441 	struct drm_buf_info __user *request;  in compat_drm_infobufs()  local
458 	nbytes = sizeof(*request) + count * sizeof(struct drm_buf_desc);  in compat_drm_infobufs()
459 	request = compat_alloc_user_space(nbytes);  in compat_drm_infobufs()
460 	if (!access_ok(VERIFY_WRITE, request, nbytes))  in compat_drm_infobufs()
462 	list = (struct drm_buf_desc *) (request + 1);  in compat_drm_infobufs()
464 	if (__put_user(count, &request->count)  in compat_drm_infobufs()
465 	    || __put_user(list, &request->list))  in compat_drm_infobufs()
468 	err = drm_ioctl(file, DRM_IOCTL_INFO_BUFS, (unsigned long)request);  in compat_drm_infobufs()
472 	if (__get_user(actual, &request->count))  in compat_drm_infobufs()
505 	struct drm_buf_map __user *request;  in compat_drm_mapbufs()  local
519 	nbytes = sizeof(*request) + count * sizeof(struct drm_buf_pub);  in compat_drm_mapbufs()
520 	request = compat_alloc_user_space(nbytes);  in compat_drm_mapbufs()
521 	if (!access_ok(VERIFY_WRITE, request, nbytes))  in compat_drm_mapbufs()
523 	list = (struct drm_buf_pub *) (request + 1);  in compat_drm_mapbufs()
525 	if (__put_user(count, &request->count)  in compat_drm_mapbufs()
526 	    || __put_user(list, &request->list))  in compat_drm_mapbufs()
529 	err = drm_ioctl(file, DRM_IOCTL_MAP_BUFS, (unsigned long)request);  in compat_drm_mapbufs()
533 	if (__get_user(actual, &request->count))  in compat_drm_mapbufs()
545 	    || __get_user(addr, &request->virtual)  in compat_drm_mapbufs()
561 	struct drm_buf_free __user *request;  in compat_drm_freebufs()  local
567 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_freebufs()
568 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request)))  in compat_drm_freebufs()
570 	if (__put_user(req32.count, &request->count)  in compat_drm_freebufs()
572 			  &request->list))  in compat_drm_freebufs()
575 	return drm_ioctl(file, DRM_IOCTL_FREE_BUFS, (unsigned long)request);  in compat_drm_freebufs()
587 	struct drm_ctx_priv_map __user *request;  in compat_drm_setsareactx()  local
593 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_setsareactx()
594 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request)))  in compat_drm_setsareactx()
596 	if (__put_user(req32.ctx_id, &request->ctx_id)  in compat_drm_setsareactx()
598 			  &request->handle))  in compat_drm_setsareactx()
601 	return drm_ioctl(file, DRM_IOCTL_SET_SAREA_CTX, (unsigned long)request);  in compat_drm_setsareactx()
607 	struct drm_ctx_priv_map __user *request;  in compat_drm_getsareactx()  local
617 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_getsareactx()
618 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request)))  in compat_drm_getsareactx()
620 	if (__put_user(ctx_id, &request->ctx_id))  in compat_drm_getsareactx()
623 	err = drm_ioctl(file, DRM_IOCTL_GET_SAREA_CTX, (unsigned long)request);  in compat_drm_getsareactx()
627 	if (__get_user(handle, &request->handle)  in compat_drm_getsareactx()
805 	struct drm_agp_buffer __user *request;  in compat_drm_agp_alloc()  local
811 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_agp_alloc()
812 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request))  in compat_drm_agp_alloc()
813 	    || __put_user(req32.size, &request->size)  in compat_drm_agp_alloc()
814 	    || __put_user(req32.type, &request->type))  in compat_drm_agp_alloc()
817 	err = drm_ioctl(file, DRM_IOCTL_AGP_ALLOC, (unsigned long)request);  in compat_drm_agp_alloc()
821 	if (__get_user(req32.handle, &request->handle)  in compat_drm_agp_alloc()
822 	    || __get_user(req32.physical, &request->physical)  in compat_drm_agp_alloc()
824 		drm_ioctl(file, DRM_IOCTL_AGP_FREE, (unsigned long)request);  in compat_drm_agp_alloc()
835 	struct drm_agp_buffer __user *request;  in compat_drm_agp_free()  local
838 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_agp_free()
839 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request))  in compat_drm_agp_free()
841 	    || __put_user(handle, &request->handle))  in compat_drm_agp_free()
844 	return drm_ioctl(file, DRM_IOCTL_AGP_FREE, (unsigned long)request);  in compat_drm_agp_free()
857 	struct drm_agp_binding __user *request;  in compat_drm_agp_bind()  local
862 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_agp_bind()
863 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request))  in compat_drm_agp_bind()
864 	    || __put_user(req32.handle, &request->handle)  in compat_drm_agp_bind()
865 	    || __put_user(req32.offset, &request->offset))  in compat_drm_agp_bind()
868 	return drm_ioctl(file, DRM_IOCTL_AGP_BIND, (unsigned long)request);  in compat_drm_agp_bind()
875 	struct drm_agp_binding __user *request;  in compat_drm_agp_unbind()  local
878 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_agp_unbind()
879 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request))  in compat_drm_agp_unbind()
881 	    || __put_user(handle, &request->handle))  in compat_drm_agp_unbind()
884 	return drm_ioctl(file, DRM_IOCTL_AGP_UNBIND, (unsigned long)request);  in compat_drm_agp_unbind()
897 	struct drm_scatter_gather __user *request;  in compat_drm_sg_alloc()  local
901 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_sg_alloc()
902 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request))  in compat_drm_sg_alloc()
905 	    || __put_user(x, &request->size))  in compat_drm_sg_alloc()
908 	err = drm_ioctl(file, DRM_IOCTL_SG_ALLOC, (unsigned long)request);  in compat_drm_sg_alloc()
913 	if (__get_user(x, &request->handle)  in compat_drm_sg_alloc()
924 	struct drm_scatter_gather __user *request;  in compat_drm_sg_free()  local
927 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_sg_free()
928 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request))  in compat_drm_sg_free()
931 	    || __put_user(x << PAGE_SHIFT, &request->handle))  in compat_drm_sg_free()
934 	return drm_ioctl(file, DRM_IOCTL_SG_FREE, (unsigned long)request);  in compat_drm_sg_free()
950 	struct drm_update_draw __user *request;  in compat_drm_update_draw()  local
956 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_update_draw()
957 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request)) ||  in compat_drm_update_draw()
958 	    __put_user(update32.handle, &request->handle) ||  in compat_drm_update_draw()
959 	    __put_user(update32.type, &request->type) ||  in compat_drm_update_draw()
960 	    __put_user(update32.num, &request->num) ||  in compat_drm_update_draw()
961 	    __put_user(update32.data, &request->data))  in compat_drm_update_draw()
964 	err = drm_ioctl(file, DRM_IOCTL_UPDATE_DRAW, (unsigned long)request);  in compat_drm_update_draw()
983 	struct drm_wait_vblank_request32 request;  member
992 	union drm_wait_vblank __user *request;  in compat_drm_wait_vblank()  local
998 	request = compat_alloc_user_space(sizeof(*request));  in compat_drm_wait_vblank()
999 	if (!access_ok(VERIFY_WRITE, request, sizeof(*request))  in compat_drm_wait_vblank()
1000 	    || __put_user(req32.request.type, &request->request.type)  in compat_drm_wait_vblank()
1001 	    || __put_user(req32.request.sequence, &request->request.sequence)  in compat_drm_wait_vblank()
1002 	    || __put_user(req32.request.signal, &request->request.signal))  in compat_drm_wait_vblank()
1005 	err = drm_ioctl(file, DRM_IOCTL_WAIT_VBLANK, (unsigned long)request);  in compat_drm_wait_vblank()
1009 	if (__get_user(req32.reply.type, &request->reply.type)  in compat_drm_wait_vblank()
1010 	    || __get_user(req32.reply.sequence, &request->reply.sequence)  in compat_drm_wait_vblank()
1011 	    || __get_user(req32.reply.tval_sec, &request->reply.tval_sec)  in compat_drm_wait_vblank()
1012 	    || __get_user(req32.reply.tval_usec, &request->reply.tval_usec))  in compat_drm_wait_vblank()