patch-2_6_7-vs1_9_1_12
[linux-2.6.git] / arch / sparc64 / kernel / sys_sparc32.c
index ff7f7d1..e55f9e4 100644 (file)
 #include <asm/semaphore.h>
 #include <asm/mmu_context.h>
 
-/* Use this to get at 32-bit user passed pointers. */
-/* Things to consider: the low-level assembly stub does
-   srl x, 0, x for first four arguments, so if you have
-   pointer to something in the first four arguments, just
-   declare it as a pointer, not u32. On the other side, 
-   arguments from 5th onwards should be declared as u32
-   for pointers, and need AA() around each usage.
-   A() macro should be used for places where you e.g.
-   have some internal variable u32 and just want to get
-   rid of a compiler warning. AA() has to be used in
-   places where you want to convert a function argument
-   to 32bit pointer or when you e.g. access pt_regs
-   structure and want to consider 32bit registers only.
-   -jj
- */
-#define A(__x) ((unsigned long)(__x))
-#define AA(__x)                                \
-({     unsigned long __ret;            \
-       __asm__ ("srl   %0, 0, %0"      \
-                : "=r" (__ret)         \
-                : "0" (__x));          \
-       __ret;                          \
-})
-
-asmlinkage long sys32_chown16(const char * filename, u16 user, u16 group)
+asmlinkage long sys32_chown16(const char __user * filename, u16 user, u16 group)
 {
        return sys_chown(filename, low2highuid(user), low2highgid(group));
 }
 
-asmlinkage long sys32_lchown16(const char * filename, u16 user, u16 group)
+asmlinkage long sys32_lchown16(const char __user * filename, u16 user, u16 group)
 {
        return sys_lchown(filename, low2highuid(user), low2highgid(group));
 }
@@ -128,7 +103,7 @@ asmlinkage long sys32_setresuid16(u16 ruid, u16 euid, u16 suid)
                low2highuid(suid));
 }
 
-asmlinkage long sys32_getresuid16(u16 *ruid, u16 *euid, u16 *suid)
+asmlinkage long sys32_getresuid16(u16 __user *ruid, u16 __user *euid, u16 __user *suid)
 {
        int retval;
 
@@ -145,7 +120,7 @@ asmlinkage long sys32_setresgid16(u16 rgid, u16 egid, u16 sgid)
                low2highgid(sgid));
 }
 
-asmlinkage long sys32_getresgid16(u16 *rgid, u16 *egid, u16 *sgid)
+asmlinkage long sys32_getresgid16(u16 __user *rgid, u16 __user *egid, u16 __user *sgid)
 {
        int retval;
 
@@ -166,7 +141,7 @@ asmlinkage long sys32_setfsgid16(u16 gid)
        return sys_setfsgid((gid_t)gid);
 }
 
-static int groups16_to_user(u16 *grouplist, struct group_info *group_info)
+static int groups16_to_user(u16 __user *grouplist, struct group_info *group_info)
 {
        int i;
        u16 group;
@@ -180,7 +155,7 @@ static int groups16_to_user(u16 *grouplist, struct group_info *group_info)
        return 0;
 }
 
-static int groups16_from_user(struct group_info *group_info, u16 *grouplist)
+static int groups16_from_user(struct group_info *group_info, u16 __user *grouplist)
 {
        int i;
        u16 group;
@@ -194,7 +169,7 @@ static int groups16_from_user(struct group_info *group_info, u16 *grouplist)
        return 0;
 }
 
-asmlinkage long sys32_getgroups16(int gidsetsize, u16 *grouplist)
+asmlinkage long sys32_getgroups16(int gidsetsize, u16 __user *grouplist)
 {
        int i;
 
@@ -218,7 +193,7 @@ out:
        return i;
 }
 
-asmlinkage long sys32_setgroups16(int gidsetsize, u16 *grouplist)
+asmlinkage long sys32_setgroups16(int gidsetsize, u16 __user *grouplist)
 {
        struct group_info *group_info;
        int retval;
@@ -265,14 +240,14 @@ asmlinkage long sys32_getegid16(void)
 
 /* 32-bit timeval and related flotsam.  */
 
-static long get_tv32(struct timeval *o, struct compat_timeval *i)
+static long get_tv32(struct timeval *o, struct compat_timeval __user *i)
 {
        return (!access_ok(VERIFY_READ, tv32, sizeof(*tv32)) ||
                (__get_user(o->tv_sec, &i->tv_sec) |
                 __get_user(o->tv_usec, &i->tv_usec)));
 }
 
-static inline long put_tv32(struct compat_timeval *o, struct timeval *i)
+static inline long put_tv32(struct compat_timeval __user *o, struct timeval *i)
 {
        return (!access_ok(VERIFY_WRITE, o, sizeof(*o)) ||
                (__put_user(i->tv_sec, &o->tv_sec) |
@@ -281,8 +256,7 @@ static inline long put_tv32(struct compat_timeval *o, struct timeval *i)
 
 struct msgbuf32 { s32 mtype; char mtext[1]; };
 
-struct ipc_perm32
-{
+struct ipc_perm32 {
        key_t             key;
         compat_uid_t  uid;
         compat_gid_t  gid;
@@ -383,21 +357,22 @@ struct shmid64_ds32 {
  * This is really horribly ugly.
  */
 #define IPCOP_MASK(__x)        (1UL << ((__x)&~IPC_64))
-static int do_sys32_semctl(int first, int second, int third, void *uptr)
+static int do_sys32_semctl(int first, int second, int third,
+                          compat_uptr_t __user *uptr)
 {
        union semun fourth;
-       u32 pad;
+       compat_uptr_t pad;
        int err = -EINVAL;
 
        if (!uptr)
                goto out;
        err = -EFAULT;
-       if (get_user (pad, (u32 *)uptr))
+       if (get_user(pad, uptr))
                goto out;
        if ((third & ~IPC_64) == SETVAL)
                fourth.val = (int)pad;
        else
-               fourth.__pad = (void *)A(pad);
+               fourth.__pad = compat_ptr(pad);
        if (IPCOP_MASK (third) &
            (IPCOP_MASK (IPC_INFO) | IPCOP_MASK (SEM_INFO) | IPCOP_MASK (GETVAL) |
             IPCOP_MASK (GETPID) | IPCOP_MASK (GETNCNT) | IPCOP_MASK (GETZCNT) |
@@ -405,7 +380,7 @@ static int do_sys32_semctl(int first, int second, int third, void *uptr)
                err = sys_semctl (first, second, third, fourth);
        } else if (third & IPC_64) {
                struct semid64_ds s;
-               struct semid64_ds32 *usp = (struct semid64_ds32 *)A(pad);
+               struct semid64_ds32 __user *usp = compat_ptr(pad);
                mm_segment_t old_fs;
                int need_back_translation;
 
@@ -415,13 +390,13 @@ static int do_sys32_semctl(int first, int second, int third, void *uptr)
                        err |= __get_user (s.sem_perm.mode, &usp->sem_perm.mode);
                        if (err)
                                goto out;
-                       fourth.__pad = &s;
+                       fourth.__pad = (void __user *) &s;
                }
                need_back_translation =
                        (IPCOP_MASK (third) &
                         (IPCOP_MASK (SEM_STAT) | IPCOP_MASK (IPC_STAT))) != 0;
                if (need_back_translation)
-                       fourth.__pad = &s;
+                       fourth.__pad = (void __user *) &s;
                old_fs = get_fs ();
                set_fs (KERNEL_DS);
                err = sys_semctl (first, second, third, fourth);
@@ -433,7 +408,7 @@ static int do_sys32_semctl(int first, int second, int third, void *uptr)
                }
        } else {
                struct semid_ds s;
-               struct semid_ds32 *usp = (struct semid_ds32 *)A(pad);
+               struct semid_ds32 __user *usp = compat_ptr(pad);
                mm_segment_t old_fs;
                int need_back_translation;
 
@@ -443,13 +418,13 @@ static int do_sys32_semctl(int first, int second, int third, void *uptr)
                        err |= __get_user (s.sem_perm.mode, &usp->sem_perm.mode);
                        if (err)
                                goto out;
-                       fourth.__pad = &s;
+                       fourth.__pad = (void __user *) &s;
                }
                need_back_translation =
                        (IPCOP_MASK (third) &
                         (IPCOP_MASK (SEM_STAT) | IPCOP_MASK (IPC_STAT))) != 0;
                if (need_back_translation)
-                       fourth.__pad = &s;
+                       fourth.__pad = (void __user *) &s;
                old_fs = get_fs ();
                set_fs (KERNEL_DS);
                err = sys_semctl (first, second, third, fourth);
@@ -472,13 +447,15 @@ out:
        return err;
 }
 
-static int do_sys32_msgsnd (int first, int second, int third, void *uptr)
+static int do_sys32_msgsnd(int first, int second, int third,
+                          void __user *uptr)
 {
-       struct msgbuf *p = kmalloc (second + sizeof (struct msgbuf), GFP_USER);
-       struct msgbuf32 *up = (struct msgbuf32 *)uptr;
+       struct msgbuf32 __user *up = uptr;
+       struct msgbuf *p;
        mm_segment_t old_fs;
        int err;
 
+       p = kmalloc(second + sizeof (struct msgbuf), GFP_USER);
        if (!p)
                return -ENOMEM;
        err = -EFAULT;
@@ -487,45 +464,48 @@ static int do_sys32_msgsnd (int first, int second, int third, void *uptr)
                goto out;
        old_fs = get_fs ();
        set_fs (KERNEL_DS);
-       err = sys_msgsnd (first, p, second, third);
+       err = sys_msgsnd (first, (struct msgbuf __user *) p,
+                         second, third);
        set_fs (old_fs);
 out:
        kfree (p);
        return err;
 }
 
-static int do_sys32_msgrcv (int first, int second, int msgtyp, int third,
-                           int version, void *uptr)
+static int do_sys32_msgrcv(int first, int second, int msgtyp, int third,
+                          int version, void __user *uptr)
 {
-       struct msgbuf32 *up;
+       struct msgbuf32 __user *up;
        struct msgbuf *p;
        mm_segment_t old_fs;
        int err;
 
        if (!version) {
-               struct ipc_kludge *uipck = (struct ipc_kludge *)uptr;
+               struct ipc_kludge __user *uipck = uptr;
                struct ipc_kludge ipck;
 
                err = -EINVAL;
                if (!uptr)
                        goto out;
                err = -EFAULT;
-               if (copy_from_user (&ipck, uipck, sizeof (struct ipc_kludge)))
+               if (copy_from_user (&ipck, uipck,
+                                   sizeof (struct ipc_kludge)))
                        goto out;
-               uptr = (void *)A(ipck.msgp);
+               uptr = compat_ptr(ipck.msgp);
                msgtyp = ipck.msgtyp;
        }
        err = -ENOMEM;
-       p = kmalloc (second + sizeof (struct msgbuf), GFP_USER);
+       p = kmalloc(second + sizeof (struct msgbuf), GFP_USER);
        if (!p)
                goto out;
        old_fs = get_fs ();
        set_fs (KERNEL_DS);
-       err = sys_msgrcv (first, p, second, msgtyp, third);
+       err = sys_msgrcv (first, (struct msgbuf __user *) p, second,
+                         msgtyp, third);
        set_fs (old_fs);
        if (err < 0)
                goto free_then_out;
-       up = (struct msgbuf32 *)uptr;
+       up = uptr;
        if (put_user (p->mtype, &up->mtype) ||
            __copy_to_user (&up->mtext, p->mtext, err))
                err = -EFAULT;
@@ -535,37 +515,46 @@ out:
        return err;
 }
 
-static int do_sys32_msgctl (int first, int second, void *uptr)
+static int do_sys32_msgctl(int first, int second, void __user *uptr)
 {
        int err;
 
        if (IPCOP_MASK (second) &
            (IPCOP_MASK (IPC_INFO) | IPCOP_MASK (MSG_INFO) |
             IPCOP_MASK (IPC_RMID))) {
-               err = sys_msgctl (first, second, (struct msqid_ds *)uptr);
+               err = sys_msgctl (first, second, uptr);
        } else if (second & IPC_64) {
                struct msqid64_ds m;
-               struct msqid64_ds32 *up = (struct msqid64_ds32 *)uptr;
+               struct msqid64_ds32 __user *up = uptr;
                mm_segment_t old_fs;
 
                if (second == (IPC_SET|IPC_64)) {
-                       err = get_user (m.msg_perm.uid, &up->msg_perm.uid);
-                       err |= __get_user (m.msg_perm.gid, &up->msg_perm.gid);
-                       err |= __get_user (m.msg_perm.mode, &up->msg_perm.mode);
-                       err |= __get_user (m.msg_qbytes, &up->msg_qbytes);
+                       err = get_user (m.msg_perm.uid,
+                                       &up->msg_perm.uid);
+                       err |= __get_user (m.msg_perm.gid,
+                                          &up->msg_perm.gid);
+                       err |= __get_user (m.msg_perm.mode,
+                                          &up->msg_perm.mode);
+                       err |= __get_user (m.msg_qbytes,
+                                          &up->msg_qbytes);
                        if (err)
                                goto out;
                }
                old_fs = get_fs ();
                set_fs (KERNEL_DS);
-               err = sys_msgctl (first, second, (struct msqid_ds *)&m);
+               err = sys_msgctl(first, second,
+                                (struct msqid_ds __user *)&m);
                set_fs (old_fs);
                if (IPCOP_MASK (second) &
                    (IPCOP_MASK (MSG_STAT) | IPCOP_MASK (IPC_STAT))) {
-                       int err2 = copy_to_user(&up->msg_perm, &m.msg_perm, sizeof(struct ipc64_perm) + 3*sizeof(time_t));
-                       err2 |= __put_user (m.msg_cbytes, &up->msg_cbytes);
+                       int err2 = copy_to_user(&up->msg_perm,
+                                               &m.msg_perm,
+                                               (sizeof(struct ipc64_perm) + 3*sizeof(time_t)));
+                       err2 |= __put_user (m.msg_cbytes,
+                                           &up->msg_cbytes);
                        err2 |= __put_user (m.msg_qnum, &up->msg_qnum);
-                       err2 |= __put_user (m.msg_qbytes, &up->msg_qbytes);
+                       err2 |= __put_user (m.msg_qbytes,
+                                           &up->msg_qbytes);
                        err2 |= __put_user (m.msg_lspid, &up->msg_lspid);
                        err2 |= __put_user (m.msg_lrpid, &up->msg_lrpid);
                        if (err2)
@@ -573,38 +562,52 @@ static int do_sys32_msgctl (int first, int second, void *uptr)
                }
        } else {
                struct msqid_ds m;
-               struct msqid_ds32 *up = (struct msqid_ds32 *)uptr;
+               struct msqid_ds32 __user *up = uptr;
                mm_segment_t old_fs;
 
                if (second == IPC_SET) {
-                       err = get_user (m.msg_perm.uid, &up->msg_perm.uid);
-                       err |= __get_user (m.msg_perm.gid, &up->msg_perm.gid);
-                       err |= __get_user (m.msg_perm.mode, &up->msg_perm.mode);
-                       err |= __get_user (m.msg_qbytes, &up->msg_qbytes);
+                       err = get_user(m.msg_perm.uid,
+                                      &up->msg_perm.uid);
+                       err |= __get_user(m.msg_perm.gid,
+                                         &up->msg_perm.gid);
+                       err |= __get_user(m.msg_perm.mode,
+                                         &up->msg_perm.mode);
+                       err |= __get_user(m.msg_qbytes,
+                                         &up->msg_qbytes);
                        if (err)
                                goto out;
                }
                old_fs = get_fs ();
                set_fs (KERNEL_DS);
-               err = sys_msgctl (first, second, &m);
+               err = sys_msgctl(first, second,
+                                (struct msqid_ds __user *) &m);
                set_fs (old_fs);
                if (IPCOP_MASK (second) &
                    (IPCOP_MASK (MSG_STAT) | IPCOP_MASK (IPC_STAT))) {
-                       int err2 = put_user (m.msg_perm.key, &up->msg_perm.key);
-                       err2 |= __put_user (high2lowuid(m.msg_perm.uid), &up->msg_perm.uid);
-                       err2 |= __put_user (high2lowgid(m.msg_perm.gid), &up->msg_perm.gid);
-                       err2 |= __put_user (high2lowuid(m.msg_perm.cuid), &up->msg_perm.cuid);
-                       err2 |= __put_user (high2lowgid(m.msg_perm.cgid), &up->msg_perm.cgid);
-                       err2 |= __put_user (m.msg_perm.mode, &up->msg_perm.mode);
-                       err2 |= __put_user (m.msg_perm.seq, &up->msg_perm.seq);
-                       err2 |= __put_user (m.msg_stime, &up->msg_stime);
-                       err2 |= __put_user (m.msg_rtime, &up->msg_rtime);
-                       err2 |= __put_user (m.msg_ctime, &up->msg_ctime);
-                       err2 |= __put_user (m.msg_cbytes, &up->msg_cbytes);
-                       err2 |= __put_user (m.msg_qnum, &up->msg_qnum);
-                       err2 |= __put_user (m.msg_qbytes, &up->msg_qbytes);
-                       err2 |= __put_user (m.msg_lspid, &up->msg_lspid);
-                       err2 |= __put_user (m.msg_lrpid, &up->msg_lrpid);
+                       int err2 = put_user(m.msg_perm.key,
+                                           &up->msg_perm.key);
+                       err2 |= __put_user(high2lowuid(m.msg_perm.uid),
+                                          &up->msg_perm.uid);
+                       err2 |= __put_user(high2lowgid(m.msg_perm.gid),
+                                          &up->msg_perm.gid);
+                       err2 |= __put_user(high2lowuid(m.msg_perm.cuid),
+                                          &up->msg_perm.cuid);
+                       err2 |= __put_user(high2lowgid(m.msg_perm.cgid),
+                                          &up->msg_perm.cgid);
+                       err2 |= __put_user(m.msg_perm.mode,
+                                          &up->msg_perm.mode);
+                       err2 |= __put_user(m.msg_perm.seq,
+                                          &up->msg_perm.seq);
+                       err2 |= __put_user(m.msg_stime, &up->msg_stime);
+                       err2 |= __put_user(m.msg_rtime, &up->msg_rtime);
+                       err2 |= __put_user(m.msg_ctime, &up->msg_ctime);
+                       err2 |= __put_user(m.msg_cbytes,
+                                          &up->msg_cbytes);
+                       err2 |= __put_user(m.msg_qnum, &up->msg_qnum);
+                       err2 |= __put_user(m.msg_qbytes,
+                                          &up->msg_qbytes);
+                       err2 |= __put_user(m.msg_lspid, &up->msg_lspid);
+                       err2 |= __put_user(m.msg_lrpid, &up->msg_lrpid);
                        if (err2)
                                err = -EFAULT;
                }
@@ -614,10 +617,10 @@ out:
        return err;
 }
 
-static int do_sys32_shmat (int first, int second, int third, int version, void *uptr)
+static int do_sys32_shmat (int first, int second, int third, int version, void __user *uptr)
 {
        unsigned long raddr;
-       u32 *uaddr = (u32 *)A((u32)third);
+       u32 __user *uaddr = compat_ptr((compat_uptr_t)third);
        int err = -EINVAL;
 
        if (version == 1)
@@ -630,63 +633,75 @@ out:
        return err;
 }
 
-static int do_sys32_shmctl (int first, int second, void *uptr)
+static int do_sys32_shmctl(int first, int second, void __user *uptr)
 {
        int err;
 
        if (IPCOP_MASK (second) &
-           (IPCOP_MASK (IPC_INFO) | IPCOP_MASK (SHM_LOCK) | IPCOP_MASK (SHM_UNLOCK) |
-            IPCOP_MASK (IPC_RMID))) {
-               if (second == (IPC_INFO|IPC_64))
-                       second = IPC_INFO; /* So that we don't have to translate it */
-               err = sys_shmctl (first, second, (struct shmid_ds *)uptr);
+           (IPCOP_MASK (IPC_INFO) | IPCOP_MASK (SHM_LOCK) |
+            IPCOP_MASK (SHM_UNLOCK) | IPCOP_MASK (IPC_RMID))) {
+               if (second == (IPC_INFO|IPC_64)) {
+                       /* So that we don't have to translate it */
+                       second = IPC_INFO;
+               }
+               err = sys_shmctl(first, second, uptr);
        } else if ((second & IPC_64) && second != (SHM_INFO|IPC_64)) {
                struct shmid64_ds s;
-               struct shmid64_ds32 *up = (struct shmid64_ds32 *)uptr;
+               struct shmid64_ds32 __user *up = uptr;
                mm_segment_t old_fs;
 
                if (second == (IPC_SET|IPC_64)) {
-                       err = get_user (s.shm_perm.uid, &up->shm_perm.uid);
-                       err |= __get_user (s.shm_perm.gid, &up->shm_perm.gid);
-                       err |= __get_user (s.shm_perm.mode, &up->shm_perm.mode);
+                       err = get_user(s.shm_perm.uid,
+                                      &up->shm_perm.uid);
+                       err |= __get_user(s.shm_perm.gid,
+                                         &up->shm_perm.gid);
+                       err |= __get_user(s.shm_perm.mode,
+                                         &up->shm_perm.mode);
                        if (err)
                                goto out;
                }
-               old_fs = get_fs ();
-               set_fs (KERNEL_DS);
-               err = sys_shmctl (first, second, (struct shmid_ds *)&s);
-               set_fs (old_fs);
+               old_fs = get_fs();
+               set_fs(KERNEL_DS);
+               err = sys_shmctl(first, second,
+                                (struct shmid_ds __user *)&s);
+               set_fs(old_fs);
                if (err < 0)
                        goto out;
 
                /* Mask it even in this case so it becomes a CSE. */
                if (IPCOP_MASK (second) &
                    (IPCOP_MASK (SHM_STAT) | IPCOP_MASK (IPC_STAT))) {
-                       int err2 = copy_to_user (&up->shm_perm, &s.shm_perm, sizeof(struct ipc64_perm) + 3*sizeof(time_t));
-                       err2 |= __put_user (s.shm_segsz, &up->shm_segsz);
-                       err2 |= __put_user (s.shm_nattch, &up->shm_nattch);
-                       err2 |= __put_user (s.shm_cpid, &up->shm_cpid);
-                       err2 |= __put_user (s.shm_lpid, &up->shm_lpid);
+                       int err2 = copy_to_user(&up->shm_perm,
+                                               &s.shm_perm,
+                                               sizeof(struct ipc64_perm) + 3*sizeof(time_t));
+                       err2 |= __put_user(s.shm_segsz, &up->shm_segsz);
+                       err2 |= __put_user(s.shm_nattch,&up->shm_nattch);
+                       err2 |= __put_user(s.shm_cpid, &up->shm_cpid);
+                       err2 |= __put_user(s.shm_lpid, &up->shm_lpid);
                        if (err2)
                                err = -EFAULT;
                }
        } else {
                struct shmid_ds s;
-               struct shmid_ds32 *up = (struct shmid_ds32 *)uptr;
+               struct shmid_ds32 __user *up = uptr;
                mm_segment_t old_fs;
 
                second &= ~IPC_64;
                if (second == IPC_SET) {
-                       err = get_user (s.shm_perm.uid, &up->shm_perm.uid);
-                       err |= __get_user (s.shm_perm.gid, &up->shm_perm.gid);
-                       err |= __get_user (s.shm_perm.mode, &up->shm_perm.mode);
+                       err = get_user(s.shm_perm.uid,
+                                      &up->shm_perm.uid);
+                       err |= __get_user(s.shm_perm.gid,
+                                         &up->shm_perm.gid);
+                       err |= __get_user(s.shm_perm.mode,
+                                         &up->shm_perm.mode);
                        if (err)
                                goto out;
                }
-               old_fs = get_fs ();
-               set_fs (KERNEL_DS);
-               err = sys_shmctl (first, second, &s);
-               set_fs (old_fs);
+               old_fs = get_fs();
+               set_fs(KERNEL_DS);
+               err = sys_shmctl(first, second,
+                                (struct shmid_ds __user *) &s);
+               set_fs(old_fs);
                if (err < 0)
                        goto out;
 
@@ -696,32 +711,46 @@ static int do_sys32_shmctl (int first, int second, void *uptr)
                                int used_ids;
                                u32 shm_tot, shm_rss, shm_swp;
                                u32 swap_attempts, swap_successes;
-                       } *uip = (struct shm_info32 *)uptr;
-                       struct shm_info *kp = (struct shm_info *)&s;
-                       int err2 = put_user (kp->used_ids, &uip->used_ids);
-                       err2 |= __put_user (kp->shm_tot, &uip->shm_tot);
-                       err2 |= __put_user (kp->shm_rss, &uip->shm_rss);
-                       err2 |= __put_user (kp->shm_swp, &uip->shm_swp);
-                       err2 |= __put_user (kp->swap_attempts, &uip->swap_attempts);
-                       err2 |= __put_user (kp->swap_successes, &uip->swap_successes);
+                       };
+                       struct shm_info32 __user *uip = uptr;
+                       struct shm_info *kp = (struct shm_info *) &s;
+                       int err2 = put_user(kp->used_ids,
+                                           &uip->used_ids);
+                       err2 |= __put_user(kp->shm_tot, &uip->shm_tot);
+                       err2 |= __put_user(kp->shm_rss, &uip->shm_rss);
+                       err2 |= __put_user(kp->shm_swp, &uip->shm_swp);
+                       err2 |= __put_user(kp->swap_attempts,
+                                          &uip->swap_attempts);
+                       err2 |= __put_user(kp->swap_successes,
+                                          &uip->swap_successes);
                        if (err2)
                                err = -EFAULT;
                } else if (IPCOP_MASK (second) &
-                          (IPCOP_MASK (SHM_STAT) | IPCOP_MASK (IPC_STAT))) {
-                       int err2 = put_user (s.shm_perm.key, &up->shm_perm.key);
-                       err2 |= __put_user (high2lowuid(s.shm_perm.uid), &up->shm_perm.uid);
-                       err2 |= __put_user (high2lowuid(s.shm_perm.gid), &up->shm_perm.gid);
-                       err2 |= __put_user (high2lowuid(s.shm_perm.cuid), &up->shm_perm.cuid);
-                       err2 |= __put_user (high2lowuid(s.shm_perm.cgid), &up->shm_perm.cgid);
-                       err2 |= __put_user (s.shm_perm.mode, &up->shm_perm.mode);
-                       err2 |= __put_user (s.shm_perm.seq, &up->shm_perm.seq);
-                       err2 |= __put_user (s.shm_atime, &up->shm_atime);
-                       err2 |= __put_user (s.shm_dtime, &up->shm_dtime);
-                       err2 |= __put_user (s.shm_ctime, &up->shm_ctime);
-                       err2 |= __put_user (s.shm_segsz, &up->shm_segsz);
-                       err2 |= __put_user (s.shm_nattch, &up->shm_nattch);
-                       err2 |= __put_user (s.shm_cpid, &up->shm_cpid);
-                       err2 |= __put_user (s.shm_lpid, &up->shm_lpid);
+                          (IPCOP_MASK (SHM_STAT) |
+                           IPCOP_MASK (IPC_STAT))) {
+                       int err2;
+
+                       err2  = put_user(s.shm_perm.key,
+                                        &up->shm_perm.key);
+                       err2 |= __put_user(high2lowuid(s.shm_perm.uid),
+                                          &up->shm_perm.uid);
+                       err2 |= __put_user(high2lowuid(s.shm_perm.gid),
+                                          &up->shm_perm.gid);
+                       err2 |= __put_user(high2lowuid(s.shm_perm.cuid),
+                                          &up->shm_perm.cuid);
+                       err2 |= __put_user(high2lowuid(s.shm_perm.cgid),
+                                          &up->shm_perm.cgid);
+                       err2 |= __put_user(s.shm_perm.mode,
+                                          &up->shm_perm.mode);
+                       err2 |= __put_user(s.shm_perm.seq,
+                                          &up->shm_perm.seq);
+                       err2 |= __put_user(s.shm_atime, &up->shm_atime);
+                       err2 |= __put_user(s.shm_dtime, &up->shm_dtime);
+                       err2 |= __put_user(s.shm_ctime, &up->shm_ctime);
+                       err2 |= __put_user(s.shm_segsz, &up->shm_segsz);
+                       err2 |= __put_user(s.shm_nattch,&up->shm_nattch);
+                       err2 |= __put_user(s.shm_cpid, &up->shm_cpid);
+                       err2 |= __put_user(s.shm_lpid, &up->shm_lpid);
                        if (err2)
                                err = -EFAULT;
                }
@@ -730,12 +759,14 @@ out:
        return err;
 }
 
-static int sys32_semtimedop(int semid, struct sembuf *tsems, int nsems,
-                           const struct compat_timespec *timeout32)
+static int sys32_semtimedop(int semid, struct sembuf __user *tsems,
+               int nsems,
+               const struct compat_timespec __user *timeout32)
 {
        struct compat_timespec t32;
-       struct timespec *t64 = compat_alloc_user_space(sizeof(*t64));
+       struct timespec __user *t64;
 
+       t64 = compat_alloc_user_space(sizeof(*t64));
        if (copy_from_user(&t32, timeout32, sizeof(t32)))
                return -EFAULT;
 
@@ -746,77 +777,81 @@ static int sys32_semtimedop(int semid, struct sembuf *tsems, int nsems,
        return sys_semtimedop(semid, tsems, nsems, t64);
 }
 
-asmlinkage int sys32_ipc (u32 call, int first, int second, int third, u32 ptr, u32 fifth)
+asmlinkage long compat_sys_ipc(u32 call, int first, int second, int third, compat_uptr_t __ptr, u32 fifth)
 {
        int version, err;
+       void __user *ptr = compat_ptr(__ptr);
 
        version = call >> 16; /* hack for backward compatibility */
        call &= 0xffff;
 
-       if (call <= SEMCTL)
+       if (call <= SEMCTL) {
                switch (call) {
                case SEMOP:
-                       /* struct sembuf is the same on 32 and 64bit :)) */
-                       err = sys_semtimedop (first, (struct sembuf *)AA(ptr), second, NULL);
+                       /* struct sembuf is the same on 32 and 64 :)) */
+                       err = sys_semtimedop (first, ptr, second, NULL);
                        goto out;
                case SEMTIMEDOP:
-                       err = sys32_semtimedop (first, (struct sembuf *)AA(ptr), second, (const struct compat_timespec *) AA(fifth));
+                       err = sys32_semtimedop(first, ptr, second,
+                                              compat_ptr(fifth));
                case SEMGET:
-                       err = sys_semget (first, second, third);
+                       err = sys_semget(first, second, third);
                        goto out;
                case SEMCTL:
-                       err = do_sys32_semctl (first, second, third, (void *)AA(ptr));
+                       err = do_sys32_semctl(first, second, third, ptr);
                        goto out;
                default:
                        err = -ENOSYS;
                        goto out;
                };
-       if (call <= MSGCTL) 
+       }
+       if (call <= MSGCTL) {
                switch (call) {
                case MSGSND:
-                       err = do_sys32_msgsnd (first, second, third, (void *)AA(ptr));
+                       err = do_sys32_msgsnd(first, second, third, ptr);
                        goto out;
                case MSGRCV:
-                       err = do_sys32_msgrcv (first, second, fifth, third,
-                                              version, (void *)AA(ptr));
+                       err = do_sys32_msgrcv(first, second, fifth,
+                                             third, version, ptr);
                        goto out;
                case MSGGET:
-                       err = sys_msgget ((key_t) first, second);
+                       err = sys_msgget((key_t) first, second);
                        goto out;
                case MSGCTL:
-                       err = do_sys32_msgctl (first, second, (void *)AA(ptr));
+                       err = do_sys32_msgctl(first, second, ptr);
                        goto out;
                default:
                        err = -ENOSYS;
                        goto out;
-               }
-       if (call <= SHMCTL) 
+               };
+       }
+       if (call <= SHMCTL) {
                switch (call) {
                case SHMAT:
-                       err = do_sys32_shmat (first, second, third,
-                                             version, (void *)AA(ptr));
+                       err = do_sys32_shmat(first, second, third,
+                                            version, ptr);
                        goto out;
                case SHMDT: 
-                       err = sys_shmdt ((char *)AA(ptr));
+                       err = sys_shmdt(ptr);
                        goto out;
                case SHMGET:
-                       err = sys_shmget (first, second, third);
+                       err = sys_shmget(first, second, third);
                        goto out;
                case SHMCTL:
-                       err = do_sys32_shmctl (first, second, (void *)AA(ptr));
+                       err = do_sys32_shmctl(first, second, ptr);
                        goto out;
                default:
                        err = -ENOSYS;
                        goto out;
-               }
-
+               };
+       }
        err = -ENOSYS;
 
 out:
        return err;
 }
 
-asmlinkage int sys32_truncate64(const char * path, unsigned long high, unsigned long low)
+asmlinkage long sys32_truncate64(const char __user * path, unsigned long high, unsigned long low)
 {
        if ((int)high < 0)
                return -EINVAL;
@@ -824,7 +859,7 @@ asmlinkage int sys32_truncate64(const char * path, unsigned long high, unsigned
                return sys_truncate(path, (high << 32) | low);
 }
 
-asmlinkage int sys32_ftruncate64(unsigned int fd, unsigned long high, unsigned long low)
+asmlinkage long sys32_ftruncate64(unsigned int fd, unsigned long high, unsigned long low)
 {
        if ((int)high < 0)
                return -EINVAL;
@@ -832,185 +867,9 @@ asmlinkage int sys32_ftruncate64(unsigned int fd, unsigned long high, unsigned l
                return sys_ftruncate(fd, (high << 32) | low);
 }
 
-typedef ssize_t (*io_fn_t)(struct file *, char *, size_t, loff_t *);
-typedef ssize_t (*iov_fn_t)(struct file *, const struct iovec *, unsigned long, loff_t *);
-
-static long do_readv_writev32(int type, struct file *file,
-                             const struct compat_iovec *vector, u32 count)
-{
-       compat_ssize_t tot_len;
-       struct iovec iovstack[UIO_FASTIOV];
-       struct iovec *iov=iovstack, *ivp;
-       struct inode *inode;
-       long retval, i;
-       io_fn_t fn;
-       iov_fn_t fnv;
-
-       /*
-        * SuS says "The readv() function *may* fail if the iovcnt argument
-        * was less than or equal to 0, or greater than {IOV_MAX}.  Linux has
-        * traditionally returned zero for zero segments, so...
-        */
-       retval = 0;
-       if (count == 0)
-               goto out;
-
-       /* First get the "struct iovec" from user memory and
-        * verify all the pointers
-        */
-       retval = -EINVAL;
-       if (count > UIO_MAXIOV)
-               goto out;
-       if (!file->f_op)
-               goto out;
-       if (count > UIO_FASTIOV) {
-               retval = -ENOMEM;
-               iov = kmalloc(count*sizeof(struct iovec), GFP_KERNEL);
-               if (!iov)
-                       goto out;
-       }
-       retval = -EFAULT;
-       if (verify_area(VERIFY_READ, vector, sizeof(struct compat_iovec)*count))
-               goto out;
-
-       /*
-        * Single unix specification:
-        * We should -EINVAL if an element length is not >= 0 and fitting an
-        * ssize_t.  The total length is fitting an ssize_t
-        *
-        * Be careful here because iov_len is a size_t not an ssize_t
-        */
-       tot_len = 0;
-       i = count;
-       ivp = iov;
-       retval = -EINVAL;
-       while(i > 0) {
-               compat_ssize_t tmp = tot_len;
-               compat_ssize_t len;
-               u32 buf;
-
-               if (__get_user(len, &vector->iov_len) ||
-                   __get_user(buf, &vector->iov_base)) {
-                       retval = -EFAULT;
-                       goto out;
-               }
-               if (len < 0)    /* size_t not fitting an ssize_t32 .. */
-                       goto out;
-               tot_len += len;
-               if (tot_len < tmp) /* maths overflow on the compat_ssize_t */
-                       goto out;
-               ivp->iov_base = (void *)A(buf);
-               ivp->iov_len = (__kernel_size_t) len;
-               vector++;
-               ivp++;
-               i--;
-       }
-       if (tot_len == 0) {
-               retval = 0;
-               goto out;
-       }
-
-       inode = file->f_dentry->d_inode;
-       /* VERIFY_WRITE actually means a read, as we write to user space */
-       retval = locks_verify_area((type == READ
-                                   ? FLOCK_VERIFY_READ : FLOCK_VERIFY_WRITE),
-                                  inode, file, file->f_pos, tot_len);
-       if (retval)
-               goto out;
-
-       if (type == READ) {
-               fn = file->f_op->read;
-               fnv = file->f_op->readv;
-       } else {
-               fn = (io_fn_t)file->f_op->write;
-               fnv = file->f_op->writev;
-       }
-       if (fnv) {
-               retval = fnv(file, iov, count, &file->f_pos);
-               goto out;
-       }
-
-       /* Do it by hand, with file-ops */
-       ivp = iov;
-       while (count > 0) {
-               void * base;
-               int len, nr;
-
-               base = ivp->iov_base;
-               len = ivp->iov_len;
-               ivp++;
-               count--;
-
-               nr = fn(file, base, len, &file->f_pos);
-
-               if (nr < 0) {
-                       if (!retval)
-                               retval = nr;
-                       break;
-               }
-               retval += nr;
-               if (nr != len)
-                       break;
-       }
-out:
-       if (iov != iovstack)
-               kfree(iov);
-       if ((retval + (type == READ)) > 0)
-               dnotify_parent(file->f_dentry,
-                       (type == READ) ? DN_ACCESS : DN_MODIFY);
-
-       return retval;
-}
-
-asmlinkage long sys32_readv(int fd, struct compat_iovec *vector, u32 count)
-{
-       struct file *file;
-       int ret;
-
-       file = fget(fd);
-       if(!file)
-               return -EBADF;
-
-       ret = -EBADF;
-       if (!(file->f_mode & FMODE_READ))
-               goto out;
-       ret = -EINVAL;
-       if (!file->f_op || (!file->f_op->readv && !file->f_op->read))
-               goto out;
-
-       ret = do_readv_writev32(READ, file, vector, count);
-
-out:
-       fput(file);
-       return ret;
-}
-
-asmlinkage long sys32_writev(int fd, struct compat_iovec *vector, u32 count)
-{
-       struct file *file;
-       int ret;
-
-       file = fget(fd);
-       if(!file)
-               return -EBADF;
-
-       ret = -EBADF;
-       if (!(file->f_mode & FMODE_WRITE))
-               goto out;
-       ret = -EINVAL;
-       if (!file->f_op || (!file->f_op->writev && !file->f_op->write))
-               goto out;
-
-       ret = do_readv_writev32(WRITE, file, vector, count);
-
-out:
-       fput(file);
-       return ret;
-}
-
 /* readdir & getdents */
 
-#define NAME_OFFSET(de) ((int) ((de)->d_name - (char *) (de)))
+#define NAME_OFFSET(de) ((int) ((de)->d_name - (char __user *) (de)))
 #define ROUND_UP(x) (((x)+sizeof(u32)-1) & ~(sizeof(u32)-1))
 
 struct old_linux_dirent32 {
@@ -1021,7 +880,7 @@ struct old_linux_dirent32 {
 };
 
 struct readdir_callback32 {
-       struct old_linux_dirent32 * dirent;
+       struct old_linux_dirent32 __user * dirent;
        int count;
 };
 
@@ -1029,7 +888,7 @@ static int fillonedir(void * __buf, const char * name, int namlen,
                      loff_t offset, ino_t ino, unsigned int d_type)
 {
        struct readdir_callback32 * buf = (struct readdir_callback32 *) __buf;
-       struct old_linux_dirent32 * dirent;
+       struct old_linux_dirent32 __user * dirent;
 
        if (buf->count)
                return -EINVAL;
@@ -1043,7 +902,7 @@ static int fillonedir(void * __buf, const char * name, int namlen,
        return 0;
 }
 
-asmlinkage int old32_readdir(unsigned int fd, struct old_linux_dirent32 *dirent, unsigned int count)
+asmlinkage long old32_readdir(unsigned int fd, struct old_linux_dirent32 __user *dirent, unsigned int count)
 {
        int error = -EBADF;
        struct file * file;
@@ -1075,8 +934,8 @@ struct linux_dirent32 {
 };
 
 struct getdents_callback32 {
-       struct linux_dirent32 current_dir;
-       struct linux_dirent32 previous;
+       struct linux_dirent32 __user *current_dir;
+       struct linux_dirent32 __user *previous;
        int count;
        int error;
 };
@@ -1084,7 +943,7 @@ struct getdents_callback32 {
 static int filldir(void * __buf, const char * name, int namlen, loff_t offset, ino_t ino,
                   unsigned int d_type)
 {
-       struct linux_dirent32 * dirent;
+       struct linux_dirent32 __user * dirent;
        struct getdents_callback32 * buf = (struct getdents_callback32 *) __buf;
        int reclen = ROUND_UP(NAME_OFFSET(dirent) + namlen + 2);
 
@@ -1100,17 +959,17 @@ static int filldir(void * __buf, const char * name, int namlen, loff_t offset, i
        put_user(reclen, &dirent->d_reclen);
        copy_to_user(dirent->d_name, name, namlen);
        put_user(0, dirent->d_name + namlen);
-       put_user(d_type, (char *) dirent + reclen - 1);
-       dirent = (void *) dirent + reclen;
+       put_user(d_type, (char __user *) dirent + reclen - 1);
+       dirent = (void __user *) dirent + reclen;
        buf->current_dir = dirent;
        buf->count -= reclen;
        return 0;
 }
 
-asmlinkage int sys32_getdents(unsigned int fd, struct linux_dirent32 *dirent, unsigned int count)
+asmlinkage long sys32_getdents(unsigned int fd, struct linux_dirent32 __user *dirent, unsigned int count)
 {
        struct file * file;
-       struct linux_dirent32 lastdirent;
+       struct linux_dirent32 __user *lastdirent;
        struct getdents_callback32 buf;
        int error = -EBADF;
 
@@ -1128,7 +987,7 @@ asmlinkage int sys32_getdents(unsigned int fd, struct linux_dirent32 *dirent, un
                goto out_putf;
        lastdirent = buf.previous;
        error = buf.error;
-       if(lastdirent) {
+       if (lastdirent) {
                put_user(file->f_pos, &lastdirent->d_off);
                error = count - buf.count;
        }
@@ -1140,159 +999,7 @@ out:
 
 /* end of readdir & getdents */
 
-/*
- * Ooo, nasty.  We need here to frob 32-bit unsigned longs to
- * 64-bit unsigned longs.
- */
-
-static int get_fd_set32(unsigned long n, unsigned long *fdset, u32 *ufdset)
-{
-       if (ufdset) {
-               unsigned long odd;
-
-               if (verify_area(VERIFY_WRITE, ufdset, n*sizeof(u32)))
-                       return -EFAULT;
-
-               odd = n & 1UL;
-               n &= ~1UL;
-               while (n) {
-                       unsigned long h, l;
-                       __get_user(l, ufdset);
-                       __get_user(h, ufdset+1);
-                       ufdset += 2;
-                       *fdset++ = h << 32 | l;
-                       n -= 2;
-               }
-               if (odd)
-                       __get_user(*fdset, ufdset);
-       } else {
-               /* Tricky, must clear full unsigned long in the
-                * kernel fdset at the end, this makes sure that
-                * actually happens.
-                */
-               memset(fdset, 0, ((n + 1) & ~1)*sizeof(u32));
-       }
-       return 0;
-}
-
-static void set_fd_set32(unsigned long n, u32 *ufdset, unsigned long *fdset)
-{
-       unsigned long odd;
-
-       if (!ufdset)
-               return;
-
-       odd = n & 1UL;
-       n &= ~1UL;
-       while (n) {
-               unsigned long h, l;
-               l = *fdset++;
-               h = l >> 32;
-               __put_user(l, ufdset);
-               __put_user(h, ufdset+1);
-               ufdset += 2;
-               n -= 2;
-       }
-       if (odd)
-               __put_user(*fdset, ufdset);
-}
-
-#define MAX_SELECT_SECONDS \
-       ((unsigned long) (MAX_SCHEDULE_TIMEOUT / HZ)-1)
-
-asmlinkage int sys32_select(int n, u32 *inp, u32 *outp, u32 *exp, u32 tvp_x)
-{
-       fd_set_bits fds;
-       struct compat_timeval *tvp = (struct compat_timeval *)AA(tvp_x);
-       char *bits;
-       unsigned long nn;
-       long timeout;
-       int ret, size;
-
-       timeout = MAX_SCHEDULE_TIMEOUT;
-       if (tvp) {
-               time_t sec, usec;
-
-               if ((ret = verify_area(VERIFY_READ, tvp, sizeof(*tvp)))
-                   || (ret = __get_user(sec, &tvp->tv_sec))
-                   || (ret = __get_user(usec, &tvp->tv_usec)))
-                       goto out_nofds;
-
-               ret = -EINVAL;
-               if(sec < 0 || usec < 0)
-                       goto out_nofds;
-
-               if ((unsigned long) sec < MAX_SELECT_SECONDS) {
-                       timeout = (usec + 1000000/HZ - 1) / (1000000/HZ);
-                       timeout += sec * (unsigned long) HZ;
-               }
-       }
-
-       ret = -EINVAL;
-       if (n < 0)
-               goto out_nofds;
-       if (n > current->files->max_fdset)
-               n = current->files->max_fdset;
-
-       /*
-        * We need 6 bitmaps (in/out/ex for both incoming and outgoing),
-        * since we used fdset we need to allocate memory in units of
-        * long-words. 
-        */
-       ret = -ENOMEM;
-       size = FDS_BYTES(n);
-       bits = kmalloc(6 * size, GFP_KERNEL);
-       if (!bits)
-               goto out_nofds;
-       fds.in      = (unsigned long *)  bits;
-       fds.out     = (unsigned long *) (bits +   size);
-       fds.ex      = (unsigned long *) (bits + 2*size);
-       fds.res_in  = (unsigned long *) (bits + 3*size);
-       fds.res_out = (unsigned long *) (bits + 4*size);
-       fds.res_ex  = (unsigned long *) (bits + 5*size);
-
-       nn = (n + 8*sizeof(u32) - 1) / (8*sizeof(u32));
-       if ((ret = get_fd_set32(nn, fds.in, inp)) ||
-           (ret = get_fd_set32(nn, fds.out, outp)) ||
-           (ret = get_fd_set32(nn, fds.ex, exp)))
-               goto out;
-       zero_fd_set(n, fds.res_in);
-       zero_fd_set(n, fds.res_out);
-       zero_fd_set(n, fds.res_ex);
-
-       ret = do_select(n, &fds, &timeout);
-
-       if (tvp && !(current->personality & STICKY_TIMEOUTS)) {
-               time_t sec = 0, usec = 0;
-               if (timeout) {
-                       sec = timeout / HZ;
-                       usec = timeout % HZ;
-                       usec *= (1000000/HZ);
-               }
-               put_user(sec, &tvp->tv_sec);
-               put_user(usec, &tvp->tv_usec);
-       }
-
-       if (ret < 0)
-               goto out;
-       if (!ret) {
-               ret = -ERESTARTNOHAND;
-               if (signal_pending(current))
-                       goto out;
-               ret = 0;
-       }
-
-       set_fd_set32(nn, inp, fds.res_in);
-       set_fd_set32(nn, outp, fds.res_out);
-       set_fd_set32(nn, exp, fds.res_ex);
-
-out:
-       kfree(bits);
-out_nofds:
-       return ret;
-}
-
-int cp_compat_stat(struct kstat *stat, struct compat_stat *statbuf)
+int cp_compat_stat(struct kstat *stat, struct compat_stat __user *statbuf)
 {
        int err;
 
@@ -1322,7 +1029,7 @@ int cp_compat_stat(struct kstat *stat, struct compat_stat *statbuf)
        return err;
 }
 
-asmlinkage int sys32_sysfs(int option, u32 arg1, u32 arg2)
+asmlinkage long compat_sys_sysfs(int option, u32 arg1, u32 arg2)
 {
        return sys_sysfs(option, arg1, arg2);
 }
@@ -1344,7 +1051,7 @@ struct sysinfo32 {
        char _f[20-2*sizeof(int)-sizeof(int)];
 };
 
-asmlinkage int sys32_sysinfo(struct sysinfo32 *info)
+asmlinkage long sys32_sysinfo(struct sysinfo32 __user *info)
 {
        struct sysinfo s;
        int ret, err;
@@ -1352,7 +1059,7 @@ asmlinkage int sys32_sysinfo(struct sysinfo32 *info)
        mm_segment_t old_fs = get_fs ();
        
        set_fs(KERNEL_DS);
-       ret = sys_sysinfo(&s);
+       ret = sys_sysinfo((struct sysinfo __user *) &s);
        set_fs(old_fs);
        /* Check to see if any memory value is too large for 32-bit and
          * scale down if needed.
@@ -1391,21 +1098,24 @@ asmlinkage int sys32_sysinfo(struct sysinfo32 *info)
        return ret;
 }
 
-asmlinkage int sys32_sched_rr_get_interval(compat_pid_t pid, struct compat_timespec *interval)
+asmlinkage long compat_sys_sched_rr_get_interval(compat_pid_t pid, struct compat_timespec __user *interval)
 {
        struct timespec t;
        int ret;
        mm_segment_t old_fs = get_fs ();
        
        set_fs (KERNEL_DS);
-       ret = sys_sched_rr_get_interval(pid, &t);
+       ret = sys_sched_rr_get_interval(pid, (struct timespec __user *) &t);
        set_fs (old_fs);
        if (put_compat_timespec(&t, interval))
                return -EFAULT;
        return ret;
 }
 
-asmlinkage int sys32_rt_sigprocmask(int how, compat_sigset_t *set, compat_sigset_t *oset, compat_size_t sigsetsize)
+asmlinkage long compat_sys_rt_sigprocmask(int how,
+                                         compat_sigset_t __user *set,
+                                         compat_sigset_t __user *oset,
+                                         compat_size_t sigsetsize)
 {
        sigset_t s;
        compat_sigset_t s32;
@@ -1423,7 +1133,10 @@ asmlinkage int sys32_rt_sigprocmask(int how, compat_sigset_t *set, compat_sigset
                }
        }
        set_fs (KERNEL_DS);
-       ret = sys_rt_sigprocmask(how, set ? &s : NULL, oset ? &s : NULL, sigsetsize);
+       ret = sys_rt_sigprocmask(how,
+                                set ? (sigset_t __user *) &s : NULL,
+                                oset ? (sigset_t __user *) &s : NULL,
+                                sigsetsize);
        set_fs (old_fs);
        if (ret) return ret;
        if (oset) {
@@ -1439,7 +1152,8 @@ asmlinkage int sys32_rt_sigprocmask(int how, compat_sigset_t *set, compat_sigset
        return 0;
 }
 
-asmlinkage int sys32_rt_sigpending(compat_sigset_t *set, compat_size_t sigsetsize)
+asmlinkage long sys32_rt_sigpending(compat_sigset_t __user *set,
+                                   compat_size_t sigsetsize)
 {
        sigset_t s;
        compat_sigset_t s32;
@@ -1447,7 +1161,7 @@ asmlinkage int sys32_rt_sigpending(compat_sigset_t *set, compat_size_t sigsetsiz
        mm_segment_t old_fs = get_fs();
                
        set_fs (KERNEL_DS);
-       ret = sys_rt_sigpending(&s, sigsetsize);
+       ret = sys_rt_sigpending((sigset_t __user *) &s, sigsetsize);
        set_fs (old_fs);
        if (!ret) {
                switch (_NSIG_WORDS) {
@@ -1462,9 +1176,10 @@ asmlinkage int sys32_rt_sigpending(compat_sigset_t *set, compat_size_t sigsetsiz
        return ret;
 }
 
-asmlinkage int
-sys32_rt_sigtimedwait(compat_sigset_t *uthese, siginfo_t32 *uinfo,
-                     struct compat_timespec *uts, compat_size_t sigsetsize)
+asmlinkage long sys32_rt_sigtimedwait(compat_sigset_t __user *uthese,
+                                     siginfo_t32 __user *uinfo,
+                                     struct compat_timespec __user *uts,
+                                     compat_size_t sigsetsize)
 {
        int ret, sig;
        sigset_t these;
@@ -1546,8 +1261,8 @@ sys32_rt_sigtimedwait(compat_sigset_t *uthese, siginfo_t32 *uinfo,
        return ret;
 }
 
-asmlinkage int
-sys32_rt_sigqueueinfo(int pid, int sig, siginfo_t32 *uinfo)
+asmlinkage long compat_sys_rt_sigqueueinfo(int pid, int sig,
+                                          siginfo_t32 __user *uinfo)
 {
        siginfo_t info;
        int ret;
@@ -1557,14 +1272,13 @@ sys32_rt_sigqueueinfo(int pid, int sig, siginfo_t32 *uinfo)
            copy_from_user (info._sifields._pad, uinfo->_sifields._pad, SI_PAD_SIZE))
                return -EFAULT;
        set_fs (KERNEL_DS);
-       ret = sys_rt_sigqueueinfo(pid, sig, &info);
+       ret = sys_rt_sigqueueinfo(pid, sig, (siginfo_t __user *) &info);
        set_fs (old_fs);
        return ret;
 }
 
-extern void check_pending(int signum);
-
-asmlinkage int sys32_sigaction (int sig, struct old_sigaction32 *act, struct old_sigaction32 *oact)
+asmlinkage long compat_sys_sigaction(int sig, struct old_sigaction32 __user *act,
+                                    struct old_sigaction32 __user *oact)
 {
         struct k_sigaction new_ka, old_ka;
         int ret;
@@ -1602,9 +1316,11 @@ asmlinkage int sys32_sigaction (int sig, struct old_sigaction32 *act, struct old
        return ret;
 }
 
-asmlinkage int
-sys32_rt_sigaction(int sig, struct sigaction32 *act, struct sigaction32 *oact,
-                  void *restorer, compat_size_t sigsetsize)
+asmlinkage long compat_sys_rt_sigaction(int sig,
+                                       struct sigaction32 __user *act,
+                                       struct sigaction32 __user *oact,
+                                       void __user *restorer,
+                                       compat_size_t sigsetsize)
 {
         struct k_sigaction new_ka, old_ka;
         int ret;
@@ -1659,218 +1375,33 @@ sys32_rt_sigaction(int sig, struct sigaction32 *act, struct sigaction32 *oact,
         return ret;
 }
 
-
-/*
- * count32() counts the number of arguments/envelopes
- */
-static int count32(u32 * argv, int max)
-{
-       int i = 0;
-
-       if (argv != NULL) {
-               for (;;) {
-                       u32 p; int error;
-
-                       error = get_user(p,argv);
-                       if (error)
-                               return error;
-                       if (!p)
-                               break;
-                       argv++;
-                       if (++i > max)
-                               return -E2BIG;
-               }
-       }
-       return i;
-}
-
-/*
- * 'copy_string32()' copies argument/envelope strings from user
- * memory to free pages in kernel mem. These are in a format ready
- * to be put directly into the top of new user memory.
- */
-static int copy_strings32(int argc, u32 * argv, struct linux_binprm *bprm)
-{
-       while (argc-- > 0) {
-               u32 str;
-               int len;
-               unsigned long pos;
-
-               if (get_user(str, argv + argc) ||
-                   !str ||
-                   !(len = strnlen_user((char *)A(str), bprm->p)))
-                       return -EFAULT;
-
-               if (bprm->p < len)
-                       return -E2BIG;
-
-               bprm->p -= len;
-
-               pos = bprm->p;
-               while (len) {
-                       char *kaddr;
-                       struct page *page;
-                       int offset, bytes_to_copy, new, err;
-
-                       offset = pos % PAGE_SIZE;
-                       page = bprm->page[pos / PAGE_SIZE];
-                       new = 0;
-                       if (!page) {
-                               page = alloc_page(GFP_USER);
-                               bprm->page[pos / PAGE_SIZE] = page;
-                               if (!page)
-                                       return -ENOMEM;
-                               new = 1;
-                       }
-                       kaddr = kmap(page);
-
-                       if (new && offset)
-                               memset(kaddr, 0, offset);
-                       bytes_to_copy = PAGE_SIZE - offset;
-                       if (bytes_to_copy > len) {
-                               bytes_to_copy = len;
-                               if (new)
-                                       memset(kaddr+offset+len, 0,
-                                              PAGE_SIZE-offset-len);
-                       }
-
-                       err = copy_from_user(kaddr + offset, (char *)A(str),
-                                            bytes_to_copy);
-                       kunmap(page);
-
-                       if (err)
-                               return -EFAULT;
-
-                       pos += bytes_to_copy;
-                       str += bytes_to_copy;
-                       len -= bytes_to_copy;
-               }
-       }
-       return 0;
-}
-
-/*
- * sys32_execve() executes a new program.
- */
-static inline int 
-do_execve32(char * filename, u32 * argv, u32 * envp, struct pt_regs * regs)
-{
-       struct linux_binprm bprm;
-       struct file * file;
-       int retval;
-       int i;
-
-       sched_balance_exec();
-
-       file = open_exec(filename);
-
-       retval = PTR_ERR(file);
-       if (IS_ERR(file))
-               return retval;
-
-       bprm.p = PAGE_SIZE*MAX_ARG_PAGES-sizeof(void *);
-       memset(bprm.page, 0, MAX_ARG_PAGES * sizeof(bprm.page[0]));
-
-       bprm.file = file;
-       bprm.filename = filename;
-       bprm.interp = filename;
-       bprm.sh_bang = 0;
-       bprm.loader = 0;
-       bprm.exec = 0;
-       bprm.security = NULL;
-       bprm.mm = mm_alloc();
-       retval = -ENOMEM;
-       if (!bprm.mm) 
-               goto out_file;
-
-       retval = init_new_context(current, bprm.mm);
-       if (retval < 0)
-               goto out_mm;
-
-       bprm.argc = count32(argv, bprm.p / sizeof(u32));
-       if ((retval = bprm.argc) < 0)
-               goto out_mm;
-
-       bprm.envc = count32(envp, bprm.p / sizeof(u32));
-       if ((retval = bprm.envc) < 0)
-               goto out_mm;
-
-       retval = security_bprm_alloc(&bprm);
-       if (retval)
-               goto out;
-
-       retval = prepare_binprm(&bprm);
-       if (retval < 0)
-               goto out;
-       
-       retval = copy_strings_kernel(1, &bprm.filename, &bprm);
-       if (retval < 0)
-               goto out;
-
-       bprm.exec = bprm.p;
-       retval = copy_strings32(bprm.envc, envp, &bprm);
-       if (retval < 0)
-               goto out;
-
-       retval = copy_strings32(bprm.argc, argv, &bprm);
-       if (retval < 0)
-               goto out;
-
-       retval = search_binary_handler(&bprm, regs);
-       if (retval >= 0) {
-               /* execve success */
-               security_bprm_free(&bprm);
-               return retval;
-       }
-
-out:
-       /* Something went wrong, return the inode and free the argument pages*/
-       for (i = 0 ; i < MAX_ARG_PAGES ; i++) {
-               struct page * page = bprm.page[i];
-               if (page)
-                       __free_page(page);
-       }
-
-       if (bprm.security)
-               security_bprm_free(&bprm);
-
-out_mm:
-       if (bprm.mm)
-               mmdrop(bprm.mm);
-
-out_file:
-       if (bprm.file) {
-               allow_write_access(bprm.file);
-               fput(bprm.file);
-       }
-       return retval;
-}
-
 /*
  * sparc32_execve() executes a new program after the asm stub has set
  * things up for us.  This should basically do what I want it to.
  */
-asmlinkage int sparc32_execve(struct pt_regs *regs)
+asmlinkage long sparc32_execve(struct pt_regs *regs)
 {
-        int error, base = 0;
-        char *filename;
+       int error, base = 0;
+       char *filename;
 
        /* User register window flush is done by entry.S */
 
-        /* Check for indirect call. */
-        if((u32)regs->u_regs[UREG_G1] == 0)
-                base = 1;
+       /* Check for indirect call. */
+       if ((u32)regs->u_regs[UREG_G1] == 0)
+               base = 1;
 
-        filename = getname((char *)AA(regs->u_regs[base + UREG_I0]));
+       filename = getname(compat_ptr(regs->u_regs[base + UREG_I0]));
        error = PTR_ERR(filename);
-        if(IS_ERR(filename))
-                goto out;
-        error = do_execve32(filename,
-               (u32 *)AA((u32)regs->u_regs[base + UREG_I1]),
-               (u32 *)AA((u32)regs->u_regs[base + UREG_I2]), regs);
-        putname(filename);
-
-       if(!error) {
+       if (IS_ERR(filename))
+               goto out;
+
+       error = compat_do_execve(filename,
+                                compat_ptr(regs->u_regs[base + UREG_I1]),
+                                compat_ptr(regs->u_regs[base + UREG_I2]), regs);
+
+       putname(filename);
+
+       if (!error) {
                fprs_write(0);
                current_thread_info()->xfsr[0] = 0;
                current_thread_info()->fpsaved[0] = 0;
@@ -1878,269 +1409,45 @@ asmlinkage int sparc32_execve(struct pt_regs *regs)
                current->ptrace &= ~PT_DTRACE;
        }
 out:
-        return error;
+       return error;
 }
 
 #ifdef CONFIG_MODULES
 
-asmlinkage int sys32_init_module(void *umod, u32 len, const char *uargs)
+asmlinkage long sys32_init_module(void __user *umod, u32 len,
+                                 const char __user *uargs)
 {
        return sys_init_module(umod, len, uargs);
 }
 
-asmlinkage int sys32_delete_module(const char *name_user, unsigned int flags)
+asmlinkage long sys32_delete_module(const char __user *name_user,
+                                   unsigned int flags)
 {
        return sys_delete_module(name_user, flags);
 }
 
 #else /* CONFIG_MODULES */
 
-asmlinkage int
-sys32_init_module(const char *name_user, struct module *mod_user)
+asmlinkage long sys32_init_module(const char __user *name_user,
+                                 struct module __user *mod_user)
 {
        return -ENOSYS;
 }
 
-asmlinkage int
-sys32_delete_module(const char *name_user)
+asmlinkage long sys32_delete_module(const char __user *name_user)
 {
        return -ENOSYS;
 }
 
 #endif  /* CONFIG_MODULES */
 
-#if defined(CONFIG_NFSD) || defined(CONFIG_NFSD_MODULE)
-/* Stuff for NFS server syscalls... */
-struct nfsctl_svc32 {
-       u16                     svc32_port;
-       s32                     svc32_nthreads;
-};
-
-struct nfsctl_client32 {
-       s8                      cl32_ident[NFSCLNT_IDMAX+1];
-       s32                     cl32_naddr;
-       struct in_addr          cl32_addrlist[NFSCLNT_ADDRMAX];
-       s32                     cl32_fhkeytype;
-       s32                     cl32_fhkeylen;
-       u8                      cl32_fhkey[NFSCLNT_KEYMAX];
-};
-
-struct nfsctl_export32 {
-       s8                      ex32_client[NFSCLNT_IDMAX+1];
-       s8                      ex32_path[NFS_MAXPATHLEN+1];
-       compat_dev_t    ex32_dev;
-       compat_ino_t    ex32_ino;
-       s32                     ex32_flags;
-       compat_uid_t    ex32_anon_uid;
-       compat_gid_t    ex32_anon_gid;
-};
-
-struct nfsctl_fdparm32 {
-       struct sockaddr         gd32_addr;
-       s8                      gd32_path[NFS_MAXPATHLEN+1];
-       s32                     gd32_version;
-};
-
-struct nfsctl_fsparm32 {
-       struct sockaddr         gd32_addr;
-       s8                      gd32_path[NFS_MAXPATHLEN+1];
-       s32                     gd32_maxlen;
-};
-
-struct nfsctl_arg32 {
-       s32                     ca32_version;   /* safeguard */
-       union {
-               struct nfsctl_svc32     u32_svc;
-               struct nfsctl_client32  u32_client;
-               struct nfsctl_export32  u32_export;
-               struct nfsctl_fdparm32  u32_getfd;
-               struct nfsctl_fsparm32  u32_getfs;
-       } u;
-#define ca32_svc       u.u32_svc
-#define ca32_client    u.u32_client
-#define ca32_export    u.u32_export
-#define ca32_getfd     u.u32_getfd
-#define ca32_getfs     u.u32_getfs
-};
-
-union nfsctl_res32 {
-       __u8                    cr32_getfh[NFS_FHSIZE];
-       struct knfsd_fh         cr32_getfs;
-};
-
-static int nfs_svc32_trans(struct nfsctl_arg *karg, struct nfsctl_arg32 *arg32)
-{
-       int err;
-       
-       err = __get_user(karg->ca_version, &arg32->ca32_version);
-       err |= __get_user(karg->ca_svc.svc_port, &arg32->ca32_svc.svc32_port);
-       err |= __get_user(karg->ca_svc.svc_nthreads, &arg32->ca32_svc.svc32_nthreads);
-       return err;
-}
-
-static int nfs_clnt32_trans(struct nfsctl_arg *karg, struct nfsctl_arg32 *arg32)
-{
-       int err;
-       
-       err = __get_user(karg->ca_version, &arg32->ca32_version);
-       err |= copy_from_user(&karg->ca_client.cl_ident[0],
-                         &arg32->ca32_client.cl32_ident[0],
-                         NFSCLNT_IDMAX);
-       err |= __get_user(karg->ca_client.cl_naddr, &arg32->ca32_client.cl32_naddr);
-       err |= copy_from_user(&karg->ca_client.cl_addrlist[0],
-                         &arg32->ca32_client.cl32_addrlist[0],
-                         (sizeof(struct in_addr) * NFSCLNT_ADDRMAX));
-       err |= __get_user(karg->ca_client.cl_fhkeytype,
-                     &arg32->ca32_client.cl32_fhkeytype);
-       err |= __get_user(karg->ca_client.cl_fhkeylen,
-                     &arg32->ca32_client.cl32_fhkeylen);
-       err |= copy_from_user(&karg->ca_client.cl_fhkey[0],
-                         &arg32->ca32_client.cl32_fhkey[0],
-                         NFSCLNT_KEYMAX);
-       return (err ? -EFAULT : 0);
-}
-
-static int nfs_exp32_trans(struct nfsctl_arg *karg, struct nfsctl_arg32 *arg32)
-{
-       int err;
-       
-       err = __get_user(karg->ca_version, &arg32->ca32_version);
-       err |= copy_from_user(&karg->ca_export.ex_client[0],
-                         &arg32->ca32_export.ex32_client[0],
-                         NFSCLNT_IDMAX);
-       err |= copy_from_user(&karg->ca_export.ex_path[0],
-                         &arg32->ca32_export.ex32_path[0],
-                         NFS_MAXPATHLEN);
-       err |= __get_user(karg->ca_export.ex_dev,
-                     &arg32->ca32_export.ex32_dev);
-       err |= __get_user(karg->ca_export.ex_ino,
-                     &arg32->ca32_export.ex32_ino);
-       err |= __get_user(karg->ca_export.ex_flags,
-                     &arg32->ca32_export.ex32_flags);
-       err |= __get_user(karg->ca_export.ex_anon_uid,
-                     &arg32->ca32_export.ex32_anon_uid);
-       err |= __get_user(karg->ca_export.ex_anon_gid,
-                     &arg32->ca32_export.ex32_anon_gid);
-       karg->ca_export.ex_anon_uid = high2lowuid(karg->ca_export.ex_anon_uid);
-       karg->ca_export.ex_anon_gid = high2lowgid(karg->ca_export.ex_anon_gid);
-       return (err ? -EFAULT : 0);
-}
-
-static int nfs_getfd32_trans(struct nfsctl_arg *karg, struct nfsctl_arg32 *arg32)
-{
-       int err;
-       
-       err = __get_user(karg->ca_version, &arg32->ca32_version);
-       err |= copy_from_user(&karg->ca_getfd.gd_addr,
-                         &arg32->ca32_getfd.gd32_addr,
-                         (sizeof(struct sockaddr)));
-       err |= copy_from_user(&karg->ca_getfd.gd_path,
-                         &arg32->ca32_getfd.gd32_path,
-                         (NFS_MAXPATHLEN+1));
-       err |= __get_user(karg->ca_getfd.gd_version,
-                     &arg32->ca32_getfd.gd32_version);
-       return (err ? -EFAULT : 0);
-}
-
-static int nfs_getfs32_trans(struct nfsctl_arg *karg, struct nfsctl_arg32 *arg32)
-{
-       int err;
-       
-       err = __get_user(karg->ca_version, &arg32->ca32_version);
-       err |= copy_from_user(&karg->ca_getfs.gd_addr,
-                         &arg32->ca32_getfs.gd32_addr,
-                         (sizeof(struct sockaddr)));
-       err |= copy_from_user(&karg->ca_getfs.gd_path,
-                         &arg32->ca32_getfs.gd32_path,
-                         (NFS_MAXPATHLEN+1));
-       err |= __get_user(karg->ca_getfs.gd_maxlen,
-                     &arg32->ca32_getfs.gd32_maxlen);
-       return (err ? -EFAULT : 0);
-}
-
-/* This really doesn't need translations, we are only passing
- * back a union which contains opaque nfs file handle data.
- */
-static int nfs_getfh32_res_trans(union nfsctl_res *kres, union nfsctl_res32 *res32)
-{
-       return (copy_to_user(res32, kres, sizeof(*res32)) ? -EFAULT : 0);
-}
-
-int asmlinkage sys32_nfsservctl(int cmd, struct nfsctl_arg32 *arg32, union nfsctl_res32 *res32)
-{
-       struct nfsctl_arg *karg = NULL;
-       union nfsctl_res *kres = NULL;
-       mm_segment_t oldfs;
-       int err;
-
-       karg = kmalloc(sizeof(*karg), GFP_USER);
-       if(!karg)
-               return -ENOMEM;
-       if(res32) {
-               kres = kmalloc(sizeof(*kres), GFP_USER);
-               if(!kres) {
-                       kfree(karg);
-                       return -ENOMEM;
-               }
-       }
-       switch(cmd) {
-       case NFSCTL_SVC:
-               err = nfs_svc32_trans(karg, arg32);
-               break;
-       case NFSCTL_ADDCLIENT:
-               err = nfs_clnt32_trans(karg, arg32);
-               break;
-       case NFSCTL_DELCLIENT:
-               err = nfs_clnt32_trans(karg, arg32);
-               break;
-       case NFSCTL_EXPORT:
-       case NFSCTL_UNEXPORT:
-               err = nfs_exp32_trans(karg, arg32);
-               break;
-       case NFSCTL_GETFD:
-               err = nfs_getfd32_trans(karg, arg32);
-               break;
-       case NFSCTL_GETFS:
-               err = nfs_getfs32_trans(karg, arg32);
-               break;
-       default:
-               err = -EINVAL;
-               break;
-       }
-       if(err)
-               goto done;
-       oldfs = get_fs();
-       set_fs(KERNEL_DS);
-       err = sys_nfsservctl(cmd, karg, kres);
-       set_fs(oldfs);
-
-       if (err)
-               goto done;
-
-       if((cmd == NFSCTL_GETFD) ||
-          (cmd == NFSCTL_GETFS))
-               err = nfs_getfh32_res_trans(kres, res32);
-
-done:
-       if(karg)
-               kfree(karg);
-       if(kres)
-               kfree(kres);
-       return err;
-}
-#else /* !NFSD */
-int asmlinkage sys32_nfsservctl(int cmd, void *notused, void *notused2)
-{
-       return sys_ni_syscall();
-}
-#endif
-
 /* Translations due to time_t size differences.  Which affects all
    sorts of things, like timeval and itimerval.  */
 
 extern struct timezone sys_tz;
 
-asmlinkage int sys32_gettimeofday(struct compat_timeval *tv, struct timezone *tz)
+asmlinkage long sys32_gettimeofday(struct compat_timeval __user *tv,
+                                  struct timezone __user *tz)
 {
        if (tv) {
                struct timeval ktv;
@@ -2155,7 +1462,7 @@ asmlinkage int sys32_gettimeofday(struct compat_timeval *tv, struct timezone *tz
        return 0;
 }
 
-static inline long get_ts32(struct timespec *o, struct compat_timeval *i)
+static inline long get_ts32(struct timespec *o, struct compat_timeval __user *i)
 {
        long usec;
 
@@ -2169,7 +1476,8 @@ static inline long get_ts32(struct timespec *o, struct compat_timeval *i)
        return 0;
 }
 
-asmlinkage int sys32_settimeofday(struct compat_timeval *tv, struct timezone *tz)
+asmlinkage long sys32_settimeofday(struct compat_timeval __user *tv,
+                                  struct timezone __user *tz)
 {
        struct timespec kts;
        struct timezone ktz;
@@ -2186,99 +1494,76 @@ asmlinkage int sys32_settimeofday(struct compat_timeval *tv, struct timezone *tz
        return do_sys_settimeofday(tv ? &kts : NULL, tz ? &ktz : NULL);
 }
 
-asmlinkage int sys32_utimes(char *filename, struct compat_timeval *tvs)
+asmlinkage long sys32_utimes(char __user *filename,
+                            struct compat_timeval __user *tvs)
 {
-       char *kfilename;
        struct timeval ktvs[2];
-       mm_segment_t old_fs;
-       int ret;
-
-       kfilename = getname(filename);
-       ret = PTR_ERR(kfilename);
-       if (!IS_ERR(kfilename)) {
-               if (tvs) {
-                       if (get_tv32(&ktvs[0], tvs) ||
-                           get_tv32(&ktvs[1], 1+tvs))
-                               return -EFAULT;
-               }
-
-               old_fs = get_fs();
-               set_fs(KERNEL_DS);
-               ret = do_utimes(kfilename, (tvs ? &ktvs[0] : NULL));
-               set_fs(old_fs);
 
-               putname(kfilename);
+       if (tvs) {
+               if (get_tv32(&ktvs[0], tvs) ||
+                   get_tv32(&ktvs[1], 1+tvs))
+                       return -EFAULT;
        }
-       return ret;
+
+       return do_utimes(filename, (tvs ? &ktvs[0] : NULL));
 }
 
 /* These are here just in case some old sparc32 binary calls it. */
-asmlinkage int sys32_pause(void)
+asmlinkage long sys32_pause(void)
 {
        current->state = TASK_INTERRUPTIBLE;
        schedule();
        return -ERESTARTNOHAND;
 }
 
-/* PCI config space poking. */
-
-asmlinkage int sys32_pciconfig_read(u32 bus, u32 dfn, u32 off, u32 len, u32 ubuf)
-{
-       return sys_pciconfig_read((unsigned long) bus,
-                                 (unsigned long) dfn,
-                                 (unsigned long) off,
-                                 (unsigned long) len,
-                                 (unsigned char *)AA(ubuf));
-}
-
-asmlinkage int sys32_pciconfig_write(u32 bus, u32 dfn, u32 off, u32 len, u32 ubuf)
-{
-       return sys_pciconfig_write((unsigned long) bus,
-                                  (unsigned long) dfn,
-                                  (unsigned long) off,
-                                  (unsigned long) len,
-                                  (unsigned char *)AA(ubuf));
-}
-
-asmlinkage int sys32_prctl(int option, u32 arg2, u32 arg3, u32 arg4, u32 arg5)
+asmlinkage compat_ssize_t sys32_pread64(unsigned int fd,
+                                       char __user *ubuf,
+                                       compat_size_t count,
+                                       unsigned long poshi,
+                                       unsigned long poslo)
 {
-       return sys_prctl(option,
-                        (unsigned long) arg2,
-                        (unsigned long) arg3,
-                        (unsigned long) arg4,
-                        (unsigned long) arg5);
+       return sys_pread64(fd, ubuf, count, (poshi << 32) | poslo);
 }
 
-
-asmlinkage compat_ssize_t sys32_pread64(unsigned int fd, char *ubuf,
-                                  compat_size_t count, u32 poshi, u32 poslo)
+asmlinkage compat_ssize_t sys32_pwrite64(unsigned int fd,
+                                        char __user *ubuf,
+                                        compat_size_t count,
+                                        unsigned long poshi,
+                                        unsigned long poslo)
 {
-       return sys_pread64(fd, ubuf, count, ((loff_t)AA(poshi) << 32) | AA(poslo));
+       return sys_pwrite64(fd, ubuf, count, (poshi << 32) | poslo);
 }
 
-asmlinkage compat_ssize_t sys32_pwrite64(unsigned int fd, char *ubuf,
-                                   compat_size_t count, u32 poshi, u32 poslo)
+asmlinkage long compat_sys_readahead(int fd,
+                                    unsigned long offhi,
+                                    unsigned long offlo,
+                                    compat_size_t count)
 {
-       return sys_pwrite64(fd, ubuf, count, ((loff_t)AA(poshi) << 32) | AA(poslo));
+       return sys_readahead(fd, (offhi << 32) | offlo, count);
 }
 
-asmlinkage compat_ssize_t sys32_readahead(int fd, u32 offhi, u32 offlo, s32 count)
+long compat_sys_fadvise64(int fd,
+                         unsigned long offhi,
+                         unsigned long offlo,
+                         compat_size_t len, int advice)
 {
-       return sys_readahead(fd, ((loff_t)AA(offhi) << 32) | AA(offlo), count);
+       return sys_fadvise64_64(fd, (offhi << 32) | offlo, len, advice);
 }
 
-long sys32_fadvise64(int fd, u32 offhi, u32 offlo, s32 len, int advice)
+long compat_sys_fadvise64_64(int fd,
+                            unsigned long offhi, unsigned long offlo,
+                            unsigned long lenhi, unsigned long lenlo,
+                            int advice)
 {
-       return sys_fadvise64_64(fd, ((loff_t)AA(offhi)<<32)|AA(offlo), len, advice);
+       return sys_fadvise64_64(fd,
+                               (offhi << 32) | offlo,
+                               (lenhi << 32) | lenlo,
+                               advice);
 }
 
-long sys32_fadvise64_64(int fd, u32 offhi, u32 offlo, u32 lenhi, u32 lenlo, int advice)
-{
-       return sys_fadvise64_64(fd, ((loff_t)AA(offhi)<<32)|AA(offlo),
-                               ((loff_t)AA(lenhi)<<32)|AA(lenlo), advice);
-}
-
-asmlinkage int sys32_sendfile(int out_fd, int in_fd, compat_off_t *offset, s32 count)
+asmlinkage long compat_sys_sendfile(int out_fd, int in_fd,
+                                   compat_off_t __user *offset,
+                                   compat_size_t count)
 {
        mm_segment_t old_fs = get_fs();
        int ret;
@@ -2288,7 +1573,9 @@ asmlinkage int sys32_sendfile(int out_fd, int in_fd, compat_off_t *offset, s32 c
                return -EFAULT;
                
        set_fs(KERNEL_DS);
-       ret = sys_sendfile(out_fd, in_fd, offset ? &of : NULL, count);
+       ret = sys_sendfile(out_fd, in_fd,
+                          offset ? (off_t __user *) &of : NULL,
+                          count);
        set_fs(old_fs);
        
        if (offset && put_user(of, offset))
@@ -2297,7 +1584,9 @@ asmlinkage int sys32_sendfile(int out_fd, int in_fd, compat_off_t *offset, s32 c
        return ret;
 }
 
-asmlinkage int sys32_sendfile64(int out_fd, int in_fd, compat_loff_t *offset, s32 count)
+asmlinkage long compat_sys_sendfile64(int out_fd, int in_fd,
+                                     compat_loff_t __user *offset,
+                                     compat_size_t count)
 {
        mm_segment_t old_fs = get_fs();
        int ret;
@@ -2307,7 +1596,9 @@ asmlinkage int sys32_sendfile64(int out_fd, int in_fd, compat_loff_t *offset, s3
                return -EFAULT;
                
        set_fs(KERNEL_DS);
-       ret = sys_sendfile64(out_fd, in_fd, offset ? &lof : NULL, count);
+       ret = sys_sendfile64(out_fd, in_fd,
+                            offset ? (loff_t __user *) &lof : NULL,
+                            count);
        set_fs(old_fs);
        
        if (offset && put_user(lof, offset))
@@ -2333,57 +1624,57 @@ struct timex32 {
 
 extern int do_adjtimex(struct timex *);
 
-asmlinkage int sys32_adjtimex(struct timex32 *utp)
+asmlinkage long sys32_adjtimex(struct timex32 __user *utp)
 {
        struct timex txc;
        int ret;
 
        memset(&txc, 0, sizeof(struct timex));
 
-       if(get_user(txc.modes, &utp->modes) ||
-          __get_user(txc.offset, &utp->offset) ||
-          __get_user(txc.freq, &utp->freq) ||
-          __get_user(txc.maxerror, &utp->maxerror) ||
-          __get_user(txc.esterror, &utp->esterror) ||
-          __get_user(txc.status, &utp->status) ||
-          __get_user(txc.constant, &utp->constant) ||
-          __get_user(txc.precision, &utp->precision) ||
-          __get_user(txc.tolerance, &utp->tolerance) ||
-          __get_user(txc.time.tv_sec, &utp->time.tv_sec) ||
-          __get_user(txc.time.tv_usec, &utp->time.tv_usec) ||
-          __get_user(txc.tick, &utp->tick) ||
-          __get_user(txc.ppsfreq, &utp->ppsfreq) ||
-          __get_user(txc.jitter, &utp->jitter) ||
-          __get_user(txc.shift, &utp->shift) ||
-          __get_user(txc.stabil, &utp->stabil) ||
-          __get_user(txc.jitcnt, &utp->jitcnt) ||
-          __get_user(txc.calcnt, &utp->calcnt) ||
-          __get_user(txc.errcnt, &utp->errcnt) ||
-          __get_user(txc.stbcnt, &utp->stbcnt))
+       if (get_user(txc.modes, &utp->modes) ||
+           __get_user(txc.offset, &utp->offset) ||
+           __get_user(txc.freq, &utp->freq) ||
+           __get_user(txc.maxerror, &utp->maxerror) ||
+           __get_user(txc.esterror, &utp->esterror) ||
+           __get_user(txc.status, &utp->status) ||
+           __get_user(txc.constant, &utp->constant) ||
+           __get_user(txc.precision, &utp->precision) ||
+           __get_user(txc.tolerance, &utp->tolerance) ||
+           __get_user(txc.time.tv_sec, &utp->time.tv_sec) ||
+           __get_user(txc.time.tv_usec, &utp->time.tv_usec) ||
+           __get_user(txc.tick, &utp->tick) ||
+           __get_user(txc.ppsfreq, &utp->ppsfreq) ||
+           __get_user(txc.jitter, &utp->jitter) ||
+           __get_user(txc.shift, &utp->shift) ||
+           __get_user(txc.stabil, &utp->stabil) ||
+           __get_user(txc.jitcnt, &utp->jitcnt) ||
+           __get_user(txc.calcnt, &utp->calcnt) ||
+           __get_user(txc.errcnt, &utp->errcnt) ||
+           __get_user(txc.stbcnt, &utp->stbcnt))
                return -EFAULT;
 
        ret = do_adjtimex(&txc);
 
-       if(put_user(txc.modes, &utp->modes) ||
-          __put_user(txc.offset, &utp->offset) ||
-          __put_user(txc.freq, &utp->freq) ||
-          __put_user(txc.maxerror, &utp->maxerror) ||
-          __put_user(txc.esterror, &utp->esterror) ||
-          __put_user(txc.status, &utp->status) ||
-          __put_user(txc.constant, &utp->constant) ||
-          __put_user(txc.precision, &utp->precision) ||
-          __put_user(txc.tolerance, &utp->tolerance) ||
-          __put_user(txc.time.tv_sec, &utp->time.tv_sec) ||
-          __put_user(txc.time.tv_usec, &utp->time.tv_usec) ||
-          __put_user(txc.tick, &utp->tick) ||
-          __put_user(txc.ppsfreq, &utp->ppsfreq) ||
-          __put_user(txc.jitter, &utp->jitter) ||
-          __put_user(txc.shift, &utp->shift) ||
-          __put_user(txc.stabil, &utp->stabil) ||
-          __put_user(txc.jitcnt, &utp->jitcnt) ||
-          __put_user(txc.calcnt, &utp->calcnt) ||
-          __put_user(txc.errcnt, &utp->errcnt) ||
-          __put_user(txc.stbcnt, &utp->stbcnt))
+       if (put_user(txc.modes, &utp->modes) ||
+           __put_user(txc.offset, &utp->offset) ||
+           __put_user(txc.freq, &utp->freq) ||
+           __put_user(txc.maxerror, &utp->maxerror) ||
+           __put_user(txc.esterror, &utp->esterror) ||
+           __put_user(txc.status, &utp->status) ||
+           __put_user(txc.constant, &utp->constant) ||
+           __put_user(txc.precision, &utp->precision) ||
+           __put_user(txc.tolerance, &utp->tolerance) ||
+           __put_user(txc.time.tv_sec, &utp->time.tv_sec) ||
+           __put_user(txc.time.tv_usec, &utp->time.tv_usec) ||
+           __put_user(txc.tick, &utp->tick) ||
+           __put_user(txc.ppsfreq, &utp->ppsfreq) ||
+           __put_user(txc.jitter, &utp->jitter) ||
+           __put_user(txc.shift, &utp->shift) ||
+           __put_user(txc.stabil, &utp->stabil) ||
+           __put_user(txc.jitcnt, &utp->jitcnt) ||
+           __put_user(txc.calcnt, &utp->calcnt) ||
+           __put_user(txc.errcnt, &utp->errcnt) ||
+           __put_user(txc.stbcnt, &utp->stbcnt))
                ret = -EFAULT;
 
        return ret;
@@ -2393,7 +1684,8 @@ asmlinkage int sys32_adjtimex(struct timex32 *utp)
  * not force O_LARGEFILE on.
  */
 
-asmlinkage long sparc32_open(const char * filename, int flags, int mode)
+asmlinkage long sparc32_open(const char __user *filename,
+                            int flags, int mode)
 {
        char * tmp;
        int fd, error;
@@ -2430,7 +1722,7 @@ asmlinkage unsigned long sys32_mremap(unsigned long addr,
 {
        struct vm_area_struct *vma;
        unsigned long ret = -EINVAL;
-       unsigned long new_addr = AA(__new_addr);
+       unsigned long new_addr = __new_addr;
 
        if (old_len > 0xf0000000UL || new_len > 0xf0000000UL)
                goto out;
@@ -2471,13 +1763,6 @@ out:
        return ret;       
 }
 
-asmlinkage int sys_setpriority32(u32 which, u32 who, u32 niceval)
-{
-       return sys_setpriority((int) which,
-                              (int) who,
-                              (int) niceval);
-}
-
 struct __sysctl_args32 {
        u32 name;
        int nlen;
@@ -2488,15 +1773,15 @@ struct __sysctl_args32 {
        u32 __unused[4];
 };
 
-asmlinkage long sys32_sysctl(struct __sysctl_args32 *args)
+asmlinkage long sys32_sysctl(struct __sysctl_args32 __user *args)
 {
 #ifndef CONFIG_SYSCTL
        return -ENOSYS;
 #else
        struct __sysctl_args32 tmp;
        int error;
-       size_t oldlen, *oldlenp = NULL;
-       unsigned long addr = (((long)&args->__unused[0]) + 7) & ~7;
+       size_t oldlen, __user *oldlenp = NULL;
+       unsigned long addr = (((unsigned long)&args->__unused[0]) + 7UL) & ~7UL;
 
        if (copy_from_user(&tmp, args, sizeof(tmp)))
                return -EFAULT;
@@ -2508,20 +1793,24 @@ asmlinkage long sys32_sysctl(struct __sysctl_args32 *args)
                   basically copy the whole sysctl.c here, and
                   glibc's __sysctl uses rw memory for the structure
                   anyway.  */
-               if (get_user(oldlen, (u32 *)A(tmp.oldlenp)) ||
-                   put_user(oldlen, (size_t *)addr))
+               if (get_user(oldlen, (u32 __user *)(unsigned long)tmp.oldlenp) ||
+                   put_user(oldlen, (size_t __user *)addr))
                        return -EFAULT;
-               oldlenp = (size_t *)addr;
+               oldlenp = (size_t __user *)addr;
        }
 
        lock_kernel();
-       error = do_sysctl((int *)A(tmp.name), tmp.nlen, (void *)A(tmp.oldval),
-                         oldlenp, (void *)A(tmp.newval), tmp.newlen);
+       error = do_sysctl((int __user *)(unsigned long) tmp.name,
+                         tmp.nlen,
+                         (void __user *)(unsigned long) tmp.oldval,
+                         oldlenp,
+                         (void __user *)(unsigned long) tmp.newval,
+                         tmp.newlen);
        unlock_kernel();
        if (oldlenp) {
                if (!error) {
-                       if (get_user(oldlen, (size_t *)addr) ||
-                           put_user(oldlen, (u32 *)A(tmp.oldlenp)))
+                       if (get_user(oldlen, (size_t __user *)addr) ||
+                           put_user(oldlen, (u32 __user *)(unsigned long) tmp.oldlenp))
                                error = -EFAULT;
                }
                copy_to_user(args->__unused, tmp.__unused, sizeof(tmp.__unused));
@@ -2530,18 +1819,22 @@ asmlinkage long sys32_sysctl(struct __sysctl_args32 *args)
 #endif
 }
 
-long sys32_lookup_dcookie(u32 cookie_high, u32 cookie_low, char *buf, size_t len)
+long sys32_lookup_dcookie(unsigned long cookie_high,
+                         unsigned long cookie_low,
+                         char __user *buf, size_t len)
 {
-       return sys_lookup_dcookie((u64)cookie_high << 32 | cookie_low,
+       return sys_lookup_dcookie((cookie_high << 32) | cookie_low,
                                  buf, len);
 }
 
 extern asmlinkage long
-sys_timer_create(clockid_t which_clock, struct sigevent *timer_event_spec,
-                timer_t * created_timer_id);
+sys_timer_create(clockid_t which_clock,
+                struct sigevent __user *timer_event_spec,
+                timer_t __user *created_timer_id);
 
 long
-sys32_timer_create(u32 clock, struct sigevent32 *se32, timer_t *timer_id)
+sys32_timer_create(u32 clock, struct sigevent32 __user *se32,
+                  timer_t __user *timer_id)
 {
        struct sigevent se;
        mm_segment_t oldfs;
@@ -2564,7 +1857,9 @@ sys32_timer_create(u32 clock, struct sigevent32 *se32, timer_t *timer_id)
 
        oldfs = get_fs();
        set_fs(KERNEL_DS);
-       err = sys_timer_create(clock, &se, &t);
+       err = sys_timer_create(clock,
+                              (struct sigevent __user *) &se,
+                              (timer_t __user *) &t);
        set_fs(oldfs);
 
        if (!err)