accel/qaic/qaic_control.c

231 	void *trans_hdr;
617 	resources->trans_hdr = trans;
755 	struct qaic_manage_trans_hdr *trans_hdr;
763 	    user_msg->len < sizeof(*trans_hdr)) {
774 		ret = encode_dma(qdev, resources->trans_hdr, wrappers, &user_len, resources, usr);
780 		if (user_len > user_msg->len - sizeof(*trans_hdr)) {
784 		trans_hdr = (struct qaic_manage_trans_hdr *)(user_msg->data + user_len);
785 		if (trans_hdr->len < sizeof(trans_hdr) ||
786 		    size_add(user_len, trans_hdr->len) > user_msg->len) {
791 		switch (trans_hdr->type) {
793 			ret = encode_passthrough(qdev, trans_hdr, wrappers, &user_len);
796 			ret = encode_dma(qdev, trans_hdr, wrappers, &user_len, resources, usr);
799 			ret = encode_activate(qdev, trans_hdr, wrappers, &user_len, resources);
802 			ret = encode_deactivate(qdev, trans_hdr, &user_len, usr);
805 			ret = encode_status(qdev, trans_hdr, wrappers, &user_len);
964 	struct wire_trans_hdr *trans_hdr;
969 	if (msg_hdr_len < sizeof(*trans_hdr) ||
979 		if (msg_len > msg_hdr_len - sizeof(*trans_hdr))
982 		trans_hdr = (struct wire_trans_hdr *)(msg->data + msg_len);
983 		hdr_len = le32_to_cpu(trans_hdr->len);
984 		if (hdr_len < sizeof(*trans_hdr) ||
988 		switch (le32_to_cpu(trans_hdr->type)) {
990 			ret = decode_passthrough(qdev, trans_hdr, user_msg, &msg_len);
993 			ret = decode_activate(qdev, trans_hdr, user_msg, &msg_len, resources, usr);
996 			ret = decode_deactivate(qdev, trans_hdr, &msg_len, usr);
999 			ret = decode_status(qdev, trans_hdr, user_msg, &msg_len, msg);