(struct file *file, char __user *buf, size_t nbytes,

drivers/scsi/lpfc/lpfc_debugfs.c

4361

lpfc_idiag_queacc_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

4658

lpfc_idiag_drbacc_read(struct file *file, char __user *buf, size_t nbytes,

drivers/scsi/lpfc/lpfc_debugfs.c

4714

lpfc_idiag_drbacc_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

4876

lpfc_idiag_ctlacc_read(struct file *file, char __user *buf, size_t nbytes,

drivers/scsi/lpfc/lpfc_debugfs.c

4929

lpfc_idiag_ctlacc_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

5070

lpfc_idiag_mbxacc_read(struct file *file, char __user *buf, size_t nbytes,

drivers/scsi/lpfc/lpfc_debugfs.c

5115

lpfc_idiag_mbxacc_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

5389

lpfc_idiag_extacc_write(struct file *file, const char __user *buf,

drivers/scsi/lpfc/lpfc_debugfs.c

5435

lpfc_idiag_extacc_read(struct file *file, char __user *buf, size_t nbytes,

drivers/scsi/lpfc/lpfc_debugfs.c

5493

lpfc_cgn_buffer_read(struct file *file, char __user *buf, size_t nbytes,

drivers/scsi/lpfc/lpfc_debugfs.c

5585

lpfc_rx_monitor_read(struct file *file, char __user *buf, size_t nbytes,

drivers/scsi/megaraid.c

2963

mega_passthru __user *upthru; /* user address for passthru */

drivers/scsi/megaraid.c

2970

megastat_t __user *ustats = NULL;

drivers/scsi/megaraid.c

2993

if( (rval = mega_m_to_n( (void __user *)arg, &uioc)) != 0 )

drivers/scsi/megaraid.c

3000

if( put_user(driver_ver, (u32 __user *)uioc.uioc_uaddr) )

drivers/scsi/megaraid.c

3006

if( put_user(hba_count, (u32 __user *)uioc.uioc_uaddr) )

drivers/scsi/megaraid.c

3111

rval = mega_n_to_m((void __user *)arg, &mc);

drivers/scsi/megaraid.c

3151

upthru = (mega_passthru __user *)(unsigned long)MBOX(uioc)->xferaddr;

drivers/scsi/megaraid.c

3204

if( copy_from_user(data, (char __user *)(unsigned long) uxferaddr,

drivers/scsi/megaraid.c

3221

rval = mega_n_to_m((void __user *)arg, &mc);

drivers/scsi/megaraid.c

3230

if( copy_to_user((char __user *)(unsigned long) uxferaddr, data,

drivers/scsi/megaraid.c

3285

if( copy_from_user(data, (char __user *)(unsigned long) uxferaddr,

drivers/scsi/megaraid.c

3307

rval = mega_n_to_m((void __user *)arg, &mc);

drivers/scsi/megaraid.c

3325

if( copy_to_user((char __user *)(unsigned long) uxferaddr, data,

drivers/scsi/megaraid.c

3372

mega_m_to_n(void __user *arg, nitioctl_t *uioc)

drivers/scsi/megaraid.c

3498

mega_n_to_m(void __user *arg, megacmd_t *mc)

drivers/scsi/megaraid.c

3500

nitioctl_t __user *uiocp;

drivers/scsi/megaraid.c

3501

megacmd_t __user *umc;

drivers/scsi/megaraid.c

3502

mega_passthru __user *upthru;

drivers/scsi/megaraid.c

3503

struct uioctl_t __user *uioc_mimd;

drivers/scsi/megaraid.c

3516

if( put_user(mc->status, (u8 __user *)&MBOX_P(uiocp)->status) )

drivers/scsi/megaraid.c

3523

if (get_user(upthru, (mega_passthru __user * __user *)&umc->xferaddr))

drivers/scsi/megaraid.c

3526

if( put_user(mc->status, (u8 __user *)&upthru->scsistatus))

drivers/scsi/megaraid.c

3533

if( put_user(mc->status, (u8 __user *)&uioc_mimd->mbox[17]) )

drivers/scsi/megaraid.c

3538

umc = (megacmd_t __user *)uioc_mimd->mbox;

drivers/scsi/megaraid.c

3540

if (get_user(upthru, (mega_passthru __user * __user *)&umc->xferaddr))

drivers/scsi/megaraid.c

3543

if( put_user(mc->status, (u8 __user *)&upthru->scsistatus) )

drivers/scsi/megaraid.h

492

char __user *data; /* buffer <= 4096 for 0x80 commands */

drivers/scsi/megaraid.h

496

char __user *data;

drivers/scsi/megaraid.h

592

void __user *__uaddr; /* xferaddr for non-mbox cmds */

drivers/scsi/megaraid.h

597

#define MBOX_P(uioc) ((megacmd_t __user *)&((uioc)->__ua.__raw_mbox[0]))

drivers/scsi/megaraid.h

994

static int mega_m_to_n(void __user *, nitioctl_t *);

drivers/scsi/megaraid.h

995

static int mega_n_to_m(void __user *, megacmd_t *);

drivers/scsi/megaraid/megaraid_ioctl.h

130

void __user * user_data;

drivers/scsi/megaraid/megaraid_ioctl.h

136

mraid_passthru_t __user *user_pthru;

drivers/scsi/megaraid/megaraid_mm.c

111

void __user *argp = (void __user *)arg;

drivers/scsi/megaraid/megaraid_mm.c

235

mraid_mm_get_adapter(mimd_t __user *umimd, int *rval)

drivers/scsi/megaraid/megaraid_mm.c

26

static int mimd_to_kioc(mimd_t __user *, mraid_mmadp_t *, uioc_t *);

drivers/scsi/megaraid/megaraid_mm.c

27

static int kioc_to_mimd(uioc_t *, mimd_t __user *);

drivers/scsi/megaraid/megaraid_mm.c

281

handle_drvrcmd(void __user *arg, uint8_t old_ioctl, int *rval)

drivers/scsi/megaraid/megaraid_mm.c

283

mimd_t __user *umimd;

drivers/scsi/megaraid/megaraid_mm.c

31

static int handle_drvrcmd(void __user *, uint8_t, int *);

drivers/scsi/megaraid/megaraid_mm.c

354

mimd_to_kioc(mimd_t __user *umimd, mraid_mmadp_t *adp, uioc_t *kioc)

drivers/scsi/megaraid/megaraid_mm.c

36

static mraid_mmadp_t *mraid_mm_get_adapter(mimd_t __user *, int *);

drivers/scsi/megaraid/megaraid_mm.c

804

kioc_to_mimd(uioc_t *kioc, mimd_t __user *mimd)

drivers/scsi/megaraid/megaraid_mm.c

811

mraid_passthru_t __user *upthru32;

drivers/scsi/megaraid/megaraid_mm.h

72

uint8_t __user *buffer;

drivers/scsi/megaraid/megaraid_mm.h

76

uint8_t __user *buffer;

drivers/scsi/megaraid/megaraid_mm.h

86

char __user *data; /* buffer <= 4096 for 0x80 commands */

drivers/scsi/megaraid/megaraid_mm.h

90

char __user *data;

drivers/scsi/megaraid/megaraid_sas_base.c

8240

struct megasas_iocpacket __user * user_ioc,

drivers/scsi/megaraid/megaraid_sas_base.c

8434

void __user *uptr;

drivers/scsi/megaraid/megaraid_sas_base.c

8444

uptr = get_unaligned((void __user **)sense_ptr);

drivers/scsi/megaraid/megaraid_sas_base.c

8490

megasas_compat_iocpacket_get_user(void __user *arg)

drivers/scsi/megaraid/megaraid_sas_base.c

8493

struct compat_megasas_iocpacket __user *cioc = arg;

drivers/scsi/megaraid/megaraid_sas_base.c

8523

struct megasas_iocpacket __user *user_ioc =

drivers/scsi/megaraid/megaraid_sas_base.c

8524

(struct megasas_iocpacket __user *)arg;

drivers/scsi/megaraid/megaraid_sas_base.c

8591

if (copy_from_user(&aen, (void __user *)arg, sizeof(aen)))

drivers/scsi/megaraid/megaraid_sas_debugfs.c

48

megasas_debugfs_read(struct file *filp, char __user *ubuf, size_t cnt,

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1225

_ctl_getiocinfo(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1281

_ctl_eventquery(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1312

_ctl_eventenable(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1350

_ctl_eventreport(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1354

struct mpt3_ioctl_eventreport __user *uarg = arg;

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1394

_ctl_do_reset(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1533

_ctl_btdh_mapping(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

1988

_ctl_diag_register(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2018

_ctl_diag_unregister(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2102

_ctl_diag_query(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2298

_ctl_diag_release(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2382

_ctl_diag_read_buffer(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2385

struct mpt3_diag_read_buffer __user *uarg = arg;

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2455

if (copy_to_user((void __user *)uarg->diagnostic_data,

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2565

_ctl_addnl_diag_query(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2618

_ctl_enable_diag_sbr_reload(struct MPT3SAS_ADAPTER *ioc, void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2671

void __user *arg)

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2674

struct mpt3_ioctl_command32 __user *uarg;

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2680

uarg = (struct mpt3_ioctl_command32 __user *) arg;

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2682

if (copy_from_user(&karg32, (char __user *)arg, sizeof(karg32))) {

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2716

_ctl_ioctl_main(struct file *file, unsigned int cmd, void __user *arg,

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2725

if (copy_from_user(&ioctl_header, (char __user *)arg,

drivers/scsi/mpt3sas/mpt3sas_ctl.c

2767

struct mpt3_ioctl_command __user *uarg;

drivers/scsi/mpt3sas/mpt3sas_ctl.c

3077

ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 0,

drivers/scsi/mpt3sas/mpt3sas_ctl.c

3096

ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 0, MPI2_VERSION);

drivers/scsi/mpt3sas/mpt3sas_ctl.c

3113

ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 1,

drivers/scsi/mpt3sas/mpt3sas_ctl.c

3131

ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 1, MPI2_VERSION);

drivers/scsi/mpt3sas/mpt3sas_ctl.c

700

void __user *mf)

drivers/scsi/mpt3sas/mpt3sas_ctl.h

275

void __user *reply_frame_buf_ptr;

drivers/scsi/mpt3sas/mpt3sas_ctl.h

276

void __user *data_in_buf_ptr;

drivers/scsi/mpt3sas/mpt3sas_ctl.h

277

void __user *data_out_buf_ptr;

drivers/scsi/mpt3sas/mpt3sas_ctl.h

278

void __user *sense_data_ptr;

drivers/scsi/mpt3sas/mpt3sas_debugfs.c

40

_debugfs_iocdump_read(struct file *filp, char __user *ubuf, size_t cnt,

drivers/scsi/pmcraid.c

3402

void __user *user_buffer

drivers/scsi/pmcraid.c

3434

void __user *arg,

drivers/scsi/pmcraid.c

3468

void __user *argp = (void __user *)arg;

drivers/scsi/qedf/qedf_debugfs.c

136

qedf_dbg_fp_int_cmd_write(struct file *filp, const char __user *buffer,

drivers/scsi/qedf/qedf_debugfs.c

146

qedf_dbg_debug_cmd_read(struct file *filp, char __user *buffer, size_t count,

drivers/scsi/qedf/qedf_debugfs.c

161

qedf_dbg_debug_cmd_write(struct file *filp, const char __user *buffer,

drivers/scsi/qedf/qedf_debugfs.c

192

qedf_dbg_stop_io_on_error_cmd_read(struct file *filp, char __user *buffer,

drivers/scsi/qedf/qedf_debugfs.c

211

const char __user *buffer, size_t count,

drivers/scsi/qedf/qedf_debugfs.c

386

qedf_dbg_clear_stats_cmd_read(struct file *filp, char __user *buffer,

drivers/scsi/qedf/qedf_debugfs.c

399

const char __user *buffer, size_t count,

drivers/scsi/qedf/qedf_debugfs.c

99

qedf_dbg_fp_int_cmd_read(struct file *filp, char __user *buffer, size_t count,

drivers/scsi/qedi/qedi_debugfs.c

120

qedi_dbg_do_not_recover_cmd_read(struct file *filp, char __user *buffer,

drivers/scsi/qedi/qedi_debugfs.c

94

qedi_dbg_do_not_recover_cmd_write(struct file *filp, const char __user *buffer,

drivers/scsi/qla2xxx/qla_dfs.c

489

qla2x00_dfs_fce_write(struct file *file, const char __user *buffer,

drivers/scsi/qla2xxx/qla_dfs.c

647

qla_dfs_naqp_write(struct file *file, const char __user *buffer,

drivers/scsi/scsi_bsg.c

11

#define uptr64(val) ((void __user *)(uintptr_t)(val))

drivers/scsi/scsi_debug.c

1144

static ssize_t sdebug_error_write(struct file *file, const char __user *ubuf,

drivers/scsi/scsi_debug.c

1235

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/scsi/scsi_debug.c

1440

void __user *arg)

drivers/scsi/scsi_devinfo.c

686

const char __user *buf,

drivers/scsi/scsi_error.c

2515

scsi_ioctl_reset(struct scsi_device *dev, int __user *arg)

drivers/scsi/scsi_ioctl.c

169

static int scsi_ioctl_get_pci(struct scsi_device *sdev, void __user *arg)

drivers/scsi/scsi_ioctl.c

188

static int sg_get_version(int __user *p)

drivers/scsi/scsi_ioctl.c

194

static int sg_set_timeout(struct scsi_device *sdev, int __user *p)

drivers/scsi/scsi_ioctl.c

204

static int sg_get_reserved_size(struct scsi_device *sdev, int __user *p)

drivers/scsi/scsi_ioctl.c

212

static int sg_set_reserved_size(struct scsi_device *sdev, int __user *p)

drivers/scsi/scsi_ioctl.c

231

static int sg_emulated_host(struct request_queue *q, int __user *p)

drivers/scsi/scsi_ioctl.c

236

static int scsi_get_idlun(struct scsi_device *sdev, void __user *argp)

drivers/scsi/scsi_ioctl.c

45

static int ioctl_probe(struct Scsi_Host *host, void __user *buffer)

drivers/scsi/scsi_ioctl.c

51

if (get_user(len, (unsigned int __user *) buffer))

drivers/scsi/scsi_ioctl.c

524

struct scsi_ioctl_command __user *sic)

drivers/scsi/scsi_ioctl.c

636

int put_sg_io_hdr(const struct sg_io_hdr *hdr, void __user *argp)

drivers/scsi/scsi_ioctl.c

679

int get_sg_io_hdr(struct sg_io_hdr *hdr, const void __user *argp)

drivers/scsi/scsi_ioctl.c

740

const void __user *arg)

drivers/scsi/scsi_ioctl.c

770

void __user *arg)

drivers/scsi/scsi_ioctl.c

799

void __user *arg)

drivers/scsi/scsi_ioctl.c

836

hdr.cmdp = ((struct cdrom_generic_command __user *) arg)->cmd;

drivers/scsi/scsi_ioctl.c

855

void __user *argp)

drivers/scsi/scsi_ioctl.c

885

void __user *arg)

drivers/scsi/scsi_ioctl.c

932

return put_user(sdev->host->host_no, (int __user *)arg);

drivers/scsi/scsi_proc.c

405

static ssize_t proc_scsi_write(struct file *file, const char __user *buf,

drivers/scsi/scsi_proc.c

64

static ssize_t proc_scsi_host_write(struct file *file, const char __user *buf,

drivers/scsi/sd.c

1729

void __user *p = (void __user *)arg;

drivers/scsi/sg.c

1149

void __user *p = (void __user *)arg;

drivers/scsi/sg.c

185

static ssize_t sg_new_read(Sg_fd * sfp, char __user *buf, size_t count,

drivers/scsi/sg.c

188

const char __user *buf, size_t count, int blocking,

drivers/scsi/sg.c

192

static int sg_read_oxfer(Sg_request * srp, char __user *outp, int num_read_xfer);

drivers/scsi/sg.c

1955

sg_read_oxfer(Sg_request * srp, char __user *outp, int num_read_xfer)

drivers/scsi/sg.c

2304

static ssize_t sg_proc_write_adio(struct file *filp, const char __user *buffer,

drivers/scsi/sg.c

2316

const char __user *buffer, size_t count, loff_t *off);

drivers/scsi/sg.c

2386

sg_proc_write_adio(struct file *filp, const char __user *buffer,

drivers/scsi/sg.c

2407

sg_proc_write_dressz(struct file *filp, const char __user *buffer,

drivers/scsi/sg.c

405

static int get_sg_io_pack_id(int *pack_id, void __user *buf, size_t count)

drivers/scsi/sg.c

407

struct sg_header __user *old_hdr = buf;

drivers/scsi/sg.c

420

struct compat_sg_io_hdr __user *hp = buf;

drivers/scsi/sg.c

426

struct sg_io_hdr __user *hp = buf;

drivers/scsi/sg.c

438

sg_read(struct file *filp, char __user *buf, size_t count, loff_t * ppos)

drivers/scsi/sg.c

555

sg_new_read(Sg_fd * sfp, char __user *buf, size_t count, Sg_request * srp)

drivers/scsi/sg.c

596

sg_write(struct file *filp, const char __user *buf, size_t count, loff_t * ppos)

drivers/scsi/sg.c

677

hp->dxferp = (char __user *)buf + cmd_size;

drivers/scsi/sg.c

709

sg_new_write(Sg_fd *sfp, struct file *file, const char __user *buf,

drivers/scsi/sg.c

898

static int put_compat_request_table(struct compat_sg_req_info __user *o,

drivers/scsi/sg.c

915

unsigned int cmd_in, void __user *p)

drivers/scsi/sg.c

917

int __user *ip = p;

drivers/scsi/smartpqi/smartpqi_init.c

6670

static int pqi_getpciinfo_ioctl(struct pqi_ctrl_info *ctrl_info, void __user *arg)

drivers/scsi/smartpqi/smartpqi_init.c

6695

static int pqi_getdrivver_ioctl(void __user *arg)

drivers/scsi/smartpqi/smartpqi_init.c

6780

static int pqi_passthru_ioctl(struct pqi_ctrl_info *ctrl_info, void __user *arg)

drivers/scsi/smartpqi/smartpqi_init.c

6922

void __user *arg)

drivers/scsi/snic/snic_debugfs.c

102

const char __user *ubuf,

drivers/scsi/snic/snic_debugfs.c

73

char __user *ubuf,

drivers/scsi/snic/snic_trc.h

9

extern ssize_t simple_read_from_buffer(void __user *to,

drivers/scsi/sr.c

120

static int sr_read_cdda_bpc(struct cdrom_device_info *cdi, void __user *ubuf,

drivers/scsi/sr.c

537

void __user *argp = (void __user *)arg;

drivers/scsi/sr.c

928

static int sr_read_cdda_bpc(struct cdrom_device_info *cdi, void __user *ubuf,

drivers/scsi/st.c

1572

static int setup_buffering(struct scsi_tape *STp, const char __user *buf,

drivers/scsi/st.c

1649

st_write(struct file *filp, const char __user *buf, size_t count, loff_t * ppos)

drivers/scsi/st.c

1657

const char __user *b_point;

drivers/scsi/st.c

197

static int append_to_buffer(const char __user *, struct st_buffer *, int);

drivers/scsi/st.c

198

static int from_buffer(struct st_buffer *, char __user *, int);

drivers/scsi/st.c

2124

st_read(struct file *filp, char __user *buf, size_t count, loff_t * ppos)

drivers/scsi/st.c

3576

cmd_in, (void __user *)arg);

drivers/scsi/st.c

3592

void __user *p = (void __user *)arg;

drivers/scsi/st.c

4087

static int append_to_buffer(const char __user *ubp, struct st_buffer * st_bp, int do_count)

drivers/scsi/st.c

4119

static int from_buffer(struct st_buffer * st_bp, char __user *ubp, int do_count)

drivers/soc/aspeed/aspeed-lpc-ctrl.c

75

void __user *p = (void __user *)param;

drivers/soc/aspeed/aspeed-lpc-snoop.c

113

static ssize_t snoop_file_read(struct file *file, char __user *buffer,

drivers/soc/aspeed/aspeed-p2a-ctrl.c

177

void __user *arg = (void __user *)data;

drivers/soc/fsl/dpaa2-console.c

192

static ssize_t dpaa2_console_read(struct file *fp, char __user *buf,

drivers/soc/mediatek/mtk-svs.c

787

const char __user *buffer,

drivers/soc/qcom/qcom_aoss.c

506

static ssize_t qmp_debugfs_write(struct file *file, const char __user *user_buf,

drivers/soc/qcom/rmtfs_mem.c

101

const char __user *buf, size_t count,

drivers/soc/qcom/rmtfs_mem.c

83

char __user *buf, size_t count, loff_t *f_pos)

drivers/spi/spidev.c

139

spidev_read(struct file *filp, char __user *buf, size_t count, loff_t *f_pos)

drivers/spi/spidev.c

174

spidev_write(struct file *filp, const char __user *buf,

drivers/spi/spidev.c

268

if (copy_from_user(tx_buf, (const u8 __user *)

drivers/spi/spidev.c

310

if (copy_to_user((u8 __user *)

drivers/spi/spidev.c

326

spidev_get_ioc_message(unsigned int cmd, struct spi_ioc_transfer __user *u_ioc,

drivers/spi/spidev.c

386

retval = put_user(tmp, (__u8 __user *)arg);

drivers/spi/spidev.c

388

retval = put_user(tmp, (__u32 __user *)arg);

drivers/spi/spidev.c

392

(__u8 __user *)arg);

drivers/spi/spidev.c

395

retval = put_user(spi->bits_per_word, (__u8 __user *)arg);

drivers/spi/spidev.c

398

retval = put_user(spidev->speed_hz, (__u32 __user *)arg);

drivers/spi/spidev.c

405

retval = get_user(tmp, (u8 __user *)arg);

drivers/spi/spidev.c

407

retval = get_user(tmp, (u32 __user *)arg);

drivers/spi/spidev.c

429

retval = get_user(tmp, (__u8 __user *)arg);

drivers/spi/spidev.c

446

retval = get_user(tmp, (__u8 __user *)arg);

drivers/spi/spidev.c

461

retval = get_user(tmp, (__u32 __user *)arg);

drivers/spi/spidev.c

485

(struct spi_ioc_transfer __user *)arg, &n_ioc);

drivers/spi/spidev.c

509

struct spi_ioc_transfer __user *u_ioc;

drivers/spi/spidev.c

516

u_ioc = (struct spi_ioc_transfer __user *) compat_ptr(arg);

drivers/staging/axis-fifo/axis-fifo.c

120

static ssize_t axis_fifo_read(struct file *f, char __user *buf,

drivers/staging/axis-fifo/axis-fifo.c

213

static ssize_t axis_fifo_write(struct file *f, const char __user *buf,

drivers/staging/greybus/authentication.c

207

void __user *buf)

drivers/staging/greybus/authentication.c

285

ret = cap_ioctl(cap, cmd, (void __user *)arg);

drivers/staging/greybus/camera.c

1085

static ssize_t gb_camera_debugfs_read(struct file *file, char __user *buf,

drivers/staging/greybus/camera.c

1107

const char __user *buf, size_t len,

drivers/staging/greybus/fw-management.c

393

void __user *buf)

drivers/staging/greybus/fw-management.c

478

if (get_user(timeout, (unsigned int __user *)buf))

drivers/staging/greybus/fw-management.c

540

ret = fw_mgmt_ioctl(fw_mgmt, cmd, (void __user *)arg);

drivers/staging/greybus/raw.c

127

static int gb_raw_send(struct gb_raw *raw, u32 len, const char __user *data)

drivers/staging/greybus/raw.c

276

static ssize_t raw_write(struct file *file, const char __user *buf,

drivers/staging/greybus/raw.c

306

static ssize_t raw_read(struct file *file, char __user *buf, size_t count,

drivers/staging/media/atomisp/include/linux/atomisp.h

196

short __user *odd_real; /* Real part of the odd coefficients */

drivers/staging/media/atomisp/include/linux/atomisp.h

197

short __user *odd_imag; /* Imaginary part of the odd coefficients */

drivers/staging/media/atomisp/include/linux/atomisp.h

198

short __user *even_real;/* Real part of the even coefficients */

drivers/staging/media/atomisp/include/linux/atomisp.h

199

short __user *even_imag;/* Imaginary part of the even coefficients */

drivers/staging/media/atomisp/include/linux/atomisp.h

207

int __user *odd_real; /* Real part of the odd statistics */

drivers/staging/media/atomisp/include/linux/atomisp.h

208

int __user *odd_imag; /* Imaginary part of the odd statistics */

drivers/staging/media/atomisp/include/linux/atomisp.h

209

int __user *even_real;/* Real part of the even statistics */

drivers/staging/media/atomisp/include/linux/atomisp.h

210

int __user *even_imag;/* Imaginary part of the even statistics */

drivers/staging/media/atomisp/include/linux/atomisp.h

258

struct atomisp_3a_output __user *data;

drivers/staging/media/atomisp/include/linux/atomisp.h

259

struct atomisp_3a_rgby_output __user *rgby_data;

drivers/staging/media/atomisp/include/linux/atomisp.h

503

unsigned short __user *coordinates_x[ATOMISP_MORPH_TABLE_NUM_PLANES];

drivers/staging/media/atomisp/include/linux/atomisp.h

504

unsigned short __user *coordinates_y[ATOMISP_MORPH_TABLE_NUM_PLANES];

drivers/staging/media/atomisp/include/linux/atomisp.h

87

void __user *data;

drivers/staging/media/atomisp/pci/atomisp_cmd.c

2034

return copy_from_user(to, (void __user *)from, n);

drivers/staging/media/atomisp/pci/atomisp_cmd.c

3339

if (copy_from_user(tmp_buf, (void __user __force *)arg->base,

drivers/staging/media/atomisp/pci/atomisp_cmd.c

4490

(void __user *)user_shading_table->data[i],

drivers/staging/media/atomisp/pci/atomisp_cmd.c

56

void __user *user_ptr;

drivers/staging/media/av7110/av7110_av.c

1020

static ssize_t dvb_audio_write(struct file *file, const char __user *buf,

drivers/staging/media/av7110/av7110_av.c

1046

static int play_iframe(struct av7110 *av7110, char __user *buf, unsigned int len, int nonblock)

drivers/staging/media/av7110/av7110_av.c

456

static ssize_t ts_play(struct av7110 *av7110, const char __user *buf,

drivers/staging/media/av7110/av7110_av.c

494

static ssize_t dvb_play(struct av7110 *av7110, const char __user *buf,

drivers/staging/media/av7110/av7110_av.c

559

static ssize_t dvb_aplay(struct av7110 *av7110, const char __user *buf,

drivers/staging/media/av7110/av7110_av.c

976

static ssize_t dvb_video_write(struct file *file, const char __user *buf,

drivers/staging/media/av7110/av7110_ca.c

137

const char __user *buf, size_t count, loff_t *ppos)

drivers/staging/media/av7110/av7110_ca.c

176

char __user *buf, size_t count, loff_t *ppos)

drivers/staging/media/av7110/av7110_ca.c

329

static ssize_t dvb_ca_write(struct file *file, const char __user *buf,

drivers/staging/media/av7110/av7110_ca.c

339

static ssize_t dvb_ca_read(struct file *file, char __user *buf,

drivers/staging/media/av7110/av7110_hw.c

1027

u8 __user *colors = (u8 __user *)dc->data;

drivers/staging/media/av7110/av7110_hw.c

793

u16 dx, u16 dy, int inc, u8 __user *data)

drivers/staging/media/av7110/av7110_hw.c

902

static int OSDSetPalette(struct av7110 *av7110, u32 __user *colors, u8 first, u8 last)

drivers/staging/media/av7110/av7110_hw.c

928

int x1, int y1, int inc, u8 __user *data)

drivers/staging/media/av7110/av7110_v4l.c

611

static ssize_t av7110_vbi_write(struct file *file, const char __user *data, size_t count, loff_t *ppos)

drivers/staging/most/video/video.c

156

static ssize_t comp_vdev_read(struct file *filp, char __user *buf,

drivers/staging/vc04_services/bcm2835-audio/bcm2835-vchiq.c

101

void *cb_data, void __user *cb_userdata)

drivers/staging/vme_user/vme_user.c

122

static ssize_t resource_to_user(int minor, char __user *buf, size_t count,

drivers/staging/vme_user/vme_user.c

141

static ssize_t resource_from_user(unsigned int minor, const char __user *buf,

drivers/staging/vme_user/vme_user.c

154

static ssize_t buffer_to_user(unsigned int minor, char __user *buf,

drivers/staging/vme_user/vme_user.c

177

static ssize_t buffer_from_user(unsigned int minor, const char __user *buf,

drivers/staging/vme_user/vme_user.c

200

static ssize_t vme_user_read(struct file *file, char __user *buf, size_t count,

drivers/staging/vme_user/vme_user.c

243

static ssize_t vme_user_write(struct file *file, const char __user *buf,

drivers/staging/vme_user/vme_user.c

325

void __user *argp = (void __user *)arg;

drivers/target/target_core_user.c

614

(*iov)->iov_base = (void __user *)

drivers/tee/qcomtee/call.c

494

void __user *uaddr;

drivers/tee/qcomtee/qcomtee.h

138

void __user *uaddr, size_t size,

drivers/tee/qcomtee/qcomtee_object.h

103

void __user *uaddr;

drivers/tee/qcomtee/user_obj.c

433

void __user *ubuf_addr, size_t ubuf_size,

drivers/tee/qcomtee/user_obj.c

437

void __user *uaddr;

drivers/tee/qcomtee/user_obj.c

446

uaddr = (void __user *)(ubuf_addr + ubuf_size);

drivers/tee/qcomtee/user_obj.c

587

void __user *uaddr, size_t size,

drivers/tee/tee_core.c

240

struct tee_ioctl_version_data __user *uvers)

drivers/tee/tee_core.c

256

struct tee_ioctl_shm_alloc_data __user *udata)

drivers/tee/tee_core.c

292

struct tee_ioctl_shm_register_data __user *udata)

drivers/tee/tee_core.c

327

struct tee_ioctl_shm_register_fd_data __user *udata)

drivers/tee/tee_core.c

434

struct tee_ioctl_param __user *uparams)

drivers/tee/tee_core.c

493

static int params_to_user(struct tee_ioctl_param __user *uparams,

drivers/tee/tee_core.c

499

struct tee_ioctl_param __user *up = uparams + n;

drivers/tee/tee_core.c

548

struct tee_ioctl_buf_data __user *ubuf)

drivers/tee/tee_core.c

552

struct tee_ioctl_open_session_arg __user *uarg;

drivers/tee/tee_core.c

554

struct tee_ioctl_param __user *uparams = NULL;

drivers/tee/tee_core.c

616

struct tee_ioctl_buf_data __user *ubuf)

drivers/tee/tee_core.c

620

struct tee_ioctl_invoke_arg __user *uarg;

drivers/tee/tee_core.c

622

struct tee_ioctl_param __user *uparams = NULL;

drivers/tee/tee_core.c

668

struct tee_ioctl_buf_data __user *ubuf)

drivers/tee/tee_core.c

672

struct tee_ioctl_object_invoke_arg __user *uarg;

drivers/tee/tee_core.c

674

struct tee_ioctl_param __user *uparams = NULL;

drivers/tee/tee_core.c

719

struct tee_ioctl_cancel_arg __user *uarg)

drivers/tee/tee_core.c

735

struct tee_ioctl_close_session_arg __user *uarg)

drivers/tee/tee_core.c

749

struct tee_ioctl_param __user *uparams,

drivers/tee/tee_core.c

806

struct tee_ioctl_buf_data __user *ubuf)

drivers/tee/tee_core.c

810

struct tee_iocl_supp_recv_arg __user *uarg;

drivers/tee/tee_core.c

863

struct tee_ioctl_param __user *uparams)

drivers/tee/tee_core.c

924

struct tee_ioctl_buf_data __user *ubuf)

drivers/tee/tee_core.c

928

struct tee_iocl_supp_send_arg __user *uarg;

drivers/tee/tee_core.c

969

void __user *uarg = (void __user *)arg;

drivers/tee/tee_shm.c

506

if (!access_ok((void __user *)addr, length))

drivers/tee/tee_shm.c

515

iov_iter_ubuf(&iter, ITER_DEST, (void __user *)addr, length);

drivers/thermal/intel/int340x_thermal/acpi_thermal_rel.c

362

static int fill_art(char __user *ubuf)

drivers/thermal/intel/int340x_thermal/acpi_thermal_rel.c

399

static int fill_trt(char __user *ubuf)

drivers/thermal/intel/int340x_thermal/acpi_thermal_rel.c

434

static int fill_psvt(char __user *ubuf)

drivers/thermal/intel/int340x_thermal/acpi_thermal_rel.c

491

char __user *arg = (void __user *)__arg;

drivers/thermal/intel/int340x_thermal/acpi_thermal_rel.c

502

return put_user(count, (unsigned long __user *)__arg);

drivers/thermal/intel/int340x_thermal/acpi_thermal_rel.c

510

return put_user(length, (unsigned long __user *)__arg);

drivers/thermal/intel/int340x_thermal/acpi_thermal_rel.c

519

return put_user(count, (unsigned long __user *)__arg);

drivers/thermal/intel/int340x_thermal/acpi_thermal_rel.c

527

return put_user(length, (unsigned long __user *)__arg);

drivers/thermal/intel/int340x_thermal/acpi_thermal_rel.c

537

return put_user(count, (unsigned long __user *)__arg);

drivers/thermal/intel/int340x_thermal/acpi_thermal_rel.c

547

return put_user(length, (unsigned long __user *)__arg);

drivers/thermal/intel/int340x_thermal/platform_temperature_control.c

225

static ssize_t ptc_temperature_write(struct file *file, const char __user *data,

drivers/thermal/testing/command.c

178

static ssize_t tt_command_write(struct file *file, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

1007

margining_dwell_time_write(struct file *file, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

1047

margining_optional_voltage_offset_write(struct file *file, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

1082

const char __user *user_buf,

drivers/thunderbolt/debugfs.c

127

static void *validate_and_copy_from_user(const void __user *user_buf,

drivers/thunderbolt/debugfs.c

1323

const char __user *user_buf,

drivers/thunderbolt/debugfs.c

1476

const char __user *user_buf,

drivers/thunderbolt/debugfs.c

1533

const char __user *user_buf,

drivers/thunderbolt/debugfs.c

1602

const char __user *user_buf,

drivers/thunderbolt/debugfs.c

1895

static ssize_t counters_write(struct file *file, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

222

enum tb_cfg_space space, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

273

static ssize_t port_regs_write(struct file *file, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

282

static ssize_t path_write(struct file *file, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

291

static ssize_t switch_regs_write(struct file *file, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

381

static ssize_t port_sb_regs_write(struct file *file, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

415

const char __user *user_buf,

drivers/thunderbolt/debugfs.c

616

margining_ber_level_write(struct file *file, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

809

margining_lanes_write(struct file *file, const char __user *user_buf,

drivers/thunderbolt/debugfs.c

885

const char __user *user_buf,

drivers/thunderbolt/debugfs.c

935

margining_error_counter_write(struct file *file, const char __user *user_buf,

drivers/tty/amiserial.c

1106

void __user *argp = (void __user *)arg;

drivers/tty/amiserial.c

993

static int get_lsr_info(struct serial_state *info, unsigned int __user *value)

drivers/tty/ipwireless/network.c

162

int __user *user_arg = (int __user *) arg;

drivers/tty/ipwireless/network.c

206

if (copy_to_user((void __user *) arg, network->xaccm,

drivers/tty/ipwireless/network.c

213

if (copy_from_user(accm, (void __user *) arg, sizeof(accm)))

drivers/tty/ipwireless/tty.c

403

if (put_user(chan, (int __user *) arg))

drivers/tty/ipwireless/tty.c

415

if (put_user(unit, (int __user *) arg))

drivers/tty/ipwireless/tty.c

424

if (put_user(val, (int __user *) arg))

drivers/tty/mxser.c

1058

unsigned int __user *value)

drivers/tty/mxser.c

1138

int __user *u_opmode)

drivers/tty/mxser.c

1174

void __user *argp = (void __user *)arg;

drivers/tty/n_gsm.c

3840

if (copy_to_user((void __user *)arg, &c, sizeof(c)))

drivers/tty/n_gsm.c

3844

if (copy_from_user(&c, (void __user *)arg, sizeof(c)))

drivers/tty/n_gsm.c

3849

return put_user(base + 1, (__u32 __user *)arg);

drivers/tty/n_gsm.c

3852

if (copy_to_user((void __user *)arg, &ce, sizeof(ce)))

drivers/tty/n_gsm.c

3856

if (copy_from_user(&ce, (void __user *)arg, sizeof(ce)))

drivers/tty/n_gsm.c

3860

if (copy_from_user(&dc, (void __user *)arg, sizeof(dc)))

drivers/tty/n_gsm.c

3872

if (copy_to_user((void __user *)arg, &dc, sizeof(dc)))

drivers/tty/n_gsm.c

3876

if (copy_from_user(&dc, (void __user *)arg, sizeof(dc)))

drivers/tty/n_gsm.c

4492

if (copy_from_user(&nc, (void __user *)arg, sizeof(nc)))

drivers/tty/n_gsm.c

4499

if (copy_to_user((void __user *)arg, &nc, sizeof(nc)))

drivers/tty/n_gsm.c

4510

if (copy_from_user(&dc, (void __user *)arg, sizeof(dc)))

drivers/tty/n_gsm.c

4515

if (copy_to_user((void __user *)arg, &dc, sizeof(dc)))

drivers/tty/n_gsm.c

4519

if (copy_from_user(&dc, (void __user *)arg, sizeof(dc)))

drivers/tty/n_hdlc.c

594

return put_user(count, (int __user *)arg);

drivers/tty/n_hdlc.c

606

return put_user(count, (int __user *)arg);

drivers/tty/n_tty.c

2487

return put_user(tty_chars_in_buffer(tty), (int __user *) arg);

drivers/tty/n_tty.c

2494

return put_user(num, (unsigned int __user *) arg);

drivers/tty/pty.c

135

static int pty_set_lock(struct tty_struct *tty, int __user *arg)

drivers/tty/pty.c

148

static int pty_get_lock(struct tty_struct *tty, int __user *arg)

drivers/tty/pty.c

156

static int pty_set_pktmode(struct tty_struct *tty, int __user *arg)

drivers/tty/pty.c

180

static int pty_get_pktmode(struct tty_struct *tty, int __user *arg)

drivers/tty/pty.c

454

return pty_set_lock(tty, (int __user *) arg);

drivers/tty/pty.c

456

return pty_get_lock(tty, (int __user *)arg);

drivers/tty/pty.c

458

return pty_set_pktmode(tty, (int __user *)arg);

drivers/tty/pty.c

460

return pty_get_pktmode(tty, (int __user *)arg);

drivers/tty/pty.c

630

return pty_set_lock(tty, (int __user *)arg);

drivers/tty/pty.c

632

return pty_get_lock(tty, (int __user *)arg);

drivers/tty/pty.c

634

return pty_set_pktmode(tty, (int __user *)arg);

drivers/tty/pty.c

636

return pty_get_pktmode(tty, (int __user *)arg);

drivers/tty/pty.c

638

return put_user(tty->index, (unsigned int __user *)arg);

drivers/tty/serial/pch_uart.c

293

static ssize_t port_show_regs(struct file *file, char __user *user_buf,

drivers/tty/serial/serial_core.c

1056

struct uart_state *state, unsigned int __user *value)

drivers/tty/serial/serial_core.c

1440

struct serial_rs485 __user *rs485)

drivers/tty/serial/serial_core.c

1454

struct serial_rs485 __user *rs485_user)

drivers/tty/serial/serial_core.c

1498

struct serial_iso7816 __user *iso7816)

drivers/tty/serial/serial_core.c

1515

struct serial_iso7816 __user *iso7816_user)

drivers/tty/serial/serial_core.c

1555

void __user *uarg = (void __user *)arg;

drivers/tty/sysrq.c

1206

static ssize_t write_sysrq_trigger(struct file *file, const char __user *buf,

drivers/tty/tty_io.c

2272

static int tiocsti(struct tty_struct *tty, u8 __user *p)

drivers/tty/tty_io.c

2306

static int tiocgwinsz(struct tty_struct *tty, struct winsize __user *arg)

drivers/tty/tty_io.c

2359

static int tiocswinsz(struct tty_struct *tty, struct winsize __user *arg)

drivers/tty/tty_io.c

2421

static int tiocsetd(struct tty_struct *tty, int __user *p)

drivers/tty/tty_io.c

2444

static int tiocgetd(struct tty_struct *tty, int __user *p)

drivers/tty/tty_io.c

2526

static int tty_tiocmget(struct tty_struct *tty, int __user *p)

drivers/tty/tty_io.c

2549

unsigned __user *p)

drivers/tty/tty_io.c

2599

static int tty_tiocgicount(struct tty_struct *tty, void __user *arg)

drivers/tty/tty_io.c

2629

static int tty_tiocsserial(struct tty_struct *tty, struct serial_struct __user *ss)

drivers/tty/tty_io.c

2639

static int tty_tiocgserial(struct tty_struct *tty, struct serial_struct __user *ss)

drivers/tty/tty_io.c

2672

void __user *p = (void __user *)arg;

drivers/tty/tty_io.c

2723

return put_user(excl, (int __user *)p);

drivers/tty/tty_io.c

2738

return put_user(ret, (unsigned int __user *)p);

drivers/tty/tty_io.c

2834

struct serial_struct32 __user *ss)

drivers/tty/tty_io.c

2852

struct serial_struct32 __user *ss)

drivers/tty/tty_ioctl.c

361

struct termio __user *termio)

drivers/tty/tty_ioctl.c

380

__weak int kernel_termios_to_user_termio(struct termio __user *termio,

drivers/tty/tty_ioctl.c

396

struct termios2 __user *u)

drivers/tty/tty_ioctl.c

400

__weak int kernel_termios_to_user_termios(struct termios2 __user *u,

drivers/tty/tty_ioctl.c

406

struct termios __user *u)

drivers/tty/tty_ioctl.c

410

__weak int kernel_termios_to_user_termios_1(struct termios __user *u,

drivers/tty/tty_ioctl.c

419

struct termios __user *u)

drivers/tty/tty_ioctl.c

423

__weak int kernel_termios_to_user_termios(struct termios __user *u,

drivers/tty/tty_ioctl.c

444

static int set_termios(struct tty_struct *tty, void __user *arg, int opt)

drivers/tty/tty_ioctl.c

459

(struct termio __user *)arg))

drivers/tty/tty_ioctl.c

464

(struct termios __user *)arg))

drivers/tty/tty_ioctl.c

468

(struct termios2 __user *)arg))

drivers/tty/tty_ioctl.c

473

(struct termios __user *)arg))

drivers/tty/tty_ioctl.c

540

static int get_termio(struct tty_struct *tty, struct termio __user *termio)

drivers/tty/tty_ioctl.c

573

static int get_sgttyb(struct tty_struct *tty, struct sgttyb __user *sgttyb)

drivers/tty/tty_ioctl.c

625

static int set_sgttyb(struct tty_struct *tty, struct sgttyb __user *sgttyb)

drivers/tty/tty_ioctl.c

653

static int get_tchars(struct tty_struct *tty, struct tchars __user *tchars)

drivers/tty/tty_ioctl.c

668

static int set_tchars(struct tty_struct *tty, struct tchars __user *tchars)

drivers/tty/tty_ioctl.c

687

static int get_ltchars(struct tty_struct *tty, struct ltchars __user *ltchars)

drivers/tty/tty_ioctl.c

704

static int set_ltchars(struct tty_struct *tty, struct ltchars __user *ltchars)

drivers/tty/tty_ioctl.c

768

void __user *p = (void __user *)arg;

drivers/tty/tty_ioctl.c

781

return get_sgttyb(real_tty, (struct sgttyb __user *) arg);

drivers/tty/tty_ioctl.c

784

return set_sgttyb(real_tty, (struct sgttyb __user *) arg);

drivers/tty/tty_ioctl.c

807

if (kernel_termios_to_user_termios((struct termios __user *)arg, &kterm))

drivers/tty/tty_ioctl.c

813

if (kernel_termios_to_user_termios_1((struct termios __user *)arg, &kterm))

drivers/tty/tty_ioctl.c

818

if (kernel_termios_to_user_termios((struct termios2 __user *)arg, &kterm))

drivers/tty/tty_ioctl.c

839

if (kernel_termios_to_user_termios((struct termios __user *)arg, &kterm))

drivers/tty/tty_ioctl.c

847

(struct termios __user *) arg))

drivers/tty/tty_ioctl.c

856

if (kernel_termios_to_user_termios_1((struct termios __user *)arg, &kterm))

drivers/tty/tty_ioctl.c

864

(struct termios __user *) arg))

drivers/tty/tty_ioctl.c

881

(int __user *)arg);

drivers/tty/tty_ioctl.c

884

if (get_user(arg, (unsigned int __user *) arg))

drivers/tty/tty_jobctrl.c

466

static int tiocgpgrp(struct tty_struct *tty, struct tty_struct *real_tty, pid_t __user *p)

drivers/tty/tty_jobctrl.c

493

static int tiocspgrp(struct tty_struct *tty, struct tty_struct *real_tty, pid_t __user *p)

drivers/tty/tty_jobctrl.c

543

static int tiocgsid(struct tty_struct *tty, struct tty_struct *real_tty, pid_t __user *p)

drivers/tty/tty_jobctrl.c

575

void __user *p = (void __user *)arg;

drivers/tty/vt/consolemap.c

352

int con_set_trans_old(unsigned char __user * arg)

drivers/tty/vt/consolemap.c

371

int con_get_trans_old(unsigned char __user * arg)

drivers/tty/vt/consolemap.c

386

int con_set_trans_new(ushort __user * arg)

drivers/tty/vt/consolemap.c

400

int con_get_trans_new(ushort __user * arg)

drivers/tty/vt/consolemap.c

632

int con_set_unimap(struct vc_data *vc, ushort ct, struct unipair __user *list)

drivers/tty/vt/consolemap.c

772

int con_get_unimap(struct vc_data *vc, ushort ct, ushort __user *uct,

drivers/tty/vt/consolemap.c

773

struct unipair __user *list)

drivers/tty/vt/keyboard.c

1726

static int vt_do_kdgkbdiacr(void __user *udp)

drivers/tty/vt/keyboard.c

1728

struct kbdiacrs __user *a = udp;

drivers/tty/vt/keyboard.c

1754

static int vt_do_kdgkbdiacruc(void __user *udp)

drivers/tty/vt/keyboard.c

1756

struct kbdiacrsuc __user *a = udp;

drivers/tty/vt/keyboard.c

1779

static int vt_do_kdskbdiacr(void __user *udp, int perm)

drivers/tty/vt/keyboard.c

1781

struct kbdiacrs __user *a = udp;

drivers/tty/vt/keyboard.c

1814

static int vt_do_kdskbdiacruc(void __user *udp, int perm)

drivers/tty/vt/keyboard.c

1816

struct kbdiacrsuc __user *a = udp;

drivers/tty/vt/keyboard.c

1852

int vt_do_diacrit(unsigned int cmd, void __user *udp, int perm)

drivers/tty/vt/keyboard.c

1928

int vt_do_kbkeycode_ioctl(int cmd, struct kbkeycode __user *user_kbkc, int perm)

drivers/tty/vt/keyboard.c

2036

int vt_do_kdsk_ioctl(int cmd, struct kbentry __user *user_kbe, int perm,

drivers/tty/vt/keyboard.c

2074

int vt_do_kdgkb_ioctl(int cmd, struct kbsentry __user *user_kdgkb, int perm)

drivers/tty/vt/keyboard.c

2132

return put_user(ucval, (char __user *)arg);

drivers/tty/vt/keyboard.c

2150

return put_user(ucval, (char __user *)arg);

drivers/tty/vt/selection.c

123

int sel_loadlut(u32 __user *lut)

drivers/tty/vt/selection.c

186

int set_selection_user(const struct tiocl_selection __user *sel,

drivers/tty/vt/vc_screen.c

364

vcs_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

drivers/tty/vt/vc_screen.c

585

vcs_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)

drivers/tty/vt/vt.c

149

static int set_vesa_blanking(u8 __user *mode);

drivers/tty/vt/vt.c

3564

char __user *p = (char __user *)arg;

drivers/tty/vt/vt.c

3565

void __user *param_aligned32 = (u32 __user *)arg + 1;

drivers/tty/vt/vt.c

3566

void __user *param = (void __user *)arg + 1;

drivers/tty/vt/vt.c

3626

if (get_user(lines, (s32 __user *)param_aligned32))

drivers/tty/vt/vt.c

4649

static int set_vesa_blanking(u8 __user *mode_user)

drivers/tty/vt/vt.c

4835

int con_set_cmap(unsigned char __user *arg)

drivers/tty/vt/vt.c

4863

int con_get_cmap(unsigned char __user *arg)

drivers/tty/vt/vt_ioctl.c

1009

compat_kdfontop_ioctl(struct compat_console_font_op __user *fontop,

drivers/tty/vt/vt_ioctl.c

1034

compat_unimap_ioctl(unsigned int cmd, struct compat_unimapdesc __user *user_ud,

drivers/tty/vt/vt_ioctl.c

1038

struct unipair __user *tmp_entries;

drivers/tty/vt/vt_ioctl.c

1061

void __user *up = compat_ptr(arg);

drivers/tty/vt/vt_ioctl.c

189

static int vt_event_wait_ioctl(struct vt_event __user *event)

drivers/tty/vt/vt_ioctl.c

287

void __user *up = (void __user *)arg;

drivers/tty/vt/vt_ioctl.c

328

return put_user(KB_101, (char __user *)arg);

drivers/tty/vt/vt_ioctl.c

384

return put_user(vc->vc_mode, (int __user *)arg);

drivers/tty/vt/vt_ioctl.c

404

return put_user(vt_do_kdgkbmode(console), (int __user *)arg);

drivers/tty/vt/vt_ioctl.c

413

return put_user(vt_do_kdgkbmeta(console), (int __user *)arg);

drivers/tty/vt/vt_ioctl.c

487

static inline int do_unimap_ioctl(int cmd, struct unimapdesc __user *user_ud,

drivers/tty/vt/vt_ioctl.c

508

static int vt_io_ioctl(struct vc_data *vc, unsigned int cmd, void __user *up,

drivers/tty/vt/vt_ioctl.c

589

static int vt_setactivate(struct vt_setactivate __user *sa)

drivers/tty/vt/vt_ioctl.c

662

static int vt_resizex(struct vc_data *vc, struct vt_consize __user *cs)

drivers/tty/vt/vt_ioctl.c

731

void __user *up = (void __user *)arg;

drivers/tty/vt/vt_ioctl.c

797

struct vt_stat __user *vtstat = up;

drivers/tty/vt/vt_ioctl.c

820

return put_user(i, (int __user *)arg);

drivers/tty/vt/vt_ioctl.c

895

struct vt_sizes __user *vtsizes = up;

drivers/tty/vt/vt_ioctl.c

937

(unsigned short __user *)arg);

drivers/tty/vt/vt_ioctl.c

939

return vt_event_wait_ioctl((struct vt_event __user *)arg);

drivers/ufs/core/ufs-debugfs.c

160

static ssize_t ufs_saved_err_write(struct file *file, const char __user *buf,

drivers/ufs/core/ufs-debugfs.c

404

static ssize_t ufs_tx_eq_ctrl_write(struct file *file, const char __user *buf,

drivers/uio/uio.c

580

static ssize_t uio_read(struct file *filep, char __user *buf,

drivers/uio/uio.c

635

static ssize_t uio_write(struct file *filep, const char __user *buf,

drivers/usb/atm/usbatm.c

158

static int usbatm_atm_ioctl(struct atm_dev *atm_dev, unsigned int cmd, void __user *arg);

drivers/usb/atm/usbatm.c

886

void __user *arg)

drivers/usb/atm/usbatm.c

895

return put_user(ATM_LM_NONE, (int __user *)arg) ? -EFAULT : 0;

drivers/usb/chipidea/debug.c

73

static ssize_t ci_port_test_write(struct file *file, const char __user *ubuf,

drivers/usb/class/cdc-wdm.c

381

(struct file *file, const char __user *buffer, size_t count, loff_t *ppos)

drivers/usb/class/cdc-wdm.c

525

(struct file *file, char __user *buffer, size_t count, loff_t *ppos)

drivers/usb/class/cdc-wdm.c

795

if (copy_to_user((void __user *)arg, &desc->wMaxCommand, sizeof(desc->wMaxCommand)))

drivers/usb/class/usblp.c

558

if (copy_to_user((void __user *) arg,

drivers/usb/class/usblp.c

582

if (copy_to_user((void __user *)arg,

drivers/usb/class/usblp.c

645

if (copy_to_user((void __user *)arg,

drivers/usb/class/usblp.c

666

if (copy_to_user((void __user *)arg,

drivers/usb/class/usblp.c

701

if (copy_to_user((void __user *)arg, &status, sizeof(int)))

drivers/usb/class/usblp.c

744

static ssize_t usblp_write(struct file *file, const char __user *buffer, size_t count, loff_t *ppos)

drivers/usb/class/usblp.c

847

static ssize_t usblp_read(struct file *file, char __user *buffer, size_t len, loff_t *ppos)

drivers/usb/class/usbtmc.c

1064

void __user *arg)

drivers/usb/class/usbtmc.c

1079

&((struct usbtmc_message __user *)arg)->transferred))

drivers/usb/class/usbtmc.c

1120

const void __user *user_buffer,

drivers/usb/class/usbtmc.c

1275

void __user *arg)

drivers/usb/class/usbtmc.c

1290

&((struct usbtmc_message __user *)arg)->transferred))

drivers/usb/class/usbtmc.c

1300

void __user *arg)

drivers/usb/class/usbtmc.c

1310

if (put_user(transferred, (__u32 __user *)arg))

drivers/usb/class/usbtmc.c

1375

static ssize_t usbtmc_read(struct file *filp, char __user *buf,

drivers/usb/class/usbtmc.c

1529

static ssize_t usbtmc_write(struct file *filp, const char __user *buf,

drivers/usb/class/usbtmc.c

1935

void __user *arg)

drivers/usb/class/usbtmc.c

2000

void __user *arg)

drivers/usb/class/usbtmc.c

2006

return put_user(timeout, (__u32 __user *)arg);

drivers/usb/class/usbtmc.c

2013

void __user *arg)

drivers/usb/class/usbtmc.c

2017

if (get_user(timeout, (__u32 __user *)arg))

drivers/usb/class/usbtmc.c

2035

void __user *arg)

drivers/usb/class/usbtmc.c

2054

void __user *arg)

drivers/usb/class/usbtmc.c

2114

retval = usbtmc_ioctl_request(data, (void __user *)arg);

drivers/usb/class/usbtmc.c

2119

(void __user *)arg);

drivers/usb/class/usbtmc.c

2124

(void __user *)arg);

drivers/usb/class/usbtmc.c

2129

(void __user *)arg);

drivers/usb/class/usbtmc.c

2134

(void __user *)arg);

drivers/usb/class/usbtmc.c

2139

(void __user *)arg);

drivers/usb/class/usbtmc.c

2144

(void __user *)arg);

drivers/usb/class/usbtmc.c

2149

(void __user *)arg);

drivers/usb/class/usbtmc.c

2154

(__u32 __user *)arg);

drivers/usb/class/usbtmc.c

2159

(unsigned char __user *)arg);

drivers/usb/class/usbtmc.c

2164

(void __user *)arg);

drivers/usb/class/usbtmc.c

2168

retval = usbtmc488_ioctl_simple(data, (void __user *)arg,

drivers/usb/class/usbtmc.c

2173

retval = usbtmc488_ioctl_simple(data, (void __user *)arg,

drivers/usb/class/usbtmc.c

2178

retval = usbtmc488_ioctl_simple(data, (void __user *)arg,

drivers/usb/class/usbtmc.c

2188

(__u32 __user *)arg);

drivers/usb/class/usbtmc.c

2193

(__u8 __user *)arg);

drivers/usb/class/usbtmc.c

2197

retval = get_user(tmp_byte, (unsigned char __user *)arg);

drivers/usb/class/usbtmc.c

2205

retval = put_user(tmp_byte, (__u8 __user *)arg);

drivers/usb/class/usbtmc.c

2210

(void __user *)arg);

drivers/usb/class/usbtmc.c

563

void __user *arg)

drivers/usb/class/usbtmc.c

578

rv = put_user(stb, (__u8 __user *)arg);

drivers/usb/class/usbtmc.c

585

void __user *arg)

drivers/usb/class/usbtmc.c

599

rv = put_user(stb, (__u8 __user *)arg);

drivers/usb/class/usbtmc.c

611

__u32 __user *arg)

drivers/usb/class/usbtmc.c

658

void __user *arg, unsigned int cmd)

drivers/usb/class/usbtmc.c

827

void __user *user_buffer,

drivers/usb/core/devices.c

390

static ssize_t usb_device_dump(char __user **buffer, size_t *nbytes,

drivers/usb/core/devices.c

509

static ssize_t usb_device_read(struct file *file, char __user *buf,

drivers/usb/core/devio.c

101

void __user *userbuffer;

drivers/usb/core/devio.c

102

void __user *userurb;

drivers/usb/core/devio.c

1274

static int proc_control(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

1373

static int proc_bulk(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

1396

static int proc_resetep(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

1401

if (get_user(ep, (unsigned int __user *)arg))

drivers/usb/core/devio.c

1414

static int proc_clearhalt(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

1420

if (get_user(ep, (unsigned int __user *)arg))

drivers/usb/core/devio.c

1437

static int proc_getdriver(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

1456

static int proc_connectinfo(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

1470

void __user *arg, size_t size)

drivers/usb/core/devio.c

1529

static int proc_setintf(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

1546

static int proc_setconfig(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

1552

if (get_user(u, (int __user *)arg))

drivers/usb/core/devio.c

1620

struct usbdevfs_iso_packet_desc __user *iso_frame_desc,

drivers/usb/core/devio.c

1621

void __user *arg, sigval_t userurb_sigval)

drivers/usb/core/devio.c

1991

static int proc_submiturb(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2003

(((struct usbdevfs_urb __user *)arg)->iso_frame_desc),

drivers/usb/core/devio.c

2007

static int proc_unlinkurb(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2042

static int processcompl(struct async *as, void __user * __user *arg)

drivers/usb/core/devio.c

2045

struct usbdevfs_urb __user *userurb = as->userurb;

drivers/usb/core/devio.c

2046

void __user *addr = as->userurb;

drivers/usb/core/devio.c

2072

if (put_user(addr, (void __user * __user *)arg))

drivers/usb/core/devio.c

2103

static int proc_reapurb(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2111

retval = processcompl(as, (void __user * __user *)arg);

drivers/usb/core/devio.c

2120

static int proc_reapurbnonblock(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2128

retval = processcompl(as, (void __user * __user *)arg);

drivers/usb/core/devio.c

2138

struct usbdevfs_ctrltransfer32 __user *p32)

drivers/usb/core/devio.c

2151

struct usbdevfs_bulktransfer32 __user *p32)

drivers/usb/core/devio.c

2165

static int proc_disconnectsignal_compat(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2177

struct usbdevfs_urb32 __user *uurb)

drivers/usb/core/devio.c

2197

static int proc_submiturb_compat(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2202

if (get_urb32(&uurb, (struct usbdevfs_urb32 __user *)arg))

drivers/usb/core/devio.c

2209

((struct usbdevfs_urb32 __user *)arg)->iso_frame_desc,

drivers/usb/core/devio.c

2213

static int processcompl_compat(struct async *as, void __user * __user *arg)

drivers/usb/core/devio.c

2216

struct usbdevfs_urb32 __user *userurb = as->userurb;

drivers/usb/core/devio.c

2217

void __user *addr = as->userurb;

drivers/usb/core/devio.c

2243

if (put_user(ptr_to_compat(addr), (u32 __user *)arg))

drivers/usb/core/devio.c

2248

static int proc_reapurb_compat(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2256

retval = processcompl_compat(as, (void __user * __user *)arg);

drivers/usb/core/devio.c

2265

static int proc_reapurbnonblock_compat(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2273

retval = processcompl_compat(as, (void __user * __user *)arg);

drivers/usb/core/devio.c

2284

static int proc_disconnectsignal(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2295

static int proc_claiminterface(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2299

if (get_user(ifnum, (unsigned int __user *)arg))

drivers/usb/core/devio.c

2304

static int proc_releaseinterface(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2309

if (get_user(ifnum, (unsigned int __user *)arg))

drivers/usb/core/devio.c

2396

static int proc_ioctl_default(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2420

static int proc_claim_port(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2425

if (get_user(portnum, (unsigned __user *) arg))

drivers/usb/core/devio.c

2434

static int proc_release_port(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2438

if (get_user(portnum, (unsigned __user *) arg))

drivers/usb/core/devio.c

2443

static int proc_get_capabilities(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2456

if (put_user(caps, (__u32 __user *)arg))

drivers/usb/core/devio.c

2462

static int proc_disconnect_claim(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2497

static int proc_alloc_streams(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2517

static int proc_free_streams(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2536

static int proc_drop_privileges(struct usb_dev_state *ps, void __user *arg)

drivers/usb/core/devio.c

2600

void __user *p)

drivers/usb/core/devio.c

2826

ret = usbdev_do_ioctl(file, cmd, (void __user *)arg);

drivers/usb/core/devio.c

311

static ssize_t usbdev_read(struct file *file, char __user *buf, size_t nbytes,

drivers/usb/core/devio.c

476

void __user *userurb)

drivers/usb/core/devio.c

490

void __user *userurb, int pipe, unsigned length,

drivers/usb/core/devio.c

556

static int copy_urb_data_to_user(u8 __user *userbuffer, struct urb *urb)

drivers/usb/core/devio.c

950

struct usbdevfs_streams __user *streams,

drivers/usb/dwc2/debugfs.c

27

static ssize_t testmode_write(struct file *file, const char __user *ubuf, size_t

drivers/usb/dwc3/debugfs.c

364

static ssize_t dwc3_lsp_write(struct file *file, const char __user *ubuf,

drivers/usb/dwc3/debugfs.c

434

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/usb/dwc3/debugfs.c

520

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/usb/dwc3/debugfs.c

608

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/usb/fotg210/fotg210-hcd.c

286

static ssize_t debug_output(struct file*, char __user*, size_t, loff_t*);

drivers/usb/fotg210/fotg210-hcd.c

776

static ssize_t debug_output(struct file *file, char __user *user_buf,

drivers/usb/gadget/function/f_fs.c

1768

if (copy_from_user(&fd, (void __user *)value, sizeof(fd)))

drivers/usb/gadget/function/f_fs.c

1777

if (copy_from_user(&fd, (void __user *)value, sizeof(fd)))

drivers/usb/gadget/function/f_fs.c

1786

if (copy_from_user(&req, (void __user *)value, sizeof(req)))

drivers/usb/gadget/function/f_fs.c

1843

ret = copy_to_user((void __user *)value, &desc1, desc1.bLength);

drivers/usb/gadget/function/f_fs.c

297

static char *ffs_prepare_buffer(const char __user *buf, size_t len)

drivers/usb/gadget/function/f_fs.c

365

static ssize_t ffs_ep0_write(struct file *file, const char __user *buf,

drivers/usb/gadget/function/f_fs.c

4347

static char *ffs_prepare_buffer(const char __user *buf, size_t len)

drivers/usb/gadget/function/f_fs.c

505

static ssize_t __ffs_ep0_read_events(struct ffs_data *ffs, char __user *buf,

drivers/usb/gadget/function/f_fs.c

539

static ssize_t ffs_ep0_read(struct file *file, char __user *buf,

drivers/usb/gadget/function/f_hid.c

304

static ssize_t f_hidg_intout_read(struct file *file, char __user *buffer,

drivers/usb/gadget/function/f_hid.c

383

static ssize_t f_hidg_ssreport_read(struct file *file, char __user *buffer,

drivers/usb/gadget/function/f_hid.c

424

static ssize_t f_hidg_read(struct file *file, char __user *buffer,

drivers/usb/gadget/function/f_hid.c

451

static ssize_t f_hidg_write(struct file *file, const char __user *buffer,

drivers/usb/gadget/function/f_hid.c

634

static int f_hidg_get_report_id(struct file *file, __u8 __user *buffer)

drivers/usb/gadget/function/f_hid.c

644

static int f_hidg_get_report(struct file *file, struct usb_hidg_report __user *buffer)

drivers/usb/gadget/function/f_hid.c

704

return f_hidg_get_report_id(file, (__u8 __user *)arg);

drivers/usb/gadget/function/f_hid.c

706

return f_hidg_get_report(file, (struct usb_hidg_report __user *)arg);

drivers/usb/gadget/function/f_printer.c

430

printer_read(struct file *fd, char __user *buf, size_t len, loff_t *ptr)

drivers/usb/gadget/function/f_printer.c

595

printer_write(struct file *fd, const char __user *buf, size_t len, loff_t *ptr)

drivers/usb/gadget/function/rndis.c

1141

static ssize_t rndis_proc_write(struct file *file, const char __user *buffer,

drivers/usb/gadget/function/u_audio.c

1004

unsigned int size, unsigned int __user *_tlv)

drivers/usb/gadget/legacy/inode.c

1125

ep0_write (struct file *fd, const char __user *buf, size_t len, loff_t *ptr)

drivers/usb/gadget/legacy/inode.c

1801

dev_config (struct file *fd, const char __user *buf, size_t len, loff_t *ptr)

drivers/usb/gadget/legacy/inode.c

913

ep0_read (struct file *fd, char __user *buf, size_t len, loff_t *ptr)

drivers/usb/gadget/legacy/raw_gadget.c

1150

data = raw_alloc_io_data(&io, (void __user *)value, true);

drivers/usb/gadget/legacy/raw_gadget.c

1165

data = raw_alloc_io_data(&io, (void __user *)value, false);

drivers/usb/gadget/legacy/raw_gadget.c

1173

if (copy_to_user((void __user *)(value + sizeof(io)), data, length))

drivers/usb/gadget/legacy/raw_gadget.c

1285

if (copy_to_user((void __user *)value, info, sizeof(*info)))

drivers/usb/gadget/legacy/raw_gadget.c

490

if (copy_from_user(&arg, (void __user *)value, sizeof(arg)))

drivers/usb/gadget/legacy/raw_gadget.c

622

if (copy_from_user(&arg, (void __user *)value, sizeof(arg)))

drivers/usb/gadget/legacy/raw_gadget.c

651

if (copy_to_user((void __user *)value, event, sizeof(*event) + length)) {

drivers/usb/gadget/legacy/raw_gadget.c

660

static void *raw_alloc_io_data(struct usb_raw_ep_io *io, void __user *ptr,

drivers/usb/gadget/legacy/raw_gadget.c

764

data = raw_alloc_io_data(&io, (void __user *)value, true);

drivers/usb/gadget/legacy/raw_gadget.c

779

data = raw_alloc_io_data(&io, (void __user *)value, false);

drivers/usb/gadget/legacy/raw_gadget.c

787

if (copy_to_user((void __user *)(value + sizeof(io)), data, length))

drivers/usb/gadget/legacy/raw_gadget.c

848

desc = memdup_user((void __user *)value, sizeof(*desc));

drivers/usb/gadget/udc/atmel_usba_udc.c

166

static ssize_t regs_dbg_read(struct file *file, char __user *buf,

drivers/usb/gadget/udc/atmel_usba_udc.c

84

static ssize_t queue_dbg_read(struct file *file, char __user *buf,

drivers/usb/gadget/udc/renesas_usb3.c

2611

const char __user *ubuf,

drivers/usb/host/ehci-dbg.c

296

static ssize_t debug_output(struct file*, char __user*, size_t, loff_t*);

drivers/usb/host/ehci-dbg.c

955

static ssize_t debug_output(struct file *file, char __user *user_buf,

drivers/usb/host/ohci-dbg.c

364

static ssize_t debug_output(struct file*, char __user*, size_t, loff_t*);

drivers/usb/host/ohci-dbg.c

704

static ssize_t debug_output(struct file *file, char __user *user_buf,

drivers/usb/host/uhci-debug.c

592

static ssize_t uhci_debug_read(struct file *file, char __user *buf,

drivers/usb/host/xhci-debugfs.c

343

static ssize_t xhci_port_write(struct file *file, const char __user *ubuf,

drivers/usb/host/xhci-debugfs.c

527

static ssize_t xhci_stream_id_write(struct file *file, const char __user *ubuf,

drivers/usb/image/mdc800.c

680

static ssize_t mdc800_device_read (struct file *file, char __user *buf, size_t len, loff_t *pos)

drivers/usb/image/mdc800.c

683

char __user *ptr = buf;

drivers/usb/image/mdc800.c

781

static ssize_t mdc800_device_write (struct file *file, const char __user *buf, size_t len, loff_t *pos)

drivers/usb/misc/adutux.c

343

static ssize_t adu_read(struct file *file, __user char *buffer, size_t count,

drivers/usb/misc/adutux.c

503

static ssize_t adu_write(struct file *file, const __user char *buffer,

drivers/usb/misc/chaoskey.c

419

char __user *buffer,

drivers/usb/misc/idmouse.c

293

static ssize_t idmouse_read(struct file *file, char __user *buffer, size_t count,

drivers/usb/misc/idmouse.c

83

static ssize_t idmouse_read(struct file *file, char __user *buffer,

drivers/usb/misc/iowarrior.c

272

static ssize_t iowarrior_read(struct file *file, char __user *buffer,

drivers/usb/misc/iowarrior.c

361

const char __user *user_buffer,

drivers/usb/misc/iowarrior.c

499

__u8 __user *user_buffer;

drivers/usb/misc/iowarrior.c

527

user_buffer = (__u8 __user *)arg;

drivers/usb/misc/iowarrior.c

547

user_buffer = (__u8 __user *)arg;

drivers/usb/misc/iowarrior.c

586

io_res = copy_to_user((struct iowarrior_info __user *)arg, &info,

drivers/usb/misc/ldusb.c

432

static ssize_t ld_usb_read(struct file *file, char __user *buffer, size_t count,

drivers/usb/misc/ldusb.c

519

static ssize_t ld_usb_write(struct file *file, const char __user *buffer,

drivers/usb/misc/legousbtower.c

222

static ssize_t tower_read(struct file *file, char __user *buffer, size_t count, loff_t *ppos);

drivers/usb/misc/legousbtower.c

223

static ssize_t tower_write(struct file *file, const char __user *buffer, size_t count, loff_t *ppos);

drivers/usb/misc/legousbtower.c

492

static ssize_t tower_read(struct file *file, char __user *buffer, size_t count, loff_t *ppos)

drivers/usb/misc/legousbtower.c

576

static ssize_t tower_write(struct file *file, const char __user *buffer, size_t count, loff_t *ppos)

drivers/usb/misc/sisusbvga/sisusbvga.c

1093

char *kernbuffer, int length, char __user *userbuffer,

drivers/usb/misc/sisusbvga/sisusbvga.c

1113

if (put_user(buf[0], (u8 __user *)userbuffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

1126

if (put_user(swap16, (u16 __user *)userbuffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

1166

if (put_user(swap32, (u32 __user *)userbuffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

2296

static ssize_t sisusb_read(struct file *file, char __user *buffer,

drivers/usb/misc/sisusbvga/sisusbvga.c

2334

else if (put_user(buf8, (u8 __user *)buffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

2345

else if (put_user(buf16, (u16 __user *)buffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

2356

else if (put_user(buf32, (u32 __user *)buffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

2414

else if (put_user(buf32, (u32 __user *)buffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

2432

static ssize_t sisusb_write(struct file *file, const char __user *buffer,

drivers/usb/misc/sisusbvga/sisusbvga.c

2467

if (get_user(buf8, (u8 __user *)buffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

2478

if (get_user(buf16, (u16 __user *)buffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

2489

if (get_user(buf32, (u32 __user *)buffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

2554

if (get_user(buf32, (u32 __user *)buffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

2619

if (copy_to_user((void __user *)arg, y, sizeof(*y)))

drivers/usb/misc/sisusbvga/sisusbvga.c

2677

u32 __user *argp = (u32 __user *)arg;

drivers/usb/misc/sisusbvga/sisusbvga.c

2716

if (copy_to_user((void __user *)arg, &x, sizeof(x)))

drivers/usb/misc/sisusbvga/sisusbvga.c

2723

if (copy_from_user(&y, (void __user *)arg, sizeof(y)))

drivers/usb/misc/sisusbvga/sisusbvga.c

316

char *kernbuffer, const char __user *userbuffer, int index,

drivers/usb/misc/sisusbvga/sisusbvga.c

437

void *kernbuffer, char __user *userbuffer, ssize_t *bytes_read,

drivers/usb/misc/sisusbvga/sisusbvga.c

741

char *kernbuffer, int length, const char __user *userbuffer,

drivers/usb/misc/sisusbvga/sisusbvga.c

766

if (get_user(swap8, (u8 __user *)userbuffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

781

if (get_user(swap16, (u16 __user *)userbuffer))

drivers/usb/misc/sisusbvga/sisusbvga.c

828

if (get_user(swap32, (u32 __user *)userbuffer))

drivers/usb/misc/usblcd.c

124

static ssize_t lcd_read(struct file *file, char __user * buffer,

drivers/usb/misc/usblcd.c

180

if (copy_to_user((void __user *)arg, buf, strlen(buf)) != 0)

drivers/usb/misc/usblcd.c

185

if (copy_to_user((void __user *)arg, buf, strlen(buf)) != 0)

drivers/usb/misc/usblcd.c

217

static ssize_t lcd_write(struct file *file, const char __user * user_buffer,

drivers/usb/misc/yurex.c

399

static ssize_t yurex_read(struct file *file, char __user *buffer, size_t count,

drivers/usb/misc/yurex.c

426

static ssize_t yurex_write(struct file *file, const char __user *user_buffer,

drivers/usb/mon/mon_bin.c

1072

if (copy_from_user(&getb, (void __user *)arg,

drivers/usb/mon/mon_bin.c

1087

struct mon_bin_mfetch __user *uptr;

drivers/usb/mon/mon_bin.c

1089

uptr = (struct mon_bin_mfetch __user *)arg;

drivers/usb/mon/mon_bin.c

1111

struct mon_bin_stats __user *sp;

drivers/usb/mon/mon_bin.c

1121

sp = (struct mon_bin_stats __user *)arg;

drivers/usb/mon/mon_bin.c

1151

if (copy_from_user(&getb, (void __user *)arg,

drivers/usb/mon/mon_bin.c

1166

struct mon_bin_mfetch32 __user *uptr;

drivers/usb/mon/mon_bin.c

1168

uptr = (struct mon_bin_mfetch32 __user *) compat_ptr(arg);

drivers/usb/mon/mon_bin.c

137

struct mon_bin_hdr __user *hdr; /* Can be 48 bytes or 64. */

drivers/usb/mon/mon_bin.c

138

void __user *data;

drivers/usb/mon/mon_bin.c

143

u32 __user *offvec; /* Vector of events fetched */

drivers/usb/mon/mon_bin.c

267

char __user *to, int length)

drivers/usb/mon/mon_bin.c

743

struct mon_bin_hdr __user *hdr, unsigned int hdrbytes,

drivers/usb/mon/mon_bin.c

744

void __user *data, unsigned int nbytes)

drivers/usb/mon/mon_bin.c

805

static ssize_t mon_bin_read(struct file *file, char __user *buf,

drivers/usb/mon/mon_bin.c

904

u32 __user *vec, unsigned int max)

drivers/usb/mon/mon_stat.c

46

static ssize_t mon_stat_read(struct file *file, char __user *buf,

drivers/usb/mon/mon_text.c

382

char __user * const buf, const size_t nbytes)

drivers/usb/mon/mon_text.c

394

static ssize_t mon_text_read_t(struct file *file, char __user *buf,

drivers/usb/mon/mon_text.c

433

static ssize_t mon_text_read_u(struct file *file, char __user *buf,

drivers/usb/mtu3/mtu3_debugfs.c

297

static ssize_t mtu3_probe_write(struct file *file, const char __user *ubuf,

drivers/usb/mtu3/mtu3_debugfs.c

421

static ssize_t ssusb_mode_write(struct file *file, const char __user *ubuf,

drivers/usb/mtu3/mtu3_debugfs.c

467

static ssize_t ssusb_vbus_write(struct file *file, const char __user *ubuf,

drivers/usb/musb/musb_debugfs.c

162

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/usb/musb/musb_debugfs.c

260

const char __user *ubuf, size_t count, loff_t *ppos)

drivers/usb/serial/ftdi_sio.c

1479

unsigned int __user *retinfo)

drivers/usb/serial/ftdi_sio.c

2828

void __user *argp = (void __user *)arg;

drivers/usb/serial/io_edgeport.c

1477

unsigned int __user *value)

drivers/usb/serial/io_edgeport.c

1557

return get_lsr_info(edge_port, (unsigned int __user *) arg);

drivers/usb/serial/mos7720.c

1536

struct moschip_port *mos7720_port, unsigned int __user *value)

drivers/usb/serial/mos7720.c

1623

(unsigned int __user *)arg);

drivers/usb/serial/mos7840.c

1353

unsigned int __user *value)

drivers/usb/serial/mos7840.c

1376

void __user *argp = (void __user *)arg;

drivers/usb/serial/xr_serial.c

848

struct serial_rs485 __user *argp)

drivers/usb/serial/xr_serial.c

864

struct serial_rs485 __user *argp)

drivers/usb/serial/xr_serial.c

887

void __user *argp = (void __user *)arg;

drivers/usb/typec/ucsi/debugfs.c

119

const char __user *data, size_t count, loff_t *ppos)

drivers/vdpa/vdpa_user/vduse_dev.c

1370

void __user *argp = (void __user *)arg;

drivers/vdpa/vdpa_user/vduse_dev.c

1419

ret = put_user(dev->driver_features, (u64 __user *)argp);

drivers/vdpa/vdpa_user/vduse_dev.c

1536

if (get_user(index, (u32 __user *)argp))

drivers/vdpa/vdpa_user/vduse_dev.c

1676

void __user *argp = (void __user *)arg;

drivers/vdpa/vdpa_user/vduse_dev.c

2282

void __user *argp = (void __user *)arg;

drivers/vdpa/vdpa_user/vduse_dev.c

2290

ret = put_user(control->api_version, (u64 __user *)argp);

drivers/vdpa/vdpa_user/vduse_dev.c

2296

if (get_user(api_version, (u64 __user *)argp))

drivers/vfio/cdx/main.c

117

void __user *arg, size_t argsz)

drivers/vfio/cdx/main.c

128

struct vfio_device_info __user *arg)

drivers/vfio/cdx/main.c

168

struct vfio_irq_info __user *arg)

drivers/vfio/cdx/main.c

193

struct vfio_irq_set __user *arg)

drivers/vfio/cdx/main.c

228

void __user *uarg = (void __user *)arg;

drivers/vfio/cdx/main.c

85

void __user *arg, size_t argsz)

drivers/vfio/device_cdev.c

195

struct vfio_device_attach_iommufd_pt __user *arg)

drivers/vfio/device_cdev.c

224

(void __user *)arg + minsz, xend - minsz))

drivers/vfio/device_cdev.c

254

struct vfio_device_detach_iommufd_pt __user *arg)

drivers/vfio/device_cdev.c

282

(void __user *)arg + minsz, xend - minsz))

drivers/vfio/device_cdev.c

84

struct vfio_device_bind_iommufd __user *arg)

drivers/vfio/fsl-mc/vfio_fsl_mc.c

153

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/fsl-mc/vfio_fsl_mc.c

167

return copy_to_user((void __user *)arg, &info, minsz) ?

drivers/vfio/fsl-mc/vfio_fsl_mc.c

175

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/fsl-mc/vfio_fsl_mc.c

187

if (copy_to_user((void __user *)arg, &info, minsz))

drivers/vfio/fsl-mc/vfio_fsl_mc.c

200

if (copy_from_user(&hdr, (void __user *)arg, minsz))

drivers/vfio/fsl-mc/vfio_fsl_mc.c

209

data = memdup_user((void __user *)(arg + minsz),

drivers/vfio/fsl-mc/vfio_fsl_mc.c

234

static ssize_t vfio_fsl_mc_read(struct vfio_device *core_vdev, char __user *buf,

drivers/vfio/fsl-mc/vfio_fsl_mc.c

313

const char __user *buf, size_t count,

drivers/vfio/group.c

108

int __user *arg)

drivers/vfio/group.c

304

char __user *arg)

drivers/vfio/group.c

326

struct vfio_group_status __user *arg)

drivers/vfio/group.c

368

void __user *uarg = (void __user *)arg;

drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c

1345

const char __user *buf, size_t count,

drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c

1359

char __user *buf, size_t count,

drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c

747

static ssize_t hisi_acc_vf_resume_write(struct file *filp, const char __user *buf,

drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c

857

return copy_to_user((void __user *)arg, &info,

drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c

865

static ssize_t hisi_acc_vf_save_read(struct file *filp, char __user *buf, size_t len,

drivers/vfio/pci/ism/main.c

123

char __user *buf, loff_t off, size_t count,

drivers/vfio/pci/ism/main.c

161

char __user *buf, size_t count, loff_t *ppos,

drivers/vfio/pci/ism/main.c

191

char __user *buf, size_t count,

drivers/vfio/pci/ism/main.c

22

size_t *filled, char __user *buf, \

drivers/vfio/pci/ism/main.c

220

static ssize_t ism_vfio_pci_rw(struct vfio_device *core_vdev, char __user *buf,

drivers/vfio/pci/ism/main.c

249

char __user *buf, size_t count, loff_t *ppos)

drivers/vfio/pci/ism/main.c

255

const char __user *buf, size_t count,

drivers/vfio/pci/ism/main.c

258

return ism_vfio_pci_rw(core_vdev, (char __user *)buf, count, ppos,

drivers/vfio/pci/ism/main.c

78

char __user *buf, loff_t off, size_t count,

drivers/vfio/pci/mlx5/main.c

124

char __user **buf, size_t *len, loff_t *pos)

drivers/vfio/pci/mlx5/main.c

164

static ssize_t mlx5vf_save_read(struct file *filp, char __user *buf, size_t len,

drivers/vfio/pci/mlx5/main.c

571

if (copy_to_user((void __user *)arg, &info,

drivers/vfio/pci/mlx5/main.c

704

const char __user **buf, size_t *len,

drivers/vfio/pci/mlx5/main.c

738

size_t image_size, const char __user **buf,

drivers/vfio/pci/mlx5/main.c

767

const char __user **buf, size_t *len,

drivers/vfio/pci/mlx5/main.c

817

const char __user **buf,

drivers/vfio/pci/mlx5/main.c

883

static ssize_t mlx5vf_resume_write(struct file *filp, const char __user *buf,

drivers/vfio/pci/nvgrace-gpu/main.c

624

char __user *buf, size_t count, loff_t *ppos)

drivers/vfio/pci/nvgrace-gpu/main.c

675

const char __user *buf, size_t count, loff_t *ppos)

drivers/vfio/pci/nvgrace-gpu/main.c

754

char __user *buf, size_t mem_count, loff_t *ppos)

drivers/vfio/pci/nvgrace-gpu/main.c

805

char __user *buf, size_t count, loff_t *ppos)

drivers/vfio/pci/nvgrace-gpu/main.c

856

ret = put_user(val, (unsigned char __user *)(buf + i));

drivers/vfio/pci/nvgrace-gpu/main.c

867

char __user *buf, size_t count, loff_t *ppos)

drivers/vfio/pci/nvgrace-gpu/main.c

896

const char __user *buf, size_t mem_count,

drivers/vfio/pci/nvgrace-gpu/main.c

925

(char __user *)buf, pos, mem_count,

drivers/vfio/pci/nvgrace-gpu/main.c

942

size_t count, loff_t *ppos, const char __user *buf)

drivers/vfio/pci/nvgrace-gpu/main.c

997

const char __user *buf, size_t count, loff_t *ppos)

drivers/vfio/pci/pds/lm.c

176

static ssize_t pds_vfio_save_read(struct file *filp, char __user *buf,

drivers/vfio/pci/pds/lm.c

274

static ssize_t pds_vfio_restore_write(struct file *filp, const char __user *buf,

drivers/vfio/pci/qat/main.c

157

return copy_to_user((void __user *)arg, &info,

drivers/vfio/pci/qat/main.c

161

static ssize_t qat_vf_save_read(struct file *filp, char __user *buf,

drivers/vfio/pci/qat/main.c

288

static ssize_t qat_vf_resume_write(struct file *filp, const char __user *buf,

drivers/vfio/pci/vfio_pci_config.c

1884

char __user *buf, size_t count, loff_t *ppos,

drivers/vfio/pci/vfio_pci_config.c

1976

ssize_t vfio_pci_config_rw(struct vfio_pci_core_device *vdev, char __user *buf,

drivers/vfio/pci/vfio_pci_core.c

1071

struct vfio_device_info __user *arg)

drivers/vfio/pci/vfio_pci_core.c

1243

struct vfio_irq_info __user *arg)

drivers/vfio/pci/vfio_pci_core.c

1280

struct vfio_irq_set __user *arg)

drivers/vfio/pci/vfio_pci_core.c

1316

void __user *arg)

drivers/vfio/pci/vfio_pci_core.c

1347

struct vfio_pci_hot_reset_info __user *arg)

drivers/vfio/pci/vfio_pci_core.c

1424

struct vfio_pci_hot_reset __user *arg)

drivers/vfio/pci/vfio_pci_core.c

1501

struct vfio_pci_hot_reset __user *arg)

drivers/vfio/pci/vfio_pci_core.c

1531

struct vfio_device_ioeventfd __user *arg)

drivers/vfio/pci/vfio_pci_core.c

1560

void __user *uarg = (void __user *)arg;

drivers/vfio/pci/vfio_pci_core.c

1584

u32 flags, uuid_t __user *arg,

drivers/vfio/pci/vfio_pci_core.c

1611

void __user *arg, size_t argsz)

drivers/vfio/pci/vfio_pci_core.c

1634

static ssize_t vfio_pci_rw(struct vfio_pci_core_device *vdev, char __user *buf,

drivers/vfio/pci/vfio_pci_core.c

1681

ssize_t vfio_pci_core_read(struct vfio_device *core_vdev, char __user *buf,

drivers/vfio/pci/vfio_pci_core.c

1694

ssize_t vfio_pci_core_write(struct vfio_device *core_vdev, const char __user *buf,

drivers/vfio/pci/vfio_pci_core.c

1703

return vfio_pci_rw(vdev, (char __user *)buf, count, ppos, true);

drivers/vfio/pci/vfio_pci_core.c

395

void __user *arg, size_t argsz)

drivers/vfio/pci/vfio_pci_core.c

414

struct vfio_device_low_power_entry_with_wakeup __user *arg,

drivers/vfio/pci/vfio_pci_core.c

470

void __user *arg, size_t argsz)

drivers/vfio/pci/vfio_pci_dmabuf.c

222

struct vfio_device_feature_dma_buf __user *arg,

drivers/vfio/pci/vfio_pci_igd.c

282

char __user *buf, size_t count, loff_t *ppos,

drivers/vfio/pci/vfio_pci_igd.c

47

static inline unsigned long igd_opregion_shift_copy(char __user *dst,

drivers/vfio/pci/vfio_pci_igd.c

65

char __user *buf, size_t count, loff_t *ppos,

drivers/vfio/pci/vfio_pci_priv.h

119

struct vfio_device_feature_dma_buf __user *arg,

drivers/vfio/pci/vfio_pci_priv.h

126

struct vfio_device_feature_dma_buf __user *arg,

drivers/vfio/pci/vfio_pci_priv.h

37

ssize_t vfio_pci_config_rw(struct vfio_pci_core_device *vdev, char __user *buf,

drivers/vfio/pci/vfio_pci_priv.h

41

char __user *buf, size_t count, loff_t *ppos,

drivers/vfio/pci/vfio_pci_priv.h

44

ssize_t vfio_pci_bar_rw(struct vfio_pci_core_device *vdev, char __user *buf,

drivers/vfio/pci/vfio_pci_priv.h

48

ssize_t vfio_pci_vga_rw(struct vfio_pci_core_device *vdev, char __user *buf,

drivers/vfio/pci/vfio_pci_priv.h

52

char __user *buf, size_t count,

drivers/vfio/pci/vfio_pci_rdwr.c

136

void __iomem *io, char __user *buf,

drivers/vfio/pci/vfio_pci_rdwr.c

201

ssize_t vfio_pci_bar_rw(struct vfio_pci_core_device *vdev, char __user *buf,

drivers/vfio/pci/vfio_pci_rdwr.c

282

ssize_t vfio_pci_vga_rw(struct vfio_pci_core_device *vdev, char __user *buf,

drivers/vfio/pci/vfio_pci_rdwr.c

96

void __iomem *io, char __user *buf, \

drivers/vfio/pci/virtio/common.h

116

const char __user *buf, size_t count,

drivers/vfio/pci/virtio/common.h

118

ssize_t virtiovf_pci_core_read(struct vfio_device *core_vdev, char __user *buf,

drivers/vfio/pci/virtio/legacy_io.c

124

char __user *buf, size_t count,

drivers/vfio/pci/virtio/legacy_io.c

208

ssize_t virtiovf_pci_core_read(struct vfio_device *core_vdev, char __user *buf,

drivers/vfio/pci/virtio/legacy_io.c

229

const char __user *buf, size_t count,

drivers/vfio/pci/virtio/legacy_io.c

23

loff_t pos, char __user *buf,

drivers/vfio/pci/virtio/legacy_io.c

262

ssize_t virtiovf_pci_core_write(struct vfio_device *core_vdev, const char __user *buf,

drivers/vfio/pci/virtio/legacy_io.c

277

return virtiovf_pci_bar0_rw(virtvdev, pos, (char __user *)buf, count, false);

drivers/vfio/pci/virtio/legacy_io.c

68

loff_t pos, char __user *buf,

drivers/vfio/pci/virtio/migrate.c

331

char __user **buf, size_t *len, loff_t *pos)

drivers/vfio/pci/virtio/migrate.c

374

static ssize_t virtiovf_save_read(struct file *filp, char __user *buf, size_t len,

drivers/vfio/pci/virtio/migrate.c

493

if (copy_to_user((void __user *)arg, &info,

drivers/vfio/pci/virtio/migrate.c

749

const char __user **buf, size_t *len,

drivers/vfio/pci/virtio/migrate.c

789

size_t chunk_size, const char __user **buf,

drivers/vfio/pci/virtio/migrate.c

818

const char __user **buf, size_t *len,

drivers/vfio/pci/virtio/migrate.c

854

const char __user **buf,

drivers/vfio/pci/virtio/migrate.c

917

static ssize_t virtiovf_resume_write(struct file *filp, const char __user *buf,

drivers/vfio/pci/xe/main.c

185

static ssize_t xe_vfio_pci_save_read(struct file *filp, char __user *buf, size_t len, loff_t *pos)

drivers/vfio/pci/xe/main.c

212

static ssize_t xe_vfio_pci_resume_write(struct file *filp, const char __user *buf,

drivers/vfio/platform/vfio_platform_common.c

306

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/platform/vfio_platform_common.c

318

return copy_to_user((void __user *)arg, &info, minsz) ?

drivers/vfio/platform/vfio_platform_common.c

326

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/platform/vfio_platform_common.c

338

return copy_to_user((void __user *)arg, &info, minsz) ?

drivers/vfio/platform/vfio_platform_common.c

349

if (copy_from_user(&hdr, (void __user *)arg, minsz))

drivers/vfio/platform/vfio_platform_common.c

358

data = memdup_user((void __user *)(arg + minsz),

drivers/vfio/platform/vfio_platform_common.c

382

char __user *buf, size_t count,

drivers/vfio/platform/vfio_platform_common.c

442

char __user *buf, size_t count, loff_t *ppos)

drivers/vfio/platform/vfio_platform_common.c

466

const char __user *buf, size_t count,

drivers/vfio/platform/vfio_platform_common.c

524

ssize_t vfio_platform_write(struct vfio_device *core_vdev, const char __user *buf,

drivers/vfio/platform/vfio_platform_private.h

92

char __user *buf, size_t count,

drivers/vfio/platform/vfio_platform_private.h

95

const char __user *buf,

drivers/vfio/vfio.h

352

struct vfio_device_attach_iommufd_pt __user *arg);

drivers/vfio/vfio.h

354

struct vfio_device_detach_iommufd_pt __user *arg);

drivers/vfio/vfio.h

378

struct vfio_device_bind_iommufd __user *arg);

drivers/vfio/vfio.h

404

struct vfio_device_bind_iommufd __user *arg)

drivers/vfio/vfio_iommu_spapr_tce.c

1029

if (copy_from_user(&param, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

1058

if (copy_from_user(&param, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

1122

if (copy_from_user(&create, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

1142

if (!ret && copy_to_user((void __user *)arg, &create, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

1163

if (copy_from_user(&remove, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

789

if (copy_from_user(&op, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

818

if (copy_from_user(&op, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

875

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

900

if (copy_to_user((void __user *)arg, &info, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

916

if (copy_from_user(&param, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_spapr_tce.c

983

if (copy_from_user(&param, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_type1.c

1270

static int update_user_bitmap(u64 __user *bitmap, struct vfio_iommu *iommu,

drivers/vfio/vfio_iommu_type1.c

1293

(void __user *)(bitmap + copy_offset),

drivers/vfio/vfio_iommu_type1.c

1300

if (copy_to_user((void __user *)(bitmap + copy_offset), dma->bitmap,

drivers/vfio/vfio_iommu_type1.c

1307

static int vfio_iova_dirty_bitmap(u64 __user *bitmap, struct vfio_iommu *iommu,

drivers/vfio/vfio_iommu_type1.c

2846

if (copy_from_user(&info, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_type1.c

2879

if (copy_to_user((void __user *)arg +

drivers/vfio/vfio_iommu_type1.c

2891

return copy_to_user((void __user *)arg, &info, minsz) ?

drivers/vfio/vfio_iommu_type1.c

2905

if (copy_from_user(&map, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_type1.c

2927

if (copy_from_user(&unmap, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_type1.c

2945

(void __user *)(arg + minsz),

drivers/vfio/vfio_iommu_type1.c

2949

if (!access_ok((void __user *)bitmap.data, bitmap.size))

drivers/vfio/vfio_iommu_type1.c

2963

return copy_to_user((void __user *)arg, &unmap, minsz) ?

drivers/vfio/vfio_iommu_type1.c

2982

if (copy_from_user(&dirty, (void __user *)arg, minsz))

drivers/vfio/vfio_iommu_type1.c

3022

if (copy_from_user(&range, (void __user *)(arg + minsz),

drivers/vfio/vfio_iommu_type1.c

3038

if (!access_ok((void __user *)range.bitmap.data,

drivers/vfio/vfio_iommu_type1.c

3176

*copied = copy_to_user((void __user *)vaddr, data,

drivers/vfio/vfio_iommu_type1.c

3189

*copied = copy_from_user(data, (void __user *)vaddr,

drivers/vfio/vfio_main.c

1002

u32 flags, void __user *arg,

drivers/vfio/vfio_main.c

1085

u32 flags, void __user *arg,

drivers/vfio/vfio_main.c

1091

struct vfio_device_feature_dma_logging_range __user *ranges;

drivers/vfio/vfio_main.c

1169

u32 flags, void __user *arg,

drivers/vfio/vfio_main.c

1196

u32 flags, void __user *arg,

drivers/vfio/vfio_main.c

1240

struct vfio_device_feature __user *arg)

drivers/vfio/vfio_main.c

1301

struct vfio_region_info __user *arg)

drivers/vfio/vfio_main.c

1350

void __user *uptr = (void __user *)arg;

drivers/vfio/vfio_main.c

1398

static ssize_t vfio_device_fops_read(struct file *filep, char __user *buf,

drivers/vfio/vfio_main.c

1415

const char __user *buf,

drivers/vfio/vfio_main.c

879

static int vfio_ioct_mig_return_fd(struct file *filp, void __user *arg,

drivers/vfio/vfio_main.c

908

u32 flags, void __user *arg,

drivers/vfio/vfio_main.c

958

u32 flags, void __user *arg,

drivers/vhost/net.c

1744

void __user *argp = (void __user *)arg;

drivers/vhost/net.c

1745

u64 __user *featurep = argp;

drivers/vhost/scsi.c

2368

void __user *argp = (void __user *)arg;

drivers/vhost/scsi.c

2369

u64 __user *featurep = argp;

drivers/vhost/scsi.c

2370

u32 __user *eventsp = argp;

drivers/vhost/scsi.c

574

struct virtio_scsi_event __user *eventp;

drivers/vhost/test.c

322

void __user *argp = (void __user *)arg;

drivers/vhost/test.c

323

u64 __user *featurep = argp;

drivers/vhost/vdpa.c

273

static long vhost_vdpa_get_device_id(struct vhost_vdpa *v, u8 __user *argp)

drivers/vhost/vdpa.c

287

static long vhost_vdpa_get_status(struct vhost_vdpa *v, u8 __user *statusp)

drivers/vhost/vdpa.c

301

static long vhost_vdpa_set_status(struct vhost_vdpa *v, u8 __user *statusp)

drivers/vhost/vdpa.c

356

struct vhost_vdpa_config __user *c)

drivers/vhost/vdpa.c

383

struct vhost_vdpa_config __user *c)

drivers/vhost/vdpa.c

429

static long vhost_vdpa_get_features(struct vhost_vdpa *v, u64 __user *featurep)

drivers/vhost/vdpa.c

463

static long vhost_vdpa_set_features(struct vhost_vdpa *v, u64 __user *featurep)

drivers/vhost/vdpa.c

498

static long vhost_vdpa_get_vring_num(struct vhost_vdpa *v, u16 __user *argp)

drivers/vhost/vdpa.c

520

static long vhost_vdpa_set_config_call(struct vhost_vdpa *v, u32 __user *argp)

drivers/vhost/vdpa.c

549

static long vhost_vdpa_get_iova_range(struct vhost_vdpa *v, u32 __user *argp)

drivers/vhost/vdpa.c

561

static long vhost_vdpa_get_config_size(struct vhost_vdpa *v, u32 __user *argp)

drivers/vhost/vdpa.c

575

static long vhost_vdpa_get_vqs_count(struct vhost_vdpa *v, u32 __user *argp)

drivers/vhost/vdpa.c

633

void __user *argp)

drivers/vhost/vdpa.c

644

r = get_user(idx, (u32 __user *)argp);

drivers/vhost/vdpa.c

781

void __user *argp = (void __user *)arg;

drivers/vhost/vdpa.c

782

u64 __user *featurep = argp;

drivers/vhost/vhost.c

1010

void __user *argp)

drivers/vhost/vhost.c

1229

static bool log_access_ok(void __user *log_base, u64 addr, unsigned long sz)

drivers/vhost/vhost.c

1255

static bool vq_memory_access_ok(void __user *log_base, struct vhost_iotlb *umem,

drivers/vhost/vhost.c

126

static long vhost_set_vring_endian(struct vhost_virtqueue *vq, int __user *argp)

drivers/vhost/vhost.c

1270

if (!access_ok((void __user *)a, map->size))

drivers/vhost/vhost.c

1280

static inline void __user *vhost_vq_meta_fetch(struct vhost_virtqueue *vq,

drivers/vhost/vhost.c

1289

return (void __user *)(uintptr_t)(map->addr + addr - map->start);

drivers/vhost/vhost.c

132

int __user *argp)

drivers/vhost/vhost.c

1321

static int vhost_copy_to_user(struct vhost_virtqueue *vq, void __user *to,

drivers/vhost/vhost.c

1335

void __user *uaddr = vhost_vq_meta_fetch(vq,

drivers/vhost/vhost.c

1357

void __user *from, unsigned size)

drivers/vhost/vhost.c

1369

void __user *uaddr = vhost_vq_meta_fetch(vq,

drivers/vhost/vhost.c

1396

static void __user *__vhost_get_user_slow(struct vhost_virtqueue *vq,

drivers/vhost/vhost.c

1397

void __user *addr, unsigned int size,

drivers/vhost/vhost.c

1427

static inline void __user *__vhost_get_user(struct vhost_virtqueue *vq,

drivers/vhost/vhost.c

1428

void __user *addr, unsigned int size,

drivers/vhost/vhost.c

1431

void __user *uaddr = vhost_vq_meta_fetch(vq,

drivers/vhost/vhost.c

1618

!access_ok((void __user *)a, size))

drivers/vhost/vhost.c

1621

!access_ok((void __user *)a, size))

drivers/vhost/vhost.c

1850

vring_desc_t __user *desc,

drivers/vhost/vhost.c

1851

vring_avail_t __user *avail,

drivers/vhost/vhost.c

1852

vring_used_t __user *used)

drivers/vhost/vhost.c

1936

void __user *log_base,

drivers/vhost/vhost.c

1952

void __user *log_base)

drivers/vhost/vhost.c

1970

static long vhost_set_memory(struct vhost_dev *d, struct vhost_memory __user *m)

drivers/vhost/vhost.c

2038

void __user *argp)

drivers/vhost/vhost.c

2059

void __user *argp)

drivers/vhost/vhost.c

2088

(void __user *)(unsigned long)a.desc_user_addr,

drivers/vhost/vhost.c

2089

(void __user *)(unsigned long)a.avail_user_addr,

drivers/vhost/vhost.c

2090

(void __user *)(unsigned long)a.used_user_addr))

drivers/vhost/vhost.c

2101

vq->desc = (void __user *)(unsigned long)a.desc_user_addr;

drivers/vhost/vhost.c

2102

vq->avail = (void __user *)(unsigned long)a.avail_user_addr;

drivers/vhost/vhost.c

2104

vq->used = (void __user *)(unsigned long)a.used_user_addr;

drivers/vhost/vhost.c

2112

void __user *argp)

drivers/vhost/vhost.c

2133

long vhost_vring_ioctl(struct vhost_dev *d, unsigned int ioctl, void __user *argp)

drivers/vhost/vhost.c

2301

long vhost_dev_ioctl(struct vhost_dev *d, unsigned int ioctl, void __user *argp)

drivers/vhost/vhost.c

2323

if (get_user(fork_owner_val, (u8 __user *)argp)) {

drivers/vhost/vhost.c

2344

if (put_user(fork_owner_val, (u8 __user *)argp)) {

drivers/vhost/vhost.c

2373

void __user *base = (void __user *)(unsigned long)p;

drivers/vhost/vhost.c

2385

r = get_user(fd, (int __user *)argp);

drivers/vhost/vhost.c

2415

static int set_bit_to_user(int nr, void __user *addr)

drivers/vhost/vhost.c

2434

static int log_write(void __user *log_base,

drivers/vhost/vhost.c

2449

r = set_bit_to_user(bit, (void __user *)(unsigned long)log);

drivers/vhost/vhost.c

2572

void __user *used;

drivers/vhost/vhost.c

2580

log_used(vq, (used - (void __user *)vq->used),

drivers/vhost/vhost.c

2593

void __user *used;

drivers/vhost/vhost.c

2598

log_used(vq, (used - (void __user *)vq->used),

drivers/vhost/vhost.c

2674

_iov->iov_base = (void __user *)(unsigned long)

drivers/vhost/vhost.c

3004

vring_used_elem_t __user *used;

drivers/vhost/vhost.c

3018

log_used(vq, ((void __user *)used - (void __user *)vq->used),

drivers/vhost/vhost.c

3055

vring_used_elem_t __user *used;

drivers/vhost/vhost.c

3080

log_used(vq, ((void __user *)used - (void __user *)vq->used),

drivers/vhost/vhost.c

57

#define vhost_used_event(vq) ((__virtio16 __user *)&vq->avail->ring[vq->num])

drivers/vhost/vhost.c

58

#define vhost_avail_event(vq) ((__virtio16 __user *)&vq->used->ring[vq->num])

drivers/vhost/vhost.c

76

static long vhost_set_vring_endian(struct vhost_virtqueue *vq, int __user *argp)

drivers/vhost/vhost.c

987

static int vhost_get_vq_from_user(struct vhost_dev *dev, void __user *argp,

drivers/vhost/vhost.c

99

int __user *argp)

drivers/vhost/vhost.c

990

u32 __user *idxp = argp;

drivers/vhost/vhost.h

101

vring_desc_t __user *desc;

drivers/vhost/vhost.h

102

vring_avail_t __user *avail;

drivers/vhost/vhost.h

103

vring_used_t __user *used;

drivers/vhost/vhost.h

155

void __user *log_base;

drivers/vhost/vhost.h

222

long vhost_dev_ioctl(struct vhost_dev *, unsigned int ioctl, void __user *argp);

drivers/vhost/vhost.h

223

long vhost_vring_ioctl(struct vhost_dev *d, unsigned int ioctl, void __user *argp);

drivers/vhost/vhost.h

225

void __user *argp);

drivers/vhost/vringh.c

1077

iovec[ret].iov_base = (void __user *)io_addr;

drivers/vhost/vringh.c

1216

ret = __get_user(tmp, (__virtio16 __user *)ivec.iov.iovec[0].iov_base);

drivers/vhost/vringh.c

1254

ret = __put_user(tmp, (__virtio16 __user *)ivec.iov.iovec[0].iov_base);

drivers/vhost/vringh.c

601

int rc = get_user(v, (__force __virtio16 __user *)p);

drivers/vhost/vringh.c

609

return put_user(v, (__force __virtio16 __user *)p);

drivers/vhost/vringh.c

615

return copy_from_user(dst, (__force void __user *)src, len) ?

drivers/vhost/vringh.c

624

return copy_to_user((__force void __user *)dst, src,

drivers/vhost/vringh.c

631

return copy_from_user(dst, (__force void __user *)src, len) ?

drivers/vhost/vringh.c

638

return copy_to_user((__force void __user *)dst, src, len) ?

drivers/vhost/vringh.c

657

vring_desc_t __user *desc,

drivers/vhost/vringh.c

658

vring_avail_t __user *avail,

drivers/vhost/vringh.c

659

vring_used_t __user *used)

drivers/vhost/vsock.c

893

void __user *argp = (void __user *)arg;

drivers/video/fbdev/amifb.c

1842

u_char __user *data,

drivers/video/fbdev/amifb.c

1917

u_char __user *data, struct amifb_par *par)

drivers/video/fbdev/amifb.c

3387

void __user *argp = (void __user *)arg;

drivers/video/fbdev/amifb.c

3400

((struct fb_var_cursorinfo __user *)arg)->data,

drivers/video/fbdev/amifb.c

3411

((struct fb_var_cursorinfo __user *)arg)->data,

drivers/video/fbdev/arcfb.c

369

void __user *argp = (void __user *)arg;

drivers/video/fbdev/aty/aty128fb.c

2262

rc = get_user(value, (__u32 __user *)arg);

drivers/video/fbdev/aty/aty128fb.c

2276

return put_user(value, (__u32 __user *)arg);

drivers/video/fbdev/aty/atyfb_base.c

1843

if (copy_to_user((struct fbtype __user *) arg, &fbtyp,

drivers/video/fbdev/aty/atyfb_base.c

1853

if (get_user(crtc, (__u32 __user *) arg))

drivers/video/fbdev/aty/atyfb_base.c

1879

if (copy_to_user((struct atyclk __user *) arg, &clk,

drivers/video/fbdev/aty/atyfb_base.c

1889

if (copy_from_user(&clk, (struct atyclk __user *) arg,

drivers/video/fbdev/aty/atyfb_base.c

1911

if (get_user(par->features, (u32 __user *) arg))

drivers/video/fbdev/aty/atyfb_base.c

1915

if (put_user(par->features, (u32 __user *) arg))

drivers/video/fbdev/aty/radeon_base.c

1029

return put_user(value, (__u32 __user *)arg);

drivers/video/fbdev/aty/radeon_base.c

984

rc = get_user(value, (__u32 __user *)arg);

drivers/video/fbdev/au1200fb.c

1432

if (copy_from_user(&iodata, (void __user *) arg, sizeof(iodata)))

drivers/video/fbdev/au1200fb.c

1480

val = copy_to_user((void __user *) arg, &iodata, sizeof(iodata));

drivers/video/fbdev/cg14.c

274

struct mdi_cfginfo kmdi, __user *mdii;

drivers/video/fbdev/cg14.c

297

mdii = (struct mdi_cfginfo __user *) arg;

drivers/video/fbdev/cg14.c

303

if (get_user(mode, (int __user *) arg)) {

drivers/video/fbdev/cobalt_lcdfb.c

125

static ssize_t cobalt_lcdfb_read(struct fb_info *info, char __user *buf,

drivers/video/fbdev/cobalt_lcdfb.c

174

static ssize_t cobalt_lcdfb_write(struct fb_info *info, const char __user *buf,

drivers/video/fbdev/core/fb_chrdev.c

223

struct fb_fix_screeninfo32 __user *fix32)

drivers/video/fbdev/core/fb_chrdev.c

30

static ssize_t fb_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

drivers/video/fbdev/core/fb_chrdev.c

46

static ssize_t fb_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)

drivers/video/fbdev/core/fb_chrdev.c

70

void __user *argp = (void __user *)arg;

drivers/video/fbdev/core/fb_io_fops.c

72

ssize_t fb_io_write(struct fb_info *info, const char __user *buf, size_t count, loff_t *ppos)

drivers/video/fbdev/core/fb_io_fops.c

8

ssize_t fb_io_read(struct fb_info *info, char __user *buf, size_t count, loff_t *ppos)

drivers/video/fbdev/core/fb_sys_fops.c

18

ssize_t fb_sys_read(struct fb_info *info, char __user *buf, size_t count,

drivers/video/fbdev/core/fb_sys_fops.c

63

ssize_t fb_sys_write(struct fb_info *info, const char __user *buf,

drivers/video/fbdev/core/fbcon.c

3091

int fbcon_set_con2fb_map_ioctl(void __user *argp)

drivers/video/fbdev/core/fbcon.c

3116

int fbcon_get_con2fb_map_ioctl(void __user *argp)

drivers/video/fbdev/core/fbcon.h

261

int fbcon_set_con2fb_map_ioctl(void __user *argp);

drivers/video/fbdev/core/fbcon.h

262

int fbcon_get_con2fb_map_ioctl(void __user *argp);

drivers/video/fbdev/core/fbcon.h

282

static inline int fbcon_set_con2fb_map_ioctl(void __user *argp) { return 0; }

drivers/video/fbdev/core/fbcon.h

283

static inline int fbcon_get_con2fb_map_ioctl(void __user *argp) { return 0; }

drivers/video/fbdev/fsl-diu-fb.c

1275

void __user *buf = (void __user *)arg;

drivers/video/fbdev/imsttfb.c

1270

void __user *argp = (void __user *)arg;

drivers/video/fbdev/imsttfb.c

1284

if (copy_to_user((void __user *)(arg + 4), &reg[1], 4))

drivers/video/fbdev/imsttfb.c

1296

if (copy_to_user((void __user *)(arg + 4), &reg[1], 4))

drivers/video/fbdev/imsttfb.c

1312

if (copy_to_user((void __user *)(arg + 1), &idx[1], 1))

drivers/video/fbdev/kyro/fbdev.c

595

void __user *argp = (void __user *)arg;

drivers/video/fbdev/matrox/matroxfb_base.c

1046

if (put_user(conn, (u_int32_t __user *)arg))

drivers/video/fbdev/matrox/matroxfb_base.c

1071

if (put_user(conn, (u_int32_t __user *)arg))

drivers/video/fbdev/matrox/matroxfb_base.c

1085

if (put_user(conn, (u_int32_t __user *)arg))

drivers/video/fbdev/matrox/matroxfb_base.c

879

void __user *argp = (void __user *)arg;

drivers/video/fbdev/matrox/matroxfb_base.c

905

if (get_user(crt, (u_int32_t __user *)arg))

drivers/video/fbdev/matrox/matroxfb_crtc2.c

441

if (copy_to_user((void __user *)arg, &vblank, sizeof(vblank)))

drivers/video/fbdev/matrox/matroxfb_crtc2.c

449

if (get_user(crt, (u_int32_t __user *)arg))

drivers/video/fbdev/matrox/matroxfb_crtc2.c

468

if (get_user(tmp, (u_int32_t __user *)arg))

drivers/video/fbdev/matrox/matroxfb_crtc2.c

518

if (put_user(conn, (u_int32_t __user *)arg))

drivers/video/fbdev/matrox/matroxfb_crtc2.c

543

if (put_user(tmp, (u_int32_t __user *)arg))

drivers/video/fbdev/mb862xx/mb862xxfbdrv.c

310

void __user *argp = (void __user *)arg;

drivers/video/fbdev/omap/omapfb_main.c

1073

if (get_user(p.mirror, (int __user *)arg))

drivers/video/fbdev/omap/omapfb_main.c

1084

if (get_user(p.update_mode, (int __user *)arg))

drivers/video/fbdev/omap/omapfb_main.c

1092

(enum omapfb_update_mode __user *)arg))

drivers/video/fbdev/omap/omapfb_main.c

1096

if (copy_from_user(&p.update_window, (void __user *)arg,

drivers/video/fbdev/omap/omapfb_main.c

1110

if (copy_from_user(&p.update_window, (void __user *)arg,

drivers/video/fbdev/omap/omapfb_main.c

1117

if (copy_from_user(&p.plane_info, (void __user *)arg,

drivers/video/fbdev/omap/omapfb_main.c

1126

if (copy_to_user((void __user *)arg, &p.plane_info,

drivers/video/fbdev/omap/omapfb_main.c

1131

if (copy_from_user(&p.mem_info, (void __user *)arg,

drivers/video/fbdev/omap/omapfb_main.c

1140

if (copy_to_user((void __user *)arg, &p.mem_info,

drivers/video/fbdev/omap/omapfb_main.c

1145

if (copy_from_user(&p.color_key, (void __user *)arg,

drivers/video/fbdev/omap/omapfb_main.c

1154

if (copy_to_user((void __user *)arg, &p.color_key,

drivers/video/fbdev/omap/omapfb_main.c

1160

if (copy_to_user((void __user *)arg, &p.caps, sizeof(p.caps)))

drivers/video/fbdev/omap/omapfb_main.c

1167

if (get_user(test_num, (int __user *)arg)) {

drivers/video/fbdev/omap/omapfb_main.c

1182

if (get_user(test_num, (int __user *)arg)) {

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

619

(void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

636

if (copy_from_user(&p.uwnd, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

648

if (copy_from_user(&p.plane_info, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

660

if (copy_to_user((void __user *)arg, &p.plane_info,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

667

if (copy_from_user(&p.mem_info, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

679

if (copy_to_user((void __user *)arg, &p.mem_info,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

697

if (copy_to_user((void __user *)arg, &p.caps, sizeof(p.caps)))

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

703

if (copy_from_user(&p.ovl_colormode, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

711

if (copy_to_user((void __user *)arg, &p.ovl_colormode,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

718

if (get_user(p.update_mode, (int __user *)arg))

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

730

(enum omapfb_update_mode __user *)arg))

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

736

if (copy_from_user(&p.color_key, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

748

if (copy_to_user((void __user *)arg, &p.color_key,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

754

if (get_user(p.crt, (__u32 __user *)arg)) {

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

795

if (get_user(p.test_num, (int __user *)arg)) {

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

810

if (get_user(p.test_num, (int __user *)arg)) {

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

826

if (copy_from_user(&p.memory_read, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

847

if (copy_to_user((void __user *)arg, &p.vram_info,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

856

if (copy_from_user(&p.tearsync_info, (void __user *)arg,

drivers/video/fbdev/omap2/omapfb/omapfb-ioctl.c

898

if (copy_to_user((void __user *)arg, &p.display_info,

drivers/video/fbdev/omap2/omapfb/omapfb-main.c

1279

ssize_t omapfb_write(struct fb_info *info, const char __user *buf,

drivers/video/fbdev/ps3fb.c

779

void __user *argp = (void __user *)arg;

drivers/video/fbdev/ps3fb.c

801

if (get_user(crt, (u32 __user *) arg))

drivers/video/fbdev/s3c-fb.c

1025

if (get_user(crtc, (u32 __user *)arg)) {

drivers/video/fbdev/sbuslib.c

108

struct fbtype __user *f = (struct fbtype __user *) arg;

drivers/video/fbdev/sbuslib.c

120

struct fbcmap __user *c = (struct fbcmap __user *) arg;

drivers/video/fbdev/sbuslib.c

124

unsigned char __user *ured;

drivers/video/fbdev/sbuslib.c

125

unsigned char __user *ugreen;

drivers/video/fbdev/sbuslib.c

126

unsigned char __user *ublue;

drivers/video/fbdev/sbuslib.c

161

struct fbcmap __user *c = (struct fbcmap __user *) arg;

drivers/video/fbdev/sbuslib.c

162

unsigned char __user *ured;

drivers/video/fbdev/sbuslib.c

163

unsigned char __user *ugreen;

drivers/video/fbdev/sbuslib.c

164

unsigned char __user *ublue;

drivers/video/fbdev/sbuslib.c

218

unsigned char __user *ured;

drivers/video/fbdev/sbuslib.c

219

unsigned char __user *ugreen;

drivers/video/fbdev/sbuslib.c

220

unsigned char __user *ublue;

drivers/video/fbdev/sbuslib.c

255

unsigned char __user *ured;

drivers/video/fbdev/sbuslib.c

256

unsigned char __user *ugreen;

drivers/video/fbdev/sbuslib.c

257

unsigned char __user *ublue;

drivers/video/fbdev/sis/sis_main.c

1663

#ifndef __user

drivers/video/fbdev/sis/sis_main.c

1666

u32 __user *argp = (u32 __user *)arg;

drivers/video/fbdev/sis/sis_main.c

1673

if(copy_from_user(&sismemreq, (void __user *)arg, sizeof(sismemreq)))

drivers/video/fbdev/sis/sis_main.c

1678

if(copy_to_user((void __user *)arg, &sismemreq, sizeof(sismemreq))) {

drivers/video/fbdev/sis/sis_main.c

1701

if(copy_to_user((void __user *)arg, &sisvbblank, sizeof(sisvbblank)))

drivers/video/fbdev/sis/sis_main.c

1757

if(copy_to_user((void __user *)arg, &ivideo->sisfb_infoblock,

drivers/video/fbdev/sis/sis_main.c

1810

if(copy_from_user(&ivideo->sisfb_command, (void __user *)arg,

drivers/video/fbdev/sis/sis_main.c

1816

if(copy_to_user((void __user *)arg, &ivideo->sisfb_command,

drivers/video/fbdev/sm712fb.c

1026

static ssize_t smtcfb_read(struct fb_info *info, char __user *buf,

drivers/video/fbdev/sm712fb.c

1089

static ssize_t smtcfb_write(struct fb_info *info, const char __user *buf,

drivers/video/fbdev/smscufx.c

941

u8 __user *edid = (u8 __user *)arg;

drivers/video/fbdev/smscufx.c

962

if (copy_from_user(area, (u8 __user *)arg, sizeof(*area)))

drivers/video/fbdev/sstfb.c

755

if (copy_from_user(&val, (void __user *)arg, sizeof(val)))

drivers/video/fbdev/sstfb.c

762

if (copy_to_user((void __user *)arg, &val, sizeof(val)))

drivers/video/fbdev/udlfb.c

847

void __user *edid = (void __user *)arg;

drivers/video/fbdev/udlfb.c

857

if (copy_from_user(&area, (void __user *)arg,

drivers/video/fbdev/via/ioctl.c

60

if (copy_to_user((void __user *)arg, &viainfo, sizeof(viainfo)))

drivers/video/fbdev/via/ioctl.h

11

#ifndef __user

drivers/video/fbdev/via/viafbdev.c

1130

const char __user *buffer, size_t count, loff_t *pos)

drivers/video/fbdev/via/viafbdev.c

1200

const char __user *buffer, size_t count, loff_t *pos)

drivers/video/fbdev/via/viafbdev.c

1262

const char __user *buffer, size_t count, loff_t *pos)

drivers/video/fbdev/via/viafbdev.c

1296

const char __user *buffer, size_t count, loff_t *pos)

drivers/video/fbdev/via/viafbdev.c

1354

const char __user *buffer, size_t count, loff_t *pos)

drivers/video/fbdev/via/viafbdev.c

1460

static ssize_t odev_update(const char __user *buffer, size_t count, u32 *odev)

drivers/video/fbdev/via/viafbdev.c

1501

const char __user *buffer, size_t count, loff_t *pos)

drivers/video/fbdev/via/viafbdev.c

1540

const char __user *buffer, size_t count, loff_t *pos)

drivers/video/fbdev/via/viafbdev.c

395

u32 __user *argp = (u32 __user *) arg;

drivers/virt/acrn/hsm.c

135

vm_param = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

152

if (copy_to_user((void __user *)ioctl_param, vm_param,

drivers/virt/acrn/hsm.c

182

cpu_regs = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

220

if (copy_from_user(&memmap, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

227

if (copy_from_user(&memmap, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

234

mmiodev = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

246

mmiodev = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

258

pcidev = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

270

pcidev = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

282

vdev = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

294

vdev = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

305

irq_info = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

317

irq_info = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

335

msi = memdup_user((void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

383

if (copy_from_user(&notify, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

396

if (copy_from_user(&cstate_cmd, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

400

ret = pmcmd_ioctl(cstate_cmd, (void __user *)ioctl_param);

drivers/virt/acrn/hsm.c

403

if (copy_from_user(&ioeventfd, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

413

if (copy_from_user(&irqfd, (void __user *)ioctl_param,

drivers/virt/acrn/hsm.c

43

static int pmcmd_ioctl(u64 cmd, void __user *uptr)

drivers/virt/coco/sev-guest/sev-guest.c

109

if (copy_to_user((void __user *)arg->resp_data, report_resp, sizeof(*report_resp)))

drivers/virt/coco/sev-guest/sev-guest.c

142

if (copy_from_user(derived_key_req, (void __user *)arg->req_data,

drivers/virt/coco/sev-guest/sev-guest.c

158

if (copy_to_user((void __user *)arg->resp_data, derived_key_resp,

drivers/virt/coco/sev-guest/sev-guest.c

202

certs_address = USER_SOCKPTR((void __user *)report_req->certs_address);

drivers/virt/coco/sev-guest/sev-guest.c

290

void __user *argp = (void __user *)arg;

drivers/virt/coco/sev-guest/sev-guest.c

317

io.req_data = USER_SOCKPTR((void __user *)input.req_data);

drivers/virt/coco/sev-guest/sev-guest.c

318

io.resp_data = USER_SOCKPTR((void __user *)input.resp_data);

drivers/virt/coco/sev-guest/sev-guest.c

82

if (copy_from_user(report_req, (void __user *)arg->req_data, sizeof(*report_req)))

drivers/virt/coco/tdx-guest/tdx-guest.c

206

static long tdx_get_report0(struct tdx_report_req __user *req)

drivers/virt/coco/tdx-guest/tdx-guest.c

369

return tdx_get_report0((struct tdx_report_req __user *)arg);

drivers/virt/fsl_hypervisor.c

100

static long ioctl_start(struct fsl_hv_ioctl_start __user *p)

drivers/virt/fsl_hypervisor.c

122

static long ioctl_stop(struct fsl_hv_ioctl_stop __user *p)

drivers/virt/fsl_hypervisor.c

147

static long ioctl_memcpy(struct fsl_hv_ioctl_memcpy __user *p)

drivers/virt/fsl_hypervisor.c

315

static long ioctl_doorbell(struct fsl_hv_ioctl_doorbell __user *p)

drivers/virt/fsl_hypervisor.c

331

static long ioctl_dtprop(struct fsl_hv_ioctl_prop __user *p, int set)

drivers/virt/fsl_hypervisor.c

334

char __user *upath, *upropname;

drivers/virt/fsl_hypervisor.c

335

void __user *upropval;

drivers/virt/fsl_hypervisor.c

344

upath = (char __user *)(uintptr_t)param.path;

drivers/virt/fsl_hypervisor.c

345

upropname = (char __user *)(uintptr_t)param.propname;

drivers/virt/fsl_hypervisor.c

346

upropval = (void __user *)(uintptr_t)param.propval;

drivers/virt/fsl_hypervisor.c

415

void __user *arg = (void __user *)argaddr;

drivers/virt/fsl_hypervisor.c

55

static long ioctl_restart(struct fsl_hv_ioctl_restart __user *p)

drivers/virt/fsl_hypervisor.c

593

static ssize_t fsl_hv_read(struct file *filp, char __user *buf, size_t len,

drivers/virt/fsl_hypervisor.c

597

uint32_t __user *p = (uint32_t __user *) buf; /* for put_user() */

drivers/virt/fsl_hypervisor.c

76

static long ioctl_status(struct fsl_hv_ioctl_status __user *p)

drivers/virt/nitro_enclaves/ne_misc_dev.c

1151

if (copy_from_user(&vcpu_id, (void __user *)arg, sizeof(vcpu_id)))

drivers/virt/nitro_enclaves/ne_misc_dev.c

1210

if (copy_to_user((void __user *)arg, &vcpu_id, sizeof(vcpu_id)))

drivers/virt/nitro_enclaves/ne_misc_dev.c

1219

if (copy_from_user(&image_load_info, (void __user *)arg, sizeof(image_load_info)))

drivers/virt/nitro_enclaves/ne_misc_dev.c

1246

if (copy_to_user((void __user *)arg, &image_load_info, sizeof(image_load_info)))

drivers/virt/nitro_enclaves/ne_misc_dev.c

1256

if (copy_from_user(&mem_region, (void __user *)arg, sizeof(mem_region)))

drivers/virt/nitro_enclaves/ne_misc_dev.c

1293

if (copy_from_user(&enclave_start_info, (void __user *)arg,

drivers/virt/nitro_enclaves/ne_misc_dev.c

1366

if (copy_to_user((void __user *)arg, &enclave_start_info,

drivers/virt/nitro_enclaves/ne_misc_dev.c

1589

static int ne_create_vm_ioctl(struct ne_pci_dev *ne_pci_dev, u64 __user *slot_uid)

drivers/virt/nitro_enclaves/ne_misc_dev.c

1740

u64 __user *slot_uid = (void __user *)arg;

drivers/virt/nitro_enclaves/ne_misc_dev.c

770

!access_ok((void __user *)(unsigned long)mem_region.userspace_addr,

drivers/virt/vboxguest/vboxguest_utils.c

228

ret = copy_from_user(bounce_buf, (void __user *)buf, len);

drivers/virt/vboxguest/vboxguest_utils.c

572

void __user *p;

drivers/virt/vboxguest/vboxguest_utils.c

599

p = (void __user *)dst_parm->u.pointer.u.linear_addr;

drivers/watchdog/acquirewdt.c

117

static ssize_t acq_write(struct file *file, const char __user *buf,

drivers/watchdog/acquirewdt.c

147

void __user *argp = (void __user *)arg;

drivers/watchdog/acquirewdt.c

148

int __user *p = argp;

drivers/watchdog/advantechwdt.c

109

static ssize_t advwdt_write(struct file *file, const char __user *buf,

drivers/watchdog/advantechwdt.c

134

void __user *argp = (void __user *)arg;

drivers/watchdog/advantechwdt.c

135

int __user *p = argp;

drivers/watchdog/alim1535_wdt.c

137

static ssize_t ali_write(struct file *file, const char __user *data,

drivers/watchdog/alim1535_wdt.c

178

void __user *argp = (void __user *)arg;

drivers/watchdog/alim1535_wdt.c

179

int __user *p = argp;

drivers/watchdog/alim7101_wdt.c

184

static ssize_t fop_write(struct file *file, const char __user *buf,

drivers/watchdog/alim7101_wdt.c

236

void __user *argp = (void __user *)arg;

drivers/watchdog/alim7101_wdt.c

237

int __user *p = argp;

drivers/watchdog/at91rm9200_wdt.c

160

void __user *argp = (void __user *)arg;

drivers/watchdog/at91rm9200_wdt.c

161

int __user *p = argp;

drivers/watchdog/ath79_wdt.c

186

void __user *argp = (void __user *)arg;

drivers/watchdog/ath79_wdt.c

187

int __user *p = argp;

drivers/watchdog/cpwd.c

413

void __user *argp = (void __user *)arg;

drivers/watchdog/cpwd.c

428

if (put_user(0, (int __user *)argp))

drivers/watchdog/cpwd.c

481

static ssize_t cpwd_write(struct file *file, const char __user *buf,

drivers/watchdog/cpwd.c

496

static ssize_t cpwd_read(struct file *file, char __user *buffer,

drivers/watchdog/eurotechwdt.c

198

static ssize_t eurwdt_write(struct file *file, const char __user *buf,

drivers/watchdog/eurotechwdt.c

235

void __user *argp = (void __user *)arg;

drivers/watchdog/eurotechwdt.c

236

int __user *p = argp;

drivers/watchdog/gef_wdt.c

135

static ssize_t gef_wdt_write(struct file *file, const char __user *data,

drivers/watchdog/gef_wdt.c

163

void __user *argp = (void __user *)arg;

drivers/watchdog/gef_wdt.c

179

if (put_user(wdt_status, (int __user *)argp))

drivers/watchdog/gef_wdt.c

185

if (get_user(options, (int __user *)argp))

drivers/watchdog/gef_wdt.c

201

if (get_user(timeout, (int __user *)argp))

drivers/watchdog/gef_wdt.c

207

if (put_user(gef_wdt_timeout, (int __user *)argp))

drivers/watchdog/geodewdt.c

111

static ssize_t geodewdt_write(struct file *file, const char __user *data,

drivers/watchdog/geodewdt.c

138

void __user *argp = (void __user *)arg;

drivers/watchdog/geodewdt.c

139

int __user *p = argp;

drivers/watchdog/ib700wdt.c

144

static ssize_t ibwdt_write(struct file *file, const char __user *buf,

drivers/watchdog/ib700wdt.c

170

void __user *argp = (void __user *)arg;

drivers/watchdog/ib700wdt.c

171

int __user *p = argp;

drivers/watchdog/ibmasr.c

246

static ssize_t asr_write(struct file *file, const char __user *buf,

drivers/watchdog/ibmasr.c

276

void __user *argp = (void __user *)arg;

drivers/watchdog/ibmasr.c

277

int __user *p = argp;

drivers/watchdog/it8712f_wdt.c

231

static ssize_t it8712f_wdt_write(struct file *file, const char __user *data,

drivers/watchdog/it8712f_wdt.c

256

void __user *argp = (void __user *)arg;

drivers/watchdog/it8712f_wdt.c

257

int __user *p = argp;

drivers/watchdog/kempld_wdt.c

340

void __user *argp = (void __user *)arg;

drivers/watchdog/kempld_wdt.c

342

int __user *p = argp;

drivers/watchdog/kempld_wdt.c

355

ret = put_user(wdt_data->pretimeout, (int __user *)arg);

drivers/watchdog/mei_wdt.c

494

static ssize_t mei_dbgfs_read_activation(struct file *file, char __user *ubuf,

drivers/watchdog/mei_wdt.c

516

static ssize_t mei_dbgfs_read_state(struct file *file, char __user *ubuf,

drivers/watchdog/mixcomwd.c

169

static ssize_t mixcomwd_write(struct file *file, const char __user *data,

drivers/watchdog/mixcomwd.c

195

void __user *argp = (void __user *)arg;

drivers/watchdog/mixcomwd.c

196

int __user *p = argp;

drivers/watchdog/mtx-1_wdt.c

132

void __user *argp = (void __user *)arg;

drivers/watchdog/mtx-1_wdt.c

133

int __user *p = (int __user *)argp;

drivers/watchdog/nv_tco.c

177

static ssize_t nv_tco_write(struct file *file, const char __user *data,

drivers/watchdog/nv_tco.c

215

void __user *argp = (void __user *)arg;

drivers/watchdog/nv_tco.c

216

int __user *p = argp;

drivers/watchdog/pc87413_wdt.c

339

static ssize_t pc87413_write(struct file *file, const char __user *data,

drivers/watchdog/pc87413_wdt.c

384

struct watchdog_info __user *ident;

drivers/watchdog/pc87413_wdt.c

385

int __user *i;

drivers/watchdog/pc87413_wdt.c

396

uarg.i = (int __user *)arg;

drivers/watchdog/pcwd.c

592

int __user *argp = (int __user *)arg;

drivers/watchdog/pcwd.c

666

static ssize_t pcwd_write(struct file *file, const char __user *buf, size_t len,

drivers/watchdog/pcwd.c

719

static ssize_t pcwd_temp_read(struct file *file, char __user *buf, size_t count,

drivers/watchdog/pcwd_pci.c

434

static ssize_t pcipcwd_write(struct file *file, const char __user *data,

drivers/watchdog/pcwd_pci.c

466

void __user *argp = (void __user *)arg;

drivers/watchdog/pcwd_pci.c

467

int __user *p = argp;

drivers/watchdog/pcwd_pci.c

600

static ssize_t pcipcwd_temp_read(struct file *file, char __user *data,

drivers/watchdog/pcwd_usb.c

361

static ssize_t usb_pcwd_write(struct file *file, const char __user *data,

drivers/watchdog/pcwd_usb.c

393

void __user *argp = (void __user *)arg;

drivers/watchdog/pcwd_usb.c

394

int __user *p = argp;

drivers/watchdog/pcwd_usb.c

509

static ssize_t usb_pcwd_temperature_read(struct file *file, char __user *data,

drivers/watchdog/pika_wdt.c

142

static ssize_t pikawdt_write(struct file *file, const char __user *data,

drivers/watchdog/pika_wdt.c

176

void __user *argp = (void __user *)arg;

drivers/watchdog/pika_wdt.c

177

int __user *p = argp;

drivers/watchdog/rc32434_wdt.c

191

void __user *argp = (void __user *)arg;

drivers/watchdog/rdc321x_wdt.c

143

void __user *argp = (void __user *)arg;

drivers/watchdog/rdc321x_wdt.c

187

static ssize_t rdc321x_wdt_write(struct file *file, const char __user *buf,

drivers/watchdog/riowd.c

108

if (put_user(0, (int __user *)argp))

drivers/watchdog/riowd.c

130

if (get_user(new_margin, (int __user *)argp))

drivers/watchdog/riowd.c

139

return put_user(riowd_timeout * 60, (int __user *)argp);

drivers/watchdog/riowd.c

148

static ssize_t riowd_write(struct file *file, const char __user *buf,

drivers/watchdog/riowd.c

95

void __user *argp = (void __user *)arg;

drivers/watchdog/sa1100_wdt.c

101

static ssize_t sa1100dog_write(struct file *file, const char __user *data,

drivers/watchdog/sa1100_wdt.c

122

void __user *argp = (void __user *)arg;

drivers/watchdog/sa1100_wdt.c

123

int __user *p = argp;

drivers/watchdog/sb_wdog.c

144

static ssize_t sbwdog_write(struct file *file, const char __user *data,

drivers/watchdog/sb_wdog.c

174

void __user *argp = (void __user *)arg;

drivers/watchdog/sb_wdog.c

175

int __user *p = argp;

drivers/watchdog/sbc60xxwdt.c

164

static ssize_t fop_write(struct file *file, const char __user *buf,

drivers/watchdog/sbc60xxwdt.c

223

void __user *argp = (void __user *)arg;

drivers/watchdog/sbc60xxwdt.c

224

int __user *p = argp;

drivers/watchdog/sbc7240_wdt.c

160

return copy_to_user((void __user *)arg, &ident, sizeof(ident))

drivers/watchdog/sbc7240_wdt.c

164

return put_user(0, (int __user *)arg);

drivers/watchdog/sbc7240_wdt.c

170

if (get_user(options, (int __user *)arg))

drivers/watchdog/sbc7240_wdt.c

192

if (get_user(new_timeout, (int __user *)arg))

drivers/watchdog/sbc7240_wdt.c

200

return put_user(timeout, (int __user *)arg);

drivers/watchdog/sbc7240_wdt.c

94

static ssize_t fop_write(struct file *file, const char __user *buf,

drivers/watchdog/sbc8360.c

237

static ssize_t sbc8360_write(struct file *file, const char __user *buf,

drivers/watchdog/sbc_epx_c3.c

105

int __user *argp = (void __user *)arg;

drivers/watchdog/sbc_epx_c3.c

92

static ssize_t epx_c3_write(struct file *file, const char __user *data,

drivers/watchdog/sbc_fitpc2_wdt.c

126

ret = copy_to_user((struct watchdog_info __user *)arg, &ident,

drivers/watchdog/sbc_fitpc2_wdt.c

131

ret = put_user(0, (int __user *)arg);

drivers/watchdog/sbc_fitpc2_wdt.c

135

ret = put_user(0, (int __user *)arg);

drivers/watchdog/sbc_fitpc2_wdt.c

144

ret = get_user(time, (int __user *)arg);

drivers/watchdog/sbc_fitpc2_wdt.c

158

ret = put_user(margin, (int __user *)arg);

drivers/watchdog/sbc_fitpc2_wdt.c

79

static ssize_t fitpc2_wdt_write(struct file *file, const char __user *data,

drivers/watchdog/sc1200wdt.c

184

void __user *argp = (void __user *)arg;

drivers/watchdog/sc1200wdt.c

185

int __user *p = argp;

drivers/watchdog/sc1200wdt.c

264

static ssize_t sc1200wdt_write(struct file *file, const char __user *data,

drivers/watchdog/sch311x_wdt.c

221

static ssize_t sch311x_wdt_write(struct file *file, const char __user *buf,

drivers/watchdog/sch311x_wdt.c

248

void __user *argp = (void __user *)arg;

drivers/watchdog/sch311x_wdt.c

249

int __user *p = argp;

drivers/watchdog/scx200_wdt.c

131

static ssize_t scx200_wdt_write(struct file *file, const char __user *data,

drivers/watchdog/scx200_wdt.c

158

void __user *argp = (void __user *)arg;

drivers/watchdog/scx200_wdt.c

159

int __user *p = argp;

drivers/watchdog/smsc37b787_wdt.c

389

static ssize_t wb_smsc_wdt_write(struct file *file, const char __user *data,

drivers/watchdog/smsc37b787_wdt.c

425

struct watchdog_info __user *ident;

drivers/watchdog/smsc37b787_wdt.c

426

int __user *i;

drivers/watchdog/smsc37b787_wdt.c

437

uarg.i = (int __user *)arg;

drivers/watchdog/w83877f_wdt.c

186

static ssize_t fop_write(struct file *file, const char __user *buf,

drivers/watchdog/w83877f_wdt.c

241

void __user *argp = (void __user *)arg;

drivers/watchdog/w83877f_wdt.c

242

int __user *p = argp;

drivers/watchdog/w83977f_wdt.c

327

static ssize_t wdt_write(struct file *file, const char __user *buf,

drivers/watchdog/w83977f_wdt.c

379

struct watchdog_info __user *ident;

drivers/watchdog/w83977f_wdt.c

380

int __user *i;

drivers/watchdog/w83977f_wdt.c

383

uarg.i = (int __user *)arg;

drivers/watchdog/wafer5823wdt.c

126

void __user *argp = (void __user *)arg;

drivers/watchdog/wafer5823wdt.c

127

int __user *p = argp;

drivers/watchdog/wafer5823wdt.c

94

static ssize_t wafwdt_write(struct file *file, const char __user *buf,

drivers/watchdog/watchdog_dev.c

694

static ssize_t watchdog_write(struct file *file, const char __user *data,

drivers/watchdog/watchdog_dev.c

751

void __user *argp = (void __user *)arg;

drivers/watchdog/watchdog_dev.c

753

int __user *p = argp;

drivers/watchdog/wdrtas.c

234

static ssize_t wdrtas_write(struct file *file, const char __user *buf,

drivers/watchdog/wdrtas.c

275

int __user *argp = (void __user *)arg;

drivers/watchdog/wdrtas.c

406

static ssize_t wdrtas_temp_read(struct file *file, char __user *buf,

drivers/watchdog/wdt.c

317

static ssize_t wdt_write(struct file *file, const char __user *buf,

drivers/watchdog/wdt.c

353

void __user *argp = (void __user *)arg;

drivers/watchdog/wdt.c

354

int __user *p = argp;

drivers/watchdog/wdt.c

459

static ssize_t wdt_temp_read(struct file *file, char __user *buf,

drivers/watchdog/wdt285.c

117

static ssize_t watchdog_write(struct file *file, const char __user *data,

drivers/watchdog/wdt285.c

137

int __user *int_arg = (int __user *)arg;

drivers/watchdog/wdt285.c

143

if (copy_to_user((void __user *)arg, &ident, sizeof(ident)))

drivers/watchdog/wdt977.c

304

static ssize_t wdt977_write(struct file *file, const char __user *buf,

drivers/watchdog/wdt977.c

355

struct watchdog_info __user *ident;

drivers/watchdog/wdt977.c

356

int __user *i;

drivers/watchdog/wdt977.c

359

uarg.i = (int __user *)arg;

drivers/watchdog/wdt_pci.c

353

static ssize_t wdtpci_write(struct file *file, const char __user *buf,

drivers/watchdog/wdt_pci.c

390

void __user *argp = (void __user *)arg;

drivers/watchdog/wdt_pci.c

391

int __user *p = argp;

drivers/watchdog/wdt_pci.c

499

static ssize_t wdtpci_temp_read(struct file *file, char __user *buf,

drivers/xen/evtchn.c

200

static ssize_t evtchn_read(struct file *file, char __user *buf,

drivers/xen/evtchn.c

272

static ssize_t evtchn_write(struct file *file, const char __user *buf,

drivers/xen/evtchn.c

440

void __user *uarg = (void __user *) arg;

drivers/xen/gntalloc.c

270

struct ioctl_gntalloc_alloc_gref __user *arg)

drivers/xen/gntalloc.c

342

void __user *arg)

drivers/xen/gntalloc.c

381

void __user *arg)

drivers/xen/gntalloc.c

442

return gntalloc_ioctl_alloc(priv, (void __user *)arg);

drivers/xen/gntalloc.c

445

return gntalloc_ioctl_dealloc(priv, (void __user *)arg);

drivers/xen/gntalloc.c

448

return gntalloc_ioctl_unmap_notify(priv, (void __user *)arg);

drivers/xen/gntdev-dmabuf.c

722

struct ioctl_gntdev_dmabuf_exp_from_refs __user *u)

drivers/xen/gntdev-dmabuf.c

762

struct ioctl_gntdev_dmabuf_exp_wait_released __user *u)

drivers/xen/gntdev-dmabuf.c

774

struct ioctl_gntdev_dmabuf_imp_to_refs __user *u)

drivers/xen/gntdev-dmabuf.c

805

struct ioctl_gntdev_dmabuf_imp_release __user *u)

drivers/xen/gntdev-dmabuf.h

22

struct ioctl_gntdev_dmabuf_exp_from_refs __user *u);

drivers/xen/gntdev-dmabuf.h

25

struct ioctl_gntdev_dmabuf_exp_wait_released __user *u);

drivers/xen/gntdev-dmabuf.h

28

struct ioctl_gntdev_dmabuf_imp_to_refs __user *u);

drivers/xen/gntdev-dmabuf.h

31

struct ioctl_gntdev_dmabuf_imp_release __user *u);

drivers/xen/gntdev.c

1018

void __user *ptr = (void __user *)arg;

drivers/xen/gntdev.c

64

s16 __user *status[GNTDEV_COPY_BATCH];

drivers/xen/gntdev.c

647

struct ioctl_gntdev_map_grant_ref __user *u)

drivers/xen/gntdev.c

686

struct ioctl_gntdev_unmap_grant_ref __user *u)

drivers/xen/gntdev.c

709

struct ioctl_gntdev_get_offset_for_vaddr __user *u)

drivers/xen/gntdev.c

741

static long gntdev_ioctl_notify(struct gntdev_priv *priv, void __user *u)

drivers/xen/gntdev.c

807

static int gntdev_get_page(struct gntdev_copy_batch *batch, void __user *virt,

drivers/xen/gntdev.c

868

s16 __user *status)

drivers/xen/gntdev.c

895

void __user *virt;

drivers/xen/gntdev.c

961

static long gntdev_ioctl_grant_copy(struct gntdev_priv *priv, void __user *u)

drivers/xen/mcelog.c

106

static ssize_t xen_mce_chrdev_read(struct file *filp, char __user *ubuf,

drivers/xen/mcelog.c

109

char __user *buf = ubuf;

drivers/xen/mcelog.c

155

int __user *p = (int __user *)arg;

drivers/xen/privcmd.c

1085

static long privcmd_ioctl_irqfd(struct file *file, void __user *udata)

drivers/xen/privcmd.c

136

const void __user *data)

drivers/xen/privcmd.c

1460

static long privcmd_ioctl_ioeventfd(struct file *file, void __user *udata)

drivers/xen/privcmd.c

1501

static inline long privcmd_ioctl_irqfd(struct file *file, void __user *udata)

drivers/xen/privcmd.c

1515

static inline long privcmd_ioctl_ioeventfd(struct file *file, void __user *udata)

drivers/xen/privcmd.c

1529

void __user *udata = (void __user *) data;

drivers/xen/privcmd.c

278

static long privcmd_ioctl_mmap(struct file *file, void __user *udata)

drivers/xen/privcmd.c

354

xen_pfn_t __user *user_gfn;

drivers/xen/privcmd.c

356

int __user *user_err;

drivers/xen/privcmd.c

471

struct file *file, void __user *udata, int version)

drivers/xen/privcmd.c

646

static long privcmd_ioctl_dm_op(struct file *file, void __user *udata)

drivers/xen/privcmd.c

732

static long privcmd_ioctl_restrict(struct file *file, void __user *udata)

drivers/xen/privcmd.c

750

struct privcmd_mmap_resource __user *udata)

drivers/xen/privcmd.c

863

static long privcmd_ioctl_pcidev_get_gsi(struct file *file, void __user *udata)

drivers/xen/privcmd.c

95

static long privcmd_ioctl_hypercall(struct file *file, void __user *udata)

drivers/xen/xenbus/xenbus_dev_frontend.c

126

char __user *ubuf,

drivers/xen/xenbus/xenbus_dev_frontend.c

551

const char __user *ubuf,

drivers/xen/xenfs/super.c

31

static ssize_t capabilities_read(struct file *file, char __user *buf,

drivers/xen/xenfs/xenstored.c

12

static ssize_t xsd_read(struct file *file, char __user *buf,

drivers/zorro/proc.c

31

proc_bus_zorro_read(struct file *file, char __user *buf, size_t nbytes, loff_t *ppos)

fs/afs/internal.h

1616

int afs_readlink(struct dentry *dentry, char __user *buffer, int buflen);

fs/afs/symlink.c

211

int afs_readlink(struct dentry *dentry, char __user *buffer, int buflen)

fs/aio.c

1130

struct aio_ring __user *ring = (void __user *)ctx_id;

fs/aio.c

1203

(void __user *)(unsigned long)iocb->ki_res.obj,

fs/aio.c

1272

struct io_event __user *event, long nr)

fs/aio.c

1349

struct io_event __user *event, long *i)

fs/aio.c

1366

struct io_event __user *event,

fs/aio.c

1435

SYSCALL_DEFINE2(io_setup, unsigned, nr_events, aio_context_t __user *, ctxp)

fs/aio.c

1466

COMPAT_SYSCALL_DEFINE2(io_setup, unsigned, nr_events, u32 __user *, ctx32p)

fs/aio.c

1602

void __user *buf = (void __user *)(uintptr_t)iocb->aio_buf;

fs/aio.c

2023

struct iocb __user *user_iocb, struct aio_kiocb *req,

fs/aio.c

2076

static int io_submit_one(struct kioctx *ctx, struct iocb __user *user_iocb,

fs/aio.c

2136

struct iocb __user * __user *, iocbpp)

fs/aio.c

2158

struct iocb __user *user_iocb;

fs/aio.c

2178

int, nr, compat_uptr_t __user *, iocbpp)

fs/aio.c

2229

SYSCALL_DEFINE3(io_cancel, aio_context_t, ctx_id, struct iocb __user *, iocb,

fs/aio.c

2230

struct io_event __user *, result)

fs/aio.c

2274

struct io_event __user *events,

fs/aio.c

2307

struct io_event __user *, events,

fs/aio.c

2308

struct __kernel_timespec __user *, timeout)

fs/aio.c

2325

const sigset_t __user *sigmask;

fs/aio.c

2333

struct io_event __user *, events,

fs/aio.c

2334

struct __kernel_timespec __user *, timeout,

fs/aio.c

2335

const struct __aio_sigset __user *, usig)

fs/aio.c

2368

struct io_event __user *, events,

fs/aio.c

2369

struct old_timespec32 __user *, timeout,

fs/aio.c

2370

const struct __aio_sigset __user *, usig)

fs/aio.c

2405

struct io_event __user *, events,

fs/aio.c

2406

struct old_timespec32 __user *, timeout)

fs/aio.c

2435

struct io_event __user *, events,

fs/aio.c

2436

struct old_timespec32 __user *, timeout,

fs/aio.c

2437

const struct __compat_aio_sigset __user *, usig)

fs/aio.c

2470

struct io_event __user *, events,

fs/aio.c

2471

struct __kernel_timespec __user *, timeout,

fs/aio.c

2472

const struct __compat_aio_sigset __user *, usig)

fs/autofs/autofs_i.h

173

struct autofs_packet_expire __user *);

fs/autofs/autofs_i.h

177

struct autofs_sb_info *, int __user *);

fs/autofs/dev-ioctl.c

663

struct autofs_dev_ioctl __user *user)

fs/autofs/dev-ioctl.c

762

err = _autofs_dev_ioctl(command, (struct autofs_dev_ioctl __user *) u);

fs/autofs/dev-ioctl.c

82

copy_dev_ioctl(struct autofs_dev_ioctl __user *in)

fs/autofs/expire.c

539

struct autofs_packet_expire __user *pkt_p)

fs/autofs/expire.c

612

struct autofs_sb_info *sbi, int __user *arg)

fs/autofs/root.c

763

compat_ulong_t __user *p)

fs/autofs/root.c

788

unsigned long __user *p)

fs/autofs/root.c

813

int __user *p)

fs/autofs/root.c

820

int __user *p)

fs/autofs/root.c

828

static inline int autofs_ask_umount(struct vfsmount *mnt, int __user *p)

fs/autofs/root.c

861

void __user *p = (void __user *)arg;

fs/bad_inode.c

86

static int bad_inode_readlink(struct dentry *dentry, char __user *buffer,

fs/binfmt_elf.c

134

if (clear_user((void __user *)address, nbyte))

fs/binfmt_elf.c

142

#define STACK_ADD(sp, items) ((elf_addr_t __user *)(sp) + (items))

fs/binfmt_elf.c

146

elf_addr_t __user *old_sp = (elf_addr_t __user *)sp; sp += len; \

fs/binfmt_elf.c

149

#define STACK_ADD(sp, items) ((elf_addr_t __user *)(sp) - (items))

fs/binfmt_elf.c

1534

(const char __user *)mm->arg_start, len))

fs/binfmt_elf.c

173

elf_addr_t __user *sp;

fs/binfmt_elf.c

174

elf_addr_t __user *u_platform;

fs/binfmt_elf.c

175

elf_addr_t __user *u_base_platform;

fs/binfmt_elf.c

176

elf_addr_t __user *u_rand_bytes;

fs/binfmt_elf.c

205

u_platform = (elf_addr_t __user *)STACK_ALLOC(p, len);

fs/binfmt_elf.c

218

u_base_platform = (elf_addr_t __user *)STACK_ALLOC(p, len);

fs/binfmt_elf.c

227

u_rand_bytes = (elf_addr_t __user *)

fs/binfmt_elf.c

308

sp = (elf_addr_t __user *)bprm->p - items - ei_index;

fs/binfmt_elf.c

311

sp = (elf_addr_t __user *)bprm->p;

fs/binfmt_elf.c

336

len = strnlen_user((void __user *)p, MAX_ARG_STRLEN);

fs/binfmt_elf.c

351

len = strnlen_user((void __user *)p, MAX_ARG_STRLEN);

fs/binfmt_elf_fdpic.c

1122

if (clear_user((void __user *) maddr, disp))

fs/binfmt_elf_fdpic.c

1157

if (clear_user((void __user *) maddr + phdr->p_filesz,

fs/binfmt_elf_fdpic.c

1352

(const char __user *) mm->arg_start, len))

fs/binfmt_elf_fdpic.c

507

elf_caddr_t __user *argv, *envp;

fs/binfmt_elf_fdpic.c

510

char __user *u_platform, *u_base_platform, *p;

fs/binfmt_elf_fdpic.c

544

u_platform = (char __user *) sp;

fs/binfmt_elf_fdpic.c

559

u_base_platform = (char __user *) sp;

fs/binfmt_elf_fdpic.c

572

if (copy_to_user((void __user *) sp, exec_params->loadmap, len) != 0)

fs/binfmt_elf_fdpic.c

584

if (copy_to_user((void __user *) sp, interp_params->loadmap,

fs/binfmt_elf_fdpic.c

682

if (copy_to_user((void __user *)csp, mm->saved_auxv,

fs/binfmt_elf_fdpic.c

688

envp = (elf_caddr_t __user *) csp;

fs/binfmt_elf_fdpic.c

690

argv = (elf_caddr_t __user *) csp;

fs/binfmt_elf_fdpic.c

694

if (put_user(bprm->argc, (unsigned long __user *) csp))

fs/binfmt_elf_fdpic.c

707

p = (char __user *) current->mm->arg_start;

fs/binfmt_elf_fdpic.c

853

Elf_Dyn __user *dyn;

fs/binfmt_elf_fdpic.c

868

dyn = (Elf_Dyn __user *)params->dynamic_addr;

fs/binfmt_flat.c

110

char __user *p;

fs/binfmt_flat.c

111

unsigned long __user *sp;

fs/binfmt_flat.c

114

p = (char __user *)arg_start;

fs/binfmt_flat.c

115

sp = (unsigned long __user *)current->mm->start_stack;

fs/binfmt_flat.c

124

sp = (unsigned long __user *)current->mm->start_stack;

fs/binfmt_flat.c

345

unsigned long __user *ptr;

fs/binfmt_flat.c

350

ptr = (unsigned long __user *)(current->mm->start_code + r.reloc.offset);

fs/binfmt_flat.c

352

ptr = (unsigned long __user *)(current->mm->start_data + r.reloc.offset);

fs/binfmt_flat.c

382

static inline u32 __user *skip_got_header(u32 __user *rp)

fs/binfmt_flat.c

413

__be32 __user *reloc;

fs/binfmt_flat.c

414

u32 __user *rp;

fs/binfmt_flat.c

586

reloc = (__be32 __user *)

fs/binfmt_flat.c

612

reloc = (__be32 __user *)

fs/binfmt_flat.c

643

(copy_to_user((void __user *)textpos + sizeof(struct flat_hdr),

fs/binfmt_flat.c

645

copy_to_user((void __user *)datapos,

fs/binfmt_flat.c

665

copy_to_user((void __user *)datapos,

fs/binfmt_flat.c

743

rp = skip_got_header((u32 __user *) datapos);

fs/binfmt_flat.c

787

rp = (u32 __user *)calc_reloc(addr, libinfo);

fs/binfmt_flat.c

788

if (rp == (u32 __user *)RELOC_FAILED) {

fs/binfmt_flat.c

836

if (clear_user((void __user *)(datapos + data_len), bss_len +

fs/binfmt_flat.c

891

unsigned long __user *p = (unsigned long __user *)

fs/binfmt_misc.c

349

static Node *create_entry(const char __user *buffer, size_t count)

fs/binfmt_misc.c

554

static int parse_command(const char __user *buffer, size_t count)

fs/binfmt_misc.c

700

bm_entry_read(struct file *file, char __user *buf, size_t nbytes, loff_t *ppos)

fs/binfmt_misc.c

718

static ssize_t bm_entry_write(struct file *file, const char __user *buffer,

fs/binfmt_misc.c

798

static ssize_t bm_register_write(struct file *file, const char __user *buffer,

fs/binfmt_misc.c

850

bm_status_read(struct file *file, char __user *buf, size_t nbytes, loff_t *ppos)

fs/binfmt_misc.c

860

static ssize_t bm_status_write(struct file *file, const char __user *buffer,

fs/btrfs/extent_io.c

4051

void __user *dstv,

fs/btrfs/extent_io.c

4057

char __user *dst = (char __user *)dstv;

fs/btrfs/extent_io.h

341

void __user *dst, unsigned long start,

fs/btrfs/ioctl.c

1208

void __user *arg, bool subvol)

fs/btrfs/ioctl.c

1229

void __user *arg, bool subvol)

fs/btrfs/ioctl.c

1273

void __user *arg)

fs/btrfs/ioctl.c

1295

void __user *arg)

fs/btrfs/ioctl.c

1410

char __user *ubuf,

fs/btrfs/ioctl.c

1478

char __user *up = ubuf + *sk_offset;

fs/btrfs/ioctl.c

1534

char __user *ubuf)

fs/btrfs/ioctl.c

1597

void __user *argp)

fs/btrfs/ioctl.c

1599

struct btrfs_ioctl_search_args __user *uargs = argp;

fs/btrfs/ioctl.c

1627

void __user *argp)

fs/btrfs/ioctl.c

1629

struct btrfs_ioctl_search_args_v2 __user *uarg = argp;

fs/btrfs/ioctl.c

1649

(char __user *)(&uarg->buf[0]));

fs/btrfs/ioctl.c

1878

void __user *argp)

fs/btrfs/ioctl.c

1927

static int btrfs_ioctl_ino_lookup_user(struct file *file, void __user *argp)

fs/btrfs/ioctl.c

2062

static int btrfs_ioctl_get_subvol_info_32(struct inode *inode, void __user *argp)

fs/btrfs/ioctl.c

2109

static int btrfs_ioctl_get_subvol_info(struct inode *inode, void __user *argp)

fs/btrfs/ioctl.c

2130

void __user *argp)

fs/btrfs/ioctl.c

2219

void __user *arg,

fs/btrfs/ioctl.c

2432

static int btrfs_ioctl_defrag(struct file *file, void __user *argp)

fs/btrfs/ioctl.c

2514

static long btrfs_ioctl_add_dev(struct btrfs_fs_info *fs_info, void __user *arg)

fs/btrfs/ioctl.c

2571

static long btrfs_ioctl_rm_dev_v2(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

2638

static long btrfs_ioctl_rm_dev(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

2689

void __user *arg)

fs/btrfs/ioctl.c

2741

void __user *arg)

fs/btrfs/ioctl.c

2781

static long btrfs_ioctl_default_subvol(struct file *file, void __user *argp)

fs/btrfs/ioctl.c

2879

void __user *arg)

fs/btrfs/ioctl.c

2885

struct btrfs_ioctl_space_info __user *user_dest;

fs/btrfs/ioctl.c

2900

(struct btrfs_ioctl_space_args __user *)arg,

fs/btrfs/ioctl.c

3001

user_dest = (struct btrfs_ioctl_space_info __user *)

fs/btrfs/ioctl.c

3016

void __user *argp)

fs/btrfs/ioctl.c

3047

void __user *argp)

fs/btrfs/ioctl.c

3059

static long btrfs_ioctl_scrub(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

3120

void __user *arg)

fs/btrfs/ioctl.c

3141

void __user *arg)

fs/btrfs/ioctl.c

3162

void __user *arg)

fs/btrfs/ioctl.c

3209

static long btrfs_ioctl_ino_to_path(struct btrfs_root *root, void __user *arg)

fs/btrfs/ioctl.c

3255

ret = copy_to_user((void __user *)(unsigned long)ipa->fspath,

fs/btrfs/ioctl.c

3269

void __user *arg, int version)

fs/btrfs/ioctl.c

3310

ret = copy_to_user((void __user *)(unsigned long)loi->inodes, inodes,

fs/btrfs/ioctl.c

3407

static long btrfs_ioctl_balance(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

3515

void __user *arg)

fs/btrfs/ioctl.c

3544

static long btrfs_ioctl_quota_ctl(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

3612

static long btrfs_ioctl_qgroup_assign(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

3682

static long btrfs_ioctl_qgroup_create(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

3742

static long btrfs_ioctl_qgroup_limit(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

3792

static long btrfs_ioctl_quota_rescan(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

3828

void __user *arg)

fs/btrfs/ioctl.c

3964

void __user *arg)

fs/btrfs/ioctl.c

4009

void __user *arg)

fs/btrfs/ioctl.c

4030

void __user *arg)

fs/btrfs/ioctl.c

4053

static int btrfs_ioctl_set_fslabel(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

4101

int btrfs_ioctl_get_supported_features(void __user *arg)

fs/btrfs/ioctl.c

4116

void __user *arg)

fs/btrfs/ioctl.c

4193

static int btrfs_ioctl_set_features(struct file *file, void __user *arg)

fs/btrfs/ioctl.c

4264

static int _btrfs_ioctl_send(struct btrfs_root *root, void __user *argp, bool compat)

fs/btrfs/ioctl.c

4298

static int btrfs_ioctl_encoded_read(struct file *file, void __user *argp,

fs/btrfs/ioctl.c

435

static int btrfs_ioctl_getversion(const struct inode *inode, int __user *arg)

fs/btrfs/ioctl.c

441

void __user *arg)

fs/btrfs/ioctl.c

4411

static int btrfs_ioctl_encoded_write(struct file *file, void __user *argp, bool compat)

fs/btrfs/ioctl.c

4702

void __user *sqe_addr;

fs/btrfs/ioctl.c

4843

void __user *sqe_addr;

fs/btrfs/ioctl.c

4986

static int btrfs_ioctl_subvol_sync(struct btrfs_fs_info *fs_info, void __user *argp)

fs/btrfs/ioctl.c

5121

if (get_user(flags, (u32 __user *)arg))

fs/btrfs/ioctl.c

5154

u64 len, u8 __user *buf)

fs/btrfs/ioctl.c

5202

static int btrfs_ioctl_get_csums(struct file *file, void __user *argp)

fs/btrfs/ioctl.c

5212

u8 __user *ubuf;

fs/btrfs/ioctl.c

5243

ubuf = (u8 __user *)(argp + offsetof(struct btrfs_ioctl_get_csums_args, buf));

fs/btrfs/ioctl.c

5493

void __user *argp = (void __user *)arg;

fs/btrfs/ioctl.c

5629

return fsverity_ioctl_enable(file, (const void __user *)argp);

fs/btrfs/ioctl.c

986

void __user *arg)

fs/btrfs/ioctl.h

22

int btrfs_ioctl_get_supported_features(void __user *arg);

fs/btrfs/super.c

2268

vol = memdup_user((void __user *)arg, sizeof(*vol));

fs/btrfs/super.c

2311

ret = btrfs_ioctl_get_supported_features((void __user*)arg);

fs/cachefiles/daemon.c

212

char __user *_buffer, size_t buflen)

fs/cachefiles/daemon.c

259

static ssize_t cachefiles_daemon_read(struct file *file, char __user *_buffer,

fs/cachefiles/daemon.c

27

static ssize_t cachefiles_daemon_read(struct file *, char __user *, size_t,

fs/cachefiles/daemon.c

279

const char __user *_data,

fs/cachefiles/daemon.c

29

static ssize_t cachefiles_daemon_write(struct file *, const char __user *,

fs/cachefiles/internal.h

306

char __user *_buffer, size_t buflen);

fs/cachefiles/internal.h

350

char __user *_buffer, size_t buflen)

fs/cachefiles/ondemand.c

414

char __user *_buffer, size_t buflen)

fs/ceph/debugfs.c

455

static ssize_t reset_trigger_write(struct file *file, const char __user *buf,

fs/ceph/dir.c

2154

static ssize_t ceph_read_dir(struct file *file, char __user *buf, size_t size,

fs/ceph/ioctl.c

140

static long ceph_ioctl_set_layout_policy (struct file *file, void __user *arg)

fs/ceph/ioctl.c

18

static long ceph_ioctl_get_layout(struct file *file, void __user *arg)

fs/ceph/ioctl.c

186

static long ceph_ioctl_get_dataloc(struct file *file, void __user *arg)

fs/ceph/ioctl.c

329

ret = fscrypt_ioctl_set_policy(file, (const void __user *)arg);

fs/ceph/ioctl.c

382

return ceph_ioctl_get_layout(file, (void __user *)arg);

fs/ceph/ioctl.c

385

return ceph_ioctl_set_layout(file, (void __user *)arg);

fs/ceph/ioctl.c

388

return ceph_ioctl_set_layout_policy(file, (void __user *)arg);

fs/ceph/ioctl.c

391

return ceph_ioctl_get_dataloc(file, (void __user *)arg);

fs/ceph/ioctl.c

406

return fscrypt_ioctl_get_policy(file, (void __user *)arg);

fs/ceph/ioctl.c

412

return fscrypt_ioctl_get_policy_ex(file, (void __user *)arg);

fs/ceph/ioctl.c

418

return fscrypt_ioctl_add_key(file, (void __user *)arg);

fs/ceph/ioctl.c

421

return fscrypt_ioctl_remove_key(file, (void __user *)arg);

fs/ceph/ioctl.c

425

(void __user *)arg);

fs/ceph/ioctl.c

428

return fscrypt_ioctl_get_key_status(file, (void __user *)arg);

fs/ceph/ioctl.c

434

return fscrypt_ioctl_get_nonce(file, (void __user *)arg);

fs/ceph/ioctl.c

65

static long ceph_ioctl_set_layout(struct file *file, void __user *arg)

fs/coda/pioctl.c

61

if (copy_from_user(&data, (void __user *)user_data, sizeof(data)))

fs/coda/psdev.c

204

static ssize_t coda_psdev_read(struct file * file, char __user * buf,

fs/coda/psdev.c

79

return put_user(data, (int __user *) arg);

fs/coda/psdev.c

91

static ssize_t coda_psdev_write(struct file *file, const char __user *buf,

fs/coredump.c

1767

if (copy_from_user(elfmag, (void __user *)m->start, SELFMAG) ||

fs/crypto/keyring.c

1040

static int do_remove_key(struct file *filp, void __user *_uarg, bool all_users)

fs/crypto/keyring.c

1043

struct fscrypt_remove_key_arg __user *uarg = _uarg;

fs/crypto/keyring.c

1130

int fscrypt_ioctl_remove_key(struct file *filp, void __user *uarg)

fs/crypto/keyring.c

1136

int fscrypt_ioctl_remove_key_all_users(struct file *filp, void __user *uarg)

fs/crypto/keyring.c

1166

int fscrypt_ioctl_get_key_status(struct file *filp, void __user *uarg)

fs/crypto/keyring.c

729

int fscrypt_ioctl_add_key(struct file *filp, void __user *_uarg)

fs/crypto/keyring.c

732

struct fscrypt_add_key_arg __user *uarg = _uarg;

fs/crypto/policy.c

505

int fscrypt_ioctl_set_policy(struct file *filp, const void __user *arg)

fs/crypto/policy.c

514

if (get_user(policy.version, (const u8 __user *)arg))

fs/crypto/policy.c

571

int fscrypt_ioctl_get_policy(struct file *filp, void __user *arg)

fs/crypto/policy.c

590

int fscrypt_ioctl_get_policy_ex(struct file *filp, void __user *uarg)

fs/crypto/policy.c

622

int fscrypt_ioctl_get_nonce(struct file *filp, void __user *arg)

fs/d_path.c

413

SYSCALL_DEFINE2(getcwd, char __user *, buf, unsigned long, size)

fs/debugfs/file.c

1016

ssize_t debugfs_read_file_str(struct file *file, char __user *user_buf,

fs/debugfs/file.c

1051

static ssize_t debugfs_write_file_str(struct file *file, const char __user *user_buf,

fs/debugfs/file.c

1146

static ssize_t read_file_blob(struct file *file, char __user *user_buf,

fs/debugfs/file.c

1162

static ssize_t write_file_blob(struct file *file, const char __user *user_buf,

fs/debugfs/file.c

1259

static ssize_t u32_array_read(struct file *file, char __user *buf, size_t len,

fs/debugfs/file.c

29

static ssize_t default_read_file(struct file *file, char __user *buf,

fs/debugfs/file.c

35

static ssize_t default_write_file(struct file *file, const char __user *buf,

fs/debugfs/file.c

374

PROTO(struct file *filp, char __user *buf, size_t size,

fs/debugfs/file.c

379

PROTO(struct file *filp, char __user *buf, size_t size,

fs/debugfs/file.c

384

PROTO(struct file *filp, const char __user *buf,

fs/debugfs/file.c

389

PROTO(struct file *filp, const char __user *buf,

fs/debugfs/file.c

514

ssize_t debugfs_attr_read(struct file *file, char __user *buf,

fs/debugfs/file.c

529

static ssize_t debugfs_attr_write_xsigned(struct file *file, const char __user *buf,

fs/debugfs/file.c

546

ssize_t debugfs_attr_write(struct file *file, const char __user *buf,

fs/debugfs/file.c

553

ssize_t debugfs_attr_write_signed(struct file *file, const char __user *buf,

fs/debugfs/file.c

931

ssize_t debugfs_read_file_bool(struct file *file, char __user *user_buf,

fs/debugfs/file.c

954

ssize_t debugfs_write_file_bool(struct file *file, const char __user *user_buf,

fs/dlm/debug_fs.c

501

static ssize_t table_write2(struct file *file, const char __user *user_buf,

fs/dlm/debug_fs.c

594

static ssize_t waiters_read(struct file *file, char __user *userbuf,

fs/dlm/debug_fs.c

628

static ssize_t waiters_write(struct file *file, const char __user *user_buf,

fs/dlm/debug_fs.c

703

static ssize_t dlm_rawmsg_write(struct file *fp, const char __user *user_buf,

fs/dlm/dlm_internal.h

221

struct dlm_lksb __user *user_lksb;

fs/dlm/dlm_internal.h

222

void __user *castparam;

fs/dlm/dlm_internal.h

223

void __user *castaddr;

fs/dlm/dlm_internal.h

224

void __user *bastparam;

fs/dlm/dlm_internal.h

225

void __user *bastaddr;

fs/dlm/plock.c

481

static ssize_t dev_read(struct file *file, char __user *u, size_t count,

fs/dlm/plock.c

520

static ssize_t dev_write(struct file *file, const char __user *u, size_t count,

fs/dlm/user.c

114

kb->i.lock.castparam = (__user void *)(long)kb32->i.lock.castparam;

fs/dlm/user.c

115

kb->i.lock.castaddr = (__user void *)(long)kb32->i.lock.castaddr;

fs/dlm/user.c

116

kb->i.lock.bastparam = (__user void *)(long)kb32->i.lock.bastparam;

fs/dlm/user.c

117

kb->i.lock.bastaddr = (__user void *)(long)kb32->i.lock.bastaddr;

fs/dlm/user.c

118

kb->i.lock.lksb = (__user void *)(long)kb32->i.lock.lksb;

fs/dlm/user.c

510

static ssize_t device_write(struct file *file, const char __user *buf,

fs/dlm/user.c

697

char __user *buf, size_t count)

fs/dlm/user.c

769

static int copy_version_to_user(char __user *buf, size_t count)

fs/dlm/user.c

785

static ssize_t device_read(struct file *file, char __user *buf, size_t count,

fs/ecryptfs/miscdev.c

213

ecryptfs_miscdev_read(struct file *file, char __user *buf, size_t count,

fs/ecryptfs/miscdev.c

289

(__be32 __user *)(&buf[PKT_CTR_OFFSET])))

fs/ecryptfs/miscdev.c

356

ecryptfs_miscdev_write(struct file *file, const char __user *buf,

fs/efivarfs/file.c

16

const char __user *userbuf, size_t count, loff_t *ppos)

fs/efivarfs/file.c

79

static ssize_t efivarfs_file_read(struct file *file, char __user *userbuf,

fs/erofs/inode.c

346

static int erofs_ioctl_get_volume_label(struct inode *inode, void __user *arg)

fs/erofs/inode.c

362

void __user *argp = (void __user *)arg;

fs/eventfd.c

247

static ssize_t eventfd_write(struct file *file, const char __user *buf, size_t count,

fs/eventpoll.c

2067

struct epoll_event __user **uevents,

fs/eventpoll.c

2070

struct epoll_event __user *next;

fs/eventpoll.c

2129

struct epoll_event __user *events, int maxevents)

fs/eventpoll.c

2215

struct epoll_event __user *events, int maxevents)

fs/eventpoll.c

2255

static int ep_poll(struct eventpoll *ep, struct epoll_event __user *events,

fs/eventpoll.c

2749

struct epoll_event __user *, event)

fs/eventpoll.c

2760

static int ep_check_params(struct file *file, struct epoll_event __user *evs,

fs/eventpoll.c

2781

int epoll_sendevents(struct file *file, struct epoll_event __user *events,

fs/eventpoll.c

2805

static int do_epoll_wait(int epfd, struct epoll_event __user *events,

fs/eventpoll.c

2830

SYSCALL_DEFINE4(epoll_wait, int, epfd, struct epoll_event __user *, events,

fs/eventpoll.c

2843

static int do_epoll_pwait(int epfd, struct epoll_event __user *events,

fs/eventpoll.c

2845

const sigset_t __user *sigmask, size_t sigsetsize)

fs/eventpoll.c

2864

SYSCALL_DEFINE6(epoll_pwait, int, epfd, struct epoll_event __user *, events,

fs/eventpoll.c

2865

int, maxevents, int, timeout, const sigset_t __user *, sigmask,

fs/eventpoll.c

2875

SYSCALL_DEFINE6(epoll_pwait2, int, epfd, struct epoll_event __user *, events,

fs/eventpoll.c

2876

int, maxevents, const struct __kernel_timespec __user *, timeout,

fs/eventpoll.c

2877

const sigset_t __user *, sigmask, size_t, sigsetsize)

fs/eventpoll.c

2938

static int do_compat_epoll_pwait(int epfd, struct epoll_event __user *events,

fs/eventpoll.c

2940

const compat_sigset_t __user *sigmask,

fs/eventpoll.c

2961

struct epoll_event __user *, events,

fs/eventpoll.c

2963

const compat_sigset_t __user *, sigmask,

fs/eventpoll.c

2974

struct epoll_event __user *, events,

fs/eventpoll.c

2976

const struct __kernel_timespec __user *, timeout,

fs/eventpoll.c

2977

const compat_sigset_t __user *, sigmask,

fs/eventpoll.c

734

void __user *uarg = (void __user *)arg;

fs/exec.c

1938

static inline struct user_arg_ptr native_arg(const char __user *const __user *p)

fs/exec.c

1944

const char __user *, filename,

fs/exec.c

1945

const char __user *const __user *, argv,

fs/exec.c

1946

const char __user *const __user *, envp)

fs/exec.c

1954

int, fd, const char __user *, filename,

fs/exec.c

1955

const char __user *const __user *, argv,

fs/exec.c

1956

const char __user *const __user *, envp,

fs/exec.c

1966

static inline struct user_arg_ptr compat_arg(const compat_uptr_t __user *p)

fs/exec.c

1971

COMPAT_SYSCALL_DEFINE3(execve, const char __user *, filename,

fs/exec.c

1972

const compat_uptr_t __user *, argv,

fs/exec.c

1973

const compat_uptr_t __user *, envp)

fs/exec.c

1981

const char __user *, filename,

fs/exec.c

1982

const compat_uptr_t __user *, argv,

fs/exec.c

1983

const compat_uptr_t __user *, envp,

fs/exec.c

299

const char __user *const __user *native;

fs/exec.c

301

const compat_uptr_t __user *compat;

fs/exec.c

306

static const char __user *get_user_arg_ptr(struct user_arg_ptr argv, int nr)

fs/exec.c

308

const char __user *native;

fs/exec.c

336

const char __user *p = get_user_arg_ptr(argv, i);

fs/exec.c

461

const char __user *str;

fs/exec.c

828

ssize_t res = vfs_read(file, (void __user *)addr, len, &pos);

fs/exfat/file.c

434

static int exfat_ioctl_get_attributes(struct inode *inode, u32 __user *user_attr)

fs/exfat/file.c

445

static int exfat_ioctl_set_attributes(struct file *file, u32 __user *user_attr)

fs/exfat/file.c

529

if (copy_from_user(&range, (struct fstrim_range __user *)arg, sizeof(range)))

fs/exfat/file.c

539

if (copy_to_user((struct fstrim_range __user *)arg, &range, sizeof(range)))

fs/exfat/file.c

552

if (get_user(flags, (__u32 __user *)arg))

fs/exfat/file.c

572

if (copy_to_user((char __user *)arg, label, ret + 1))

fs/exfat/file.c

588

if (copy_from_user(label, (char __user *)arg, FSLABEL_MAX))

fs/exfat/file.c

610

u32 __user *user_attr = (u32 __user *)arg;

fs/ext2/ioctl.c

105

if (get_user(rsv_window_size, (int __user *)arg))

fs/ext2/ioctl.c

65

return put_user(inode->i_generation, (int __user *) arg);

fs/ext2/ioctl.c

74

if (get_user(generation, (int __user *) arg)) {

fs/ext2/ioctl.c

94

return put_user(rsv_window_size, (int __user *)arg);

fs/ext4/crypto.c

83

int ext4_ioctl_get_encryption_pwsalt(struct file *filp, void __user *arg)

fs/ext4/ext4.h

2937

int ext4_ioctl_get_encryption_pwsalt(struct file *filp, void __user *arg);

fs/ext4/ext4.h

2965

void __user *arg)

fs/ext4/ioctl.c

1047

struct fiemap __user *ufiemap = (struct fiemap __user *) arg;

fs/ext4/ioctl.c

1079

if (copy_from_user(&flags, (__u32 __user *)arg,

fs/ext4/ioctl.c

1117

static int ext4_ioctl_setlabel(struct file *filp, const char __user *user_label)

fs/ext4/ioctl.c

1154

static int ext4_ioctl_getlabel(struct ext4_sb_info *sbi, char __user *user_label)

fs/ext4/ioctl.c

1175

struct fsuuid __user *ufsuuid)

fs/ext4/ioctl.c

1206

const struct fsuuid __user *ufsuuid)

fs/ext4/ioctl.c

1282

struct ext4_tune_sb_params __user *params)

fs/ext4/ioctl.c

1391

struct ext4_tune_sb_params __user *in)

fs/ext4/ioctl.c

1548

return ext4_ioc_getfsmap(sb, (void __user *)arg);

fs/ext4/ioctl.c

1551

return put_user(inode->i_generation, (int __user *) arg);

fs/ext4/ioctl.c

1571

if (get_user(generation, (int __user *) arg)) {

fs/ext4/ioctl.c

1605

if (get_user(n_blocks_count, (__u32 __user *)arg)) {

fs/ext4/ioctl.c

1648

(struct move_extent __user *)arg, sizeof(me)))

fs/ext4/ioctl.c

1670

if (copy_to_user((struct move_extent __user *)arg,

fs/ext4/ioctl.c

1679

if (copy_from_user(&input, (struct ext4_new_group_input __user *)arg,

fs/ext4/ioctl.c

1740

if (copy_from_user(&n_blocks_count, (__u64 __user *)arg,

fs/ext4/ioctl.c

1793

if (copy_from_user(&range, (struct fstrim_range __user *)arg,

fs/ext4/ioctl.c

1801

if (copy_to_user((struct fstrim_range __user *)arg, &range,

fs/ext4/ioctl.c

1819

return fscrypt_ioctl_set_policy(filp, (const void __user *)arg);

fs/ext4/ioctl.c

1822

return ext4_ioctl_get_encryption_pwsalt(filp, (void __user *)arg);

fs/ext4/ioctl.c

1827

return fscrypt_ioctl_get_policy(filp, (void __user *)arg);

fs/ext4/ioctl.c

1832

return fscrypt_ioctl_get_policy_ex(filp, (void __user *)arg);

fs/ext4/ioctl.c

1837

return fscrypt_ioctl_add_key(filp, (void __user *)arg);

fs/ext4/ioctl.c

1842

return fscrypt_ioctl_remove_key(filp, (void __user *)arg);

fs/ext4/ioctl.c

1848

(void __user *)arg);

fs/ext4/ioctl.c

1852

return fscrypt_ioctl_get_key_status(filp, (void __user *)arg);

fs/ext4/ioctl.c

1857

return fscrypt_ioctl_get_nonce(filp, (void __user *)arg);

fs/ext4/ioctl.c

1880

return put_user(state, (__u32 __user *) arg);

fs/ext4/ioctl.c

1892

return fsverity_ioctl_enable(filp, (const void __user *)arg);

fs/ext4/ioctl.c

1897

return fsverity_ioctl_measure(filp, (void __user *)arg);

fs/ext4/ioctl.c

1903

(const void __user *)arg);

fs/ext4/ioctl.c

1909

return ext4_ioctl_getlabel(EXT4_SB(sb), (void __user *)arg);

fs/ext4/ioctl.c

1913

(const void __user *)arg);

fs/ext4/ioctl.c

1916

return ext4_ioctl_getuuid(EXT4_SB(sb), (void __user *)arg);

fs/ext4/ioctl.c

1918

return ext4_ioctl_setuuid(filp, (const void __user *)arg);

fs/ext4/ioctl.c

1921

(void __user *)arg);

fs/ext4/ioctl.c

1923

return ext4_ioctl_set_tune_sb(filp, (void __user *)arg);

fs/ext4/ioctl.c

1961

struct compat_ext4_new_group_input __user *uinput;

fs/ext4/ioctl.c

865

if (get_user(flags, (__u32 __user *)arg))

fs/ext4/ioctl.c

873

struct fsmap_head __user *gi_data;

fs/ext4/ioctl.c

895

struct fsmap_head __user *arg)

fs/f2fs/file.c

2276

return put_user(inode->i_generation, (int __user *)arg);

fs/f2fs/file.c

2536

if (get_user(in, (__u32 __user *)arg))

fs/f2fs/file.c

2629

if (copy_from_user(&range, (struct fstrim_range __user *)arg,

fs/f2fs/file.c

2644

if (copy_to_user((struct fstrim_range __user *)arg, &range,

fs/f2fs/file.c

2669

ret = fscrypt_ioctl_set_policy(filp, (const void __user *)arg);

fs/f2fs/file.c

2678

return fscrypt_ioctl_get_policy(filp, (void __user *)arg);

fs/f2fs/file.c

2715

if (!err && copy_to_user((__u8 __user *)arg, encrypt_pw_salt, 16))

fs/f2fs/file.c

2727

return fscrypt_ioctl_get_policy_ex(filp, (void __user *)arg);

fs/f2fs/file.c

2735

return fscrypt_ioctl_add_key(filp, (void __user *)arg);

fs/f2fs/file.c

2743

return fscrypt_ioctl_remove_key(filp, (void __user *)arg);

fs/f2fs/file.c

2752

return fscrypt_ioctl_remove_key_all_users(filp, (void __user *)arg);

fs/f2fs/file.c

2761

return fscrypt_ioctl_get_key_status(filp, (void __user *)arg);

fs/f2fs/file.c

2769

return fscrypt_ioctl_get_nonce(filp, (void __user *)arg);

fs/f2fs/file.c

2786

if (get_user(sync, (__u32 __user *)arg))

fs/f2fs/file.c

2871

if (copy_from_user(&range, (struct f2fs_gc_range __user *)arg,

fs/f2fs/file.c

3086

if (copy_from_user(&range, (struct f2fs_defragment __user *)arg,

fs/f2fs/file.c

3110

if (copy_to_user((struct f2fs_defragment __user *)arg, &range,

fs/f2fs/file.c

3286

if (copy_from_user(&range, (struct f2fs_move_range __user *)arg,

fs/f2fs/file.c

3316

if (copy_from_user(&range, (struct f2fs_flush_device __user *)arg,

fs/f2fs/file.c

3371

return put_user(sb_feature, (u32 __user *)arg);

fs/f2fs/file.c

3536

if (get_user(pin, (__u32 __user *)arg))

fs/f2fs/file.c

3610

return put_user(pin, (u32 __user *)arg);

fs/f2fs/file.c

3616

(u32 __user *)arg);

fs/f2fs/file.c

3624

if (get_user(level, (__u32 __user *)arg))

fs/f2fs/file.c

3686

if (copy_from_user(&block_count, (void __user *)arg,

fs/f2fs/file.c

3706

return fsverity_ioctl_enable(filp, (const void __user *)arg);

fs/f2fs/file.c

3714

return fsverity_ioctl_measure(filp, (void __user *)arg);

fs/f2fs/file.c

3722

return fsverity_ioctl_read_metadata(filp, (const void __user *)arg);

fs/f2fs/file.c

3743

if (copy_to_user((char __user *)arg, vbuf,

fs/f2fs/file.c

3761

vbuf = strndup_user((const char __user *)arg, FSLABEL_MAX);

fs/f2fs/file.c

3810

return put_user(blocks, (u64 __user *)arg);

fs/f2fs/file.c

3968

ret = put_user(released_blocks, (u64 __user *)arg);

fs/f2fs/file.c

4151

ret = put_user(reserved_blocks, (u64 __user *)arg);

fs/f2fs/file.c

4211

if (copy_from_user(&range, (struct f2fs_sectrim_range __user *)arg,

fs/f2fs/file.c

4378

if (copy_to_user((struct f2fs_comp_option __user *)arg, &option,

fs/f2fs/file.c

4399

if (copy_from_user(&option, (struct f2fs_comp_option __user *)arg,

fs/f2fs/file.c

5438

struct compat_f2fs_gc_range __user *urange;

fs/f2fs/file.c

5463

struct compat_f2fs_move_range __user *urange;

fs/fat/dir.c

583

void __user *dirent;

fs/fat/dir.c

752

struct dirent_type __user *d1 = buf->dirent; \

fs/fat/dir.c

753

struct dirent_type __user *d2 = d1 + 1; \

fs/fat/dir.c

801

void __user *dirent, filldir_t filldir,

fs/fat/dir.c

830

struct __fat_dirent __user *d1 = (struct __fat_dirent __user *)arg;

fs/fat/dir.c

868

struct compat_dirent __user *d1 = compat_ptr(arg);

fs/fat/file.c

122

static int fat_ioctl_get_volume_id(struct inode *inode, u32 __user *user_attr)

fs/fat/file.c

131

struct fstrim_range __user *user_range;

fs/fat/file.c

141

user_range = (struct fstrim_range __user *)arg;

fs/fat/file.c

160

u32 __user *user_attr = (u32 __user *)arg;

fs/fat/file.c

26

static int fat_ioctl_get_attributes(struct inode *inode, u32 __user *user_attr)

fs/fat/file.c

37

static int fat_ioctl_set_attributes(struct file *file, u32 __user *user_attr)

fs/fcntl.c

218

struct f_owner_ex __user *owner_p = (void __user *)arg;

fs/fcntl.c

262

struct f_owner_ex __user *owner_p = (void __user *)arg;

fs/fcntl.c

312

uid_t __user *dst = (void __user *)arg;

fs/fcntl.c

361

u64 __user *argp = (u64 __user *)arg;

fs/fcntl.c

372

u64 __user *argp = (u64 __user *)arg;

fs/fcntl.c

447

void __user *argp = (void __user *)arg;

fs/fcntl.c

611

void __user *argp = (void __user *)arg;

fs/fcntl.c

664

static int get_compat_flock(struct flock *kfl, const struct compat_flock __user *ufl)

fs/fcntl.c

674

static int get_compat_flock64(struct flock *kfl, const struct compat_flock64 __user *ufl)

fs/fcntl.c

684

static int put_compat_flock(const struct flock *kfl, struct compat_flock __user *ufl)

fs/fcntl.c

695

static int put_compat_flock64(const struct flock *kfl, struct compat_flock64 __user *ufl)

fs/fhandle.c

102

(int __user *) mnt_id))

fs/fhandle.c

129

SYSCALL_DEFINE5(name_to_handle_at, int, dfd, const char __user *, name,

fs/fhandle.c

130

struct file_handle __user *, handle, void __user *, mnt_id,

fs/fhandle.c

19

struct file_handle __user *ufh,

fs/fhandle.c

20

void __user *mnt_id, bool unique_mntid,

fs/fhandle.c

350

static int handle_to_path(int mountdirfd, struct file_handle __user *ufh,

fs/fhandle.c

427

static long do_handle_open(int mountdirfd, struct file_handle __user *ufh,

fs/fhandle.c

452

struct file_handle __user *, handle,

fs/fhandle.c

470

struct file_handle __user *, handle, int, flags)

fs/fhandle.c

98

(u64 __user *) mnt_id))

fs/file.c

1385

int receive_fd(struct file *file, int __user *ufd, unsigned int o_flags)

fs/file_attr.c

122

int copy_fsxattr_to_user(const struct file_kattr *fa, struct fsxattr __user *ufa)

fs/file_attr.c

158

struct fsxattr __user *ufa)

fs/file_attr.c

313

int ioctl_getflags(struct file *file, unsigned int __user *argp)

fs/file_attr.c

324

int ioctl_setflags(struct file *file, unsigned int __user *argp)

fs/file_attr.c

344

int ioctl_fsgetxattr(struct file *file, void __user *argp)

fs/file_attr.c

356

int ioctl_fssetxattr(struct file *file, void __user *argp)

fs/file_attr.c

374

SYSCALL_DEFINE5(file_getattr, int, dfd, const char __user *, filename,

fs/file_attr.c

375

struct file_attr __user *, ufattr, size_t, usize,

fs/file_attr.c

427

SYSCALL_DEFINE5(file_setattr, int, dfd, const char __user *, filename,

fs/file_attr.c

428

struct file_attr __user *, ufattr, size_t, usize,

fs/filesystems.c

143

static int fs_index(const char __user *__name)

fs/filesystems.c

161

static int fs_name(unsigned int index, char __user *buf)

fs/filesystems.c

205

retval = fs_index((const char __user *) arg1);

fs/filesystems.c

209

retval = fs_name(arg1, (char __user *) arg2);

fs/fsopen.c

120

SYSCALL_DEFINE2(fsopen, const char __user *, _fs_name, unsigned int, flags)

fs/fsopen.c

163

SYSCALL_DEFINE3(fspick, int, dfd, const char __user *, path, unsigned int, flags)

fs/fsopen.c

353

const char __user *, _key,

fs/fsopen.c

354

const void __user *, _value,

fs/fsopen.c

48

char __user *_buf, size_t len, loff_t *pos)

fs/fuse/control.c

101

char __user *buf, size_t len,

fs/fuse/control.c

118

const char __user *buf,

fs/fuse/control.c

138

char __user *buf, size_t len,

fs/fuse/control.c

155

const char __user *buf,

fs/fuse/control.c

34

static ssize_t fuse_conn_abort_write(struct file *file, const char __user *buf,

fs/fuse/control.c

45

static ssize_t fuse_conn_waiting_read(struct file *file, char __user *buf,

fs/fuse/control.c

65

static ssize_t fuse_conn_limit_read(struct file *file, char __user *buf,

fs/fuse/control.c

74

static ssize_t fuse_conn_limit_write(struct file *file, const char __user *buf,

fs/fuse/dev.c

2263

static long fuse_dev_ioctl_clone(struct file *file, __u32 __user *argp)

fs/fuse/dev.c

2299

struct fuse_backing_map __user *argp)

fs/fuse/dev.c

2316

static long fuse_dev_ioctl_backing_close(struct file *file, __u32 __user *argp)

fs/fuse/dev.c

2347

void __user *argp = (void __user *)arg;

fs/fuse/dev_uring.c

1102

struct iovec __user *uiov = u64_to_user_ptr(READ_ONCE(sqe->addr));

fs/fuse/dev_uring.c

611

void __user *ring;

fs/fuse/dev_uring.c

616

ring = (void __user *)ent->headers + offset;

fs/fuse/dev_uring.c

631

const void __user *ring;

fs/fuse/dev_uring.c

636

ring = (void __user *)ent->headers + offset;

fs/fuse/dev_uring_i.h

42

struct fuse_uring_req_header __user *headers;

fs/fuse/dev_uring_i.h

43

void __user *payload;

fs/fuse/ioctl.c

110

dst[i].iov_base = (void __user *) (unsigned long) fiov[i].base;

fs/fuse/ioctl.c

128

struct fsverity_digest __user *uarg = (void __user *)arg;

fs/fuse/ioctl.c

145

struct fsverity_enable_arg __user *uarg = (void __user *)arg;

fs/fuse/ioctl.c

269

iov->iov_base = (void __user *)arg;

fs/gfs2/file.c

314

static int gfs2_getlabel(struct file *filp, char __user *label)

fs/gfs2/file.c

329

return gfs2_fitrim(filp, (void __user *)arg);

fs/gfs2/file.c

331

return gfs2_getlabel(filp, (char __user *)arg);

fs/gfs2/inode.c

2199

struct fiemap_extent __user *dest = fi->fi_extents_start;

fs/gfs2/inode.c

2202

return fault_in_safe_writeable((char __user *)dest, size) == 0;

fs/gfs2/rgrp.c

1384

int gfs2_fitrim(struct file *filp, void __user *argp)

fs/gfs2/rgrp.h

77

int gfs2_fitrim(struct file *filp, void __user *argp);

fs/hfsplus/ioctl.c

27

static int hfsplus_ioctl_bless(struct file *file, int __user *user_flags)

fs/hfsplus/ioctl.c

62

void __user *argp = (void __user *)arg;

fs/hpfs/super.c

215

if (copy_from_user(&range, (struct fstrim_range __user *)arg, sizeof(range)))

fs/hpfs/super.c

221

if (copy_to_user((struct fstrim_range __user *)arg, &range, sizeof(range)))

fs/internal.h

203

int do_fchownat(int dfd, const char __user *filename, uid_t user, gid_t group,

fs/internal.h

260

unsigned int mask, struct statx __user *buffer);

fs/internal.h

262

struct statx __user *buffer);

fs/internal.h

282

const void __user *cvalue;

fs/internal.h

283

void __user *value;

fs/internal.h

298

int setxattr_copy(const char __user *name, struct kernel_xattr_ctx *ctx);

fs/internal.h

299

int import_xattr_name(struct xattr_name *kname, const char __user *name);

fs/ioctl.c

115

struct fiemap_extent __user *dest = fieinfo->fi_extents_start;

fs/ioctl.c

199

static int ioctl_fiemap(struct file *filp, struct fiemap __user *ufiemap)

fs/ioctl.c

251

struct file_clone_range __user *argp)

fs/ioctl.c

268

static int ioctl_preallocate(struct file *filp, int mode, void __user *argp)

fs/ioctl.c

297

struct space_resv_32 __user *argp)

fs/ioctl.c

322

static int file_ioctl(struct file *filp, unsigned int cmd, int __user *p)

fs/ioctl.c

340

static int ioctl_fionbio(struct file *filp, int __user *argp)

fs/ioctl.c

364

int __user *argp)

fs/ioctl.c

416

struct file_dedupe_range __user *argp)

fs/ioctl.c

455

static int ioctl_getfsuuid(struct file *file, void __user *argp)

fs/ioctl.c

468

static int ioctl_get_fs_sysfs_path(struct file *file, void __user *argp)

fs/ioctl.c

495

void __user *argp = (void __user *)arg;

fs/ioctl.c

538

return put_user(inode->i_sb->s_blocksize, (int __user *)argp);

fs/ioctl.c

554

(int __user *)argp);

fs/ioctl.c

58

static int ioctl_fibmap(struct file *filp, int __user *p)

fs/jfs/ioctl.c

124

if (copy_from_user(&range, (struct fstrim_range __user *)arg,

fs/jfs/ioctl.c

135

if (copy_to_user((struct fstrim_range __user *)arg, &range,

fs/jfs/jfs_debug.c

32

const char __user *buffer, size_t count, loff_t *ppos)

fs/libfs.c

1143

ssize_t simple_read_from_buffer(void __user *to, size_t count, loff_t *ppos,

fs/libfs.c

1179

const void __user *from, size_t count)

fs/libfs.c

1253

char *simple_transaction_get(struct file *file, const char __user *buf, size_t size)

fs/libfs.c

1285

ssize_t simple_transaction_read(struct file *file, char __user *buf, size_t size, loff_t *pos)

fs/libfs.c

1346

ssize_t simple_attr_read(struct file *file, char __user *buf,

fs/libfs.c

1384

static ssize_t simple_attr_write_xsigned(struct file *file, const char __user *buf,

fs/libfs.c

1420

ssize_t simple_attr_write(struct file *file, const char __user *buf,

fs/libfs.c

1427

ssize_t simple_attr_write_signed(struct file *file, const char __user *buf,

fs/libfs.c

223

ssize_t generic_read_dir(struct file *filp, char __user *buf, size_t siz, loff_t *ppos)

fs/lockd/procfs.c

21

nlm_end_grace_write(struct file *file, const char __user *buf, size_t size,

fs/lockd/procfs.c

49

nlm_end_grace_read(struct file *file, char __user *buf, size_t size,

fs/namei.c

161

static int getname_long(struct filename *name, const char __user *filename)

fs/namei.c

181

do_getname(const char __user *filename, int flags, bool incomplete)

fs/namei.c

228

getname_flags(const char __user *filename, int flags)

fs/namei.c

233

struct filename *getname_uflags(const char __user *filename, int uflags)

fs/namei.c

240

struct filename *__getname_maybe_null(const char __user *pathname)

fs/namei.c

316

const char __user *string, int flags)

fs/namei.c

322

int delayed_getname(struct delayed_filename *v, const char __user *string)

fs/namei.c

327

int delayed_getname_uflags(struct delayed_filename *v, const char __user *string,

fs/namei.c

3637

int user_path_at(int dfd, const char __user *name, unsigned flags,

fs/namei.c

5002

int dfd, const char __user *pathname,

fs/namei.c

5212

SYSCALL_DEFINE4(mknodat, int, dfd, const char __user *, filename, umode_t, mode,

fs/namei.c

5219

SYSCALL_DEFINE3(mknod, const char __user *, filename, umode_t, mode, unsigned, dev)

fs/namei.c

5327

SYSCALL_DEFINE3(mkdirat, int, dfd, const char __user *, pathname, umode_t, mode)

fs/namei.c

5333

SYSCALL_DEFINE2(mkdir, const char __user *, pathname, umode_t, mode)

fs/namei.c

5458

SYSCALL_DEFINE1(rmdir, const char __user *, pathname)

fs/namei.c

5606

SYSCALL_DEFINE3(unlinkat, int, dfd, const char __user *, pathname, int, flag)

fs/namei.c

5617

SYSCALL_DEFINE1(unlink, const char __user *, pathname)

fs/namei.c

5700

SYSCALL_DEFINE3(symlinkat, const char __user *, oldname,

fs/namei.c

5701

int, newdfd, const char __user *, newname)

fs/namei.c

5708

SYSCALL_DEFINE2(symlink, const char __user *, oldname, const char __user *, newname)

fs/namei.c

5880

SYSCALL_DEFINE5(linkat, int, olddfd, const char __user *, oldname,

fs/namei.c

5881

int, newdfd, const char __user *, newname, int, flags)

fs/namei.c

5888

SYSCALL_DEFINE2(link, const char __user *, oldname, const char __user *, newname)

fs/namei.c

6216

SYSCALL_DEFINE5(renameat2, int, olddfd, const char __user *, oldname,

fs/namei.c

6217

int, newdfd, const char __user *, newname, unsigned int, flags)

fs/namei.c

6224

SYSCALL_DEFINE4(renameat, int, olddfd, const char __user *, oldname,

fs/namei.c

6225

int, newdfd, const char __user *, newname)

fs/namei.c

6232

SYSCALL_DEFINE2(rename, const char __user *, oldname, const char __user *, newname)

fs/namei.c

6239

int readlink_copy(char __user *buffer, int buflen, const char *link, int linklen)

fs/namei.c

6261

int vfs_readlink(struct dentry *dentry, char __user *buffer, int buflen)

fs/namei.c

6394

int page_readlink(struct dentry *dentry, char __user *buffer, int buflen)

fs/namespace.c

2055

static int ksys_umount(char __user *name, int flags)

fs/namespace.c

2073

SYSCALL_DEFINE2(umount, char __user *, name, int, flags)

fs/namespace.c

2083

SYSCALL_DEFINE1(oldumount, char __user *, name)

fs/namespace.c

3194

static struct file *vfs_open_tree(int dfd, const char __user *filename, unsigned int flags)

fs/namespace.c

3245

SYSCALL_DEFINE3(open_tree, int, dfd, const char __user *, filename, unsigned, flags)

fs/namespace.c

4031

static void *copy_mount_options(const void __user * data)

fs/namespace.c

4052

if (get_user(c, (const char __user *)data + offset))

fs/namespace.c

4067

static char *copy_mount_string(const void __user *data)

fs/namespace.c

4165

int do_mount(const char *dev_name, const char __user *dir_name,

fs/namespace.c

4367

SYSCALL_DEFINE5(mount, char __user *, dev_name, char __user *, dir_name,

fs/namespace.c

4368

char __user *, type, unsigned long, flags, void __user *, data)

fs/namespace.c

4578

int, from_dfd, const char __user *, from_pathname,

fs/namespace.c

4579

int, to_dfd, const char __user *, to_pathname,

fs/namespace.c

4767

SYSCALL_DEFINE2(pivot_root, const char __user *, new_root,

fs/namespace.c

4768

const char __user *, put_old)

fs/namespace.c

5112

static int wants_mount_setattr(struct mount_attr __user *uattr, size_t usize,

fs/namespace.c

5145

SYSCALL_DEFINE5(mount_setattr, int, dfd, const char __user *, path,

fs/namespace.c

5146

unsigned int, flags, struct mount_attr __user *, uattr,

fs/namespace.c

5186

SYSCALL_DEFINE5(open_tree_attr, int, dfd, const char __user *, filename,

fs/namespace.c

5187

unsigned, flags, struct mount_attr __user *, uattr,

fs/namespace.c

5239

struct statmount __user *buf;

fs/namespace.c

5648

char __user *str = ((char __user *)s->buf) + sizeof(*sm);

fs/namespace.c

5866

struct statmount __user *buf, size_t bufsize,

fs/namespace.c

5891

static int copy_mnt_id_req(const struct mnt_id_req __user *req,

fs/namespace.c

5961

SYSCALL_DEFINE4(statmount, const struct mnt_id_req __user *, req,

fs/namespace.c

5962

struct statmount __user *, buf, size_t, bufsize,

fs/namespace.c

6123

SYSCALL_DEFINE4(listmount, const struct mnt_id_req __user *, req,

fs/namespace.c

6124

u64 __user *, mnt_ids, size_t, nr_mnt_ids, unsigned int, flags)

fs/nfs/blocklayout/rpc_pipefs.c

111

static ssize_t bl_pipe_downcall(struct file *filp, const char __user *src,

fs/nfs/nfs4idmap.c

396

static ssize_t idmap_pipe_downcall(struct file *, const char __user *,

fs/nfs/nfs4idmap.c

652

idmap_pipe_downcall(struct file *filp, const char __user *src, size_t mlen)

fs/nfsd/nfs4recover.c

692

__cld_pipe_inprogress_downcall(const struct cld_msg_v2 __user *cmsg,

fs/nfsd/nfs4recover.c

707

const struct cld_clntinfo __user *ci;

fs/nfsd/nfs4recover.c

734

const struct cld_name __user *cnm;

fs/nfsd/nfs4recover.c

766

cld_pipe_downcall(struct file *filp, const char __user *src, size_t mlen)

fs/nfsd/nfs4recover.c

769

struct cld_msg_hdr __user *hdr = (struct cld_msg_hdr __user *)src;

fs/nfsd/nfs4recover.c

770

struct cld_msg_v2 __user *cmsg = (struct cld_msg_v2 __user *)src;

fs/nfsd/nfs4state.c

3279

static ssize_t client_ctl_write(struct file *file, const char __user *buf,

fs/nfsd/nfsctl.c

120

static ssize_t nfsctl_transaction_read(struct file *file, char __user *buf, size_t size, loff_t *pos)

fs/nfsd/nfsctl.c

99

static ssize_t nfsctl_transaction_write(struct file *file, const char __user *buf, size_t size, loff_t *pos)

fs/nilfs2/ioctl.c

1028

static int nilfs_ioctl_trim_fs(struct inode *inode, void __user *argp)

fs/nilfs2/ioctl.c

1070

static int nilfs_ioctl_set_alloc_range(struct inode *inode, void __user *argp)

fs/nilfs2/ioctl.c

1130

unsigned int cmd, void __user *argp,

fs/nilfs2/ioctl.c

1177

unsigned int cmd, void __user *argp)

fs/nilfs2/ioctl.c

1240

static int nilfs_ioctl_get_fslabel(struct super_block *sb, void __user *argp)

fs/nilfs2/ioctl.c

1271

void __user *argp)

fs/nilfs2/ioctl.c

1322

void __user *argp = (void __user *)arg;

fs/nilfs2/ioctl.c

174

static int nilfs_ioctl_getversion(struct inode *inode, void __user *argp)

fs/nilfs2/ioctl.c

176

return put_user(inode->i_generation, (int __user *)argp);

fs/nilfs2/ioctl.c

196

unsigned int cmd, void __user *argp)

fs/nilfs2/ioctl.c

248

unsigned int cmd, void __user *argp)

fs/nilfs2/ioctl.c

324

unsigned int cmd, void __user *argp)

fs/nilfs2/ioctl.c

389

unsigned int cmd, void __user *argp)

fs/nilfs2/ioctl.c

496

unsigned int cmd, void __user *argp)

fs/nilfs2/ioctl.c

52

void __user *base = u64_to_user_ptr(argv->v_base);

fs/nilfs2/ioctl.c

835

unsigned int cmd, void __user *argp)

fs/nilfs2/ioctl.c

959

unsigned int cmd, void __user *argp)

fs/nilfs2/ioctl.c

993

void __user *argp)

fs/notify/fanotify/fanotify_user.c

1055

static ssize_t fanotify_write(struct file *file, const char __user *buf, size_t count, loff_t *pos)

fs/notify/fanotify/fanotify_user.c

1060

const char __user *info_buf = buf + sizeof(struct fanotify_response);

fs/notify/fanotify/fanotify_user.c

1148

void __user *p;

fs/notify/fanotify/fanotify_user.c

1154

p = (void __user *) arg;

fs/notify/fanotify/fanotify_user.c

1162

ret = put_user(send_len, (int __user *) p);

fs/notify/fanotify/fanotify_user.c

1181

static int fanotify_find_path(int dfd, const char __user *filename,

fs/notify/fanotify/fanotify_user.c

1857

int dfd, const char __user *pathname)

fs/notify/fanotify/fanotify_user.c

2134

const char __user *, pathname)

fs/notify/fanotify/fanotify_user.c

2144

const char __user *, pathname)

fs/notify/fanotify/fanotify_user.c

377

static int process_access_response_info(const char __user *info,

fs/notify/fanotify/fanotify_user.c

424

const char __user *info,

fs/notify/fanotify/fanotify_user.c

509

char __user *buf, int count)

fs/notify/fanotify/fanotify_user.c

528

char __user *buf, int count)

fs/notify/fanotify/fanotify_user.c

551

char __user *buf, size_t count)

fs/notify/fanotify/fanotify_user.c

649

char __user *buf,

fs/notify/fanotify/fanotify_user.c

669

char __user *buf, int count)

fs/notify/fanotify/fanotify_user.c

695

char __user *buf, size_t count)

fs/notify/fanotify/fanotify_user.c

836

char __user *buf, size_t count)

fs/notify/fanotify/fanotify_user.c

978

static ssize_t fanotify_read(struct file *file, char __user *buf,

fs/notify/fanotify/fanotify_user.c

983

char __user *start;

fs/notify/inotify/inotify_user.c

201

char __user *buf)

fs/notify/inotify/inotify_user.c

249

static ssize_t inotify_read(struct file *file, char __user *buf,

fs/notify/inotify/inotify_user.c

254

char __user *start;

fs/notify/inotify/inotify_user.c

318

void __user *p;

fs/notify/inotify/inotify_user.c

323

p = (void __user *) arg;

fs/notify/inotify/inotify_user.c

336

ret = put_user(send_len, (int __user *) p);

fs/notify/inotify/inotify_user.c

372

static int inotify_find_inode(const char __user *dirname, struct path *path,

fs/notify/inotify/inotify_user.c

730

SYSCALL_DEFINE3(inotify_add_watch, int, fd, const char __user *, pathname,

fs/nsfs.c

150

struct mnt_ns_info __user *uinfo, size_t usize,

fs/nsfs.c

222

uid_t __user *argp;

fs/nsfs.c

245

argp = (uid_t __user *) arg;

fs/nsfs.c

298

__u64 __user *idp;

fs/nsfs.c

301

idp = (__u64 __user *)arg;

fs/nsfs.c

311

struct mnt_ns_info __user *uinfo = (struct mnt_ns_info __user *)arg;

fs/nsfs.c

330

struct mnt_ns_info __user *uinfo = (struct mnt_ns_info __user *)arg;

fs/ntfs/file.c

720

if (get_user(flags, (__u32 __user *)arg))

fs/ntfs/file.c

729

char __user *buf = (char __user *)arg;

fs/ntfs/file.c

758

label = strndup_user((const char __user *)arg, FSLABEL_MAX);

fs/ntfs/file.c

775

struct fstrim_range __user *user_range;

fs/ntfs/file.c

787

user_range = (struct fstrim_range __user *)arg;

fs/ntfs3/file.c

170

static int ntfs_ioctl_get_volume_label(struct ntfs_sb_info *sbi, u8 __user *buf)

fs/ntfs3/file.c

178

static int ntfs_ioctl_set_volume_label(struct ntfs_sb_info *sbi, u8 __user *buf)

fs/ntfs3/file.c

221

if (get_user(flags, (__u32 __user *)arg))

fs/ntfs3/file.c

244

return ntfs_ioctl_get_volume_label(sbi, (u8 __user *)arg);

fs/ntfs3/file.c

246

return ntfs_ioctl_set_volume_label(sbi, (u8 __user *)arg);

fs/ntfs3/file.c

64

struct fstrim_range __user *user_range;

fs/ntfs3/file.c

76

user_range = (struct fstrim_range __user *)arg;

fs/ntfs3/super.c

518

static ssize_t ntfs3_label_write(struct file *file, const char __user *buffer,

fs/ocfs2/cluster/heartbeat.c

1354

static ssize_t o2hb_debug_read(struct file *file, char __user *buf,

fs/ocfs2/cluster/heartbeat.c

1369

static ssize_t o2hb_debug_read(struct file *file, char __user *buf,

fs/ocfs2/cluster/netdebug.c

471

static ssize_t o2net_debug_read(struct file *file, char __user *buf,

fs/ocfs2/dlm/dlmdebug.c

287

static ssize_t debug_read(struct file *file, char __user *buf,

fs/ocfs2/dlmfs/dlmfs.c

224

char __user *buf,

fs/ocfs2/dlmfs/dlmfs.c

237

const char __user *buf,

fs/ocfs2/ioctl.c

145

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

163

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

182

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

201

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

220

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

239

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

260

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

327

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

37

copy_to_user((typeof(a) __user *)b, &(a), sizeof(a))

fs/ocfs2/ioctl.c

44

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

47

(void)put_user(kreq->ir_flags, (__u32 __user *)&(req->ir_flags));

fs/ocfs2/ioctl.c

629

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

700

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

723

struct ocfs2_info_request __user *req)

fs/ocfs2/ioctl.c

785

u64 __user *bp = NULL;

fs/ocfs2/ioctl.c

793

bp = (u64 __user *)(unsigned long)compat_ptr(info->oi_requests);

fs/ocfs2/ioctl.c

798

bp = (u64 __user *)(unsigned long)(info->oi_requests);

fs/ocfs2/ioctl.c

824

struct ocfs2_info_request __user *reqp;

fs/ocfs2/ioctl.c

838

reqp = (struct ocfs2_info_request __user *)(unsigned long)req_addr;

fs/ocfs2/ioctl.c

856

void __user *argp = (void __user *)arg;

fs/ocfs2/ioctl.c

867

if (copy_from_user(&sr, (int __user *) arg, sizeof(sr)))

fs/ocfs2/ioctl.c

879

if (get_user(new_clusters, (int __user *)arg))

fs/ocfs2/ioctl.c

897

if (copy_from_user(&input, (int __user *) arg, sizeof(input)))

fs/ocfs2/ioctl.c

910

const char __user *old_path;

fs/ocfs2/ioctl.c

911

const char __user *new_path;

fs/ocfs2/ioctl.c

916

old_path = (const char __user *)(unsigned long)args.old_path;

fs/ocfs2/ioctl.c

917

new_path = (const char __user *)(unsigned long)args.new_path;

fs/ocfs2/ioctl.c

971

void __user *argp = (void __user *)arg;

fs/ocfs2/move_extents.c

991

int ocfs2_ioctl_move_extents(struct file *filp, void __user *argp)

fs/ocfs2/move_extents.h

10

int ocfs2_ioctl_move_extents(struct file *filp, void __user *argp);

fs/ocfs2/refcounttree.c

4409

const char __user *oldname,

fs/ocfs2/refcounttree.c

4410

const char __user *newname,

fs/ocfs2/refcounttree.h

105

const char __user *oldname,

fs/ocfs2/refcounttree.h

106

const char __user *newname,

fs/ocfs2/stack_user.c

241

const char __user *buf, size_t count)

fs/ocfs2/stack_user.c

255

const char __user *buf,

fs/ocfs2/stack_user.c

462

const char __user *buf,

fs/ocfs2/stack_user.c

497

const char __user *buf,

fs/ocfs2/stack_user.c

532

char __user *buf,

fs/ocfs2/super.c

367

static ssize_t ocfs2_debug_read(struct file *file, char __user *buf,

fs/ocfs2/super.c

382

static ssize_t ocfs2_debug_read(struct file *file, char __user *buf,

fs/open.c

129

int ksys_truncate(const char __user *pathname, loff_t length)

fs/open.c

1359

static int do_sys_openat2(int dfd, const char __user *filename,

fs/open.c

1371

int do_sys_open(int dfd, const char __user *filename, int flags, umode_t mode)

fs/open.c

1378

SYSCALL_DEFINE3(open, const char __user *, filename, int, flags, umode_t, mode)

fs/open.c

1385

SYSCALL_DEFINE4(openat, int, dfd, const char __user *, filename, int, flags,

fs/open.c

1393

SYSCALL_DEFINE4(openat2, int, dfd, const char __user *, filename,

fs/open.c

1394

struct open_how __user *, how, size_t, usize)

fs/open.c

1425

COMPAT_SYSCALL_DEFINE3(open, const char __user *, filename, int, flags, umode_t, mode)

fs/open.c

1434

COMPAT_SYSCALL_DEFINE4(openat, int, dfd, const char __user *, filename, int, flags, umode_t, mode)

fs/open.c

1446

SYSCALL_DEFINE2(creat, const char __user *, pathname, umode_t, mode)

fs/open.c

152

SYSCALL_DEFINE2(truncate, const char __user *, path, long, length)

fs/open.c

158

COMPAT_SYSCALL_DEFINE2(truncate, const char __user *, path, compat_off_t, length)

fs/open.c

223

SYSCALL_DEFINE2(truncate64, const char __user *, path, loff_t, length)

fs/open.c

235

COMPAT_SYSCALL_DEFINE3(truncate64, const char __user *, pathname,

fs/open.c

463

static int do_faccessat(int dfd, const char __user *filename, int mode, int flags)

fs/open.c

534

SYSCALL_DEFINE3(faccessat, int, dfd, const char __user *, filename, int, mode)

fs/open.c

539

SYSCALL_DEFINE4(faccessat2, int, dfd, const char __user *, filename, int, mode,

fs/open.c

545

SYSCALL_DEFINE2(access, const char __user *, filename, int, mode)

fs/open.c

550

SYSCALL_DEFINE1(chdir, const char __user *, filename)

fs/open.c

588

SYSCALL_DEFINE1(chroot, const char __user *, filename)

fs/open.c

667

static int do_fchmodat(int dfd, const char __user *filename, umode_t mode,

fs/open.c

692

SYSCALL_DEFINE4(fchmodat2, int, dfd, const char __user *, filename,

fs/open.c

698

SYSCALL_DEFINE3(fchmodat, int, dfd, const char __user *, filename,

fs/open.c

704

SYSCALL_DEFINE2(chmod, const char __user *, filename, umode_t, mode)

fs/open.c

787

int do_fchownat(int dfd, const char __user *filename, uid_t user, gid_t group,

fs/open.c

816

SYSCALL_DEFINE5(fchownat, int, dfd, const char __user *, filename, uid_t, user,

fs/open.c

822

SYSCALL_DEFINE3(chown, const char __user *, filename, uid_t, user, gid_t, group)

fs/open.c

827

SYSCALL_DEFINE3(lchown, const char __user *, filename, uid_t, user, gid_t, group)

fs/orangefs/devorangefs-req.c

159

char __user *buf,

fs/orangefs/devorangefs-req.c

605

return ((put_user(magic, (__s32 __user *) arg) == -EFAULT) ?

fs/orangefs/devorangefs-req.c

610

(__s32 __user *) arg) == -EFAULT) ?

fs/orangefs/devorangefs-req.c

615

(__s32 __user *) arg) == -EFAULT) ?

fs/orangefs/devorangefs-req.c

620

(struct ORANGEFS_dev_map_desc __user *)

fs/orangefs/devorangefs-req.c

678

ret = copy_to_user((void __user *)arg,

fs/orangefs/devorangefs-req.c

688

return orangefs_debugfs_new_client_mask((void __user *)arg);

fs/orangefs/devorangefs-req.c

690

return orangefs_debugfs_new_client_string((void __user *)arg);

fs/orangefs/devorangefs-req.c

692

return orangefs_debugfs_new_debug((void __user *)arg);

fs/orangefs/devorangefs-req.c

739

if (copy_from_user(&d32, (void __user *)args, sizeof(d32)))

fs/orangefs/orangefs-bufmap.c

141

void __user *uaddr; /* user space address pointer */

fs/orangefs/orangefs-debugfs.c

1004

int orangefs_debugfs_new_debug(void __user *arg)

fs/orangefs/orangefs-debugfs.c

1010

(void __user *)arg,

fs/orangefs/orangefs-debugfs.c

121

char __user *,

fs/orangefs/orangefs-debugfs.c

126

const char __user *,

fs/orangefs/orangefs-debugfs.c

383

char __user *ubuf,

fs/orangefs/orangefs-debugfs.c

414

const char __user *ubuf,

fs/orangefs/orangefs-debugfs.c

927

int orangefs_debugfs_new_client_mask(void __user *arg)

fs/orangefs/orangefs-debugfs.c

933

(void __user *)arg,

fs/orangefs/orangefs-debugfs.c

951

int orangefs_debugfs_new_client_string(void __user *arg)

fs/orangefs/orangefs-debugfs.c

956

(void __user *)arg,

fs/orangefs/orangefs-debugfs.h

5

int orangefs_debugfs_new_client_mask(void __user *);

fs/orangefs/orangefs-debugfs.h

6

int orangefs_debugfs_new_client_string(void __user *);

fs/orangefs/orangefs-debugfs.h

7

int orangefs_debugfs_new_debug(void __user *);

fs/orangefs/protocol.h

345

void __user *ptr;

fs/pidfs.c

367

struct pidfd_info __user *uinfo = (struct pidfd_info __user *)arg;

fs/pidfs.c

543

__u32 __user *argp = (__u32 __user *)arg;

fs/pipe.c

1130

static int do_pipe2(int __user *fildes, int flags)

fs/pipe.c

1152

SYSCALL_DEFINE2(pipe2, int __user *, fildes, int, flags)

fs/pipe.c

1157

SYSCALL_DEFINE1(pipe, int __user *, fildes)

fs/pipe.c

734

return put_user(count, (int __user *)arg);

fs/pipe.c

747

pipe, (struct watch_notification_filter __user *)arg);

fs/proc/base.c

1062

static ssize_t auxv_read(struct file *file, char __user *buf,

fs/proc/base.c

1084

static ssize_t oom_adj_read(struct file *file, char __user *buf, size_t count,

fs/proc/base.c

1199

static ssize_t oom_adj_write(struct file *file, const char __user *buf,

fs/proc/base.c

1242

static ssize_t oom_score_adj_read(struct file *file, char __user *buf,

fs/proc/base.c

1258

static ssize_t oom_score_adj_write(struct file *file, const char __user *buf,

fs/proc/base.c

1294

static ssize_t proc_loginuid_read(struct file * file, char __user * buf,

fs/proc/base.c

1311

static ssize_t proc_loginuid_write(struct file * file, const char __user * buf,

fs/proc/base.c

1360

static ssize_t proc_sessionid_read(struct file * file, char __user * buf,

fs/proc/base.c

1383

static ssize_t proc_fault_inject_read(struct file * file, char __user * buf,

fs/proc/base.c

1402

const char __user * buf, size_t count, loff_t *ppos)

fs/proc/base.c

1437

static ssize_t proc_fail_nth_write(struct file *file, const char __user *buf,

fs/proc/base.c

1457

static ssize_t proc_fail_nth_read(struct file *file, char __user *buf,

fs/proc/base.c

1499

sched_write(struct file *file, const char __user *buf,

fs/proc/base.c

1548

sched_autogroup_write(struct file *file, const char __user *buf,

fs/proc/base.c

1617

static ssize_t timens_offsets_write(struct file *file, const char __user *buf,

fs/proc/base.c

1704

static ssize_t comm_write(struct file *file, const char __user *buf,

fs/proc/base.c

1815

static int do_proc_readlink(const struct path *path, char __user *buffer, int buflen)

fs/proc/base.c

1839

static int proc_pid_readlink(struct dentry * dentry, char __user * buffer, int buflen)

fs/proc/base.c

246

static ssize_t get_mm_proctitle(struct mm_struct *mm, char __user *buf,

fs/proc/base.c

2567

static ssize_t timerslack_ns_write(struct file *file, const char __user *buf,

fs/proc/base.c

2745

static ssize_t proc_pid_attr_read(struct file * file, char __user * buf,

fs/proc/base.c

2766

static ssize_t proc_pid_attr_write(struct file * file, const char __user * buf,

fs/proc/base.c

283

static ssize_t get_mm_cmdline(struct mm_struct *mm, char __user *buf,

fs/proc/base.c

2923

static ssize_t proc_coredump_filter_read(struct file *file, char __user *buf,

fs/proc/base.c

2953

const char __user *buf,

fs/proc/base.c

370

static ssize_t get_task_cmdline(struct task_struct *tsk, char __user *buf,

fs/proc/base.c

385

static ssize_t proc_pid_cmdline_read(struct file *file, char __user *buf,

fs/proc/base.c

560

static ssize_t lstats_write(struct file *file, const char __user *buf,

fs/proc/base.c

880

static ssize_t mem_rw(struct file *file, char __user *buf,

fs/proc/base.c

937

static ssize_t mem_read(struct file *file, char __user *buf,

fs/proc/base.c

943

static ssize_t mem_write(struct file *file, const char __user *buf,

fs/proc/base.c

946

return mem_rw(file, (char __user*)buf, count, ppos, 1);

fs/proc/base.c

987

static ssize_t environ_read(struct file *file, char __user *buf,

fs/proc/generic.c

829

ssize_t proc_simple_write(struct file *f, const char __user *ubuf, size_t size,

fs/proc/inode.c

304

static ssize_t pde_read(struct proc_dir_entry *pde, struct file *file, char __user *buf, size_t count, loff_t *ppos)

fs/proc/inode.c

312

static ssize_t proc_reg_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

fs/proc/inode.c

326

static ssize_t pde_write(struct proc_dir_entry *pde, struct file *file, const char __user *buf, size_t count, loff_t *ppos)

fs/proc/inode.c

334

static ssize_t proc_reg_write(struct file *file, const char __user *buf, size_t count, loff_t *ppos)

fs/proc/internal.h

301

extern ssize_t proc_simple_write(struct file *, const char __user *, size_t, loff_t *);

fs/proc/kmsg.c

31

static ssize_t kmsg_read(struct file *file, char __user *buf,

fs/proc/namespaces.c

78

static int proc_ns_readlink(struct dentry *dentry, char __user *buffer, int buflen)

fs/proc/page.c

117

*ppos += (char __user *)out - buf;

fs/proc/page.c

119

ret = (char __user *)out - buf;

fs/proc/page.c

128

static ssize_t kpagecount_read(struct file *file, char __user *buf,

fs/proc/page.c

265

static ssize_t kpageflags_read(struct file *file, char __user *buf,

fs/proc/page.c

278

static ssize_t kpagecgroup_read(struct file *file, char __user *buf,

fs/proc/page.c

61

static ssize_t kpage_read(struct file *file, char __user *buf,

fs/proc/page.c

66

u64 __user *out = (u64 __user *)buf;

fs/proc/task_mmu.c

1855

static ssize_t clear_refs_write(struct file *file, const char __user *buf,

fs/proc/task_mmu.c

2300

static ssize_t pagemap_read(struct file *file, char __user *buf,

fs/proc/task_mmu.c

2426

struct page_region __user *vec_out;

fs/proc/task_mmu.c

3100

if (copy_from_user(arg, (void __user *)uarg, sizeof(*arg)))

fs/proc/task_mmu.c

3120

if (!access_ok((void __user *)(long)arg->start, arg->end - arg->start))

fs/proc/task_mmu.c

3126

if (arg->vec && !access_ok((void __user *)(long)arg->vec,

fs/proc/task_mmu.c

3142

struct pm_scan_arg __user *uarg = (void __user *)uargl;

fs/proc/task_mmu.c

3162

p->vec_out = (struct page_region __user *)(long)p->arg.vec;

fs/proc/task_mmu.c

685

static int do_procmap_query(struct mm_struct *mm, void __user *uarg)

fs/proc/task_mmu.c

696

if (copy_from_user(&usize, (void __user *)uarg, sizeof(usize)))

fs/proc/task_mmu.c

857

return do_procmap_query(priv->lock_ctx.mm, (void __user *)arg);

fs/pstore/ftrace.c

118

static ssize_t pstore_ftrace_knob_write(struct file *f, const char __user *buf,

fs/pstore/ftrace.c

138

static ssize_t pstore_ftrace_knob_read(struct file *f, char __user *buf,

fs/pstore/inode.c

132

static ssize_t pstore_file_read(struct file *file, char __user *userbuf,

fs/pstore/platform.c

437

const char __user *buf)

fs/pstore/pmsg.c

14

static ssize_t write_pmsg(struct file *file, const char __user *buf,

fs/pstore/ram.c

398

const char __user *buf)

fs/pstore/ram_core.c

281

const void __user *s, unsigned int start, unsigned int count)

fs/pstore/ram_core.c

355

const void __user *s, unsigned int count)

fs/pstore/ram_internal.h

91

const void __user *s, unsigned int count);

fs/quota/quota.c

107

static int quota_getfmt(struct super_block *sb, int type, void __user *addr)

fs/quota/quota.c

119

static int quota_getinfo(struct super_block *sb, int type, void __user *addr)

fs/quota/quota.c

147

static int quota_setinfo(struct super_block *sb, int type, void __user *addr)

fs/quota/quota.c

202

void __user *addr)

fs/quota/quota.c

220

struct compat_if_dqblk __user *compat_dqblk = addr;

fs/quota/quota.c

238

void __user *addr)

fs/quota/quota.c

288

void __user *addr)

fs/quota/quota.c

295

struct compat_if_dqblk __user *compat_dqblk = addr;

fs/quota/quota.c

313

static int quota_enable(struct super_block *sb, void __user *addr)

fs/quota/quota.c

324

static int quota_disable(struct super_block *sb, void __user *addr)

fs/quota/quota.c

407

static int compat_copy_fs_qfilestat(struct compat_fs_qfilestat __user *to,

fs/quota/quota.c

416

static int compat_copy_fs_quota_stat(struct compat_fs_quota_stat __user *to,

fs/quota/quota.c

434

static int quota_getxstate(struct super_block *sb, int type, void __user *addr)

fs/quota/quota.c

497

static int quota_getxstatev(struct super_block *sb, int type, void __user *addr)

fs/quota/quota.c

625

void __user *addr)

fs/quota/quota.c

706

void __user *addr)

fs/quota/quota.c

732

void __user *addr)

fs/quota/quota.c

755

static int quota_rmxquota(struct super_block *sb, void __user *addr)

fs/quota/quota.c

768

void __user *addr, const struct path *path)

fs/quota/quota.c

866

static struct super_block *quotactl_block(const char __user *special, int cmd)

fs/quota/quota.c

917

SYSCALL_DEFINE4(quotactl, unsigned int, cmd, const char __user *, special,

fs/quota/quota.c

918

qid_t, id, void __user *, addr)

fs/quota/quota.c

974

qid_t, id, void __user *, addr)

fs/read_write.c

1029

static ssize_t vfs_writev(struct file *file, const struct iovec __user *vec,

fs/read_write.c

1069

static ssize_t do_readv(unsigned long fd, const struct iovec __user *vec,

fs/read_write.c

1092

static ssize_t do_writev(unsigned long fd, const struct iovec __user *vec,

fs/read_write.c

1121

static ssize_t do_preadv(unsigned long fd, const struct iovec __user *vec,

fs/read_write.c

1142

static ssize_t do_pwritev(unsigned long fd, const struct iovec __user *vec,

fs/read_write.c

1163

SYSCALL_DEFINE3(readv, unsigned long, fd, const struct iovec __user *, vec,

fs/read_write.c

1169

SYSCALL_DEFINE3(writev, unsigned long, fd, const struct iovec __user *, vec,

fs/read_write.c

1175

SYSCALL_DEFINE5(preadv, unsigned long, fd, const struct iovec __user *, vec,

fs/read_write.c

1183

SYSCALL_DEFINE6(preadv2, unsigned long, fd, const struct iovec __user *, vec,

fs/read_write.c

1195

SYSCALL_DEFINE5(pwritev, unsigned long, fd, const struct iovec __user *, vec,

fs/read_write.c

1203

SYSCALL_DEFINE6(pwritev2, unsigned long, fd, const struct iovec __user *, vec,

fs/read_write.c

1223

const struct iovec __user *, vec,

fs/read_write.c

1231

const struct iovec __user *, vec,

fs/read_write.c

1241

const struct iovec __user *, vec,

fs/read_write.c

1251

const struct iovec __user *, vec,

fs/read_write.c

1264

const struct iovec __user *, vec,

fs/read_write.c

1272

const struct iovec __user *,vec,

fs/read_write.c

1282

const struct iovec __user *, vec,

fs/read_write.c

1292

const struct iovec __user *,vec,

fs/read_write.c

1399

SYSCALL_DEFINE4(sendfile, int, out_fd, int, in_fd, off_t __user *, offset, size_t, count)

fs/read_write.c

1418

SYSCALL_DEFINE4(sendfile64, int, out_fd, int, in_fd, loff_t __user *, offset, size_t, count)

fs/read_write.c

1437

compat_off_t __user *, offset, compat_size_t, count)

fs/read_write.c

1457

compat_loff_t __user *, offset, compat_size_t, count)

fs/read_write.c

1649

SYSCALL_DEFINE6(copy_file_range, int, fd_in, loff_t __user *, off_in,

fs/read_write.c

1650

int, fd_out, loff_t __user *, off_out,

fs/read_write.c

427

unsigned long, offset_low, loff_t __user *, result,

fs/read_write.c

483

static ssize_t new_sync_read(struct file *filp, char __user *buf, size_t len, loff_t *ppos)

fs/read_write.c

554

ssize_t vfs_read(struct file *file, char __user *buf, size_t count, loff_t *pos)

fs/read_write.c

585

static ssize_t new_sync_write(struct file *filp, const char __user *buf, size_t len, loff_t *ppos)

fs/read_write.c

593

iov_iter_ubuf(&iter, ITER_SOURCE, (void __user *)buf, len);

fs/read_write.c

667

ssize_t vfs_write(struct file *file, const char __user *buf, size_t count, loff_t *pos)

fs/read_write.c

705

ssize_t ksys_read(unsigned int fd, char __user *buf, size_t count)

fs/read_write.c

723

SYSCALL_DEFINE3(read, unsigned int, fd, char __user *, buf, size_t, count)

fs/read_write.c

728

ssize_t ksys_write(unsigned int fd, const char __user *buf, size_t count)

fs/read_write.c

747

SYSCALL_DEFINE3(write, unsigned int, fd, const char __user *, buf,

fs/read_write.c

753

ssize_t ksys_pread64(unsigned int fd, char __user *buf, size_t count,

fs/read_write.c

769

SYSCALL_DEFINE4(pread64, unsigned int, fd, char __user *, buf,

fs/read_write.c

776

COMPAT_SYSCALL_DEFINE5(pread64, unsigned int, fd, char __user *, buf,

fs/read_write.c

783

ssize_t ksys_pwrite64(unsigned int fd, const char __user *buf,

fs/read_write.c

799

SYSCALL_DEFINE4(pwrite64, unsigned int, fd, const char __user *, buf,

fs/read_write.c

806

COMPAT_SYSCALL_DEFINE5(pwrite64, unsigned int, fd, const char __user *, buf,

fs/read_write.c

991

static ssize_t vfs_readv(struct file *file, const struct iovec __user *vec,

fs/readdir.c

179

struct old_linux_dirent __user * dirent;

fs/readdir.c

188

struct old_linux_dirent __user * dirent;

fs/readdir.c

216

struct old_linux_dirent __user *, dirent, unsigned int, count)

fs/readdir.c

251

struct linux_dirent __user * current_dir;

fs/readdir.c

259

struct linux_dirent __user *dirent, *prev;

fs/readdir.c

285

prev = (void __user *) dirent - prev_reclen;

fs/readdir.c

291

unsafe_put_user(d_type, (char __user *)dirent + reclen - 1, efault);

fs/readdir.c

295

buf->current_dir = (void __user *)dirent + reclen;

fs/readdir.c

305

struct linux_dirent __user *, dirent, unsigned int, count)

fs/readdir.c

323

struct linux_dirent __user * lastdirent;

fs/readdir.c

324

lastdirent = (void __user *)buf.current_dir - buf.prev_reclen;

fs/readdir.c

336

struct linux_dirent64 __user * current_dir;

fs/readdir.c

344

struct linux_dirent64 __user *dirent, *prev;

fs/readdir.c

364

prev = (void __user *)dirent - prev_reclen;

fs/readdir.c

375

buf->current_dir = (void __user *)dirent + reclen;

fs/readdir.c

385

struct linux_dirent64 __user *, dirent, unsigned int, count)

fs/readdir.c

403

struct linux_dirent64 __user * lastdirent;

fs/readdir.c

406

lastdirent = (void __user *) buf.current_dir - buf.prev_reclen;

fs/readdir.c

425

struct compat_old_linux_dirent __user *dirent;

fs/readdir.c

435

struct compat_old_linux_dirent __user *dirent;

fs/readdir.c

463

struct compat_old_linux_dirent __user *, dirent, unsigned int, count)

fs/readdir.c

492

struct compat_linux_dirent __user *current_dir;

fs/readdir.c

500

struct compat_linux_dirent __user *dirent, *prev;

fs/readdir.c

526

prev = (void __user *) dirent - prev_reclen;

fs/readdir.c

531

unsafe_put_user(d_type, (char __user *)dirent + reclen - 1, efault);

fs/readdir.c

536

buf->current_dir = (void __user *)dirent + reclen;

fs/readdir.c

545

struct compat_linux_dirent __user *, dirent, unsigned int, count)

fs/readdir.c

563

struct compat_linux_dirent __user * lastdirent;

fs/readdir.c

564

lastdirent = (void __user *)buf.current_dir - buf.prev_reclen;

fs/readdir.c

79

char __user *dst = (_dst); \

fs/resctrl/pseudo_lock.c

749

const char __user *user_buf,

fs/select.c

1019

struct pollfd __user *_ufds = ufds;

fs/select.c

1044

struct pollfd __user *ufds = restart_block->poll.ufds;

fs/select.c

1060

SYSCALL_DEFINE3(poll, struct pollfd __user *, ufds, unsigned int, nfds,

fs/select.c

1092

SYSCALL_DEFINE5(ppoll, struct pollfd __user *, ufds, unsigned int, nfds,

fs/select.c

1093

struct __kernel_timespec __user *, tsp, const sigset_t __user *, sigmask,

fs/select.c

1118

SYSCALL_DEFINE5(ppoll_time32, struct pollfd __user *, ufds, unsigned int, nfds,

fs/select.c

1119

struct old_timespec32 __user *, tsp, const sigset_t __user *, sigmask,

fs/select.c

1151

int compat_get_fd_set(unsigned long nr, compat_ulong_t __user *ufdset,

fs/select.c

1163

int compat_set_fd_set(unsigned long nr, compat_ulong_t __user *ufdset,

fs/select.c

1185

static int compat_core_sys_select(int n, compat_ulong_t __user *inp,

fs/select.c

1186

compat_ulong_t __user *outp, compat_ulong_t __user *exp,

fs/select.c

1256

static int do_compat_select(int n, compat_ulong_t __user *inp,

fs/select.c

1257

compat_ulong_t __user *outp, compat_ulong_t __user *exp,

fs/select.c

1258

struct old_timeval32 __user *tvp)

fs/select.c

1279

COMPAT_SYSCALL_DEFINE5(select, int, n, compat_ulong_t __user *, inp,

fs/select.c

1280

compat_ulong_t __user *, outp, compat_ulong_t __user *, exp,

fs/select.c

1281

struct old_timeval32 __user *, tvp)

fs/select.c

1294

COMPAT_SYSCALL_DEFINE1(old_select, struct compat_sel_arg_struct __user *, arg)

fs/select.c

1304

static long do_compat_pselect(int n, compat_ulong_t __user *inp,

fs/select.c

1305

compat_ulong_t __user *outp, compat_ulong_t __user *exp,

fs/select.c

1306

void __user *tsp, compat_sigset_t __user *sigmask,

fs/select.c

1344

struct compat_sigset_argpack __user *from)

fs/select.c

1357

COMPAT_SYSCALL_DEFINE6(pselect6_time64, int, n, compat_ulong_t __user *, inp,

fs/select.c

1358

compat_ulong_t __user *, outp, compat_ulong_t __user *, exp,

fs/select.c

1359

struct __kernel_timespec __user *, tsp, void __user *, sig)

fs/select.c

1372

COMPAT_SYSCALL_DEFINE6(pselect6_time32, int, n, compat_ulong_t __user *, inp,

fs/select.c

1373

compat_ulong_t __user *, outp, compat_ulong_t __user *, exp,

fs/select.c

1374

struct old_timespec32 __user *, tsp, void __user *, sig)

fs/select.c

1388

COMPAT_SYSCALL_DEFINE5(ppoll_time32, struct pollfd __user *, ufds,

fs/select.c

1389

unsigned int, nfds, struct old_timespec32 __user *, tsp,

fs/select.c

1390

const compat_sigset_t __user *, sigmask, compat_size_t, sigsetsize)

fs/select.c

1414

COMPAT_SYSCALL_DEFINE5(ppoll_time64, struct pollfd __user *, ufds,

fs/select.c

1415

unsigned int, nfds, struct __kernel_timespec __user *, tsp,

fs/select.c

1416

const compat_sigset_t __user *, sigmask, compat_size_t, sigsetsize)

fs/select.c

296

void __user *p,

fs/select.c

387

int get_fd_set(unsigned long nr, void __user *ufdset, unsigned long *fdset)

fs/select.c

398

set_fd_set(unsigned long nr, void __user *ufdset, unsigned long *fdset)

fs/select.c

621

int core_sys_select(int n, fd_set __user *inp, fd_set __user *outp,

fs/select.c

622

fd_set __user *exp, struct timespec64 *end_time)

fs/select.c

700

static int kern_select(int n, fd_set __user *inp, fd_set __user *outp,

fs/select.c

701

fd_set __user *exp, struct __kernel_old_timeval __user *tvp)

fs/select.c

733

SYSCALL_DEFINE5(select, int, n, fd_set __user *, inp, fd_set __user *, outp,

fs/select.c

734

fd_set __user *, exp, struct __kernel_old_timeval __user *, tvp)

fs/select.c

739

static long do_pselect(int n, fd_set __user *inp, fd_set __user *outp,

fs/select.c

740

fd_set __user *exp, void __user *tsp,

fs/select.c

741

const sigset_t __user *sigmask, size_t sigsetsize,

fs/select.c

781

sigset_t __user *p;

fs/select.c

786

struct sigset_argpack __user *from)

fs/select.c

800

SYSCALL_DEFINE6(pselect6, int, n, fd_set __user *, inp, fd_set __user *, outp,

fs/select.c

801

fd_set __user *, exp, struct __kernel_timespec __user *, tsp,

fs/select.c

802

void __user *, sig)

fs/select.c

814

SYSCALL_DEFINE6(pselect6_time32, int, n, fd_set __user *, inp, fd_set __user *, outp,

fs/select.c

815

fd_set __user *, exp, struct old_timespec32 __user *, tsp,

fs/select.c

816

void __user *, sig)

fs/select.c

831

fd_set __user *inp, *outp, *exp;

fs/select.c

832

struct __kernel_old_timeval __user *tvp;

fs/select.c

835

SYSCALL_DEFINE1(old_select, struct sel_arg_struct __user *, arg)

fs/select.c

974

static int do_sys_poll(struct pollfd __user *ufds, unsigned int nfds,

fs/seq_file.c

152

ssize_t seq_read(struct file *file, char __user *buf, size_t size, loff_t *ppos)

fs/signalfd.c

299

SYSCALL_DEFINE4(signalfd4, int, ufd, sigset_t __user *, user_mask,

fs/signalfd.c

311

SYSCALL_DEFINE3(signalfd, int, ufd, sigset_t __user *, user_mask,

fs/signalfd.c

325

const compat_sigset_t __user *user_mask,

fs/signalfd.c

338

const compat_sigset_t __user *, user_mask,

fs/signalfd.c

346

const compat_sigset_t __user *, user_mask,

fs/smb/client/cifs_debug.c

1021

static ssize_t cifsFYI_proc_write(struct file *file, const char __user *buffer,

fs/smb/client/cifs_debug.c

1061

const char __user *buffer, size_t count, loff_t *ppos)

fs/smb/client/cifs_debug.c

1092

const char __user *buffer, size_t count, loff_t *ppos)

fs/smb/client/cifs_debug.c

1122

static ssize_t traceSMB_proc_write(struct file *file, const char __user *buffer,

fs/smb/client/cifs_debug.c

1174

const char __user *buffer, size_t count, loff_t *ppos)

fs/smb/client/cifs_debug.c

366

static ssize_t cifs_debug_dirs_proc_write(struct file *file, const char __user *buffer,

fs/smb/client/cifs_debug.c

725

const char __user *buffer, size_t count, loff_t *ppos)

fs/smb/client/cifs_debug.c

878

static ssize_t name##_write(struct file *file, const char __user *buffer, \

fs/smb/client/cifsglob.h

543

struct cifsFileInfo *src_file, void __user *);

fs/smb/client/cifsglob.h

545

void __user *pbuf, bool return_changes);

fs/smb/client/dfs_cache.c

191

static ssize_t dfscache_proc_write(struct file *file, const char __user *buffer,

fs/smb/client/ioctl.c

226

static long smb_mnt_get_tcon_info(struct cifs_tcon *tcon, void __user *arg)

fs/smb/client/ioctl.c

241

void __user *arg)

fs/smb/client/ioctl.c

287

if (get_user(flags, (__u32 __user *)arg))

fs/smb/client/ioctl.c

346

static int cifs_dump_full_key(struct cifs_tcon *tcon, struct smb3_full_key_debug_info __user *in)

fs/smb/client/ioctl.c

352

u8 __user *end;

fs/smb/client/ioctl.c

501

(int __user *)arg);

fs/smb/client/ioctl.c

511

(int __user *)arg);

fs/smb/client/ioctl.c

519

if (get_user(ExtAttrBits, (int __user *)arg)) {

fs/smb/client/ioctl.c

580

rc = smb_mnt_get_fsinfo(xid, tcon, (void __user *)arg);

fs/smb/client/ioctl.c

590

rc = smb_mnt_get_tcon_info(tcon, (void __user *)arg);

fs/smb/client/ioctl.c

603

pSMBFile, (void __user *)arg);

fs/smb/client/ioctl.c

638

if (copy_to_user((void __user *)arg, &pkey_inf,

fs/smb/client/ioctl.c

663

rc = cifs_dump_full_key(tcon, (void __user *)arg);

fs/smb/client/ioctl.c

681

filep, (void __user *)arg,

fs/smb/client/ioctl.c

703

filep, (void __user *)arg,

fs/smb/client/smb2ops.c

1588

char __user *arg = (char __user *)p;

fs/smb/client/smb2ops.c

1590

struct smb_query_info __user *pqi;

fs/smb/client/smb2ops.c

1770

pqi = (struct smb_query_info __user *)arg;

fs/smb/client/smb2ops.c

1788

if (copy_to_user((void __user *)pqi + sizeof(struct smb_query_info),

fs/smb/client/smb2ops.c

1793

pqi = (struct smb_query_info __user *)arg;

fs/smb/client/smb2ops.c

2318

struct cifsFileInfo *cfile, void __user *ioc_buf)

fs/smb/client/smb2ops.c

2334

if (get_user(ret_data_len, (unsigned int __user *)ioc_buf))

fs/smb/client/smb2ops.c

2402

void __user *ioc_buf, bool return_changes)

fs/smb/client/smb2ops.c

2405

struct smb3_notify_info __user *pnotify_buf;

fs/smb/client/smb2ops.c

2470

pnotify_buf = (struct smb3_notify_info __user *)ioc_buf;

fs/splice.c

1397

static ssize_t __do_splice(struct file *in, loff_t __user *off_in,

fs/splice.c

1398

struct file *out, loff_t __user *off_out,

fs/splice.c

1578

SYSCALL_DEFINE4(vmsplice, int, fd, const struct iovec __user *, uiov,

fs/splice.c

1616

SYSCALL_DEFINE6(splice, int, fd_in, loff_t __user *, off_in,

fs/splice.c

1617

int, fd_out, loff_t __user *, off_out,

fs/stat.c

365

int vfs_fstatat(int dfd, const char __user *filename,

fs/stat.c

383

static int cp_old_stat(struct kstat *stat, struct __old_kernel_stat __user * statbuf)

fs/stat.c

420

SYSCALL_DEFINE2(stat, const char __user *, filename,

fs/stat.c

421

struct __old_kernel_stat __user *, statbuf)

fs/stat.c

433

SYSCALL_DEFINE2(lstat, const char __user *, filename,

fs/stat.c

434

struct __old_kernel_stat __user *, statbuf)

fs/stat.c

446

SYSCALL_DEFINE2(fstat, unsigned int, fd, struct __old_kernel_stat __user *, statbuf)

fs/stat.c

466

static int cp_new_stat(struct kstat *stat, struct stat __user *statbuf)

fs/stat.c

505

SYSCALL_DEFINE2(newstat, const char __user *, filename,

fs/stat.c

506

struct stat __user *, statbuf)

fs/stat.c

518

SYSCALL_DEFINE2(newlstat, const char __user *, filename,

fs/stat.c

519

struct stat __user *, statbuf)

fs/stat.c

532

SYSCALL_DEFINE4(newfstatat, int, dfd, const char __user *, filename,

fs/stat.c

533

struct stat __user *, statbuf, int, flag)

fs/stat.c

546

SYSCALL_DEFINE2(newfstat, unsigned int, fd, struct stat __user *, statbuf)

fs/stat.c

559

static int do_readlinkat(int dfd, const char __user *pathname,

fs/stat.c

560

char __user *buf, int bufsiz)

fs/stat.c

596

SYSCALL_DEFINE4(readlinkat, int, dfd, const char __user *, pathname,

fs/stat.c

597

char __user *, buf, int, bufsiz)

fs/stat.c

602

SYSCALL_DEFINE3(readlink, const char __user *, path, char __user *, buf,

fs/stat.c

616

static long cp_new_stat64(struct kstat *stat, struct stat64 __user *statbuf)

fs/stat.c

651

SYSCALL_DEFINE2(stat64, const char __user *, filename,

fs/stat.c

652

struct stat64 __user *, statbuf)

fs/stat.c

663

SYSCALL_DEFINE2(lstat64, const char __user *, filename,

fs/stat.c

664

struct stat64 __user *, statbuf)

fs/stat.c

675

SYSCALL_DEFINE2(fstat64, unsigned long, fd, struct stat64 __user *, statbuf)

fs/stat.c

686

SYSCALL_DEFINE4(fstatat64, int, dfd, const char __user *, filename,

fs/stat.c

687

struct stat64 __user *, statbuf, int, flag)

fs/stat.c

700

cp_statx(const struct kstat *stat, struct statx __user *buffer)

fs/stat.c

745

unsigned int mask, struct statx __user *buffer)

fs/stat.c

769

struct statx __user *buffer)

fs/stat.c

805

int, dfd, const char __user *, filename, unsigned, flags,

fs/stat.c

807

struct statx __user *, buffer)

fs/stat.c

818

static int cp_compat_stat(struct kstat *stat, struct compat_stat __user *ubuf)

fs/stat.c

853

COMPAT_SYSCALL_DEFINE2(newstat, const char __user *, filename,

fs/stat.c

854

struct compat_stat __user *, statbuf)

fs/stat.c

865

COMPAT_SYSCALL_DEFINE2(newlstat, const char __user *, filename,

fs/stat.c

866

struct compat_stat __user *, statbuf)

fs/stat.c

879

const char __user *, filename,

fs/stat.c

880

struct compat_stat __user *, statbuf, int, flag)

fs/stat.c

893

struct compat_stat __user *, statbuf)

fs/statfs.c

125

static int do_statfs_native(struct kstatfs *st, struct statfs __user *p)

fs/statfs.c

167

static int do_statfs64(struct kstatfs *st, struct statfs64 __user *p)

fs/statfs.c

191

SYSCALL_DEFINE2(statfs, const char __user *, pathname, struct statfs __user *, buf)

fs/statfs.c

200

SYSCALL_DEFINE3(statfs64, const char __user *, pathname, size_t, sz, struct statfs64 __user *, buf)

fs/statfs.c

212

SYSCALL_DEFINE2(fstatfs, unsigned int, fd, struct statfs __user *, buf)

fs/statfs.c

221

SYSCALL_DEFINE3(fstatfs64, unsigned int, fd, size_t, sz, struct statfs64 __user *, buf)

fs/statfs.c

247

SYSCALL_DEFINE2(ustat, unsigned, dev, struct ustat __user *, ubuf)

fs/statfs.c

266

static int put_compat_statfs(struct compat_statfs __user *ubuf, struct kstatfs *kbuf)

fs/statfs.c

304

COMPAT_SYSCALL_DEFINE2(statfs, const char __user *, pathname, struct compat_statfs __user *, buf)

fs/statfs.c

313

COMPAT_SYSCALL_DEFINE2(fstatfs, unsigned int, fd, struct compat_statfs __user *, buf)

fs/statfs.c

322

static int put_compat_statfs64(struct compat_statfs64 __user *ubuf, struct kstatfs *kbuf)

fs/statfs.c

347

int kcompat_sys_statfs64(const char __user * pathname, compat_size_t sz, struct compat_statfs64 __user * buf)

fs/statfs.c

361

COMPAT_SYSCALL_DEFINE3(statfs64, const char __user *, pathname, compat_size_t, sz, struct compat_statfs64 __user *, buf)

fs/statfs.c

366

int kcompat_sys_fstatfs64(unsigned int fd, compat_size_t sz, struct compat_statfs64 __user * buf)

fs/statfs.c

380

COMPAT_SYSCALL_DEFINE3(fstatfs64, unsigned int, fd, compat_size_t, sz, struct compat_statfs64 __user *, buf)

fs/statfs.c

390

COMPAT_SYSCALL_DEFINE2(ustat, unsigned, dev, struct compat_ustat __user *, u)

fs/statfs.c

97

int user_statfs(const char __user *pathname, struct kstatfs *st)

fs/timerfd.c

390

if (copy_from_user(&ticks, (u64 __user *)arg, sizeof(ticks)))

fs/timerfd.c

568

const struct __kernel_itimerspec __user *, utmr,

fs/timerfd.c

569

struct __kernel_itimerspec __user *, otmr)

fs/timerfd.c

585

SYSCALL_DEFINE2(timerfd_gettime, int, ufd, struct __kernel_itimerspec __user *, otmr)

fs/timerfd.c

596

const struct old_itimerspec32 __user *, utmr,

fs/timerfd.c

597

struct old_itimerspec32 __user *, otmr)

fs/timerfd.c

613

struct old_itimerspec32 __user *, otmr)

fs/tracefs/inode.c

73

static ssize_t default_read_file(struct file *file, char __user *buf,

fs/tracefs/inode.c

79

static ssize_t default_write_file(struct file *file, const char __user *buf,

fs/ubifs/debug.c

2692

static int provide_user_output(int val, char __user *u, size_t count,

fs/ubifs/debug.c

2707

static ssize_t dfs_file_read(struct file *file, char __user *u, size_t count,

fs/ubifs/debug.c

2744

static int interpret_user_input(const char __user *u, size_t count)

fs/ubifs/debug.c

2761

static ssize_t dfs_file_write(struct file *file, const char __user *u,

fs/ubifs/debug.c

2901

static ssize_t dfs_global_file_read(struct file *file, char __user *u,

fs/ubifs/debug.c

2925

static ssize_t dfs_global_file_write(struct file *file, const char __user *u,

fs/ubifs/ioctl.c

184

return fscrypt_ioctl_set_policy(file, (const void __user *)arg);

fs/ubifs/ioctl.c

187

return fscrypt_ioctl_get_policy(file, (void __user *)arg);

fs/ubifs/ioctl.c

190

return fscrypt_ioctl_get_policy_ex(file, (void __user *)arg);

fs/ubifs/ioctl.c

193

return fscrypt_ioctl_add_key(file, (void __user *)arg);

fs/ubifs/ioctl.c

196

return fscrypt_ioctl_remove_key(file, (void __user *)arg);

fs/ubifs/ioctl.c

200

(void __user *)arg);

fs/ubifs/ioctl.c

202

return fscrypt_ioctl_get_key_status(file, (void __user *)arg);

fs/ubifs/ioctl.c

205

return fscrypt_ioctl_get_nonce(file, (void __user *)arg);

fs/udf/file.c

148

if (copy_to_user((char __user *)arg,

fs/udf/file.c

155

if (get_user(old_block, (long __user *)arg))

fs/udf/file.c

160

result = put_user(new_block, (long __user *)arg);

fs/udf/file.c

163

return put_user(UDF_I(inode)->i_lenEAttr, (int __user *)arg);

fs/udf/file.c

165

return copy_to_user((char __user *)arg,

fs/utimes.c

134

long do_utimes(int dfd, const char __user *filename, struct timespec64 *times,

fs/utimes.c

142

SYSCALL_DEFINE4(utimensat, int, dfd, const char __user *, filename,

fs/utimes.c

143

struct __kernel_timespec __user *, utimes, int, flags)

fs/utimes.c

168

static long do_futimesat(int dfd, const char __user *filename,

fs/utimes.c

169

struct __kernel_old_timeval __user *utimes)

fs/utimes.c

197

SYSCALL_DEFINE3(futimesat, int, dfd, const char __user *, filename,

fs/utimes.c

198

struct __kernel_old_timeval __user *, utimes)

fs/utimes.c

203

SYSCALL_DEFINE2(utimes, char __user *, filename,

fs/utimes.c

204

struct __kernel_old_timeval __user *, utimes)

fs/utimes.c

209

SYSCALL_DEFINE2(utime, char __user *, filename, struct utimbuf __user *, times)

fs/utimes.c

230

SYSCALL_DEFINE2(utime32, const char __user *, filename,

fs/utimes.c

231

struct old_utimbuf32 __user *, t)

fs/utimes.c

246

SYSCALL_DEFINE4(utimensat_time32, unsigned int, dfd, const char __user *, filename, struct old_timespec32 __user *, t, int, flags)

fs/utimes.c

262

static long do_compat_futimesat(unsigned int dfd, const char __user *filename,

fs/utimes.c

263

struct old_timeval32 __user *t)

fs/utimes.c

283

const char __user *, filename,

fs/utimes.c

284

struct old_timeval32 __user *, t)

fs/utimes.c

289

SYSCALL_DEFINE2(utimes_time32, const char __user *, filename, struct old_timeval32 __user *, t)

fs/utimes.c

82

static int do_utimes_path(int dfd, const char __user *filename,

fs/verity/enable.c

326

int fsverity_ioctl_enable(struct file *filp, const void __user *uarg)

fs/verity/measure.c

26

int fsverity_ioctl_measure(struct file *filp, void __user *_uarg)

fs/verity/measure.c

29

struct fsverity_digest __user *uarg = _uarg;

fs/verity/read_metadata.c

108

void __user *buf, u64 offset, int length)

fs/verity/read_metadata.c

129

void __user *buf, u64 offset, int length)

fs/verity/read_metadata.c

161

int fsverity_ioctl_read_metadata(struct file *filp, const void __user *uarg)

fs/verity/read_metadata.c

167

void __user *buf;

fs/verity/read_metadata.c

18

void __user *buf, u64 offset, int length)

fs/verity/read_metadata.c

91

static int fsverity_read_buffer(void __user *dst, u64 offset, int length,

fs/xattr.c

1004

SYSCALL_DEFINE5(listxattrat, int, dfd, const char __user *, pathname,

fs/xattr.c

1006

char __user *, list, size_t, size)

fs/xattr.c

1011

SYSCALL_DEFINE3(listxattr, const char __user *, pathname, char __user *, list,

fs/xattr.c

1017

SYSCALL_DEFINE3(llistxattr, const char __user *, pathname, char __user *, list,

fs/xattr.c

1023

SYSCALL_DEFINE3(flistxattr, int, fd, char __user *, list, size_t, size)

fs/xattr.c

1075

static int path_removexattrat(int dfd, const char __user *pathname,

fs/xattr.c

1076

unsigned int at_flags, const char __user *name)

fs/xattr.c

1100

SYSCALL_DEFINE4(removexattrat, int, dfd, const char __user *, pathname,

fs/xattr.c

1101

unsigned int, at_flags, const char __user *, name)

fs/xattr.c

1106

SYSCALL_DEFINE2(removexattr, const char __user *, pathname,

fs/xattr.c

1107

const char __user *, name)

fs/xattr.c

1112

SYSCALL_DEFINE2(lremovexattr, const char __user *, pathname,

fs/xattr.c

1113

const char __user *, name)

fs/xattr.c

1118

SYSCALL_DEFINE2(fremovexattr, int, fd, const char __user *, name)

fs/xattr.c

615

int import_xattr_name(struct xattr_name *kname, const char __user *name)

fs/xattr.c

630

int setxattr_copy(const char __user *name, struct kernel_xattr_ctx *ctx)

fs/xattr.c

701

static int path_setxattrat(int dfd, const char __user *pathname,

fs/xattr.c

702

unsigned int at_flags, const char __user *name,

fs/xattr.c

703

const void __user *value, size_t size, int flags)

fs/xattr.c

740

SYSCALL_DEFINE6(setxattrat, int, dfd, const char __user *, pathname, unsigned int, at_flags,

fs/xattr.c

741

const char __user *, name, const struct xattr_args __user *, uargs,

fs/xattr.c

764

SYSCALL_DEFINE5(setxattr, const char __user *, pathname,

fs/xattr.c

765

const char __user *, name, const void __user *, value,

fs/xattr.c

771

SYSCALL_DEFINE5(lsetxattr, const char __user *, pathname,

fs/xattr.c

772

const char __user *, name, const void __user *, value,

fs/xattr.c

779

SYSCALL_DEFINE5(fsetxattr, int, fd, const char __user *, name,

fs/xattr.c

780

const void __user *,value, size_t, size, int, flags)

fs/xattr.c

846

static ssize_t path_getxattrat(int dfd, const char __user *pathname,

fs/xattr.c

847

unsigned int at_flags, const char __user *name,

fs/xattr.c

848

void __user *value, size_t size)

fs/xattr.c

880

SYSCALL_DEFINE6(getxattrat, int, dfd, const char __user *, pathname, unsigned int, at_flags,

fs/xattr.c

881

const char __user *, name, struct xattr_args __user *, uargs, size_t, usize)

fs/xattr.c

905

SYSCALL_DEFINE4(getxattr, const char __user *, pathname,

fs/xattr.c

906

const char __user *, name, void __user *, value, size_t, size)

fs/xattr.c

911

SYSCALL_DEFINE4(lgetxattr, const char __user *, pathname,

fs/xattr.c

912

const char __user *, name, void __user *, value, size_t, size)

fs/xattr.c

918

SYSCALL_DEFINE4(fgetxattr, int, fd, const char __user *, name,

fs/xattr.c

919

void __user *, value, size_t, size)

fs/xattr.c

928

listxattr(struct dentry *d, char __user *list, size_t size)

fs/xattr.c

957

ssize_t file_listxattr(struct file *f, char __user *list, size_t size)

fs/xattr.c

966

char __user *list, size_t size)

fs/xattr.c

983

static ssize_t path_listxattrat(int dfd, const char __user *pathname,

fs/xattr.c

984

unsigned int at_flags, char __user *list,

fs/xfs/libxfs/xfs_fs.h

440

__u64 __user *lastip; /* last inode # pointer */

fs/xfs/libxfs/xfs_fs.h

442

void __user *ubuffer;/* user buffer for inode desc. */

fs/xfs/libxfs/xfs_fs.h

443

__s32 __user *ocount; /* output count pointer */

fs/xfs/libxfs/xfs_fs.h

578

void __user *path; /* user pathname */

fs/xfs/libxfs/xfs_fs.h

580

void __user *ihandle;/* user supplied handle */

fs/xfs/libxfs/xfs_fs.h

582

void __user *ohandle;/* user buffer for handle */

fs/xfs/libxfs/xfs_fs.h

583

__u32 __user *ohandlen;/* user buffer length */

fs/xfs/libxfs/xfs_fs.h

631

void __user *buffer; /* returned names */

fs/xfs/libxfs/xfs_fs.h

640

void __user *am_attrname;

fs/xfs/libxfs/xfs_fs.h

641

void __user *am_attrvalue;

fs/xfs/libxfs/xfs_fs.h

649

struct xfs_attr_multiop __user *ops; /* attr_multi data */

fs/xfs/scrub/scrub.c

803

void __user *arg)

fs/xfs/scrub/scrub.c

897

void __user *arg)

fs/xfs/scrub/scrub.c

900

struct xfs_scrub_vec_head __user *uhead = arg;

fs/xfs/scrub/scrub.c

902

struct xfs_scrub_vec __user *uvectors;

fs/xfs/scrub/stats.c

244

char __user *ubuf,

fs/xfs/scrub/stats.c

287

const char __user *ubuf,

fs/xfs/scrub/xfs_scrub.h

13

int xfs_ioc_scrub_metadata(struct file *file, void __user *arg);

fs/xfs/scrub/xfs_scrub.h

14

int xfs_ioc_scrubv_metadata(struct file *file, void __user *arg);

fs/xfs/xfs_discard.c

813

struct fstrim_range __user *urange)

fs/xfs/xfs_discard.h

10

int xfs_ioc_trim(struct xfs_mount *mp, struct fstrim_range __user *fstrim);

fs/xfs/xfs_exchrange.c

796

struct xfs_exchange_range __user *argp)

fs/xfs/xfs_exchrange.c

840

struct xfs_commit_range __user *argp)

fs/xfs/xfs_exchrange.c

845

struct xfs_commit_range_fresh __user *user_f;

fs/xfs/xfs_exchrange.c

871

user_f = (struct xfs_commit_range_fresh __user *)&argp->file2_freshness;

fs/xfs/xfs_exchrange.c

885

struct xfs_commit_range __user *argp)

fs/xfs/xfs_exchrange.h

38

struct xfs_exchange_range __user *argp);

fs/xfs/xfs_exchrange.h

40

struct xfs_commit_range __user *argp);

fs/xfs/xfs_exchrange.h

42

struct xfs_commit_range __user *argp);

fs/xfs/xfs_fsmap.c

1303

struct fsmap_head __user *arg)

fs/xfs/xfs_fsmap.c

1347

struct fsmap __user *user_recs;

fs/xfs/xfs_fsmap.c

1407

struct fsmap __user *user_rec;

fs/xfs/xfs_fsmap.h

46

int xfs_ioc_getfsmap(struct xfs_inode *ip, struct fsmap_head __user *arg);

fs/xfs/xfs_handle.c

209

void __user *uhandle,

fs/xfs/xfs_handle.c

402

void __user *ubuf,

fs/xfs/xfs_handle.c

405

struct xfs_attrlist_cursor __user *ucursor)

fs/xfs/xfs_handle.c

471

struct xfs_fsop_attrlist_handlereq __user *p)

fs/xfs/xfs_handle.c

496

unsigned char __user *ubuf,

fs/xfs/xfs_handle.c

529

const unsigned char __user *ubuf,

fs/xfs/xfs_handle.c

565

void __user *uname,

fs/xfs/xfs_handle.c

566

void __user *value,

fs/xfs/xfs_handle.c

607

void __user *arg)

fs/xfs/xfs_handle.c

849

struct xfs_getparents __user *ureq)

fs/xfs/xfs_handle.c

879

struct xfs_getparents_by_handle __user *ureq)

fs/xfs/xfs_handle.h

11

struct xfs_fsop_attrlist_handlereq __user *p);

fs/xfs/xfs_handle.h

12

int xfs_attrmulti_by_handle(struct file *parfilp, void __user *arg);

fs/xfs/xfs_handle.h

20

uint32_t opcode, void __user *uname, void __user *value,

fs/xfs/xfs_handle.h

22

int xfs_ioc_attr_list(struct xfs_inode *dp, void __user *ubuf,

fs/xfs/xfs_handle.h

24

struct xfs_attrlist_cursor __user *ucursor);

fs/xfs/xfs_handle.h

26

struct dentry *xfs_handle_to_dentry(struct file *parfilp, void __user *uhandle,

fs/xfs/xfs_handle.h

29

int xfs_ioc_getparents(struct file *file, struct xfs_getparents __user *arg);

fs/xfs/xfs_handle.h

31

struct xfs_getparents_by_handle __user *arg);

fs/xfs/xfs_healthmon.c

1081

void __user *arg)

fs/xfs/xfs_healthmon.c

1104

void __user *arg)

fs/xfs/xfs_healthmon.c

1138

void __user *arg = (void __user *)p;

fs/xfs/xfs_healthmon.c

1168

struct xfs_health_monitor __user *arg)

fs/xfs/xfs_healthmon.h

182

struct xfs_health_monitor __user *arg);

fs/xfs/xfs_ioctl.c

1020

char __user *user_label)

fs/xfs/xfs_ioctl.c

1042

char __user *newlabel)

fs/xfs/xfs_ioctl.c

1150

void __user *arg)

fs/xfs/xfs_ioctl.c

1188

struct xfs_fsop_counts __user *uarg)

fs/xfs/xfs_ioctl.c

1227

void __user *arg = (void __user *)p;

fs/xfs/xfs_ioctl.c

1291

return put_user(inode->i_generation, (int __user *)arg);

fs/xfs/xfs_ioctl.c

1410

if (get_user(in, (uint32_t __user *)arg))

fs/xfs/xfs_ioctl.c

181

void __user *ubuffer)

fs/xfs/xfs_ioctl.c

267

struct xfs_bulkstat_req __user *arg)

fs/xfs/xfs_ioctl.c

319

struct xfs_inumbers_req __user *arg)

fs/xfs/xfs_ioctl.c

360

void __user *arg,

fs/xfs/xfs_ioctl.c

385

void __user *arg)

fs/xfs/xfs_ioctl.c

435

void __user *arg)

fs/xfs/xfs_ioctl.c

525

void __user *arg)

fs/xfs/xfs_ioctl.c

84

void __user *arg)

fs/xfs/xfs_ioctl.c

886

struct getbmapx __user *u,

fs/xfs/xfs_ioctl.c

909

void __user *arg)

fs/xfs/xfs_ioctl32.c

113

struct compat_xfs_bstat __user *bstat32)

fs/xfs/xfs_ioctl32.c

145

compat_xfs_bstime_t __user *p32,

fs/xfs/xfs_ioctl32.c

163

struct compat_xfs_bstat __user *p32 = breq->ubuffer;

fs/xfs/xfs_ioctl32.c

201

struct compat_xfs_fsop_bulkreq __user *p32)

fs/xfs/xfs_ioctl32.c

314

compat_xfs_fsop_handlereq_t __user *arg32)

fs/xfs/xfs_ioctl32.c

344

compat_xfs_fsop_attrlist_handlereq_t __user *p)

fs/xfs/xfs_ioctl32.c

36

compat_xfs_fsop_geom_v1_t __user *arg32)

fs/xfs/xfs_ioctl32.c

369

void __user *arg)

fs/xfs/xfs_ioctl32.c

428

void __user *arg = compat_ptr(p);

fs/xfs/xfs_ioctl32.c

468

struct compat_xfs_swapext __user *sxu = arg;

fs/xfs/xfs_ioctl32.c

50

compat_xfs_growfs_data_t __user *arg32)

fs/xfs/xfs_ioctl32.c

61

compat_xfs_growfs_rt_t __user *arg32)

fs/xfs/xfs_ioctl32.c

74

struct compat_xfs_inogrp __user *p32 = breq->ubuffer;

fs/xfs/xfs_ioctl32.c

95

compat_xfs_bstime_t __user *bstime32)

fs/xfs/xfs_itable.h

12

void __user *ubuffer; /* user output buffer */

fs/xfs/xfs_itable.h

35

char __user *b = breq->ubuffer;

fs/xfs/xfs_verify_media.c

408

struct xfs_verify_media __user *arg)

fs/xfs/xfs_verify_media.h

11

struct xfs_verify_media __user *arg);

include/asm-generic/access_ok.h

31

static inline int __access_ok(const void __user *ptr, unsigned long size)

include/asm-generic/cacheflush.h

109

instrument_copy_to_user((void __user *)dst, src, len); \

include/asm-generic/cacheflush.h

119

instrument_copy_from_user_before(dst, (void __user *)src, \

include/asm-generic/cacheflush.h

122

instrument_copy_from_user_after(dst, (void __user *)src, len, \

include/asm-generic/flat.h

17

static inline int flat_put_addr_at_rp(u32 __user *rp, u32 addr, u32 rel)

include/asm-generic/flat.h

7

static inline int flat_get_addr_from_rp(u32 __user *rp, u32 relval, u32 flags,

include/asm-generic/futex.h

101

futex_atomic_cmpxchg_inatomic_local(u32 *uval, u32 __user *uaddr,

include/asm-generic/futex.h

40

futex_atomic_op_inuser_local(int op, u32 oparg, int *oval, u32 __user *uaddr)

include/asm-generic/uaccess.h

125

void __user *__p = (ptr); \

include/asm-generic/uaccess.h

128

__put_user((x), ((__typeof__(*(ptr)) __user *)__p)) : \

include/asm-generic/uaccess.h

134

static inline int __put_user_fn(size_t size, void __user *ptr, void *x)

include/asm-generic/uaccess.h

17

__get_user_fn(size_t size, const void __user *from, void *to)

include/asm-generic/uaccess.h

187

const void __user *__p = (ptr); \

include/asm-generic/uaccess.h

190

__get_user((x), (__typeof__(*(ptr)) __user *)__p) :\

include/asm-generic/uaccess.h

195

static inline int __get_user_fn(size_t size, const void __user *ptr, void *x)

include/asm-generic/uaccess.h

211

__clear_user(void __user *to, unsigned long n)

include/asm-generic/uaccess.h

219

clear_user(void __user *to, unsigned long n)

include/asm-generic/uaccess.h

230

__must_check long strncpy_from_user(char *dst, const char __user *src,

include/asm-generic/uaccess.h

232

__must_check long strnlen_user(const char __user *src, long n);

include/asm-generic/uaccess.h

43

__put_user_fn(size_t size, void __user *to, void *from)

include/asm-generic/uaccess.h

82

raw_copy_from_user(void *to, const void __user * from, unsigned long n)

include/asm-generic/uaccess.h

89

raw_copy_to_user(void __user *to, const void *from, unsigned long n)

include/drm/drm_atomic.h

216

s32 __user *out_fence_ptr;

include/drm/drm_atomic.h

247

s32 __user *out_fence_ptr;

include/drm/drm_file.h

475

ssize_t drm_read(struct file *filp, char __user *buffer,

include/drm/drm_gem.h

598

int drm_gem_objects_lookup(struct drm_file *filp, void __user *bo_handles,

include/drm/intel/xe_sriov_vfio.h

133

char __user *buf, size_t len);

include/drm/intel/xe_sriov_vfio.h

144

const char __user *buf, size_t len);

include/kvm/arm_hypercalls.h

48

int kvm_arm_copy_fw_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices);

include/linux/atmdev.h

133

int (*ioctl)(struct atm_dev *dev,unsigned int cmd,void __user *arg);

include/linux/atmdev.h

136

void __user *arg);

include/linux/bitmap-str.h

14

int bitmap_parselist_user(const char __user *ubuf, unsigned int ulen,

include/linux/bitmap-str.h

7

int bitmap_parse_user(const char __user *ubuf, unsigned int ulen, unsigned long *dst, int nbits);

include/linux/blk-integrity.h

106

struct logical_block_metadata_cap __user *argp)

include/linux/blk-integrity.h

121

void __user *ubuf,

include/linux/blk-integrity.h

33

int blk_rq_integrity_map_user(struct request *rq, void __user *ubuf,

include/linux/blk-integrity.h

36

struct logical_block_metadata_cap __user *argp);

include/linux/blk-mq.h

1070

struct rq_map_data *, void __user *, unsigned long, gfp_t);

include/linux/blk-mq.h

1072

void __user *, unsigned long, gfp_t, bool, int, bool, int);

include/linux/blktrace_api.h

32

extern int blk_trace_ioctl(struct block_device *, unsigned, char __user *);

include/linux/blktrace_api.h

79

char __user *arg);

include/linux/bpf-cgroup.h

424

union bpf_attr __user *uattr, u32 uattr_size);

include/linux/bpf-cgroup.h

455

union bpf_attr __user *uattr,

include/linux/bpf-netns.h

30

union bpf_attr __user *uattr);

include/linux/bpf-netns.h

38

union bpf_attr __user *uattr)

include/linux/bpf.h

102

union bpf_attr __user *uattr);

include/linux/bpf.h

105

union bpf_attr __user *uattr);

include/linux/bpf.h

107

union bpf_attr __user *uattr);

include/linux/bpf.h

1138

union bpf_attr __user *uattr);

include/linux/bpf.h

2263

union bpf_attr __user *uattr);

include/linux/bpf.h

2514

__u32 __user *prog_ids, u32 cnt);

include/linux/bpf.h

2769

union bpf_attr __user *uattr);

include/linux/bpf.h

2772

union bpf_attr __user *uattr);

include/linux/bpf.h

2775

union bpf_attr __user *uattr);

include/linux/bpf.h

2909

union bpf_attr __user *uattr);

include/linux/bpf.h

2917

int bpf_obj_pin_user(u32 ufd, int path_fd, const char __user *pathname);

include/linux/bpf.h

2918

int bpf_obj_get_user(int path_fd, const char __user *pathname, int flags);

include/linux/bpf.h

3098

union bpf_attr __user *uattr);

include/linux/bpf.h

3100

union bpf_attr __user *uattr);

include/linux/bpf.h

3103

union bpf_attr __user *uattr);

include/linux/bpf.h

3106

union bpf_attr __user *uattr);

include/linux/bpf.h

3109

union bpf_attr __user *uattr);

include/linux/bpf.h

3112

union bpf_attr __user *uattr);

include/linux/bpf.h

3115

union bpf_attr __user *uattr);

include/linux/bpf.h

3350

static inline int bpf_obj_get_user(const char __user *pathname, int flags)

include/linux/bpf.h

3375

union bpf_attr __user *uattr)

include/linux/bpf.h

3451

union bpf_attr __user *uattr)

include/linux/bpf.h

3458

union bpf_attr __user *uattr)

include/linux/bpf.h

3465

union bpf_attr __user *uattr)

include/linux/bpf.h

3472

union bpf_attr __user *uattr)

include/linux/bpf.h

3479

union bpf_attr __user *uattr)

include/linux/bpf.h

3656

union bpf_attr __user *uattr);

include/linux/bpf.h

3662

union bpf_attr __user *uattr);

include/linux/bpf.h

3733

union bpf_attr __user *uattr)

include/linux/bpf.h

3758

union bpf_attr __user *uattr)

include/linux/bpf.h

4105

int bpf_prog_stream_read(struct bpf_prog *prog, enum bpf_stream_id stream_id, void __user *buf, int len);

include/linux/bpf.h

97

union bpf_attr __user *uattr);

include/linux/bpf_lirc.h

10

int lirc_prog_query(const union bpf_attr *attr, union bpf_attr __user *uattr);

include/linux/bpf_lirc.h

24

union bpf_attr __user *uattr)

include/linux/bpf_mprog.h

331

int bpf_mprog_query(const union bpf_attr *attr, union bpf_attr __user *uattr,

include/linux/bpf_verifier.h

1062

char __user *log_buf, u32 log_size);

include/linux/bpf_verifier.h

744

char __user *ubuf;

include/linux/bpf_verifier.h

767

char __user *ubuf;

include/linux/bpfptr.h

21

static inline bpfptr_t USER_BPFPTR(void __user *p)

include/linux/btf.h

153

union bpf_attr __user *uattr);

include/linux/cdrom.h

92

int (*read_cdda_bpc)(struct cdrom_device_info *cdi, void __user *ubuf,

include/linux/compat.h

137

int set_compat_user_sigmask(const compat_sigset_t __user *umask,

include/linux/compat.h

315

struct compat_rusage __user *);

include/linux/compat.h

435

const struct compat_siginfo __user *from);

include/linux/compat.h

436

int __copy_siginfo_to_user32(struct compat_siginfo __user *to,

include/linux/compat.h

442

const struct compat_sigevent __user *u_event);

include/linux/compat.h

444

extern int get_compat_sigset(sigset_t *set, const compat_sigset_t __user *compat);

include/linux/compat.h

451

put_compat_sigset(compat_sigset_t __user *compat, const sigset_t *set,

include/linux/compat.h

474

compat_sigset_t __user *__c = compat; \

include/linux/compat.h

497

const compat_sigset_t __user *__c = compat; \

include/linux/compat.h

525

compat_sigset_t __user *__c = compat; \

include/linux/compat.h

532

const compat_sigset_t __user *__c = compat; \

include/linux/compat.h

548

int compat_restore_altstack(const compat_stack_t __user *uss);

include/linux/compat.h

549

int __compat_save_altstack(compat_stack_t __user *, unsigned long);

include/linux/compat.h

551

compat_stack_t __user *__uss = uss; \

include/linux/compat.h

553

unsafe_put_user(ptr_to_compat((void __user *)t->sas_ss_sp), \

include/linux/compat.h

573

asmlinkage long compat_sys_io_setup(unsigned nr_reqs, u32 __user *ctx32p);

include/linux/compat.h

575

u32 __user *iocb);

include/linux/compat.h

579

struct io_event __user *events,

include/linux/compat.h

580

struct old_timespec32 __user *timeout,

include/linux/compat.h

581

const struct __compat_aio_sigset __user *usig);

include/linux/compat.h

585

struct io_event __user *events,

include/linux/compat.h

586

struct __kernel_timespec __user *timeout,

include/linux/compat.h

587

const struct __compat_aio_sigset __user *usig);

include/linux/compat.h

589

struct epoll_event __user *events,

include/linux/compat.h

591

const compat_sigset_t __user *sigmask,

include/linux/compat.h

594

struct epoll_event __user *events,

include/linux/compat.h

596

const struct __kernel_timespec __user *timeout,

include/linux/compat.h

597

const compat_sigset_t __user *sigmask,

include/linux/compat.h

605

asmlinkage long compat_sys_statfs(const char __user *pathname,

include/linux/compat.h

606

struct compat_statfs __user *buf);

include/linux/compat.h

607

asmlinkage long compat_sys_statfs64(const char __user *pathname,

include/linux/compat.h

609

struct compat_statfs64 __user *buf);

include/linux/compat.h

611

struct compat_statfs __user *buf);

include/linux/compat.h

613

struct compat_statfs64 __user *buf);

include/linux/compat.h

614

asmlinkage long compat_sys_truncate(const char __user *, compat_off_t);

include/linux/compat.h

617

asmlinkage long compat_sys_openat(int dfd, const char __user *filename,

include/linux/compat.h

620

struct compat_linux_dirent __user *dirent,

include/linux/compat.h

625

const struct iovec __user *vec,

include/linux/compat.h

628

const struct iovec __user *vec,

include/linux/compat.h

632

const struct iovec __user *vec,

include/linux/compat.h

638

const struct iovec __user *vec,

include/linux/compat.h

642

compat_off_t __user *offset, compat_size_t count);

include/linux/compat.h

644

compat_loff_t __user *offset, compat_size_t count);

include/linux/compat.h

645

asmlinkage long compat_sys_pselect6_time32(int n, compat_ulong_t __user *inp,

include/linux/compat.h

646

compat_ulong_t __user *outp,

include/linux/compat.h

647

compat_ulong_t __user *exp,

include/linux/compat.h

648

struct old_timespec32 __user *tsp,

include/linux/compat.h

649

void __user *sig);

include/linux/compat.h

650

asmlinkage long compat_sys_pselect6_time64(int n, compat_ulong_t __user *inp,

include/linux/compat.h

651

compat_ulong_t __user *outp,

include/linux/compat.h

652

compat_ulong_t __user *exp,

include/linux/compat.h

653

struct __kernel_timespec __user *tsp,

include/linux/compat.h

654

void __user *sig);

include/linux/compat.h

655

asmlinkage long compat_sys_ppoll_time32(struct pollfd __user *ufds,

include/linux/compat.h

657

struct old_timespec32 __user *tsp,

include/linux/compat.h

658

const compat_sigset_t __user *sigmask,

include/linux/compat.h

660

asmlinkage long compat_sys_ppoll_time64(struct pollfd __user *ufds,

include/linux/compat.h

662

struct __kernel_timespec __user *tsp,

include/linux/compat.h

663

const compat_sigset_t __user *sigmask,

include/linux/compat.h

666

const compat_sigset_t __user *sigmask,

include/linux/compat.h

669

const char __user *filename,

include/linux/compat.h

670

struct compat_stat __user *statbuf,

include/linux/compat.h

673

struct compat_stat __user *statbuf);

include/linux/compat.h

676

struct compat_siginfo __user *, int,

include/linux/compat.h

677

struct compat_rusage __user *);

include/linux/compat.h

679

compat_sys_set_robust_list(struct compat_robust_list_head __user *head,

include/linux/compat.h

682

compat_sys_get_robust_list(int pid, compat_uptr_t __user *head_ptr,

include/linux/compat.h

683

compat_size_t __user *len_ptr);

include/linux/compat.h

685

struct old_itimerval32 __user *it);

include/linux/compat.h

687

struct old_itimerval32 __user *in,

include/linux/compat.h

688

struct old_itimerval32 __user *out);

include/linux/compat.h

691

struct compat_kexec_segment __user *,

include/linux/compat.h

694

struct compat_sigevent __user *timer_event_spec,

include/linux/compat.h

695

timer_t __user *created_timer_id);

include/linux/compat.h

700

compat_ulong_t __user *user_mask_ptr);

include/linux/compat.h

703

compat_ulong_t __user *user_mask_ptr);

include/linux/compat.h

704

asmlinkage long compat_sys_sigaltstack(const compat_stack_t __user *uss_ptr,

include/linux/compat.h

705

compat_stack_t __user *uoss_ptr);

include/linux/compat.h

706

asmlinkage long compat_sys_rt_sigsuspend(compat_sigset_t __user *unewset,

include/linux/compat.h

710

const struct compat_sigaction __user *,

include/linux/compat.h

711

struct compat_sigaction __user *,

include/linux/compat.h

714

asmlinkage long compat_sys_rt_sigprocmask(int how, compat_sigset_t __user *set,

include/linux/compat.h

715

compat_sigset_t __user *oset,

include/linux/compat.h

717

asmlinkage long compat_sys_rt_sigpending(compat_sigset_t __user *uset,

include/linux/compat.h

719

asmlinkage long compat_sys_rt_sigtimedwait_time32(compat_sigset_t __user *uthese,

include/linux/compat.h

720

struct compat_siginfo __user *uinfo,

include/linux/compat.h

721

struct old_timespec32 __user *uts, compat_size_t sigsetsize);

include/linux/compat.h

722

asmlinkage long compat_sys_rt_sigtimedwait_time64(compat_sigset_t __user *uthese,

include/linux/compat.h

723

struct compat_siginfo __user *uinfo,

include/linux/compat.h

724

struct __kernel_timespec __user *uts, compat_size_t sigsetsize);

include/linux/compat.h

726

struct compat_siginfo __user *uinfo);

include/linux/compat.h

728

asmlinkage long compat_sys_times(struct compat_tms __user *tbuf);

include/linux/compat.h

730

struct compat_rlimit __user *rlim);

include/linux/compat.h

732

struct compat_rlimit __user *rlim);

include/linux/compat.h

733

asmlinkage long compat_sys_getrusage(int who, struct compat_rusage __user *ru);

include/linux/compat.h

734

asmlinkage long compat_sys_gettimeofday(struct old_timeval32 __user *tv,

include/linux/compat.h

735

struct timezone __user *tz);

include/linux/compat.h

736

asmlinkage long compat_sys_settimeofday(struct old_timeval32 __user *tv,

include/linux/compat.h

737

struct timezone __user *tz);

include/linux/compat.h

738

asmlinkage long compat_sys_sysinfo(struct compat_sysinfo __user *info);

include/linux/compat.h

739

asmlinkage long compat_sys_mq_open(const char __user *u_name,

include/linux/compat.h

741

struct compat_mq_attr __user *u_attr);

include/linux/compat.h

743

const struct compat_sigevent __user *u_notification);

include/linux/compat.h

745

const struct compat_mq_attr __user *u_mqstat,

include/linux/compat.h

746

struct compat_mq_attr __user *u_omqstat);

include/linux/compat.h

747

asmlinkage long compat_sys_msgctl(int first, int second, void __user *uptr);

include/linux/compat.h

753

asmlinkage long compat_sys_shmctl(int first, int second, void __user *uptr);

include/linux/compat.h

755

asmlinkage long compat_sys_recvfrom(int fd, void __user *buf, compat_size_t len,

include/linux/compat.h

756

unsigned flags, struct sockaddr __user *addr,

include/linux/compat.h

757

int __user *addrlen);

include/linux/compat.h

758

asmlinkage long compat_sys_sendmsg(int fd, struct compat_msghdr __user *msg,

include/linux/compat.h

760

asmlinkage long compat_sys_recvmsg(int fd, struct compat_msghdr __user *msg,

include/linux/compat.h

765

asmlinkage long compat_sys_execve(const char __user *filename, const compat_uptr_t __user *argv,

include/linux/compat.h

766

const compat_uptr_t __user *envp);

include/linux/compat.h

771

struct compat_siginfo __user *uinfo);

include/linux/compat.h

772

asmlinkage long compat_sys_recvmmsg_time64(int fd, struct compat_mmsghdr __user *mmsg,

include/linux/compat.h

774

struct __kernel_timespec __user *timeout);

include/linux/compat.h

775

asmlinkage long compat_sys_recvmmsg_time32(int fd, struct compat_mmsghdr __user *mmsg,

include/linux/compat.h

777

struct old_timespec32 __user *timeout);

include/linux/compat.h

779

compat_uint_t __user *stat_addr, int options,

include/linux/compat.h

780

struct compat_rusage __user *ru);

include/linux/compat.h

782

int, const char __user *);

include/linux/compat.h

784

struct file_handle __user *handle,

include/linux/compat.h

786

asmlinkage long compat_sys_sendmmsg(int fd, struct compat_mmsghdr __user *mmsg,

include/linux/compat.h

788

asmlinkage long compat_sys_execveat(int dfd, const char __user *filename,

include/linux/compat.h

789

const compat_uptr_t __user *argv,

include/linux/compat.h

790

const compat_uptr_t __user *envp, int flags);

include/linux/compat.h

792

const struct iovec __user *vec,

include/linux/compat.h

795

const struct iovec __user *vec,

include/linux/compat.h

799

const struct iovec __user *vec,

include/linux/compat.h

805

const struct iovec __user *vec,

include/linux/compat.h

816

asmlinkage long compat_sys_open(const char __user *filename, int flags,

include/linux/compat.h

821

const compat_sigset_t __user *sigmask,

include/linux/compat.h

825

asmlinkage long compat_sys_newstat(const char __user *filename,

include/linux/compat.h

826

struct compat_stat __user *statbuf);

include/linux/compat.h

827

asmlinkage long compat_sys_newlstat(const char __user *filename,

include/linux/compat.h

828

struct compat_stat __user *statbuf);

include/linux/compat.h

831

asmlinkage long compat_sys_select(int n, compat_ulong_t __user *inp,

include/linux/compat.h

832

compat_ulong_t __user *outp, compat_ulong_t __user *exp,

include/linux/compat.h

833

struct old_timeval32 __user *tvp);

include/linux/compat.h

834

asmlinkage long compat_sys_ustat(unsigned dev, struct compat_ustat __user *u32);

include/linux/compat.h

835

asmlinkage long compat_sys_recv(int fd, void __user *buf, compat_size_t len,

include/linux/compat.h

840

struct compat_old_linux_dirent __user *,

include/linux/compat.h

844

asmlinkage long compat_sys_old_select(struct compat_sel_arg_struct __user *arg);

include/linux/compat.h

851

asmlinkage long compat_sys_sigpending(compat_old_sigset_t __user *set);

include/linux/compat.h

855

asmlinkage long compat_sys_sigprocmask(int how, compat_old_sigset_t __user *nset,

include/linux/compat.h

856

compat_old_sigset_t __user *oset);

include/linux/compat.h

860

const struct compat_old_sigaction __user *act,

include/linux/compat.h

861

struct compat_old_sigaction __user *oact);

include/linux/compat.h

865

asmlinkage long compat_sys_socketcall(int call, u32 __user *args);

include/linux/compat.h

868

asmlinkage long compat_sys_truncate64(const char __user *pathname, compat_arg_u64(len));

include/linux/compat.h

881

asmlinkage long compat_sys_pread64(unsigned int fd, char __user *buf, size_t count,

include/linux/compat.h

886

asmlinkage long compat_sys_pwrite64(unsigned int fd, const char __user *buf, size_t count,

include/linux/compat.h

930

int kcompat_sys_statfs64(const char __user * pathname, compat_size_t sz,

include/linux/compat.h

931

struct compat_statfs64 __user * buf);

include/linux/compat.h

933

struct compat_statfs64 __user * buf);

include/linux/compat.h

959

long compat_get_bitmap(unsigned long *mask, const compat_ulong_t __user *umask,

include/linux/compat.h

961

long compat_put_bitmap(compat_ulong_t __user *umask, unsigned long *mask,

include/linux/compat.h

980

static inline void __user *compat_ptr(compat_uptr_t uptr)

include/linux/compat.h

982

return (void __user *)(unsigned long)uptr;

include/linux/compat.h

986

static inline compat_uptr_t ptr_to_compat(void __user *uptr)

include/linux/compiler_types.h

50

# define __user __attribute__((noderef, address_space(__user)))

include/linux/compiler_types.h

54

static inline void __chk_user_ptr(const volatile void __user *ptr) { }

include/linux/cpu.h

232

int arch_prctl_get_branch_landing_pad_state(struct task_struct *t, unsigned long __user *state);

include/linux/cpumask.h

971

int cpumask_parse_user(const char __user *buf, int len, struct cpumask *dstp)

include/linux/cpumask.h

985

int cpumask_parselist_user(const char __user *buf, int len, struct cpumask *dstp)

include/linux/debugfs.h

170

ssize_t debugfs_attr_read(struct file *file, char __user *buf,

include/linux/debugfs.h

172

ssize_t debugfs_attr_write(struct file *file, const char __user *buf,

include/linux/debugfs.h

174

ssize_t debugfs_attr_write_signed(struct file *file, const char __user *buf,

include/linux/debugfs.h

227

ssize_t debugfs_read_file_bool(struct file *file, char __user *user_buf,

include/linux/debugfs.h

230

ssize_t debugfs_write_file_bool(struct file *file, const char __user *user_buf,

include/linux/debugfs.h

233

ssize_t debugfs_read_file_str(struct file *file, char __user *user_buf,

include/linux/debugfs.h

339

static inline ssize_t debugfs_attr_read(struct file *file, char __user *buf,

include/linux/debugfs.h

346

const char __user *buf,

include/linux/debugfs.h

353

const char __user *buf,

include/linux/debugfs.h

448

char __user *user_buf,

include/linux/debugfs.h

455

const char __user *user_buf,

include/linux/debugfs.h

462

char __user *user_buf,

include/linux/debugfs.h

71

ssize_t (*read)(struct file *, char __user *, size_t, loff_t *);

include/linux/debugfs.h

72

ssize_t (*write)(struct file *, const char __user *, size_t, loff_t *);

include/linux/eventpoll.h

29

int epoll_sendevents(struct file *file, struct epoll_event __user *events,

include/linux/eventpoll.h

89

extern struct epoll_event __user *

include/linux/eventpoll.h

91

struct epoll_event __user *uevent);

include/linux/eventpoll.h

93

static inline struct epoll_event __user *

include/linux/eventpoll.h

95

struct epoll_event __user *uevent)

include/linux/fb.h

102

__u16 __user *red; /* Red values */

include/linux/fb.h

103

__u16 __user *green;

include/linux/fb.h

104

__u16 __user *blue;

include/linux/fb.h

105

__u16 __user *transp; /* transparency, can be NULL */

include/linux/fb.h

116

const char __user *data; /* Pointer to image data */

include/linux/fb.h

124

const char __user *mask; /* cursor mask bits */

include/linux/fb.h

251

ssize_t (*fb_read)(struct fb_info *info, char __user *buf,

include/linux/fb.h

253

ssize_t (*fb_write)(struct fb_info *info, const char __user *buf,

include/linux/fb.h

545

extern ssize_t fb_io_read(struct fb_info *info, char __user *buf,

include/linux/fb.h

547

extern ssize_t fb_io_write(struct fb_info *info, const char __user *buf,

include/linux/fb.h

575

extern ssize_t fb_sys_read(struct fb_info *info, char __user *buf,

include/linux/fb.h

577

extern ssize_t fb_sys_write(struct fb_info *info, const char __user *buf,

include/linux/fb.h

667

static ssize_t __prefix ## _defio_read(struct fb_info *info, char __user *buf, \

include/linux/fb.h

672

static ssize_t __prefix ## _defio_write(struct fb_info *info, const char __user *buf, \

include/linux/fiemap.h

19

struct fiemap_extent __user *fi_extents_start;

include/linux/file.h

121

int receive_fd(struct file *file, int __user *ufd, unsigned int o_flags);

include/linux/fileattr.h

57

int copy_fsxattr_to_user(const struct file_kattr *fa, struct fsxattr __user *ufa);

include/linux/fileattr.h

79

int ioctl_getflags(struct file *file, unsigned int __user *argp);

include/linux/fileattr.h

80

int ioctl_setflags(struct file *file, unsigned int __user *argp);

include/linux/fileattr.h

81

int ioctl_fsgetxattr(struct file *file, void __user *argp);

include/linux/fileattr.h

82

int ioctl_fssetxattr(struct file *file, void __user *argp);

include/linux/filelock.h

264

struct flock __user *user)

include/linux/filelock.h

270

unsigned int cmd, struct flock __user *user)

include/linux/fs.h

1925

ssize_t (*read) (struct file *, char __user *, size_t, loff_t *);

include/linux/fs.h

1926

ssize_t (*write) (struct file *, const char __user *, size_t, loff_t *);

include/linux/fs.h

2002

int (*readlink) (struct dentry *, char __user *,int);

include/linux/fs.h

2074

extern ssize_t vfs_read(struct file *, char __user *, size_t, loff_t *);

include/linux/fs.h

2075

extern ssize_t vfs_write(struct file *, const char __user *, size_t, loff_t *);

include/linux/fs.h

2369

extern int user_statfs(const char __user *, struct kstatfs *);

include/linux/fs.h

2470

int do_sys_open(int dfd, const char __user *filename, int flags,

include/linux/fs.h

2533

extern struct filename *getname_flags(const char __user *, int);

include/linux/fs.h

2534

extern struct filename *getname_uflags(const char __user *, int);

include/linux/fs.h

2535

static inline struct filename *getname(const char __user *name)

include/linux/fs.h

2540

extern struct filename *__getname_maybe_null(const char __user *);

include/linux/fs.h

2541

static inline struct filename *getname_maybe_null(const char __user *name, int flags)

include/linux/fs.h

2558

int delayed_getname(struct delayed_filename *, const char __user *);

include/linux/fs.h

2559

int delayed_getname_uflags(struct delayed_filename *v, const char __user *, int);

include/linux/fs.h

2564

DEFINE_CLASS(filename, struct filename *, putname(_T), getname(p), const char __user *p)

include/linux/fs.h

2566

EXTEND_CLASS(filename, _flags, getname_flags(p, f), const char __user *p, unsigned int f)

include/linux/fs.h

2567

EXTEND_CLASS(filename, _uflags, getname_uflags(p, f), const char __user *p, unsigned int f)

include/linux/fs.h

2568

EXTEND_CLASS(filename, _maybe_null, getname_maybe_null(p, f), const char __user *p, unsigned int f)

include/linux/fs.h

3176

extern int readlink_copy(char __user *, int, const char *, int);

include/linux/fs.h

3177

extern int page_readlink(struct dentry *, char __user *, int);

include/linux/fs.h

3211

int vfs_fstatat(int dfd, const char __user *filename, struct kstat *stat,

include/linux/fs.h

3215

static inline int vfs_stat(const char __user *filename, struct kstat *stat)

include/linux/fs.h

3219

static inline int vfs_lstat(const char __user *name, struct kstat *stat)

include/linux/fs.h

3225

extern int vfs_readlink(struct dentry *, char __user *, int);

include/linux/fs.h

3282

extern ssize_t generic_read_dir(struct file *, char __user *, size_t, loff_t *);

include/linux/fs.h

3296

extern ssize_t simple_read_from_buffer(void __user *to, size_t count,

include/linux/fs.h

3299

const void __user *from, size_t count);

include/linux/fs.h

3487

char *simple_transaction_get(struct file *file, const char __user *buf,

include/linux/fs.h

3489

ssize_t simple_transaction_read(struct file *file, char __user *buf,

include/linux/fs.h

3542

ssize_t simple_attr_read(struct file *file, char __user *buf,

include/linux/fs.h

3544

ssize_t simple_attr_write(struct file *file, const char __user *buf,

include/linux/fs.h

3546

ssize_t simple_attr_write_signed(struct file *file, const char __user *buf,

include/linux/fs.h

3636

static inline bool vfs_empty_path(int dfd, const char __user *path)

include/linux/fscrypt.h

385

int fscrypt_ioctl_set_policy(struct file *filp, const void __user *arg);

include/linux/fscrypt.h

386

int fscrypt_ioctl_get_policy(struct file *filp, void __user *arg);

include/linux/fscrypt.h

387

int fscrypt_ioctl_get_policy_ex(struct file *filp, void __user *arg);

include/linux/fscrypt.h

388

int fscrypt_ioctl_get_nonce(struct file *filp, void __user *arg);

include/linux/fscrypt.h

417

int fscrypt_ioctl_add_key(struct file *filp, void __user *arg);

include/linux/fscrypt.h

418

int fscrypt_ioctl_remove_key(struct file *filp, void __user *arg);

include/linux/fscrypt.h

419

int fscrypt_ioctl_remove_key_all_users(struct file *filp, void __user *arg);

include/linux/fscrypt.h

420

int fscrypt_ioctl_get_key_status(struct file *filp, void __user *arg);

include/linux/fscrypt.h

575

const void __user *arg)

include/linux/fscrypt.h

580

static inline int fscrypt_ioctl_get_policy(struct file *filp, void __user *arg)

include/linux/fscrypt.h

586

void __user *arg)

include/linux/fscrypt.h

591

static inline int fscrypt_ioctl_get_nonce(struct file *filp, void __user *arg)

include/linux/fscrypt.h

646

static inline int fscrypt_ioctl_add_key(struct file *filp, void __user *arg)

include/linux/fscrypt.h

651

static inline int fscrypt_ioctl_remove_key(struct file *filp, void __user *arg)

include/linux/fscrypt.h

657

void __user *arg)

include/linux/fscrypt.h

663

void __user *arg)

include/linux/fsverity.h

179

int fsverity_ioctl_enable(struct file *filp, const void __user *arg);

include/linux/fsverity.h

183

int fsverity_ioctl_measure(struct file *filp, void __user *arg);

include/linux/fsverity.h

194

int fsverity_ioctl_read_metadata(struct file *filp, const void __user *uarg);

include/linux/fsverity.h

222

const void __user *arg)

include/linux/fsverity.h

229

static inline int fsverity_ioctl_measure(struct file *filp, void __user *arg)

include/linux/fsverity.h

255

const void __user *uarg)

include/linux/ftrace.h

1089

static inline ssize_t ftrace_filter_write(struct file *file, const char __user *ubuf,

include/linux/ftrace.h

1091

static inline ssize_t ftrace_notrace_write(struct file *file, const char __user *ubuf,

include/linux/ftrace.h

872

ssize_t ftrace_filter_write(struct file *file, const char __user *ubuf,

include/linux/ftrace.h

874

ssize_t ftrace_notrace_write(struct file *file, const char __user *ubuf,

include/linux/futex.h

77

long do_futex(u32 __user *uaddr, int op, u32 val, ktime_t *timeout,

include/linux/futex.h

78

u32 __user *uaddr2, u32 val2, u32 val3);

include/linux/futex.h

94

static inline long do_futex(u32 __user *uaddr, int op, u32 val, ktime_t *timeout,

include/linux/futex.h

95

u32 __user *uaddr2, u32 val2, u32 val3)

include/linux/futex_types.h

24

struct robust_list_head __user *robust_list;

include/linux/futex_types.h

26

struct compat_robust_list_head __user *compat_robust_list;

include/linux/if_bridge.h

98

void __user *uarg));

include/linux/if_bridge.h

99

int br_ioctl_call(struct net *net, unsigned int cmd, void __user *uarg);

include/linux/if_vlan.h

80

extern void vlan_ioctl_set(int (*hook)(struct net *, void __user *));

include/linux/iio/buffer-dma.h

156

char __user *user_buffer);

include/linux/iio/buffer-dma.h

158

const char __user *user_buffer);

include/linux/iio/buffer_impl.h

71

int (*read)(struct iio_buffer *buffer, size_t n, char __user *buf);

include/linux/iio/buffer_impl.h

74

int (*write)(struct iio_buffer *buffer, size_t n, const char __user *buf);

include/linux/inetdevice.h

189

int inet_gifconf(struct net_device *dev, char __user *buf, int len, int size);

include/linux/inetdevice.h

191

static inline int inet_gifconf(struct net_device *dev, char __user *buf,

include/linux/instrumented.h

127

instrument_copy_to_user(void __user *to, const void *from, unsigned long n)

include/linux/instrumented.h

144

instrument_copy_from_user_before(const void *to, const void __user *from, unsigned long n)

include/linux/instrumented.h

161

instrument_copy_from_user_after(const void *to, const void __user *from,

include/linux/io_uring/cmd.h

103

const struct iovec __user *uvec,

include/linux/io_uring/cmd.h

50

const struct iovec __user *uvec,

include/linux/io_uring_types.h

117

void __user *addr;

include/linux/iommu.h

434

void __user *uptr;

include/linux/iommu.h

450

void __user *uptr;

include/linux/iov_iter.h

17

typedef size_t (*iov_ustep_f)(void __user *iter_base, size_t progress, size_t len,

include/linux/iov_iter.h

27

void __user *base = iter->ubuf;

include/linux/iova_bitmap.h

21

u64 __user *data);

include/linux/iova_bitmap.h

31

u64 __user *data)

include/linux/kexec.h

98

void __user *buf;

include/linux/kfifo.h

701

const void __user *__from = (from); \

include/linux/kfifo.h

729

void __user *__to = (to); \

include/linux/kfifo.h

947

const void __user *from, unsigned long len, unsigned int *copied);

include/linux/kfifo.h

950

void __user *to, unsigned long len, unsigned int *copied);

include/linux/kfifo.h

971

const void __user *from, unsigned long len, unsigned int *copied,

include/linux/kfifo.h

974

extern int __kfifo_to_user_r(struct __kfifo *fifo, void __user *to,

include/linux/kmsan-checks.h

61

void kmsan_copy_to_user(void __user *to, const void *from, size_t to_copy,

include/linux/kmsan-checks.h

87

static inline void kmsan_copy_to_user(void __user *to, const void *from,

include/linux/kstrtox.h

100

int __must_check kstrtoull_from_user(const char __user *s, size_t count, unsigned int base, unsigned long long *res);

include/linux/kstrtox.h

101

int __must_check kstrtoll_from_user(const char __user *s, size_t count, unsigned int base, long long *res);

include/linux/kstrtox.h

102

int __must_check kstrtoul_from_user(const char __user *s, size_t count, unsigned int base, unsigned long *res);

include/linux/kstrtox.h

103

int __must_check kstrtol_from_user(const char __user *s, size_t count, unsigned int base, long *res);

include/linux/kstrtox.h

104

int __must_check kstrtouint_from_user(const char __user *s, size_t count, unsigned int base, unsigned int *res);

include/linux/kstrtox.h

105

int __must_check kstrtoint_from_user(const char __user *s, size_t count, unsigned int base, int *res);

include/linux/kstrtox.h

106

int __must_check kstrtou16_from_user(const char __user *s, size_t count, unsigned int base, u16 *res);

include/linux/kstrtox.h

107

int __must_check kstrtos16_from_user(const char __user *s, size_t count, unsigned int base, s16 *res);

include/linux/kstrtox.h

108

int __must_check kstrtou8_from_user(const char __user *s, size_t count, unsigned int base, u8 *res);

include/linux/kstrtox.h

109

int __must_check kstrtos8_from_user(const char __user *s, size_t count, unsigned int base, s8 *res);

include/linux/kstrtox.h

110

int __must_check kstrtobool_from_user(const char __user *s, size_t count, bool *res);

include/linux/kstrtox.h

112

static inline int __must_check kstrtou64_from_user(const char __user *s, size_t count, unsigned int base, u64 *res)

include/linux/kstrtox.h

117

static inline int __must_check kstrtos64_from_user(const char __user *s, size_t count, unsigned int base, s64 *res)

include/linux/kstrtox.h

122

static inline int __must_check kstrtou32_from_user(const char __user *s, size_t count, unsigned int base, u32 *res)

include/linux/kstrtox.h

127

static inline int __must_check kstrtos32_from_user(const char __user *s, size_t count, unsigned int base, s32 *res)

include/linux/kvm_host.h

1346

typeof(v) __user *__uaddr = (typeof(__uaddr))(__addr + offset); \

include/linux/kvm_host.h

1366

typeof(v) __user *__uaddr = (typeof(__uaddr))(__addr + offset); \

include/linux/kvm_host.h

2078

char __user *user_buffer, size_t size, loff_t *offset);

include/linux/kvm_host.h

2604

long kvm_gmem_populate(struct kvm *kvm, gfn_t start_gfn, void __user *src,

include/linux/libata.h

1148

void __user *arg);

include/linux/libata.h

1165

unsigned int cmd, void __user *arg);

include/linux/lsm_hook_defs.h

286

LSM_HOOK(int, 0, shm_shmat, struct kern_ipc_perm *perm, char __user *shmaddr,

include/linux/lsm_hook_defs.h

298

struct lsm_ctx __user *ctx, u32 *size, u32 flags)

include/linux/mm.h

5088

const void __user *usr_src,

include/linux/mm.h

5120

const char __user *uname);

include/linux/mm.h

5124

const char __user *uname)

include/linux/mm.h

5187

int arch_get_shadow_stack_status(struct task_struct *t, unsigned long __user *status);

include/linux/mount.h

104

int do_mount(const char *, const char __user *,

include/linux/mroute.h

22

int ipmr_compat_ioctl(struct sock *sk, unsigned int cmd, void __user *arg);

include/linux/mroute.h

25

int ipmr_sk_ioctl(struct sock *sk, unsigned int cmd, void __user *arg);

include/linux/mroute.h

60

void __user *arg)

include/linux/mroute6.h

111

void __user *arg)

include/linux/mroute6.h

142

void __user *arg)

include/linux/mroute6.h

32

extern int ip6mr_compat_ioctl(struct sock *sk, unsigned int cmd, void __user *arg);

include/linux/mtio.h

31

static inline int put_user_mtget(void __user *u, struct mtget *k)

include/linux/mtio.h

52

static inline int put_user_mtpos(void __user *u, struct mtpos *k)

include/linux/mtio.h

55

return put_user(k->mt_blkno, (u32 __user *)u);

include/linux/mtio.h

57

return put_user(k->mt_blkno, (long __user *)u);

include/linux/namei.h

50

extern int user_path_at(int, const char __user *, unsigned, struct path *);

include/linux/namei.h

56

extern struct dentry *start_creating_user_path(int, const char __user *, struct path *, unsigned int);

include/linux/net.h

164

char __user *buf;

include/linux/net.h

207

int (*gettstamp) (struct socket *sock, void __user *userstamp,

include/linux/net.h

215

int optname, char __user *optval, int __user *optlen);

include/linux/netdevice.h

1481

void __user *data, int cmd);

include/linux/netdevice.h

4340

int get_user_ifreq(struct ifreq *ifr, void __user **ifrdata, void __user *arg);

include/linux/netdevice.h

4341

int put_user_ifreq(struct ifreq *ifr, void __user *arg);

include/linux/netdevice.h

4343

void __user *data, bool *need_copyout);

include/linux/netdevice.h

4344

int dev_ifconf(struct net *net, struct ifconf __user *ifc);

include/linux/netdevice.h

4352

int dev_ethtool(struct net *net, struct ifreq *ifr, void __user *userdata);

include/linux/netfilter.h

193

int (*get)(struct sock *sk, int optval, void __user *user, int *len);

include/linux/netfilter.h

362

int nf_getsockopt(struct sock *sk, u_int8_t pf, int optval, char __user *opt,

include/linux/netfilter/x_tables.h

170

int (*compat_to_user)(void __user *dst, const void *src);

include/linux/netfilter/x_tables.h

214

int (*compat_to_user)(void __user *dst, const void *src);

include/linux/netfilter/x_tables.h

309

struct xt_entry_match __user *u);

include/linux/netfilter/x_tables.h

311

struct xt_entry_target __user *u);

include/linux/netfilter/x_tables.h

312

int xt_data_to_user(void __user *dst, const void *src,

include/linux/netfilter/x_tables.h

538

void __user **dstptr, unsigned int *size);

include/linux/netfilter/x_tables.h

544

void __user **dstptr, unsigned int *size);

include/linux/nodemask.h

327

static __always_inline int __nodemask_parse_user(const char __user *buf, int len,

include/linux/nsc_gpio.h

34

extern ssize_t nsc_gpio_write(struct file *file, const char __user *data,

include/linux/nsc_gpio.h

37

extern ssize_t nsc_gpio_read(struct file *file, char __user *buf,

include/linux/pagemap.h

1278

size_t fault_in_writeable(char __user *uaddr, size_t size);

include/linux/pagemap.h

1279

size_t fault_in_subpage_writeable(char __user *uaddr, size_t size);

include/linux/pagemap.h

1280

size_t fault_in_safe_writeable(const char __user *uaddr, size_t size);

include/linux/pagemap.h

1281

size_t fault_in_readable(const char __user *uaddr, size_t size);

include/linux/poll.h

111

extern int core_sys_select(int n, fd_set __user *inp, fd_set __user *outp,

include/linux/poll.h

112

fd_set __user *exp, struct timespec64 *end_time);

include/linux/posix-clock.h

65

char __user *buf, size_t cnt);

include/linux/proc_fs.h

38

ssize_t (*proc_read)(struct file *, char __user *, size_t, loff_t *);

include/linux/proc_fs.h

40

ssize_t (*proc_write)(struct file *, const char __user *, size_t, loff_t *);

include/linux/psp-sev.h

1113

static inline void *psp_copy_user_blob(u64 __user uaddr, u32 len) { return ERR_PTR(-EINVAL); }

include/linux/pstore.h

200

const char __user *buf);

include/linux/ptrace.h

52

extern int ptrace_readdata(struct task_struct *tsk, unsigned long src, char __user *dst, int len);

include/linux/ptrace.h

53

extern int ptrace_writedata(struct task_struct *tsk, char __user *src, unsigned long dst, int len);

include/linux/raspberrypi/vchiq.h

46

const void __user *data;

include/linux/raspberrypi/vchiq.h

59

void *cb_data, void __user *cb_userdata);

include/linux/raspberrypi/vchiq.h

68

void __user *cb_userdata;

include/linux/raspberrypi/vchiq.h

77

void *cb_data, void __user *cb_userdata);

include/linux/raspberrypi/vchiq_arm.h

159

void *cb_data, void __user *cb_userdata);

include/linux/raspberrypi/vchiq_arm.h

61

void __user *userdata;

include/linux/raspberrypi/vchiq_core.h

118

void __user *cb_userdata;

include/linux/raspberrypi/vchiq_core.h

126

void __user *uoffset;

include/linux/regset.h

120

const void *kbuf, const void __user *ubuf);

include/linux/regset.h

265

const void __user **ubuf, void *data,

include/linux/regset.h

291

const void __user **ubuf,

include/linux/regset.h

322

unsigned int size, void __user *data);

include/linux/regset.h

337

const void __user *data)

include/linux/restart_block.h

32

u32 __user *uaddr;

include/linux/restart_block.h

37

u32 __user *uaddr2;

include/linux/restart_block.h

44

struct __kernel_timespec __user *rmtp;

include/linux/restart_block.h

45

struct old_timespec32 __user *compat_rmtp;

include/linux/restart_block.h

51

struct pollfd __user *ufds;

include/linux/rseq_entry.h

133

struct rseq __user *rseq;

include/linux/rseq_entry.h

294

struct rseq_cs __user *ucs = (struct rseq_cs __user *)(unsigned long)csaddr;

include/linux/rseq_entry.h

297

u64 __user *uc_head = (u64 __user *) ucs;

include/linux/rseq_entry.h

298

u32 usig, __user *uc_sig;

include/linux/rseq_entry.h

340

uc_sig = (u32 __user *)(unsigned long)(abort_ip - sizeof(*uc_sig));

include/linux/rseq_entry.h

381

struct rseq_cs __user *ucs = (struct rseq_cs __user *)(unsigned long)csaddr;

include/linux/rseq_entry.h

385

u32 usig, __user *uc_sig;

include/linux/rseq_entry.h

430

uc_sig = (u32 __user *)(unsigned long)(abort_ip - sizeof(*uc_sig));

include/linux/rseq_entry.h

481

struct rseq __user *rseq = t->rseq.usrptr;

include/linux/rseq_entry.h

614

struct rseq __user *rseq = t->rseq.usrptr;

include/linux/rseq_types.h

120

struct rseq __user *usrptr;

include/linux/sched.h

1114

int __user *set_child_tid;

include/linux/sched.h

1117

int __user *clear_child_tid;

include/linux/sched.h

1619

void __user *mce_vaddr;

include/linux/sched/signal.h

314

int force_sig_fault_to_task(int sig, int code, void __user *addr,

include/linux/sched/signal.h

316

int force_sig_fault(int sig, int code, void __user *addr);

include/linux/sched/signal.h

317

int send_sig_fault(int sig, int code, void __user *addr, struct task_struct *t);

include/linux/sched/signal.h

319

int force_sig_mceerr(int code, void __user *, short);

include/linux/sched/signal.h

320

int send_sig_mceerr(int code, void __user *, short, struct task_struct *);

include/linux/sched/signal.h

322

int force_sig_bnderr(void __user *addr, void __user *lower, void __user *upper);

include/linux/sched/signal.h

323

int force_sig_pkuerr(void __user *addr, u32 pkey);

include/linux/sched/signal.h

324

int send_sig_perf(void __user *addr, u32 type, u64 sig_data);

include/linux/sched/signal.h

326

int force_sig_ptrace_errno_trap(int errno, void __user *addr);

include/linux/sched/signal.h

327

int force_sig_fault_trapno(int sig, int code, void __user *addr, int trapno);

include/linux/sched/signal.h

328

int send_sig_fault_trapno(int sig, int code, void __user *addr, int trapno,

include/linux/sched/signal.h

547

extern int set_user_sigmask(const sigset_t __user *umask, size_t sigsetsize);

include/linux/sched/task.h

106

extern long kernel_wait4(pid_t, int __user *, int, struct rusage *);

include/linux/sched/task.h

25

int __user *pidfd;

include/linux/sched/task.h

26

int __user *child_tid;

include/linux/sched/task.h

27

int __user *parent_tid;

include/linux/seccomp.h

102

void __user *data)

include/linux/seccomp.h

39

extern long prctl_set_seccomp(unsigned long, void __user *);

include/linux/seccomp.h

64

static inline long prctl_set_seccomp(unsigned long arg2, char __user *arg3)

include/linux/seccomp.h

91

unsigned long filter_off, void __user *data);

include/linux/seccomp.h

93

unsigned long filter_off, void __user *data);

include/linux/seccomp.h

96

unsigned long n, void __user *data)

include/linux/security.h

1507

char __user *shmaddr, int shmflg)

include/linux/security.h

1542

struct lsm_ctx __user *ctx,

include/linux/security.h

1543

size_t __user *size, u32 flags)

include/linux/security.h

1549

struct lsm_ctx __user *ctx,

include/linux/security.h

1616

static inline int lsm_fill_user_ctx(struct lsm_ctx __user *uctx,

include/linux/security.h

559

int security_shm_shmat(struct kern_ipc_perm *shp, char __user *shmaddr, int shmflg);

include/linux/security.h

567

int security_getselfattr(unsigned int attr, struct lsm_ctx __user *ctx,

include/linux/security.h

568

u32 __user *size, u32 flags);

include/linux/security.h

569

int security_setselfattr(unsigned int attr, struct lsm_ctx __user *ctx,

include/linux/security.h

585

int lsm_fill_user_ctx(struct lsm_ctx __user *uctx, u32 *uctx_len,

include/linux/sed-opal.h

26

int sed_ioctl(struct opal_dev *dev, unsigned int cmd, void __user *ioctl_ptr);

include/linux/sed-opal.h

76

void __user *ioctl_ptr)

include/linux/selection.h

18

int set_selection_user(const struct tiocl_selection __user *sel,

include/linux/selection.h

22

int sel_loadlut(u32 __user *lut);

include/linux/seq_buf.h

174

extern int seq_buf_to_user(struct seq_buf *s, char __user *ubuf,

include/linux/seq_file.h

109

ssize_t seq_read(struct file *, char __user *, size_t, loff_t *);

include/linux/shm.h

17

long do_shmat(int shmid, char __user *shmaddr, int shmflg, unsigned long *addr,

include/linux/shm.h

26

static inline long do_shmat(int shmid, char __user *shmaddr,

include/linux/signal.h

36

int copy_siginfo_to_user(siginfo_t __user *to, const kernel_siginfo_t *from);

include/linux/signal.h

37

int copy_siginfo_from_user(kernel_siginfo_t *to, const siginfo_t __user *from);

include/linux/signal.h

457

int restore_altstack(const stack_t __user *);

include/linux/signal.h

458

int __save_altstack(stack_t __user *, unsigned long);

include/linux/signal.h

461

stack_t __user *__uss = uss; \

include/linux/signal.h

463

unsafe_put_user((void __user *)t->sas_ss_sp, &__uss->ss_sp, label); \

include/linux/signal.h

485

static inline void __user *arch_untagged_si_addr(void __user *addr,

include/linux/socket.h

100

struct iovec __user *msg_iov; /* scatter/gather array */

include/linux/socket.h

102

void __user *msg_control; /* ancillary data */

include/linux/socket.h

138

((void __user *)(cmsg) + sizeof(struct cmsghdr))

include/linux/socket.h

407

extern int move_addr_to_kernel(void __user *uaddr, int ulen, struct sockaddr_storage *kaddr);

include/linux/socket.h

426

extern long __sys_recvmsg(int fd, struct user_msghdr __user *msg,

include/linux/socket.h

428

extern long __sys_sendmsg(int fd, struct user_msghdr __user *msg,

include/linux/socket.h

430

extern int __sys_recvmmsg(int fd, struct mmsghdr __user *mmsg,

include/linux/socket.h

432

struct __kernel_timespec __user *timeout,

include/linux/socket.h

433

struct old_timespec32 __user *timeout32);

include/linux/socket.h

434

extern int __sys_sendmmsg(int fd, struct mmsghdr __user *mmsg,

include/linux/socket.h

440

struct user_msghdr __user *umsg,

include/linux/socket.h

441

struct sockaddr __user *uaddr,

include/linux/socket.h

445

struct sockaddr __user **save_addr);

include/linux/socket.h

448

extern int __sys_recvfrom(int fd, void __user *ubuf, size_t size,

include/linux/socket.h

449

unsigned int flags, struct sockaddr __user *addr,

include/linux/socket.h

450

int __user *addr_len);

include/linux/socket.h

451

extern int __sys_sendto(int fd, void __user *buff, size_t len,

include/linux/socket.h

452

unsigned int flags, struct sockaddr __user *addr,

include/linux/socket.h

455

struct sockaddr __user *upeer_sockaddr,

include/linux/socket.h

456

int __user *upeer_addrlen, int flags);

include/linux/socket.h

457

extern int __sys_accept4(int fd, struct sockaddr __user *upeer_sockaddr,

include/linux/socket.h

458

int __user *upeer_addrlen, int flags);

include/linux/socket.h

461

extern int __sys_bind(int fd, struct sockaddr __user *umyaddr, int addrlen);

include/linux/socket.h

466

extern int __sys_connect(int fd, struct sockaddr __user *uservaddr,

include/linux/socket.h

471

struct sockaddr __user *usockaddr, int __user *usockaddr_len);

include/linux/socket.h

472

extern int __sys_getsockname(int fd, struct sockaddr __user *usockaddr,

include/linux/socket.h

473

int __user *usockaddr_len, int peer);

include/linux/socket.h

475

int __user *usockvec);

include/linux/socket.h

86

void __user *msg_control_user;

include/linux/socket.h

98

void __user *msg_name; /* ptr to socket address structure */

include/linux/sockptr.h

17

void __user *user;

include/linux/sockptr.h

32

static inline sockptr_t USER_SOCKPTR(void __user *p)

include/linux/splice.h

37

void __user *userptr; /* memory to write to */

include/linux/string.h

17

extern char *strndup_user(const char __user *, long);

include/linux/string.h

18

extern void *memdup_user(const void __user *, size_t) __realloc_size(2);

include/linux/string.h

19

extern void *vmemdup_user(const void __user *, size_t) __realloc_size(2);

include/linux/string.h

20

extern void *memdup_user_nul(const void __user *, size_t);

include/linux/string.h

32

void *memdup_array_user(const void __user *src, size_t n, size_t size)

include/linux/string.h

52

void *vmemdup_array_user(const void __user *src, size_t n, size_t size)

include/linux/string_helpers.h

35

int parse_int_array_user(const char __user *from, size_t count, int **array);

include/linux/sunrpc/rpc_pipe_fs.h

36

ssize_t (*upcall)(struct file *, struct rpc_pipe_msg *, char __user *, size_t);

include/linux/sunrpc/rpc_pipe_fs.h

37

ssize_t (*downcall)(struct file *, const char __user *, size_t);

include/linux/sunrpc/rpc_pipe_fs.h

92

char __user *, size_t);

include/linux/syscall_user_dispatch.h

14

unsigned long len, char __user *selector);

include/linux/syscall_user_dispatch.h

20

void __user *data);

include/linux/syscall_user_dispatch.h

23

void __user *data);

include/linux/syscall_user_dispatch.h

28

unsigned long len, char __user *selector)

include/linux/syscall_user_dispatch.h

38

unsigned long size, void __user *data)

include/linux/syscall_user_dispatch.h

44

unsigned long size, void __user *data)

include/linux/syscall_user_dispatch_types.h

10

char __user *selector;

include/linux/syscalls.h

1000

struct cachestat __user *cstat, unsigned int flags);

include/linux/syscalls.h

1002

asmlinkage long sys_lsm_get_self_attr(unsigned int attr, struct lsm_ctx __user *ctx,

include/linux/syscalls.h

1003

u32 __user *size, u32 flags);

include/linux/syscalls.h

1004

asmlinkage long sys_lsm_set_self_attr(unsigned int attr, struct lsm_ctx __user *ctx,

include/linux/syscalls.h

1006

asmlinkage long sys_lsm_list_modules(u64 __user *ids, u32 __user *size, u32 flags);

include/linux/syscalls.h

1022

void __user *buf);

include/linux/syscalls.h

1025

void __user *buf);

include/linux/syscalls.h

1029

asmlinkage long sys_spu_run(int fd, __u32 __user *unpc,

include/linux/syscalls.h

1030

__u32 __user *ustatus);

include/linux/syscalls.h

1031

asmlinkage long sys_spu_create(const char __user *name,

include/linux/syscalls.h

1041

asmlinkage long sys_open(const char __user *filename,

include/linux/syscalls.h

1043

asmlinkage long sys_link(const char __user *oldname,

include/linux/syscalls.h

1044

const char __user *newname);

include/linux/syscalls.h

1045

asmlinkage long sys_unlink(const char __user *pathname);

include/linux/syscalls.h

1046

asmlinkage long sys_mknod(const char __user *filename, umode_t mode,

include/linux/syscalls.h

1048

asmlinkage long sys_chmod(const char __user *filename, umode_t mode);

include/linux/syscalls.h

1049

asmlinkage long sys_chown(const char __user *filename,

include/linux/syscalls.h

1051

asmlinkage long sys_mkdir(const char __user *pathname, umode_t mode);

include/linux/syscalls.h

1052

asmlinkage long sys_rmdir(const char __user *pathname);

include/linux/syscalls.h

1053

asmlinkage long sys_lchown(const char __user *filename,

include/linux/syscalls.h

1055

asmlinkage long sys_access(const char __user *filename, int mode);

include/linux/syscalls.h

1056

asmlinkage long sys_rename(const char __user *oldname,

include/linux/syscalls.h

1057

const char __user *newname);

include/linux/syscalls.h

1058

asmlinkage long sys_symlink(const char __user *old, const char __user *new);

include/linux/syscalls.h

1060

asmlinkage long sys_stat64(const char __user *filename,

include/linux/syscalls.h

1061

struct stat64 __user *statbuf);

include/linux/syscalls.h

1062

asmlinkage long sys_lstat64(const char __user *filename,

include/linux/syscalls.h

1063

struct stat64 __user *statbuf);

include/linux/syscalls.h

1067

asmlinkage long sys_pipe(int __user *fildes);

include/linux/syscalls.h

1072

asmlinkage long sys_signalfd(int ufd, sigset_t __user *user_mask, size_t sizemask);

include/linux/syscalls.h

1076

off_t __user *offset, size_t count);

include/linux/syscalls.h

1077

asmlinkage long sys_newstat(const char __user *filename,

include/linux/syscalls.h

1078

struct stat __user *statbuf);

include/linux/syscalls.h

1079

asmlinkage long sys_newlstat(const char __user *filename,

include/linux/syscalls.h

1080

struct stat __user *statbuf);

include/linux/syscalls.h

1087

asmlinkage long sys_time(__kernel_old_time_t __user *tloc);

include/linux/syscalls.h

1088

asmlinkage long sys_time32(old_time32_t __user *tloc);

include/linux/syscalls.h

1090

asmlinkage long sys_utime(char __user *filename,

include/linux/syscalls.h

1091

struct utimbuf __user *times);

include/linux/syscalls.h

1092

asmlinkage long sys_utimes(char __user *filename,

include/linux/syscalls.h

1093

struct __kernel_old_timeval __user *utimes);

include/linux/syscalls.h

1094

asmlinkage long sys_futimesat(int dfd, const char __user *filename,

include/linux/syscalls.h

1095

struct __kernel_old_timeval __user *utimes);

include/linux/syscalls.h

1098

const char __user *filename,

include/linux/syscalls.h

1099

struct old_timeval32 __user *t);

include/linux/syscalls.h

1100

asmlinkage long sys_utime32(const char __user *filename,

include/linux/syscalls.h

1101

struct old_utimbuf32 __user *t);

include/linux/syscalls.h

1102

asmlinkage long sys_utimes_time32(const char __user *filename,

include/linux/syscalls.h

1103

struct old_timeval32 __user *t);

include/linux/syscalls.h

1104

asmlinkage long sys_creat(const char __user *pathname, umode_t mode);

include/linux/syscalls.h

1106

struct linux_dirent __user *dirent,

include/linux/syscalls.h

1108

asmlinkage long sys_select(int n, fd_set __user *inp, fd_set __user *outp,

include/linux/syscalls.h

1109

fd_set __user *exp, struct __kernel_old_timeval __user *tvp);

include/linux/syscalls.h

1110

asmlinkage long sys_poll(struct pollfd __user *ufds, unsigned int nfds,

include/linux/syscalls.h

1112

asmlinkage long sys_epoll_wait(int epfd, struct epoll_event __user *events,

include/linux/syscalls.h

1114

asmlinkage long sys_ustat(unsigned dev, struct ustat __user *ubuf);

include/linux/syscalls.h

1116

asmlinkage long sys_recv(int, void __user *, size_t, unsigned);

include/linux/syscalls.h

1117

asmlinkage long sys_send(int, void __user *, size_t, unsigned);

include/linux/syscalls.h

1118

asmlinkage long sys_oldumount(char __user *name);

include/linux/syscalls.h

1119

asmlinkage long sys_uselib(const char __user *library);

include/linux/syscalls.h

1125

asmlinkage long sys_stime(__kernel_old_time_t __user *tptr);

include/linux/syscalls.h

1126

asmlinkage long sys_stime32(old_time32_t __user *tptr);

include/linux/syscalls.h

1129

asmlinkage long sys_sigpending(old_sigset_t __user *uset);

include/linux/syscalls.h

1130

asmlinkage long sys_sigprocmask(int how, old_sigset_t __user *set,

include/linux/syscalls.h

1131

old_sigset_t __user *oset);

include/linux/syscalls.h

1141

asmlinkage long sys_sigaction(int, const struct old_sigaction __user *,

include/linux/syscalls.h

1142

struct old_sigaction __user *);

include/linux/syscalls.h

1154

const char __user *cmdline_ptr,

include/linux/syscalls.h

1158

asmlinkage long sys_waitpid(pid_t pid, int __user *stat_addr, int options);

include/linux/syscalls.h

1162

asmlinkage long sys_chown16(const char __user *filename,

include/linux/syscalls.h

1164

asmlinkage long sys_lchown16(const char __user *filename,

include/linux/syscalls.h

1172

asmlinkage long sys_getresuid16(old_uid_t __user *ruid,

include/linux/syscalls.h

1173

old_uid_t __user *euid, old_uid_t __user *suid);

include/linux/syscalls.h

1175

asmlinkage long sys_getresgid16(old_gid_t __user *rgid,

include/linux/syscalls.h

1176

old_gid_t __user *egid, old_gid_t __user *sgid);

include/linux/syscalls.h

1179

asmlinkage long sys_getgroups16(int gidsetsize, old_gid_t __user *grouplist);

include/linux/syscalls.h

1180

asmlinkage long sys_setgroups16(int gidsetsize, old_gid_t __user *grouplist);

include/linux/syscalls.h

1188

asmlinkage long sys_socketcall(int call, unsigned long __user *args);

include/linux/syscalls.h

1191

asmlinkage long sys_stat(const char __user *filename,

include/linux/syscalls.h

1192

struct __old_kernel_stat __user *statbuf);

include/linux/syscalls.h

1193

asmlinkage long sys_lstat(const char __user *filename,

include/linux/syscalls.h

1194

struct __old_kernel_stat __user *statbuf);

include/linux/syscalls.h

1196

struct __old_kernel_stat __user *statbuf);

include/linux/syscalls.h

1197

asmlinkage long sys_readlink(const char __user *path,

include/linux/syscalls.h

1198

char __user *buf, int bufsiz);

include/linux/syscalls.h

1201

asmlinkage long sys_old_select(struct sel_arg_struct __user *arg);

include/linux/syscalls.h

1204

asmlinkage long sys_old_readdir(unsigned int, struct old_linux_dirent __user *, unsigned int);

include/linux/syscalls.h

1207

asmlinkage long sys_gethostname(char __user *name, int len);

include/linux/syscalls.h

1208

asmlinkage long sys_uname(struct old_utsname __user *);

include/linux/syscalls.h

1209

asmlinkage long sys_olduname(struct oldold_utsname __user *);

include/linux/syscalls.h

1211

asmlinkage long sys_old_getrlimit(unsigned int resource, struct rlimit __user *rlim);

include/linux/syscalls.h

1216

unsigned long third, void __user *ptr, long fifth);

include/linux/syscalls.h

1222

asmlinkage long sys_old_mmap(struct mmap_arg_struct __user *arg);

include/linux/syscalls.h

1240

ssize_t ksys_write(unsigned int fd, const char __user *buf, size_t count);

include/linux/syscalls.h

1242

ssize_t ksys_read(unsigned int fd, char __user *buf, size_t count);

include/linux/syscalls.h

1248

ssize_t ksys_pread64(unsigned int fd, char __user *buf, size_t count,

include/linux/syscalls.h

1250

ssize_t ksys_pwrite64(unsigned int fd, const char __user *buf,

include/linux/syscalls.h

1267

unsigned long third, void __user * ptr, long fifth);

include/linux/syscalls.h

1275

extern int do_fchownat(int dfd, const char __user *filename, uid_t user,

include/linux/syscalls.h

1278

static inline long ksys_chown(const char __user *filename, uid_t user,

include/linux/syscalls.h

1284

static inline long ksys_lchown(const char __user *filename, uid_t user,

include/linux/syscalls.h

1293

int ksys_truncate(const char __user *pathname, loff_t length);

include/linux/syscalls.h

1306

long ksys_semtimedop(int semid, struct sembuf __user *tsops,

include/linux/syscalls.h

1308

const struct __kernel_timespec __user *timeout);

include/linux/syscalls.h

1312

long ksys_old_msgctl(int msqid, int cmd, struct msqid_ds __user *buf);

include/linux/syscalls.h

1313

long ksys_msgrcv(int msqid, struct msgbuf __user *msgp, size_t msgsz,

include/linux/syscalls.h

1315

long ksys_msgsnd(int msqid, struct msgbuf __user *msgp, size_t msgsz,

include/linux/syscalls.h

1318

long ksys_shmdt(char __user *shmaddr);

include/linux/syscalls.h

1319

long ksys_old_shmctl(int shmid, int cmd, struct shmid_ds __user *buf);

include/linux/syscalls.h

1320

long compat_ksys_semtimedop(int semid, struct sembuf __user *tsems,

include/linux/syscalls.h

1322

const struct old_timespec32 __user *timeout);

include/linux/syscalls.h

1327

int __sys_getsockopt(int fd, int level, int optname, char __user *optval,

include/linux/syscalls.h

1328

int __user *optlen);

include/linux/syscalls.h

1329

int __sys_setsockopt(int fd, int level, int optname, char __user *optval,

include/linux/syscalls.h

310

asmlinkage long sys_io_setup(unsigned nr_reqs, aio_context_t __user *ctx);

include/linux/syscalls.h

313

struct iocb __user * __user *);

include/linux/syscalls.h

314

asmlinkage long sys_io_cancel(aio_context_t ctx_id, struct iocb __user *iocb,

include/linux/syscalls.h

315

struct io_event __user *result);

include/linux/syscalls.h

319

struct io_event __user *events,

include/linux/syscalls.h

320

struct __kernel_timespec __user *timeout);

include/linux/syscalls.h

324

struct io_event __user *events,

include/linux/syscalls.h

325

struct old_timespec32 __user *timeout);

include/linux/syscalls.h

329

struct io_event __user *events,

include/linux/syscalls.h

330

struct __kernel_timespec __user *timeout,

include/linux/syscalls.h

331

const struct __aio_sigset __user *sig);

include/linux/syscalls.h

335

struct io_event __user *events,

include/linux/syscalls.h

336

struct old_timespec32 __user *timeout,

include/linux/syscalls.h

337

const struct __aio_sigset __user *sig);

include/linux/syscalls.h

339

struct io_uring_params __user *p);

include/linux/syscalls.h

342

const void __user *argp, size_t argsz);

include/linux/syscalls.h

344

void __user *arg, unsigned int nr_args);

include/linux/syscalls.h

345

asmlinkage long sys_setxattr(const char __user *path, const char __user *name,

include/linux/syscalls.h

346

const void __user *value, size_t size, int flags);

include/linux/syscalls.h

347

asmlinkage long sys_setxattrat(int dfd, const char __user *path, unsigned int at_flags,

include/linux/syscalls.h

348

const char __user *name,

include/linux/syscalls.h

349

const struct xattr_args __user *args, size_t size);

include/linux/syscalls.h

350

asmlinkage long sys_lsetxattr(const char __user *path, const char __user *name,

include/linux/syscalls.h

351

const void __user *value, size_t size, int flags);

include/linux/syscalls.h

352

asmlinkage long sys_fsetxattr(int fd, const char __user *name,

include/linux/syscalls.h

353

const void __user *value, size_t size, int flags);

include/linux/syscalls.h

354

asmlinkage long sys_getxattr(const char __user *path, const char __user *name,

include/linux/syscalls.h

355

void __user *value, size_t size);

include/linux/syscalls.h

356

asmlinkage long sys_getxattrat(int dfd, const char __user *path, unsigned int at_flags,

include/linux/syscalls.h

357

const char __user *name,

include/linux/syscalls.h

358

struct xattr_args __user *args, size_t size);

include/linux/syscalls.h

359

asmlinkage long sys_lgetxattr(const char __user *path, const char __user *name,

include/linux/syscalls.h

360

void __user *value, size_t size);

include/linux/syscalls.h

361

asmlinkage long sys_fgetxattr(int fd, const char __user *name,

include/linux/syscalls.h

362

void __user *value, size_t size);

include/linux/syscalls.h

363

asmlinkage long sys_listxattr(const char __user *path, char __user *list,

include/linux/syscalls.h

365

asmlinkage long sys_listxattrat(int dfd, const char __user *path,

include/linux/syscalls.h

367

char __user *list, size_t size);

include/linux/syscalls.h

368

asmlinkage long sys_llistxattr(const char __user *path, char __user *list,

include/linux/syscalls.h

370

asmlinkage long sys_flistxattr(int fd, char __user *list, size_t size);

include/linux/syscalls.h

371

asmlinkage long sys_removexattr(const char __user *path,

include/linux/syscalls.h

372

const char __user *name);

include/linux/syscalls.h

373

asmlinkage long sys_removexattrat(int dfd, const char __user *path,

include/linux/syscalls.h

375

const char __user *name);

include/linux/syscalls.h

376

asmlinkage long sys_lremovexattr(const char __user *path,

include/linux/syscalls.h

377

const char __user *name);

include/linux/syscalls.h

378

asmlinkage long sys_fremovexattr(int fd, const char __user *name);

include/linux/syscalls.h

379

asmlinkage long sys_file_getattr(int dfd, const char __user *filename,

include/linux/syscalls.h

380

struct file_attr __user *attr, size_t usize,

include/linux/syscalls.h

382

asmlinkage long sys_file_setattr(int dfd, const char __user *filename,

include/linux/syscalls.h

383

struct file_attr __user *attr, size_t usize,

include/linux/syscalls.h

385

asmlinkage long sys_getcwd(char __user *buf, unsigned long size);

include/linux/syscalls.h

389

struct epoll_event __user *event);

include/linux/syscalls.h

390

asmlinkage long sys_epoll_pwait(int epfd, struct epoll_event __user *events,

include/linux/syscalls.h

392

const sigset_t __user *sigmask,

include/linux/syscalls.h

394

asmlinkage long sys_epoll_pwait2(int epfd, struct epoll_event __user *events,

include/linux/syscalls.h

396

const struct __kernel_timespec __user *timeout,

include/linux/syscalls.h

397

const sigset_t __user *sigmask,

include/linux/syscalls.h

407

asmlinkage long sys_inotify_add_watch(int fd, const char __user *path,

include/linux/syscalls.h

415

asmlinkage long sys_mknodat(int dfd, const char __user * filename, umode_t mode,

include/linux/syscalls.h

417

asmlinkage long sys_mkdirat(int dfd, const char __user * pathname, umode_t mode);

include/linux/syscalls.h

418

asmlinkage long sys_unlinkat(int dfd, const char __user * pathname, int flag);

include/linux/syscalls.h

419

asmlinkage long sys_symlinkat(const char __user * oldname,

include/linux/syscalls.h

420

int newdfd, const char __user * newname);

include/linux/syscalls.h

421

asmlinkage long sys_linkat(int olddfd, const char __user *oldname,

include/linux/syscalls.h

422

int newdfd, const char __user *newname, int flags);

include/linux/syscalls.h

423

asmlinkage long sys_renameat(int olddfd, const char __user * oldname,

include/linux/syscalls.h

424

int newdfd, const char __user * newname);

include/linux/syscalls.h

425

asmlinkage long sys_umount(char __user *name, int flags);

include/linux/syscalls.h

426

asmlinkage long sys_mount(char __user *dev_name, char __user *dir_name,

include/linux/syscalls.h

427

char __user *type, unsigned long flags,

include/linux/syscalls.h

428

void __user *data);

include/linux/syscalls.h

429

asmlinkage long sys_pivot_root(const char __user *new_root,

include/linux/syscalls.h

430

const char __user *put_old);

include/linux/syscalls.h

431

asmlinkage long sys_statfs(const char __user * path,

include/linux/syscalls.h

432

struct statfs __user *buf);

include/linux/syscalls.h

433

asmlinkage long sys_statfs64(const char __user *path, size_t sz,

include/linux/syscalls.h

434

struct statfs64 __user *buf);

include/linux/syscalls.h

435

asmlinkage long sys_fstatfs(unsigned int fd, struct statfs __user *buf);

include/linux/syscalls.h

437

struct statfs64 __user *buf);

include/linux/syscalls.h

438

asmlinkage long sys_statmount(const struct mnt_id_req __user *req,

include/linux/syscalls.h

439

struct statmount __user *buf, size_t bufsize,

include/linux/syscalls.h

441

asmlinkage long sys_listmount(const struct mnt_id_req __user *req,

include/linux/syscalls.h

442

u64 __user *mnt_ids, size_t nr_mnt_ids,

include/linux/syscalls.h

444

asmlinkage long sys_listns(const struct ns_id_req __user *req,

include/linux/syscalls.h

445

u64 __user *ns_ids, size_t nr_ns_ids,

include/linux/syscalls.h

447

asmlinkage long sys_truncate(const char __user *path, long length);

include/linux/syscalls.h

450

asmlinkage long sys_truncate64(const char __user *path, loff_t length);

include/linux/syscalls.h

454

asmlinkage long sys_faccessat(int dfd, const char __user *filename, int mode);

include/linux/syscalls.h

455

asmlinkage long sys_faccessat2(int dfd, const char __user *filename, int mode,

include/linux/syscalls.h

457

asmlinkage long sys_chdir(const char __user *filename);

include/linux/syscalls.h

459

asmlinkage long sys_chroot(const char __user *filename);

include/linux/syscalls.h

461

asmlinkage long sys_fchmodat(int dfd, const char __user *filename,

include/linux/syscalls.h

463

asmlinkage long sys_fchmodat2(int dfd, const char __user *filename,

include/linux/syscalls.h

465

asmlinkage long sys_fchownat(int dfd, const char __user *filename, uid_t user,

include/linux/syscalls.h

468

asmlinkage long sys_openat(int dfd, const char __user *filename, int flags,

include/linux/syscalls.h

470

asmlinkage long sys_openat2(int dfd, const char __user *filename,

include/linux/syscalls.h

471

struct open_how __user *how, size_t size);

include/linux/syscalls.h

476

asmlinkage long sys_pipe2(int __user *fildes, int flags);

include/linux/syscalls.h

477

asmlinkage long sys_quotactl(unsigned int cmd, const char __user *special,

include/linux/syscalls.h

478

qid_t id, void __user *addr);

include/linux/syscalls.h

480

void __user *addr);

include/linux/syscalls.h

482

struct linux_dirent64 __user *dirent,

include/linux/syscalls.h

485

unsigned long offset_low, loff_t __user *result,

include/linux/syscalls.h

489

asmlinkage long sys_read(unsigned int fd, char __user *buf, size_t count);

include/linux/syscalls.h

490

asmlinkage long sys_write(unsigned int fd, const char __user *buf,

include/linux/syscalls.h

493

const struct iovec __user *vec,

include/linux/syscalls.h

496

const struct iovec __user *vec,

include/linux/syscalls.h

498

asmlinkage long sys_pread64(unsigned int fd, char __user *buf,

include/linux/syscalls.h

500

asmlinkage long sys_pwrite64(unsigned int fd, const char __user *buf,

include/linux/syscalls.h

502

asmlinkage long sys_preadv(unsigned long fd, const struct iovec __user *vec,

include/linux/syscalls.h

504

asmlinkage long sys_pwritev(unsigned long fd, const struct iovec __user *vec,

include/linux/syscalls.h

507

loff_t __user *offset, size_t count);

include/linux/syscalls.h

508

asmlinkage long sys_pselect6(int, fd_set __user *, fd_set __user *,

include/linux/syscalls.h

509

fd_set __user *, struct __kernel_timespec __user *,

include/linux/syscalls.h

510

void __user *);

include/linux/syscalls.h

511

asmlinkage long sys_pselect6_time32(int, fd_set __user *, fd_set __user *,

include/linux/syscalls.h

512

fd_set __user *, struct old_timespec32 __user *,

include/linux/syscalls.h

513

void __user *);

include/linux/syscalls.h

514

asmlinkage long sys_ppoll(struct pollfd __user *, unsigned int,

include/linux/syscalls.h

515

struct __kernel_timespec __user *, const sigset_t __user *,

include/linux/syscalls.h

517

asmlinkage long sys_ppoll_time32(struct pollfd __user *, unsigned int,

include/linux/syscalls.h

518

struct old_timespec32 __user *, const sigset_t __user *,

include/linux/syscalls.h

520

asmlinkage long sys_signalfd4(int ufd, sigset_t __user *user_mask, size_t sizemask, int flags);

include/linux/syscalls.h

521

asmlinkage long sys_vmsplice(int fd, const struct iovec __user *iov,

include/linux/syscalls.h

523

asmlinkage long sys_splice(int fd_in, loff_t __user *off_in,

include/linux/syscalls.h

524

int fd_out, loff_t __user *off_out,

include/linux/syscalls.h

527

asmlinkage long sys_readlinkat(int dfd, const char __user *path, char __user *buf,

include/linux/syscalls.h

529

asmlinkage long sys_newfstatat(int dfd, const char __user *filename,

include/linux/syscalls.h

530

struct stat __user *statbuf, int flag);

include/linux/syscalls.h

531

asmlinkage long sys_newfstat(unsigned int fd, struct stat __user *statbuf);

include/linux/syscalls.h

533

asmlinkage long sys_fstat64(unsigned long fd, struct stat64 __user *statbuf);

include/linux/syscalls.h

534

asmlinkage long sys_fstatat64(int dfd, const char __user *filename,

include/linux/syscalls.h

535

struct stat64 __user *statbuf, int flag);

include/linux/syscalls.h

546

const struct __kernel_itimerspec __user *utmr,

include/linux/syscalls.h

547

struct __kernel_itimerspec __user *otmr);

include/linux/syscalls.h

548

asmlinkage long sys_timerfd_gettime(int ufd, struct __kernel_itimerspec __user *otmr);

include/linux/syscalls.h

550

struct old_itimerspec32 __user *otmr);

include/linux/syscalls.h

552

const struct old_itimerspec32 __user *utmr,

include/linux/syscalls.h

553

struct old_itimerspec32 __user *otmr);

include/linux/syscalls.h

554

asmlinkage long sys_utimensat(int dfd, const char __user *filename,

include/linux/syscalls.h

555

struct __kernel_timespec __user *utimes,

include/linux/syscalls.h

558

const char __user *filename,

include/linux/syscalls.h

559

struct old_timespec32 __user *t, int flags);

include/linux/syscalls.h

560

asmlinkage long sys_acct(const char __user *name);

include/linux/syscalls.h

569

struct siginfo __user *infop,

include/linux/syscalls.h

570

int options, struct rusage __user *ru);

include/linux/syscalls.h

571

asmlinkage long sys_set_tid_address(int __user *tidptr);

include/linux/syscalls.h

573

asmlinkage long sys_futex(u32 __user *uaddr, int op, u32 val,

include/linux/syscalls.h

574

const struct __kernel_timespec __user *utime,

include/linux/syscalls.h

575

u32 __user *uaddr2, u32 val3);

include/linux/syscalls.h

576

asmlinkage long sys_futex_time32(u32 __user *uaddr, int op, u32 val,

include/linux/syscalls.h

577

const struct old_timespec32 __user *utime,

include/linux/syscalls.h

578

u32 __user *uaddr2, u32 val3);

include/linux/syscalls.h

580

struct robust_list_head __user * __user *head_ptr,

include/linux/syscalls.h

581

size_t __user *len_ptr);

include/linux/syscalls.h

582

asmlinkage long sys_set_robust_list(struct robust_list_head __user *head,

include/linux/syscalls.h

585

asmlinkage long sys_futex_waitv(struct futex_waitv __user *waiters,

include/linux/syscalls.h

587

struct __kernel_timespec __user *timeout, clockid_t clockid);

include/linux/syscalls.h

589

asmlinkage long sys_futex_wake(void __user *uaddr, unsigned long mask, int nr, unsigned int flags);

include/linux/syscalls.h

591

asmlinkage long sys_futex_wait(void __user *uaddr, unsigned long val, unsigned long mask,

include/linux/syscalls.h

592

unsigned int flags, struct __kernel_timespec __user *timespec,

include/linux/syscalls.h

595

asmlinkage long sys_futex_requeue(struct futex_waitv __user *waiters,

include/linux/syscalls.h

598

asmlinkage long sys_nanosleep(struct __kernel_timespec __user *rqtp,

include/linux/syscalls.h

599

struct __kernel_timespec __user *rmtp);

include/linux/syscalls.h

600

asmlinkage long sys_nanosleep_time32(struct old_timespec32 __user *rqtp,

include/linux/syscalls.h

601

struct old_timespec32 __user *rmtp);

include/linux/syscalls.h

602

asmlinkage long sys_getitimer(int which, struct __kernel_old_itimerval __user *value);

include/linux/syscalls.h

604

struct __kernel_old_itimerval __user *value,

include/linux/syscalls.h

605

struct __kernel_old_itimerval __user *ovalue);

include/linux/syscalls.h

607

struct kexec_segment __user *segments,

include/linux/syscalls.h

609

asmlinkage long sys_init_module(void __user *umod, unsigned long len,

include/linux/syscalls.h

610

const char __user *uargs);

include/linux/syscalls.h

611

asmlinkage long sys_delete_module(const char __user *name_user,

include/linux/syscalls.h

614

struct sigevent __user *timer_event_spec,

include/linux/syscalls.h

615

timer_t __user * created_timer_id);

include/linux/syscalls.h

617

struct __kernel_itimerspec __user *setting);

include/linux/syscalls.h

620

const struct __kernel_itimerspec __user *new_setting,

include/linux/syscalls.h

621

struct __kernel_itimerspec __user *old_setting);

include/linux/syscalls.h

624

const struct __kernel_timespec __user *tp);

include/linux/syscalls.h

626

struct __kernel_timespec __user *tp);

include/linux/syscalls.h

628

struct __kernel_timespec __user *tp);

include/linux/syscalls.h

630

const struct __kernel_timespec __user *rqtp,

include/linux/syscalls.h

631

struct __kernel_timespec __user *rmtp);

include/linux/syscalls.h

633

struct old_itimerspec32 __user *setting);

include/linux/syscalls.h

635

struct old_itimerspec32 __user *new,

include/linux/syscalls.h

636

struct old_itimerspec32 __user *old);

include/linux/syscalls.h

638

struct old_timespec32 __user *tp);

include/linux/syscalls.h

640

struct old_timespec32 __user *tp);

include/linux/syscalls.h

642

struct old_timespec32 __user *tp);

include/linux/syscalls.h

644

struct old_timespec32 __user *rqtp,

include/linux/syscalls.h

645

struct old_timespec32 __user *rmtp);

include/linux/syscalls.h

646

asmlinkage long sys_syslog(int type, char __user *buf, int len);

include/linux/syscalls.h

650

struct sched_param __user *param);

include/linux/syscalls.h

652

struct sched_param __user *param);

include/linux/syscalls.h

655

struct sched_param __user *param);

include/linux/syscalls.h

657

unsigned long __user *user_mask_ptr);

include/linux/syscalls.h

659

unsigned long __user *user_mask_ptr);

include/linux/syscalls.h

664

struct __kernel_timespec __user *interval);

include/linux/syscalls.h

666

struct old_timespec32 __user *interval);

include/linux/syscalls.h

671

asmlinkage long sys_sigaltstack(const struct sigaltstack __user *uss,

include/linux/syscalls.h

672

struct sigaltstack __user *uoss);

include/linux/syscalls.h

673

asmlinkage long sys_rt_sigsuspend(sigset_t __user *unewset, size_t sigsetsize);

include/linux/syscalls.h

676

const struct sigaction __user *,

include/linux/syscalls.h

677

struct sigaction __user *,

include/linux/syscalls.h

680

asmlinkage long sys_rt_sigprocmask(int how, sigset_t __user *set,

include/linux/syscalls.h

681

sigset_t __user *oset, size_t sigsetsize);

include/linux/syscalls.h

682

asmlinkage long sys_rt_sigpending(sigset_t __user *set, size_t sigsetsize);

include/linux/syscalls.h

683

asmlinkage long sys_rt_sigtimedwait(const sigset_t __user *uthese,

include/linux/syscalls.h

684

siginfo_t __user *uinfo,

include/linux/syscalls.h

685

const struct __kernel_timespec __user *uts,

include/linux/syscalls.h

687

asmlinkage long sys_rt_sigtimedwait_time32(const sigset_t __user *uthese,

include/linux/syscalls.h

688

siginfo_t __user *uinfo,

include/linux/syscalls.h

689

const struct old_timespec32 __user *uts,

include/linux/syscalls.h

691

asmlinkage long sys_rt_sigqueueinfo(pid_t pid, int sig, siginfo_t __user *uinfo);

include/linux/syscalls.h

695

void __user *arg);

include/linux/syscalls.h

701

asmlinkage long sys_getresuid(uid_t __user *ruid, uid_t __user *euid, uid_t __user *suid);

include/linux/syscalls.h

703

asmlinkage long sys_getresgid(gid_t __user *rgid, gid_t __user *egid, gid_t __user *sgid);

include/linux/syscalls.h

706

asmlinkage long sys_times(struct tms __user *tbuf);

include/linux/syscalls.h

711

asmlinkage long sys_getgroups(int gidsetsize, gid_t __user *grouplist);

include/linux/syscalls.h

712

asmlinkage long sys_setgroups(int gidsetsize, gid_t __user *grouplist);

include/linux/syscalls.h

713

asmlinkage long sys_newuname(struct new_utsname __user *name);

include/linux/syscalls.h

714

asmlinkage long sys_sethostname(char __user *name, int len);

include/linux/syscalls.h

715

asmlinkage long sys_setdomainname(char __user *name, int len);

include/linux/syscalls.h

717

struct rlimit __user *rlim);

include/linux/syscalls.h

719

struct rlimit __user *rlim);

include/linux/syscalls.h

720

asmlinkage long sys_getrusage(int who, struct rusage __user *ru);

include/linux/syscalls.h

724

asmlinkage long sys_getcpu(unsigned __user *cpu, unsigned __user *node, void __user *cache);

include/linux/syscalls.h

725

asmlinkage long sys_gettimeofday(struct __kernel_old_timeval __user *tv,

include/linux/syscalls.h

726

struct timezone __user *tz);

include/linux/syscalls.h

727

asmlinkage long sys_settimeofday(struct __kernel_old_timeval __user *tv,

include/linux/syscalls.h

728

struct timezone __user *tz);

include/linux/syscalls.h

729

asmlinkage long sys_adjtimex(struct __kernel_timex __user *txc_p);

include/linux/syscalls.h

730

asmlinkage long sys_adjtimex_time32(struct old_timex32 __user *txc_p);

include/linux/syscalls.h

738

asmlinkage long sys_sysinfo(struct sysinfo __user *info);

include/linux/syscalls.h

739

asmlinkage long sys_mq_open(const char __user *name, int oflag, umode_t mode, struct mq_attr __user *attr);

include/linux/syscalls.h

740

asmlinkage long sys_mq_unlink(const char __user *name);

include/linux/syscalls.h

741

asmlinkage long sys_mq_timedsend(mqd_t mqdes, const char __user *msg_ptr, size_t msg_len, unsigned int msg_prio, const struct __kernel_timespec __user *abs_timeout);

include/linux/syscalls.h

742

asmlinkage long sys_mq_timedreceive(mqd_t mqdes, char __user *msg_ptr, size_t msg_len, unsigned int __user *msg_prio, const struct __kernel_timespec __user *abs_timeout);

include/linux/syscalls.h

743

asmlinkage long sys_mq_notify(mqd_t mqdes, const struct sigevent __user *notification);

include/linux/syscalls.h

744

asmlinkage long sys_mq_getsetattr(mqd_t mqdes, const struct mq_attr __user *mqstat, struct mq_attr __user *omqstat);

include/linux/syscalls.h

746

char __user *u_msg_ptr,

include/linux/syscalls.h

747

unsigned int msg_len, unsigned int __user *u_msg_prio,

include/linux/syscalls.h

748

const struct old_timespec32 __user *u_abs_timeout);

include/linux/syscalls.h

750

const char __user *u_msg_ptr,

include/linux/syscalls.h

752

const struct old_timespec32 __user *u_abs_timeout);

include/linux/syscalls.h

754

asmlinkage long sys_old_msgctl(int msqid, int cmd, struct msqid_ds __user *buf);

include/linux/syscalls.h

755

asmlinkage long sys_msgctl(int msqid, int cmd, struct msqid_ds __user *buf);

include/linux/syscalls.h

756

asmlinkage long sys_msgrcv(int msqid, struct msgbuf __user *msgp,

include/linux/syscalls.h

758

asmlinkage long sys_msgsnd(int msqid, struct msgbuf __user *msgp,

include/linux/syscalls.h

763

asmlinkage long sys_semtimedop(int semid, struct sembuf __user *sops,

include/linux/syscalls.h

765

const struct __kernel_timespec __user *timeout);

include/linux/syscalls.h

766

asmlinkage long sys_semtimedop_time32(int semid, struct sembuf __user *sops,

include/linux/syscalls.h

768

const struct old_timespec32 __user *timeout);

include/linux/syscalls.h

769

asmlinkage long sys_semop(int semid, struct sembuf __user *sops,

include/linux/syscalls.h

772

asmlinkage long sys_old_shmctl(int shmid, int cmd, struct shmid_ds __user *buf);

include/linux/syscalls.h

773

asmlinkage long sys_shmctl(int shmid, int cmd, struct shmid_ds __user *buf);

include/linux/syscalls.h

774

asmlinkage long sys_shmat(int shmid, char __user *shmaddr, int shmflg);

include/linux/syscalls.h

775

asmlinkage long sys_shmdt(char __user *shmaddr);

include/linux/syscalls.h

777

asmlinkage long sys_socketpair(int, int, int, int __user *);

include/linux/syscalls.h

778

asmlinkage long sys_bind(int, struct sockaddr __user *, int);

include/linux/syscalls.h

780

asmlinkage long sys_accept(int, struct sockaddr __user *, int __user *);

include/linux/syscalls.h

781

asmlinkage long sys_connect(int, struct sockaddr __user *, int);

include/linux/syscalls.h

782

asmlinkage long sys_getsockname(int, struct sockaddr __user *, int __user *);

include/linux/syscalls.h

783

asmlinkage long sys_getpeername(int, struct sockaddr __user *, int __user *);

include/linux/syscalls.h

784

asmlinkage long sys_sendto(int, void __user *, size_t, unsigned,

include/linux/syscalls.h

785

struct sockaddr __user *, int);

include/linux/syscalls.h

786

asmlinkage long sys_recvfrom(int, void __user *, size_t, unsigned,

include/linux/syscalls.h

787

struct sockaddr __user *, int __user *);

include/linux/syscalls.h

789

char __user *optval, int optlen);

include/linux/syscalls.h

791

char __user *optval, int __user *optlen);

include/linux/syscalls.h

793

asmlinkage long sys_sendmsg(int fd, struct user_msghdr __user *msg, unsigned flags);

include/linux/syscalls.h

794

asmlinkage long sys_recvmsg(int fd, struct user_msghdr __user *msg, unsigned flags);

include/linux/syscalls.h

801

asmlinkage long sys_add_key(const char __user *_type,

include/linux/syscalls.h

802

const char __user *_description,

include/linux/syscalls.h

803

const void __user *_payload,

include/linux/syscalls.h

806

asmlinkage long sys_request_key(const char __user *_type,

include/linux/syscalls.h

807

const char __user *_description,

include/linux/syscalls.h

808

const char __user *_callout_info,

include/linux/syscalls.h

813

asmlinkage long sys_clone(unsigned long, unsigned long, int __user *, unsigned long,

include/linux/syscalls.h

814

int __user *);

include/linux/syscalls.h

817

asmlinkage long sys_clone(unsigned long, unsigned long, int, int __user *,

include/linux/syscalls.h

818

int __user *, unsigned long);

include/linux/syscalls.h

820

asmlinkage long sys_clone(unsigned long, unsigned long, int __user *,

include/linux/syscalls.h

821

int __user *, unsigned long);

include/linux/syscalls.h

825

asmlinkage long sys_clone3(struct clone_args __user *uargs, size_t size);

include/linux/syscalls.h

827

asmlinkage long sys_execve(const char __user *filename,

include/linux/syscalls.h

828

const char __user *const __user *argv,

include/linux/syscalls.h

829

const char __user *const __user *envp);

include/linux/syscalls.h

833

asmlinkage long sys_swapon(const char __user *specialfile, int swap_flags);

include/linux/syscalls.h

834

asmlinkage long sys_swapoff(const char __user *specialfile);

include/linux/syscalls.h

843

unsigned char __user * vec);

include/linux/syscalls.h

845

asmlinkage long sys_process_madvise(int pidfd, const struct iovec __user *vec,

include/linux/syscalls.h

854

const unsigned long __user *nmask,

include/linux/syscalls.h

857

asmlinkage long sys_get_mempolicy(int __user *policy,

include/linux/syscalls.h

858

unsigned long __user *nmask,

include/linux/syscalls.h

861

asmlinkage long sys_set_mempolicy(int mode, const unsigned long __user *nmask,

include/linux/syscalls.h

864

const unsigned long __user *from,

include/linux/syscalls.h

865

const unsigned long __user *to);

include/linux/syscalls.h

867

const void __user * __user *pages,

include/linux/syscalls.h

868

const int __user *nodes,

include/linux/syscalls.h

869

int __user *status,

include/linux/syscalls.h

872

siginfo_t __user *uinfo);

include/linux/syscalls.h

874

struct perf_event_attr __user *attr_uptr,

include/linux/syscalls.h

876

asmlinkage long sys_accept4(int, struct sockaddr __user *, int __user *, int);

include/linux/syscalls.h

877

asmlinkage long sys_recvmmsg(int fd, struct mmsghdr __user *msg,

include/linux/syscalls.h

879

struct __kernel_timespec __user *timeout);

include/linux/syscalls.h

880

asmlinkage long sys_recvmmsg_time32(int fd, struct mmsghdr __user *msg,

include/linux/syscalls.h

882

struct old_timespec32 __user *timeout);

include/linux/syscalls.h

883

asmlinkage long sys_wait4(pid_t pid, int __user *stat_addr,

include/linux/syscalls.h

884

int options, struct rusage __user *ru);

include/linux/syscalls.h

886

const struct rlimit64 __user *new_rlim,

include/linux/syscalls.h

887

struct rlimit64 __user *old_rlim);

include/linux/syscalls.h

892

int dfd, const char __user * pathname);

include/linux/syscalls.h

896

const char __user *pathname);

include/linux/syscalls.h

898

asmlinkage long sys_name_to_handle_at(int dfd, const char __user *name,

include/linux/syscalls.h

899

struct file_handle __user *handle,

include/linux/syscalls.h

900

void __user *mnt_id, int flag);

include/linux/syscalls.h

902

struct file_handle __user *handle,

include/linux/syscalls.h

905

struct __kernel_timex __user *tx);

include/linux/syscalls.h

907

struct old_timex32 __user *tx);

include/linux/syscalls.h

911

asmlinkage long sys_sendmmsg(int fd, struct mmsghdr __user *msg,

include/linux/syscalls.h

914

const struct iovec __user *lvec,

include/linux/syscalls.h

916

const struct iovec __user *rvec,

include/linux/syscalls.h

920

const struct iovec __user *lvec,

include/linux/syscalls.h

922

const struct iovec __user *rvec,

include/linux/syscalls.h

927

asmlinkage long sys_finit_module(int fd, const char __user *uargs, int flags);

include/linux/syscalls.h

929

struct sched_attr __user *attr,

include/linux/syscalls.h

932

struct sched_attr __user *attr,

include/linux/syscalls.h

935

asmlinkage long sys_renameat2(int olddfd, const char __user *oldname,

include/linux/syscalls.h

936

int newdfd, const char __user *newname,

include/linux/syscalls.h

939

void __user *uargs);

include/linux/syscalls.h

940

asmlinkage long sys_getrandom(char __user *buf, size_t count,

include/linux/syscalls.h

942

asmlinkage long sys_memfd_create(const char __user *uname_ptr, unsigned int flags);

include/linux/syscalls.h

943

asmlinkage long sys_bpf(int cmd, union bpf_attr __user *attr, unsigned int size,

include/linux/syscalls.h

944

struct bpf_common_attr __user *attr_common, unsigned int size_common);

include/linux/syscalls.h

945

asmlinkage long sys_execveat(int dfd, const char __user *filename,

include/linux/syscalls.h

946

const char __user *const __user *argv,

include/linux/syscalls.h

947

const char __user *const __user *envp, int flags);

include/linux/syscalls.h

951

asmlinkage long sys_copy_file_range(int fd_in, loff_t __user *off_in,

include/linux/syscalls.h

952

int fd_out, loff_t __user *off_out,

include/linux/syscalls.h

954

asmlinkage long sys_preadv2(unsigned long fd, const struct iovec __user *vec,

include/linux/syscalls.h

957

asmlinkage long sys_pwritev2(unsigned long fd, const struct iovec __user *vec,

include/linux/syscalls.h

964

asmlinkage long sys_statx(int dfd, const char __user *path, unsigned flags,

include/linux/syscalls.h

965

unsigned mask, struct statx __user *buffer);

include/linux/syscalls.h

966

asmlinkage long sys_rseq(struct rseq __user *rseq, uint32_t rseq_len,

include/linux/syscalls.h

969

asmlinkage long sys_open_tree(int dfd, const char __user *path, unsigned flags);

include/linux/syscalls.h

970

asmlinkage long sys_open_tree_attr(int dfd, const char __user *path,

include/linux/syscalls.h

972

struct mount_attr __user *uattr,

include/linux/syscalls.h

974

asmlinkage long sys_move_mount(int from_dfd, const char __user *from_path,

include/linux/syscalls.h

975

int to_dfd, const char __user *to_path,

include/linux/syscalls.h

977

asmlinkage long sys_mount_setattr(int dfd, const char __user *path,

include/linux/syscalls.h

979

struct mount_attr __user *uattr, size_t usize);

include/linux/syscalls.h

980

asmlinkage long sys_fsopen(const char __user *fs_name, unsigned int flags);

include/linux/syscalls.h

981

asmlinkage long sys_fsconfig(int fs_fd, unsigned int cmd, const char __user *key,

include/linux/syscalls.h

982

const void __user *value, int aux);

include/linux/syscalls.h

984

asmlinkage long sys_fspick(int dfd, const char __user *path, unsigned int flags);

include/linux/syscalls.h

986

siginfo_t __user *info,

include/linux/syscalls.h

989

asmlinkage long sys_landlock_create_ruleset(const struct landlock_ruleset_attr __user *attr,

include/linux/syscalls.h

992

const void __user *rule_attr, __u32 flags);

include/linux/syscalls.h

999

struct cachestat_range __user *cstat_range,

include/linux/syslog.h

39

int do_syslog(int type, char __user *buf, int count, int source);

include/linux/tee_drv.h

86

void __user *uaddr;

include/linux/termios_internal.h

37

int user_termio_to_kernel_termios(struct ktermios *, struct termio __user *);

include/linux/termios_internal.h

38

int kernel_termios_to_user_termio(struct termio __user *, struct ktermios *);

include/linux/termios_internal.h

40

int user_termios_to_kernel_termios(struct ktermios *, struct termios2 __user *);

include/linux/termios_internal.h

41

int kernel_termios_to_user_termios(struct termios2 __user *, struct ktermios *);

include/linux/termios_internal.h

42

int user_termios_to_kernel_termios_1(struct ktermios *, struct termios __user *);

include/linux/termios_internal.h

43

int kernel_termios_to_user_termios_1(struct termios __user *, struct ktermios *);

include/linux/termios_internal.h

45

int user_termios_to_kernel_termios(struct ktermios *, struct termios __user *);

include/linux/termios_internal.h

46

int kernel_termios_to_user_termios(struct termios __user *, struct ktermios *);

include/linux/time.h

12

const struct __kernel_timespec __user *uts);

include/linux/time.h

14

struct __kernel_timespec __user *uts);

include/linux/time.h

16

const struct __kernel_itimerspec __user *uit);

include/linux/time.h

18

struct __kernel_itimerspec __user *uit);

include/linux/time.h

30

extern long do_utimes(int dfd, const char __user *filename, struct timespec64 *times, int flags);

include/linux/time32.h

54

extern int get_old_timespec32(struct timespec64 *, const void __user *);

include/linux/time32.h

55

extern int put_old_timespec32(const struct timespec64 *, void __user *);

include/linux/time32.h

57

const struct old_itimerspec32 __user *uits);

include/linux/time32.h

59

struct old_itimerspec32 __user *uits);

include/linux/time32.h

61

int get_old_timex32(struct __kernel_timex *, const struct old_timex32 __user *);

include/linux/time32.h

62

int put_old_timex32(struct old_timex32 __user *, const struct __kernel_timex *);

include/linux/trace_events.h

776

int perf_event_query_prog_array(struct perf_event *event, void __user *info);

include/linux/trace_events.h

811

perf_event_query_prog_array(struct perf_event *event, void __user *info)

include/linux/trace_seq.h

107

extern int trace_seq_to_user(struct trace_seq *s, char __user *ubuf,

include/linux/trace_seq.h

154

static inline int trace_seq_to_user(struct trace_seq *s, char __user *ubuf,

include/linux/uaccess.h

111

__copy_from_user(void *to, const void __user *from, unsigned long n)

include/linux/uaccess.h

139

__copy_to_user_inatomic(void __user *to, const void *from, unsigned long n)

include/linux/uaccess.h

149

__copy_to_user(void __user *to, const void *from, unsigned long n)

include/linux/uaccess.h

166

_inline_copy_from_user(void *to, const void __user *from, unsigned long n)

include/linux/uaccess.h

195

_inline_copy_to_user(void __user *to, const void *from, unsigned long n)

include/linux/uaccess.h

211

_copy_from_user(void *, const void __user *, unsigned long);

include/linux/uaccess.h

214

_copy_to_user(void __user *, const void *, unsigned long);

include/linux/uaccess.h

218

copy_from_user(void *to, const void __user *from, unsigned long n)

include/linux/uaccess.h

226

copy_to_user(void __user *to, const void *from, unsigned long n)

include/linux/uaccess.h

320

static inline size_t probe_subpage_writeable(char __user *uaddr, size_t size)

include/linux/uaccess.h

330

copy_from_user_inatomic_nontemporal(void *to, const void __user *from,

include/linux/uaccess.h

343

extern __must_check int check_zeroed_user(const void __user *from, size_t size);

include/linux/uaccess.h

393

copy_struct_from_user(void *dst, size_t ksize, const void __user *src,

include/linux/uaccess.h

490

copy_struct_to_user(void __user *dst, size_t usize, const void *src,

include/linux/uaccess.h

582

long copy_from_user_nofault(void *dst, const void __user *src, size_t size);

include/linux/uaccess.h

583

long notrace copy_to_user_nofault(void __user *dst, const void *src,

include/linux/uaccess.h

589

long strncpy_from_user_nofault(char *dst, const void __user *unsafe_addr,

include/linux/uaccess.h

591

long strnlen_user_nofault(const void __user *unsafe_addr, long count);

include/linux/uaccess.h

623

type __user *p = (type __force __user *)(src); \

include/linux/uaccess.h

632

type __user *p = (type __force __user *)(dst); \

include/linux/uaccess.h

99

__copy_from_user_inatomic(void *to, const void __user *from, unsigned long n)

include/linux/uio.h

361

struct iovec *iovec_from_user(const struct iovec __user *uvector,

include/linux/uio.h

364

ssize_t import_iovec(int type, const struct iovec __user *uvec,

include/linux/uio.h

367

ssize_t __import_iovec(int type, const struct iovec __user *uvec,

include/linux/uio.h

370

int import_ubuf(int type, void __user *buf, size_t len, struct iov_iter *i);

include/linux/uio.h

373

void __user *buf, size_t count)

include/linux/uio.h

73

void __user *ubuf;

include/linux/user_namespace.h

197

extern ssize_t proc_uid_map_write(struct file *, const char __user *, size_t, loff_t *);

include/linux/user_namespace.h

198

extern ssize_t proc_gid_map_write(struct file *, const char __user *, size_t, loff_t *);

include/linux/user_namespace.h

199

extern ssize_t proc_projid_map_write(struct file *, const char __user *, size_t, loff_t *);

include/linux/user_namespace.h

200

extern ssize_t proc_setgroups_write(struct file *, const char __user *, size_t, loff_t *);

include/linux/util_macros.h

148

(void __user *)(uintptr_t)(x); \

include/linux/vfio.h

130

ssize_t (*read)(struct vfio_device *vdev, char __user *buf,

include/linux/vfio.h

132

ssize_t (*write)(struct vfio_device *vdev, const char __user *buf,

include/linux/vfio.h

145

void __user *arg, size_t argsz);

include/linux/vfio.h

311

if (copy_from_user(info, (void __user *)arg, minsz))

include/linux/vfio_pci_core.h

177

void __user *arg, size_t argsz);

include/linux/vfio_pci_core.h

181

ssize_t vfio_pci_core_read(struct vfio_device *core_vdev, char __user *buf,

include/linux/vfio_pci_core.h

183

ssize_t vfio_pci_core_write(struct vfio_device *core_vdev, const char __user *buf,

include/linux/vfio_pci_core.h

199

void __iomem *io, char __user *buf,

include/linux/vfio_pci_core.h

39

ssize_t (*rw)(struct vfio_pci_core_device *vdev, char __user *buf,

include/linux/vringh.h

128

vring_desc_t __user *desc,

include/linux/vringh.h

129

vring_avail_t __user *avail,

include/linux/vringh.h

130

vring_used_t __user *used);

include/linux/vt_kern.h

156

int vt_do_diacrit(unsigned int cmd, void __user *up, int eperm);

include/linux/vt_kern.h

159

int vt_do_kbkeycode_ioctl(int cmd, struct kbkeycode __user *user_kbkc,

include/linux/vt_kern.h

161

int vt_do_kdsk_ioctl(int cmd, struct kbentry __user *user_kbe, int perm,

include/linux/vt_kern.h

163

int vt_do_kdgkb_ioctl(int cmd, struct kbsentry __user *user_kdgkb, int perm);

include/linux/vt_kern.h

36

int con_set_cmap(unsigned char __user *cmap);

include/linux/vt_kern.h

37

int con_get_cmap(unsigned char __user *cmap);

include/linux/vt_kern.h

60

int con_set_trans_old(unsigned char __user * table);

include/linux/vt_kern.h

61

int con_get_trans_old(unsigned char __user * table);

include/linux/vt_kern.h

62

int con_set_trans_new(unsigned short __user * table);

include/linux/vt_kern.h

63

int con_get_trans_new(unsigned short __user * table);

include/linux/vt_kern.h

65

int con_set_unimap(struct vc_data *vc, ushort ct, struct unipair __user *list);

include/linux/vt_kern.h

66

int con_get_unimap(struct vc_data *vc, ushort ct, ushort __user *uct, struct unipair __user *list);

include/linux/vt_kern.h

72

static inline int con_set_trans_old(unsigned char __user *table)

include/linux/vt_kern.h

76

static inline int con_get_trans_old(unsigned char __user *table)

include/linux/vt_kern.h

80

static inline int con_set_trans_new(unsigned short __user *table)

include/linux/vt_kern.h

84

static inline int con_get_trans_new(unsigned short __user *table)

include/linux/vt_kern.h

93

int con_set_unimap(struct vc_data *vc, ushort ct, struct unipair __user *list)

include/linux/vt_kern.h

98

int con_get_unimap(struct vc_data *vc, ushort ct, ushort __user *uct,

include/linux/vt_kern.h

99

struct unipair __user *list)

include/linux/watch_queue.h

90

struct watch_notification_filter __user *);

include/media/demux.h

566

int (*write)(struct dmx_demux *demux, const char __user *buf,

include/media/drv-intf/saa7146_vv.h

133

ssize_t (*vbi_write)(struct file *file, const char __user *data,

include/media/dvb_ringbuffer.h

151

u8 __user *buf, size_t len);

include/media/dvb_ringbuffer.h

208

const u8 __user *buf, size_t len);

include/media/dvb_ringbuffer.h

241

int offset, u8 __user *buf,

include/media/i2c/saa6588.h

20

unsigned char __user *buffer;

include/media/media-devnode.h

53

ssize_t (*read) (struct file *, char __user *, size_t, loff_t *);

include/media/media-devnode.h

54

ssize_t (*write) (struct file *, const char __user *, size_t, loff_t *);

include/media/v4l2-dev.h

203

ssize_t (*read) (struct file *, char __user *, size_t, loff_t *);

include/media/v4l2-dev.h

204

ssize_t (*write) (struct file *, const char __user *, size_t, loff_t *);

include/media/v4l2-dv-timings.h

281

struct file *filp, char __user *ubuf,

include/media/v4l2-ioctl.h

698

int v4l2_compat_get_user(void __user *arg, void *parg, unsigned int cmd);

include/media/v4l2-ioctl.h

699

int v4l2_compat_put_user(void __user *arg, void *parg, unsigned int cmd);

include/media/v4l2-ioctl.h

701

void __user *user_ptr, size_t array_size,

include/media/v4l2-ioctl.h

703

int v4l2_compat_put_array_args(struct file *file, void __user *user_ptr,

include/media/videobuf2-core.h

1096

ssize_t vb2_read(struct vb2_queue *q, char __user *data, size_t count,

include/media/videobuf2-core.h

1106

ssize_t vb2_write(struct vb2_queue *q, const char __user *data, size_t count,

include/media/videobuf2-v4l2.h

345

ssize_t vb2_fop_write(struct file *file, const char __user *buf,

include/media/videobuf2-v4l2.h

347

ssize_t vb2_fop_read(struct file *file, char __user *buf,

include/net/addrconf.h

112

int addrconf_add_ifaddr(struct net *net, void __user *arg);

include/net/addrconf.h

113

int addrconf_del_ifaddr(struct net *net, void __user *arg);

include/net/addrconf.h

114

int addrconf_set_dstaddr(struct net *net, void __user *arg);

include/net/arp.h

61

int arp_ioctl(struct net *net, unsigned int cmd, void __user *arg);

include/net/bluetooth/hci_core.h

1808

int hci_dev_cmd(unsigned int cmd, void __user *arg);

include/net/bluetooth/hci_core.h

1809

int hci_get_dev_list(void __user *arg);

include/net/bluetooth/hci_core.h

1810

int hci_get_dev_info(void __user *arg);

include/net/bluetooth/hci_core.h

1811

int hci_get_conn_list(void __user *arg);

include/net/bluetooth/hci_core.h

1812

int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);

include/net/bluetooth/hci_core.h

1813

int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);

include/net/bluetooth/hci_core.h

1814

int hci_inquiry(void __user *arg);

include/net/bluetooth/rfcomm.h

361

int rfcomm_dev_ioctl(struct sock *sk, unsigned int cmd, void __user *arg);

include/net/cfg80211.h

10871

char __user *userbuf, size_t count,

include/net/cfg80211.h

10895

const char __user *userbuf, size_t count,

include/net/checksum.h

28

__wsum csum_and_copy_from_user (const void __user *src, void *dst,

include/net/checksum.h

39

(const void *src, void __user *dst, int len)

include/net/compat.h

50

struct sockaddr __user **save_addr);

include/net/compat.h

51

int get_compat_msghdr(struct msghdr *, struct compat_msghdr __user *,

include/net/compat.h

52

struct sockaddr __user **, struct iovec **);

include/net/inet_connection_sock.h

51

char __user *optval, int __user *optlen);

include/net/ip.h

802

int ip_getsockopt(struct sock *sk, int level, int optname, char __user *optval,

include/net/ip.h

803

int __user *optlen);

include/net/ip_tunnels.h

411

const void __user *data);

include/net/ip_tunnels.h

412

bool ip_tunnel_parm_to_user(void __user *data, struct ip_tunnel_parm_kern *kp);

include/net/ip_tunnels.h

414

void __user *data, int cmd);

include/net/ipv6.h

1147

char __user *optval, int __user *optlen);

include/net/netkit.h

12

int netkit_prog_query(const union bpf_attr *attr, union bpf_attr __user *uattr);

include/net/netkit.h

34

union bpf_attr __user *uattr)

include/net/phonet/phonet.h

118

void __user *arg)

include/net/phonet/phonet.h

125

if (get_user(karg, (int __user *)arg))

include/net/scm.h

110

static inline int scm_recv_one_fd(struct file *f, int __user *ufd,

include/net/sctp/structs.h

437

char __user *optval,

include/net/sctp/structs.h

438

int __user *optlen);

include/net/sock.h

1314

int optname, char __user *optval,

include/net/sock.h

1315

int __user *option);

include/net/sock.h

1897

int sock_gettstamp(struct socket *sock, void __user *userstamp,

include/net/sock.h

1971

char __user *optval, int __user *optlen);

include/net/sock.h

3173

void __user *arg, void *karg, size_t size);

include/net/sock.h

3174

int sk_ioctl(struct sock *sk, unsigned int cmd, void __user *arg);

include/net/tcp.h

504

char __user *optval, int __user *optlen);

include/net/tcx.h

169

union bpf_attr __user *uattr);

include/net/tcx.h

197

union bpf_attr __user *uattr)

include/net/udp.h

433

char __user *optval, int __user *optlen);

include/net/wext.h

11

void __user *arg);

include/net/wext.h

19

void __user *arg)

include/net/x25.h

237

int x25_subscr_ioctl(unsigned int, void __user *);

include/net/x25.h

262

int x25_route_ioctl(unsigned int, void __user *);

include/rdma/ib_verbs.h

1669

const void __user *inbuf;

include/rdma/ib_verbs.h

1670

void __user *outbuf;

include/rdma/ib_verbs.h

3214

static inline bool ib_is_buffer_cleared(const void __user *p,

include/scsi/libsas.h

713

void __user *arg);

include/scsi/scsi_eh.h

30

extern int scsi_ioctl_reset(struct scsi_device *, int __user *);

include/scsi/scsi_host.h

125

void __user *arg);

include/scsi/scsi_host.h

136

void __user *arg);

include/scsi/scsi_ioctl.h

49

void __user *arg);

include/scsi/scsi_ioctl.h

50

int get_sg_io_hdr(struct sg_io_hdr *hdr, const void __user *argp);

include/scsi/scsi_ioctl.h

51

int put_sg_io_hdr(const struct sg_io_hdr *hdr, void __user *argp);

include/scsi/sg.h

181

void __user *usr_ptr; /* user provided pointer (in new interface) */

include/scsi/sg.h

35

void __user *iov_base; /* Starting address */

include/scsi/sg.h

48

void __user *dxferp; /* [i], [*io] points to data transfer memory

include/scsi/sg.h

50

unsigned char __user *cmdp; /* [i], [*i] points to command to perform */

include/scsi/sg.h

51

void __user *sbp; /* [i], [*o] points to sense_buffer memory */

include/scsi/sg.h

55

void __user * usr_ptr; /* [i->o] unused internally */

include/sound/compress_driver.h

165

int (*copy)(struct snd_compr_stream *stream, char __user *buf,

include/sound/control.h

23

unsigned int __user *tlv);

include/sound/core.h

293

int copy_to_user_fromio(void __user *dst, const volatile void __iomem *src, size_t count);

include/sound/core.h

294

int copy_from_user_toio(volatile void __iomem *dst, const void __user *src, size_t count);

include/sound/cs35l56.h

429

const char __user *from, size_t count,

include/sound/cs35l56.h

432

const char __user *from, size_t count,

include/sound/cs35l56.h

435

char __user *to, size_t count,

include/sound/cs35l56.h

438

const char __user *from, size_t count,

include/sound/emu10k1.h

1897

int snd_emu10k1_synth_copy_from_user(struct snd_emu10k1 *emu, struct snd_util_memblk *blk, int offset, const char __user *data, int size, u32 xor);

include/sound/emu8000.h

102

int snd_emu8000_load_chorus_fx(struct snd_emu8000 *emu, int mode, const void __user *buf, long len);

include/sound/emu8000.h

103

int snd_emu8000_load_reverb_fx(struct snd_emu8000 *emu, int mode, const void __user *buf, long len);

include/sound/emux_synth.h

46

const void __user *data, long count);

include/sound/emux_synth.h

51

const void __user *data, long count);

include/sound/gus.h

595

int snd_gus_dram_write(struct snd_gus_card *gus, char __user *ptr,

include/sound/gus.h

597

int snd_gus_dram_read(struct snd_gus_card *gus, char __user *ptr,

include/sound/hwdep.h

19

long (*read)(struct snd_hwdep *hw, char __user *buf,

include/sound/hwdep.h

21

long (*write)(struct snd_hwdep *hw, const char __user *buf,

include/sound/info.h

42

struct file *file, char __user *buf,

include/sound/info.h

45

struct file *file, const char __user *buf,

include/sound/opl3.h

360

long snd_opl3_write(struct snd_hwdep *hw, const char __user *buf, long count,

include/sound/pcm.h

1192

const void __user *buf, snd_pcm_uframes_t frames)

include/sound/pcm.h

1199

void __user *buf, snd_pcm_uframes_t frames)

include/sound/pcm.h

1206

void __user **bufs, snd_pcm_uframes_t frames)

include/sound/pcm.h

1213

void __user **bufs, snd_pcm_uframes_t frames)

include/sound/pcm.h

586

struct snd_pcm_info __user *info);

include/sound/rawmidi.h

52

void __user *argp);

include/sound/seq_oss.h

42

int (*load_patch)(struct snd_seq_oss_arg *p, int format, const char __user *buf, int offs, int count);

include/sound/soc-component.h

409

char __user *buf, size_t count);

include/sound/soc-component.h

54

struct snd_compr_stream *stream, char __user *buf,

include/sound/soc-topology.h

89

int (*get)(struct snd_kcontrol *kcontrol, unsigned int __user *bytes,

include/sound/soc-topology.h

92

const unsigned int __user *bytes, unsigned int size);

include/sound/soc.h

1253

int (*get)(struct snd_kcontrol *kcontrol, unsigned int __user *bytes,

include/sound/soc.h

1255

int (*put)(struct snd_kcontrol *kcontrol, const unsigned int __user *bytes,

include/sound/soc.h

591

unsigned int size, unsigned int __user *tlv);

include/sound/soundfont.h

61

const void __user *buf, long count);

include/sound/soundfont.h

90

struct snd_sf_list *sflist, const void __user *data,

include/sound/soundfont.h

93

struct snd_sf_list *sflist, const char __user *data,

include/sound/wavefront.h

493

wavefront_any __user *hdrptr; /* user-space ptr to hdr bytes */

include/sound/wavefront.h

494

u16 __user *dataptr; /* actual sample data */

include/uapi/asm-generic/siginfo.h

10

void __user *sival_ptr;

include/uapi/asm-generic/siginfo.h

110

void __user *_call_addr; /* calling user insn */

include/uapi/asm-generic/siginfo.h

70

void __user *_addr; /* faulting insn/memory ref. */

include/uapi/asm-generic/siginfo.h

85

void __user *_lower;

include/uapi/asm-generic/siginfo.h

86

void __user *_upper;

include/uapi/asm-generic/signal-defs.h

83

typedef __signalfn_t __user *__sighandler_t;

include/uapi/asm-generic/signal-defs.h

86

typedef __restorefn_t __user *__sigrestore_t;

include/uapi/asm-generic/signal.h

86

void __user *ss_sp;

include/uapi/drm/drm.h

126

char __user *name; /**< Name of driver */

include/uapi/drm/drm.h

128

char __user *date; /**< User-space buffer to hold date */

include/uapi/drm/drm.h

130

char __user *desc; /**< User-space buffer to hold desc */

include/uapi/drm/drm.h

140

char __user *unique; /**< Unique name for driver instantiation */

include/uapi/drm/drm.h

145

struct drm_version __user *version;

include/uapi/drm/drm.h

340

struct drm_buf_desc __user *list;

include/uapi/drm/drm.h

348

int __user *list;

include/uapi/drm/drm.h

360

void __user *address; /**< Address of buffer */

include/uapi/drm/drm.h

369

void __user *virt;

include/uapi/drm/drm.h

371

void __user *virtual; /**< Mmap'd area in user-virtual */

include/uapi/drm/drm.h

373

struct drm_buf_pub __user *list; /**< Buffer information */

include/uapi/drm/drm.h

386

int __user *send_indices; /**< List of handles to buffers */

include/uapi/drm/drm.h

387

int __user *send_sizes; /**< Lengths of data to send */

include/uapi/drm/drm.h

391

int __user *request_indices; /**< Buffer information */

include/uapi/drm/drm.h

392

int __user *request_sizes;

include/uapi/drm/drm.h

416

struct drm_ctx __user *contexts;

include/uapi/drm/i915_drm.h

562

struct drm_clip_rect __user *cliprects; /* pointer to userspace cliprects */

include/uapi/drm/i915_drm.h

569

char __user *buf; /* pointer to userspace command buffer */

include/uapi/drm/i915_drm.h

574

struct drm_clip_rect __user *cliprects; /* pointer to userspace cliprects */

include/uapi/drm/i915_drm.h

580

int __user *irq_seq;

include/uapi/drm/i915_drm.h

830

int __user *value;

include/uapi/drm/i915_drm.h

860

int __user *region_offset; /* offset from start of fb or agp */

include/uapi/drm/radeon_drm.h

622

drm_radeon_clear_rect_t __user *depth_boxes;

include/uapi/drm/radeon_drm.h

648

drm_radeon_state_t __user *state;

include/uapi/drm/radeon_drm.h

650

drm_radeon_prim_t __user *prim;

include/uapi/drm/radeon_drm.h

665

char __user *buf;

include/uapi/drm/radeon_drm.h

667

struct drm_clip_rect __user *boxes;

include/uapi/drm/radeon_drm.h

673

const void __user *data;

include/uapi/drm/radeon_drm.h

682

drm_radeon_tex_image_t __user *image;

include/uapi/drm/radeon_drm.h

686

unsigned int __user *mask;

include/uapi/drm/radeon_drm.h

726

void __user *value;

include/uapi/drm/radeon_drm.h

738

int __user *region_offset; /* offset from start of fb or GART */

include/uapi/drm/radeon_drm.h

755

int __user *irq_seq;

include/uapi/linux/atm.h

237

void __user *arg;

include/uapi/linux/atmdev.h

140

void __user *buffer;

include/uapi/linux/blkpg.h

15

void __user *data;

include/uapi/linux/btrfs.h

142

struct btrfs_qgroup_inherit __user *qgroup_inherit;

include/uapi/linux/btrfs.h

855

__u64 __user *clone_sources; /* in */

include/uapi/linux/btrfs.h

976

const struct iovec __user *iov;

include/uapi/linux/capability.h

43

} __user *cap_user_header_t;

include/uapi/linux/cciss_ioctl.h

46

BYTE __user *buf;

include/uapi/linux/cciss_ioctl.h

56

BYTE __user *buf;

include/uapi/linux/cdrom.h

246

__u8 __user *buf; /* frame buffer (size: nframes*2352 bytes) */

include/uapi/linux/cdrom.h

287

unsigned char __user *buffer;

include/uapi/linux/cdrom.h

290

struct request_sense __user *sense;

include/uapi/linux/cdrom.h

295

void __user *reserved[1]; /* unused, actually */

include/uapi/linux/cdrom.h

296

void __user *unused;

include/uapi/linux/chio.h

103

unsigned char __user *ces_data;

include/uapi/linux/coda.h

736

void __user *in; /* Data to be transferred in */

include/uapi/linux/coda.h

737

void __user *out; /* Data to be transferred out */

include/uapi/linux/coda.h

743

const char __user *path;

include/uapi/linux/comedi.h

494

unsigned int __user *data;

include/uapi/linux/comedi.h

509

struct comedi_insn __user *insns;

include/uapi/linux/comedi.h

611

short __user *data;

include/uapi/linux/comedi.h

635

unsigned int __user *maxdata_list;

include/uapi/linux/comedi.h

636

unsigned int __user *flaglist;

include/uapi/linux/comedi.h

637

unsigned int __user *rangelist;

include/uapi/linux/comedi.h

660

void __user *range_ptr;

include/uapi/linux/cxl_mem.h

178

struct cxl_command_info __user commands[]; /* out: supported commands */

include/uapi/linux/dlm_device.h

42

void __user *castparam;

include/uapi/linux/dlm_device.h

43

void __user *castaddr;

include/uapi/linux/dlm_device.h

44

void __user *bastparam;

include/uapi/linux/dlm_device.h

45

void __user *bastaddr;

include/uapi/linux/dlm_device.h

46

struct dlm_lksb __user *lksb;

include/uapi/linux/dlm_device.h

85

void __user * user_astaddr;

include/uapi/linux/dlm_device.h

86

void __user * user_astparam;

include/uapi/linux/dlm_device.h

87

struct dlm_lksb __user * user_lksb;

include/uapi/linux/dvb/osd.h

129

void __user *data;

include/uapi/linux/dvb/video.h

133

char __user *iFrame; /* pointer to a single iframe in memory */

include/uapi/linux/fd.h

354

void __user *data;

include/uapi/linux/filter.h

33

struct sock_filter __user *filter;

include/uapi/linux/futex.h

144

struct robust_list __user *next;

include/uapi/linux/futex.h

179

struct robust_list __user *list_op_pending;

include/uapi/linux/i2c-dev.h

46

union i2c_smbus_data __user *data;

include/uapi/linux/i2c-dev.h

51

struct i2c_msg __user *msgs; /* pointers to i2c_msgs */

include/uapi/linux/i2o-dev.h

56

void __user *msg; /* message */

include/uapi/linux/i2o-dev.h

61

void __user *resbuf; /* Buffer for result */

include/uapi/linux/i2o-dev.h

62

unsigned int __user *reslen; /* Buffer length in bytes */

include/uapi/linux/i2o-dev.h

68

void __user *opbuf; /* Operation List buffer */

include/uapi/linux/i2o-dev.h

70

void __user *resbuf; /* Result List buffer */

include/uapi/linux/i2o-dev.h

71

unsigned int __user *reslen; /* Result List buffer length in bytes */

include/uapi/linux/i2o-dev.h

79

void __user *buf; /* Pointer to software buffer */

include/uapi/linux/i2o-dev.h

80

unsigned int __user *swlen; /* Length of software data */

include/uapi/linux/i2o-dev.h

81

unsigned int __user *maxfrag; /* Maximum fragment count */

include/uapi/linux/i2o-dev.h

82

unsigned int __user *curfrag; /* Current fragment count */

include/uapi/linux/i2o-dev.h

89

void __user *resbuf; /* Buffer for reply HTML page */

include/uapi/linux/i2o-dev.h

90

unsigned int __user *reslen; /* Length in bytes of reply buffer */

include/uapi/linux/i2o-dev.h

91

void __user *qbuf; /* Pointer to HTTP query string */

include/uapi/linux/if.h

212

raw_hdlc_proto __user *raw_hdlc;

include/uapi/linux/if.h

213

cisco_proto __user *cisco;

include/uapi/linux/if.h

214

fr_proto __user *fr;

include/uapi/linux/if.h

215

fr_proto_pvc __user *fr_pvc;

include/uapi/linux/if.h

216

fr_proto_pvc_info __user *fr_pvc_info;

include/uapi/linux/if.h

217

x25_hdlc_proto __user *x25;

include/uapi/linux/if.h

220

sync_serial_settings __user *sync;

include/uapi/linux/if.h

221

te1_settings __user *te1;

include/uapi/linux/if.h

253

void __user * ifru_data;

include/uapi/linux/if.h

289

char __user *ifcu_buf;

include/uapi/linux/if.h

290

struct ifreq __user *ifcu_req;

include/uapi/linux/input.h

416

__s16 __user *custom_data;

include/uapi/linux/ipc.h

59

struct msgbuf __user *msgp;

include/uapi/linux/ipmi.h

152

unsigned char __user *data;

include/uapi/linux/ipmi.h

248

unsigned char __user *addr; /* Address to send the message to. */

include/uapi/linux/ipmi.h

297

unsigned char __user *addr; /* Address the message was from is put

include/uapi/linux/ivtv.h

53

void __user *y_source; /* if NULL and type == V4L2_BUF_TYPE_VIDEO_OUTPUT,

include/uapi/linux/ivtv.h

55

void __user *uv_source; /* Unused for RGB pixelformats */

include/uapi/linux/ivtvfb.h

31

void __user *source;

include/uapi/linux/kd.h

164

unsigned char __user *data; /* font data with vpitch fixed to 32 for

include/uapi/linux/kd.h

17

char __user *chardata; /* font data in expanded form */

include/uapi/linux/kd.h

68

struct unipair __user *entries;

include/uapi/linux/keyctl.h

87

char __user *hashname;

include/uapi/linux/keyctl.h

88

char __user *otherinfo;

include/uapi/linux/kvm.h

577

void __user *dirty_bitmap; /* one bit per page */

include/uapi/linux/kvm.h

588

void __user *dirty_bitmap; /* one bit per page */

include/uapi/linux/media.h

238

struct media_pad_desc __user *pads;

include/uapi/linux/media.h

240

struct media_link_desc __user *links;

include/uapi/linux/netfilter_arp/arp_tables.h

181

struct xt_counters __user *counters;

include/uapi/linux/netfilter_bridge/ebtables.h

52

struct ebt_entries __user *hook_entry[NF_BR_NUMHOOKS];

include/uapi/linux/netfilter_bridge/ebtables.h

56

struct ebt_counter __user *counters;

include/uapi/linux/netfilter_bridge/ebtables.h

57

char __user *entries;

include/uapi/linux/netfilter_ipv4/ip_tables.h

203

struct xt_counters __user *counters;

include/uapi/linux/netfilter_ipv6/ip6_tables.h

243

struct xt_counters __user *counters;

include/uapi/linux/nfs4_mount.h

24

const char __user * data;

include/uapi/linux/nfs4_mount.h

49

struct sockaddr __user * host_addr; /* 1 */

include/uapi/linux/nfs4_mount.h

56

int __user *auth_flavours; /* 1 */

include/uapi/linux/omap3isp.h

179

void __user *buf;

include/uapi/linux/omap3isp.h

439

struct omap3isp_ccdc_bclamp __user *bclamp;

include/uapi/linux/omap3isp.h

440

struct omap3isp_ccdc_blcomp __user *blcomp;

include/uapi/linux/omap3isp.h

441

struct omap3isp_ccdc_fpc __user *fpc;

include/uapi/linux/omap3isp.h

442

struct omap3isp_ccdc_lsc_config __user *lsc_cfg;

include/uapi/linux/omap3isp.h

443

struct omap3isp_ccdc_culling __user *cull;

include/uapi/linux/omap3isp.h

444

__u8 __user *lsc;

include/uapi/linux/omap3isp.h

660

struct omap3isp_prev_luma __user *luma;

include/uapi/linux/omap3isp.h

661

struct omap3isp_prev_hmed __user *hmed;

include/uapi/linux/omap3isp.h

662

struct omap3isp_prev_cfa __user *cfa;

include/uapi/linux/omap3isp.h

663

struct omap3isp_prev_csup __user *csup;

include/uapi/linux/omap3isp.h

664

struct omap3isp_prev_wbal __user *wbal;

include/uapi/linux/omap3isp.h

665

struct omap3isp_prev_blkadj __user *blkadj;

include/uapi/linux/omap3isp.h

666

struct omap3isp_prev_rgbtorgb __user *rgb2rgb;

include/uapi/linux/omap3isp.h

667

struct omap3isp_prev_csc __user *csc;

include/uapi/linux/omap3isp.h

668

struct omap3isp_prev_yclimit __user *yclimit;

include/uapi/linux/omap3isp.h

669

struct omap3isp_prev_dcor __user *dcor;

include/uapi/linux/omap3isp.h

670

struct omap3isp_prev_nf __user *nf;

include/uapi/linux/omap3isp.h

671

struct omap3isp_prev_gtables __user *gamma;

include/uapi/linux/omapfb.h

186

void __user *buffer;

include/uapi/linux/ppp-ioctl.h

62

__u8 __user *ptr;

include/uapi/linux/route.h

41

char __user *rt_dev; /* forcing the device at add */

include/uapi/linux/sctp.h

1023

struct sockaddr __user *addrs;

include/uapi/linux/sem.h

49

struct semid_ds __user *buf; /* buffer for IPC_STAT & IPC_SET */

include/uapi/linux/sem.h

50

unsigned short __user *array; /* array for GETALL & SETALL */

include/uapi/linux/sem.h

51

struct seminfo __user *__buf; /* buffer for IPC_INFO */

include/uapi/linux/sem.h

52

void __user *__pad;

include/uapi/linux/sysctl.h

36

int __user *name;

include/uapi/linux/sysctl.h

38

void __user *oldval;

include/uapi/linux/sysctl.h

39

size_t __user *oldlenp;

include/uapi/linux/sysctl.h

40

void __user *newval;

include/uapi/linux/uhid.h

133

__u8 __user *rd_data;

include/uapi/linux/uio.h

19

void __user *iov_base; /* BSD uses caddr_t (1003.1g requires void *) */

include/uapi/linux/usb/tmc.h

54

void __user *data; /* pointer to user space */

include/uapi/linux/usb/tmc.h

73

void __user *message; /* pointer to header and data in user space */

include/uapi/linux/usbdevice_fs.h

122

void __user *buffer;

include/uapi/linux/usbdevice_fs.h

133

void __user *usercontext;

include/uapi/linux/usbdevice_fs.h

142

void __user *data; /* param buffer (in, or out) */

include/uapi/linux/usbdevice_fs.h

47

void __user *data;

include/uapi/linux/usbdevice_fs.h

54

void __user *data;

include/uapi/linux/usbdevice_fs.h

64

void __user *context;

include/uapi/linux/uvcvideo.h

70

struct uvc_menu_info __user *menu_info;

include/uapi/linux/uvcvideo.h

82

__u8 __user *data;

include/uapi/linux/vfio.h

1649

__u64 __user *data; /* one bit per page */

include/uapi/linux/videodev2.h

1332

struct v4l2_clip __user *next;

include/uapi/linux/videodev2.h

1341

void __user *bitmap;

include/uapi/linux/videodev2.h

1881

char __user *string;

include/uapi/linux/videodev2.h

1882

__u8 __user *p_u8;

include/uapi/linux/videodev2.h

1883

__u16 __user *p_u16;

include/uapi/linux/videodev2.h

1884

__u32 __user *p_u32;

include/uapi/linux/videodev2.h

1885

__s32 __user *p_s32;

include/uapi/linux/videodev2.h

1886

__s64 __user *p_s64;

include/uapi/linux/videodev2.h

1887

struct v4l2_area __user *p_area;

include/uapi/linux/videodev2.h

1888

struct v4l2_rect __user *p_rect;

include/uapi/linux/videodev2.h

1889

struct v4l2_ctrl_h264_sps __user *p_h264_sps;

include/uapi/linux/videodev2.h

1890

struct v4l2_ctrl_h264_pps __user *p_h264_pps;

include/uapi/linux/videodev2.h

1891

struct v4l2_ctrl_h264_scaling_matrix __user *p_h264_scaling_matrix;

include/uapi/linux/videodev2.h

1892

struct v4l2_ctrl_h264_pred_weights __user *p_h264_pred_weights;

include/uapi/linux/videodev2.h

1893

struct v4l2_ctrl_h264_slice_params __user *p_h264_slice_params;

include/uapi/linux/videodev2.h

1894

struct v4l2_ctrl_h264_decode_params __user *p_h264_decode_params;

include/uapi/linux/videodev2.h

1895

struct v4l2_ctrl_fwht_params __user *p_fwht_params;

include/uapi/linux/videodev2.h

1896

struct v4l2_ctrl_vp8_frame __user *p_vp8_frame;

include/uapi/linux/videodev2.h

1897

struct v4l2_ctrl_mpeg2_sequence __user *p_mpeg2_sequence;

include/uapi/linux/videodev2.h

1898

struct v4l2_ctrl_mpeg2_picture __user *p_mpeg2_picture;

include/uapi/linux/videodev2.h

1899

struct v4l2_ctrl_mpeg2_quantisation __user *p_mpeg2_quantisation;

include/uapi/linux/videodev2.h

1900

struct v4l2_ctrl_vp9_compressed_hdr __user *p_vp9_compressed_hdr_probs;

include/uapi/linux/videodev2.h

1901

struct v4l2_ctrl_vp9_frame __user *p_vp9_frame;

include/uapi/linux/videodev2.h

1902

struct v4l2_ctrl_hevc_sps __user *p_hevc_sps;

include/uapi/linux/videodev2.h

1903

struct v4l2_ctrl_hevc_pps __user *p_hevc_pps;

include/uapi/linux/videodev2.h

1904

struct v4l2_ctrl_hevc_slice_params __user *p_hevc_slice_params;

include/uapi/linux/videodev2.h

1905

struct v4l2_ctrl_hevc_scaling_matrix __user *p_hevc_scaling_matrix;

include/uapi/linux/videodev2.h

1906

struct v4l2_ctrl_hevc_decode_params __user *p_hevc_decode_params;

include/uapi/linux/videodev2.h

1907

struct v4l2_ctrl_av1_sequence __user *p_av1_sequence;

include/uapi/linux/videodev2.h

1908

struct v4l2_ctrl_av1_tile_group_entry __user *p_av1_tile_group_entry;

include/uapi/linux/videodev2.h

1909

struct v4l2_ctrl_av1_frame __user *p_av1_frame;

include/uapi/linux/videodev2.h

1910

struct v4l2_ctrl_av1_film_grain __user *p_av1_film_grain;

include/uapi/linux/videodev2.h

1911

struct v4l2_ctrl_hdr10_cll_info __user *p_hdr10_cll_info;

include/uapi/linux/videodev2.h

1912

struct v4l2_ctrl_hdr10_mastering_display __user *p_hdr10_mastering_display;

include/uapi/linux/videodev2.h

1913

void __user *ptr;

include/uapi/linux/wireless.h

692

void __user *pointer; /* Pointer to the data (in user space) */

include/uapi/mtd/mtd-abi.h

39

unsigned char __user *ptr;

include/uapi/sound/asound.h

1135

struct snd_ctl_elem_id __user *pids; /* R: IDs */

include/uapi/sound/asound.h

129

unsigned char __user *image; /* W: binary image */

include/uapi/sound/asound.h

609

void __user *buf;

include/uapi/sound/asound.h

615

void __user * __user *bufs;

include/uapi/xen/gntdev.h

157

void __user *virt;

include/uapi/xen/gntdev.h

202

struct gntdev_grant_copy_segment __user *segments;

include/uapi/xen/privcmd.h

59

struct privcmd_mmap_entry __user *entry;

include/uapi/xen/privcmd.h

66

xen_pfn_t __user *arr; /* array of mfns - or'd with

include/uapi/xen/privcmd.h

77

const xen_pfn_t __user *arr; /* array of mfns */

include/uapi/xen/privcmd.h

78

int __user *err; /* array of error codes */

include/uapi/xen/privcmd.h

82

void __user *uptr;

include/uapi/xen/privcmd.h

89

const struct privcmd_dm_op_buf __user *ubufs;

io_uring/bpf_filter.c

314

struct io_uring_bpf __user *arg)

io_uring/bpf_filter.c

360

struct io_uring_bpf __user *arg)

io_uring/bpf_filter.h

12

struct io_uring_bpf __user *arg);

io_uring/bpf_filter.h

30

struct io_uring_bpf __user *arg)

io_uring/cancel.c

268

int io_sync_cancel(struct io_ring_ctx *ctx, void __user *arg)

io_uring/cancel.h

22

int io_sync_cancel(struct io_ring_ctx *ctx, void __user *arg);

io_uring/cmd_net.c

156

struct sockaddr __user *uaddr;

io_uring/cmd_net.c

158

int __user *ulen;

io_uring/cmd_net.c

32

void __user *optval;

io_uring/cmd_net.c

59

void __user *optval;

io_uring/epoll.c

26

struct epoll_event __user *events;

io_uring/epoll.c

41

struct epoll_event __user *ev;

io_uring/eventfd.c

120

int io_eventfd_register(struct io_ring_ctx *ctx, void __user *arg,

io_uring/eventfd.c

124

__s32 __user *fds = arg;

io_uring/eventfd.h

4

int io_eventfd_register(struct io_ring_ctx *ctx, void __user *arg,

io_uring/filetable.c

144

struct io_uring_file_index_range __user *arg)

io_uring/filetable.h

18

struct io_uring_file_index_range __user *arg);

io_uring/fs.c

110

const char __user *fname;

io_uring/fs.c

163

const char __user *fname;

io_uring/fs.c

209

const char __user *oldpath, *newpath;

io_uring/fs.c

255

const char __user *oldf, *newf;

io_uring/fs.c

53

const char __user *oldf, *newf;

io_uring/futex.c

17

void __user *uaddr;

io_uring/io_uring.c

2453

const struct io_uring_getevents_arg __user *uarg)

io_uring/io_uring.c

2472

const void __user *argp, size_t argsz)

io_uring/io_uring.c

2488

const void __user *argp, struct ext_arg *ext_arg)

io_uring/io_uring.c

2490

const struct io_uring_getevents_arg __user *uarg = argp;

io_uring/io_uring.c

2500

ext_arg->sig = (const sigset_t __user *) argp;

io_uring/io_uring.c

2596

u32, min_complete, u32, flags, const void __user *, argp,

io_uring/io_uring.c

3106

static long io_uring_setup(u32 entries, struct io_uring_params __user *params)

io_uring/io_uring.c

3146

struct io_uring_params __user *, params)

io_uring/io_uring.h

32

struct io_uring_params __user *uptr;

io_uring/kbuf.c

135

static void __user *io_provided_buffer_select(struct io_kiocb *req, size_t *len,

io_uring/kbuf.c

160

void __user *buf;

io_uring/kbuf.c

629

int io_register_pbuf_ring(struct io_ring_ctx *ctx, void __user *arg)

io_uring/kbuf.c

716

int io_unregister_pbuf_ring(struct io_ring_ctx *ctx, void __user *arg)

io_uring/kbuf.c

741

int io_register_pbuf_status(struct io_ring_ctx *ctx, void __user *arg)

io_uring/kbuf.h

82

int io_register_pbuf_ring(struct io_ring_ctx *ctx, void __user *arg);

io_uring/kbuf.h

83

int io_unregister_pbuf_ring(struct io_ring_ctx *ctx, void __user *arg);

io_uring/kbuf.h

84

int io_register_pbuf_status(struct io_ring_ctx *ctx, void __user *arg);

io_uring/mock_file.c

214

struct io_uring_mock_create mc, __user *uarg;

io_uring/mock_file.c

281

struct io_uring_mock_probe mp, __user *uarg;

io_uring/mock_file.c

31

static int io_copy_regbuf(struct iov_iter *reg_iter, void __user *ubuf)

io_uring/mock_file.c

68

const struct iovec __user *iovec;

io_uring/mock_file.c

71

void __user *ubuf;

io_uring/napi.c

304

int io_register_napi(struct io_ring_ctx *ctx, void __user *arg)

io_uring/napi.c

348

int io_unregister_napi(struct io_ring_ctx *ctx, void __user *arg)

io_uring/napi.h

15

int io_register_napi(struct io_ring_ctx *ctx, void __user *arg);

io_uring/napi.h

16

int io_unregister_napi(struct io_ring_ctx *ctx, void __user *arg);

io_uring/napi.h

65

static inline int io_register_napi(struct io_ring_ctx *ctx, void __user *arg)

io_uring/napi.h

69

static inline int io_unregister_napi(struct io_ring_ctx *ctx, void __user *arg)

io_uring/net.c

1904

struct sockaddr __user *uaddr;

io_uring/net.c

213

const struct iovec __user *uiov, unsigned uvec_seg,

io_uring/net.c

242

struct sockaddr __user **save_addr)

io_uring/net.c

245

struct compat_iovec __user *uiov;

io_uring/net.c

273

struct user_msghdr __user *umsg)

io_uring/net.c

292

struct sockaddr __user **save_addr)

io_uring/net.c

295

struct user_msghdr __user *umsg = sr->umsg;

io_uring/net.c

30

struct sockaddr __user *addr;

io_uring/net.c

31

int __user *addr_len;

io_uring/net.c

332

struct iovec __user *uiov = msg->msg_iov;

io_uring/net.c

354

void __user *addr;

io_uring/net.c

50

struct sockaddr __user *addr;

io_uring/net.c

69

struct compat_msghdr __user *umsg_compat;

io_uring/net.c

70

struct user_msghdr __user *umsg;

io_uring/net.c

71

void __user *buf;

io_uring/net.c

84

void __user *msg_control;

io_uring/net.c

968

struct io_sr_msg *sr, void __user **buf,

io_uring/net.c

982

kmsg->msg.msg_control_user = (void __user *) control;

io_uring/net.c

987

*buf = (void __user *) (ubuf + hdr);

io_uring/net.h

17

struct sockaddr __user *uaddr;

io_uring/openclose.c

107

struct open_how __user *how;

io_uring/openclose.c

320

int __user *fds;

io_uring/openclose.c

56

const char __user *fname;

io_uring/query.c

125

int io_query(void __user *arg, unsigned nr_args)

io_uring/query.c

128

void __user *uhdr = arg;

io_uring/query.c

69

static int io_handle_query_entry(union io_query_data *data, void __user *uhdr,

io_uring/query.c

75

void __user *udata;

io_uring/query.h

7

int io_query(void __user *arg, unsigned nr_args);

io_uring/register.c

1001

static int io_uring_register_blind(unsigned int opcode, void __user *arg,

io_uring/register.c

1018

void __user *, arg, unsigned int, nr_args)

io_uring/register.c

111

static __cold int io_parse_restrictions(void __user *arg, unsigned int nr_args,

io_uring/register.c

168

void __user *arg, unsigned int nr_args)

io_uring/register.c

201

static int io_register_restrictions_task(void __user *arg, unsigned int nr_args)

io_uring/register.c

203

struct io_uring_task_restriction __user *ures = arg;

io_uring/register.c

242

static int io_register_bpf_filter_task(void __user *arg, unsigned int nr_args)

io_uring/register.c

316

void __user *arg, unsigned len)

io_uring/register.c

331

(const compat_ulong_t __user *)arg,

io_uring/register.c

353

void __user *arg)

io_uring/register.c

41

static __cold int io_probe(struct io_ring_ctx *ctx, void __user *arg,

io_uring/register.c

444

struct io_uring_clock_register __user *arg)

io_uring/register.c

498

static int io_register_resize_rings(struct io_ring_ctx *ctx, void __user *arg)

io_uring/register.c

703

static int io_register_mem_region(struct io_ring_ctx *ctx, void __user *uarg)

io_uring/register.c

705

struct io_uring_mem_region_reg __user *reg_uptr = uarg;

io_uring/register.c

707

struct io_uring_region_desc __user *rd_uptr;

io_uring/register.c

751

void __user *arg, unsigned nr_args)

io_uring/register.c

980

static int io_uring_register_send_msg_ring(void __user *arg, unsigned int nr_args)

io_uring/rsrc.c

1406

int io_register_clone_buffers(struct io_ring_ctx *ctx, void __user *arg)

io_uring/rsrc.c

1685

const struct iovec __user *uvec, size_t uvec_segs)

io_uring/rsrc.c

303

u64 __user *tags = u64_to_user_ptr(up->tags);

io_uring/rsrc.c

304

__s32 __user *fds = u64_to_user_ptr(up->data);

io_uring/rsrc.c

371

u64 __user *tags = u64_to_user_ptr(up->tags);

io_uring/rsrc.c

373

struct iovec __user *uvec;

io_uring/rsrc.c

440

int io_register_files_update(struct io_ring_ctx *ctx, void __user *arg,

io_uring/rsrc.c

455

int io_register_rsrc_update(struct io_ring_ctx *ctx, void __user *arg,

io_uring/rsrc.c

469

__cold int io_register_rsrc(struct io_ring_ctx *ctx, void __user *arg,

io_uring/rsrc.c

522

__s32 __user *fds = u64_to_user_ptr(up->arg);

io_uring/rsrc.c

616

int io_sqe_files_register(struct io_ring_ctx *ctx, void __user *arg,

io_uring/rsrc.c

617

unsigned nr_args, u64 __user *tags)

io_uring/rsrc.c

619

__s32 __user *fds = (__s32 __user *) arg;

io_uring/rsrc.c

950

int io_sqe_buffers_register(struct io_ring_ctx *ctx, void __user *arg,

io_uring/rsrc.c

951

unsigned int nr_args, u64 __user *tags)

io_uring/rsrc.c

955

const struct iovec __user *uvec;

io_uring/rsrc.c

976

uvec = (struct iovec __user *) arg;

io_uring/rsrc.h

74

const struct iovec __user *uvec, size_t uvec_segs);

io_uring/rsrc.h

76

int io_register_clone_buffers(struct io_ring_ctx *ctx, void __user *arg);

io_uring/rsrc.h

78

int io_sqe_buffers_register(struct io_ring_ctx *ctx, void __user *arg,

io_uring/rsrc.h

79

unsigned int nr_args, u64 __user *tags);

io_uring/rsrc.h

81

int io_sqe_files_register(struct io_ring_ctx *ctx, void __user *arg,

io_uring/rsrc.h

82

unsigned nr_args, u64 __user *tags);

io_uring/rsrc.h

84

int io_register_files_update(struct io_ring_ctx *ctx, void __user *arg,

io_uring/rsrc.h

86

int io_register_rsrc_update(struct io_ring_ctx *ctx, void __user *arg,

io_uring/rsrc.h

88

int io_register_rsrc(struct io_ring_ctx *ctx, void __user *arg,

io_uring/rw.c

420

const struct iovec __user *uvec;

io_uring/rw.c

55

struct compat_iovec __user *uiov = u64_to_user_ptr(rw->addr);

io_uring/rw.c

66

struct iovec __user *uiov;

io_uring/rw.c

717

void __user *addr;

io_uring/rw.c

85

const struct iovec __user *uvec,

io_uring/statx.c

20

struct statx __user *buffer;

io_uring/statx.c

26

const char __user *path;

io_uring/tctx.c

318

int io_ringfd_register(struct io_ring_ctx *ctx, void __user *__arg,

io_uring/tctx.c

321

struct io_uring_rsrc_update __user *arg = __arg;

io_uring/tctx.c

377

int io_ringfd_unregister(struct io_ring_ctx *ctx, void __user *__arg,

io_uring/tctx.c

380

struct io_uring_rsrc_update __user *arg = __arg;

io_uring/tctx.h

18

int io_ringfd_register(struct io_ring_ctx *ctx, void __user *__arg,

io_uring/tctx.h

20

int io_ringfd_unregister(struct io_ring_ctx *ctx, void __user *__arg,

io_uring/uring_cmd.c

304

const struct iovec __user *uvec,

io_uring/wait.c

243

ret = set_compat_user_sigmask((const compat_sigset_t __user *)ext_arg->sig,

io_uring/wait.h

20

const sigset_t __user *sig;

io_uring/waitid.c

31

struct siginfo __user *infop;

io_uring/waitid.c

45

struct compat_siginfo __user *infop;

io_uring/waitid.c

48

infop = (struct compat_siginfo __user *) iw->infop;

io_uring/xattr.c

126

const char __user *name;

io_uring/xattr.c

154

const char __user *path;

io_uring/xattr.c

46

const char __user *name;

io_uring/xattr.c

82

const char __user *path;

io_uring/zcrx.c

1426

int io_zcrx_ctrl(struct io_ring_ctx *ctx, void __user *arg, unsigned nr_args)

io_uring/zcrx.c

718

struct zcrx_ctrl *ctrl, void __user *arg)

io_uring/zcrx.c

755

struct io_uring_zcrx_ifq_reg __user *arg,

io_uring/zcrx.c

885

struct io_uring_zcrx_ifq_reg __user *arg)

io_uring/zcrx.h

100

struct io_uring_zcrx_ifq_reg __user *arg)

io_uring/zcrx.h

122

void __user *arg, unsigned nr_arg)

io_uring/zcrx.h

88

int io_zcrx_ctrl(struct io_ring_ctx *ctx, void __user *arg, unsigned nr_arg);

io_uring/zcrx.h

90

struct io_uring_zcrx_ifq_reg __user *arg);

ipc/compat.c

39

struct compat_ipc64_perm __user *from)

ipc/compat.c

51

struct compat_ipc_perm __user *from)

ipc/mqueue.c

1037

static int do_mq_timedsend(mqd_t mqdes, const char __user *u_msg_ptr,

ipc/mqueue.c

1142

static int do_mq_timedreceive(mqd_t mqdes, char __user *u_msg_ptr,

ipc/mqueue.c

1143

size_t msg_len, unsigned int __user *u_msg_prio,

ipc/mqueue.c

1233

SYSCALL_DEFINE5(mq_timedsend, mqd_t, mqdes, const char __user *, u_msg_ptr,

ipc/mqueue.c

1235

const struct __kernel_timespec __user *, u_abs_timeout)

ipc/mqueue.c

1247

SYSCALL_DEFINE5(mq_timedreceive, mqd_t, mqdes, char __user *, u_msg_ptr,

ipc/mqueue.c

1248

size_t, msg_len, unsigned int __user *, u_msg_prio,

ipc/mqueue.c

1249

const struct __kernel_timespec __user *, u_abs_timeout)

ipc/mqueue.c

1376

const struct sigevent __user *, u_notification)

ipc/mqueue.c

1428

const struct mq_attr __user *, u_mqstat,

ipc/mqueue.c

1429

struct mq_attr __user *, u_omqstat)

ipc/mqueue.c

1463

const struct compat_mq_attr __user *uattr)

ipc/mqueue.c

1479

struct compat_mq_attr __user *uattr)

ipc/mqueue.c

1493

COMPAT_SYSCALL_DEFINE4(mq_open, const char __user *, u_name,

ipc/mqueue.c

1495

struct compat_mq_attr __user *, u_attr)

ipc/mqueue.c

1507

const struct compat_sigevent __user *, u_notification)

ipc/mqueue.c

1521

const struct compat_mq_attr __user *, u_mqstat,

ipc/mqueue.c

1522

struct compat_mq_attr __user *, u_omqstat)

ipc/mqueue.c

1547

static int compat_prepare_timeout(const struct old_timespec32 __user *p,

ipc/mqueue.c

1558

const char __user *, u_msg_ptr,

ipc/mqueue.c

1560

const struct old_timespec32 __user *, u_abs_timeout)

ipc/mqueue.c

1573

char __user *, u_msg_ptr,

ipc/mqueue.c

1574

unsigned int, msg_len, unsigned int __user *, u_msg_prio,

ipc/mqueue.c

1575

const struct old_timespec32 __user *, u_abs_timeout)

ipc/mqueue.c

629

static ssize_t mqueue_read_file(struct file *filp, char __user *u_data,

ipc/mqueue.c

838

static int prepare_timeout(const struct __kernel_timespec __user *u_abs_timeout,

ipc/mqueue.c

911

static int do_mq_open(const char __user *u_name, int oflag, umode_t mode,

ipc/mqueue.c

930

SYSCALL_DEFINE4(mq_open, const char __user *, u_name, int, oflag, umode_t, mode,

ipc/mqueue.c

931

struct mq_attr __user *, u_attr)

ipc/mqueue.c

940

SYSCALL_DEFINE1(mq_unlink, const char __user *, u_name)

ipc/msg.c

1026

static long do_msg_fill(void __user *dest, struct msg_msg *msg, size_t bufsz)

ipc/msg.c

1028

struct msgbuf __user *msgp = dest;

ipc/msg.c

1045

static inline struct msg_msg *prepare_copy(void __user *buf, size_t bufsz)

ipc/msg.c

1064

static inline struct msg_msg *prepare_copy(void __user *buf, size_t bufsz)

ipc/msg.c

1098

static long do_msgrcv(int msqid, void __user *buf, size_t bufsz, long msgtyp, int msgflg,

ipc/msg.c

1099

long (*msg_handler)(void __user *, struct msg_msg *, size_t))

ipc/msg.c

1264

long ksys_msgrcv(int msqid, struct msgbuf __user *msgp, size_t msgsz,

ipc/msg.c

1270

SYSCALL_DEFINE5(msgrcv, int, msqid, struct msgbuf __user *, msgp, size_t, msgsz,

ipc/msg.c

1277

static long compat_do_msg_fill(void __user *dest, struct msg_msg *msg, size_t bufsz)

ipc/msg.c

1279

struct compat_msgbuf __user *msgp = dest;

ipc/msg.c

321

copy_msqid_to_user(void __user *buf, struct msqid64_ds *in, int version)

ipc/msg.c

366

copy_msqid_from_user(struct msqid64_ds *out, void __user *buf, int version)

ipc/msg.c

597

static long ksys_msgctl(int msqid, int cmd, struct msqid_ds __user *buf, int version)

ipc/msg.c

640

SYSCALL_DEFINE3(msgctl, int, msqid, int, cmd, struct msqid_ds __user *, buf)

ipc/msg.c

646

long ksys_old_msgctl(int msqid, int cmd, struct msqid_ds __user *buf)

ipc/msg.c

653

SYSCALL_DEFINE3(old_msgctl, int, msqid, int, cmd, struct msqid_ds __user *, buf)

ipc/msg.c

677

static int copy_compat_msqid_from_user(struct msqid64_ds *out, void __user *buf,

ipc/msg.c

682

struct compat_msqid64_ds __user *p = buf;

ipc/msg.c

688

struct compat_msqid_ds __user *p = buf;

ipc/msg.c

697

static int copy_compat_msqid_to_user(void __user *buf, struct msqid64_ds *in,

ipc/msg.c

732

static long compat_ksys_msgctl(int msqid, int cmd, void __user *uptr, int version)

ipc/msg.c

774

COMPAT_SYSCALL_DEFINE3(msgctl, int, msqid, int, cmd, void __user *, uptr)

ipc/msg.c

780

long compat_ksys_old_msgctl(int msqid, int cmd, void __user *uptr)

ipc/msg.c

787

COMPAT_SYSCALL_DEFINE3(old_msgctl, int, msqid, int, cmd, void __user *, uptr)

ipc/msg.c

848

static long do_msgsnd(int msqid, long mtype, void __user *mtext,

ipc/msg.c

961

long ksys_msgsnd(int msqid, struct msgbuf __user *msgp, size_t msgsz,

ipc/msg.c

971

SYSCALL_DEFINE4(msgsnd, int, msqid, struct msgbuf __user *, msgp, size_t, msgsz,

ipc/msg.c

987

struct compat_msgbuf __user *up = compat_ptr(msgp);

ipc/msgutil.c

109

src = (char __user *)src + alen;

ipc/msgutil.c

158

int store_msg(void __user *dest, struct msg_msg *msg, size_t len)

ipc/msgutil.c

169

dest = (char __user *)dest + alen;

ipc/msgutil.c

92

struct msg_msg *load_msg(const void __user *src, size_t len)

ipc/sem.c

1195

static unsigned long copy_semid_to_user(void __user *buf, struct semid64_ds *in, int version)

ipc/sem.c

1309

int cmd, void __user *p)

ipc/sem.c

1406

int cmd, void __user *p)

ipc/sem.c

1435

ushort __user *array = p;

ipc/sem.c

1571

copy_semid_from_user(struct semid64_ds *out, void __user *buf, int version)

ipc/sem.c

1654

void __user *p = (void __user *)arg;

ipc/sem.c

1737

static int copy_compat_semid_from_user(struct semid64_ds *out, void __user *buf,

ipc/sem.c

1742

struct compat_semid64_ds __user *p = buf;

ipc/sem.c

1745

struct compat_semid_ds __user *p = buf;

ipc/sem.c

1750

static int copy_compat_semid_to_user(void __user *buf, struct semid64_ds *in,

ipc/sem.c

1776

void __user *p = compat_ptr(arg);

ipc/sem.c

2222

static long do_semtimedop(int semid, struct sembuf __user *tsops,

ipc/sem.c

2256

long ksys_semtimedop(int semid, struct sembuf __user *tsops,

ipc/sem.c

2257

unsigned int nsops, const struct __kernel_timespec __user *timeout)

ipc/sem.c

2268

SYSCALL_DEFINE4(semtimedop, int, semid, struct sembuf __user *, tsops,

ipc/sem.c

2269

unsigned int, nsops, const struct __kernel_timespec __user *, timeout)

ipc/sem.c

2275

long compat_ksys_semtimedop(int semid, struct sembuf __user *tsems,

ipc/sem.c

2277

const struct old_timespec32 __user *timeout)

ipc/sem.c

2288

SYSCALL_DEFINE4(semtimedop_time32, int, semid, struct sembuf __user *, tsems,

ipc/sem.c

2290

const struct old_timespec32 __user *, timeout)

ipc/sem.c

2296

SYSCALL_DEFINE3(semop, int, semid, struct sembuf __user *, tsops,

ipc/shm.c

1244

static long ksys_shmctl(int shmid, int cmd, struct shmid_ds __user *buf, int version)

ipc/shm.c

1298

SYSCALL_DEFINE3(shmctl, int, shmid, int, cmd, struct shmid_ds __user *, buf)

ipc/shm.c

1304

long ksys_old_shmctl(int shmid, int cmd, struct shmid_ds __user *buf)

ipc/shm.c

1311

SYSCALL_DEFINE3(old_shmctl, int, shmid, int, cmd, struct shmid_ds __user *, buf)

ipc/shm.c

1351

static int copy_compat_shminfo_to_user(void __user *buf, struct shminfo64 *in,

ipc/shm.c

1378

struct compat_shm_info __user *uip)

ipc/shm.c

1392

static int copy_compat_shmid_to_user(void __user *buf, struct shmid64_ds *in,

ipc/shm.c

1426

static int copy_compat_shmid_from_user(struct shmid64_ds *out, void __user *buf,

ipc/shm.c

1431

struct compat_shmid64_ds __user *p = buf;

ipc/shm.c

1434

struct compat_shmid_ds __user *p = buf;

ipc/shm.c

1439

static long compat_ksys_shmctl(int shmid, int cmd, void __user *uptr, int version)

ipc/shm.c

1494

COMPAT_SYSCALL_DEFINE3(shmctl, int, shmid, int, cmd, void __user *, uptr)

ipc/shm.c

1500

long compat_ksys_old_shmctl(int shmid, int cmd, void __user *uptr)

ipc/shm.c

1507

COMPAT_SYSCALL_DEFINE3(old_shmctl, int, shmid, int, cmd, void __user *, uptr)

ipc/shm.c

1521

long do_shmat(int shmid, char __user *shmaddr, int shmflg,

ipc/shm.c

1695

SYSCALL_DEFINE3(shmat, int, shmid, char __user *, shmaddr, int, shmflg)

ipc/shm.c

1730

long ksys_shmdt(char __user *shmaddr)

ipc/shm.c

1836

SYSCALL_DEFINE1(shmdt, char __user *, shmaddr)

ipc/shm.c

854

static inline unsigned long copy_shmid_to_user(void __user *buf, struct shmid64_ds *in, int version)

ipc/shm.c

881

copy_shmid_from_user(struct shmid64_ds *out, void __user *buf, int version)

ipc/shm.c

906

static inline unsigned long copy_shminfo_to_user(void __user *buf, struct shminfo64 *in, int version)

ipc/syscall.c

104

(struct shmid_ds __user *) ptr);

ipc/syscall.c

111

unsigned long, third, void __user *, ptr, long, fifth)

ipc/syscall.c

153

if (get_user(pad, (u32 __user *) compat_ptr(ptr)))

ipc/syscall.c

161

void __user *uptr = compat_ptr(ptr);

ipc/syscall.c

192

return put_user(raddr, (compat_ulong_t __user *)compat_ptr(third));

ipc/syscall.c

21

unsigned long third, void __user * ptr, long fifth)

ipc/syscall.c

30

return ksys_semtimedop(first, (struct sembuf __user *)ptr,

ipc/syscall.c

35

(const struct __kernel_timespec __user *)fifth);

ipc/syscall.c

38

(const struct old_timespec32 __user *)fifth);

ipc/syscall.c

48

if (get_user(arg, (unsigned long __user *) ptr))

ipc/syscall.c

54

return ksys_msgsnd(first, (struct msgbuf __user *) ptr,

ipc/syscall.c

64

(struct ipc_kludge __user *) ptr,

ipc/syscall.c

72

(struct msgbuf __user *) ptr,

ipc/syscall.c

79

(struct msqid_ds __user *)ptr);

ipc/syscall.c

85

ret = do_shmat(first, (char __user *)ptr,

ipc/syscall.c

89

return put_user(raddr, (unsigned long __user *) third);

ipc/syscall.c

99

return ksys_shmdt((char __user *)ptr);

ipc/util.h

199

extern struct msg_msg *load_msg(const void __user *src, size_t len);

ipc/util.h

201

extern int store_msg(void __user *dest, struct msg_msg *msg, size_t len);

ipc/util.h

271

int get_compat_ipc_perm(struct ipc64_perm *, struct compat_ipc_perm __user *);

ipc/util.h

273

struct compat_ipc64_perm __user *);

ipc/util.h

283

long compat_ksys_old_msgctl(int msqid, int cmd, void __user *uptr);

ipc/util.h

288

long compat_ksys_old_shmctl(int shmid, int cmd, void __user *uptr);

kernel/acct.c

216

static int acct_on(const char __user *name)

kernel/acct.c

293

SYSCALL_DEFINE1(acct, const char __user *, name)

kernel/auditsc.c

1135

const char __user *p = (const char __user *)current->mm->arg_start;

kernel/bpf/bpf_iter.c

456

char __user *ubuf = u64_to_user_ptr(info->iter.target_name);

kernel/bpf/bpf_iter.c

93

static ssize_t bpf_seq_read(struct file *file, char __user *buf, size_t size,

kernel/bpf/btf.c

8364

union bpf_attr __user *uattr)

kernel/bpf/btf.c

8366

struct bpf_btf_info __user *uinfo;

kernel/bpf/btf.c

8369

void __user *ubtf;

kernel/bpf/btf.c

8370

char __user *uname;

kernel/bpf/cgroup.c

1248

union bpf_attr __user *uattr, u32 uattr_size)

kernel/bpf/cgroup.c

1250

__u32 __user *prog_attach_flags = u64_to_user_ptr(attr->query.prog_attach_flags);

kernel/bpf/cgroup.c

1252

__u32 __user *prog_ids = u64_to_user_ptr(attr->query.prog_ids);

kernel/bpf/cgroup.c

1353

union bpf_attr __user *uattr, u32 uattr_size)

kernel/bpf/cgroup.c

1561

union bpf_attr __user *uattr, u32 uattr_size)

kernel/bpf/core.c

2841

__u32 __user *prog_ids, u32 cnt)

kernel/bpf/hashtab.c

1775

union bpf_attr __user *uattr,

kernel/bpf/hashtab.c

1781

void __user *uvalues = u64_to_user_ptr(attr->batch.values);

kernel/bpf/hashtab.c

1782

void __user *ukeys = u64_to_user_ptr(attr->batch.keys);

kernel/bpf/hashtab.c

1783

void __user *ubatch = u64_to_user_ptr(attr->batch.in_batch);

kernel/bpf/hashtab.c

2015

union bpf_attr __user *uattr)

kernel/bpf/hashtab.c

2024

union bpf_attr __user *uattr)

kernel/bpf/hashtab.c

2032

union bpf_attr __user *uattr)

kernel/bpf/hashtab.c

2041

union bpf_attr __user *uattr)

kernel/bpf/hashtab.c

2050

union bpf_attr __user *uattr)

kernel/bpf/hashtab.c

2059

union bpf_attr __user *uattr)

kernel/bpf/hashtab.c

2067

union bpf_attr __user *uattr)

kernel/bpf/hashtab.c

2076

union bpf_attr __user *uattr)

kernel/bpf/hashtab.c

3247

union bpf_attr __user *uattr,

kernel/bpf/hashtab.c

3251

void __user *uvalues = u64_to_user_ptr(attr->batch.values);

kernel/bpf/hashtab.c

3252

void __user *ukeys = u64_to_user_ptr(attr->batch.keys);

kernel/bpf/hashtab.c

3253

void __user *ubatch = u64_to_user_ptr(attr->batch.in_batch);

kernel/bpf/hashtab.c

3382

union bpf_attr __user *uattr)

kernel/bpf/hashtab.c

3388

union bpf_attr __user *uattr)

kernel/bpf/helpers.c

3633

__bpf_kfunc int bpf_copy_from_user_str(void *dst, u32 dst__sz, const void __user *unsafe_ptr__ign, u64 flags)

kernel/bpf/helpers.c

3679

const void __user *unsafe_ptr__ign,

kernel/bpf/helpers.c

660

const void __user *, user_ptr)

kernel/bpf/helpers.c

683

const void __user *, user_ptr, struct task_struct *, tsk, u64, flags)

kernel/bpf/helpers.c

747

void __user *user_ptr = (__force void __user *)unsafe_ptr;

kernel/bpf/inode.c

491

static int bpf_obj_do_pin(int path_fd, const char __user *pathname, void *raw,

kernel/bpf/inode.c

533

int bpf_obj_pin_user(u32 ufd, int path_fd, const char __user *pathname)

kernel/bpf/inode.c

550

static void *bpf_obj_do_get(int path_fd, const char __user *pathname,

kernel/bpf/inode.c

582

int bpf_obj_get_user(int path_fd, const char __user *pathname, int flags)

kernel/bpf/log.c

16

static bool bpf_verifier_log_attr_valid(u32 log_level, char __user *log_buf, u32 log_size)

kernel/bpf/log.c

32

char __user *log_buf, u32 log_size)

kernel/bpf/log.c

831

char __user *ubuf_common = u64_to_user_ptr(common->log_buf);

kernel/bpf/log.c

832

char __user *ubuf = u64_to_user_ptr(log_buf);

kernel/bpf/mprog.c

395

int bpf_mprog_query(const union bpf_attr *attr, union bpf_attr __user *uattr,

kernel/bpf/mprog.c

398

u32 __user *uprog_flags, *ulink_flags;

kernel/bpf/mprog.c

399

u32 __user *uprog_id, *ulink_id;

kernel/bpf/net_namespace.c

246

union bpf_attr __user *uattr,

kernel/bpf/net_namespace.c

250

__u32 __user *prog_ids = u64_to_user_ptr(attr->query.prog_ids);

kernel/bpf/net_namespace.c

271

union bpf_attr __user *uattr)

kernel/bpf/offload.c

461

char __user *uinsns;

kernel/bpf/stream.c

155

static int bpf_stream_read(struct bpf_stream *stream, void __user *buf, int len)

kernel/bpf/stream.c

199

int bpf_prog_stream_read(struct bpf_prog *prog, enum bpf_stream_id stream_id, void __user *buf, int len)

kernel/bpf/syscall.c

1045

static ssize_t bpf_dummy_read(struct file *filp, char __user *buf, size_t siz,

kernel/bpf/syscall.c

1054

static ssize_t bpf_dummy_write(struct file *filp, const char __user *buf,

kernel/bpf/syscall.c

1757

static void *__bpf_copy_key(void __user *ukey, u64 key_size)

kernel/bpf/syscall.c

1784

void __user *ukey = u64_to_user_ptr(attr->key);

kernel/bpf/syscall.c

1785

void __user *uvalue = u64_to_user_ptr(attr->value);

kernel/bpf/syscall.c

1952

void __user *ukey = u64_to_user_ptr(attr->key);

kernel/bpf/syscall.c

1953

void __user *unext_key = u64_to_user_ptr(attr->next_key);

kernel/bpf/syscall.c

2008

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

2010

void __user *keys = u64_to_user_ptr(attr->batch.keys);

kernel/bpf/syscall.c

2064

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

2066

void __user *values = u64_to_user_ptr(attr->batch.values);

kernel/bpf/syscall.c

2067

void __user *keys = u64_to_user_ptr(attr->batch.keys);

kernel/bpf/syscall.c

2122

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

2124

void __user *uobatch = u64_to_user_ptr(attr->batch.out_batch);

kernel/bpf/syscall.c

2125

void __user *ubatch = u64_to_user_ptr(attr->batch.in_batch);

kernel/bpf/syscall.c

2126

void __user *values = u64_to_user_ptr(attr->batch.values);

kernel/bpf/syscall.c

2127

void __user *keys = u64_to_user_ptr(attr->batch.keys);

kernel/bpf/syscall.c

2215

void __user *ukey = u64_to_user_ptr(attr->key);

kernel/bpf/syscall.c

2216

void __user *uvalue = u64_to_user_ptr(attr->value);

kernel/bpf/syscall.c

3938

static int bpf_copy_to_user(char __user *ubuf, const char *buf, u32 ulen,

kernel/bpf/syscall.c

3962

char __user *ubuf = u64_to_user_ptr(info->raw_tracepoint.tp_name);

kernel/bpf/syscall.c

4009

char __user *uname, u32 *ulenp,

kernel/bpf/syscall.c

4054

char __user *uname;

kernel/bpf/syscall.c

4111

char __user *uname;

kernel/bpf/syscall.c

4176

char __user *uname;

kernel/bpf/syscall.c

4353

const char __user *user_tp_name, u64 cookie,

kernel/bpf/syscall.c

4433

void __user *tp_name;

kernel/bpf/syscall.c

4774

union bpf_attr __user *uattr, u32 uattr_size)

kernel/bpf/syscall.c

4838

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

4868

union bpf_attr __user *uattr,

kernel/bpf/syscall.c

5157

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

5159

struct bpf_prog_info __user *uinfo = u64_to_user_ptr(attr->info.info);

kernel/bpf/syscall.c

5164

char __user *uinsns;

kernel/bpf/syscall.c

5193

u32 __user *user_map_ids = u64_to_user_ptr(info.map_ids);

kernel/bpf/syscall.c

5310

u64 __user *user_ksyms;

kernel/bpf/syscall.c

5340

u32 __user *user_lens;

kernel/bpf/syscall.c

5370

char __user *user_finfo;

kernel/bpf/syscall.c

5382

__u8 __user *user_linfo;

kernel/bpf/syscall.c

5399

__u64 __user *user_linfo;

kernel/bpf/syscall.c

5417

__u8 __user (*user_prog_tags)[BPF_TAG_SIZE];

kernel/bpf/syscall.c

5447

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

5449

struct bpf_map_info __user *uinfo = u64_to_user_ptr(attr->info.info);

kernel/bpf/syscall.c

5489

char __user *uhash = u64_to_user_ptr(info.hash);

kernel/bpf/syscall.c

5518

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

5520

struct bpf_btf_info __user *uinfo = u64_to_user_ptr(attr->info.info);

kernel/bpf/syscall.c

5534

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

5536

struct bpf_link_info __user *uinfo = u64_to_user_ptr(attr->info.info);

kernel/bpf/syscall.c

5572

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

5574

struct bpf_token_info __user *uinfo = u64_to_user_ptr(attr->info.info);

kernel/bpf/syscall.c

5587

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

5678

union bpf_attr __user *uattr,

kernel/bpf/syscall.c

5683

char __user *ubuf = u64_to_user_ptr(attr->task_fd_query.buf);

kernel/bpf/syscall.c

5716

union bpf_attr __user *uattr)

kernel/bpf/syscall.c

5799

union bpf_attr __user *uattr,

kernel/bpf/syscall.c

6293

char __user *buf = u64_to_user_ptr(attr->prog_stream_read.stream_buf);

kernel/bpf/syscall.c

6534

SYSCALL_DEFINE5(bpf, int, cmd, union bpf_attr __user *, uattr, unsigned int, size,

kernel/bpf/syscall.c

6535

struct bpf_common_attr __user *, uattr_common, unsigned int, size_common)

kernel/bpf/tcx.c

122

int tcx_prog_query(const union bpf_attr *attr, union bpf_attr __user *uattr)

kernel/bpf/token.c

199

union bpf_attr __user *uattr)

kernel/bpf/token.c

201

struct bpf_token_info __user *uinfo = u64_to_user_ptr(attr->info.info);

kernel/compat.c

110

static int compat_get_user_cpu_mask(compat_ulong_t __user *user_mask_ptr,

kernel/compat.c

126

compat_ulong_t __user *, user_mask_ptr)

kernel/compat.c

145

compat_ulong_t __user *, user_mask_ptr)

kernel/compat.c

180

const struct compat_sigevent __user *u_event)

kernel/compat.c

193

long compat_get_bitmap(unsigned long *mask, const compat_ulong_t __user *umask,

kernel/compat.c

222

long compat_put_bitmap(compat_ulong_t __user *umask, unsigned long *mask,

kernel/compat.c

250

get_compat_sigset(sigset_t *set, const compat_sigset_t __user *compat)

kernel/compat.c

41

compat_old_sigset_t __user *, nset,

kernel/compat.c

42

compat_old_sigset_t __user *, oset)

kernel/compat.c

83

int put_compat_rusage(const struct rusage *r, struct compat_rusage __user *ru)

kernel/configs.c

41

ikconfig_read_current(struct file *file, char __user *buf,

kernel/dma/debug.c

745

static ssize_t filter_read(struct file *file, char __user *user_buf,

kernel/dma/debug.c

767

static ssize_t filter_write(struct file *file, const char __user *userbuf,

kernel/dma/map_benchmark.c

394

void __user *argp = (void __user *)arg;

kernel/entry/syscall_user_dispatch.c

132

unsigned long len, char __user *selector)

kernel/entry/syscall_user_dispatch.c

138

void __user *data)

kernel/entry/syscall_user_dispatch.c

162

void __user *data)

kernel/entry/syscall_user_dispatch.c

173

(char __user *)(uintptr_t)cfg.selector);

kernel/entry/syscall_user_dispatch.c

27

info.si_call_addr = (void __user *)KSTK_EIP(current);

kernel/entry/syscall_user_dispatch.c

74

char __user *selector)

kernel/events/core.c

12212

static int perf_event_set_filter(struct perf_event *event, void __user *arg)

kernel/events/core.c

13583

static int perf_copy_attr(struct perf_event_attr __user *uattr,

kernel/events/core.c

13884

struct perf_event_attr __user *, attr_uptr,

kernel/events/core.c

6155

u64 read_format, char __user *buf)

kernel/events/core.c

6197

u64 read_format, char __user *buf)

kernel/events/core.c

6236

__perf_read(struct perf_event *event, char __user *buf, size_t count)

kernel/events/core.c

6262

perf_read(struct file *file, char __user *buf, size_t count, loff_t *ppos)

kernel/events/core.c

6591

static int perf_event_set_filter(struct perf_event *event, void __user *arg);

kernel/events/core.c

6592

static int perf_copy_attr(struct perf_event_attr __user *uattr,

kernel/events/core.c

6624

if (copy_from_user(&value, (u64 __user *)arg, sizeof(value)))

kernel/events/core.c

6633

if (copy_to_user((void __user *)arg, &id, sizeof(id)))

kernel/events/core.c

6651

return perf_event_set_filter(event, (void __user *)arg);

kernel/events/core.c

6686

return perf_event_query_prog_array(event, (void __user *)arg);

kernel/events/core.c

6690

int err = perf_copy_attr((struct perf_event_attr __user *)arg,

kernel/events/core.c

7623

send_sig_perf((void __user *)event->pending_addr,

kernel/events/uprobes.c

2410

result = __get_user(opcode, (uprobe_opcode_t __user *)vaddr);

kernel/exit.c

1847

SYSCALL_DEFINE5(waitid, int, which, pid_t, upid, struct siginfo __user *,

kernel/exit.c

1848

infop, int, options, struct rusage __user *, ru)

kernel/exit.c

1880

long kernel_wait4(pid_t upid, int __user *stat_addr, int options,

kernel/exit.c

1939

SYSCALL_DEFINE4(wait4, pid_t, upid, int __user *, stat_addr,

kernel/exit.c

1940

int, options, struct rusage __user *, ru)

kernel/exit.c

1958

SYSCALL_DEFINE3(waitpid, pid_t, pid, int __user *, stat_addr, int, options)

kernel/exit.c

1968

compat_uint_t __user *, stat_addr,

kernel/exit.c

1970

struct compat_rusage __user *, ru)

kernel/exit.c

1983

struct compat_siginfo __user *, infop, int, options,

kernel/exit.c

1984

struct compat_rusage __user *, uru)

kernel/fail_function.c

236

static ssize_t fei_write(struct file *file, const char __user *buffer,

kernel/fork.c

1810

SYSCALL_DEFINE1(set_tid_address, int __user *, tidptr)

kernel/fork.c

2858

int __user *, parent_tidptr,

kernel/fork.c

2860

int __user *, child_tidptr)

kernel/fork.c

2863

int __user *, parent_tidptr,

kernel/fork.c

2864

int __user *, child_tidptr,

kernel/fork.c

2869

int __user *, parent_tidptr,

kernel/fork.c

2870

int __user *, child_tidptr,

kernel/fork.c

2874

int __user *, parent_tidptr,

kernel/fork.c

2875

int __user *, child_tidptr,

kernel/fork.c

2894

struct clone_args __user *uargs,

kernel/fork.c

2977

if (!access_ok((void __user *)kargs->stack, kargs->stack_size))

kernel/fork.c

3029

SYSCALL_DEFINE2(clone3, struct clone_args __user *, uargs, size_t, size)

kernel/futex/core.c

1087

static inline int fetch_robust_entry(struct robust_list __user **entry,

kernel/futex/core.c

1088

struct robust_list __user * __user *head,

kernel/futex/core.c

1093

if (get_user(uentry, (unsigned long __user *)head))

kernel/futex/core.c

1096

*entry = (void __user *)(uentry & ~FUTEX_ROBUST_MOD_MASK);

kernel/futex/core.c

1110

struct robust_list_head __user *head = curr->futex.robust_list;

kernel/futex/core.c

1112

struct robust_list __user *entry, *next_entry, *pending;

kernel/futex/core.c

1146

if (handle_futex_death((void __user *)entry + futex_offset,

kernel/futex/core.c

1164

handle_futex_death((void __user *)pending + futex_offset,

kernel/futex/core.c

1169

static bool robust_list_clear_pending(unsigned long __user *pop)

kernel/futex/core.c

1171

struct robust_list_head __user *head = current->futex.robust_list;

kernel/futex/core.c

1185

if (pop == (unsigned long __user *)&head->list_op_pending)

kernel/futex/core.c

1191

static void __user *futex_uaddr(struct robust_list __user *entry,

kernel/futex/core.c

1195

void __user *uaddr = compat_ptr(base + futex_offset);

kernel/futex/core.c

1204

compat_fetch_robust_entry(compat_uptr_t *uentry, struct robust_list __user **entry,

kernel/futex/core.c

1205

compat_uptr_t __user *head, unsigned int *pflags)

kernel/futex/core.c

1224

struct compat_robust_list_head __user *head = current->futex.compat_robust_list;

kernel/futex/core.c

1226

struct robust_list __user *entry, *next_entry, *pending;

kernel/futex/core.c

1250

while (entry != (struct robust_list __user *) &head->list) {

kernel/futex/core.c

1256

(compat_uptr_t __user *)&entry->next, &next_mod);

kernel/futex/core.c

1262

void __user *uaddr = futex_uaddr(entry, futex_offset);

kernel/futex/core.c

1281

void __user *uaddr = futex_uaddr(pending, futex_offset);

kernel/futex/core.c

1287

static bool compat_robust_list_clear_pending(u32 __user *pop)

kernel/futex/core.c

1289

struct compat_robust_list_head __user *head = current->futex.compat_robust_list;

kernel/futex/core.c

1300

static bool compat_robust_list_clear_pending(u32 __user *pop_addr) { return false; }

kernel/futex/core.c

1395

bool futex_robust_list_clear_pending(void __user *pop, unsigned int flags)

kernel/futex/core.c

1415

void __user *pop = arch_futex_robust_unlock_get_pop(regs);

kernel/futex/core.c

502

int get_futex_key(u32 __user *uaddr, unsigned int flags, union futex_key *key,

kernel/futex/core.c

536

u32 __user *naddr = (void *)uaddr + size / 2;

kernel/futex/core.c

552

u32 __user *naddr = (void *)uaddr + size / 2;

kernel/futex/core.c

738

int fault_in_user_writeable(u32 __user *uaddr)

kernel/futex/core.c

968

static int handle_futex_death(u32 __user *uaddr, struct task_struct *curr,

kernel/futex/futex.h

234

extern int get_futex_key(u32 __user *uaddr, unsigned int flags, union futex_key *key,

kernel/futex/futex.h

280

extern int futex_wait_setup(u32 __user *uaddr, u32 val, unsigned int flags,

kernel/futex/futex.h

287

extern int fault_in_user_writeable(u32 __user *uaddr);

kernel/futex/futex.h

290

static inline int futex_cmpxchg_value_locked(u32 *curval, u32 __user *uaddr, u32 uval, u32 newval)

kernel/futex/futex.h

302

static inline int futex_get_value_locked(u32 *dest, u32 __user *from)

kernel/futex/futex.h

387

extern int futex_lock_pi_atomic(u32 __user *uaddr, struct futex_hash_bucket *hb,

kernel/futex/futex.h

397

extern int fixup_pi_owner(u32 __user *uaddr, struct futex_q *q, int locked);

kernel/futex/futex.h

429

extern int futex_wait_requeue_pi(u32 __user *uaddr, unsigned int flags, u32

kernel/futex/futex.h

430

val, ktime_t *abs_time, u32 bitset, u32 __user

kernel/futex/futex.h

433

extern int futex_requeue(u32 __user *uaddr1, unsigned int flags1,

kernel/futex/futex.h

434

u32 __user *uaddr2, unsigned int flags2,

kernel/futex/futex.h

438

extern int __futex_wait(u32 __user *uaddr, unsigned int flags, u32 val,

kernel/futex/futex.h

441

extern int futex_wait(u32 __user *uaddr, unsigned int flags, u32 val,

kernel/futex/futex.h

457

struct futex_waitv __user *uwaitv,

kernel/futex/futex.h

469

extern int futex_wake(u32 __user *uaddr, unsigned int flags, void __user *pop,

kernel/futex/futex.h

472

extern int futex_wake_op(u32 __user *uaddr1, unsigned int flags,

kernel/futex/futex.h

473

u32 __user *uaddr2, int nr_wake, int nr_wake2, int op);

kernel/futex/futex.h

475

extern int futex_unlock_pi(u32 __user *uaddr, unsigned int flags, void __user *pop);

kernel/futex/futex.h

477

extern int futex_lock_pi(u32 __user *uaddr, unsigned int flags, ktime_t *time, int trylock);

kernel/futex/futex.h

479

bool futex_robust_list_clear_pending(void __user *pop, unsigned int flags);

kernel/futex/pi.c

1141

static int __futex_unlock_pi(u32 __user *uaddr, unsigned int flags)

kernel/futex/pi.c

1305

int futex_unlock_pi(u32 __user *uaddr, unsigned int flags, void __user *pop)

kernel/futex/pi.c

203

static int attach_to_pi_state(u32 __user *uaddr, u32 uval,

kernel/futex/pi.c

321

static int handle_exit_race(u32 __user *uaddr, u32 uval,

kernel/futex/pi.c

412

static int attach_to_pi_owner(u32 __user *uaddr, u32 uval, union futex_key *key,

kernel/futex/pi.c

476

static int lock_pi_update_atomic(u32 __user *uaddr, u32 uval, u32 newval)

kernel/futex/pi.c

516

int futex_lock_pi_atomic(u32 __user *uaddr, struct futex_hash_bucket *hb,

kernel/futex/pi.c

615

static int wake_futex_pi(u32 __user *uaddr, u32 uval,

kernel/futex/pi.c

674

static int __fixup_pi_state_owner(u32 __user *uaddr, struct futex_q *q,

kernel/futex/pi.c

848

static int fixup_pi_state_owner(u32 __user *uaddr, struct futex_q *q,

kernel/futex/pi.c

877

int fixup_pi_owner(u32 __user *uaddr, struct futex_q *q, int locked)

kernel/futex/pi.c

923

int futex_lock_pi(u32 __user *uaddr, unsigned int flags, ktime_t *time, int trylock)

kernel/futex/requeue.c

281

futex_proxy_trylock_atomic(u32 __user *pifutex, struct futex_hash_bucket *hb1,

kernel/futex/requeue.c

382

int futex_requeue(u32 __user *uaddr1, unsigned int flags1,

kernel/futex/requeue.c

383

u32 __user *uaddr2, unsigned int flags2,

kernel/futex/requeue.c

786

int futex_wait_requeue_pi(u32 __user *uaddr, unsigned int flags,

kernel/futex/requeue.c

788

u32 __user *uaddr2)

kernel/futex/syscalls.c

108

long do_futex(u32 __user *uaddr, int op, u32 val, ktime_t *timeout,

kernel/futex/syscalls.c

109

u32 __user *uaddr2, u32 val2, u32 val3)

kernel/futex/syscalls.c

191

SYSCALL_DEFINE6(futex, u32 __user *, uaddr, int, op, u32, val,

kernel/futex/syscalls.c

192

const struct __kernel_timespec __user *, utime,

kernel/futex/syscalls.c

193

u32 __user *, uaddr2, u32, val3)

kernel/futex/syscalls.c

224

struct futex_waitv __user *uwaitv,

kernel/futex/syscalls.c

258

static int futex2_setup_timeout(struct __kernel_timespec __user *timeout,

kernel/futex/syscalls.c

28

SYSCALL_DEFINE2(set_robust_list, struct robust_list_head __user *, head, size_t, len)

kernel/futex/syscalls.c

321

SYSCALL_DEFINE5(futex_waitv, struct futex_waitv __user *, waiters,

kernel/futex/syscalls.c

323

struct __kernel_timespec __user *, timeout, clockid_t, clockid)

kernel/futex/syscalls.c

370

void __user *, uaddr,

kernel/futex/syscalls.c

38

static inline void __user *futex_task_robust_list(struct task_struct *p, bool compat)

kernel/futex/syscalls.c

402

void __user *, uaddr,

kernel/futex/syscalls.c

406

struct __kernel_timespec __user *, timeout,

kernel/futex/syscalls.c

446

struct futex_waitv __user *, waiters,

kernel/futex/syscalls.c

47

static void __user *futex_get_robust_list_common(int pid, bool compat)

kernel/futex/syscalls.c

481

COMPAT_SYSCALL_DEFINE2(set_robust_list, struct compat_robust_list_head __user *, head,

kernel/futex/syscalls.c

492

compat_uptr_t __user *, head_ptr,

kernel/futex/syscalls.c

493

compat_size_t __user *, len_ptr)

kernel/futex/syscalls.c

495

struct compat_robust_list_head __user *head = futex_get_robust_list_common(pid, true);

kernel/futex/syscalls.c

50

void __user *head;

kernel/futex/syscalls.c

507

SYSCALL_DEFINE6(futex_time32, u32 __user *, uaddr, int, op, u32, val,

kernel/futex/syscalls.c

508

const struct old_timespec32 __user *, utime, u32 __user *, uaddr2,

kernel/futex/syscalls.c

57

return (void __user *)ERR_PTR(-ESRCH);

kernel/futex/syscalls.c

85

return (void __user *)ERR_PTR(ret);

kernel/futex/syscalls.c

95

struct robust_list_head __user * __user *, head_ptr,

kernel/futex/syscalls.c

96

size_t __user *, len_ptr)

kernel/futex/syscalls.c

98

struct robust_list_head __user *head = futex_get_robust_list_common(pid, false);

kernel/futex/waitwake.c

155

static bool futex_robust_unlock(u32 __user *uaddr, unsigned int flags, void __user *pop)

kernel/futex/waitwake.c

178

int futex_wake(u32 __user *uaddr, unsigned int flags, void __user *pop, int nr_wake, u32 bitset)

kernel/futex/waitwake.c

229

static int futex_atomic_op_inuser(unsigned int encoded_op, u32 __user *uaddr)

kernel/futex/waitwake.c

278

int futex_wake_op(u32 __user *uaddr1, unsigned int flags, u32 __user *uaddr2,

kernel/futex/waitwake.c

473

u32 __user *uaddr = (u32 __user *)(unsigned long)vs[i].w.uaddr;

kernel/futex/waitwake.c

622

int futex_wait_setup(u32 __user *uaddr, u32 val, unsigned int flags,

kernel/futex/waitwake.c

701

int __futex_wait(u32 __user *uaddr, unsigned int flags, u32 val,

kernel/futex/waitwake.c

741

int futex_wait(u32 __user *uaddr, unsigned int flags, u32 val, ktime_t *abs_time, u32 bitset)

kernel/futex/waitwake.c

775

u32 __user *uaddr = restart->futex.uaddr;

kernel/gcov/fs.c

382

static ssize_t gcov_seq_write(struct file *file, const char __user *addr,

kernel/gcov/fs.c

634

static ssize_t reset_write(struct file *file, const char __user *addr,

kernel/gcov/fs.c

656

static ssize_t reset_read(struct file *file, char __user *addr, size_t len,

kernel/groups.c

161

SYSCALL_DEFINE2(getgroups, int, gidsetsize, gid_t __user *, grouplist)

kernel/groups.c

198

SYSCALL_DEFINE2(setgroups, int, gidsetsize, gid_t __user *, grouplist)

kernel/groups.c

37

static int groups_to_user(gid_t __user *grouplist,

kernel/groups.c

55

gid_t __user *grouplist)

kernel/irq/debugfs.c

189

static ssize_t irq_debug_write(struct file *file, const char __user *user_buf,

kernel/irq/proc.c

138

const char __user *buffer, size_t count, loff_t *pos)

kernel/irq/proc.c

180

const char __user *buffer, size_t count, loff_t *pos)

kernel/irq/proc.c

186

const char __user *buffer, size_t count, loff_t *pos)

kernel/irq/proc.c

236

const char __user *buffer, size_t count, loff_t *ppos)

kernel/kcmp.c

101

struct kcmp_epoll_slot __user *uslot)

kernel/kcmp.c

129

struct kcmp_epoll_slot __user *uslot)

kernel/kcov.c

751

if (get_user(remote_num_handles, (unsigned __user *)(arg +

kernel/kcov.c

758

remote_arg = memdup_user((void __user *)arg, remote_arg_size);

kernel/kcsan/debugfs.c

221

debugfs_write(struct file *file, const char __user *buf, size_t count, loff_t *off)

kernel/kexec.c

243

struct kexec_segment __user *, segments, unsigned long, flags)

kernel/kexec.c

270

struct compat_kexec_segment __user *, segments,

kernel/kexec_core.c

748

unsigned char __user *buf = NULL;

kernel/kexec_core.c

802

unsigned char __user *buf = NULL;

kernel/kexec_core.c

878

unsigned char __user *buf = NULL;

kernel/kexec_file.c

219

const char __user *cmdline_ptr,

kernel/kexec_file.c

306

int initrd_fd, const char __user *cmdline_ptr,

kernel/kexec_file.c

365

unsigned long, cmdline_len, const char __user *, cmdline_ptr,

kernel/kprobes.c

3022

char __user *user_buf, size_t count, loff_t *ppos)

kernel/kprobes.c

3036

const char __user *user_buf, size_t count, loff_t *ppos)

kernel/latencytop.c

270

lstats_write(struct file *file, const char __user *buf, size_t count,

kernel/liveupdate/luo_core.c

399

ucmd.ubuffer = (void __user *)arg;

kernel/liveupdate/luo_core.c

400

err = get_user(ucmd.user_size, (u32 __user *)ucmd.ubuffer);

kernel/liveupdate/luo_internal.h

16

void __user *ubuffer;

kernel/liveupdate/luo_session.c

417

ucmd.ubuffer = (void __user *)arg;

kernel/liveupdate/luo_session.c

418

ret = get_user(ucmd.user_size, (u32 __user *)ucmd.ubuffer);

kernel/locking/lock_events.c

61

ssize_t __weak lockevent_read(struct file *file, char __user *user_buf,

kernel/locking/lock_events.c

88

static ssize_t lockevent_write(struct file *file, const char __user *user_buf,

kernel/locking/lock_events.h

61

ssize_t lockevent_read(struct file *file, char __user *user_buf,

kernel/locking/lockdep_proc.c

677

static ssize_t lock_stat_write(struct file *file, const char __user *buf,

kernel/locking/qspinlock_stat.h

36

ssize_t lockevent_read(struct file *file, char __user *user_buf,

kernel/module/main.c

2452

static int copy_chunked_from_user(void *dst, const void __user *usrc, unsigned long len)

kernel/module/main.c

2491

static int copy_module_from_user(const void __user *umod, unsigned long len,

kernel/module/main.c

3422

static int load_module(struct load_info *info, const char __user *uargs,

kernel/module/main.c

3634

SYSCALL_DEFINE3(init_module, void __user *, umod,

kernel/module/main.c

3635

unsigned long, len, const char __user *, uargs)

kernel/module/main.c

3741

static int init_module_from_file(struct file *f, const char __user * uargs, int flags)

kernel/module/main.c

3780

static int idempotent_init_module(struct file *f, const char __user * uargs, int flags)

kernel/module/main.c

3799

SYSCALL_DEFINE3(finit_module, int, fd, const char __user *, uargs, int, flags)

kernel/module/main.c

804

SYSCALL_DEFINE2(delete_module, const char __user *, name_user,

kernel/module/stats.c

273

static ssize_t read_file_mod_stats(struct file *file, char __user *user_buf,

kernel/nstree.c

404

u64 __user *uns_ids;

kernel/nstree.c

424

static int copy_ns_id_req(const struct ns_id_req __user *req,

kernel/nstree.c

451

u64 __user *ns_ids, size_t nr_ns_ids)

kernel/nstree.c

553

u64 __user *ns_ids = kls->uns_ids;

kernel/nstree.c

697

u64 __user *ns_ids = kls->uns_ids;

kernel/nstree.c

763

SYSCALL_DEFINE4(listns, const struct ns_id_req __user *, req,

kernel/nstree.c

764

u64 __user *, ns_ids, size_t, nr_ns_ids, unsigned int, flags)

kernel/power/qos.c

366

static ssize_t cpu_latency_qos_read(struct file *filp, char __user *buf,

kernel/power/qos.c

383

static ssize_t cpu_latency_qos_write(struct file *filp, const char __user *buf,

kernel/power/qos.c

468

static ssize_t cpu_wakeup_latency_qos_read(struct file *filp, char __user *buf,

kernel/power/qos.c

477

const char __user *buf,

kernel/power/user.c

137

static ssize_t snapshot_read(struct file *filp, char __user *buf,

kernel/power/user.c

171

static ssize_t snapshot_write(struct file *filp, const char __user *buf,

kernel/power/user.c

217

void __user *argp)

kernel/power/user.c

324

error = put_user(in_suspend, (int __user *)arg);

kernel/power/user.c

371

error = put_user(size, (loff_t __user *)arg);

kernel/power/user.c

377

error = put_user(size, (loff_t __user *)arg);

kernel/power/user.c

388

error = put_user(offset, (loff_t __user *)arg);

kernel/power/user.c

425

error = snapshot_set_swap_area(data, (void __user *)arg);

kernel/printk/printk.c

1577

static int syslog_print(char __user *buf, int size)

kernel/printk/printk.c

1681

static int syslog_print_all(char __user *buf, int size, bool clear)

kernel/printk/printk.c

1740

int do_syslog(int type, char __user *buf, int len, int source)

kernel/printk/printk.c

1853

SYSCALL_DEFINE3(syslog, int, type, char __user *, buf, int, len)

kernel/printk/printk.c

801

static ssize_t devkmsg_read(struct file *file, char __user *buf,

kernel/profile.c

154

read_profile(struct file *file, char __user *buf, size_t count, loff_t *ppos)

kernel/profile.c

192

static ssize_t write_profile(struct file *file, const char __user *buf,

kernel/ptrace.c

1021

void __user *datavp)

kernel/ptrace.c

1124

const void __user *datavp)

kernel/ptrace.c

1168

void __user *datavp = (void __user *) data;

kernel/ptrace.c

1169

unsigned long __user *datalp = datavp;

kernel/ptrace.c

1360

struct iovec __user *uiov = datavp;

kernel/ptrace.c

1459

return put_user(tmp, (unsigned long __user *)data);

kernel/ptrace.c

1477

compat_ulong_t __user *datap = compat_ptr(data);

kernel/ptrace.c

1508

(struct compat_siginfo __user *) datap,

kernel/ptrace.c

1514

&siginfo, (struct compat_siginfo __user *) datap);

kernel/ptrace.c

1523

struct compat_iovec __user *uiov =

kernel/ptrace.c

1524

(struct compat_iovec __user *) datap;

kernel/ptrace.c

633

int ptrace_readdata(struct task_struct *tsk, unsigned long src, char __user *dst, int len)

kernel/ptrace.c

659

int ptrace_writedata(struct task_struct *tsk, char __user *src, unsigned long dst, int len)

kernel/ptrace.c

744

ret = copy_from_user(&arg, (void __user *) addr,

kernel/ptrace.c

784

compat_siginfo_t __user *uinfo = compat_ptr(data);

kernel/ptrace.c

794

siginfo_t __user *uinfo = (siginfo_t __user *) data;

kernel/ptrace.c

819

unsigned long size, void __user *data)

kernel/reboot.c

729

void __user *, arg)

kernel/regset.c

65

void __user *data)

kernel/relay.c

962

char __user *buffer,

kernel/rseq.c

200

static ssize_t rseq_debug_write(struct file *file, const char __user *ubuf,

kernel/rseq.c

241

struct rseq __user *urseq = t->rseq.usrptr;

kernel/rseq.c

392

struct rseq __user *rseq = current->rseq.usrptr;

kernel/rseq.c

415

static long rseq_register(struct rseq __user * rseq, u32 rseq_len, int flags, u32 sig)

kernel/rseq.c

490

static long rseq_unregister(struct rseq __user * rseq, u32 rseq_len, int flags, u32 sig)

kernel/rseq.c

506

static long rseq_reregister(struct rseq __user * rseq, u32 rseq_len, u32 sig)

kernel/rseq.c

520

static bool rseq_length_valid(struct rseq __user *rseq, unsigned int rseq_len)

kernel/rseq.c

547

SYSCALL_DEFINE4(rseq, struct rseq __user *, rseq, u32, rseq_len, int, flags, u32, sig)

kernel/rseq.c

678

u32 __user *sctrl = &current->rseq.usrptr->slice_ctrl.all;

kernel/rseq.c

826

static ssize_t rseq_slice_ext_write(struct file *file, const char __user *ubuf,

kernel/sched/core_sched.c

183

err = put_user(id, (u64 __user *)uaddr);

kernel/sched/debug.c

128

sched_feat_write(struct file *filp, const char __user *ubuf,

kernel/sched/debug.c

173

static ssize_t sched_scaling_write(struct file *filp, const char __user *ubuf,

kernel/sched/debug.c

215

sched_cache_enable_write(struct file *filp, const char __user *ubuf,

kernel/sched/debug.c

257

static ssize_t sched_dynamic_write(struct file *filp, const char __user *ubuf,

kernel/sched/debug.c

326

static ssize_t sched_verbose_write(struct file *filp, const char __user *ubuf,

kernel/sched/debug.c

380

static ssize_t sched_server_write_common(struct file *filp, const char __user *ubuf,

kernel/sched/debug.c

463

sched_fair_server_runtime_write(struct file *filp, const char __user *ubuf,

kernel/sched/debug.c

498

sched_ext_server_runtime_write(struct file *filp, const char __user *ubuf,

kernel/sched/debug.c

530

sched_ext_server_period_write(struct file *filp, const char __user *ubuf,

kernel/sched/debug.c

584

sched_fair_server_period_write(struct file *filp, const char __user *ubuf,

kernel/sched/psi.c

1537

static ssize_t psi_write(struct file *file, const char __user *user_buf,

kernel/sched/psi.c

1580

static ssize_t psi_io_write(struct file *file, const char __user *user_buf,

kernel/sched/psi.c

1586

static ssize_t psi_memory_write(struct file *file, const char __user *user_buf,

kernel/sched/psi.c

1592

static ssize_t psi_cpu_write(struct file *file, const char __user *user_buf,

kernel/sched/psi.c

1651

static ssize_t psi_irq_write(struct file *file, const char __user *user_buf,

kernel/sched/syscalls.c

1025

SYSCALL_DEFINE2(sched_getparam, pid_t, pid, struct sched_param __user *, param)

kernel/sched/syscalls.c

1060

SYSCALL_DEFINE4(sched_getattr, pid_t, pid, struct sched_attr __user *, uattr,

kernel/sched/syscalls.c

1243

static int get_user_cpu_mask(unsigned long __user *user_mask_ptr, unsigned len,

kernel/sched/syscalls.c

1263

unsigned long __user *, user_mask_ptr)

kernel/sched/syscalls.c

1308

unsigned long __user *, user_mask_ptr)

kernel/sched/syscalls.c

1556

struct __kernel_timespec __user *, interval)

kernel/sched/syscalls.c

1569

struct old_timespec32 __user *, interval)

kernel/sched/syscalls.c

853

do_sched_setscheduler(pid_t pid, int policy, struct sched_param __user *param)

kernel/sched/syscalls.c

872

static int sched_copy_attr(struct sched_attr __user *uattr, struct sched_attr *attr)

kernel/sched/syscalls.c

934

SYSCALL_DEFINE3(sched_setscheduler, pid_t, pid, int, policy, struct sched_param __user *, param)

kernel/sched/syscalls.c

949

SYSCALL_DEFINE2(sched_setparam, pid_t, pid, struct sched_param __user *, param)

kernel/sched/syscalls.c

960

SYSCALL_DEFINE3(sched_setattr, pid_t, pid, struct sched_attr __user *, uattr,

kernel/seccomp.c

1553

void __user *buf)

kernel/seccomp.c

1626

void __user *buf)

kernel/seccomp.c

1673

void __user *buf)

kernel/seccomp.c

1713

struct seccomp_notif_addfd __user *uaddfd,

kernel/seccomp.c

1830

void __user *buf = (void __user *)arg;

kernel/seccomp.c

1957

const char __user *filter)

kernel/seccomp.c

2056

const char __user *filter)

kernel/seccomp.c

2062

static long seccomp_get_action_avail(const char __user *uaction)

kernel/seccomp.c

2086

static long seccomp_get_notif_sizes(void __user *usizes)

kernel/seccomp.c

2102

void __user *uargs)

kernel/seccomp.c

2127

void __user *, uargs)

kernel/seccomp.c

2139

long prctl_set_seccomp(unsigned long seccomp_mode, void __user *filter)

kernel/seccomp.c

2142

void __user *uargs;

kernel/seccomp.c

2214

void __user *data)

kernel/seccomp.c

2252

unsigned long size, void __user *data)

kernel/seccomp.c

722

seccomp_prepare_user_filter(const char __user *user_filter)

kernel/signal.c

1696

int force_sig_fault_to_task(int sig, int code, void __user *addr,

kernel/signal.c

1709

int force_sig_fault(int sig, int code, void __user *addr)

kernel/signal.c

1714

int send_sig_fault(int sig, int code, void __user *addr, struct task_struct *t)

kernel/signal.c

1726

int force_sig_mceerr(int code, void __user *addr, short lsb)

kernel/signal.c

1740

int send_sig_mceerr(int code, void __user *addr, short lsb, struct task_struct *t)

kernel/signal.c

1755

int force_sig_bnderr(void __user *addr, void __user *lower, void __user *upper)

kernel/signal.c

1770

int force_sig_pkuerr(void __user *addr, u32 pkey)

kernel/signal.c

1784

int send_sig_perf(void __user *addr, u32 type, u64 sig_data)

kernel/signal.c

1825

info.si_call_addr = (void __user *)KSTK_EIP(current);

kernel/signal.c

1836

int force_sig_ptrace_errno_trap(int errno, void __user *addr)

kernel/signal.c

1851

int force_sig_fault_trapno(int sig, int code, void __user *addr, int trapno)

kernel/signal.c

1867

int send_sig_fault_trapno(int sig, int code, void __user *addr, int trapno,

kernel/signal.c

3282

int set_user_sigmask(const sigset_t __user *umask, size_t sigsetsize)

kernel/signal.c

3301

int set_compat_user_sigmask(const compat_sigset_t __user *umask,

kernel/signal.c

3328

SYSCALL_DEFINE4(rt_sigprocmask, int, how, sigset_t __user *, nset,

kernel/signal.c

3329

sigset_t __user *, oset, size_t, sigsetsize)

kernel/signal.c

3359

COMPAT_SYSCALL_DEFINE4(rt_sigprocmask, int, how, compat_sigset_t __user *, nset,

kernel/signal.c

3360

compat_sigset_t __user *, oset, compat_size_t, sigsetsize)

kernel/signal.c

3400

SYSCALL_DEFINE2(rt_sigpending, sigset_t __user *, uset, size_t, sigsetsize)

kernel/signal.c

3416

COMPAT_SYSCALL_DEFINE2(rt_sigpending, compat_sigset_t __user *, uset,

kernel/signal.c

3505

static inline char __user *si_expansion(const siginfo_t __user *info)

kernel/signal.c

3507

return ((char __user *)info) + sizeof(struct kernel_siginfo);

kernel/signal.c

3510

int copy_siginfo_to_user(siginfo_t __user *to, const kernel_siginfo_t *from)

kernel/signal.c

3512

char __user *expansion = si_expansion(to);

kernel/signal.c

3521

const siginfo_t __user *from)

kernel/signal.c

3524

char __user *expansion = si_expansion(from);

kernel/signal.c

3544

const siginfo_t __user *from)

kernel/signal.c

3552

int copy_siginfo_from_user(kernel_siginfo_t *to, const siginfo_t __user *from)

kernel/signal.c

3638

int __copy_siginfo_to_user32(struct compat_siginfo __user *to,

kernel/signal.c

3726

const struct compat_siginfo __user *ufrom)

kernel/signal.c

3738

const struct compat_siginfo __user *ufrom)

kernel/signal.c

3814

SYSCALL_DEFINE4(rt_sigtimedwait, const sigset_t __user *, uthese,

kernel/signal.c

3815

siginfo_t __user *, uinfo,

kernel/signal.c

3816

const struct __kernel_timespec __user *, uts,

kernel/signal.c

3847

SYSCALL_DEFINE4(rt_sigtimedwait_time32, const sigset_t __user *, uthese,

kernel/signal.c

3848

siginfo_t __user *, uinfo,

kernel/signal.c

3849

const struct old_timespec32 __user *, uts,

kernel/signal.c

3880

COMPAT_SYSCALL_DEFINE4(rt_sigtimedwait_time64, compat_sigset_t __user *, uthese,

kernel/signal.c

3881

struct compat_siginfo __user *, uinfo,

kernel/signal.c

3882

struct __kernel_timespec __user *, uts, compat_size_t, sigsetsize)

kernel/signal.c

3911

COMPAT_SYSCALL_DEFINE4(rt_sigtimedwait_time32, compat_sigset_t __user *, uthese,

kernel/signal.c

3912

struct compat_siginfo __user *, uinfo,

kernel/signal.c

3913

struct old_timespec32 __user *, uts, compat_size_t, sigsetsize)

kernel/signal.c

3990

siginfo_t __user *info)

kernel/signal.c

4000

kinfo, (struct compat_siginfo __user *)info);

kernel/signal.c

4021

siginfo_t __user *info, unsigned int flags)

kernel/signal.c

4076

siginfo_t __user *, info, unsigned int, flags)

kernel/signal.c

4222

siginfo_t __user *, uinfo)

kernel/signal.c

4235

struct compat_siginfo __user *, uinfo)

kernel/signal.c

4262

siginfo_t __user *, uinfo)

kernel/signal.c

4276

struct compat_siginfo __user *, uinfo)

kernel/signal.c

4407

oss->ss_sp = (void __user *) t->sas_ss_sp;

kernel/signal.c

4414

void __user *ss_sp = ss->ss_sp;

kernel/signal.c

4456

SYSCALL_DEFINE2(sigaltstack,const stack_t __user *,uss, stack_t __user *,uoss)

kernel/signal.c

4470

int restore_altstack(const stack_t __user *uss)

kernel/signal.c

4481

int __save_altstack(stack_t __user *uss, unsigned long sp)

kernel/signal.c

4484

int err = __put_user((void __user *)t->sas_ss_sp, &uss->ss_sp) |

kernel/signal.c

4491

static int do_compat_sigaltstack(const compat_stack_t __user *uss_ptr,

kernel/signal.c

4492

compat_stack_t __user *uoss_ptr)

kernel/signal.c

4521

const compat_stack_t __user *, uss_ptr,

kernel/signal.c

4522

compat_stack_t __user *, uoss_ptr)

kernel/signal.c

4527

int compat_restore_altstack(const compat_stack_t __user *uss)

kernel/signal.c

4534

int __compat_save_altstack(compat_stack_t __user *uss, unsigned long sp)

kernel/signal.c

4538

err = __put_user(ptr_to_compat((void __user *)t->sas_ss_sp),

kernel/signal.c

4552

SYSCALL_DEFINE1(sigpending, old_sigset_t __user *, uset)

kernel/signal.c

4568

COMPAT_SYSCALL_DEFINE1(sigpending, compat_old_sigset_t __user *, set32)

kernel/signal.c

4591

SYSCALL_DEFINE3(sigprocmask, int, how, old_sigset_t __user *, nset,

kernel/signal.c

4592

old_sigset_t __user *, oset)

kernel/signal.c

4640

const struct sigaction __user *, act,

kernel/signal.c

4641

struct sigaction __user *, oact,

kernel/signal.c

4665

const struct compat_sigaction __user *, act,

kernel/signal.c

4666

struct compat_sigaction __user *, oact,

kernel/signal.c

4712

const struct old_sigaction __user *, act,

kernel/signal.c

4713

struct old_sigaction __user *, oact)

kernel/signal.c

4748

const struct compat_old_sigaction __user *, act,

kernel/signal.c

4749

struct compat_old_sigaction __user *, oact)

kernel/signal.c

4862

SYSCALL_DEFINE2(rt_sigsuspend, sigset_t __user *, unewset, size_t, sigsetsize)

kernel/signal.c

4876

COMPAT_SYSCALL_DEFINE2(rt_sigsuspend, compat_sigset_t __user *, unewset, compat_size_t, sigsetsize)

kernel/signal.c

4965

if (sizeof(int) == sizeof(void __user *)) {

kernel/signal.c

4967

sizeof(void __user *));

kernel/signal.c

4971

sizeof(void __user *));

kernel/signal.c

538

void __user *handler = tsk->sighand->action[sig-1].sa.sa_handler;

kernel/signal.c

72

static void __user *sig_handler(struct task_struct *t, int sig)

kernel/signal.c

77

static inline bool sig_handler_ignored(void __user *handler, int sig)

kernel/signal.c

86

void __user *handler;

kernel/sys.c

1064

SYSCALL_DEFINE1(times, struct tms __user *, tbuf)

kernel/sys.c

1083

COMPAT_SYSCALL_DEFINE1(times, struct compat_tms __user *, tbuf)

kernel/sys.c

1325

static int override_release(char __user *release, size_t len)

kernel/sys.c

1351

SYSCALL_DEFINE1(newuname, struct new_utsname __user *, name)

kernel/sys.c

1372

SYSCALL_DEFINE1(uname, struct old_utsname __user *, name)

kernel/sys.c

1392

SYSCALL_DEFINE1(olduname, struct oldold_utsname __user *, name)

kernel/sys.c

1419

SYSCALL_DEFINE2(sethostname, char __user *, name, int, len)

kernel/sys.c

1447

SYSCALL_DEFINE2(gethostname, char __user *, name, int, len)

kernel/sys.c

1473

SYSCALL_DEFINE2(setdomainname, char __user *, name, int, len)

kernel/sys.c

1563

SYSCALL_DEFINE2(getrlimit, unsigned int, resource, struct rlimit __user *, rlim)

kernel/sys.c

1578

struct compat_rlimit __user *, rlim)

kernel/sys.c

1598

struct compat_rlimit __user *, rlim)

kernel/sys.c

1629

struct rlimit __user *, rlim)

kernel/sys.c

1648

struct compat_rlimit __user *, rlim)

kernel/sys.c

1730

const struct rlimit64 __user *, new_rlim,

kernel/sys.c

1731

struct rlimit64 __user *, old_rlim)

kernel/sys.c

1794

SYSCALL_DEFINE2(setrlimit, unsigned int, resource, struct rlimit __user *, rlim)

kernel/sys.c

1934

SYSCALL_DEFINE2(getrusage, int, who, struct rusage __user *, ru)

kernel/sys.c

1947

COMPAT_SYSCALL_DEFINE2(getrusage, int, who, struct compat_rusage __user *, ru)

kernel/sys.c

2060

static int prctl_set_mm_map(int opt, const void __user *addr, unsigned long data_size)

kernel/sys.c

2072

(unsigned int __user *)addr);

kernel/sys.c

2094

(const void __user *)prctl_map.auxv,

kernel/sys.c

2182

if (copy_from_user(user_auxv, (const void __user *)addr, len))

kernel/sys.c

2217

return prctl_set_mm_map(opt, (const void __user *)addr, arg4);

kernel/sys.c

2336

static int prctl_get_tid_address(struct task_struct *me, int __user * __user *tid_addr)

kernel/sys.c

2341

static int prctl_get_tid_address(struct task_struct *me, int __user * __user *tid_addr)

kernel/sys.c

2376

int __weak arch_get_shadow_stack_status(struct task_struct *t, unsigned long __user *status)

kernel/sys.c

2392

unsigned long __user *state)

kernel/sys.c

2416

error = set_anon_vma_name(addr, size, (const char __user *)arg);

kernel/sys.c

2479

static int prctl_get_auxv(void __user *addr, unsigned long len)

kernel/sys.c

2565

error = put_user(me->pdeath_signal, (int __user *)arg2);

kernel/sys.c

2605

if (strncpy_from_user(comm, (char __user *)arg2,

kernel/sys.c

2613

if (copy_to_user((char __user *)arg2, comm, sizeof(comm)))

kernel/sys.c

2626

error = prctl_set_seccomp(arg2, (char __user *)arg3);

kernel/sys.c

2693

error = prctl_get_tid_address(me, (int __user * __user *)arg2);

kernel/sys.c

2704

(int __user *)arg2);

kernel/sys.c

2804

(char __user *) arg5);

kernel/sys.c

2833

error = prctl_get_auxv((void __user *)arg2, arg3);

kernel/sys.c

2867

error = arch_get_shadow_stack_status(me, (unsigned long __user *) arg2);

kernel/sys.c

2897

error = arch_prctl_get_branch_landing_pad_state(me, (unsigned long __user *)arg3);

kernel/sys.c

2918

SYSCALL_DEFINE3(getcpu, unsigned __user *, cpup, unsigned __user *, nodep, void __user *, unused)

kernel/sys.c

2997

SYSCALL_DEFINE1(sysinfo, struct sysinfo __user *, info)

kernel/sys.c

3027

COMPAT_SYSCALL_DEFINE1(sysinfo, struct compat_sysinfo __user *, info)

kernel/sys.c

788

SYSCALL_DEFINE3(getresuid, uid_t __user *, ruidp, uid_t __user *, euidp, uid_t __user *, suidp)

kernel/sys.c

877

SYSCALL_DEFINE3(getresgid, gid_t __user *, rgidp, gid_t __user *, egidp, gid_t __user *, sgidp)

kernel/sysctl-test.c

125

void __user *buffer = (void __user *)kunit_kzalloc(test, sizeof(int),

kernel/sysctl-test.c

159

void __user *buffer = (void __user *)kunit_kzalloc(test, sizeof(int),

kernel/sysctl-test.c

197

char __user *user_buffer = (char __user *)buffer;

kernel/sysctl-test.c

228

char __user *user_buffer = (char __user *)buffer;

kernel/sysctl-test.c

258

char __user *user_buffer = (char __user *)buffer;

kernel/sysctl-test.c

288

char __user *user_buffer = (char __user *)buffer;

kernel/sysctl-test.c

319

char __user *user_buffer = (char __user *)buffer;

kernel/sysctl-test.c

357

char __user *user_buffer = (char __user *)buffer;

kernel/sysctl-test.c

36

void __user *buffer = (void __user *)kunit_kzalloc(test, sizeof(int),

kernel/sysctl-test.c

82

void __user *buffer = (void __user *)kunit_kzalloc(test, sizeof(int),

kernel/time/hrtimer.c

2466

SYSCALL_DEFINE2(nanosleep, struct __kernel_timespec __user *, rqtp,

kernel/time/hrtimer.c

2467

struct __kernel_timespec __user *, rmtp)

kernel/time/hrtimer.c

2487

SYSCALL_DEFINE2(nanosleep_time32, struct old_timespec32 __user *, rqtp,

kernel/time/hrtimer.c

2488

struct old_timespec32 __user *, rmtp)

kernel/time/itimer.c

100

static int put_itimerval(struct __kernel_old_itimerval __user *o,

kernel/time/itimer.c

113

SYSCALL_DEFINE2(getitimer, int, which, struct __kernel_old_itimerval __user *, value)

kernel/time/itimer.c

129

static int put_old_itimerval32(struct old_itimerval32 __user *o,

kernel/time/itimer.c

142

struct old_itimerval32 __user *, value)

kernel/time/itimer.c

332

static int get_itimerval(struct itimerspec64 *o, const struct __kernel_old_itimerval __user *i)

kernel/time/itimer.c

351

SYSCALL_DEFINE3(setitimer, int, which, struct __kernel_old_itimerval __user *, value,

kernel/time/itimer.c

352

struct __kernel_old_itimerval __user *, ovalue)

kernel/time/itimer.c

378

static int get_old_itimerval32(struct itimerspec64 *o, const struct old_itimerval32 __user *i)

kernel/time/itimer.c

398

struct old_itimerval32 __user *, value,

kernel/time/itimer.c

399

struct old_itimerval32 __user *, ovalue)

kernel/time/posix-clock.c

40

static ssize_t posix_clock_read(struct file *fp, char __user *buf,

kernel/time/posix-stubs.c

130

struct old_timespec32 __user *, tp)

kernel/time/posix-stubs.c

143

struct old_timespec32 __user *, tp)

kernel/time/posix-stubs.c

158

struct old_timespec32 __user *, tp)

kernel/time/posix-stubs.c

178

struct old_timespec32 __user *, rqtp,

kernel/time/posix-stubs.c

179

struct old_timespec32 __user *, rmtp)

kernel/time/posix-stubs.c

27

const struct __kernel_timespec __user *, tp)

kernel/time/posix-stubs.c

61

struct __kernel_timespec __user *, tp)

kernel/time/posix-stubs.c

75

SYSCALL_DEFINE2(clock_getres, const clockid_t, which_clock, struct __kernel_timespec __user *, tp)

kernel/time/posix-stubs.c

95

const struct __kernel_timespec __user *, rqtp,

kernel/time/posix-stubs.c

96

struct __kernel_timespec __user *, rmtp)

kernel/time/posix-timers.c

1124

const struct __kernel_timespec __user *, tp)

kernel/time/posix-timers.c

1143

struct __kernel_timespec __user *, tp)

kernel/time/posix-timers.c

1173

struct __kernel_timex __user *, utx)

kernel/time/posix-timers.c

1263

struct __kernel_timespec __user *, tp)

kernel/time/posix-timers.c

1283

struct old_timespec32 __user *, tp)

kernel/time/posix-timers.c

1298

struct old_timespec32 __user *, tp)

kernel/time/posix-timers.c

1316

struct old_timex32 __user *, utp)

kernel/time/posix-timers.c

1334

struct old_timespec32 __user *, tp)

kernel/time/posix-timers.c

1384

const struct __kernel_timespec __user *, rqtp,

kernel/time/posix-timers.c

1385

struct __kernel_timespec __user *, rmtp)

kernel/time/posix-timers.c

1412

struct old_timespec32 __user *, rqtp,

kernel/time/posix-timers.c

1413

struct old_timespec32 __user *, rmtp)

kernel/time/posix-timers.c

467

timer_t __user *created_timer_id)

kernel/time/posix-timers.c

575

struct sigevent __user *, timer_event_spec,

kernel/time/posix-timers.c

576

timer_t __user *, created_timer_id)

kernel/time/posix-timers.c

590

struct compat_sigevent __user *, timer_event_spec,

kernel/time/posix-timers.c

591

timer_t __user *, created_timer_id)

kernel/time/posix-timers.c

753

struct __kernel_itimerspec __user *, setting)

kernel/time/posix-timers.c

768

struct old_itimerspec32 __user *, setting)

kernel/time/posix-timers.c

963

const struct __kernel_itimerspec __user *, new_setting,

kernel/time/posix-timers.c

964

struct __kernel_itimerspec __user *, old_setting)

kernel/time/posix-timers.c

986

struct old_itimerspec32 __user *, new,

kernel/time/posix-timers.c

987

struct old_itimerspec32 __user *, old)

kernel/time/test_udelay.c

99

static ssize_t udelay_test_write(struct file *file, const char __user *buf,

kernel/time/time.c

1004

struct __kernel_itimerspec __user *uit)

kernel/time/time.c

1026

const struct old_itimerspec32 __user *uits)

kernel/time/time.c

1045

struct old_itimerspec32 __user *uits)

kernel/time/time.c

105

SYSCALL_DEFINE1(time32, old_time32_t __user *, tloc)

kernel/time/time.c

119

SYSCALL_DEFINE1(stime32, old_time32_t __user *, tptr)

kernel/time/time.c

140

SYSCALL_DEFINE2(gettimeofday, struct __kernel_old_timeval __user *, tv,

kernel/time/time.c

141

struct timezone __user *, tz)

kernel/time/time.c

199

SYSCALL_DEFINE2(settimeofday, struct __kernel_old_timeval __user *, tv,

kernel/time/time.c

200

struct timezone __user *, tz)

kernel/time/time.c

224

COMPAT_SYSCALL_DEFINE2(gettimeofday, struct old_timeval32 __user *, tv,

kernel/time/time.c

225

struct timezone __user *, tz)

kernel/time/time.c

243

COMPAT_SYSCALL_DEFINE2(settimeofday, struct old_timeval32 __user *, tv,

kernel/time/time.c

244

struct timezone __user *, tz)

kernel/time/time.c

269

SYSCALL_DEFINE1(adjtimex, struct __kernel_timex __user *, txc_p)

kernel/time/time.c

286

int get_old_timex32(struct __kernel_timex *txc, const struct old_timex32 __user *utp)

kernel/time/time.c

318

int put_old_timex32(struct old_timex32 __user *utp, const struct __kernel_timex *txc)

kernel/time/time.c

349

SYSCALL_DEFINE1(adjtimex_time32, struct old_timex32 __user *, utp)

kernel/time/time.c

62

SYSCALL_DEFINE1(time, __kernel_old_time_t __user *, tloc)

kernel/time/time.c

81

SYSCALL_DEFINE1(stime, __kernel_old_time_t __user *, tptr)

kernel/time/time.c

868

const struct __kernel_timespec __user *uts)

kernel/time/time.c

899

struct __kernel_timespec __user *uts)

kernel/time/time.c

911

const struct old_timespec32 __user *cts)

kernel/time/time.c

927

struct old_timespec32 __user *cts)

kernel/time/time.c

945

int get_old_timespec32(struct timespec64 *ts, const void __user *uts)

kernel/time/time.c

964

int put_old_timespec32(const struct timespec64 *ts, void __user *uts)

kernel/time/time.c

981

const struct __kernel_itimerspec __user *uit)

kernel/trace/blktrace.c

569

static ssize_t blk_dropped_read(struct file *filp, char __user *buffer,

kernel/trace/blktrace.c

588

static ssize_t blk_msg_write(struct file *filp, const char __user *buffer,

kernel/trace/blktrace.c

764

char __user *arg)

kernel/trace/blktrace.c

808

struct block_device *bdev, char __user *arg)

kernel/trace/blktrace.c

843

char __user *arg)

kernel/trace/blktrace.c

924

int blk_trace_ioctl(struct block_device *bdev, unsigned cmd, char __user *arg)

kernel/trace/bpf_trace.c

1818

union bpf_attr __user *uattr)

kernel/trace/bpf_trace.c

203

bpf_probe_read_user_common(void *dst, u32 size, const void __user *unsafe_ptr)

kernel/trace/bpf_trace.c

2038

int perf_event_query_prog_array(struct perf_event *event, void __user *info)

kernel/trace/bpf_trace.c

2040

struct perf_event_query_bpf __user *uquery = info;

kernel/trace/bpf_trace.c

214

const void __user *, unsafe_ptr)

kernel/trace/bpf_trace.c

230

const void __user *unsafe_ptr)

kernel/trace/bpf_trace.c

2371

static int copy_user_syms(struct user_syms *us, unsigned long __user *usyms, u32 cnt)

kernel/trace/bpf_trace.c

2373

unsigned long __user usymbol;

kernel/trace/bpf_trace.c

2395

err = strncpy_from_user(p, (const char __user *) usymbol, KSYM_NAME_LEN);

kernel/trace/bpf_trace.c

2452

u64 __user *ucookies = u64_to_user_ptr(info->kprobe_multi.cookies);

kernel/trace/bpf_trace.c

2453

u64 __user *uaddrs = u64_to_user_ptr(info->kprobe_multi.addrs);

kernel/trace/bpf_trace.c

251

const void __user *, unsafe_ptr)

kernel/trace/bpf_trace.c

2784

void __user *ucookies;

kernel/trace/bpf_trace.c

2787

void __user *uaddrs;

kernel/trace/bpf_trace.c

2789

void __user *usyms;

kernel/trace/bpf_trace.c

3011

u64 __user *uref_ctr_offsets = u64_to_user_ptr(info->uprobe_multi.ref_ctr_offsets);

kernel/trace/bpf_trace.c

3012

u64 __user *ucookies = u64_to_user_ptr(info->uprobe_multi.cookies);

kernel/trace/bpf_trace.c

3013

u64 __user *uoffsets = u64_to_user_ptr(info->uprobe_multi.offsets);

kernel/trace/bpf_trace.c

3014

u64 __user *upath = u64_to_user_ptr(info->uprobe_multi.path);

kernel/trace/bpf_trace.c

321

(__force void __user *)unsafe_ptr);

kernel/trace/bpf_trace.c

3221

void __user *upath = u64_to_user_ptr(attr->link_create.uprobe_multi.path);

kernel/trace/bpf_trace.c

3254

unsigned long __user *uref_ctr_offsets;

kernel/trace/bpf_trace.c

3258

unsigned long __user *uoffsets;

kernel/trace/bpf_trace.c

3259

u64 __user *ucookies;

kernel/trace/bpf_trace.c

340

(__force void __user *)unsafe_ptr);

kernel/trace/bpf_trace.c

355

BPF_CALL_3(bpf_probe_write_user, void __user *, unsafe_ptr, const void *, src,

kernel/trace/bpf_trace.c

3550

return copy_from_user_nofault(dst, (const void __user *)unsafe_src, size);

kernel/trace/bpf_trace.c

3559

ret = copy_from_user(dst, (const void __user *)unsafe_src, size);

kernel/trace/bpf_trace.c

3580

return strncpy_from_user_nofault(dst, (const void __user *)unsafe_src, size);

kernel/trace/bpf_trace.c

3594

ret = strncpy_from_user(dst, (const void __user *)unsafe_src, size - 1);

kernel/trace/bpf_trace.c

3623

u64 size, const void __user *unsafe_ptr__ign)

kernel/trace/bpf_trace.c

3637

u64 size, const void __user *unsafe_ptr__ign)

kernel/trace/bpf_trace.c

3651

u64 size, const void __user *unsafe_ptr__ign)

kernel/trace/bpf_trace.c

3658

u64 size, const void __user *unsafe_ptr__ign)

kernel/trace/bpf_trace.c

3665

u64 size, const void __user *unsafe_ptr__ign,

kernel/trace/bpf_trace.c

3673

u64 size, const void __user *unsafe_ptr__ign,

kernel/trace/bpf_trace.c

3791

u64 __user *ucookies;

kernel/trace/bpf_trace.c

3793

u32 __user *uids;

kernel/trace/bpf_trace.c

863

info.si_value.sival_ptr = (void __user __force *)(unsigned long)value;

kernel/trace/ftrace.c

5829

ftrace_regex_write(struct file *file, const char __user *ubuf,

kernel/trace/ftrace.c

5868

ftrace_filter_write(struct file *file, const char __user *ubuf,

kernel/trace/ftrace.c

5875

ftrace_notrace_write(struct file *file, const char __user *ubuf,

kernel/trace/ftrace.c

7434

ftrace_graph_write(struct file *file, const char __user *ubuf,

kernel/trace/ftrace.c

8919

pid_write(struct file *filp, const char __user *ubuf,

kernel/trace/ftrace.c

8990

ftrace_pid_write(struct file *filp, const char __user *ubuf,

kernel/trace/ftrace.c

8997

ftrace_no_pid_write(struct file *filp, const char __user *ubuf,

kernel/trace/ftrace.c

950

ftrace_profile_write(struct file *filp, const char __user *ubuf,

kernel/trace/ftrace.c

989

ftrace_profile_read(struct file *filp, char __user *ubuf,

kernel/trace/remote_test.c

195

write_event_write(struct file *filp, const char __user *ubuf, size_t cnt, loff_t *pos)

kernel/trace/rv/monitors/deadline/deadline.h

112

uattr = (struct sched_attr __user *)args[1];

kernel/trace/rv/monitors/deadline/deadline.h

98

struct sched_attr __user *uattr;

kernel/trace/rv/rv.c

241

static ssize_t monitor_enable_read_data(struct file *filp, char __user *user_buf, size_t count,

kernel/trace/rv/rv.c

367

static ssize_t monitor_enable_write_data(struct file *filp, const char __user *user_buf,

kernel/trace/rv/rv.c

397

static ssize_t monitor_desc_read_data(struct file *filp, char __user *user_buf, size_t count,

kernel/trace/rv/rv.c

584

static ssize_t enabled_monitors_write(struct file *filp, const char __user *user_buf,

kernel/trace/rv/rv.c

669

static ssize_t monitoring_on_read_data(struct file *filp, char __user *user_buf,

kernel/trace/rv/rv.c

716

static ssize_t monitoring_on_write_data(struct file *filp, const char __user *user_buf,

kernel/trace/rv/rv_reactors.c

204

monitor_reactors_write(struct file *file, const char __user *user_buf,

kernel/trace/rv/rv_reactors.c

349

char __user *user_buf,

kernel/trace/rv/rv_reactors.c

373

static ssize_t reacting_on_write_data(struct file *filp, const char __user *user_buf,

kernel/trace/trace.c

1126

int trace_get_user(struct trace_parser *parser, const char __user *ubuf,

kernel/trace/trace.c

3762

tracing_write_stub(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

3798

tracing_cpumask_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

3858

tracing_cpumask_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

4134

tracing_trace_options_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

4482

tracing_readme_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

4681

tracing_set_trace_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

5110

tracing_set_trace_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

5140

ssize_t tracing_nsecs_read(unsigned long *ptr, char __user *ubuf,

kernel/trace/trace.c

5153

ssize_t tracing_nsecs_write(unsigned long *ptr, const char __user *ubuf,

kernel/trace/trace.c

5169

tracing_thresh_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

5176

tracing_thresh_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

5392

tracing_read_pipe(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

5636

tracing_syscall_buf_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

5650

tracing_syscall_buf_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

5673

tracing_entries_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

5721

tracing_entries_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

5749

tracing_total_entries_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

5887

tracing_free_buffer_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

6185

const char __user *ptr, size_t size,

kernel/trace/trace.c

6286

tracing_mark_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

6367

tracing_mark_raw_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

6491

static ssize_t tracing_clock_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

6684

trace_min_max_write(struct file *filp, const char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace.c

6730

trace_min_max_read(struct file *filp, char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace.c

7004

const char __user *buffer,

kernel/trace/trace.c

7078

ssize_t tracing_buffers_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

7481

tracing_stats_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

7554

tracing_read_dyn_info(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

7687

trace_options_read(struct file *filp, char __user *ubuf, size_t cnt,

kernel/trace/trace.c

7702

trace_options_write(struct file *filp, const char __user *ubuf, size_t cnt,

kernel/trace/trace.c

7792

trace_options_core_read(struct file *filp, char __user *ubuf, size_t cnt,

kernel/trace/trace.c

7811

trace_options_core_write(struct file *filp, const char __user *ubuf, size_t cnt,

kernel/trace/trace.c

8073

rb_simple_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

8087

rb_simple_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

8130

buffer_percent_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.c

8144

buffer_percent_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

8174

buffer_subbuf_size_read(struct file *filp, char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace.c

8191

buffer_subbuf_size_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace.c

9516

ssize_t trace_parse_run_command(struct file *file, const char __user *buffer,

kernel/trace/trace.h

1414

extern int trace_get_user(struct trace_parser *parser, const char __user *ubuf,

kernel/trace/trace.h

1649

typedef int (*trace_user_buf_copy)(char *dst, const char __user *src,

kernel/trace/trace.h

1656

const char __user *ptr, size_t size,

kernel/trace/trace.h

2236

const char __user *buffer, size_t count, loff_t *ppos,

kernel/trace/trace.h

648

struct file *filp, char __user *ubuf,

kernel/trace/trace.h

722

ssize_t tracing_buffers_read(struct file *filp, char __user *ubuf,

kernel/trace/trace.h

728

ssize_t tracing_nsecs_read(unsigned long *ptr, char __user *ubuf,

kernel/trace/trace.h

730

ssize_t tracing_nsecs_write(unsigned long *ptr, const char __user *ubuf,

kernel/trace/trace.h

859

const char __user *ubuf, size_t cnt);

kernel/trace/trace_dynevent.c

257

static ssize_t dyn_event_write(struct file *file, const char __user *buffer,

kernel/trace/trace_events.c

1522

ftrace_event_write(struct file *file, const char __user *ubuf,

kernel/trace/trace_events.c

1878

event_enable_read(struct file *filp, char __user *ubuf, size_t cnt,

kernel/trace/trace_events.c

1907

event_enable_write(struct file *filp, const char __user *ubuf, size_t cnt,

kernel/trace/trace_events.c

1985

system_enable_read(struct file *filp, char __user *ubuf, size_t cnt,

kernel/trace/trace_events.c

2007

system_enable_write(struct file *filp, const char __user *ubuf, size_t cnt,

kernel/trace/trace_events.c

2190

event_id_read(struct file *filp, char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace_events.c

2206

event_filter_read(struct file *filp, char __user *ubuf, size_t cnt,

kernel/trace/trace_events.c

2239

event_filter_write(struct file *filp, const char __user *ubuf, size_t cnt,

kernel/trace/trace_events.c

2361

subsystem_filter_read(struct file *filp, char __user *ubuf, size_t cnt,

kernel/trace/trace_events.c

2388

subsystem_filter_write(struct file *filp, const char __user *ubuf, size_t cnt,

kernel/trace/trace_events.c

2413

show_header_page_file(struct file *filp, char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace_events.c

2438

show_header_event_file(struct file *filp, char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace_events.c

2510

event_pid_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_events.c

2575

ftrace_event_pid_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_events.c

2582

ftrace_event_npid_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_events_filter.c

819

char __user *ustr;

kernel/trace/trace_events_filter.c

829

ustr = (char __user *)str;

kernel/trace/trace_events_inject.c

284

event_inject_write(struct file *filp, const char __user *ubuf, size_t cnt,

kernel/trace/trace_events_inject.c

324

event_inject_read(struct file *file, char __user *buf, size_t size,

kernel/trace/trace_events_synth.c

2380

const char __user *buffer,

kernel/trace/trace_events_synth.c

453

ret = strncpy_from_user_nofault(str_field, (const void __user *)str_val, STR_VAR_LEN_MAX);

kernel/trace/trace_events_trigger.c

395

const char __user *ubuf,

kernel/trace/trace_events_trigger.c

435

event_trigger_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_events_user.c

2355

static ssize_t user_events_write(struct file *file, const char __user *ubuf,

kernel/trace/trace_events_user.c

2363

if (unlikely(import_ubuf(ITER_SOURCE, (char __user *)ubuf, count, &i)))

kernel/trace/trace_events_user.c

2414

static long user_reg_get(struct user_reg __user *ureg, struct user_reg *kreg)

kernel/trace/trace_events_user.c

2462

if (!access_ok((const void __user *)(uintptr_t)kreg->enable_addr,

kernel/trace/trace_events_user.c

2477

struct user_reg __user *ureg = (struct user_reg __user *)uarg;

kernel/trace/trace_events_user.c

2500

name = strndup_user((const char __user *)(uintptr_t)reg.name_args,

kernel/trace/trace_events_user.c

2556

void __user *ubuf = (void __user *)uarg;

kernel/trace/trace_events_user.c

2575

static long user_unreg_get(struct user_unreg __user *ureg,

kernel/trace/trace_events_user.c

2637

struct user_unreg __user *ureg = (struct user_unreg __user *)uarg;

kernel/trace/trace_functions_graph.c

1763

graph_depth_write(struct file *filp, const char __user *ubuf, size_t cnt,

kernel/trace/trace_functions_graph.c

1781

graph_depth_read(struct file *filp, char __user *ubuf, size_t cnt,

kernel/trace/trace_hwlat.c

676

static ssize_t hwlat_mode_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_kprobe.c

1360

static ssize_t probes_write(struct file *file, const char __user *buffer,

kernel/trace/trace_mmiotrace.c

131

char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace_osnoise.c

2253

static ssize_t osnoise_options_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_osnoise.c

2327

osnoise_cpus_read(struct file *filp, char __user *ubuf, size_t count,

kernel/trace/trace_osnoise.c

2366

osnoise_cpus_write(struct file *filp, const char __user *ubuf, size_t count,

kernel/trace/trace_osnoise.c

2497

timerlat_fd_read(struct file *file, char __user *ubuf, size_t count,

kernel/trace/trace_pid.c

158

const char __user *ubuf, size_t cnt)

kernel/trace/trace_probe_kernel.h

104

const void __user *uaddr = (__force const void __user *)src;

kernel/trace/trace_probe_kernel.h

15

const void __user *uaddr = (__force const void __user *)addr;

kernel/trace/trace_probe_kernel.h

54

const void __user *uaddr = (__force const void __user *)addr;

kernel/trace/trace_recursion_record.c

202

const char __user *buffer,

kernel/trace/trace_remote.c

1051

static ssize_t remote_event_enable_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_remote.c

1137

static ssize_t remote_events_dir_enable_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_remote.c

1170

static ssize_t remote_events_dir_enable_read(struct file *filp, char __user *ubuf, size_t cnt,

kernel/trace/trace_remote.c

1202

remote_events_dir_header_page_read(struct file *filp, char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace_remote.c

1225

remote_events_dir_header_event_read(struct file *filp, char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace_remote.c

174

tracing_on_write(struct file *filp, const char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace_remote.c

203

static ssize_t buffer_size_kb_write(struct file *filp, const char __user *ubuf, size_t cnt,

kernel/trace/trace_remote.c

620

static ssize_t trace_pipe_read(struct file *filp, char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace_remote.c

777

static ssize_t trace_write(struct file *filp, const char __user *ubuf, size_t cnt, loff_t *ppos)

kernel/trace/trace_sched_switch.c

598

tracing_saved_cmdlines_size_read(struct file *filp, char __user *ubuf,

kernel/trace/trace_sched_switch.c

638

tracing_saved_cmdlines_size_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_seq.c

395

int trace_seq_to_user(struct trace_seq *s, char __user *ubuf, int cnt)

kernel/trace/trace_snapshot.c

634

tracing_snapshot_write(struct file *filp, const char __user *ubuf, size_t cnt,

kernel/trace/trace_snapshot.c

773

tracing_max_lat_read(struct file *filp, char __user *ubuf,

kernel/trace/trace_snapshot.c

782

tracing_max_lat_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_stack.c

324

stack_max_size_read(struct file *filp, char __user *ubuf,

kernel/trace/trace_stack.c

338

stack_max_size_write(struct file *filp, const char __user *ubuf,

kernel/trace/trace_syscalls.c

663

static int syscall_copy_user(char *buf, const char __user *ptr,

kernel/trace/trace_syscalls.c

670

ptr = (char __user *)args->ptr_array[i];

kernel/trace/trace_syscalls.c

677

static int syscall_copy_user_array(char *buf, const char __user *ptr,

kernel/trace/trace_syscalls.c

684

ptr = (char __user *)args->ptr_array[i];

kernel/trace/trace_uprobe.c

119

if (copy_from_user(&ret, (void __force __user *) addr, sizeof(ret)))

kernel/trace/trace_uprobe.c

131

void __user *vaddr = (void __force __user *)src;

kernel/trace/trace_uprobe.c

153

void __user *src = (void __force __user *) addr;

kernel/trace/trace_uprobe.c

190

void __user *vaddr = (void __force __user *) addr;

kernel/trace/trace_uprobe.c

805

static ssize_t probes_write(struct file *file, const char __user *buffer,

kernel/uid16.c

114

static int groups16_to_user(old_gid_t __user *grouplist,

kernel/uid16.c

133

old_gid_t __user *grouplist)

kernel/uid16.c

154

SYSCALL_DEFINE2(getgroups16, int, gidsetsize, old_gid_t __user *, grouplist)

kernel/uid16.c

177

SYSCALL_DEFINE2(setgroups16, int, gidsetsize, old_gid_t __user *, grouplist)

kernel/uid16.c

23

SYSCALL_DEFINE3(chown16, const char __user *, filename, old_uid_t, user, old_gid_t, group)

kernel/uid16.c

28

SYSCALL_DEFINE3(lchown16, const char __user *, filename, old_uid_t, user, old_gid_t, group)

kernel/uid16.c

64

SYSCALL_DEFINE3(getresuid16, old_uid_t __user *, ruidp, old_uid_t __user *, euidp, old_uid_t __user *, suidp)

kernel/uid16.c

87

SYSCALL_DEFINE3(getresgid16, old_gid_t __user *, rgidp, old_gid_t __user *, egidp, old_gid_t __user *, sgidp)

kernel/unwind/user.c

17

unsigned long __user *addr = (void __user *)base + off;

kernel/unwind/user.c

21

int ret = get_user(data, (unsigned int __user *)addr);

kernel/user_namespace.c

1120

ssize_t proc_uid_map_write(struct file *file, const char __user *buf,

kernel/user_namespace.c

1137

ssize_t proc_gid_map_write(struct file *file, const char __user *buf,

kernel/user_namespace.c

1154

ssize_t proc_projid_map_write(struct file *file, const char __user *buf,

kernel/user_namespace.c

1225

ssize_t proc_setgroups_write(struct file *file, const char __user *buf,

kernel/user_namespace.c

932

static ssize_t map_write(struct file *file, const char __user *buf,

kernel/watch_queue.c

316

struct watch_notification_filter __user *_filter)

lib/bitmap-str.c

24

int bitmap_parse_user(const char __user *ubuf,

lib/bitmap-str.c

383

int bitmap_parselist_user(const char __user *ubuf,

lib/dynamic_debug.c

1005

static ssize_t ddebug_proc_write(struct file *file, const char __user *ubuf,

lib/iov_iter.c

1240

const struct iovec __user *uvec, u32 nr_segs)

lib/iov_iter.c

1242

const struct compat_iovec __user *uiov =

lib/iov_iter.c

1243

(const struct compat_iovec __user *)uvec;

lib/iov_iter.c

1273

const struct iovec __user *uiov, unsigned long nr_segs)

lib/iov_iter.c

1281

void __user *buf;

lib/iov_iter.c

1304

struct iovec *iovec_from_user(const struct iovec __user *uvec,

lib/iov_iter.c

1342

static ssize_t __import_iovec_ubuf(int type, const struct iovec __user *uvec,

lib/iov_iter.c

1364

ssize_t __import_iovec(int type, const struct iovec __user *uvec,

lib/iov_iter.c

1436

ssize_t import_iovec(int type, const struct iovec __user *uvec,

lib/iov_iter.c

1445

int import_ubuf(int rw, void __user *buf, size_t len, struct iov_iter *i)

lib/iov_iter.c

17

size_t copy_to_user_iter(void __user *iter_to, size_t progress,

lib/iov_iter.c

204

size_t copy_to_user_iter_mc(void __user *iter_to, size_t progress,

lib/iov_iter.c

277

size_t copy_from_user_iter_nocache(void __user *iter_from, size_t progress,

lib/iov_iter.c

296

size_t copy_from_user_iter_flushcache(void __user *iter_from, size_t progress,

lib/iov_iter.c

31

size_t copy_to_user_iter_nofault(void __user *iter_to, size_t progress,

lib/iov_iter.c

45

size_t copy_from_user_iter(void __user *iter_from, size_t progress,

lib/iov_iter.c

451

size_t zero_to_user_iter(void __user *iter_to, size_t progress,

lib/kfifo.c

190

const void __user *from, unsigned int len, unsigned int off,

lib/kfifo.c

224

int __kfifo_from_user(struct __kfifo *fifo, const void __user *from,

lib/kfifo.c

250

static unsigned long kfifo_copy_to_user(struct __kfifo *fifo, void __user *to,

lib/kfifo.c

284

int __kfifo_to_user(struct __kfifo *fifo, void __user *to,

lib/kfifo.c

508

int __kfifo_from_user_r(struct __kfifo *fifo, const void __user *from,

lib/kfifo.c

532

int __kfifo_to_user_r(struct __kfifo *fifo, void __user *to,

lib/kstrtox.c

406

int kstrtobool_from_user(const char __user *s, size_t count, bool *res)

lib/kstrtox.c

420

int f(const char __user *s, size_t count, unsigned int base, type *res) \

lib/kunit/debugfs.c

143

const char __user *buf, size_t count, loff_t *ppos)

lib/seq_buf.c

356

int seq_buf_to_user(struct seq_buf *s, char __user *ubuf, size_t start, int cnt)

lib/string_helpers.c

174

int parse_int_array_user(const char __user *from, size_t count, int **array)

lib/strncpy_from_user.c

113

long strncpy_from_user(char *dst, const char __user *src, long count)

lib/strncpy_from_user.c

28

static __always_inline long do_strncpy_from_user(char *dst, const char __user *src,

lib/strncpy_from_user.c

41

unsafe_get_user(c, (unsigned long __user *)(src+res), byte_at_a_time);

lib/strnlen_user.c

23

static __always_inline long do_strnlen_user(const char __user *src, unsigned long count, unsigned long max)

lib/strnlen_user.c

37

unsafe_get_user(c, (unsigned long __user *)src, efault);

lib/strnlen_user.c

52

unsafe_get_user(c, (unsigned long __user *)(src+res), efault);

lib/strnlen_user.c

92

long strnlen_user(const char __user *str, long count)

lib/test_firmware.c

151

static ssize_t test_fw_misc_read(struct file *f, char __user *buf,

lib/test_hmm.c

1419

char __user *uptr;

lib/test_hmm.c

1517

void __user *uarg = (void __user *)arg;

lib/test_lockup.c

421

(access_ok((void __user *)ptr, 1) ||

lib/test_lockup.c

422

access_ok((void __user *)ptr + size - 1, 1))) {

lib/tests/kunit_iov_iter.c

1031

u8 __user *ubuf;

lib/tests/kunit_iov_iter.c

1070

data->ubuf = (u8 __user *)uaddr;

lib/tests/stackinit_kunit.c

341

char __user *three;

lib/tests/usercopy_kunit.c

110

char __user *umem = priv->umem;

lib/tests/usercopy_kunit.c

180

char __user *usermem = priv->umem;

lib/tests/usercopy_kunit.c

196

put_user(val_##size, (size __user *)usermem), \

lib/tests/usercopy_kunit.c

200

get_user(val_##size, (size __user *)usermem), \

lib/tests/usercopy_kunit.c

221

char __user *usermem = priv->umem;

lib/tests/usercopy_kunit.c

237

KUNIT_EXPECT_NE_MSG(test, copy_from_user(kmem, (char __user *)(kmem + PAGE_SIZE),

lib/tests/usercopy_kunit.c

252

KUNIT_EXPECT_NE_MSG(test, copy_from_user(bad_usermem, (char __user *)kmem,

lib/tests/usercopy_kunit.c

256

KUNIT_EXPECT_NE_MSG(test, copy_to_user((char __user *)kmem, kmem + PAGE_SIZE,

lib/tests/usercopy_kunit.c

260

KUNIT_EXPECT_NE_MSG(test, copy_to_user((char __user *)kmem, bad_usermem,

lib/tests/usercopy_kunit.c

268

KUNIT_EXPECT_NE_MSG(test, get_user(val_##size, (size __user *)kmem), 0, \

lib/tests/usercopy_kunit.c

274

KUNIT_EXPECT_NE_MSG(test, put_user(val_##size, (size __user *)kmem), 0, \

lib/tests/usercopy_kunit.c

314

priv->umem = (char __user *)user_addr;

lib/tests/usercopy_kunit.c

37

char __user *umem;

lib/tests/usercopy_kunit.c

51

char __user *umem = priv->umem;

lib/usercopy.c

16

unsigned long _copy_from_user(void *to, const void __user *from, unsigned long n)

lib/usercopy.c

22

unsigned long _copy_to_user(void __user *to, const void *from, unsigned long n)

lib/usercopy.c

43

int check_zeroed_user(const void __user *from, size_t size)

lib/usercopy.c

57

unsafe_get_user(val, (unsigned long __user *) from, err_fault);

lib/usercopy.c

68

unsafe_get_user(val, (unsigned long __user *) from, err_fault);

lib/xz/xz_dec_test.c

101

static ssize_t xz_dec_test_write(struct file *file, const char __user *buf,

mm/filemap.c

4747

struct cachestat_range __user *, cstat_range,

mm/filemap.c

4748

struct cachestat __user *, cstat, unsigned int, flags)

mm/gup.c

2046

size_t fault_in_writeable(char __user *uaddr, size_t size)

mm/gup.c

2059

unsafe_put_user(0, (char __user *)cur, out);

mm/gup.c

2080

size_t fault_in_subpage_writeable(char __user *uaddr, size_t size)

mm/gup.c

2115

size_t fault_in_safe_writeable(const char __user *uaddr, size_t size)

mm/gup.c

2147

size_t fault_in_readable(const char __user *uaddr, size_t size)

mm/gup.c

2161

unsafe_get_user(c, (const char __user *)cur, out);

mm/gup_test.c

239

if (copy_from_user(&args, (void __user *)arg, sizeof(args)))

mm/gup_test.c

301

if (copy_from_user(&user_addr, (void __user *)arg, sizeof(user_addr)))

mm/gup_test.c

308

ret = copy_to_user((void __user *)(unsigned long)user_addr, addr,

mm/gup_test.c

365

if (copy_from_user(&gup, (void __user *)arg, sizeof(gup)))

mm/gup_test.c

372

if (copy_to_user((void __user *)arg, &gup, sizeof(gup)))

mm/huge_memory.c

4791

static ssize_t split_huge_pages_write(struct file *file, const char __user *buf,

mm/hugetlb.c

6235

ret = copy_folio_from_user(folio, (const void __user *) src_addr,

mm/kasan/kasan_test_c.c

2161

char __user *usermem;

mm/kasan/kasan_test_c.c

2178

usermem = (char __user *)useraddr;

mm/kmemleak.c

2244

static ssize_t kmemleak_write(struct file *file, const char __user *user_buf,

mm/kmsan/core.c

254

const void __user *user_addr, int reason)

mm/kmsan/hooks.c

248

void kmsan_copy_to_user(void __user *to, const void *from, size_t to_copy,

mm/kmsan/kmsan.h

166

const void __user *user_addr, int reason);

mm/kmsan/kmsan.h

76

int off_first, int off_last, const void __user *user_addr,

mm/kmsan/report.c

151

int off_first, int off_last, const void __user *user_addr,

mm/maccess.c

120

long copy_from_user_nofault(void *dst, const void __user *src, size_t size)

mm/maccess.c

149

long copy_to_user_nofault(void __user *dst, const void *src, size_t size)

mm/maccess.c

183

long strncpy_from_user_nofault(char *dst, const void __user *unsafe_addr,

mm/maccess.c

221

long strnlen_user_nofault(const void __user *unsafe_addr, long count)

mm/madvise.c

2085

SYSCALL_DEFINE5(process_madvise, int, pidfd, const struct iovec __user *, vec,

mm/madvise.c

2206

const char __user *uname)

mm/memfd.c

430

static char *alloc_name(const char __user *uname)

mm/memfd.c

506

const char __user *, uname,

mm/memory-failure.c

285

(void __user *)tk->addr, addr_lsb);

mm/memory-failure.c

293

ret = send_sig_mceerr(BUS_MCEERR_AO, (void __user *)tk->addr,

mm/memory.c

3560

void __user *uaddr;

mm/memory.c

3579

uaddr = (void __user *)(addr & PAGE_MASK);

mm/memory.c

7486

const void __user *usr_src,

mm/mempolicy.c

1634

static int get_bitmap(unsigned long *mask, const unsigned long __user *nmask,

mm/mempolicy.c

1642

(const compat_ulong_t __user *)nmask,

mm/mempolicy.c

1658

static int get_nodes(nodemask_t *nodes, const unsigned long __user *nmask,

mm/mempolicy.c

1694

static int copy_nodes_to_user(unsigned long __user *mask, unsigned long maxnode,

mm/mempolicy.c

1707

if (clear_user((char __user *)mask + nbytes, copy - nbytes))

mm/mempolicy.c

1714

return compat_put_bitmap((compat_ulong_t __user *)mask,

mm/mempolicy.c

1740

unsigned long mode, const unsigned long __user *nmask,

mm/mempolicy.c

1828

unsigned long, mode, const unsigned long __user *, nmask,

mm/mempolicy.c

1835

static long kernel_set_mempolicy(int mode, const unsigned long __user *nmask,

mm/mempolicy.c

1854

SYSCALL_DEFINE3(set_mempolicy, int, mode, const unsigned long __user *, nmask,

mm/mempolicy.c

1861

const unsigned long __user *old_nodes,

mm/mempolicy.c

1862

const unsigned long __user *new_nodes)

mm/mempolicy.c

1947

const unsigned long __user *, old_nodes,

mm/mempolicy.c

1948

const unsigned long __user *, new_nodes)

mm/mempolicy.c

1954

static int kernel_get_mempolicy(int __user *policy,

mm/mempolicy.c

1955

unsigned long __user *nmask,

mm/mempolicy.c

1983

SYSCALL_DEFINE5(get_mempolicy, int __user *, policy,

mm/mempolicy.c

1984

unsigned long __user *, nmask, unsigned long, maxnode,

mm/migrate.c

2227

static int store_status(int __user *status, int start, int value, int nr)

mm/migrate.c

2291

static int add_folio_for_migration(struct mm_struct *mm, const void __user *p,

mm/migrate.c

2319

struct list_head *pagelist, int __user *status,

mm/migrate.c

2350

const void __user * __user *pages,

mm/migrate.c

2351

const int __user *nodes,

mm/migrate.c

2352

int __user *status, int flags)

mm/migrate.c

2354

compat_uptr_t __user *compat_pages = (void __user *)pages;

mm/migrate.c

2363

const void __user *p;

mm/migrate.c

2448

const void __user **pages, int *status)

mm/migrate.c

2487

static int get_compat_pages_array(const void __user *chunk_pages[],

mm/migrate.c

2488

const void __user * __user *pages,

mm/migrate.c

2492

compat_uptr_t __user *pages32 = (compat_uptr_t __user *)pages;

mm/migrate.c

2510

const void __user * __user *pages,

mm/migrate.c

2511

int __user *status)

mm/migrate.c

2514

const void __user *chunk_pages[DO_PAGES_STAT_CHUNK_NR];

mm/migrate.c

2594

const void __user * __user *pages,

mm/migrate.c

2595

const int __user *nodes,

mm/migrate.c

2596

int __user *status, int flags)

mm/migrate.c

2624

const void __user * __user *, pages,

mm/migrate.c

2625

const int __user *, nodes,

mm/migrate.c

2626

int __user *, status, int, flags)

mm/mincore.c

292

unsigned char __user *, vec)

mm/mincore.c

305

if (!access_ok((void __user *) start, len))

mm/mmap.c

630

SYSCALL_DEFINE1(old_mmap, struct mmap_arg_struct __user *, arg)

mm/nommu.c

1288

SYSCALL_DEFINE1(old_mmap, struct mmap_arg_struct __user *, arg)

mm/page_owner.c

548

print_page_owner(char __user *buf, size_t count, unsigned long pfn,

mm/page_owner.c

660

read_page_owner(struct file *file, char __user *buf, size_t count, loff_t *ppos)

mm/process_vm_access.c

255

const struct iovec __user *lvec,

mm/process_vm_access.c

257

const struct iovec __user *rvec,

mm/process_vm_access.c

292

SYSCALL_DEFINE6(process_vm_readv, pid_t, pid, const struct iovec __user *, lvec,

mm/process_vm_access.c

293

unsigned long, liovcnt, const struct iovec __user *, rvec,

mm/process_vm_access.c

300

const struct iovec __user *, lvec,

mm/process_vm_access.c

301

unsigned long, liovcnt, const struct iovec __user *, rvec,

mm/shrinker_debug.c

101

const char __user *buf,

mm/swapfile.c

3063

SYSCALL_DEFINE1(swapoff, const char __user *, specialfile)

mm/swapfile.c

3594

SYSCALL_DEFINE2(swapon, const char __user *, specialfile, int, swap_flags)

mm/userfaultfd.c

3580

struct uffdio_register __user *user_uffdio_register;

mm/userfaultfd.c

3588

user_uffdio_register = (struct uffdio_register __user *) arg;

mm/userfaultfd.c

3756

const void __user *buf = (void __user *)arg;

mm/userfaultfd.c

3890

const void __user *buf = (void __user *)arg;

mm/userfaultfd.c

3921

struct uffdio_copy __user *user_uffdio_copy;

mm/userfaultfd.c

3925

user_uffdio_copy = (struct uffdio_copy __user *) arg;

mm/userfaultfd.c

3981

struct uffdio_zeropage __user *user_uffdio_zeropage;

mm/userfaultfd.c

3984

user_uffdio_zeropage = (struct uffdio_zeropage __user *) arg;

mm/userfaultfd.c

4035

struct uffdio_writeprotect __user *user_uffdio_wp;

mm/userfaultfd.c

4042

user_uffdio_wp = (struct uffdio_writeprotect __user *) arg;

mm/userfaultfd.c

4086

struct uffdio_continue __user *user_uffdio_continue;

mm/userfaultfd.c

4090

user_uffdio_continue = (struct uffdio_continue __user *)arg;

mm/userfaultfd.c

4147

struct uffdio_poison __user *user_uffdio_poison;

mm/userfaultfd.c

4150

user_uffdio_poison = (struct uffdio_poison __user *)arg;

mm/userfaultfd.c

4219

struct uffdio_move __user *user_uffdio_move;

mm/userfaultfd.c

4223

user_uffdio_move = (struct uffdio_move __user *) arg;

mm/userfaultfd.c

4288

void __user *buf = (void __user *)arg;

mm/userfaultfd.c

452

ret = copy_from_user(kaddr, (const void __user *) src_addr,

mm/userfaultfd.c

540

err = copy_from_user(kaddr, (const void __user *) src_addr, PAGE_SIZE);

mm/userfaultfd.c

900

(const void __user *)src_addr, true);

mm/util.c

217

void *memdup_user(const void __user *src, size_t len)

mm/util.c

243

void *vmemdup_user(const void __user *src, size_t len)

mm/util.c

267

char *strndup_user(const char __user *s, long n)

mm/util.c

299

void *memdup_user_nul(const void __user *src, size_t len)

mm/vmscan.c

5658

static ssize_t lru_gen_seq_write(struct file *file, const char __user *src,

net/6lowpan/debugfs.c

124

const char __user *user_buf, size_t count,

net/8021q/vlan.c

506

static int vlan_ioctl_handler(struct net *net, void __user *arg)

net/atm/br2684.c

359

static int br2684_setfilt(struct atm_vcc *atmvcc, void __user * arg)

net/atm/br2684.c

530

static int br2684_regvcc(struct atm_vcc *atmvcc, void __user * arg)

net/atm/br2684.c

662

static int br2684_create(void __user *arg)

net/atm/br2684.c

725

void __user *argp = (void __user *)arg;

net/atm/br2684.c

732

err = get_user(b, (atm_backend_t __user *) argp);

net/atm/ioctl.c

125

struct compat_atm_iobuf __user *ciobuf = argp;

net/atm/ioctl.c

133

struct atm_iobuf __user *iobuf = argp;

net/atm/ioctl.c

144

struct compat_atmif_sioc __user *csioc = argp;

net/atm/ioctl.c

155

struct atmif_sioc __user *sioc = argp;

net/atm/ioctl.c

224

struct compat_atm_iobuf __user *iobuf32 = compat_ptr(arg);

net/atm/ioctl.c

236

struct compat_atmif_sioc __user *sioc32 = compat_ptr(arg);

net/atm/ioctl.c

50

void __user *argp = (void __user *)arg;

net/atm/ioctl.c

51

void __user *buf;

net/atm/ioctl.c

52

int __user *len;

net/atm/ioctl.c

63

(int __user *)argp);

net/atm/ioctl.c

78

error = put_user(amount, (int __user *)argp);

net/atm/ioctl.c

90

error = get_user(backend, (atm_backend_t __user *)argp);

net/atm/pppoatm.c

374

return put_user(chan_to_pvcc(chan)->flags, (int __user *) arg)

net/atm/pppoatm.c

377

return get_user(chan_to_pvcc(chan)->flags, (int __user *) arg)

net/atm/pppoatm.c

388

static int pppoatm_assign_vcc(struct atm_vcc *atmvcc, void __user *arg)

net/atm/pppoatm.c

442

void __user *argp = (void __user *)arg;

net/atm/pppoatm.c

449

if (get_user(b, (atm_backend_t __user *) argp))

net/atm/pppoatm.c

461

chan), (int __user *) argp) ? -EFAULT : 0;

net/atm/pppoatm.c

464

chan), (int __user *) argp) ? -EFAULT : 0;

net/atm/proc.c

250

static ssize_t proc_dev_atm_read(struct file *file, char __user *buf,

net/atm/proc.c

33

static ssize_t proc_dev_atm_read(struct file *file, char __user *buf,

net/atm/resources.c

171

static int fetch_stats(struct atm_dev *dev, struct atm_dev_stats __user *arg,

net/atm/resources.c

190

int atm_getnames(void __user *buf, int __user *iobuf_len)

net/atm/resources.c

223

int atm_dev_ioctl(unsigned int cmd, void __user *buf, int __user *sioc_len,

net/atm/resources.h

17

int atm_getnames(void __user *buf, int __user *iobuf_len);

net/atm/resources.h

18

int atm_dev_ioctl(unsigned int cmd, void __user *buf, int __user *sioc_len,

net/bluetooth/6lowpan.c

1110

const char __user *user_buffer,

net/bluetooth/af_bluetooth.c

616

void __user *useraddr)

net/bluetooth/af_bluetooth.c

643

void __user *useraddr)

net/bluetooth/af_bluetooth.c

664

static int bt_dev_ioctl(struct socket *sock, unsigned int cmd, void __user *arg)

net/bluetooth/af_bluetooth.c

668

void __user *data;

net/bluetooth/af_bluetooth.c

712

err = put_user(amount, (int __user *)arg);

net/bluetooth/af_bluetooth.c

724

err = put_user(amount, (int __user *)arg);

net/bluetooth/af_bluetooth.c

728

err = bt_dev_ioctl(sock, cmd, (void __user *)arg);

net/bluetooth/bnep/bnep.h

131

struct bnep_conninfo __user *ci;

net/bluetooth/bnep/sock.c

136

return do_bnep_sock_ioctl(sock, cmd, (void __user *)arg);

net/bluetooth/bnep/sock.c

142

void __user *argp = compat_ptr(arg);

net/bluetooth/bnep/sock.c

145

unsigned __user *p = argp;

net/bluetooth/bnep/sock.c

50

static int do_bnep_sock_ioctl(struct socket *sock, unsigned int cmd, void __user *argp)

net/bluetooth/hci_conn.c

2762

int hci_get_conn_list(void __user *arg)

net/bluetooth/hci_conn.c

2815

int hci_get_conn_info(struct hci_dev *hdev, void __user *arg)

net/bluetooth/hci_conn.c

2820

char __user *ptr = arg + sizeof(req);

net/bluetooth/hci_conn.c

2843

int hci_get_auth_info(struct hci_dev *hdev, void __user *arg)

net/bluetooth/hci_core.c

323

int hci_inquiry(void __user *arg)

net/bluetooth/hci_core.c

325

__u8 __user *ptr = arg;

net/bluetooth/hci_core.c

640

int hci_dev_cmd(unsigned int cmd, void __user *arg)

net/bluetooth/hci_core.c

746

int hci_get_dev_list(void __user *arg)

net/bluetooth/hci_core.c

754

if (get_user(dev_num, (__u16 __user *) arg))

net/bluetooth/hci_core.c

793

int hci_get_dev_info(void __user *arg)

net/bluetooth/hci_debugfs.c

1147

char __user *user_buf,

net/bluetooth/hci_debugfs.c

1160

const char __user *user_buf,

net/bluetooth/hci_debugfs.c

1272

static ssize_t dut_mode_read(struct file *file, char __user *user_buf,

net/bluetooth/hci_debugfs.c

1284

static ssize_t dut_mode_write(struct file *file, const char __user *user_buf,

net/bluetooth/hci_debugfs.c

1328

static ssize_t vendor_diag_read(struct file *file, char __user *user_buf,

net/bluetooth/hci_debugfs.c

1340

static ssize_t vendor_diag_write(struct file *file, const char __user *user_buf,

net/bluetooth/hci_debugfs.c

273

static ssize_t use_debug_keys_read(struct file *file, char __user *user_buf,

net/bluetooth/hci_debugfs.c

291

static ssize_t sc_only_mode_read(struct file *file, char __user *user_buf,

net/bluetooth/hci_debugfs.c

32

char __user *user_buf, \

net/bluetooth/hci_debugfs.c

427

static ssize_t ssp_debug_mode_read(struct file *file, char __user *user_buf,

net/bluetooth/hci_debugfs.c

45

const char __user *user_buf, \

net/bluetooth/hci_debugfs.c

500

char __user *user_buf,

net/bluetooth/hci_debugfs.c

513

const char __user *user_buf,

net/bluetooth/hci_debugfs.c

745

char __user *user_buf,

net/bluetooth/hci_debugfs.c

758

const char __user *user_buf,

net/bluetooth/hci_sock.c

1022

return hci_get_conn_info(hdev, (void __user *)arg);

net/bluetooth/hci_sock.c

1025

return hci_get_auth_info(hdev, (void __user *)arg);

net/bluetooth/hci_sock.c

1030

return hci_sock_reject_list_add(hdev, (void __user *)arg);

net/bluetooth/hci_sock.c

1035

return hci_sock_reject_list_del(hdev, (void __user *)arg);

net/bluetooth/hci_sock.c

1044

void __user *argp = (void __user *)arg;

net/bluetooth/hci_sock.c

966

static int hci_sock_reject_list_add(struct hci_dev *hdev, void __user *arg)

net/bluetooth/hci_sock.c

983

static int hci_sock_reject_list_del(struct hci_dev *hdev, void __user *arg)

net/bluetooth/hidp/hidp.h

119

struct hidp_conninfo __user *ci;

net/bluetooth/hidp/hidp.h

91

__u8 __user *rd_data;

net/bluetooth/hidp/sock.c

125

return do_hidp_sock_ioctl(sock, cmd, (void __user *)arg);

net/bluetooth/hidp/sock.c

147

void __user *argp = compat_ptr(arg);

net/bluetooth/hidp/sock.c

152

u32 __user *p = argp;

net/bluetooth/hidp/sock.c

178

if (copy_from_user(&ca32, (void __user *) arg, sizeof(ca32)))

net/bluetooth/hidp/sock.c

47

static int do_hidp_sock_ioctl(struct socket *sock, unsigned int cmd, void __user *argp)

net/bluetooth/rfcomm/sock.c

888

err = rfcomm_dev_ioctl(sk, cmd, (void __user *) arg);

net/bluetooth/rfcomm/tty.c

388

static int __rfcomm_create_dev(struct sock *sk, void __user *arg)

net/bluetooth/rfcomm/tty.c

434

static int __rfcomm_release_dev(void __user *arg)

net/bluetooth/rfcomm/tty.c

472

static int rfcomm_create_dev(struct sock *sk, void __user *arg)

net/bluetooth/rfcomm/tty.c

483

static int rfcomm_release_dev(void __user *arg)

net/bluetooth/rfcomm/tty.c

494

static int rfcomm_get_dev_list(void __user *arg)

net/bluetooth/rfcomm/tty.c

504

if (get_user(dev_num, (u16 __user *) arg))

net/bluetooth/rfcomm/tty.c

542

static int rfcomm_get_dev_info(void __user *arg)

net/bluetooth/rfcomm/tty.c

570

int rfcomm_dev_ioctl(struct sock *sk, unsigned int cmd, void __user *arg)

net/bluetooth/selftest.c

183

static ssize_t test_ecdh_read(struct file *file, char __user *user_buf,

net/bluetooth/smp.c

3666

static ssize_t test_smp_read(struct file *file, char __user *user_buf,

net/bpf/bpf_dummy_struct_ops.c

130

union bpf_attr __user *uattr)

net/bpf/bpf_dummy_struct_ops.c

32

void __user *ctx_in;

net/bpf/bpf_dummy_struct_ops.c

33

void __user *u_state;

net/bpf/bpf_dummy_struct_ops.c

61

void __user *u_state;

net/bpf/test_run.c

1036

union bpf_attr __user *uattr)

net/bpf/test_run.c

1126

void __user *data_in = u64_to_user_ptr(kattr->test.data_in);

net/bpf/test_run.c

1333

union bpf_attr __user *uattr)

net/bpf/test_run.c

1424

void __user *data_in = u64_to_user_ptr(kattr->test.data_in);

net/bpf/test_run.c

1511

union bpf_attr __user *uattr)

net/bpf/test_run.c

1579

union bpf_attr __user *uattr)

net/bpf/test_run.c

1680

union bpf_attr __user *uattr)

net/bpf/test_run.c

1682

void __user *ctx_in = u64_to_user_ptr(kattr->test.ctx_in);

net/bpf/test_run.c

1778

union bpf_attr __user *uattr)

net/bpf/test_run.c

437

union bpf_attr __user *uattr, const void *data,

net/bpf/test_run.c

441

void __user *data_out = u64_to_user_ptr(kattr->test.data_out);

net/bpf/test_run.c

666

void __user *data_in = u64_to_user_ptr(kattr->test.data_in);

net/bpf/test_run.c

687

union bpf_attr __user *uattr)

net/bpf/test_run.c

784

union bpf_attr __user *uattr)

net/bpf/test_run.c

786

void __user *ctx_in = u64_to_user_ptr(kattr->test.ctx_in);

net/bpf/test_run.c

856

void __user *data_in = u64_to_user_ptr(kattr->test.ctx_in);

net/bpf/test_run.c

857

void __user *data_out = u64_to_user_ptr(kattr->test.ctx_out);

net/bpf/test_run.c

886

union bpf_attr __user *uattr, const void *data,

net/bpf/test_run.c

889

void __user *data_out = u64_to_user_ptr(kattr->test.ctx_out);

net/bridge/br_ioctl.c

108

void __user **argp, void __user *data)

net/bridge/br_ioctl.c

131

*argp = (void __user *)args[1];

net/bridge/br_ioctl.c

145

void __user *data, int cmd)

net/bridge/br_ioctl.c

150

void __user *argp;

net/bridge/br_ioctl.c

189

if (copy_to_user((void __user *)args[1], &b, sizeof(b)))

net/bridge/br_ioctl.c

339

static int old_deviceless(struct net *net, void __user *data)

net/bridge/br_ioctl.c

342

void __user *argp;

net/bridge/br_ioctl.c

397

int br_ioctl_stub(struct net *net, unsigned int cmd, void __user *uarg)

net/bridge/br_ioctl.c

403

void __user *data;

net/bridge/br_ioctl.c

56

static int get_fdb_entries(struct net_bridge *br, void __user *userbuf,

net/bridge/br_private.h

964

void __user *data, int cmd);

net/bridge/br_private.h

965

int br_ioctl_stub(struct net *net, unsigned int cmd, void __user *uarg);

net/bridge/netfilter/ebt_mark.c

71

static int mark_tg_compat_to_user(void __user *dst, const void *src)

net/bridge/netfilter/ebt_mark.c

73

struct compat_ebt_mark_t_info __user *user = dst;

net/bridge/netfilter/ebt_mark_m.c

57

static int mark_mt_compat_to_user(void __user *dst, const void *src)

net/bridge/netfilter/ebt_mark_m.c

59

struct compat_ebt_mark_m_info __user *user = dst;

net/bridge/netfilter/ebtables.c

1385

struct ebt_counter __user *counters,

net/bridge/netfilter/ebtables.c

1448

static inline int ebt_obj_to_user(char __user *um, const char *_name,

net/bridge/netfilter/ebtables.c

1459

put_user(revision, (u8 __user *)(um + EBT_EXTENSION_MAXNAMELEN)) ||

net/bridge/netfilter/ebtables.c

1460

put_user(datasize, (int __user *)(um + EBT_EXTENSION_MAXNAMELEN + 1)) ||

net/bridge/netfilter/ebtables.c

1469

const char *base, char __user *ubase)

net/bridge/netfilter/ebtables.c

1478

const char *base, char __user *ubase)

net/bridge/netfilter/ebtables.c

1487

char __user *ubase)

net/bridge/netfilter/ebtables.c

1490

char __user *hlp;

net/bridge/netfilter/ebtables.c

1524

void __user *user, unsigned int num_counters,

net/bridge/netfilter/ebtables.c

1553

static int copy_everything_to_user(struct ebt_table *t, void __user *user,

net/bridge/netfilter/ebtables.c

1648

static int compat_match_to_user(struct ebt_entry_match *m, void __user **dstptr,

net/bridge/netfilter/ebtables.c

1652

struct compat_ebt_entry_mwt __user *cm = *dstptr;

net/bridge/netfilter/ebtables.c

1680

void __user **dstptr,

net/bridge/netfilter/ebtables.c

1684

struct compat_ebt_entry_mwt __user *cm = *dstptr;

net/bridge/netfilter/ebtables.c

1712

void __user **dstptr,

net/bridge/netfilter/ebtables.c

1719

static int compat_copy_entry_to_user(struct ebt_entry *e, void __user **dstptr,

net/bridge/netfilter/ebtables.c

1723

struct ebt_entry __user *ce;

net/bridge/netfilter/ebtables.c

1860

void __user *user, int *len, int cmd)

net/bridge/netfilter/ebtables.c

1866

void __user *pos;

net/bridge/netfilter/ebtables.c

2367

char __user *usrptr;

net/bridge/netfilter/ebtables.c

2370

usrptr = (char __user *) tmp.hook_entry[i];

net/bridge/netfilter/ebtables.c

2373

tmp.hook_entry[i] = (struct ebt_entries __user *)usrptr;

net/bridge/netfilter/ebtables.c

2415

void __user *user, int *len)

net/bridge/netfilter/ebtables.c

2487

static int do_ebt_get_ctl(struct sock *sk, int cmd, void __user *user, int *len)

net/bridge/netfilter/ebtables.c

494

if ((char __user *)repl->hook_entry[i] ==

net/bridge/netfilter/ebtables.c

70

static int ebt_standard_compat_to_user(void __user *dst, const void *src)

net/can/isotp.c

1795

char __user *optval, int __user *optlen)

net/can/j1939/socket.c

770

char __user *optval, int __user *optlen)

net/compat.c

107

((void __user *)((char __user *)(cmsg) + sizeof(struct compat_cmsghdr)))

net/compat.c

115

(struct compat_cmsghdr __user *)((msg)->msg_control_user) : \

net/compat.c

116

(struct compat_cmsghdr __user *)NULL)

net/compat.c

122

((char __user *)(ucmsg) - (char __user *)(mhdr)->msg_control_user)))

net/compat.c

124

static inline struct compat_cmsghdr __user *cmsg_compat_nxthdr(struct msghdr *msg,

net/compat.c

125

struct compat_cmsghdr __user *cmsg, int cmsg_len)

net/compat.c

127

char __user *ptr = (char __user *)cmsg + CMSG_COMPAT_ALIGN(cmsg_len);

net/compat.c

128

if ((unsigned long)(ptr + 1 - (char __user *)msg->msg_control_user) >

net/compat.c

131

return (struct compat_cmsghdr __user *)ptr;

net/compat.c

141

struct compat_cmsghdr __user *ucmsg;

net/compat.c

228

struct compat_cmsghdr __user *cm = (struct compat_cmsghdr __user *) kmsg->msg_control_user;

net/compat.c

291

struct compat_cmsghdr __user *cm =

net/compat.c

292

(struct compat_cmsghdr __user *)msg->msg_control_user;

net/compat.c

295

int __user *cmsg_data = CMSG_COMPAT_DATA(cm);

net/compat.c

342

struct compat_msghdr __user *msg,

net/compat.c

345

return __sys_sendmsg(fd, (struct user_msghdr __user *)msg,

net/compat.c

349

COMPAT_SYSCALL_DEFINE3(sendmsg, int, fd, struct compat_msghdr __user *, msg,

net/compat.c

356

struct compat_mmsghdr __user *mmsg,

net/compat.c

359

return __sys_sendmmsg(fd, (struct mmsghdr __user *)mmsg, vlen,

net/compat.c

363

COMPAT_SYSCALL_DEFINE4(sendmmsg, int, fd, struct compat_mmsghdr __user *, mmsg,

net/compat.c

370

struct compat_msghdr __user *msg,

net/compat.c

373

return __sys_recvmsg(fd, (struct user_msghdr __user *)msg,

net/compat.c

377

COMPAT_SYSCALL_DEFINE3(recvmsg, int, fd, struct compat_msghdr __user *, msg,

net/compat.c

38

struct sockaddr __user **save_addr)

net/compat.c

383

static inline long __compat_sys_recvfrom(int fd, void __user *buf,

net/compat.c

385

struct sockaddr __user *addr,

net/compat.c

386

int __user *addrlen)

net/compat.c

392

COMPAT_SYSCALL_DEFINE4(recv, int, fd, void __user *, buf, compat_size_t, len, unsigned int, flags)

net/compat.c

397

COMPAT_SYSCALL_DEFINE6(recvfrom, int, fd, void __user *, buf, compat_size_t, len,

net/compat.c

398

unsigned int, flags, struct sockaddr __user *, addr,

net/compat.c

399

int __user *, addrlen)

net/compat.c

404

COMPAT_SYSCALL_DEFINE5(recvmmsg_time64, int, fd, struct compat_mmsghdr __user *, mmsg,

net/compat.c

406

struct __kernel_timespec __user *, timeout)

net/compat.c

408

return __sys_recvmmsg(fd, (struct mmsghdr __user *)mmsg, vlen,

net/compat.c

413

COMPAT_SYSCALL_DEFINE5(recvmmsg_time32, int, fd, struct compat_mmsghdr __user *, mmsg,

net/compat.c

415

struct old_timespec32 __user *, timeout)

net/compat.c

417

return __sys_recvmmsg(fd, (struct mmsghdr __user *)mmsg, vlen,

net/compat.c

422

COMPAT_SYSCALL_DEFINE2(socketcall, int, call, u32 __user *, args)

net/compat.c

83

struct compat_msghdr __user *umsg,

net/compat.c

84

struct sockaddr __user **save_addr,

net/core/datagram.c

797

size_t copy_to_user_iter_csum(void __user *iter_to, size_t progress,

net/core/dev_ioctl.c

40

int dev_ifconf(struct net *net, struct ifconf __user *uifc)

net/core/dev_ioctl.c

43

void __user *pos;

net/core/dev_ioctl.c

502

void __user *data, unsigned int cmd)

net/core/dev_ioctl.c

541

static int dev_ifsioc(struct net *net, struct ifreq *ifr, void __user *data,

net/core/dev_ioctl.c

700

void __user *data, bool *need_copyout)

net/core/pktgen.c

1916

const char __user *user_buffer,

net/core/pktgen.c

519

static ssize_t pgctrl_write(struct file *file, const char __user *buf,

net/core/pktgen.c

751

static ssize_t hex32_arg(const char __user *user_buffer, size_t maxlen,

net/core/pktgen.c

775

static ssize_t count_trail_chars(const char __user *user_buffer, size_t maxlen)

net/core/pktgen.c

800

static ssize_t num_arg(const char __user *user_buffer, size_t maxlen,

net/core/pktgen.c

820

static ssize_t strn_len(const char __user *user_buffer, size_t maxlen)

net/core/pktgen.c

850

static ssize_t get_imix_entries(const char __user *buffer,

net/core/pktgen.c

912

static ssize_t get_labels(const char __user *buffer,

net/core/pktgen.c

985

const char __user *user_buffer, size_t count,

net/core/scm.c

272

struct cmsghdr __user *cm = msg->msg_control_user;

net/core/scm.c

356

struct cmsghdr __user *cm =

net/core/scm.c

357

(__force struct cmsghdr __user *)msg->msg_control_user;

net/core/scm.c

360

int __user *cmsg_data = CMSG_USER_DATA(cm);

net/core/skb_fault_injection.c

54

static ssize_t devname_write(struct file *file, const char __user *buffer,

net/core/skb_fault_injection.c

76

char __user *buffer,

net/core/skbuff.c

7452

size_t copy_from_user_iter_csum(void __user *iter_from, size_t progress,

net/core/sock.c

3906

int sock_gettstamp(struct socket *sock, void __user *userstamp,

net/core/sock.c

3932

struct __kernel_old_timeval __user tv = {

net/core/sock.c

4007

char __user *optval, int __user *optlen)

net/core/sock.c

4492

void __user *arg, void *karg, size_t size)

net/core/sock.c

4514

static int sock_ioctl_out(struct sock *sk, unsigned int cmd, void __user *arg)

net/core/sock.c

4522

return put_user(karg, (int __user *)arg);

net/core/sock.c

4530

int sk_ioctl(struct sock *sk, unsigned int cmd, void __user *arg)

net/core/sock_map.c

1573

union bpf_attr __user *uattr)

net/core/sock_map.c

1575

__u32 __user *prog_ids = u64_to_user_ptr(attr->query.prog_ids);

net/ethtool/ioctl.c

1103

ethtool_set_rxfh_fields(struct net_device *dev, u32 cmd, void __user *useraddr)

net/ethtool/ioctl.c

1154

ethtool_get_rxfh_fields(struct net_device *dev, u32 cmd, void __user *useraddr)

net/ethtool/ioctl.c

1189

u32 cmd, void __user *useraddr)

net/ethtool/ioctl.c

1229

void __user *useraddr)

net/ethtool/ioctl.c

123

static int ethtool_set_features(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

1250

u32 cmd, void __user *useraddr)

net/ethtool/ioctl.c

1287

static int ethtool_copy_validate_indir(u32 *indir, void __user *useraddr,

net/ethtool/ioctl.c

1315

void __user *useraddr)

net/ethtool/ioctl.c

1364

void __user *useraddr)

net/ethtool/ioctl.c

1435

void __user *useraddr)

net/ethtool/ioctl.c

1541

void __user *useraddr)

net/ethtool/ioctl.c

1777

static int ethtool_get_regs(struct net_device *dev, char __user *useraddr)

net/ethtool/ioctl.c

1819

static int ethtool_reset(struct net_device *dev, char __user *useraddr)

net/ethtool/ioctl.c

1842

static int ethtool_get_wol(struct net_device *dev, char __user *useraddr)

net/ethtool/ioctl.c

1858

static int ethtool_set_wol(struct net_device *dev, char __user *useraddr)

net/ethtool/ioctl.c

1925

static int ethtool_get_eee(struct net_device *dev, char __user *useraddr)

net/ethtool/ioctl.c

1946

static int ethtool_set_eee(struct net_device *dev, char __user *useraddr)

net/ethtool/ioctl.c

1973

static int ethtool_get_link(struct net_device *dev, char __user *useraddr)

net/ethtool/ioctl.c

1987

static int ethtool_get_any_eeprom(struct net_device *dev, void __user *useraddr,

net/ethtool/ioctl.c

1993

void __user *userbuf = useraddr + sizeof(eeprom);

net/ethtool/ioctl.c

2042

static int ethtool_get_eeprom(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2054

static int ethtool_set_eeprom(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2058

void __user *userbuf = useraddr + sizeof(eeprom);

net/ethtool/ioctl.c

2103

void __user *useraddr)

net/ethtool/ioctl.c

2178

void __user *useraddr)

net/ethtool/ioctl.c

2205

static int ethtool_get_ringparam(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2221

static int ethtool_set_ringparam(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2250

void __user *useraddr)

net/ethtool/ioctl.c

2265

void __user *useraddr)

net/ethtool/ioctl.c

2319

static int ethtool_get_pauseparam(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2333

static int ethtool_set_pauseparam(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2350

static int ethtool_self_test(struct net_device *dev, char __user *useraddr)

net/ethtool/ioctl.c

2390

static int ethtool_get_strings(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2455

static int ethtool_phys_id(struct net_device *dev, void __user *useraddr,

net/ethtool/ioctl.c

252

char __user *useraddr, u32 ethcmd)

net/ethtool/ioctl.c

2520

static int ethtool_get_stats(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2634

static int ethtool_get_phy_stats(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

266

void __user *useraddr, u32 ethcmd)

net/ethtool/ioctl.c

2669

static int ethtool_get_perm_addr(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2688

static int ethtool_get_value(struct net_device *dev, char __user *useraddr,

net/ethtool/ioctl.c

2703

static int ethtool_set_value_void(struct net_device *dev, char __user *useraddr,

net/ethtool/ioctl.c

2718

static int ethtool_set_value(struct net_device *dev, char __user *useraddr,

net/ethtool/ioctl.c

2744

void __user *useraddr)

net/ethtool/ioctl.c

2758

void __user *useraddr)

net/ethtool/ioctl.c

2780

void __user *useraddr)

net/ethtool/ioctl.c

2842

static int ethtool_get_ts_info(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2886

void __user *useraddr)

net/ethtool/ioctl.c

2926

void __user *useraddr)

net/ethtool/ioctl.c

2962

static int ethtool_get_tunable(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

2993

static int ethtool_set_tunable(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

3019

void __user *useraddr,

net/ethtool/ioctl.c

3050

void __user *useraddr,

net/ethtool/ioctl.c

3111

void __user *useraddr, u32 sub_cmd)

net/ethtool/ioctl.c

3159

static int get_phy_tunable(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

3198

static int set_phy_tunable(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

3230

static int ethtool_get_fecparam(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

3250

static int ethtool_set_fecparam(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

3273

void __user *useraddr,

net/ethtool/ioctl.c

3610

__dev_ethtool(struct net *net, struct ifreq *ifr, void __user *useraddr,

net/ethtool/ioctl.c

3646

int dev_ethtool(struct net *net, struct ifreq *ifr, void __user *useraddr)

net/ethtool/ioctl.c

474

const void __user *from)

net/ethtool/ioctl.c

518

store_link_ksettings_for_user(void __user *to,

net/ethtool/ioctl.c

542

void __user *useraddr)

net/ethtool/ioctl.c

599

void __user *useraddr)

net/ethtool/ioctl.c

672

static int ethtool_get_settings(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

708

static int ethtool_set_settings(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

796

void __user *useraddr)

net/ethtool/ioctl.c

84

static int ethtool_get_features(struct net_device *dev, void __user *useraddr)

net/ethtool/ioctl.c

853

const struct compat_ethtool_rxnfc __user *useraddr,

net/ethtool/ioctl.c

897

const void __user *useraddr,

net/ethtool/ioctl.c

909

static int ethtool_rxnfc_copy_to_compat(void __user *useraddr,

net/ethtool/ioctl.c

91

u32 __user *sizeaddr;

net/ethtool/ioctl.c

939

size_t *info_size, void __user *useraddr)

net/ethtool/ioctl.c

970

static int ethtool_rxnfc_copy_to_user(void __user *useraddr,

net/ieee802154/socket.c

124

static int ieee802154_dev_ioctl(struct sock *sk, struct ifreq __user *arg,

net/ieee802154/socket.c

160

return ieee802154_dev_ioctl(sk, (struct ifreq __user *)arg,

net/ieee802154/socket.c

165

return sk_ioctl(sk, cmd, (void __user *)arg);

net/ieee802154/socket.c

383

char __user *optval, int __user *optlen)

net/ieee802154/socket.c

835

char __user *optval, int __user *optlen)

net/ipv4/af_inet.c

1013

err = sk_ioctl(sk, cmd, (void __user *)arg);

net/ipv4/af_inet.c

1024

struct compat_rtentry __user *ur)

net/ipv4/af_inet.c

1045

void __user *argp = compat_ptr(arg);

net/ipv4/af_inet.c

970

void __user *p = (void __user *)arg;

net/ipv4/af_inet.c

987

err = arp_ioctl(net, cmd, (void __user *)arg);

net/ipv4/arp.c

1265

int arp_ioctl(struct net *net, unsigned int cmd, void __user *arg)

net/ipv4/devinet.c

1305

int inet_gifconf(struct net_device *dev, char __user *buf, int len, int size)

net/ipv4/ip_sockglue.c

1761

int optname, char __user *optval, int __user *optlen)

net/ipv4/ip_tunnel.c

1001

const void __user *data)

net/ipv4/ip_tunnel.c

1020

bool ip_tunnel_parm_to_user(void __user *data, struct ip_tunnel_parm_kern *kp)

net/ipv4/ip_tunnel.c

1043

void __user *data, int cmd)

net/ipv4/ipmr.c

1613

int ipmr_sk_ioctl(struct sock *sk, unsigned int cmd, void __user *arg)

net/ipv4/ipmr.c

1750

int ipmr_compat_ioctl(struct sock *sk, unsigned int cmd, void __user *arg)

net/ipv4/netfilter/arp_tables.c

1315

static int compat_copy_entry_to_user(struct arpt_entry *e, void __user **dstptr,

net/ipv4/netfilter/arp_tables.c

1321

struct compat_arpt_entry __user *ce;

net/ipv4/netfilter/arp_tables.c

1350

void __user *userptr)

net/ipv4/netfilter/arp_tables.c

1354

void __user *pos;

net/ipv4/netfilter/arp_tables.c

1383

struct compat_arpt_get_entries __user *uptr,

net/ipv4/netfilter/arp_tables.c

1454

static int do_arpt_get_ctl(struct sock *sk, int cmd, void __user *user, int *len)

net/ipv4/netfilter/arp_tables.c

684

void __user *userptr)

net/ipv4/netfilter/arp_tables.c

737

static int compat_standard_to_user(void __user *dst, const void *src)

net/ipv4/netfilter/arp_tables.c

801

static int get_info(struct net *net, void __user *user, const int *len)

net/ipv4/netfilter/arp_tables.c

856

static int get_entries(struct net *net, struct arpt_get_entries __user *uptr,

net/ipv4/netfilter/arp_tables.c

894

void __user *counters_ptr)

net/ipv4/netfilter/ip_tables.c

1001

get_entries(struct net *net, struct ipt_get_entries __user *uptr,

net/ipv4/netfilter/ip_tables.c

1036

void __user *counters_ptr)

net/ipv4/netfilter/ip_tables.c

1216

compat_copy_entry_to_user(struct ipt_entry *e, void __user **dstptr,

net/ipv4/netfilter/ip_tables.c

1221

struct compat_ipt_entry __user *ce;

net/ipv4/netfilter/ip_tables.c

1548

void __user *userptr)

net/ipv4/netfilter/ip_tables.c

1552

void __user *pos;

net/ipv4/netfilter/ip_tables.c

1576

compat_get_entries(struct net *net, struct compat_ipt_get_entries __user *uptr,

net/ipv4/netfilter/ip_tables.c

1649

do_ipt_get_ctl(struct sock *sk, int cmd, void __user *user, int *len)

net/ipv4/netfilter/ip_tables.c

812

void __user *userptr)

net/ipv4/netfilter/ip_tables.c

878

static int compat_standard_to_user(void __user *dst, const void *src)

net/ipv4/netfilter/ip_tables.c

944

static int get_info(struct net *net, void __user *user, const int *len)

net/ipv4/raw.c

821

static int raw_geticmpfilter(struct sock *sk, char __user *optval, int __user *optlen)

net/ipv4/raw.c

861

char __user *optval, int __user *optlen)

net/ipv4/raw.c

873

char __user *optval, int __user *optlen)

net/ipv4/tcp.c

1989

err = import_ubuf(ITER_DEST, (void __user *)copy_address, inq,

net/ipv4/tcp.c

2022

err = import_ubuf(ITER_DEST, (void __user *)copy_address, copylen,

net/ipv4/tcp.c

2151

cmsg_dummy.msg_control_user = (void __user *)msg_control_addr;

net/ipv4/tcp.c

4857

int tcp_getsockopt(struct sock *sk, int level, int optname, char __user *optval,

net/ipv4/tcp.c

4858

int __user *optlen)

net/ipv4/udp.c

2998

char __user *optval, int __user *optlen)

net/ipv4/udp.c

3048

char __user *optval, int __user *optlen)

net/ipv6/addrconf.c

2997

int addrconf_set_dstaddr(struct net *net, void __user *arg)

net/ipv6/addrconf.c

3159

int addrconf_add_ifaddr(struct net *net, void __user *arg)

net/ipv6/addrconf.c

3192

int addrconf_del_ifaddr(struct net *net, void __user *arg)

net/ipv6/af_inet6.c

549

void __user *argp = (void __user *)arg;

net/ipv6/af_inet6.c

574

return sk_ioctl(sk, cmd, (void __user *)arg);

net/ipv6/af_inet6.c

596

struct compat_in6_rtmsg __user *ur)

net/ipv6/af_inet6.c

617

void __user *argp = compat_ptr(arg);

net/ipv6/ip6_gre.c

1255

struct ifreq *ifr, void __user *data,

net/ipv6/ip6_tunnel.c

1654

void __user *data, int cmd)

net/ipv6/ip6_vti.c

799

vti6_siocdevprivate(struct net_device *dev, struct ifreq *ifr, void __user *data, int cmd)

net/ipv6/ip6mr.c

2011

int ip6mr_compat_ioctl(struct sock *sk, unsigned int cmd, void __user *arg)

net/ipv6/ipv6_sockglue.c

1444

char __user *optval, int __user *optlen)

net/ipv6/netfilter/ip6_tables.c

1017

get_entries(struct net *net, struct ip6t_get_entries __user *uptr,

net/ipv6/netfilter/ip6_tables.c

1053

void __user *counters_ptr)

net/ipv6/netfilter/ip6_tables.c

1232

compat_copy_entry_to_user(struct ip6t_entry *e, void __user **dstptr,

net/ipv6/netfilter/ip6_tables.c

1237

struct compat_ip6t_entry __user *ce;

net/ipv6/netfilter/ip6_tables.c

1557

void __user *userptr)

net/ipv6/netfilter/ip6_tables.c

1561

void __user *pos;

net/ipv6/netfilter/ip6_tables.c

1585

compat_get_entries(struct net *net, struct compat_ip6t_get_entries __user *uptr,

net/ipv6/netfilter/ip6_tables.c

1658

do_ip6t_get_ctl(struct sock *sk, int cmd, void __user *user, int *len)

net/ipv6/netfilter/ip6_tables.c

828

void __user *userptr)

net/ipv6/netfilter/ip6_tables.c

894

static int compat_standard_to_user(void __user *dst, const void *src)

net/ipv6/netfilter/ip6_tables.c

960

static int get_info(struct net *net, void __user *user, const int *len)

net/ipv6/raw.c

1055

char __user *optval, int __user *optlen)

net/ipv6/raw.c

1093

char __user *optval, int __user *optlen)

net/ipv6/raw.c

956

char __user *optval, int __user *optlen)

net/ipv6/sit.c

1196

ipip6_tunnel_get6rd(struct net_device *dev, struct ip_tunnel_parm __user *data)

net/ipv6/sit.c

1220

ipip6_tunnel_6rdctl(struct net_device *dev, struct ip_tunnel_6rd __user *data,

net/ipv6/sit.c

1370

void __user *data, int cmd)

net/ipv6/sit.c

306

static int ipip6_tunnel_get_prl(struct net_device *dev, struct ip_tunnel_prl __user *a)

net/ipv6/sit.c

459

struct ip_tunnel_prl __user *data, int cmd)

net/ipv6/udp.c

1827

char __user *optval, int __user *optlen)

net/kcm/kcmsock.c

1559

if (copy_from_user(&info, (void __user *)arg, sizeof(info)))

net/kcm/kcmsock.c

1569

if (copy_from_user(&info, (void __user *)arg, sizeof(info)))

net/kcm/kcmsock.c

1584

if (copy_to_user((void __user *)arg, &info, sizeof(info)))

net/l2tp/l2tp_ppp.c

1083

if (put_user(0, (int __user *)arg)) {

net/l2tp/l2tp_ppp.c

1097

if (!access_ok((int __user *)arg, sizeof(int))) {

net/l2tp/l2tp_ppp.c

1108

if (copy_from_user(&stats, (void __user *)arg,

net/l2tp/l2tp_ppp.c

1128

if (copy_to_user((void __user *)arg, &stats, sizeof(stats))) {

net/mac80211/debugfs.c

114

const char __user *user_buf,

net/mac80211/debugfs.c

149

char __user *user_buf,

net/mac80211/debugfs.c

170

const char __user *user_buf,

net/mac80211/debugfs.c

20

int mac80211_format_buffer(char __user *userbuf, size_t count,

net/mac80211/debugfs.c

200

char __user *user_buf,

net/mac80211/debugfs.c

229

char __user *user_buf,

net/mac80211/debugfs.c

256

const char __user *user_buf,

net/mac80211/debugfs.c

308

static ssize_t aql_enable_read(struct file *file, char __user *user_buf,

net/mac80211/debugfs.c

320

static ssize_t aql_enable_write(struct file *file, const char __user *user_buf,

net/mac80211/debugfs.c

345

char __user *user_buf,

net/mac80211/debugfs.c

35

static ssize_t name## _read(struct file *file, char __user *userbuf, \

net/mac80211/debugfs.c

360

const char __user *user_buf,

net/mac80211/debugfs.c

383

static ssize_t reset_write(struct file *file, const char __user *user_buf,

net/mac80211/debugfs.c

472

static ssize_t hwflags_read(struct file *file, char __user *user_buf,

net/mac80211/debugfs.c

501

static ssize_t hwflags_write(struct file *file, const char __user *user_buf,

net/mac80211/debugfs.c

541

static ssize_t misc_read(struct file *file, char __user *user_buf,

net/mac80211/debugfs.c

573

static ssize_t queues_read(struct file *file, char __user *user_buf,

net/mac80211/debugfs.c

597

char __user *userbuf,

net/mac80211/debugfs.c

622

char __user *userbuf, \

net/mac80211/debugfs.c

75

char __user *user_buf,

net/mac80211/debugfs.h

9

int __printf(4, 5) mac80211_format_buffer(char __user *userbuf, size_t count,

net/mac80211/debugfs_key.c

115

static ssize_t key_tx_spec_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_key.c

154

static ssize_t key_rx_spec_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_key.c

19

char __user *userbuf, \

net/mac80211/debugfs_key.c

222

static ssize_t key_replays_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_key.c

255

static ssize_t key_icverrors_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_key.c

280

static ssize_t key_mic_failures_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_key.c

296

static ssize_t key_key_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_key.c

67

char __user *userbuf,

net/mac80211/debugfs_key.c

80

static ssize_t key_tx_spec_write(struct file *file, const char __user *userbuf,

net/mac80211/debugfs_netdev.c

116

char __user *userbuf,

net/mac80211/debugfs_netdev.c

152

const char __user *userbuf,

net/mac80211/debugfs_netdev.c

233

char __user *userbuf, \

net/mac80211/debugfs_netdev.c

243

const char __user *userbuf, \

net/mac80211/debugfs_netdev.c

271

char __user *userbuf, \

net/mac80211/debugfs_netdev.c

281

const char __user *userbuf, \

net/mac80211/debugfs_netdev.c

44

char __user *userbuf,

net/mac80211/debugfs_netdev.c

80

const char __user *userbuf,

net/mac80211/debugfs_sta.c

1040

static ssize_t link_sta_eht_capa_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_sta.c

105

char __user *userbuf,

net/mac80211/debugfs_sta.c

120

static ssize_t sta_last_seq_ctrl_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_sta.c

136

static ssize_t sta_aqm_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_sta.c

188

static ssize_t sta_airtime_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_sta.c

222

static ssize_t sta_airtime_write(struct file *file, const char __user *userbuf,

net/mac80211/debugfs_sta.c

23

char __user *userbuf, \

net/mac80211/debugfs_sta.c

241

static ssize_t sta_aql_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_sta.c

276

static ssize_t sta_aql_write(struct file *file, const char __user *userbuf,

net/mac80211/debugfs_sta.c

346

static ssize_t sta_agg_status_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_sta.c

428

const char __user *userbuf,

net/mac80211/debugfs_sta.c

448

static ssize_t link_sta_addr_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_sta.c

462

static ssize_t link_sta_ht_capa_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_sta.c

553

static ssize_t link_sta_vht_capa_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_sta.c

667

static ssize_t link_sta_he_capa_read(struct file *file, char __user *userbuf,

net/mac80211/debugfs_sta.c

84

static ssize_t sta_flags_read(struct file *file, char __user *userbuf,

net/mac80211/rate.c

243

static ssize_t rcname_read(struct file *file, char __user *userbuf,

net/mac80211/rc80211_minstrel_ht_debugfs.c

20

minstrel_stats_read(struct file *file, char __user *buf, size_t len, loff_t *ppos)

net/mctp/af_mctp.c

451

rc = copy_from_user(ptr, (void __user *)arg, size);

net/mctp/af_mctp.c

495

rc = copy_to_user((void __user *)arg, ptr, size);

net/mctp/af_mctp.c

615

void __user *argp = compat_ptr(arg);

net/mptcp/protocol.h

967

char __user *optval, int __user *option);

net/mptcp/sockopt.c

1034

static int mptcp_getsockopt_info(struct mptcp_sock *msk, char __user *optval, int __user *optlen)

net/mptcp/sockopt.c

1060

char __user *optval,

net/mptcp/sockopt.c

1062

int __user *optlen)

net/mptcp/sockopt.c

1081

char __user *optval,

net/mptcp/sockopt.c

1082

int __user *optlen)

net/mptcp/sockopt.c

1118

static int mptcp_getsockopt_tcpinfo(struct mptcp_sock *msk, char __user *optval,

net/mptcp/sockopt.c

1119

int __user *optlen)

net/mptcp/sockopt.c

1125

char __user *infoptr;

net/mptcp/sockopt.c

1210

static int mptcp_getsockopt_subflow_addrs(struct mptcp_sock *msk, char __user *optval,

net/mptcp/sockopt.c

1211

int __user *optlen)

net/mptcp/sockopt.c

1217

char __user *addrptr;

net/mptcp/sockopt.c

1264

char __user *optval,

net/mptcp/sockopt.c

1265

int __user *optlen)

net/mptcp/sockopt.c

1295

char __user *optval,

net/mptcp/sockopt.c

1297

int __user *optlen)

net/mptcp/sockopt.c

1308

static int mptcp_getsockopt_full_info(struct mptcp_sock *msk, char __user *optval,

net/mptcp/sockopt.c

1309

int __user *optlen)

net/mptcp/sockopt.c

1314

void __user *tcpinfoptr, *sfinfoptr;

net/mptcp/sockopt.c

1382

static int mptcp_put_int_option(struct mptcp_sock *msk, char __user *optval,

net/mptcp/sockopt.c

1383

int __user *optlen, int val)

net/mptcp/sockopt.c

1412

char __user *optval, int __user *optlen)

net/mptcp/sockopt.c

1458

char __user *optval, int __user *optlen)

net/mptcp/sockopt.c

1483

char __user *optval, int __user *optlen)

net/mptcp/sockopt.c

1503

char __user *optval, int __user *optlen)

net/mptcp/sockopt.c

1520

char __user *optval, int __user *option)

net/mptcp/sockopt.c

946

char __user *optval, int __user *optlen)

net/netfilter/ipset/ip_set_core.c

2249

ip_set_sockfn_get(struct sock *sk, int optval, void __user *user, int *len)

net/netfilter/ipvs/ip_vs_ctl.c

3598

struct ip_vs_get_services __user *uptr)

net/netfilter/ipvs/ip_vs_ctl.c

3635

struct ip_vs_get_dests __user *uptr)

net/netfilter/ipvs/ip_vs_ctl.c

3733

do_ip_vs_get_ctl(struct sock *sk, int cmd, void __user *user, int *len)

net/netfilter/nf_conntrack_proto.c

267

getorigdst(struct sock *sk, int optval, void __user *user, int *len)

net/netfilter/nf_conntrack_proto.c

323

ipv6_getorigdst(struct sock *sk, int optval, void __user *user, int *len)

net/netfilter/nf_sockopt.c

107

int nf_getsockopt(struct sock *sk, u_int8_t pf, int val, char __user *opt,

net/netfilter/x_tables.c

1253

void __user **dstptr, unsigned int *size)

net/netfilter/x_tables.c

1256

struct compat_xt_entry_target __user *ct = *dstptr;

net/netfilter/x_tables.c

1264

if (target->compat_to_user((void __user *)ct->data, t->data))

net/netfilter/x_tables.c

296

static int xt_obj_to_user(u16 __user *psize, u16 size,

net/netfilter/x_tables.c

297

void __user *pname, const char *name,

net/netfilter/x_tables.c

298

u8 __user *prev, u8 rev)

net/netfilter/x_tables.c

315

int xt_data_to_user(void __user *dst, const void *src,

net/netfilter/x_tables.c

336

struct xt_entry_match __user *u)

net/netfilter/x_tables.c

344

struct xt_entry_target __user *u)

net/netfilter/x_tables.c

831

void __user **dstptr, unsigned int *size)

net/netfilter/x_tables.c

834

struct compat_xt_entry_match __user *cm = *dstptr;

net/netfilter/x_tables.c

842

if (match->compat_to_user((void __user *)cm->data, m->data))

net/netfilter/xt_limit.c

171

static int limit_mt_compat_to_user(void __user *dst, const void *src)

net/netfilter/xt_recent.c

559

recent_mt_proc_write(struct file *file, const char __user *input,

net/nfc/llcp_sock.c

305

char __user *optval, int __user *optlen)

net/nfc/llcp_sock.c

333

if (put_user(rw, (u32 __user *) optval))

net/nfc/llcp_sock.c

342

if (put_user(miux, (u32 __user *) optval))

net/nfc/llcp_sock.c

351

if (put_user(remote_miu, (u32 __user *) optval))

net/nfc/llcp_sock.c

357

if (put_user(local->remote_lto / 10, (u32 __user *) optval))

net/nfc/llcp_sock.c

363

if (put_user(llcp_sock->remote_rw, (u32 __user *) optval))

net/packet/af_packet.c

4256

return put_user(amount, (int __user *)arg);

net/packet/af_packet.c

4268

return put_user(amount, (int __user *)arg);

net/phonet/pep.c

1084

char __user *optval, int __user *optlen)

net/phonet/pep.c

1120

if (put_user(val, (int __user *) optval))

net/phonet/socket.c

372

if (get_user(handle, (__u16 __user *)arg))

net/phonet/socket.c

392

return put_user(handle, (__u16 __user *)arg);

net/phonet/socket.c

395

return sk_ioctl(sk, cmd, (void __user *)arg);

net/qrtr/af_qrtr.c

1144

void __user *argp = (void __user *)arg;

net/qrtr/af_qrtr.c

1160

rc = put_user(len, (int __user *)argp);

net/qrtr/af_qrtr.c

1166

rc = put_user(len, (int __user *)argp);

net/rds/af_rds.c

261

if (get_user(utos, (rds_tos_t __user *)arg))

net/rds/af_rds.c

282

if (put_user(tos, (rds_tos_t __user *)arg))

net/rds/rdma.c

328

put_user(cookie, (u64 __user *)(unsigned long)args->cookie_addr)) {

net/rds/rdma.c

557

struct rds_iovec __user *local_vec;

net/rds/rdma.c

562

local_vec = (struct rds_iovec __user *)(unsigned long) args->local_vec_addr;

net/rfkill/core.c

1239

static ssize_t rfkill_fop_read(struct file *file, char __user *buf,

net/rfkill/core.c

1283

static ssize_t rfkill_fop_write(struct file *file, const char __user *buf,

net/rfkill/core.c

1384

if (get_user(size, (__u32 __user *)arg)) {

net/sctp/socket.c

1389

char __user *optval,

net/sctp/socket.c

1390

int __user *optlen)

net/sctp/socket.c

5487

char __user *optval,

net/sctp/socket.c

5488

int __user *optlen)

net/sctp/socket.c

5567

char __user *optval,

net/sctp/socket.c

5568

int __user *optlen)

net/sctp/socket.c

5630

char __user *optval, int __user *optlen)

net/sctp/socket.c

5651

static int sctp_getsockopt_events(struct sock *sk, int len, char __user *optval,

net/sctp/socket.c

5652

int __user *optlen)

net/sctp/socket.c

5686

static int sctp_getsockopt_autoclose(struct sock *sk, int len, char __user *optval, int __user *optlen)

net/sctp/socket.c

5696

if (put_user(sctp_sk(sk)->autoclose, (int __user *)optval))

net/sctp/socket.c

5782

static int sctp_getsockopt_peeloff(struct sock *sk, int len, char __user *optval, int __user *optlen)

net/sctp/socket.c

5816

char __user *optval, int __user *optlen)

net/sctp/socket.c

5983

char __user *optval, int __user *optlen)

net/sctp/socket.c

6126

char __user *optval,

net/sctp/socket.c

6127

int __user *optlen)

net/sctp/socket.c

6199

static int sctp_getsockopt_initmsg(struct sock *sk, int len, char __user *optval, int __user *optlen)

net/sctp/socket.c

6213

char __user *optval, int __user *optlen)

net/sctp/socket.c

6219

void __user *to;

net/sctp/socket.c

6254

if (put_user(cnt, &((struct sctp_getaddrs __user *)optval)->addr_num))

net/sctp/socket.c

6256

bytes_copied = ((char __user *)to) - optval;

net/sctp/socket.c

6309

char __user *optval, int __user *optlen)

net/sctp/socket.c

6316

void __user *to;

net/sctp/socket.c

6396

if (put_user(cnt, &((struct sctp_getaddrs __user *)optval)->addr_num)) {

net/sctp/socket.c

6417

char __user *optval, int __user *optlen)

net/sctp/socket.c

6459

char __user *optval, int __user *optlen)

net/sctp/socket.c

6498

int len, char __user *optval,

net/sctp/socket.c

6499

int __user *optlen)

net/sctp/socket.c

6544

char __user *optval,

net/sctp/socket.c

6545

int __user *optlen)

net/sctp/socket.c

6595

char __user *optval, int __user *optlen)

net/sctp/socket.c

6624

char __user *optval,

net/sctp/socket.c

6625

int __user *optlen) {

net/sctp/socket.c

6678

char __user *optval,

net/sctp/socket.c

6679

int __user *optlen)

net/sctp/socket.c

6747

char __user *optval, int __user *optlen)

net/sctp/socket.c

6770

char __user *optval, int __user *optlen)

net/sctp/socket.c

6827

char __user *optval, int __user *optlen)

net/sctp/socket.c

6874

char __user *optval, int __user *optlen)

net/sctp/socket.c

6897

char __user *optval,

net/sctp/socket.c

6898

int __user *optlen)

net/sctp/socket.c

6921

char __user *optval,

net/sctp/socket.c

6922

int __user *optlen)

net/sctp/socket.c

6961

char __user *optval, int __user *optlen)

net/sctp/socket.c

6964

struct sctp_hmacalgo __user *p = (void __user *)optval;

net/sctp/socket.c

6997

char __user *optval, int __user *optlen)

net/sctp/socket.c

7033

char __user *optval, int __user *optlen)

net/sctp/socket.c

7035

struct sctp_authchunks __user *p = (void __user *)optval;

net/sctp/socket.c

7040

char __user *to;

net/sctp/socket.c

7077

char __user *optval, int __user *optlen)

net/sctp/socket.c

7080

struct sctp_authchunks __user *p = (void __user *)optval;

net/sctp/socket.c

7085

char __user *to;

net/sctp/socket.c

7133

char __user *optval, int __user *optlen)

net/sctp/socket.c

7164

char __user *optval, int __user *optlen)

net/sctp/socket.c

7189

char __user *optval, int __user *optlen)

net/sctp/socket.c

7239

char __user *optval, int len,

net/sctp/socket.c

7240

int __user *optlen, bool v2)

net/sctp/socket.c

7298

char __user *optval,

net/sctp/socket.c

7299

int __user *optlen)

net/sctp/socket.c

7356

char __user *optval,

net/sctp/socket.c

7357

int __user *optlen)

net/sctp/socket.c

7376

char __user *optval,

net/sctp/socket.c

7377

int __user *optlen)

net/sctp/socket.c

7396

char __user *optval,

net/sctp/socket.c

7397

int __user *optlen)

net/sctp/socket.c

7435

char __user *optval,

net/sctp/socket.c

7436

int __user *optlen)

net/sctp/socket.c

7481

char __user *optval,

net/sctp/socket.c

7482

int __user *optlen)

net/sctp/socket.c

7540

char __user *optval,

net/sctp/socket.c

7541

int __user *optlen)

net/sctp/socket.c

7604

char __user *optval,

net/sctp/socket.c

7605

int __user *optlen)

net/sctp/socket.c

7643

char __user *optval,

net/sctp/socket.c

7644

int __user *optlen)

net/sctp/socket.c

7682

char __user *optval,

net/sctp/socket.c

7683

int __user *optlen)

net/sctp/socket.c

7721

char __user *optval,

net/sctp/socket.c

7722

int __user *optlen)

net/sctp/socket.c

7763

char __user *optval,

net/sctp/socket.c

7764

int __user *optlen)

net/sctp/socket.c

7802

char __user *optval,

net/sctp/socket.c

7803

int __user *optlen)

net/sctp/socket.c

7821

static int sctp_getsockopt_event(struct sock *sk, int len, char __user *optval,

net/sctp/socket.c

7822

int __user *optlen)

net/sctp/socket.c

7857

char __user *optval,

net/sctp/socket.c

7858

int __user *optlen)

net/sctp/socket.c

7896

char __user *optval,

net/sctp/socket.c

7897

int __user *optlen)

net/sctp/socket.c

7935

char __user *optval,

net/sctp/socket.c

7936

int __user *optlen)

net/sctp/socket.c

7974

char __user *optval,

net/sctp/socket.c

7975

int __user *optlen)

net/sctp/socket.c

8013

char __user *optval, int __user *optlen)

net/sctp/socket.c

8072

char __user *optval,

net/sctp/socket.c

8073

int __user *optlen)

net/sctp/socket.c

8132

char __user *optval, int __user *optlen)

net/smc/af_smc.c

3020

char __user *optval, int __user *optlen)

net/smc/af_smc.c

3171

char __user *optval, int __user *optlen)

net/smc/af_smc.c

3274

return put_user(answ, (int __user *)arg);

net/smc/smc.h

62

char __user *optval, int __user *optlen);

net/socket.c

1253

void __user *uarg);

net/socket.c

1256

void __user *uarg))

net/socket.c

1264

int br_ioctl_call(struct net *net, unsigned int cmd, void __user *uarg)

net/socket.c

1280

static int (*vlan_ioctl_hook) (struct net *, void __user *arg);

net/socket.c

1282

void vlan_ioctl_set(int (*hook) (struct net *, void __user *))

net/socket.c

1297

void __user *argp = (void __user *)arg;

net/socket.c

1298

void __user *data;

net/socket.c

1332

void __user *argp = (void __user *)arg;

net/socket.c

1342

void __user *data;

net/socket.c

1360

if (get_user(pid, (int __user *)argp))

net/socket.c

1367

(int __user *)argp);

net/socket.c

1814

int __sys_socketpair(int family, int type, int protocol, int __user *usockvec)

net/socket.c

1907

int __user *, usockvec)

net/socket.c

1934

int __sys_bind(int fd, struct sockaddr __user *umyaddr, int addrlen)

net/socket.c

1954

SYSCALL_DEFINE3(bind, int, fd, struct sockaddr __user *, umyaddr, int, addrlen)

net/socket.c

1998

struct sockaddr __user *upeer_sockaddr,

net/socket.c

1999

int __user *upeer_addrlen, int flags)

net/socket.c

2057

static int __sys_accept4_file(struct file *file, struct sockaddr __user *upeer_sockaddr,

net/socket.c

2058

int __user *upeer_addrlen, int flags)

net/socket.c

2083

int __sys_accept4(int fd, struct sockaddr __user *upeer_sockaddr,

net/socket.c

2084

int __user *upeer_addrlen, int flags)

net/socket.c

2094

SYSCALL_DEFINE4(accept4, int, fd, struct sockaddr __user *, upeer_sockaddr,

net/socket.c

2095

int __user *, upeer_addrlen, int, flags)

net/socket.c

2100

SYSCALL_DEFINE3(accept, int, fd, struct sockaddr __user *, upeer_sockaddr,

net/socket.c

2101

int __user *, upeer_addrlen)

net/socket.c

2141

int __sys_connect(int fd, struct sockaddr __user *uservaddr, int addrlen)

net/socket.c

2157

SYSCALL_DEFINE3(connect, int, fd, struct sockaddr __user *, uservaddr,

net/socket.c

2164

struct sockaddr __user *usockaddr, int __user *usockaddr_len)

net/socket.c

2186

int __sys_getsockname(int fd, struct sockaddr __user *usockaddr,

net/socket.c

2187

int __user *usockaddr_len, int peer)

net/socket.c

2200

SYSCALL_DEFINE3(getsockname, int, fd, struct sockaddr __user *, usockaddr,

net/socket.c

2201

int __user *, usockaddr_len)

net/socket.c

2206

SYSCALL_DEFINE3(getpeername, int, fd, struct sockaddr __user *, usockaddr,

net/socket.c

2207

int __user *, usockaddr_len)

net/socket.c

2217

int __sys_sendto(int fd, void __user *buff, size_t len, unsigned int flags,

net/socket.c

2218

struct sockaddr __user *addr, int addr_len)

net/socket.c

2255

SYSCALL_DEFINE6(sendto, int, fd, void __user *, buff, size_t, len,

net/socket.c

2256

unsigned int, flags, struct sockaddr __user *, addr,

net/socket.c

2266

SYSCALL_DEFINE4(send, int, fd, void __user *, buff, size_t, len,

net/socket.c

2277

int __sys_recvfrom(int fd, void __user *ubuf, size_t size, unsigned int flags,

net/socket.c

2278

struct sockaddr __user *addr, int __user *addr_len)

net/socket.c

2313

SYSCALL_DEFINE6(recvfrom, int, fd, void __user *, ubuf, size_t, size,

net/socket.c

2314

unsigned int, flags, struct sockaddr __user *, addr,

net/socket.c

2315

int __user *, addr_len)

net/socket.c

2324

SYSCALL_DEFINE4(recv, int, fd, void __user *, ubuf, size_t, size,

net/socket.c

2379

int __sys_setsockopt(int fd, int level, int optname, char __user *user_optval,

net/socket.c

2397

char __user *, optval, int, optlen)

net/socket.c

249

int move_addr_to_kernel(void __user *uaddr, int ulen, struct sockaddr_storage *kaddr)

net/socket.c

2493

int __sys_getsockopt(int fd, int level, int optname, char __user *optval,

net/socket.c

2494

int __user *optlen)

net/socket.c

2510

char __user *, optval, int __user *, optlen)

net/socket.c

2563

struct sockaddr __user **save_addr)

net/socket.c

2607

struct user_msghdr __user *umsg,

net/socket.c

2608

struct sockaddr __user **save_addr,

net/socket.c

2704

struct user_msghdr __user *umsg, unsigned flags,

net/socket.c

2710

struct compat_msghdr __user *msg_compat;

net/socket.c

2712

msg_compat = (struct compat_msghdr __user *) umsg;

net/socket.c

2723

static int ___sys_sendmsg(struct socket *sock, struct user_msghdr __user *msg,

net/socket.c

2753

long __sys_sendmsg(int fd, struct user_msghdr __user *msg, unsigned int flags,

net/socket.c

2773

SYSCALL_DEFINE3(sendmsg, int, fd, struct user_msghdr __user *, msg, unsigned int, flags)

net/socket.c

278

void __user *uaddr, int __user *ulen)

net/socket.c

2782

int __sys_sendmmsg(int fd, struct mmsghdr __user *mmsg, unsigned int vlen,

net/socket.c

2787

struct mmsghdr __user *entry;

net/socket.c

2788

struct compat_mmsghdr __user *compat_entry;

net/socket.c

2811

compat_entry = (struct compat_mmsghdr __user *)mmsg;

net/socket.c

2820

err = ___sys_sendmsg(sock, (struct user_msghdr __user *)compat_entry,

net/socket.c

2828

(struct user_msghdr __user *)entry,

net/socket.c

2851

SYSCALL_DEFINE4(sendmmsg, int, fd, struct mmsghdr __user *, mmsg,

net/socket.c

2858

struct user_msghdr __user *umsg, unsigned flags,

net/socket.c

2859

struct sockaddr __user **uaddr,

net/socket.c

2865

struct compat_msghdr __user *msg_compat;

net/socket.c

2867

msg_compat = (struct compat_msghdr __user *) umsg;

net/socket.c

2879

struct user_msghdr __user *msg,

net/socket.c

2880

struct sockaddr __user *uaddr,

net/socket.c

2883

struct compat_msghdr __user *msg_compat =

net/socket.c

2884

(struct compat_msghdr __user *) msg;

net/socket.c

2885

int __user *uaddr_len = COMPAT_NAMELEN(msg);

net/socket.c

2934

static int ___sys_recvmsg(struct socket *sock, struct user_msghdr __user *msg,

net/socket.c

2939

struct sockaddr __user *uaddr;

net/socket.c

2956

struct user_msghdr __user *umsg,

net/socket.c

2957

struct sockaddr __user *uaddr, unsigned int flags)

net/socket.c

2962

long __sys_recvmsg(int fd, struct user_msghdr __user *msg, unsigned int flags,

net/socket.c

2982

SYSCALL_DEFINE3(recvmsg, int, fd, struct user_msghdr __user *, msg,

net/socket.c

2992

static int do_recvmmsg(int fd, struct mmsghdr __user *mmsg,

net/socket.c

2998

struct mmsghdr __user *entry;

net/socket.c

2999

struct compat_mmsghdr __user *compat_entry;

net/socket.c

3026

compat_entry = (struct compat_mmsghdr __user *)mmsg;

net/socket.c

3033

err = ___sys_recvmsg(sock, (struct user_msghdr __user *)compat_entry,

net/socket.c

3042

(struct user_msghdr __user *)entry,

net/socket.c

3100

int __sys_recvmmsg(int fd, struct mmsghdr __user *mmsg,

net/socket.c

3102

struct __kernel_timespec __user *timeout,

net/socket.c

3103

struct old_timespec32 __user *timeout32)

net/socket.c

3131

SYSCALL_DEFINE5(recvmmsg, int, fd, struct mmsghdr __user *, mmsg,

net/socket.c

3133

struct __kernel_timespec __user *, timeout)

net/socket.c

3142

SYSCALL_DEFINE5(recvmmsg_time32, int, fd, struct mmsghdr __user *, mmsg,

net/socket.c

3144

struct old_timespec32 __user *, timeout)

net/socket.c

3173

SYSCALL_DEFINE2(socketcall, int, call, unsigned long __user *, args)

net/socket.c

3204

err = __sys_bind(a0, (struct sockaddr __user *)a1, a[2]);

net/socket.c

3207

err = __sys_connect(a0, (struct sockaddr __user *)a1, a[2]);

net/socket.c

3213

err = __sys_accept4(a0, (struct sockaddr __user *)a1,

net/socket.c

3214

(int __user *)a[2], 0);

net/socket.c

3218

__sys_getsockname(a0, (struct sockaddr __user *)a1,

net/socket.c

3219

(int __user *)a[2], 0);

net/socket.c

3223

__sys_getsockname(a0, (struct sockaddr __user *)a1,

net/socket.c

3224

(int __user *)a[2], 1);

net/socket.c

3227

err = __sys_socketpair(a0, a1, a[2], (int __user *)a[3]);

net/socket.c

3230

err = __sys_sendto(a0, (void __user *)a1, a[2], a[3],

net/socket.c

3234

err = __sys_sendto(a0, (void __user *)a1, a[2], a[3],

net/socket.c

3235

(struct sockaddr __user *)a[4], a[5]);

net/socket.c

3238

err = __sys_recvfrom(a0, (void __user *)a1, a[2], a[3],

net/socket.c

3242

err = __sys_recvfrom(a0, (void __user *)a1, a[2], a[3],

net/socket.c

3243

(struct sockaddr __user *)a[4],

net/socket.c

3244

(int __user *)a[5]);

net/socket.c

3250

err = __sys_setsockopt(a0, a1, a[2], (char __user *)a[3],

net/socket.c

3255

__sys_getsockopt(a0, a1, a[2], (char __user *)a[3],

net/socket.c

3256

(int __user *)a[4]);

net/socket.c

3259

err = __sys_sendmsg(a0, (struct user_msghdr __user *)a1,

net/socket.c

3263

err = __sys_sendmmsg(a0, (struct mmsghdr __user *)a1, a[2],

net/socket.c

3267

err = __sys_recvmsg(a0, (struct user_msghdr __user *)a1,

net/socket.c

3272

err = __sys_recvmmsg(a0, (struct mmsghdr __user *)a1,

net/socket.c

3274

(struct __kernel_timespec __user *)a[4],

net/socket.c

3277

err = __sys_recvmmsg(a0, (struct mmsghdr __user *)a1,

net/socket.c

3279

(struct old_timespec32 __user *)a[4]);

net/socket.c

3282

err = __sys_accept4(a0, (struct sockaddr __user *)a1,

net/socket.c

3283

(int __user *)a[2], a[3]);

net/socket.c

3427

int get_user_ifreq(struct ifreq *ifr, void __user **ifrdata, void __user *arg)

net/socket.c

3452

int put_user_ifreq(struct ifreq *ifr, void __user *arg)

net/socket.c

3467

static int compat_siocwandev(struct net *net, struct compat_ifreq __user *uifr32)

net/socket.c

3471

void __user *saved;

net/socket.c

3494

struct compat_ifreq __user *u_ifreq32)

net/socket.c

3497

void __user *data;

net/socket.c

3511

void __user *argp = compat_ptr(arg);

net/sunrpc/auth_gss/auth_gss.c

422

char __user *buf, size_t buflen)

net/sunrpc/auth_gss/auth_gss.c

507

char __user *buf, size_t buflen)

net/sunrpc/auth_gss/auth_gss.c

726

gss_pipe_downcall(struct file *filp, const char __user *src, size_t mlen)

net/sunrpc/auth_gss/svcauth_gss.c

1402

static ssize_t write_gssp(struct file *file, const char __user *buf,

net/sunrpc/auth_gss/svcauth_gss.c

1430

static ssize_t read_gssp(struct file *file, char __user *buf,

net/sunrpc/auth_gss/svcauth_gss.c

1483

static ssize_t read_gss_krb5_enctypes(struct file *file, char __user *buf,

net/sunrpc/cache.c

1012

return put_user(len, (int __user *)arg);

net/sunrpc/cache.c

1494

static ssize_t read_flush(struct file *file, char __user *buf,

net/sunrpc/cache.c

1506

static ssize_t write_flush(struct file *file, const char __user *buf,

net/sunrpc/cache.c

1549

static ssize_t cache_read_procfs(struct file *filp, char __user *buf,

net/sunrpc/cache.c

1557

static ssize_t cache_write_procfs(struct file *filp, const char __user *buf,

net/sunrpc/cache.c

1639

static ssize_t read_flush_procfs(struct file *filp, char __user *buf,

net/sunrpc/cache.c

1648

const char __user *buf,

net/sunrpc/cache.c

1760

static ssize_t cache_read_pipefs(struct file *filp, char __user *buf,

net/sunrpc/cache.c

1768

static ssize_t cache_write_pipefs(struct file *filp, const char __user *buf,

net/sunrpc/cache.c

1851

static ssize_t read_flush_pipefs(struct file *filp, char __user *buf,

net/sunrpc/cache.c

1860

const char __user *buf,

net/sunrpc/cache.c

842

static ssize_t cache_read(struct file *filp, char __user *buf, size_t count,

net/sunrpc/cache.c

913

static ssize_t cache_do_downcall(char *kaddr, const char __user *buf,

net/sunrpc/cache.c

930

const char __user *buf,

net/sunrpc/cache.c

951

static ssize_t cache_write(struct file *filp, const char __user *buf,

net/sunrpc/rpc_pipe.c

105

char __user *dst, size_t buflen)

net/sunrpc/rpc_pipe.c

1060

dummy_downcall(struct file *filp, const char __user *src, size_t len)

net/sunrpc/rpc_pipe.c

282

rpc_pipe_read(struct file *filp, char __user *buf, size_t len, loff_t *offset)

net/sunrpc/rpc_pipe.c

326

rpc_pipe_write(struct file *filp, const char __user *buf, size_t len, loff_t *offset)

net/sunrpc/rpc_pipe.c

381

return put_user(len, (int __user *)arg);

net/tipc/socket.c

3308

void __user *argp = (void __user *)arg;

net/tls/tls_main.c

427

static int do_tls_getsockopt_conf(struct sock *sk, char __user *optval,

net/tls/tls_main.c

428

int __user *optlen, int tx)

net/tls/tls_main.c

488

static int do_tls_getsockopt_tx_zc(struct sock *sk, char __user *optval,

net/tls/tls_main.c

489

int __user *optlen)

net/tls/tls_main.c

508

static int do_tls_getsockopt_no_pad(struct sock *sk, char __user *optval,

net/tls/tls_main.c

509

int __user *optlen)

net/tls/tls_main.c

536

static int do_tls_getsockopt_tx_payload_len(struct sock *sk, char __user *optval,

net/tls/tls_main.c

537

int __user *optlen)

net/tls/tls_main.c

559

char __user *optval, int __user *optlen)

net/tls/tls_main.c

591

char __user *optval, int __user *optlen)

net/unix/af_unix.c

3297

err = put_user(amount, (int __user *)arg);

net/unix/af_unix.c

3304

err = put_user(amount, (int __user *)arg);

net/unix/af_unix.c

3336

err = put_user(answ, (int __user *)arg);

net/vmw_vsock/af_vsock.c

1554

int __user *arg)

net/vmw_vsock/af_vsock.c

1620

ret = vsock_do_ioctl(sock, cmd, (int __user *)arg);

net/vmw_vsock/af_vsock.c

2749

unsigned int cmd, void __user *ptr)

net/vmw_vsock/af_vsock.c

2751

u32 __user *p = ptr;

net/vmw_vsock/af_vsock.c

2780

return vsock_dev_do_ioctl(filp, cmd, (void __user *)arg);

net/wireless/debugfs.c

15

static ssize_t name## _read(struct file *file, char __user *userbuf, \

net/wireless/debugfs.c

183

char __user *userbuf, size_t count,

net/wireless/debugfs.c

263

const char __user *userbuf, size_t count,

net/wireless/debugfs.c

33

static ssize_t name## _read(struct file *file, char __user *userbuf, \

net/wireless/debugfs.c

85

char __user *user_buf,

net/wireless/wext-core.c

1063

int wext_handle_ioctl(struct net *net, unsigned int cmd, void __user *arg)

net/wireless/wext-core.c

1123

void __user *argp = (void __user *)arg;

net/x25/af_x25.c

1378

void __user *argp = (void __user *)arg;

net/x25/af_x25.c

1388

rc = put_user(amount, (unsigned int __user *)argp);

net/x25/af_x25.c

1403

rc = put_user(amount, (unsigned int __user *)argp);

net/x25/af_x25.c

1627

struct compat_x25_subscrip_struct __user *x25_subscr32)

net/x25/af_x25.c

1677

void __user *argp = compat_ptr(arg);

net/x25/x25_link.c

353

int x25_subscr_ioctl(unsigned int cmd, void __user *arg)

net/x25/x25_route.c

160

int x25_route_ioctl(unsigned int cmd, void __user *arg)

rust/helpers/uaccess.c

12

rust_helper_copy_to_user(void __user *to, const void *from, unsigned long n)

rust/helpers/uaccess.c

19

unsigned long rust_helper__copy_from_user(void *to, const void __user *from, unsigned long n)

rust/helpers/uaccess.c

25

unsigned long rust_helper__copy_to_user(void __user *to, const void *from, unsigned long n)

rust/helpers/uaccess.c

6

rust_helper_copy_from_user(void *to, const void __user *from, unsigned long n)

samples/hung_task/hung_task_tests.c

37

static ssize_t read_dummy_mutex(struct file *file, char __user *user_buf,

samples/hung_task/hung_task_tests.c

55

static ssize_t read_dummy_semaphore(struct file *file, char __user *user_buf,

samples/hung_task/hung_task_tests.c

75

static ssize_t read_dummy_rwsem_read(struct file *file, char __user *user_buf,

samples/hung_task/hung_task_tests.c

95

static ssize_t read_dummy_rwsem_write(struct file *file, char __user *user_buf,

samples/kfifo/bytestream-example.c

113

static ssize_t fifo_write(struct file *file, const char __user *buf,

samples/kfifo/bytestream-example.c

131

static ssize_t fifo_read(struct file *file, char __user *buf,

samples/kfifo/inttype-example.c

106

static ssize_t fifo_write(struct file *file, const char __user *buf,

samples/kfifo/inttype-example.c

124

static ssize_t fifo_read(struct file *file, char __user *buf,

samples/kfifo/record-example.c

120

static ssize_t fifo_write(struct file *file, const char __user *buf,

samples/kfifo/record-example.c

138

static ssize_t fifo_read(struct file *file, char __user *buf,

samples/qmi/qmi_sample_client.c

301

static ssize_t ping_write(struct file *file, const char __user *user_buf,

samples/qmi/qmi_sample_client.c

368

static ssize_t data_write(struct file *file, const char __user *user_buf,

samples/vfio-mdev/mbochs.c

1203

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mbochs.c

1213

if (copy_to_user((void __user *)arg, &info, minsz))

samples/vfio-mdev/mbochs.c

1225

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mbochs.c

1236

if (copy_to_user((void __user *)arg, &info, minsz))

samples/vfio-mdev/mbochs.c

1249

if (copy_from_user(&plane, (void __user *)arg, minsz))

samples/vfio-mdev/mbochs.c

1259

if (copy_to_user((void __user *)arg, &plane, minsz))

samples/vfio-mdev/mbochs.c

1269

if (get_user(dmabuf_id, (__u32 __user *)arg))

samples/vfio-mdev/mbochs.c

605

static ssize_t mbochs_read(struct vfio_device *vdev, char __user *buf,

samples/vfio-mdev/mbochs.c

666

static ssize_t mbochs_write(struct vfio_device *vdev, const char __user *buf,

samples/vfio-mdev/mdpy.c

301

static ssize_t mdpy_read(struct vfio_device *vdev, char __user *buf,

samples/vfio-mdev/mdpy.c

362

static ssize_t mdpy_write(struct vfio_device *vdev, const char __user *buf,

samples/vfio-mdev/mdpy.c

533

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mdpy.c

545

if (copy_to_user((void __user *)arg, &info, minsz))

samples/vfio-mdev/mdpy.c

557

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mdpy.c

568

if (copy_to_user((void __user *)arg, &info, minsz))

samples/vfio-mdev/mdpy.c

581

if (copy_from_user(&plane, (void __user *)arg, minsz))

samples/vfio-mdev/mdpy.c

591

if (copy_to_user((void __user *)arg, &plane, minsz))

samples/vfio-mdev/mtty.c

1017

static ssize_t mtty_resume_write(struct file *filp, const char __user *buf,

samples/vfio-mdev/mtty.c

1414

static ssize_t mtty_read(struct vfio_device *vdev, char __user *buf,

samples/vfio-mdev/mtty.c

1475

static ssize_t mtty_write(struct vfio_device *vdev, const char __user *buf,

samples/vfio-mdev/mtty.c

1802

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mtty.c

1814

if (copy_to_user((void __user *)arg, &info, minsz))

samples/vfio-mdev/mtty.c

1826

if (copy_from_user(&info, (void __user *)arg, minsz))

samples/vfio-mdev/mtty.c

1837

if (copy_to_user((void __user *)arg, &info, minsz))

samples/vfio-mdev/mtty.c

1850

if (copy_from_user(&hdr, (void __user *)arg, minsz))

samples/vfio-mdev/mtty.c

1861

ptr = data = memdup_user((void __user *)(arg + minsz),

samples/vfio-mdev/mtty.c

874

ret = copy_to_user((void __user *)arg, &info,

samples/vfio-mdev/mtty.c

881

static ssize_t mtty_save_read(struct file *filp, char __user *buf,

security/apparmor/apparmorfs.c

1021

static ssize_t aa_write_access(struct file *file, const char __user *ubuf,

security/apparmor/apparmorfs.c

1434

static ssize_t rawdata_read(struct file *file, char __user *buf, size_t size,

security/apparmor/apparmorfs.c

2721

static int policy_readlink(struct dentry *dentry, char __user *buffer,

security/apparmor/apparmorfs.c

457

static struct aa_loaddata *aa_simple_write_to_buffer(const char __user *userbuf,

security/apparmor/apparmorfs.c

485

static ssize_t policy_update(u32 mask, const char __user *buf, size_t size,

security/apparmor/apparmorfs.c

518

static ssize_t profile_load(struct file *f, const char __user *buf, size_t size,

security/apparmor/apparmorfs.c

536

static ssize_t profile_replace(struct file *f, const char __user *buf,

security/apparmor/apparmorfs.c

553

static ssize_t profile_remove(struct file *f, const char __user *buf,

security/apparmor/apparmorfs.c

611

static ssize_t ns_revision_read(struct file *file, char __user *buf,

security/apparmor/apparmorfs.c

945

const char __user *buf,

security/apparmor/apparmorfs.c

965

static ssize_t multi_transaction_read(struct file *file, char __user *buf,

security/apparmor/lsm.c

782

static int apparmor_getselfattr(unsigned int attr, struct lsm_ctx __user *lx,

security/inode.c

315

static ssize_t lsm_read(struct file *filp, char __user *buf, size_t count,

security/integrity/evm/evm_secfs.c

126

static ssize_t evm_read_xattrs(struct file *filp, char __user *buf,

security/integrity/evm/evm_secfs.c

185

static ssize_t evm_write_xattrs(struct file *file, const char __user *buf,

security/integrity/evm/evm_secfs.c

38

static ssize_t evm_read_key(struct file *filp, char __user *buf,

security/integrity/evm/evm_secfs.c

65

static ssize_t evm_write_key(struct file *file, const char __user *buf,

security/integrity/ima/ima_fs.c

343

const char __user *buf, size_t datalen,

security/integrity/ima/ima_fs.c

401

static ssize_t ima_measurements_write(struct file *file, const char __user *buf,

security/integrity/ima/ima_fs.c

408

const char __user *buf,

security/integrity/ima/ima_fs.c

53

static ssize_t ima_show_counter(char __user *buf, size_t count, loff_t *ppos,

security/integrity/ima/ima_fs.c

566

static ssize_t ima_write_policy(struct file *file, const char __user *buf,

security/integrity/ima/ima_fs.c

63

static ssize_t ima_show_num_violations(struct file *filp, char __user *buf,

security/integrity/ima/ima_fs.c

75

char __user *buf,

security/ipe/fs.c

108

static ssize_t getenforce(struct file *f, char __user *data,

security/ipe/fs.c

136

static ssize_t new_policy(struct file *f, const char __user *data,

security/ipe/fs.c

29

static ssize_t setaudit(struct file *f, const char __user *data,

security/ipe/fs.c

56

static ssize_t getaudit(struct file *f, char __user *data,

security/ipe/fs.c

77

static ssize_t setenforce(struct file *f, const char __user *data,

security/ipe/policy_fs.c

127

static ssize_t read_name(struct file *f, char __user *data,

security/ipe/policy_fs.c

165

static ssize_t read_version(struct file *f, char __user *data,

security/ipe/policy_fs.c

208

static ssize_t setactive(struct file *f, const char __user *data,

security/ipe/policy_fs.c

256

static ssize_t getactive(struct file *f, char __user *data,

security/ipe/policy_fs.c

298

static ssize_t update_policy(struct file *f, const char __user *data,

security/ipe/policy_fs.c

347

static ssize_t delete_policy(struct file *f, const char __user *data,

security/ipe/policy_fs.c

47

static ssize_t read_pkcs7(struct file *f, char __user *data,

security/ipe/policy_fs.c

90

static ssize_t read_policy(struct file *f, char __user *data,

security/keys/compat_dh.c

16

long compat_keyctl_dh_compute(struct keyctl_dh_params __user *params,

security/keys/compat_dh.c

17

char __user *buffer, size_t buflen,

security/keys/compat_dh.c

18

struct compat_keyctl_kdf_params __user *kdf)

security/keys/dh.c

122

long __keyctl_dh_compute(struct keyctl_dh_params __user *params,

security/keys/dh.c

123

char __user *buffer, size_t buflen,

security/keys/dh.c

300

long keyctl_dh_compute(struct keyctl_dh_params __user *params,

security/keys/dh.c

301

char __user *buffer, size_t buflen,

security/keys/dh.c

302

struct keyctl_kdf_params __user *kdf)

security/keys/dh.c

95

char __user *buffer, size_t buflen,

security/keys/internal.h

240

extern long keyctl_join_session_keyring(const char __user *);

security/keys/internal.h

241

extern long keyctl_update_key(key_serial_t, const void __user *, size_t);

security/keys/internal.h

247

extern long keyctl_describe_key(key_serial_t, char __user *, size_t);

security/keys/internal.h

248

extern long keyctl_keyring_search(key_serial_t, const char __user *,

security/keys/internal.h

249

const char __user *, key_serial_t);

security/keys/internal.h

250

extern long keyctl_read_key(key_serial_t, char __user *, size_t);

security/keys/internal.h

253

extern long keyctl_instantiate_key(key_serial_t, const void __user *,

security/keys/internal.h

259

extern long keyctl_get_security(key_serial_t keyid, char __user *buffer,

security/keys/internal.h

264

const struct iovec __user *,

security/keys/internal.h

268

const char __user *_type,

security/keys/internal.h

269

const char __user *_restriction);

security/keys/internal.h

281

extern long keyctl_dh_compute(struct keyctl_dh_params __user *, char __user *,

security/keys/internal.h

282

size_t, struct keyctl_kdf_params __user *);

security/keys/internal.h

283

extern long __keyctl_dh_compute(struct keyctl_dh_params __user *, char __user *,

security/keys/internal.h

286

extern long compat_keyctl_dh_compute(struct keyctl_dh_params __user *params,

security/keys/internal.h

287

char __user *buffer, size_t buflen,

security/keys/internal.h

288

struct compat_keyctl_kdf_params __user *kdf);

security/keys/internal.h

293

static inline long keyctl_dh_compute(struct keyctl_dh_params __user *params,

security/keys/internal.h

294

char __user *buffer, size_t buflen,

security/keys/internal.h

295

struct keyctl_kdf_params __user *kdf)

security/keys/internal.h

302

struct keyctl_dh_params __user *params,

security/keys/internal.h

303

char __user *buffer, size_t buflen,

security/keys/internal.h

304

struct keyctl_kdf_params __user *kdf)

security/keys/internal.h

313

const char __user *,

security/keys/internal.h

314

struct keyctl_pkey_query __user *);

security/keys/internal.h

316

extern long keyctl_pkey_verify(const struct keyctl_pkey_params __user *,

security/keys/internal.h

317

const char __user *,

security/keys/internal.h

318

const void __user *, const void __user *);

security/keys/internal.h

321

const struct keyctl_pkey_params __user *,

security/keys/internal.h

322

const char __user *,

security/keys/internal.h

323

const void __user *, void __user *);

security/keys/internal.h

326

const char __user *_info,

security/keys/internal.h

327

struct keyctl_pkey_query __user *_res)

security/keys/internal.h

332

static inline long keyctl_pkey_verify(const struct keyctl_pkey_params __user *params,

security/keys/internal.h

333

const char __user *_info,

security/keys/internal.h

334

const void __user *_in,

security/keys/internal.h

335

const void __user *_in2)

security/keys/internal.h

341

const struct keyctl_pkey_params __user *params,

security/keys/internal.h

342

const char __user *_info,

security/keys/internal.h

343

const void __user *_in,

security/keys/internal.h

344

void __user *_out)

security/keys/internal.h

350

extern long keyctl_capabilities(unsigned char __user *_buffer, size_t buflen);

security/keys/keyctl.c

1257

const void __user *_payload,

security/keys/keyctl.c

1265

ret = import_ubuf(ITER_SOURCE, (void __user *)_payload, plen,

security/keys/keyctl.c

1286

const struct iovec __user *_payload_iov,

security/keys/keyctl.c

1574

char __user *buffer,

security/keys/keyctl.c

167

SYSCALL_DEFINE4(request_key, const char __user *, _type,

security/keys/keyctl.c

168

const char __user *, _description,

security/keys/keyctl.c

169

const char __user *, _callout_info,

security/keys/keyctl.c

1741

long keyctl_restrict_keyring(key_serial_t id, const char __user *_type,

security/keys/keyctl.c

1742

const char __user *_restriction)

security/keys/keyctl.c

1866

long keyctl_capabilities(unsigned char __user *_buffer, size_t buflen)

security/keys/keyctl.c

1895

return keyctl_join_session_keyring((const char __user *) arg2);

security/keys/keyctl.c

1899

(const void __user *) arg3,

security/keys/keyctl.c

1907

(char __user *) arg3,

security/keys/keyctl.c

1923

(const char __user *) arg3,

security/keys/keyctl.c

1924

(const char __user *) arg4,

security/keys/keyctl.c

1929

(char __user *) arg3,

security/keys/keyctl.c

1943

(const void __user *) arg3,

security/keys/keyctl.c

1964

(char __user *) arg3,

security/keys/keyctl.c

1979

(const struct iovec __user *) arg3,

security/keys/keyctl.c

1990

return keyctl_dh_compute((struct keyctl_dh_params __user *) arg2,

security/keys/keyctl.c

1991

(char __user *) arg3, (size_t) arg4,

security/keys/keyctl.c

1992

(struct keyctl_kdf_params __user *) arg5);

security/keys/keyctl.c

1996

(const char __user *) arg3,

security/keys/keyctl.c

1997

(const char __user *) arg4);

security/keys/keyctl.c

2003

(const char __user *)arg4,

security/keys/keyctl.c

2004

(struct keyctl_pkey_query __user *)arg5);

security/keys/keyctl.c

2011

(const struct keyctl_pkey_params __user *)arg2,

security/keys/keyctl.c

2012

(const char __user *)arg3,

security/keys/keyctl.c

2013

(const void __user *)arg4,

security/keys/keyctl.c

2014

(void __user *)arg5);

security/keys/keyctl.c

2018

(const struct keyctl_pkey_params __user *)arg2,

security/keys/keyctl.c

2019

(const char __user *)arg3,

security/keys/keyctl.c

2020

(const void __user *)arg4,

security/keys/keyctl.c

2021

(const void __user *)arg5);

security/keys/keyctl.c

2030

return keyctl_capabilities((unsigned char __user *)arg2, (size_t)arg3);

security/keys/keyctl.c

288

long keyctl_join_session_keyring(const char __user *_name)

security/keys/keyctl.c

326

const void __user *_payload,

security/keys/keyctl.c

46

const char __user *_type,

security/keys/keyctl.c

645

char __user *buffer,

security/keys/keyctl.c

717

const char __user *_type,

security/keys/keyctl.c

718

const char __user *_description,

security/keys/keyctl.c

74

SYSCALL_DEFINE5(add_key, const char __user *, _type,

security/keys/keyctl.c

75

const char __user *, _description,

security/keys/keyctl.c

76

const void __user *, _payload,

security/keys/keyctl.c

825

long keyctl_read_key(key_serial_t keyid, char __user *buffer, size_t buflen)

security/keys/keyctl_pkey.c

113

static int keyctl_pkey_params_get_2(const struct keyctl_pkey_params __user *_params,

security/keys/keyctl_pkey.c

114

const char __user *_info,

security/keys/keyctl_pkey.c

177

const char __user *_info,

security/keys/keyctl_pkey.c

178

struct keyctl_pkey_query __user *_res)

security/keys/keyctl_pkey.c

220

const struct keyctl_pkey_params __user *_params,

security/keys/keyctl_pkey.c

221

const char __user *_info,

security/keys/keyctl_pkey.c

222

const void __user *_in,

security/keys/keyctl_pkey.c

223

void __user *_out)

security/keys/keyctl_pkey.c

296

long keyctl_pkey_verify(const struct keyctl_pkey_params __user *_params,

security/keys/keyctl_pkey.c

297

const char __user *_info,

security/keys/keyctl_pkey.c

298

const void __user *_in,

security/keys/keyctl_pkey.c

299

const void __user *_in2)

security/keys/keyctl_pkey.c

79

const char __user *_info,

security/landlock/syscalls.c

136

static ssize_t fop_dummy_read(struct file *const filp, char __user *const buf,

security/landlock/syscalls.c

144

const char __user *const buf, const size_t size,

security/landlock/syscalls.c

210

const struct landlock_ruleset_attr __user *const, attr,

security/landlock/syscalls.c

348

const void __user *const rule_attr, u32 flags)

security/landlock/syscalls.c

391

const void __user *const rule_attr, u32 flags)

security/landlock/syscalls.c

468

const void __user *const, rule_attr, const __u32, flags)

security/landlock/syscalls.c

68

const size_t ksize_min, const void __user *const src,

security/loadpin/loadpin.c

378

void __user *uarg = (void __user *)arg;

security/lockdown/lockdown.c

122

static ssize_t lockdown_write(struct file *file, const char __user *buf,

security/lockdown/lockdown.c

96

static ssize_t lockdown_read(struct file *filp, char __user *buf, size_t count,

security/lsm_syscalls.c

105

SYSCALL_DEFINE3(lsm_list_modules, u64 __user *, ids, u32 __user *, size,

security/lsm_syscalls.c

57

SYSCALL_DEFINE4(lsm_set_self_attr, unsigned int, attr, struct lsm_ctx __user *,

security/lsm_syscalls.c

86

SYSCALL_DEFINE4(lsm_get_self_attr, unsigned int, attr, struct lsm_ctx __user *,

security/lsm_syscalls.c

87

ctx, u32 __user *, size, u32, flags)

security/safesetid/securityfs.c

140

const char __user *ubuf, size_t len, enum setid_type policy_type)

security/safesetid/securityfs.c

239

const char __user *buf,

security/safesetid/securityfs.c

253

const char __user *buf,

security/safesetid/securityfs.c

266

static ssize_t safesetid_file_read(struct file *file, char __user *buf,

security/safesetid/securityfs.c

285

static ssize_t safesetid_uid_file_read(struct file *file, char __user *buf,

security/safesetid/securityfs.c

292

static ssize_t safesetid_gid_file_read(struct file *file, char __user *buf,

security/security.c

3605

char __user *shmaddr, int shmflg)

security/security.c

3728

int security_getselfattr(unsigned int attr, struct lsm_ctx __user *uctx,

security/security.c

3729

u32 __user *size, u32 flags)

security/security.c

3733

u8 __user *base = (u8 __user *)uctx;

security/security.c

3774

uctx = (struct lsm_ctx __user *)(base + total);

security/security.c

3819

int security_setselfattr(unsigned int attr, struct lsm_ctx __user *uctx,

security/security.c

400

int lsm_fill_user_ctx(struct lsm_ctx __user *uctx, u32 *uctx_len,

security/selinux/hooks.c

6551

char __user *shmaddr, int shmflg)

security/selinux/hooks.c

6894

static int selinux_getselfattr(unsigned int attr, struct lsm_ctx __user *ctx,

security/selinux/selinuxfs.c

1097

static ssize_t sel_read_bool(struct file *filep, char __user *buf,

security/selinux/selinuxfs.c

1130

static ssize_t sel_write_bool(struct file *filep, const char __user *buf,

security/selinux/selinuxfs.c

1187

const char __user *buf,

security/selinux/selinuxfs.c

120

static ssize_t sel_read_enforce(struct file *filp, char __user *buf,

security/selinux/selinuxfs.c

1295

static ssize_t sel_read_avc_cache_threshold(struct file *filp, char __user *buf,

security/selinux/selinuxfs.c

1307

const char __user *buf,

security/selinux/selinuxfs.c

132

static ssize_t sel_write_enforce(struct file *file, const char __user *buf,

security/selinux/selinuxfs.c

1344

static ssize_t sel_read_avc_hash_stats(struct file *filp, char __user *buf,

security/selinux/selinuxfs.c

1362

static ssize_t sel_read_sidtab_hash_stats(struct file *filp, char __user *buf,

security/selinux/selinuxfs.c

1525

static ssize_t sel_read_initcon(struct file *file, char __user *buf,

security/selinux/selinuxfs.c

1591

static ssize_t sel_read_class(struct file *file, char __user *buf,

security/selinux/selinuxfs.c

1605

static ssize_t sel_read_perm(struct file *file, char __user *buf,

security/selinux/selinuxfs.c

1619

static ssize_t sel_read_policycap(struct file *file, char __user *buf,

security/selinux/selinuxfs.c

196

static ssize_t sel_read_handle_unknown(struct file *filp, char __user *buf,

security/selinux/selinuxfs.c

227

static ssize_t sel_read_handle_status(struct file *filp, char __user *buf,

security/selinux/selinuxfs.c

268

static ssize_t sel_write_disable(struct file *file, const char __user *buf,

security/selinux/selinuxfs.c

286

static ssize_t sel_read_policyvers(struct file *filp, char __user *buf,

security/selinux/selinuxfs.c

317

static ssize_t sel_read_mls(struct file *filp, char __user *buf,

security/selinux/selinuxfs.c

385

static ssize_t sel_read_policy(struct file *filp, char __user *buf,

security/selinux/selinuxfs.c

538

static ssize_t sel_write_load(struct file *file, const char __user *buf,

security/selinux/selinuxfs.c

633

static ssize_t sel_read_checkreqprot(struct file *filp, char __user *buf,

security/selinux/selinuxfs.c

644

static ssize_t sel_write_checkreqprot(struct file *file, const char __user *buf,

security/selinux/selinuxfs.c

662

const char __user *buf,

security/selinux/selinuxfs.c

755

static ssize_t selinux_transaction_write(struct file *file, const char __user *buf, size_t size, loff_t *pos)

security/smack/smack_lsm.c

3246

static int smack_shm_shmat(struct kern_ipc_perm *isp, char __user *shmaddr,

security/smack/smack_lsm.c

3716

static int smack_getselfattr(unsigned int attr, struct lsm_ctx __user *ctx,

security/smack/smackfs.c

1031

static ssize_t smk_write_cipso2(struct file *file, const char __user *buf,

security/smack/smackfs.c

1149

static ssize_t smk_write_net4addr(struct file *file, const char __user *buf,

security/smack/smackfs.c

1410

static ssize_t smk_write_net6addr(struct file *file, const char __user *buf,

security/smack/smackfs.c

1574

static ssize_t smk_read_doi(struct file *filp, char __user *buf,

security/smack/smackfs.c

1598

static ssize_t smk_write_doi(struct file *file, const char __user *buf,

security/smack/smackfs.c

1639

static ssize_t smk_read_direct(struct file *filp, char __user *buf,

security/smack/smackfs.c

1663

static ssize_t smk_write_direct(struct file *file, const char __user *buf,

security/smack/smackfs.c

1717

static ssize_t smk_read_mapped(struct file *filp, char __user *buf,

security/smack/smackfs.c

1741

static ssize_t smk_write_mapped(struct file *file, const char __user *buf,

security/smack/smackfs.c

1795

static ssize_t smk_read_ambient(struct file *filp, char __user *buf,

security/smack/smackfs.c

1832

static ssize_t smk_write_ambient(struct file *file, const char __user *buf,

security/smack/smackfs.c

2008

static ssize_t smk_write_onlycap(struct file *file, const char __user *buf,

security/smack/smackfs.c

2068

static ssize_t smk_read_unconfined(struct file *filp, char __user *buf,

security/smack/smackfs.c

2098

static ssize_t smk_write_unconfined(struct file *file, const char __user *buf,

security/smack/smackfs.c

2156

static ssize_t smk_read_logging(struct file *filp, char __user *buf,

security/smack/smackfs.c

2179

static ssize_t smk_write_logging(struct file *file, const char __user *buf,

security/smack/smackfs.c

2270

static ssize_t smk_write_load_self(struct file *file, const char __user *buf,

security/smack/smackfs.c

2295

static ssize_t smk_user_access(struct file *file, const char __user *buf,

security/smack/smackfs.c

2343

static ssize_t smk_write_access(struct file *file, const char __user *buf,

security/smack/smackfs.c

2401

static ssize_t smk_write_load2(struct file *file, const char __user *buf,

security/smack/smackfs.c

2478

static ssize_t smk_write_load_self2(struct file *file, const char __user *buf,

security/smack/smackfs.c

2502

static ssize_t smk_write_access2(struct file *file, const char __user *buf,

security/smack/smackfs.c

2522

static ssize_t smk_write_revoke_subj(struct file *file, const char __user *buf,

security/smack/smackfs.c

2597

static ssize_t smk_write_change_rule(struct file *file, const char __user *buf,

security/smack/smackfs.c

2626

static ssize_t smk_read_syslog(struct file *filp, char __user *buf,

security/smack/smackfs.c

2659

static ssize_t smk_write_syslog(struct file *file, const char __user *buf,

security/smack/smackfs.c

2751

static ssize_t smk_write_relabel_self(struct file *file, const char __user *buf,

security/smack/smackfs.c

2817

static ssize_t smk_read_ptrace(struct file *filp, char __user *buf,

security/smack/smackfs.c

2838

static ssize_t smk_write_ptrace(struct file *file, const char __user *buf,

security/smack/smackfs.c

445

static ssize_t smk_write_rules_list(struct file *file, const char __user *buf,

security/smack/smackfs.c

643

static ssize_t smk_write_load(struct file *file, const char __user *buf,

security/smack/smackfs.c

832

static ssize_t smk_set_cipso(struct file *file, const char __user *buf,

security/smack/smackfs.c

957

static ssize_t smk_write_cipso(struct file *file, const char __user *buf,

security/tomoyo/common.c

2722

ssize_t tomoyo_read_control(struct tomoyo_io_buffer *head, char __user *buffer,

security/tomoyo/common.c

2798

const char __user *buffer, const int buffer_len)

security/tomoyo/common.h

1057

ssize_t tomoyo_read_control(struct tomoyo_io_buffer *head, char __user *buffer,

security/tomoyo/common.h

1060

const char __user *buffer, const int buffer_len);

security/tomoyo/common.h

799

char __user *read_user_buf;

security/tomoyo/securityfs_if.c

100

static ssize_t tomoyo_read_self(struct file *file, char __user *buf,

security/tomoyo/securityfs_if.c

176

static ssize_t tomoyo_read(struct file *file, char __user *buf, size_t count,

security/tomoyo/securityfs_if.c

192

static ssize_t tomoyo_write(struct file *file, const char __user *buf,

security/tomoyo/securityfs_if.c

41

static ssize_t tomoyo_write_self(struct file *file, const char __user *buf,

sound/core/compress_offload.c

1124

memdup_user((void __user *)arg, sizeof(*task));

sound/core/compress_offload.c

1129

if (copy_to_user((void __user *)arg, task, sizeof(*task)))

sound/core/compress_offload.c

1186

memdup_user((void __user *)arg, sizeof(*task));

sound/core/compress_offload.c

1191

if (copy_to_user((void __user *)arg, task, sizeof(*task)))

sound/core/compress_offload.c

1238

retval = copy_from_user(&seqno, (__u64 __user *)arg, sizeof(seqno));

sound/core/compress_offload.c

1278

memdup_user((void __user *)arg, sizeof(*status));

sound/core/compress_offload.c

1283

if (copy_to_user((void __user *)arg, status, sizeof(*status)))

sound/core/compress_offload.c

1323

(int __user *)arg) ? -EFAULT : 0;

sound/core/compress_offload.c

289

if (copy_to_user((__u64 __user *)arg, copy_from, copy_size))

sound/core/compress_offload.c

295

const char __user *buf, size_t count)

sound/core/compress_offload.c

324

static ssize_t snd_compr_write(struct file *f, const char __user *buf,

sound/core/compress_offload.c

356

char __user* cbuf = (char __user*)buf;

sound/core/compress_offload.c

375

static ssize_t snd_compr_read(struct file *f, char __user *buf,

sound/core/compress_offload.c

511

if (copy_to_user((void __user *)arg, &caps, sizeof(caps)))

sound/core/compress_offload.c

534

if (copy_to_user((void __user *)arg, caps, sizeof(*caps)))

sound/core/compress_offload.c

663

memdup_user((void __user *)arg, sizeof(*params));

sound/core/compress_offload.c

708

if (copy_to_user((char __user *)arg, params, sizeof(*params)))

sound/core/compress_offload.c

722

if (copy_from_user(&metadata, (void __user *)arg, sizeof(metadata)))

sound/core/compress_offload.c

729

if (copy_to_user((void __user *)arg, &metadata, sizeof(metadata)))

sound/core/compress_offload.c

747

if (copy_from_user(&metadata, (void __user *)arg, sizeof(metadata)))

sound/core/compress_offload.c

772

ret = copy_to_user((void __user *)arg, copy_from, copy_size) ?

sound/core/control.c

1180

struct snd_ctl_elem_info __user *_info)

sound/core/control.c

1252

struct snd_ctl_elem_value __user *_control)

sound/core/control.c

1395

struct snd_ctl_elem_value __user *_control)

sound/core/control.c

1420

struct snd_ctl_elem_id __user *_id)

sound/core/control.c

1441

struct snd_ctl_elem_id __user *_id)

sound/core/control.c

1549

static int replace_user_tlv(struct snd_kcontrol *kctl, unsigned int __user *buf,

sound/core/control.c

1600

static int read_user_tlv(struct snd_kcontrol *kctl, unsigned int __user *buf,

sound/core/control.c

1618

unsigned int size, unsigned int __user *buf)

sound/core/control.c

1641

char *names __free(kvfree) = vmemdup_user((const void __user *)user_ptrval,

sound/core/control.c

1820

struct snd_ctl_elem_info __user *_info, int replace)

sound/core/control.c

1839

struct snd_ctl_elem_id __user *_id)

sound/core/control.c

1848

static int snd_ctl_subscribe_events(struct snd_ctl_file *file, int __user *ptr)

sound/core/control.c

1872

unsigned int __user *buf, unsigned int size)

sound/core/control.c

1905

unsigned int __user *buf, unsigned int size)

sound/core/control.c

1927

struct snd_ctl_tlv __user *buf,

sound/core/control.c

1931

unsigned int __user *container;

sound/core/control.c

1980

void __user *argp = (void __user *)arg;

sound/core/control.c

1981

int __user *ip = argp;

sound/core/control.c

2053

static ssize_t snd_ctl_read(struct file *file, char __user *buffer,

sound/core/control.c

875

unsigned int cmd, void __user *arg)

sound/core/control.c

930

struct snd_ctl_elem_list __user *_list)

sound/core/control_compat.c

210

void __user *userdata,

sound/core/control_compat.c

211

void __user *valuep,

sound/core/control_compat.c

214

struct snd_ctl_elem_value32 __user *data32 = userdata;

sound/core/control_compat.c

23

struct snd_ctl_elem_list32 __user *data32)

sound/core/control_compat.c

232

s32 __user *intp = valuep;

sound/core/control_compat.c

254

static int copy_ctl_value_to_user(void __user *userdata,

sound/core/control_compat.c

255

void __user *valuep,

sound/core/control_compat.c

259

struct snd_ctl_elem_value32 __user *data32 = userdata;

sound/core/control_compat.c

265

s32 __user *intp = valuep;

sound/core/control_compat.c

282

void __user *userdata, void __user *valuep)

sound/core/control_compat.c

303

void __user *userdata, void __user *valuep)

sound/core/control_compat.c

316

void __user *userdata, void __user *valuep)

sound/core/control_compat.c

338

void __user *userdata, void __user *valuep)

sound/core/control_compat.c

352

struct snd_ctl_elem_value32 __user *data32)

sound/core/control_compat.c

358

struct snd_ctl_elem_value32 __user *data32)

sound/core/control_compat.c

365

struct snd_ctl_elem_value_x32 __user *data32)

sound/core/control_compat.c

371

struct snd_ctl_elem_value_x32 __user *data32)

sound/core/control_compat.c

379

struct snd_ctl_elem_info32 __user *data32,

sound/core/control_compat.c

439

void __user *argp = compat_ptr(arg);

sound/core/control_compat.c

80

struct snd_ctl_elem_info32 __user *data32)

sound/core/hwdep.c

174

struct snd_hwdep_info __user *_info)

sound/core/hwdep.c

189

struct snd_hwdep_dsp_status __user *_info)

sound/core/hwdep.c

226

struct snd_hwdep_dsp_image __user *_info)

sound/core/hwdep.c

240

void __user *argp = (void __user *)arg;

sound/core/hwdep.c

243

return put_user(SNDRV_HWDEP_VERSION, (int __user *)argp);

sound/core/hwdep.c

273

if (get_user(device, (int __user *)arg))

sound/core/hwdep.c

292

if (put_user(device, (int __user *)arg))

sound/core/hwdep.c

298

struct snd_hwdep_info __user *info = (struct snd_hwdep_info __user *)arg;

sound/core/hwdep.c

50

static ssize_t snd_hwdep_read(struct file * file, char __user *buf,

sound/core/hwdep.c

59

static ssize_t snd_hwdep_write(struct file * file, const char __user *buf,

sound/core/hwdep_compat.c

20

struct snd_hwdep_dsp_image32 __user *src)

sound/core/hwdep_compat.c

43

void __user *argp = compat_ptr(arg);

sound/core/info.c

141

static ssize_t snd_info_entry_read(struct file *file, char __user *buffer,

sound/core/info.c

163

static ssize_t snd_info_entry_write(struct file *file, const char __user *buffer,

sound/core/info.c

292

const char __user *buffer,

sound/core/init.c

413

static ssize_t snd_disconnect_read(struct file *file, char __user *buf,

sound/core/init.c

419

static ssize_t snd_disconnect_write(struct file *file, const char __user *buf,

sound/core/jack.c

170

char __user *to, size_t count, loff_t *ppos)

sound/core/jack.c

184

const char __user *from, size_t count, loff_t *ppos)

sound/core/jack.c

208

const char __user *from, size_t count, loff_t *ppos)

sound/core/jack.c

229

char __user *to, size_t count, loff_t *ppos)

sound/core/jack.c

265

char __user *to, size_t count, loff_t *ppos)

sound/core/jack.c

278

char __user *to, size_t count, loff_t *ppos)

sound/core/jack.c

293

char __user *to, size_t count, loff_t *ppos)

sound/core/memory.c

24

int copy_to_user_fromio(void __user *dst, const volatile void __iomem *src, size_t count)

sound/core/memory.c

81

int copy_from_user_toio(volatile void __iomem *dst, const void __user *src, size_t count)

sound/core/memory.c

85

if (import_ubuf(ITER_SOURCE, (void __user *)src, count, &iter))

sound/core/oss/mixer_oss.c

308

void __user *argp = (void __user *)arg;

sound/core/oss/mixer_oss.c

309

int __user *p = argp;

sound/core/oss/mixer_oss.c

83

mixer_info __user *_info)

sound/core/oss/mixer_oss.c

99

_old_mixer_info __user *_info)

sound/core/oss/pcm_oss.c

1375

if (copy_from_user(runtime->oss.buffer, (const char __force __user *)buf, bytes))

sound/core/oss/pcm_oss.c

1399

static ssize_t snd_pcm_oss_write1(struct snd_pcm_substream *substream, const char __user *buf, size_t bytes)

sound/core/oss/pcm_oss.c

1481

char __user *final_dst = (char __force __user *)buf;

sound/core/oss/pcm_oss.c

1509

static ssize_t snd_pcm_oss_read1(struct snd_pcm_substream *substream, char __user *buf, size_t bytes)

sound/core/oss/pcm_oss.c

2195

static int snd_pcm_oss_get_ptr(struct snd_pcm_oss_file *pcm_oss_file, int stream, struct count_info __user * _info)

sound/core/oss/pcm_oss.c

2265

static int snd_pcm_oss_get_space(struct snd_pcm_oss_file *pcm_oss_file, int stream, struct audio_buf_info __user *_info)

sound/core/oss/pcm_oss.c

2328

static int snd_pcm_oss_get_mapbuf(struct snd_pcm_oss_file *pcm_oss_file, int stream, struct buffmem_desc __user * _info)

sound/core/oss/pcm_oss.c

2603

int __user *p = (int __user *)arg;

sound/core/oss/pcm_oss.c

2710

(struct audio_buf_info __user *) arg);

sound/core/oss/pcm_oss.c

2732

(struct count_info __user *) arg);

sound/core/oss/pcm_oss.c

2738

(struct buffmem_desc __user *) arg);

sound/core/oss/pcm_oss.c

2777

static ssize_t snd_pcm_oss_read(struct file *file, char __user *buf, size_t count, loff_t *offset)

sound/core/oss/pcm_oss.c

2800

static ssize_t snd_pcm_oss_write(struct file *file, const char __user *buf, size_t count, loff_t *offset)

sound/core/pcm.c

102

struct snd_pcm_info __user *info;

sound/core/pcm.c

109

info = (struct snd_pcm_info __user *)arg;

sound/core/pcm.c

141

if (get_user(val, (int __user *)arg))

sound/core/pcm.c

92

if (get_user(device, (int __user *)arg))

sound/core/pcm.c

96

if (put_user(device, (int __user *)arg))

sound/core/pcm_compat.c

129

struct snd_pcm_channel_info32 __user *src)

sound/core/pcm_compat.c

13

s32 __user *src)

sound/core/pcm_compat.c

153

struct snd_pcm_channel_info __user *src);

sound/core/pcm_compat.c

182

struct compat_snd_pcm_status64 __user *src,

sound/core/pcm_compat.c

197

(u32 __user *)(&src->audio_tstamp_data)))

sound/core/pcm_compat.c

236

struct snd_pcm_hw_params32 __user *data32)

sound/core/pcm_compat.c

27

u32 __user *src)

sound/core/pcm_compat.c

286

int dir, struct snd_xferi32 __user *data32)

sound/core/pcm_compat.c

330

int dir, struct snd_xfern32 __user *data32)

sound/core/pcm_compat.c

333

compat_caddr_t __user *bufptr;

sound/core/pcm_compat.c

352

void __user **bufs __free(kfree) =

sound/core/pcm_compat.c

353

kmalloc_array(ch, sizeof(void __user *), GFP_KERNEL);

sound/core/pcm_compat.c

406

struct snd_pcm_sync_ptr_x32 __user *src)

sound/core/pcm_compat.c

41

u32 __user *src)

sound/core/pcm_compat.c

482

struct snd_pcm_sync_ptr __user *_sync_ptr)

sound/core/pcm_compat.c

493

if (get_user(sync_ptr.flags, (unsigned __user *)&(_sync_ptr->flags)))

sound/core/pcm_compat.c

557

void __user *argp = compat_ptr(arg);

sound/core/pcm_compat.c

87

struct snd_pcm_sw_params32 __user *src)

sound/core/pcm_lib.c

2118

err = import_ubuf(type, (__force void __user *)data, bytes, &iter);

sound/core/pcm_lib.c

2525

unsigned int size, unsigned int __user *tlv)

sound/core/pcm_lib.c

2529

unsigned int __user *dst;

sound/core/pcm_native.c

1034

struct snd_pcm_sw_params __user * _params)

sound/core/pcm_native.c

1133

struct snd_pcm_status64 __user * _status,

sound/core/pcm_native.c

1146

(u32 __user *)(&_status->audio_tstamp_data)))

sound/core/pcm_native.c

1157

struct snd_pcm_status32 __user * _status,

sound/core/pcm_native.c

1172

(u32 __user *)(&_status->audio_tstamp_data)))

sound/core/pcm_native.c

1225

struct snd_pcm_channel_info __user * _info)

sound/core/pcm_native.c

243

struct snd_pcm_info __user * _info)

sound/core/pcm_native.c

3120

typeof(*(__ptr)) __user *__src = (__ptr); \

sound/core/pcm_native.c

3137

typeof(*(__ptr)) __user *__src = (__ptr); \

sound/core/pcm_native.c

3158

struct snd_pcm_sync_ptr __user *_sync_ptr)

sound/core/pcm_native.c

3252

struct snd_pcm_sync_ptr32 __user *src)

sound/core/pcm_native.c

3306

static int snd_pcm_tstamp(struct snd_pcm_substream *substream, int __user *_arg)

sound/core/pcm_native.c

3320

struct snd_xferi __user *_xferi)

sound/core/pcm_native.c

3341

struct snd_xfern __user *_xfern)

sound/core/pcm_native.c

3370

snd_pcm_uframes_t __user *_frames)

sound/core/pcm_native.c

3386

snd_pcm_uframes_t __user *_frames)

sound/core/pcm_native.c

3403

unsigned int cmd, void __user *arg)

sound/core/pcm_native.c

3420

return put_user(SNDRV_PCM_VERSION, (int __user *)arg) ? -EFAULT : 0;

sound/core/pcm_native.c

3429

(unsigned int __user *)arg))

sound/core/pcm_native.c

3469

snd_pcm_sframes_t __user *res = arg;

sound/core/pcm_native.c

3521

(void __user *)arg);

sound/core/pcm_native.c

3574

static ssize_t snd_pcm_read(struct file *file, char __user *buf, size_t count,

sound/core/pcm_native.c

3598

static ssize_t snd_pcm_write(struct file *file, const char __user *buf,

sound/core/pcm_native.c

3647

void __user **bufs __free(kfree) =

sound/core/pcm_native.c

3685

void __user **bufs __free(kfree) =

sound/core/pcm_native.c

4156

struct snd_pcm_hw_params_old __user * _oparams)

sound/core/pcm_native.c

4185

struct snd_pcm_hw_params_old __user * _oparams)

sound/core/pcm_native.c

584

struct snd_pcm_hw_params __user * _params)

sound/core/pcm_native.c

66

struct snd_pcm_hw_params_old __user * _oparams);

sound/core/pcm_native.c

68

struct snd_pcm_hw_params_old __user * _oparams);

sound/core/pcm_native.c

917

struct snd_pcm_hw_params __user * _params)

sound/core/rawmidi.c

1026

void __user *argp)

sound/core/rawmidi.c

1028

struct snd_ump_endpoint_info __user *info = argp;

sound/core/rawmidi.c

1048

void __user *argp = (void __user *)arg;

sound/core/rawmidi.c

1065

if (get_user(val, (int __user *)argp))

sound/core/rawmidi.c

1218

unsigned char __user *userbuf,

sound/core/rawmidi.c

1270

static ssize_t snd_rawmidi_read(struct file *file, char __user *buf, size_t count,

sound/core/rawmidi.c

1313

(unsigned char __user *)buf,

sound/core/rawmidi.c

1519

const unsigned char __user *userbuf,

sound/core/rawmidi.c

1587

static ssize_t snd_rawmidi_write(struct file *file, const char __user *buf,

sound/core/rawmidi.c

645

struct snd_rawmidi_info __user *_info)

sound/core/rawmidi.c

691

struct snd_rawmidi_info __user *_info)

sound/core/rawmidi.c

816

struct snd_rawmidi_status32 __user *argp)

sound/core/rawmidi.c

819

struct snd_rawmidi_status32 __user *status = argp;

sound/core/rawmidi.c

859

struct snd_rawmidi_status64 __user *argp)

sound/core/rawmidi.c

893

void __user *argp = (void __user *)arg;

sound/core/rawmidi.c

900

return put_user(SNDRV_RAWMIDI_VERSION, (int __user *)argp) ? -EFAULT : 0;

sound/core/rawmidi.c

904

struct snd_rawmidi_info __user *info = argp;

sound/core/rawmidi.c

918

if (get_user(rfile->user_pversion, (unsigned int __user *)arg))

sound/core/rawmidi.c

953

if (get_user(val, (int __user *) argp))

sound/core/rawmidi.c

968

if (get_user(val, (int __user *) argp))

sound/core/rawmidi.c

993

static int snd_rawmidi_next_device(struct snd_card *card, int __user *argp,

sound/core/rawmidi_compat.c

106

void __user *argp = compat_ptr(arg);

sound/core/rawmidi_compat.c

21

struct snd_rawmidi_params32 __user *src)

sound/core/rawmidi_compat.c

57

struct compat_snd_rawmidi_status64 __user *src)

sound/core/seq/oss/seq_oss.c

146

odev_read(struct file *file, char __user *buf, size_t count, loff_t *offset)

sound/core/seq/oss/seq_oss.c

157

odev_write(struct file *file, const char __user *buf, size_t count, loff_t *offset)

sound/core/seq/oss/seq_oss.c

46

static ssize_t odev_read(struct file *file, char __user *buf, size_t count, loff_t *offset);

sound/core/seq/oss/seq_oss.c

47

static ssize_t odev_write(struct file *file, const char __user *buf, size_t count, loff_t *offset);

sound/core/seq/oss/seq_oss_device.h

112

int snd_seq_oss_read(struct seq_oss_devinfo *dev, char __user *buf, int count);

sound/core/seq/oss/seq_oss_device.h

113

int snd_seq_oss_write(struct seq_oss_devinfo *dp, const char __user *buf, int count, struct file *opt);

sound/core/seq/oss/seq_oss_ioctl.c

18

static int snd_seq_oss_synth_info_user(struct seq_oss_devinfo *dp, void __user *arg)

sound/core/seq/oss/seq_oss_ioctl.c

31

static int snd_seq_oss_midi_info_user(struct seq_oss_devinfo *dp, void __user *arg)

sound/core/seq/oss/seq_oss_ioctl.c

44

static int snd_seq_oss_oob_user(struct seq_oss_devinfo *dp, void __user *arg)

sound/core/seq/oss/seq_oss_ioctl.c

66

void __user *arg = (void __user *)carg;

sound/core/seq/oss/seq_oss_ioctl.c

67

int __user *p = arg;

sound/core/seq/oss/seq_oss_rw.c

31

snd_seq_oss_read(struct seq_oss_devinfo *dp, char __user *buf, int count)

sound/core/seq/oss/seq_oss_rw.c

84

snd_seq_oss_write(struct seq_oss_devinfo *dp, const char __user *buf, int count, struct file *opt)

sound/core/seq/oss/seq_oss_synth.c

413

const char __user *buf, int p, int c)

sound/core/seq/oss/seq_oss_synth.h

26

const char __user *buf, int p, int c);

sound/core/seq/oss/seq_oss_timer.c

218

snd_seq_oss_timer_ioctl(struct seq_oss_timer *timer, unsigned int cmd, int __user *arg)

sound/core/seq/oss/seq_oss_timer.h

36

int snd_seq_oss_timer_ioctl(struct seq_oss_timer *timer, unsigned int cmd, int __user *arg);

sound/core/seq/seq_clientmgr.c

2101

struct snd_seq_client_ump_info __user *argp =

sound/core/seq/seq_clientmgr.c

2102

(struct snd_seq_client_ump_info __user *)arg;

sound/core/seq/seq_clientmgr.c

2275

if (copy_from_user(&buf, (const void __user *)arg, size))

sound/core/seq/seq_clientmgr.c

2287

if (copy_to_user((void __user *)arg, &buf, size))

sound/core/seq/seq_clientmgr.c

384

static ssize_t snd_seq_read(struct file *file, char __user *buf, size_t count,

sound/core/seq/seq_clientmgr.c

990

static ssize_t snd_seq_write(struct file *file, const char __user *buf,

sound/core/seq/seq_compat.c

32

struct snd_seq_port_info32 __user *data32)

sound/core/seq/seq_compat.c

75

void __user *argp = compat_ptr(arg);

sound/core/seq/seq_memory.c

149

char __user **bufptr = ptr;

sound/core/seq/seq_memory.c

164

(char __force __user *)event->data.ext.ptr + offset,

sound/core/seq/seq_memory.c

193

else if (clear_user((__force void __user *)buf + len,

sound/core/seq/seq_memory.c

404

if (copy_from_user(&tmp->event, (char __force __user *)buf, size)) {

sound/core/seq/seq_memory.c

83

char __user *curptr = (char __force __user *)event->data.ext.ptr;

sound/core/timer.c

1692

static int snd_timer_user_next_device(struct snd_timer_id __user *_tid)

sound/core/timer.c

1706

struct snd_timer_ginfo __user *_ginfo)

sound/core/timer.c

1760

struct snd_timer_gparams __user *_gparams)

sound/core/timer.c

1770

struct snd_timer_gstatus __user *_gstatus)

sound/core/timer.c

1803

struct snd_timer_select __user *_tselect)

sound/core/timer.c

1847

struct snd_timer_info __user *_info)

sound/core/timer.c

1877

struct snd_timer_params __user *_params)

sound/core/timer.c

1981

struct snd_timer_status32 __user *_status)

sound/core/timer.c

2003

struct snd_timer_status64 __user *_status)

sound/core/timer.c

2087

static int snd_timer_user_tread(void __user *argp, struct snd_timer_user *tu,

sound/core/timer.c

2090

int __user *p = argp;

sound/core/timer.c

2285

struct snd_timer_uinfo __user *_utimer_info)

sound/core/timer.c

2328

struct snd_timer_uinfo __user *_utimer_info)

sound/core/timer.c

2339

void __user *argp = (void __user *)arg;

sound/core/timer.c

2340

int __user *p = argp;

sound/core/timer.c

2402

static ssize_t snd_timer_user_read(struct file *file, char __user *buffer,

sound/core/timer_compat.c

35

struct snd_timer_gparams32 __user *user)

sound/core/timer_compat.c

48

struct snd_timer_info32 __user *_info)

sound/core/timer_compat.c

83

void __user *argp = compat_ptr(arg);

sound/core/ump.c

24

void __user *argp);

sound/core/ump.c

446

struct snd_ump_block_info __user *argp)

sound/core/ump.c

465

void __user *argp)

sound/core/vmaster.c

223

unsigned int __user *tlv)

sound/drivers/opl3/opl3_oss.c

14

static int snd_opl3_load_patch_seq_oss(struct snd_seq_oss_arg *arg, int format, const char __user *buf, int offs, int count);

sound/drivers/opl3/opl3_oss.c

177

const char __user *buf, int offs, int count)

sound/drivers/opl3/opl3_synth.c

182

long snd_opl3_write(struct snd_hwdep *hw, const char __user *buf, long count,

sound/drivers/opl3/opl3_synth.c

83

void __user *argp = (void __user *)arg;

sound/drivers/opl4/opl4_proc.c

36

struct file *file, char __user *_buf,

sound/drivers/opl4/opl4_proc.c

57

const char __user *_buf,

sound/drivers/pcmtest.c

650

static ssize_t pattern_write(struct file *file, const char __user *u_buff, size_t len, loff_t *off)

sound/drivers/pcmtest.c

671

static ssize_t pattern_read(struct file *file, char __user *u_buff, size_t len, loff_t *off)

sound/firewire/bebob/bebob_hwdep.c

132

return hwdep_get_info(bebob, (void __user *)arg);

sound/firewire/bebob/bebob_hwdep.c

19

hwdep_read(struct snd_hwdep *hwdep, char __user *buf, long count,

sound/firewire/bebob/bebob_hwdep.c

67

hwdep_get_info(struct snd_bebob *bebob, void __user *arg)

sound/firewire/dice/dice-hwdep.c

11

static long hwdep_read(struct snd_hwdep *hwdep, char __user *buf,

sound/firewire/dice/dice-hwdep.c

129

return hwdep_get_info(dice, (void __user *)arg);

sound/firewire/dice/dice-hwdep.c

68

static int hwdep_get_info(struct snd_dice *dice, void __user *arg)

sound/firewire/digi00x/digi00x-hwdep.c

137

return hwdep_get_info(dg00x, (void __user *)arg);

sound/firewire/digi00x/digi00x-hwdep.c

19

static long hwdep_read(struct snd_hwdep *hwdep, char __user *buf, long count,

sound/firewire/digi00x/digi00x-hwdep.c

76

static int hwdep_get_info(struct snd_dg00x *dg00x, void __user *arg)

sound/firewire/fireface/ff-hwdep.c

146

return hwdep_get_info(ff, (void __user *)arg);

sound/firewire/fireface/ff-hwdep.c

26

static long hwdep_read(struct snd_hwdep *hwdep, char __user *buf, long count,

sound/firewire/fireface/ff-hwdep.c

85

static int hwdep_get_info(struct snd_ff *ff, void __user *arg)

sound/firewire/fireface/ff-protocol-former.c

678

static long ff400_copy_msg_to_user(struct snd_ff *ff, char __user *buf, long count)

sound/firewire/fireface/ff.h

116

long (*copy_msg_to_user)(struct snd_ff *ff, char __user *buf, long count);

sound/firewire/fireworks/fireworks_hwdep.c

120

hwdep_read(struct snd_hwdep *hwdep, char __user *buf, long count,

sound/firewire/fireworks/fireworks_hwdep.c

156

hwdep_write(struct snd_hwdep *hwdep, const char __user *data, long count,

sound/firewire/fireworks/fireworks_hwdep.c

202

hwdep_get_info(struct snd_efw *efw, void __user *arg)

sound/firewire/fireworks/fireworks_hwdep.c

22

hwdep_read_resp_buf(struct snd_efw *efw, char __user *buf, long remained,

sound/firewire/fireworks/fireworks_hwdep.c

267

return hwdep_get_info(efw, (void __user *)arg);

sound/firewire/fireworks/fireworks_hwdep.c

99

hwdep_read_locked(struct snd_efw *efw, char __user *buf, long count,

sound/firewire/motu/motu-hwdep.c

114

static int hwdep_get_info(struct snd_motu *motu, void __user *arg)

sound/firewire/motu/motu-hwdep.c

175

return hwdep_get_info(motu, (void __user *)arg);

sound/firewire/motu/motu-hwdep.c

194

err = copy_to_user((void __user *)arg, meter, sizeof(*meter));

sound/firewire/motu/motu-hwdep.c

216

err = copy_to_user((void __user *)arg, meter, sizeof(*meter));

sound/firewire/motu/motu-hwdep.c

238

err = copy_to_user((void __user *)arg, param, sizeof(*param));

sound/firewire/motu/motu-hwdep.c

27

static long hwdep_read(struct snd_hwdep *hwdep, char __user *buf, long count,

sound/firewire/motu/motu-hwdep.c

67

u32 __user *ptr;

sound/firewire/motu/motu-hwdep.c

77

ptr = (u32 __user *)(buf + consumed);

sound/firewire/oxfw/oxfw-hwdep.c

127

return hwdep_get_info(oxfw, (void __user *)arg);

sound/firewire/oxfw/oxfw-hwdep.c

18

static long hwdep_read(struct snd_hwdep *hwdep, char __user *buf, long count,

sound/firewire/oxfw/oxfw-hwdep.c

66

static int hwdep_get_info(struct snd_oxfw *oxfw, void __user *arg)

sound/firewire/tascam/tascam-hwdep.c

144

static int hwdep_get_info(struct snd_tscm *tscm, void __user *arg)

sound/firewire/tascam/tascam-hwdep.c

18

static long tscm_hwdep_read_locked(struct snd_tscm *tscm, char __user *buf,

sound/firewire/tascam/tascam-hwdep.c

187

static int tscm_hwdep_state(struct snd_tscm *tscm, void __user *arg)

sound/firewire/tascam/tascam-hwdep.c

213

return hwdep_get_info(tscm, (void __user *)arg);

sound/firewire/tascam/tascam-hwdep.c

219

return tscm_hwdep_state(tscm, (void __user *)arg);

sound/firewire/tascam/tascam-hwdep.c

38

static long tscm_hwdep_read_queue(struct snd_tscm *tscm, char __user *buf,

sound/firewire/tascam/tascam-hwdep.c

42

char __user *pos = buf;

sound/firewire/tascam/tascam-hwdep.c

99

static long hwdep_read(struct snd_hwdep *hwdep, char __user *buf, long count,

sound/hda/codecs/ca0132.c

6589

unsigned int size, unsigned int __user *tlv)

sound/hda/codecs/side-codecs/cs35l56_hda.c

697

const char __user *from,

sound/hda/codecs/side-codecs/cs35l56_hda.c

712

const char __user *from,

sound/hda/codecs/side-codecs/cs35l56_hda.c

727

char __user *to,

sound/hda/codecs/side-codecs/cs35l56_hda.c

742

const char __user *from,

sound/hda/common/codec.c

1586

unsigned int size, unsigned int __user *_tlv)

sound/hda/common/hda_local.h

105

unsigned int size, unsigned int __user *_tlv);

sound/hda/common/hwdep.c

22

struct hda_verb_ioctl __user *arg)

sound/hda/common/hwdep.c

36

struct hda_verb_ioctl __user *arg)

sound/hda/common/hwdep.c

64

void __user *argp = (void __user *)arg;

sound/hda/common/hwdep.c

68

return put_user(HDA_HWDEP_VERSION, (int __user *)argp);

sound/hda/core/hdmi_chmap.c

668

unsigned int size, unsigned int __user *tlv)

sound/hda/core/hdmi_chmap.c

673

unsigned int __user *dst;

sound/isa/gus/gus_dram.c

13

static int snd_gus_dram_poke(struct snd_gus_card *gus, char __user *_buffer,

sound/isa/gus/gus_dram.c

42

int snd_gus_dram_write(struct snd_gus_card *gus, char __user *buffer,

sound/isa/gus/gus_dram.c

48

static int snd_gus_dram_peek(struct snd_gus_card *gus, char __user *_buffer,

sound/isa/gus/gus_dram.c

78

int snd_gus_dram_read(struct snd_gus_card *gus, char __user *buffer,

sound/isa/gus/gus_mem_proc.c

21

struct file *file, char __user *buf,

sound/isa/sb/emu8000.c

639

snd_emu8000_load_chorus_fx(struct snd_emu8000 *emu, int mode, const void __user *buf, long len)

sound/isa/sb/emu8000.c

766

snd_emu8000_load_reverb_fx(struct snd_emu8000 *emu, int mode, const void __user *buf, long len)

sound/isa/sb/emu8000_callback.c

30

const void __user *buf, long len);

sound/isa/sb/emu8000_callback.c

517

load_fx(struct snd_emux *emu, int type, int mode, const void __user *buf, long len)

sound/isa/sb/emu8000_local.h

21

const void __user *data, long count);

sound/isa/sb/emu8000_patch.c

138

const void __user *data, long count)

sound/isa/sb/emu8000_patch.c

74

read_word(const void __user *buf, int offset, int mode)

sound/isa/sb/emu8000_patch.c

79

get_user(cc, (unsigned char __user *)buf + offset);

sound/isa/sb/emu8000_patch.c

83

get_user(c, (unsigned short __user *)buf + offset);

sound/isa/sb/emu8000_patch.c

86

get_user(cc, (unsigned short __user *)buf + offset);

sound/isa/sb/sb16_csp.c

212

if (copy_to_user((void __user *)arg, &info, sizeof(info)))

sound/isa/sb/sb16_csp.c

221

-EBUSY : snd_sb_csp_riff_load(p, (struct snd_sb_csp_microcode __user *) arg));

sound/isa/sb/sb16_csp.c

230

if (copy_from_user(&start_info, (void __user *) arg, sizeof(start_info)))

sound/isa/sb/sb16_csp.c

291

struct snd_sb_csp_microcode __user * mcode)

sound/isa/sb/sb16_csp.c

296

unsigned char __user *data_ptr;

sound/isa/sb/sb16_csp.c

297

unsigned char __user *data_end;

sound/isa/sb/sb16_csp.c

664

static int snd_sb_csp_load_user(struct snd_sb_csp * p, const unsigned char __user *buf, int size, int load_flags)

sound/isa/sb/sb16_csp.c

80

struct snd_sb_csp_microcode __user * code);

sound/isa/sb/sb16_csp.c

82

static int snd_sb_csp_load_user(struct snd_sb_csp * p, const unsigned char __user *buf, int size, int load_flags);

sound/isa/wavefront/wavefront_fx.c

173

if (copy_from_user (&r, (void __user *)arg, sizeof (wavefront_fx_info)))

sound/isa/wavefront/wavefront_fx.c

194

page_data = memdup_array_user((unsigned char __user *)

sound/isa/wavefront/wavefront_synth.c

1379

wavefront_load_patch (snd_wavefront_t *dev, const char __user *addr)

sound/isa/wavefront/wavefront_synth.c

1754

void __user *argp = (void __user *)arg;

sound/isa/wavefront/wavefront_synth.c

866

u16 __user *dataptr,

sound/isa/wavefront/wavefront_synth.c

881

u16 __user *data_end = NULL;

sound/oss/dmasound/dmasound.h

145

ssize_t (*ct_ulaw)(const u_char __user *, size_t, u_char *, ssize_t *, ssize_t);

sound/oss/dmasound/dmasound.h

146

ssize_t (*ct_alaw)(const u_char __user *, size_t, u_char *, ssize_t *, ssize_t);

sound/oss/dmasound/dmasound.h

147

ssize_t (*ct_s8)(const u_char __user *, size_t, u_char *, ssize_t *, ssize_t);

sound/oss/dmasound/dmasound.h

148

ssize_t (*ct_u8)(const u_char __user *, size_t, u_char *, ssize_t *, ssize_t);

sound/oss/dmasound/dmasound.h

149

ssize_t (*ct_s16be)(const u_char __user *, size_t, u_char *, ssize_t *, ssize_t);

sound/oss/dmasound/dmasound.h

150

ssize_t (*ct_u16be)(const u_char __user *, size_t, u_char *, ssize_t *, ssize_t);

sound/oss/dmasound/dmasound.h

151

ssize_t (*ct_s16le)(const u_char __user *, size_t, u_char *, ssize_t *, ssize_t);

sound/oss/dmasound/dmasound.h

152

ssize_t (*ct_u16le)(const u_char __user *, size_t, u_char *, ssize_t *, ssize_t);

sound/oss/dmasound/dmasound.h

47

do { int error = get_user(ret, (int __user *)(arg)); \

sound/oss/dmasound/dmasound.h

50

#define IOCTL_OUT(arg, ret) ioctl_return((int __user *)(arg), ret)

sound/oss/dmasound/dmasound.h

52

static inline int ioctl_return(int __user *addr, int value)

sound/oss/dmasound/dmasound_atari.c

101

static ssize_t ata_ctx_s16be(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

104

static ssize_t ata_ctx_u16be(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

107

static ssize_t ata_ctx_s16le(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

110

static ssize_t ata_ctx_u16le(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

155

static ssize_t ata_ct_law(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

180

static ssize_t ata_ct_s8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

198

static ssize_t ata_ct_u8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

221

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

233

static ssize_t ata_ct_s16be(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

245

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

265

static ssize_t ata_ct_u16be(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

277

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

292

if (get_user(data, (u_int __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

304

static ssize_t ata_ct_s16le(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

317

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

332

if (get_user(data, (u_int __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

345

static ssize_t ata_ct_u16le(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

358

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

372

if (get_user(data, (u_int __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

385

static ssize_t ata_ctx_law(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

447

static ssize_t ata_ctx_s8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

482

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

501

static ssize_t ata_ctx_u8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

537

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

557

static ssize_t ata_ctx_s16be(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

575

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

594

if (get_user(data, (u_int __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

613

static ssize_t ata_ctx_u16be(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

631

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

651

if (get_user(data, (u_int __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

671

static ssize_t ata_ctx_s16le(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

689

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

709

if (get_user(data, (u_int __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

71

static ssize_t ata_ct_law(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

729

static ssize_t ata_ctx_u16le(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

74

static ssize_t ata_ct_s8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

747

if (get_user(data, (u_short __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

767

if (get_user(data, (u_int __user *)userPtr))

sound/oss/dmasound/dmasound_atari.c

77

static ssize_t ata_ct_u8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

80

static ssize_t ata_ct_s16be(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

83

static ssize_t ata_ct_u16be(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

86

static ssize_t ata_ct_s16le(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

89

static ssize_t ata_ct_u16le(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

92

static ssize_t ata_ctx_law(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

95

static ssize_t ata_ctx_s8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_atari.c

98

static ssize_t ata_ctx_u8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_core.c

1124

if (copy_to_user((void __user *)arg, &info, sizeof(info)))

sound/oss/dmasound/dmasound_core.c

1333

static ssize_t state_read(struct file *file, char __user *buf, size_t count,

sound/oss/dmasound/dmasound_core.c

271

static ssize_t sound_copy_translate(TRANS *trans, const u_char __user *userPtr,

sound/oss/dmasound/dmasound_core.c

275

ssize_t (*ct_func)(const u_char __user *, size_t, u_char *, ssize_t *, ssize_t);

sound/oss/dmasound/dmasound_core.c

357

if (copy_to_user((void __user *)arg, &info, sizeof(info)))

sound/oss/dmasound/dmasound_core.c

540

static ssize_t sq_write(struct file *file, const char __user *src, size_t uLeft,

sound/oss/dmasound/dmasound_paula.c

157

static ssize_t ami_ct_s8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_paula.c

190

static ssize_t funcname(const u_char __user *userPtr, size_t userCount, \

sound/oss/dmasound/dmasound_paula.c

241

static ssize_t funcname(const u_char __user *userPtr, size_t userCount, \

sound/oss/dmasound/dmasound_paula.c

245

const u_short __user *ptr = (const u_short __user *)userPtr; \

sound/oss/dmasound/dmasound_q40.c

102

static ssize_t q40_ct_u8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_q40.c

118

static ssize_t q40_ctx_law(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_q40.c

156

static ssize_t q40_ctx_s8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_q40.c

193

static ssize_t q40_ctx_u8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_q40.c

228

static ssize_t q40_ctc_law(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_q40.c

269

static ssize_t q40_ctc_s8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_q40.c

308

static ssize_t q40_ctc_u8(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_q40.c

62

static ssize_t q40_ct_law(const u_char __user *userPtr, size_t userCount,

sound/oss/dmasound/dmasound_q40.c

83

static ssize_t q40_ct_s8(const u_char __user *userPtr, size_t userCount,

sound/pci/asihpi/hpioctl.c

115

phpi_ioctl_data = (struct hpi_ioctl_linux __user *)arg;

sound/pci/asihpi/hpioctl.c

125

if (get_user(msg_size, (u16 __user *)puhm)) {

sound/pci/asihpi/hpioctl.c

144

if (get_user(res_max_size, (u16 __user *)puhr)) {

sound/pci/asihpi/hpioctl.c

176

u16 __user *ptr = NULL;

sound/pci/asihpi/hpioctl.c

209

ptr = (u16 __user *)hm->m0.u.d.u.data.pb_data;

sound/pci/asihpi/hpioctl.c

95

struct hpi_ioctl_linux __user *phpi_ioctl_data;

sound/pci/asihpi/hpioctl.c

96

void __user *puhm;

sound/pci/asihpi/hpioctl.c

97

void __user *puhr;

sound/pci/asihpi/hpios.h

65

void __user *phm;

sound/pci/asihpi/hpios.h

66

void __user *phr;

sound/pci/cs4281.c

1107

struct file *file, char __user *buf,

sound/pci/cs4281.c

1119

struct file *file, char __user *buf,

sound/pci/cs46xx/cs46xx_lib.c

2754

struct file *file, char __user *buf,

sound/pci/emu10k1/emu10k1_patch.c

27

const void __user *data, long count)

sound/pci/emu10k1/emu10k1_synth_local.h

18

const void __user *_data, long count);

sound/pci/emu10k1/emufx.c

2465

void __user *argp = (void __user *)arg;

sound/pci/emu10k1/emufx.c

2471

return put_user(SNDRV_EMU10K1_VERSION, (int __user *)argp);

sound/pci/emu10k1/emufx.c

2525

if (get_user(addr, (unsigned int __user *)argp))

sound/pci/emu10k1/emufx.c

2563

if (get_user(addr, (unsigned int __user *)argp))

sound/pci/emu10k1/emufx.c

2584

if (put_user(addr, (unsigned int __user *)argp))

sound/pci/emu10k1/emufx.c

543

else if (get_user(val, (__user u32 *)&icode->gpr_map[gpr]))

sound/pci/emu10k1/emufx.c

559

if (put_user(val, (__user u32 *)&icode->gpr_map[gpr]))

sound/pci/emu10k1/emufx.c

579

if (get_user(val, (__user __u32 *)&icode->tram_data_map[tram]) ||

sound/pci/emu10k1/emufx.c

580

get_user(addr, (__user __u32 *)&icode->tram_addr_map[tram]))

sound/pci/emu10k1/emufx.c

610

if (put_user(val, (__user u32 *)&icode->tram_data_map[tram]) ||

sound/pci/emu10k1/emufx.c

611

put_user(addr, (__user u32 *)&icode->tram_addr_map[tram]))

sound/pci/emu10k1/emufx.c

630

if (get_user(lo, (__user u32 *)&icode->code[pc + 0]) ||

sound/pci/emu10k1/emufx.c

631

get_user(hi, (__user u32 *)&icode->code[pc + 1]))

sound/pci/emu10k1/emufx.c

649

(__user u32 *)&icode->code[pc + 0]))

sound/pci/emu10k1/emufx.c

652

(__user u32 *)&icode->code[pc + 1]))

sound/pci/emu10k1/emufx.c

678

static unsigned int *copy_tlv(const unsigned int __user *_tlv, bool in_kernel)

sound/pci/emu10k1/emufx.c

709

struct snd_emu10k1_fx8010_control_gpr __user *_src;

sound/pci/emu10k1/emufx.c

711

struct snd_emu10k1_fx8010_control_old_gpr __user *_octl;

sound/pci/emu10k1/emufx.c

713

_src = (struct snd_emu10k1_fx8010_control_gpr __user *)src;

sound/pci/emu10k1/emufx.c

723

_octl = (struct snd_emu10k1_fx8010_control_old_gpr __user *)octl;

sound/pci/emu10k1/emufx.c

737

struct snd_emu10k1_fx8010_control_gpr __user *_dst;

sound/pci/emu10k1/emufx.c

738

struct snd_emu10k1_fx8010_control_old_gpr __user *octl;

sound/pci/emu10k1/emufx.c

740

_dst = (struct snd_emu10k1_fx8010_control_gpr __user *)dst;

sound/pci/emu10k1/emufx.c

744

octl = (struct snd_emu10k1_fx8010_control_old_gpr __user *)dst;

sound/pci/emu10k1/emufx.c

751

struct emu10k1_ctl_elem_id __user *_id =

sound/pci/emu10k1/emufx.c

752

(struct emu10k1_ctl_elem_id __user *)&list[i];

sound/pci/emu10k1/emufx.c

899

knew.tlv.p = copy_tlv((const unsigned int __user *)gctl->tlv, in_kernel);

sound/pci/emu10k1/emuproc.c

385

struct file *file, char __user *buf,

sound/pci/emu10k1/memory.c

617

int offset, const char __user *data, int size, u32 xor)

sound/pci/lola/lola_mixer.c

502

unsigned int size, unsigned int __user *tlv)

sound/pci/mixart/mixart.c

1113

struct file *file, char __user *buf,

sound/pci/mixart/mixart.c

1129

struct file *file, char __user *buf,

sound/pci/rme9652/hdsp.c

4541

static inline int copy_u32_le(void __user *dest, void __iomem *src)

sound/pci/rme9652/hdsp.c

4547

static inline int copy_u64_le(void __user *dest, void __iomem *src_low, void __iomem *src_high)

sound/pci/rme9652/hdsp.c

4557

static inline int copy_u48_le(void __user *dest, void __iomem *src_low, void __iomem *src_high)

sound/pci/rme9652/hdsp.c

4567

static int hdsp_9652_get_peak(struct hdsp *hdsp, struct hdsp_peak_rms __user *peak_rms)

sound/pci/rme9652/hdsp.c

4604

static int hdsp_9632_get_peak(struct hdsp *hdsp, struct hdsp_peak_rms __user *peak_rms)

sound/pci/rme9652/hdsp.c

4634

static int hdsp_get_peak(struct hdsp *hdsp, struct hdsp_peak_rms __user *peak_rms)

sound/pci/rme9652/hdsp.c

4667

void __user *argp = (void __user *)arg;

sound/pci/rme9652/hdsp.c

4672

struct hdsp_peak_rms __user *peak_rms = (struct hdsp_peak_rms __user *)arg;

sound/pci/rme9652/hdsp.c

4785

u32 __user *firmware_data;

sound/pci/rme9652/hdsp.c

4799

firmware_data = (u32 __user *)firmware.firmware_data;

sound/pci/rme9652/hdsp.c

4841

struct hdsp_mixer __user *mixer = (struct hdsp_mixer __user *)argp;

sound/pci/rme9652/hdspm.c

6088

void __user *argp = (void __user *)arg;

sound/pci/rme9652/hdspm.c

6277

if (copy_to_user((void __user *)mixer.mixer, hdspm->mixer,

sound/soc/atmel/mchp-pdmc.c

340

unsigned int size, unsigned int __user *tlv)

sound/soc/atmel/mchp-pdmc.c

344

unsigned int __user *dst;

sound/soc/codecs/cros_ec_codec.c

742

const unsigned int __user *bytes,

sound/soc/codecs/cs35l56-shared.c

1144

const char __user *from, size_t count,

sound/soc/codecs/cs35l56-shared.c

1200

const char __user *from, size_t count,

sound/soc/codecs/cs35l56-shared.c

1234

char __user *to, size_t count,

sound/soc/codecs/cs35l56-shared.c

1249

const char __user *from, size_t count,

sound/soc/codecs/cs35l56.c

1012

char __user *to,

sound/soc/codecs/cs35l56.c

1061

const char __user *from,

sound/soc/codecs/cs35l56.c

971

const char __user *from,

sound/soc/codecs/cs35l56.c

993

const char __user *from,

sound/soc/codecs/tas2781-i2c.c

1507

static ssize_t acoustic_ctl_read(struct file *file, char __user *to,

sound/soc/codecs/tas2781-i2c.c

1523

const char __user *from, size_t count, loff_t *ppos)

sound/soc/codecs/wm_adsp.c

2016

char __user *buf, size_t count)

sound/soc/codecs/wm_adsp.c

2059

struct snd_compr_stream *stream, char __user *buf,

sound/soc/codecs/wm_adsp.c

426

const unsigned int __user *bytes, unsigned int size)

sound/soc/codecs/wm_adsp.c

481

unsigned int __user *bytes, unsigned int size)

sound/soc/codecs/wm_adsp.h

148

char __user *buf, size_t count);

sound/soc/fsl/imx-audmux.c

56

static ssize_t audmux_read_file(struct file *file, char __user *user_buf,

sound/soc/intel/avs/debugfs.c

135

static ssize_t probe_points_write(struct file *file, const char __user *from, size_t count,

sound/soc/intel/avs/debugfs.c

172

static ssize_t probe_points_disconnect_write(struct file *file, const char __user *from,

sound/soc/intel/avs/debugfs.c

209

static ssize_t strace_read(struct file *file, char __user *to, size_t count, loff_t *ppos)

sound/soc/intel/avs/debugfs.c

348

static ssize_t trace_control_read(struct file *file, char __user *to, size_t count, loff_t *ppos)

sound/soc/intel/avs/debugfs.c

359

static ssize_t trace_control_write(struct file *file, const char __user *from, size_t count,

sound/soc/intel/avs/debugfs.c

53

static ssize_t fw_regs_read(struct file *file, char __user *to, size_t count, loff_t *ppos)

sound/soc/intel/avs/debugfs.c

75

static ssize_t debug_window_read(struct file *file, char __user *to, size_t count, loff_t *ppos)

sound/soc/intel/avs/debugfs.c

99

static ssize_t probe_points_read(struct file *file, char __user *to, size_t count, loff_t *ppos)

sound/soc/intel/avs/pcm.c

937

static ssize_t topology_name_read(struct file *file, char __user *user_buf, size_t count,

sound/soc/intel/avs/probes.c

232

char __user *buf, size_t count)

sound/soc/mediatek/common/mtk-btcvsd.c

1143

unsigned int __user *data, unsigned int size)

sound/soc/mediatek/common/mtk-btcvsd.c

1193

unsigned int __user *data, unsigned int size)

sound/soc/qcom/qdsp6/q6apm-dai.c

924

struct snd_compr_stream *stream, char __user *buf,

sound/soc/qcom/qdsp6/q6asm-dai.c

1062

struct snd_compr_stream *stream, char __user *buf,

sound/soc/soc-component.c

595

char __user *buf, size_t count)

sound/soc/soc-dapm.c

2450

char __user *user_buf,

sound/soc/soc-dapm.c

2530

static ssize_t dapm_bias_read_file(struct file *file, char __user *user_buf,

sound/soc/soc-ops.c

612

unsigned int size, unsigned int __user *tlv)

sound/soc/soc-pcm.c

237

static ssize_t dpcm_state_read_file(struct file *file, char __user *user_buf,

sound/soc/sof/compress.c

316

char __user *buf, size_t count)

sound/soc/sof/compress.c

337

char __user *buf, size_t count)

sound/soc/sof/compress.c

359

char __user *buf, size_t count)

sound/soc/sof/control.c

161

const unsigned int __user *binary_data,

sound/soc/sof/control.c

180

int snd_sof_bytes_ext_volatile_get(struct snd_kcontrol *kcontrol, unsigned int __user *binary_data,

sound/soc/sof/control.c

216

unsigned int __user *binary_data,

sound/soc/sof/debug.c

22

static ssize_t sof_dfsentry_read(struct file *file, char __user *buffer,

sound/soc/sof/debug.c

254

static ssize_t memory_info_read(struct file *file, char __user *to, size_t count, loff_t *ppos)

sound/soc/sof/ipc3-control.c

376

const unsigned int __user *binary_data,

sound/soc/sof/ipc3-control.c

379

const struct snd_ctl_tlv __user *tlvd = (const struct snd_ctl_tlv __user *)binary_data;

sound/soc/sof/ipc3-control.c

471

const unsigned int __user *binary_data,

sound/soc/sof/ipc3-control.c

474

struct snd_ctl_tlv __user *tlvd = (struct snd_ctl_tlv __user *)binary_data;

sound/soc/sof/ipc3-control.c

530

const unsigned int __user *binary_data, unsigned int size)

sound/soc/sof/ipc3-control.c

536

const unsigned int __user *binary_data,

sound/soc/sof/ipc3-dtrace.c

187

static ssize_t dfsentry_trace_filter_write(struct file *file, const char __user *from,

sound/soc/sof/ipc3-dtrace.c

320

static ssize_t dfsentry_dtrace_read(struct file *file, char __user *buffer,

sound/soc/sof/ipc4-control.c

623

const unsigned int __user *binary_data,

sound/soc/sof/ipc4-control.c

626

struct snd_ctl_tlv __user *tlvd = (struct snd_ctl_tlv __user *)binary_data;

sound/soc/sof/ipc4-control.c

707

const unsigned int __user *binary_data,

sound/soc/sof/ipc4-control.c

710

struct snd_ctl_tlv __user *tlvd = (struct snd_ctl_tlv __user *)binary_data;

sound/soc/sof/ipc4-control.c

765

const unsigned int __user *binary_data,

sound/soc/sof/ipc4-control.c

774

const unsigned int __user *binary_data,

sound/soc/sof/ipc4-mtrace.c

170

static ssize_t sof_ipc4_mtrace_dfs_read(struct file *file, char __user *buffer,

sound/soc/sof/ipc4-mtrace.c

295

static ssize_t sof_ipc4_priority_mask_dfs_read(struct file *file, char __user *to,

sound/soc/sof/ipc4-mtrace.c

326

const char __user *from,

sound/soc/sof/ipc4-telemetry.c

35

static ssize_t sof_telemetry_entry_read(struct file *file, char __user *buffer,

sound/soc/sof/sof-audio.h

157

const unsigned int __user *binary_data, unsigned int size);

sound/soc/sof/sof-audio.h

159

const unsigned int __user *binary_data, unsigned int size);

sound/soc/sof/sof-audio.h

161

const unsigned int __user *binary_data, unsigned int size);

sound/soc/sof/sof-audio.h

583

const unsigned int __user *binary_data,

sound/soc/sof/sof-audio.h

586

unsigned int __user *binary_data,

sound/soc/sof/sof-audio.h

588

int snd_sof_bytes_ext_volatile_get(struct snd_kcontrol *kcontrol, unsigned int __user *binary_data,

sound/soc/sof/sof-client-ipc-flood-test.c

152

static ssize_t sof_ipc_flood_dfs_write(struct file *file, const char __user *buffer,

sound/soc/sof/sof-client-ipc-flood-test.c

239

static ssize_t sof_ipc_flood_dfs_read(struct file *file, char __user *buffer,

sound/soc/sof/sof-client-ipc-kernel-injector.c

39

static ssize_t sof_kernel_msg_inject_dfs_write(struct file *file, const char __user *buffer,

sound/soc/sof/sof-client-ipc-msg-injector.c

150

static ssize_t sof_msg_inject_dfs_write(struct file *file, const char __user *buffer,

sound/soc/sof/sof-client-ipc-msg-injector.c

180

const char __user *buffer,

sound/soc/sof/sof-client-ipc-msg-injector.c

51

static ssize_t sof_msg_inject_dfs_read(struct file *file, char __user *buffer,

sound/soc/sof/sof-client-ipc-msg-injector.c

72

char __user *buffer,

sound/soc/sof/sof-client-probes.c

172

char __user *buf, size_t count)

sound/soc/sof/sof-client-probes.c

202

static ssize_t sof_probes_dfs_points_read(struct file *file, char __user *to,

sound/soc/sof/sof-client-probes.c

271

char __user *to,

sound/soc/sof/sof-client-probes.c

279

char __user *to,

sound/soc/sof/sof-client-probes.c

287

sof_probes_dfs_points_write(struct file *file, const char __user *from,

sound/soc/sof/sof-client-probes.c

356

sof_probes_dfs_points_remove_write(struct file *file, const char __user *from,

sound/soc/sof/topology.c

2367

unsigned int __user *binary_data,

sound/soc/sof/topology.c

2374

const unsigned int __user *binary_data,

sound/soc/sprd/sprd-pcm-compress.c

531

char __user *buf, size_t count)

sound/soc/uniphier/aio-compress.c

275

char __user *buf, size_t dstsize)

sound/soc/uniphier/aio-compress.c

277

u32 __user *srcbuf = (u32 __user *)buf;

sound/soc/uniphier/aio-compress.c

319

char __user *buf, size_t count)

sound/synth/emux/emux.c

56

const void __user *buf, long count)

sound/synth/emux/emux_hwdep.c

103

return snd_emux_hwdep_misc_mode(emu, (void __user *)arg);

sound/synth/emux/emux_hwdep.c

20

snd_emux_hwdep_load_patch(struct snd_emux *emu, void __user *arg)

sound/synth/emux/emux_hwdep.c

52

snd_emux_hwdep_misc_mode(struct snd_emux *emu, void __user *arg)

sound/synth/emux/emux_hwdep.c

87

return put_user(SNDRV_EMUX_VERSION, (unsigned int __user *)arg);

sound/synth/emux/emux_hwdep.c

89

return snd_emux_hwdep_load_patch(emu, (void __user *)arg);

sound/synth/emux/emux_hwdep.c

99

return put_user(size, (unsigned int __user *)arg);

sound/synth/emux/emux_oss.c

191

const char __user *buf, int offs, int count)

sound/synth/emux/emux_oss.c

24

const char __user *buf, int offs, int count);

sound/synth/emux/soundfont.c

1126

struct snd_sf_list *sflist, const char __user *data,

sound/synth/emux/soundfont.c

184

open_patch(struct snd_sf_list *sflist, const char __user *data,

sound/synth/emux/soundfont.c

24

static int open_patch(struct snd_sf_list *sflist, const char __user *data,

sound/synth/emux/soundfont.c

374

load_map(struct snd_sf_list *sflist, const void __user *data, int count)

sound/synth/emux/soundfont.c

40

static int load_map(struct snd_sf_list *sflist, const void __user *data, int count);

sound/synth/emux/soundfont.c

42

const void __user *data, long count);

sound/synth/emux/soundfont.c

473

struct snd_sf_list *sflist, const void __user *data, long count)

sound/synth/emux/soundfont.c

50

static int load_data(struct snd_sf_list *sflist, const void __user *data, long count);

sound/synth/emux/soundfont.c

675

load_data(struct snd_sf_list *sflist, const void __user *data, long count)

sound/synth/emux/soundfont.c

87

struct snd_sf_list *sflist, const void __user *data,

sound/synth/emux/soundfont.c

939

struct snd_sf_list *sflist, const char __user *data, long count)

sound/usb/fcp.c

426

unsigned int __user *tlv)

sound/usb/fcp.c

463

struct fcp_init __user *arg)

sound/usb/fcp.c

553

struct fcp_cmd __user *arg)

sound/usb/fcp.c

619

struct fcp_meter_map __user *arg)

sound/usb/fcp.c

690

struct fcp_meter_labels __user *arg)

sound/usb/fcp.c

777

void __user *argp = (void __user *)arg;

sound/usb/fcp.c

785

(int __user *)argp) ? -EFAULT : 0;

sound/usb/fcp.c

815

static long fcp_hwdep_read(struct snd_hwdep *hw, char __user *buf,

sound/usb/line6/driver.c

564

line6_hwdep_read(struct snd_hwdep *hwdep, char __user *buf, long count,

sound/usb/line6/driver.c

605

line6_hwdep_write(struct snd_hwdep *hwdep, const char __user *data, long count,

sound/usb/mixer.c

544

unsigned int size, unsigned int __user *_tlv)

sound/usb/mixer.h

121

unsigned int size, unsigned int __user *_tlv);

sound/usb/mixer_quirks.c

219

static long snd_usb_sbrc_hwdep_read(struct snd_hwdep *hw, char __user *buf,

sound/usb/mixer_quirks.c

234

err = put_user(rc_code, (u32 __user *)buf);

sound/usb/mixer_scarlett2.c

9344

if (get_user(segment_id, (int __user *)arg))

sound/usb/mixer_scarlett2.c

9457

if (copy_to_user((void __user *)arg, &progress, sizeof(progress)))

sound/usb/mixer_scarlett2.c

9498

(int __user *)arg) ? -EFAULT : 0;

sound/usb/mixer_scarlett2.c

9518

char __user *buf,

sound/usb/mixer_scarlett2.c

9589

const char __user *buf,

sound/usb/mixer_scarlett2.c

9714

char __user *buf,

sound/usb/stream.c

148

unsigned int size, unsigned int __user *tlv)

sound/usb/stream.c

153

unsigned int __user *dst;

sound/usb/usx2y/us122l.c

321

if (copy_from_user(&cfg, (void __user *)arg, sizeof(cfg)))

sound/virtio/virtio_kctl.c

286

unsigned int size, unsigned int __user *utlv)

tools/arch/arm64/include/uapi/asm/kvm.h

197

void __user *addr;

tools/arch/s390/include/uapi/asm/kvm.h

548

struct kvm_hw_breakpoint __user *hw_bp;

tools/include/linux/types.h

57

#ifndef __user

tools/include/uapi/linux/kvm.h

577

void __user *dirty_bitmap; /* one bit per page */

tools/include/uapi/linux/kvm.h

588

void __user *dirty_bitmap; /* one bit per page */

tools/perf/trace/beauty/include/linux/socket.h

100

struct iovec __user *msg_iov; /* scatter/gather array */

tools/perf/trace/beauty/include/linux/socket.h

102

void __user *msg_control; /* ancillary data */

tools/perf/trace/beauty/include/linux/socket.h

138

((void __user *)(cmsg) + sizeof(struct cmsghdr))

tools/perf/trace/beauty/include/linux/socket.h

407

extern int move_addr_to_kernel(void __user *uaddr, int ulen, struct sockaddr_storage *kaddr);

tools/perf/trace/beauty/include/linux/socket.h

426

extern long __sys_recvmsg(int fd, struct user_msghdr __user *msg,

tools/perf/trace/beauty/include/linux/socket.h

428

extern long __sys_sendmsg(int fd, struct user_msghdr __user *msg,

tools/perf/trace/beauty/include/linux/socket.h

430

extern int __sys_recvmmsg(int fd, struct mmsghdr __user *mmsg,

tools/perf/trace/beauty/include/linux/socket.h

432

struct __kernel_timespec __user *timeout,

tools/perf/trace/beauty/include/linux/socket.h

433

struct old_timespec32 __user *timeout32);

tools/perf/trace/beauty/include/linux/socket.h

434

extern int __sys_sendmmsg(int fd, struct mmsghdr __user *mmsg,

tools/perf/trace/beauty/include/linux/socket.h

440

struct user_msghdr __user *umsg,

tools/perf/trace/beauty/include/linux/socket.h

441

struct sockaddr __user *uaddr,

tools/perf/trace/beauty/include/linux/socket.h

445

struct sockaddr __user **save_addr);

tools/perf/trace/beauty/include/linux/socket.h

448

extern int __sys_recvfrom(int fd, void __user *ubuf, size_t size,

tools/perf/trace/beauty/include/linux/socket.h

449

unsigned int flags, struct sockaddr __user *addr,

tools/perf/trace/beauty/include/linux/socket.h

450

int __user *addr_len);

tools/perf/trace/beauty/include/linux/socket.h

451

extern int __sys_sendto(int fd, void __user *buff, size_t len,

tools/perf/trace/beauty/include/linux/socket.h

452

unsigned int flags, struct sockaddr __user *addr,

tools/perf/trace/beauty/include/linux/socket.h

455

struct sockaddr __user *upeer_sockaddr,

tools/perf/trace/beauty/include/linux/socket.h

456

int __user *upeer_addrlen, int flags);

tools/perf/trace/beauty/include/linux/socket.h

457

extern int __sys_accept4(int fd, struct sockaddr __user *upeer_sockaddr,

tools/perf/trace/beauty/include/linux/socket.h

458

int __user *upeer_addrlen, int flags);

tools/perf/trace/beauty/include/linux/socket.h

461

extern int __sys_bind(int fd, struct sockaddr __user *umyaddr, int addrlen);

tools/perf/trace/beauty/include/linux/socket.h

466

extern int __sys_connect(int fd, struct sockaddr __user *uservaddr,

tools/perf/trace/beauty/include/linux/socket.h

471

struct sockaddr __user *usockaddr, int __user *usockaddr_len);

tools/perf/trace/beauty/include/linux/socket.h

472

extern int __sys_getsockname(int fd, struct sockaddr __user *usockaddr,

tools/perf/trace/beauty/include/linux/socket.h

473

int __user *usockaddr_len, int peer);

tools/perf/trace/beauty/include/linux/socket.h

475

int __user *usockvec);

tools/perf/trace/beauty/include/linux/socket.h

86

void __user *msg_control_user;

tools/perf/trace/beauty/include/linux/socket.h

98

void __user *msg_name; /* ptr to socket address structure */

tools/perf/trace/beauty/include/uapi/drm/drm.h

126

char __user *name; /**< Name of driver */

tools/perf/trace/beauty/include/uapi/drm/drm.h

128

char __user *date; /**< User-space buffer to hold date */

tools/perf/trace/beauty/include/uapi/drm/drm.h

130

char __user *desc; /**< User-space buffer to hold desc */

tools/perf/trace/beauty/include/uapi/drm/drm.h

140

char __user *unique; /**< Unique name for driver instantiation */

tools/perf/trace/beauty/include/uapi/drm/drm.h

145

struct drm_version __user *version;

tools/perf/trace/beauty/include/uapi/drm/drm.h

340

struct drm_buf_desc __user *list;

tools/perf/trace/beauty/include/uapi/drm/drm.h

348

int __user *list;

tools/perf/trace/beauty/include/uapi/drm/drm.h

360

void __user *address; /**< Address of buffer */

tools/perf/trace/beauty/include/uapi/drm/drm.h

369

void __user *virt;

tools/perf/trace/beauty/include/uapi/drm/drm.h

371

void __user *virtual; /**< Mmap'd area in user-virtual */

tools/perf/trace/beauty/include/uapi/drm/drm.h

373

struct drm_buf_pub __user *list; /**< Buffer information */

tools/perf/trace/beauty/include/uapi/drm/drm.h

386

int __user *send_indices; /**< List of handles to buffers */

tools/perf/trace/beauty/include/uapi/drm/drm.h

387

int __user *send_sizes; /**< Lengths of data to send */

tools/perf/trace/beauty/include/uapi/drm/drm.h

391

int __user *request_indices; /**< Buffer information */

tools/perf/trace/beauty/include/uapi/drm/drm.h

392

int __user *request_sizes;

tools/perf/trace/beauty/include/uapi/drm/drm.h

416

struct drm_ctx __user *contexts;

tools/perf/trace/beauty/include/uapi/drm/i915_drm.h

562

struct drm_clip_rect __user *cliprects; /* pointer to userspace cliprects */

tools/perf/trace/beauty/include/uapi/drm/i915_drm.h

569

char __user *buf; /* pointer to userspace command buffer */

tools/perf/trace/beauty/include/uapi/drm/i915_drm.h

574

struct drm_clip_rect __user *cliprects; /* pointer to userspace cliprects */

tools/perf/trace/beauty/include/uapi/drm/i915_drm.h

580

int __user *irq_seq;

tools/perf/trace/beauty/include/uapi/drm/i915_drm.h

830

int __user *value;

tools/perf/trace/beauty/include/uapi/drm/i915_drm.h

860

int __user *region_offset; /* offset from start of fb or agp */

tools/perf/trace/beauty/include/uapi/linux/usbdevice_fs.h

122

void __user *buffer;

tools/perf/trace/beauty/include/uapi/linux/usbdevice_fs.h

133

void __user *usercontext;

tools/perf/trace/beauty/include/uapi/linux/usbdevice_fs.h

142

void __user *data; /* param buffer (in, or out) */

tools/perf/trace/beauty/include/uapi/linux/usbdevice_fs.h

47

void __user *data;

tools/perf/trace/beauty/include/uapi/linux/usbdevice_fs.h

54

void __user *data;

tools/perf/trace/beauty/include/uapi/linux/usbdevice_fs.h

64

void __user *context;

tools/perf/trace/beauty/include/uapi/sound/asound.h

1135

struct snd_ctl_elem_id __user *pids; /* R: IDs */

tools/perf/trace/beauty/include/uapi/sound/asound.h

129

unsigned char __user *image; /* W: binary image */

tools/perf/trace/beauty/include/uapi/sound/asound.h

609

void __user *buf;

tools/perf/trace/beauty/include/uapi/sound/asound.h

615

void __user * __user *bufs;

tools/testing/selftests/bpf/test_kmods/bpf_testmod.c

349

struct bpf_testmod_btf_type_tag_1 __user *p;

tools/testing/selftests/bpf/test_kmods/bpf_testmod.c

357

bpf_testmod_test_btf_type_tag_user_1(struct bpf_testmod_btf_type_tag_1 __user *arg) {

tools/virtio/linux/uaccess.h

32

static inline int copy_from_user(void *to, const void __user volatile *from,

tools/virtio/linux/uaccess.h

39

static inline int copy_to_user(void __user volatile *to, const void *from,

virt/kvm/binary_stats.c

55

char __user *user_buffer, size_t size, loff_t *offset)

virt/kvm/binary_stats.c

64

char __user *dest = user_buffer;

virt/kvm/guest_memfd.c

863

long kvm_gmem_populate(struct kvm *kvm, gfn_t start_gfn, void __user *src,

virt/kvm/kvm_main.c

2023

!access_ok((void __user *)(unsigned long)mem->userspace_addr,

virt/kvm/kvm_main.c

3193

r = __copy_from_user(data, (void __user *)addr + offset, len);

virt/kvm/kvm_main.c

3270

r = __copy_from_user_inatomic(data, (void __user *)addr + offset, len);

virt/kvm/kvm_main.c

3302

r = __copy_to_user((void __user *)addr + offset, data, len);

virt/kvm/kvm_main.c

3440

r = __copy_to_user((void __user *)ghc->hva + offset, data, len);

virt/kvm/kvm_main.c

3478

r = __copy_from_user(data, (void __user *)ghc->hva + offset, len);

virt/kvm/kvm_main.c

4283

static ssize_t kvm_vcpu_stats_read(struct file *file, char __user *user_buffer,

virt/kvm/kvm_main.c

4410

void __user *argp = (void __user *)arg;

virt/kvm/kvm_main.c

4582

struct kvm_signal_mask __user *sigmask_arg = argp;

virt/kvm/kvm_main.c

4661

void __user *argp = compat_ptr(arg);

virt/kvm/kvm_main.c

4669

struct kvm_signal_mask __user *sigmask_arg = argp;

virt/kvm/kvm_main.c

4683

(compat_sigset_t __user *)sigmask_arg->sigset))

virt/kvm/kvm_main.c

4719

if (copy_from_user(&attr, (void __user *)arg, sizeof(attr)))

virt/kvm/kvm_main.c

5093

static ssize_t kvm_vm_stats_read(struct file *file, char __user *user_buffer,

virt/kvm/kvm_main.c

5152

void __user *argp = (void __user *)arg;

virt/kvm/kvm_main.c

5301

struct kvm_irq_routing __user *urouting;

virt/kvm/kvm_main.c

5432

if (copy_from_user(&compat_log, (void __user *)arg,

virt/kvm/kvm_main.c

5449

if (copy_from_user(&compat_log, (void __user *)arg,

virt/kvm/pfncache.c

441

if (!access_ok((void __user *)uhva, len))

virt/kvm/vfio.c

212

void __user *arg)

virt/kvm/vfio.c

246

void __user *arg)

virt/kvm/vfio.c

248

int32_t __user *argp = arg;