1496 	struct smb_query_info qi;  in smb2_ioctl_query_info()  local
1520 	if (copy_from_user(&qi, arg, sizeof(struct smb_query_info))) {  in smb2_ioctl_query_info()
1524 	if (qi.output_buffer_length > 1024) {  in smb2_ioctl_query_info()
1537 	if (qi.output_buffer_length) {  in smb2_ioctl_query_info()
1538 		buffer = memdup_user(arg + sizeof(struct smb_query_info), qi.output_buffer_length);  in smb2_ioctl_query_info()
1556 	if (qi.flags & PASSTHRU_FSCTL) {  in smb2_ioctl_query_info()
1557 		switch (qi.info_type & FSCTL_DEVICE_ACCESS_MASK) {  in smb2_ioctl_query_info()
1571 	} else if (qi.flags & PASSTHRU_SET_INFO) {  in smb2_ioctl_query_info()
1584 	if (qi.flags & PASSTHRU_FSCTL) {  in smb2_ioctl_query_info()
1594 				     qi.info_type, buffer, qi.output_buffer_length,  in smb2_ioctl_query_info()
1598 	} else if (qi.flags == PASSTHRU_SET_INFO) {  in smb2_ioctl_query_info()
1604 		if (qi.output_buffer_length < 8) {  in smb2_ioctl_query_info()
1619 	} else if (qi.flags == PASSTHRU_QUERY_INFO) {  in smb2_ioctl_query_info()
1625 				  COMPOUND_FID, qi.file_info_class,  in smb2_ioctl_query_info()
1626 				  qi.info_type, qi.additional_information,  in smb2_ioctl_query_info()
1627 				  qi.input_buffer_length,  in smb2_ioctl_query_info()
1628 				  qi.output_buffer_length, buffer);  in smb2_ioctl_query_info()
1632 			      qi.flags);  in smb2_ioctl_query_info()
1658 	if (qi.flags & PASSTHRU_FSCTL) {  in smb2_ioctl_query_info()
1661 		if (le32_to_cpu(io_rsp->OutputCount) < qi.input_buffer_length)  in smb2_ioctl_query_info()
1662 			qi.input_buffer_length = le32_to_cpu(io_rsp->OutputCount);  in smb2_ioctl_query_info()
1663 		if (qi.input_buffer_length > 0 &&  in smb2_ioctl_query_info()
1664 		    le32_to_cpu(io_rsp->OutputOffset) + qi.input_buffer_length  in smb2_ioctl_query_info()
1671 				 &qi.input_buffer_length,  in smb2_ioctl_query_info()
1672 				 sizeof(qi.input_buffer_length))) {  in smb2_ioctl_query_info()
1679 				 qi.input_buffer_length))  in smb2_ioctl_query_info()
1684 		if (le32_to_cpu(qi_rsp->OutputBufferLength) < qi.input_buffer_length)  in smb2_ioctl_query_info()
1685 			qi.input_buffer_length = le32_to_cpu(qi_rsp->OutputBufferLength);  in smb2_ioctl_query_info()
1687 				 &qi.input_buffer_length,  in smb2_ioctl_query_info()
1688 				 sizeof(qi.input_buffer_length))) {  in smb2_ioctl_query_info()
1694 				 qi.input_buffer_length))  in smb2_ioctl_query_info()