378 	struct rdma_ucm_get_event cmd;  in ucma_get_event()  local
385 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_get_event()
416 	if (copy_to_user((void __user *)(unsigned long)cmd.response,  in ucma_get_event()
432 static int ucma_get_qp_type(struct rdma_ucm_create_id *cmd, enum ib_qp_type *qp_type)  in ucma_get_qp_type()  argument
434 	switch (cmd->ps) {  in ucma_get_qp_type()
443 		*qp_type = cmd->qp_type;  in ucma_get_qp_type()
453 	struct rdma_ucm_create_id cmd;  in ucma_create_id()  local
462 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_create_id()
465 	ret = ucma_get_qp_type(&cmd, &qp_type);  in ucma_create_id()
475 	ctx->uid = cmd.uid;  in ucma_create_id()
477 				    ucma_event_handler, ctx, cmd.ps, qp_type);  in ucma_create_id()
484 	if (copy_to_user((void __user *)(unsigned long)cmd.response,  in ucma_create_id()
571 	struct rdma_ucm_destroy_id cmd;  in ucma_destroy_id()  local
579 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_destroy_id()
583 	ctx = _ucma_find_context(cmd.id, file);  in ucma_destroy_id()
609 	if (copy_to_user((void __user *)(unsigned long)cmd.response,  in ucma_destroy_id()
619 	struct rdma_ucm_bind_ip cmd;  in ucma_bind_ip()  local
623 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_bind_ip()
626 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_bind_ip()
630 	ret = rdma_bind_addr(ctx->cm_id, (struct sockaddr *) &cmd.addr);  in ucma_bind_ip()
638 	struct rdma_ucm_bind cmd;  in ucma_bind()  local
643 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_bind()
646 	addr = (struct sockaddr *) &cmd.addr;  in ucma_bind()
647 	if (cmd.reserved || !cmd.addr_size || (cmd.addr_size != rdma_addr_size(addr)))  in ucma_bind()
650 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_bind()
663 	struct rdma_ucm_resolve_ip cmd;  in ucma_resolve_ip()  local
667 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_resolve_ip()
670 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_resolve_ip()
674 	ret = rdma_resolve_addr(ctx->cm_id, (struct sockaddr *) &cmd.src_addr,  in ucma_resolve_ip()
675 				(struct sockaddr *) &cmd.dst_addr,  in ucma_resolve_ip()
676 				cmd.timeout_ms);  in ucma_resolve_ip()
685 	struct rdma_ucm_resolve_addr cmd;  in ucma_resolve_addr()  local
690 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_resolve_addr()
693 	src = (struct sockaddr *) &cmd.src_addr;  in ucma_resolve_addr()
694 	dst = (struct sockaddr *) &cmd.dst_addr;  in ucma_resolve_addr()
695 	if (cmd.reserved || (cmd.src_size && (cmd.src_size != rdma_addr_size(src))) ||  in ucma_resolve_addr()
696 	    !cmd.dst_size || (cmd.dst_size != rdma_addr_size(dst)))  in ucma_resolve_addr()
699 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_resolve_addr()
703 	ret = rdma_resolve_addr(ctx->cm_id, src, dst, cmd.timeout_ms);  in ucma_resolve_addr()
712 	struct rdma_ucm_resolve_route cmd;  in ucma_resolve_route()  local
716 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_resolve_route()
719 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_resolve_route()
723 	ret = rdma_resolve_route(ctx->cm_id, cmd.timeout_ms);  in ucma_resolve_route()
796 	struct rdma_ucm_query cmd;  in ucma_query_route()  local
805 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_query_route()
808 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_query_route()
835 	if (copy_to_user((void __user *)(unsigned long)cmd.response,  in ucma_query_route()
965 	struct rdma_ucm_query cmd;  in ucma_query()  local
970 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_query()
973 	response = (void __user *)(unsigned long) cmd.response;  in ucma_query()
974 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_query()
978 	switch (cmd.option) {  in ucma_query()
1016 	struct rdma_ucm_connect cmd;  in ucma_connect()  local
1021 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_connect()
1024 	if (!cmd.conn_param.valid)  in ucma_connect()
1027 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_connect()
1031 	ucma_copy_conn_param(ctx->cm_id, &conn_param, &cmd.conn_param);  in ucma_connect()
1040 	struct rdma_ucm_listen cmd;  in ucma_listen()  local
1044 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_listen()
1047 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_listen()
1051 	ctx->backlog = cmd.backlog > 0 && cmd.backlog < max_backlog ?  in ucma_listen()
1052 		       cmd.backlog : max_backlog;  in ucma_listen()
1061 	struct rdma_ucm_accept cmd;  in ucma_accept()  local
1066 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_accept()
1069 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_accept()
1073 	if (cmd.conn_param.valid) {  in ucma_accept()
1074 		ucma_copy_conn_param(ctx->cm_id, &conn_param, &cmd.conn_param);  in ucma_accept()
1078 			ctx->uid = cmd.uid;  in ucma_accept()
1090 	struct rdma_ucm_reject cmd;  in ucma_reject()  local
1094 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_reject()
1097 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_reject()
1101 	ret = rdma_reject(ctx->cm_id, cmd.private_data, cmd.private_data_len);  in ucma_reject()
1109 	struct rdma_ucm_disconnect cmd;  in ucma_disconnect()  local
1113 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_disconnect()
1116 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_disconnect()
1129 	struct rdma_ucm_init_qp_attr cmd;  in ucma_init_qp_attr()  local
1138 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_init_qp_attr()
1141 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_init_qp_attr()
1147 	qp_attr.qp_state = cmd.qp_state;  in ucma_init_qp_attr()
1153 	if (copy_to_user((void __user *)(unsigned long)cmd.response,  in ucma_init_qp_attr()
1265 	struct rdma_ucm_set_option cmd;  in ucma_set_option()  local
1270 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_set_option()
1273 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_set_option()
1277 	optval = memdup_user((void __user *) (unsigned long) cmd.optval,  in ucma_set_option()
1278 			     cmd.optlen);  in ucma_set_option()
1284 	ret = ucma_set_option_level(ctx, cmd.level, cmd.optname, optval,  in ucma_set_option()
1285 				    cmd.optlen);  in ucma_set_option()
1296 	struct rdma_ucm_notify cmd;  in ucma_notify()  local
1300 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_notify()
1303 	ctx = ucma_get_ctx(file, cmd.id);  in ucma_notify()
1307 	ret = rdma_notify(ctx->cm_id, (enum ib_event_type) cmd.event);  in ucma_notify()
1313 				 struct rdma_ucm_join_mcast *cmd,  int out_len)  in ucma_process_join()  argument
1324 	addr = (struct sockaddr *) &cmd->addr;  in ucma_process_join()
1325 	if (cmd->reserved || !cmd->addr_size || (cmd->addr_size != rdma_addr_size(addr)))  in ucma_process_join()
1328 	ctx = ucma_get_ctx(file, cmd->id);  in ucma_process_join()
1339 	mc->uid = cmd->uid;  in ucma_process_join()
1340 	memcpy(&mc->addr, addr, cmd->addr_size);  in ucma_process_join()
1346 	if (copy_to_user((void __user *)(unsigned long) cmd->response,  in ucma_process_join()
1375 	struct rdma_ucm_join_ip_mcast cmd;  in ucma_join_ip_multicast()  local
1378 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_join_ip_multicast()
1381 	join_cmd.response = cmd.response;  in ucma_join_ip_multicast()
1382 	join_cmd.uid = cmd.uid;  in ucma_join_ip_multicast()
1383 	join_cmd.id = cmd.id;  in ucma_join_ip_multicast()
1384 	join_cmd.addr_size = rdma_addr_size((struct sockaddr *) &cmd.addr);  in ucma_join_ip_multicast()
1386 	memcpy(&join_cmd.addr, &cmd.addr, join_cmd.addr_size);  in ucma_join_ip_multicast()
1395 	struct rdma_ucm_join_mcast cmd;  in ucma_join_multicast()  local
1397 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_join_multicast()
1400 	return ucma_process_join(file, &cmd, out_len);  in ucma_join_multicast()
1407 	struct rdma_ucm_destroy_id cmd;  in ucma_leave_multicast()  local
1415 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_leave_multicast()
1419 	mc = idr_find(&multicast_idr, cmd.id);  in ucma_leave_multicast()
1445 	if (copy_to_user((void __user *)(unsigned long)cmd.response,  in ucma_leave_multicast()
1488 	struct rdma_ucm_migrate_id cmd;  in ucma_migrate_id()  local
1495 	if (copy_from_user(&cmd, inbuf, sizeof(cmd)))  in ucma_migrate_id()
1499 	f = fdget(cmd.fd);  in ucma_migrate_id()
1504 	ctx = ucma_get_ctx(f.file->private_data, cmd.id);  in ucma_migrate_id()
1532 	if (copy_to_user((void __user *)(unsigned long)cmd.response,  in ucma_migrate_id()
1586 	if (hdr.cmd >= ARRAY_SIZE(ucma_cmd_table))  in ucma_write()
1592 	if (!ucma_cmd_table[hdr.cmd])  in ucma_write()
1595 	ret = ucma_cmd_table[hdr.cmd](file, buf + sizeof(hdr), hdr.in, hdr.out);  in ucma_write()