237 		struct cmsghdr __user *cm = msg->msg_control_user;  in put_cmsg()  local
239 		check_object_size(data, cmlen - sizeof(*cm), true);  in put_cmsg()
241 		if (!user_write_access_begin(cm, cmlen))  in put_cmsg()
244 		unsafe_put_user(cmlen, &cm->cmsg_len, efault_end);  in put_cmsg()
245 		unsafe_put_user(level, &cm->cmsg_level, efault_end);  in put_cmsg()
246 		unsafe_put_user(type, &cm->cmsg_type, efault_end);  in put_cmsg()
247 		unsafe_copy_to_user(CMSG_USER_DATA(cm), data,  in put_cmsg()
248 				    cmlen - sizeof(*cm), efault_end);  in put_cmsg()
251 		struct cmsghdr *cm = msg->msg_control;  in put_cmsg()  local
253 		cm->cmsg_level = level;  in put_cmsg()
254 		cm->cmsg_type = type;  in put_cmsg()
255 		cm->cmsg_len = cmlen;  in put_cmsg()
256 		memcpy(CMSG_DATA(cm), data, cmlen - sizeof(*cm));  in put_cmsg()
311 	struct cmsghdr __user *cm =  in scm_detach_fds()  local
315 	int __user *cmsg_data = CMSG_USER_DATA(cm);  in scm_detach_fds()
336 		err = put_user(SOL_SOCKET, &cm->cmsg_level);  in scm_detach_fds()
338 			err = put_user(SCM_RIGHTS, &cm->cmsg_type);  in scm_detach_fds()
340 			err = put_user(cmlen, &cm->cmsg_len);  in scm_detach_fds()