362 	struct ax25_ctl_struct ax25_ctl;  in ax25_ctl_ioctl()  local
369 	if (copy_from_user(&ax25_ctl, arg, sizeof(ax25_ctl)))  in ax25_ctl_ioctl()
372 	if (ax25_ctl.digi_count > AX25_MAX_DIGIS)  in ax25_ctl_ioctl()
375 	if (ax25_ctl.arg > ULONG_MAX / HZ && ax25_ctl.cmd != AX25_KILL)  in ax25_ctl_ioctl()
378 	ax25_dev = ax25_addr_ax25dev(&ax25_ctl.port_addr);  in ax25_ctl_ioctl()
382 	digi.ndigi = ax25_ctl.digi_count;  in ax25_ctl_ioctl()
384 		digi.calls[k] = ax25_ctl.digi_addr[k];  in ax25_ctl_ioctl()
386 	ax25 = ax25_find_cb(&ax25_ctl.source_addr, &ax25_ctl.dest_addr, &digi, ax25_dev->dev);  in ax25_ctl_ioctl()
392 	switch (ax25_ctl.cmd) {  in ax25_ctl_ioctl()
404 			if (ax25_ctl.arg < 1 || ax25_ctl.arg > 7)  in ax25_ctl_ioctl()
407 			if (ax25_ctl.arg < 1 || ax25_ctl.arg > 63)  in ax25_ctl_ioctl()
410 		ax25->window = ax25_ctl.arg;  in ax25_ctl_ioctl()
414 		if (ax25_ctl.arg < 1 || ax25_ctl.arg > ULONG_MAX / HZ)  in ax25_ctl_ioctl()
416 		ax25->rtt = (ax25_ctl.arg * HZ) / 2;  in ax25_ctl_ioctl()
417 		ax25->t1  = ax25_ctl.arg * HZ;  in ax25_ctl_ioctl()
421 		if (ax25_ctl.arg < 1 || ax25_ctl.arg > ULONG_MAX / HZ)  in ax25_ctl_ioctl()
423 		ax25->t2 = ax25_ctl.arg * HZ;  in ax25_ctl_ioctl()
427 		if (ax25_ctl.arg < 1 || ax25_ctl.arg > 31)  in ax25_ctl_ioctl()
430 		ax25->n2 = ax25_ctl.arg;  in ax25_ctl_ioctl()
434 		if (ax25_ctl.arg > ULONG_MAX / HZ)  in ax25_ctl_ioctl()
436 		ax25->t3 = ax25_ctl.arg * HZ;  in ax25_ctl_ioctl()
440 		if (ax25_ctl.arg > ULONG_MAX / (60 * HZ))  in ax25_ctl_ioctl()
443 		ax25->idle = ax25_ctl.arg * 60 * HZ;  in ax25_ctl_ioctl()
447 		if (ax25_ctl.arg < 16 || ax25_ctl.arg > 65535)  in ax25_ctl_ioctl()
449 		ax25->paclen = ax25_ctl.arg;  in ax25_ctl_ioctl()