2785 			     struct ib_udata *ucore,  in ib_uverbs_ex_create_flow()  argument
2800 	if (ucore->inlen < sizeof(cmd))  in ib_uverbs_ex_create_flow()
2803 	if (ucore->outlen < sizeof(resp))  in ib_uverbs_ex_create_flow()
2806 	err = ib_copy_from_udata(&cmd, ucore, sizeof(cmd));  in ib_uverbs_ex_create_flow()
2810 	ucore->inbuf += sizeof(cmd);  in ib_uverbs_ex_create_flow()
2811 	ucore->inlen -= sizeof(cmd);  in ib_uverbs_ex_create_flow()
2823 	if (cmd.flow_attr.size > ucore->inlen ||  in ib_uverbs_ex_create_flow()
2839 		err = ib_copy_from_udata(kern_flow_attr + 1, ucore,  in ib_uverbs_ex_create_flow()
2911 	err = ib_copy_to_udata(ucore,  in ib_uverbs_ex_create_flow()
2945 			      struct ib_udata *ucore,  in ib_uverbs_ex_destroy_flow()  argument
2953 	if (ucore->inlen < sizeof(cmd))  in ib_uverbs_ex_destroy_flow()
2956 	ret = ib_copy_from_udata(&cmd, ucore, sizeof(cmd));  in ib_uverbs_ex_destroy_flow()
3307 			      struct ib_udata *ucore,  in ib_uverbs_ex_query_device()  argument
3317 	if (ucore->inlen < sizeof(cmd))  in ib_uverbs_ex_query_device()
3320 	err = ib_copy_from_udata(&cmd, ucore, sizeof(cmd));  in ib_uverbs_ex_query_device()
3332 	if (ucore->outlen < resp.response_length)  in ib_uverbs_ex_query_device()
3342 	if (ucore->outlen < resp.response_length + sizeof(resp.odp_caps))  in ib_uverbs_ex_query_device()
3360 	err = ib_copy_to_udata(ucore, &resp, resp.response_length);  in ib_uverbs_ex_query_device()