1362 	struct smb_query_info qi;  in smb2_ioctl_query_info()  local
1387 	if (copy_from_user(&qi, arg, sizeof(struct smb_query_info)))  in smb2_ioctl_query_info()
1390 	if (qi.output_buffer_length > 1024)  in smb2_ioctl_query_info()
1399 	buffer = kmalloc(qi.output_buffer_length, GFP_KERNEL);  in smb2_ioctl_query_info()
1404 			   qi.output_buffer_length)) {  in smb2_ioctl_query_info()
1424 	if (qi.flags & PASSTHRU_FSCTL) {  in smb2_ioctl_query_info()
1425 		switch (qi.info_type & FSCTL_DEVICE_ACCESS_MASK) {  in smb2_ioctl_query_info()
1439 	} else if (qi.flags & PASSTHRU_SET_INFO) {  in smb2_ioctl_query_info()
1451 	if (qi.flags & PASSTHRU_FSCTL) {  in smb2_ioctl_query_info()
1462 					     qi.info_type, true, buffer,  in smb2_ioctl_query_info()
1463 					     qi.output_buffer_length,  in smb2_ioctl_query_info()
1468 	} else if (qi.flags == PASSTHRU_SET_INFO) {  in smb2_ioctl_query_info()
1486 	} else if (qi.flags == PASSTHRU_QUERY_INFO) {  in smb2_ioctl_query_info()
1492 				  COMPOUND_FID, qi.file_info_class,  in smb2_ioctl_query_info()
1493 				  qi.info_type, qi.additional_information,  in smb2_ioctl_query_info()
1494 				  qi.input_buffer_length,  in smb2_ioctl_query_info()
1495 				  qi.output_buffer_length, buffer);  in smb2_ioctl_query_info()
1497 		cifs_tcon_dbg(VFS, "invalid passthru query flags: 0x%x\n", qi.flags);  in smb2_ioctl_query_info()
1522 	if (qi.flags & PASSTHRU_FSCTL) {  in smb2_ioctl_query_info()
1525 		if (le32_to_cpu(io_rsp->OutputCount) < qi.input_buffer_length)  in smb2_ioctl_query_info()
1526 			qi.input_buffer_length = le32_to_cpu(io_rsp->OutputCount);  in smb2_ioctl_query_info()
1527 		if (qi.input_buffer_length > 0 &&  in smb2_ioctl_query_info()
1528 		    le32_to_cpu(io_rsp->OutputOffset) + qi.input_buffer_length > rsp_iov[1].iov_len) {  in smb2_ioctl_query_info()
1532 		if (copy_to_user(&pqi->input_buffer_length, &qi.input_buffer_length,  in smb2_ioctl_query_info()
1533 				 sizeof(qi.input_buffer_length))) {  in smb2_ioctl_query_info()
1539 				 qi.input_buffer_length)) {  in smb2_ioctl_query_info()
1546 		if (le32_to_cpu(qi_rsp->OutputBufferLength) < qi.input_buffer_length)  in smb2_ioctl_query_info()
1547 			qi.input_buffer_length = le32_to_cpu(qi_rsp->OutputBufferLength);  in smb2_ioctl_query_info()
1548 		if (copy_to_user(&pqi->input_buffer_length, &qi.input_buffer_length,  in smb2_ioctl_query_info()
1549 				 sizeof(qi.input_buffer_length))) {  in smb2_ioctl_query_info()
1553 		if (copy_to_user(pqi + 1, qi_rsp->Buffer, qi.input_buffer_length)) {  in smb2_ioctl_query_info()
1562 	if (qi.flags & PASSTHRU_FSCTL)  in smb2_ioctl_query_info()