262 	struct rio_mport_maint_io maint_io;  in rio_mport_maint_rd()  local
268 	if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))  in rio_mport_maint_rd()
271 	if ((maint_io.offset % 4) ||  in rio_mport_maint_rd()
272 	    (maint_io.length == 0) || (maint_io.length % 4) ||  in rio_mport_maint_rd()
273 	    (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)  in rio_mport_maint_rd()
276 	buffer = vmalloc(maint_io.length);  in rio_mport_maint_rd()
279 	length = maint_io.length/sizeof(u32);  in rio_mport_maint_rd()
280 	offset = maint_io.offset;  in rio_mport_maint_rd()
287 			ret = rio_mport_read_config_32(mport, maint_io.rioid,  in rio_mport_maint_rd()
288 				maint_io.hopcount, offset, &buffer[i]);  in rio_mport_maint_rd()
295 	if (unlikely(copy_to_user((void __user *)(uintptr_t)maint_io.buffer,  in rio_mport_maint_rd()
296 				   buffer, maint_io.length)))  in rio_mport_maint_rd()
307 	struct rio_mport_maint_io maint_io;  in rio_mport_maint_wr()  local
313 	if (unlikely(copy_from_user(&maint_io, arg, sizeof(maint_io))))  in rio_mport_maint_wr()
316 	if ((maint_io.offset % 4) ||  in rio_mport_maint_wr()
317 	    (maint_io.length == 0) || (maint_io.length % 4) ||  in rio_mport_maint_wr()
318 	    (maint_io.length + maint_io.offset) > RIO_MAINT_SPACE_SZ)  in rio_mport_maint_wr()
321 	buffer = vmalloc(maint_io.length);  in rio_mport_maint_wr()
324 	length = maint_io.length;  in rio_mport_maint_wr()
327 			(void __user *)(uintptr_t)maint_io.buffer, length))) {  in rio_mport_maint_wr()
332 	offset = maint_io.offset;  in rio_mport_maint_wr()
340 			ret = rio_mport_write_config_32(mport, maint_io.rioid,  in rio_mport_maint_wr()
341 							maint_io.hopcount,  in rio_mport_maint_wr()