networking: introduce and use skb_put_data()

A common pattern with skb_put() is to just want to memcpy() some data into the new space, introduce skb_put_data() for this. An spatch similar to the one for skb_put_zero() converts many of the places using it: @@ identifier p, p2; expression len, skb, data; type t, t2; @@ ( -p = skb_put(skb, len); +p = skb_put_data(skb, data, len); | -p = (t)skb_put(skb, len); +p = skb_put_data(skb, data, len); ) ( p2 = (t2)p; -memcpy(p2, data, len); | -memcpy(p, data, len); ) @@ type t, t2; identifier p, p2; expression skb, data; @@ t *p; ... ( -p = skb_put(skb, sizeof(t)); +p = skb_put_data(skb, data, sizeof(t)); | -p = (t *)skb_put(skb, sizeof(t)); +p = skb_put_data(skb, data, sizeof(t)); ) ( p2 = (t2)p; -memcpy(p2, data, sizeof(*p)); | -memcpy(p, data, sizeof(*p)); ) @@ expression skb, len, data; @@ -memcpy(skb_put(skb, len), data, len); +skb_put_data(skb, data, len); (again, manually post-processed to retain some comments) Reviewed-by: Stephen Hemminger <stephen@networkplumber.org> Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: David S. Miller <davem@davemloft.net>
author: Johannes Berg <johannes.berg@intel.com> 2017-06-16 08:29:20 -0400
committer: David S. Miller <davem@davemloft.net> 2017-06-16 11:48:37 -0400
commit: 59ae1d127ac0ae404baf414c434ba2651b793f46 (patch)
tree: 043e71496aa7a7db86bcc8219a3a51f533aac982
parent: b080db585384b9f037e015c0c28d1ad33be41dfc (diff)
252 files changed, 622 insertions, 741 deletions
diff --git a/drivers/atm/fore200e.c b/drivers/atm/fore200e.c
index 637c3e6b0f9e..7584ae1ded85 100644
--- a/drivers/atm/fore200e.c
+++ b/drivers/atm/fore200e.c
@@ -1104,7 +1104,7 @@ fore200e_push_rpd(struct fore200e* fore200e, struct atm_vcc* vcc, struct rpd* rp
        /* Make device DMA transfer visible to CPU.  */
        fore200e->bus->dma_sync_for_cpu(fore200e, buffer->data.dma_addr, rpd->rsd[ i ].length, DMA_FROM_DEVICE);
        
-        memcpy(skb_put(skb, rpd->rsd[ i ].length), buffer->data.align_addr, rpd->rsd[ i ].length);
+        skb_put_data(skb, buffer->data.align_addr, rpd->rsd[i].length);
        /* Now let the device get at it again.  */
        fore200e->bus->dma_sync_for_device(fore200e, buffer->data.dma_addr, rpd->rsd[ i ].length, DMA_FROM_DEVICE);
diff --git a/drivers/atm/he.c b/drivers/atm/he.c
index 3617659b9184..461da2bce8ef 100644
--- a/drivers/atm/he.c
+++ b/drivers/atm/he.c
@@ -1735,7 +1735,7 @@ he_service_rbrq(struct he_dev *he_dev, int group)
                __net_timestamp(skb);
                list_for_each_entry(heb, &he_vcc->buffers, entry)
-                        memcpy(skb_put(skb, heb->len), &heb->data, heb->len);
+                        skb_put_data(skb, &heb->data, heb->len);
                switch (vcc->qos.aal) {
                        case ATM_AAL0:
diff --git a/drivers/atm/idt77252.c b/drivers/atm/idt77252.c
index 5ec109533bb9..4e64de380bda 100644
--- a/drivers/atm/idt77252.c
+++ b/drivers/atm/idt77252.c
@@ -1090,8 +1090,7 @@ dequeue_rx(struct idt77252_dev *card, struct rsq_entry *rsqe)
                        *((u32 *) sb->data) = aal0;
                        skb_put(sb, sizeof(u32));
-                        memcpy(skb_put(sb, ATM_CELL_PAYLOAD),
+                        skb_put_data(sb, cell, ATM_CELL_PAYLOAD);
-                               cell, ATM_CELL_PAYLOAD);
                        ATM_SKB(sb)->vcc = vcc;
                        __net_timestamp(sb);
@@ -1159,8 +1158,7 @@ dequeue_rx(struct idt77252_dev *card, struct rsq_entry *rsqe)
                                return;
                        }
                        skb_queue_walk(&rpp->queue, sb)
-                                memcpy(skb_put(skb, sb->len),
+                                skb_put_data(skb, sb->data, sb->len);
-                                       sb->data, sb->len);
                        recycle_rx_pool_skb(card, rpp);
@@ -1322,8 +1320,7 @@ idt77252_rx_raw(struct idt77252_dev *card)
                *((u32 *) sb->data) = header;
                skb_put(sb, sizeof(u32));
-                memcpy(skb_put(sb, ATM_CELL_PAYLOAD), &(queue->data[16]),
+                skb_put_data(sb, &(queue->data[16]), ATM_CELL_PAYLOAD);
-                       ATM_CELL_PAYLOAD);
                ATM_SKB(sb)->vcc = vcc;
                __net_timestamp(sb);
@@ -2014,7 +2011,7 @@ idt77252_send_oam(struct atm_vcc *vcc, void *cell, int flags)
        }
        atomic_add(skb->truesize, &sk_atm(vcc)->sk_wmem_alloc);
-        memcpy(skb_put(skb, 52), cell, 52);
+        skb_put_data(skb, cell, 52);
        return idt77252_send_skb(vcc, skb, 1);
 }
diff --git a/drivers/atm/solos-pci.c b/drivers/atm/solos-pci.c
index 9115b292e680..077dd15c3a40 100644
--- a/drivers/atm/solos-pci.c
+++ b/drivers/atm/solos-pci.c
@@ -493,7 +493,7 @@ static int send_command(struct solos_card *card, int dev, const char *buf, size_
        header->vci = cpu_to_le16(0);
        header->type = cpu_to_le16(PKT_COMMAND);
-        memcpy(skb_put(skb, size), buf, size);
+        skb_put_data(skb, buf, size);
        fpga_queue(card, dev, skb, NULL);
diff --git a/drivers/bluetooth/bfusb.c b/drivers/bluetooth/bfusb.c
index 3bf4ec60e073..ab090a313a5f 100644
--- a/drivers/bluetooth/bfusb.c
+++ b/drivers/bluetooth/bfusb.c
@@ -335,7 +335,7 @@ static inline int bfusb_recv_block(struct bfusb_data *data, int hdr, unsigned ch
        }
        if (len > 0)
-                memcpy(skb_put(data->reassembly, len), buf, len);
+                skb_put_data(data->reassembly, buf, len);
        if (hdr & 0x08) {
                hci_recv_frame(data->hdev, data->reassembly);
@@ -505,7 +505,7 @@ static int bfusb_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
                buf[1] = 0x00;
                buf[2] = (size == BFUSB_MAX_BLOCK_SIZE) ? 0 : size;
-                memcpy(skb_put(nskb, 3), buf, 3);
+                skb_put_data(nskb, buf, 3);
                skb_copy_from_linear_data_offset(skb, sent, skb_put(nskb, size), size);
                sent  += size;
@@ -516,7 +516,7 @@ static int bfusb_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
        if ((nskb->len % data->bulk_pkt_size) == 0) {
                buf[0] = 0xdd;
                buf[1] = 0x00;
-                memcpy(skb_put(nskb, 2), buf, 2);
+                skb_put_data(nskb, buf, 2);
        }
        read_lock(&data->lock);
diff --git a/drivers/bluetooth/bluecard_cs.c b/drivers/bluetooth/bluecard_cs.c
index 007c0a45f31b..1d30c116b2ee 100644
--- a/drivers/bluetooth/bluecard_cs.c
+++ b/drivers/bluetooth/bluecard_cs.c
@@ -597,7 +597,7 @@ static int bluecard_hci_set_baud_rate(struct hci_dev *hdev, int baud)
                break;
        }
-        memcpy(skb_put(skb, sizeof(cmd)), cmd, sizeof(cmd));
+        skb_put_data(skb, cmd, sizeof(cmd));
        skb_queue_tail(&(info->txq), skb);
diff --git a/drivers/bluetooth/btmrvl_main.c b/drivers/bluetooth/btmrvl_main.c
index c38cb5b91291..24a188eab360 100644
--- a/drivers/bluetooth/btmrvl_main.c
+++ b/drivers/bluetooth/btmrvl_main.c
@@ -194,7 +194,7 @@ static int btmrvl_send_sync_cmd(struct btmrvl_private *priv, u16 opcode,
        hdr->plen = len;
        if (len)
-                memcpy(skb_put(skb, len), param, len);
+                skb_put_data(skb, param, len);
        hci_skb_pkt_type(skb) = MRVL_VENDOR_PKT;
diff --git a/drivers/bluetooth/btqcomsmd.c b/drivers/bluetooth/btqcomsmd.c
index ef730c173d4b..d00c4fdae924 100644
--- a/drivers/bluetooth/btqcomsmd.c
+++ b/drivers/bluetooth/btqcomsmd.c
@@ -43,7 +43,7 @@ static int btqcomsmd_recv(struct hci_dev *hdev, unsigned int type,
        }
        hci_skb_pkt_type(skb) = type;
-        memcpy(skb_put(skb, count), data, count);
+        skb_put_data(skb, data, count);
        return hci_recv_frame(hdev, skb);
 }
diff --git a/drivers/bluetooth/btusb.c b/drivers/bluetooth/btusb.c
index bfd5f4bdec80..c7ea398e65c1 100644
--- a/drivers/bluetooth/btusb.c
+++ b/drivers/bluetooth/btusb.c
@@ -478,7 +478,7 @@ static int btusb_recv_intr(struct btusb_data *data, void *buffer, int count)
                }
                len = min_t(uint, hci_skb_expect(skb), count);
-                memcpy(skb_put(skb, len), buffer, len);
+                skb_put_data(skb, buffer, len);
                count -= len;
                buffer += len;
@@ -533,7 +533,7 @@ static int btusb_recv_bulk(struct btusb_data *data, void *buffer, int count)
                }
                len = min_t(uint, hci_skb_expect(skb), count);
-                memcpy(skb_put(skb, len), buffer, len);
+                skb_put_data(skb, buffer, len);
                count -= len;
                buffer += len;
@@ -590,7 +590,7 @@ static int btusb_recv_isoc(struct btusb_data *data, void *buffer, int count)
                }
                len = min_t(uint, hci_skb_expect(skb), count);
-                memcpy(skb_put(skb, len), buffer, len);
+                skb_put_data(skb, buffer, len);
                count -= len;
                buffer += len;
@@ -934,8 +934,8 @@ static void btusb_diag_complete(struct urb *urb)
                skb = bt_skb_alloc(urb->actual_length, GFP_ATOMIC);
                if (skb) {
-                        memcpy(skb_put(skb, urb->actual_length),
+                        skb_put_data(skb, urb->transfer_buffer,
-                               urb->transfer_buffer, urb->actual_length);
+                                     urb->actual_length);
                        hci_recv_diag(hdev, skb);
                }
        } else if (urb->status == -ENOENT) {
@@ -2395,7 +2395,7 @@ static int marvell_config_oob_wake(struct hci_dev *hdev)
                return -ENOMEM;
        }
-        memcpy(skb_put(skb, sizeof(cmd)), cmd, sizeof(cmd));
+        skb_put_data(skb, cmd, sizeof(cmd));
        hci_skb_pkt_type(skb) = HCI_COMMAND_PKT;
        ret = btusb_send_frame(hdev, skb);
diff --git a/drivers/bluetooth/hci_bcsp.c b/drivers/bluetooth/hci_bcsp.c
index 910ec968f022..d880f4e33c75 100644
--- a/drivers/bluetooth/hci_bcsp.c
+++ b/drivers/bluetooth/hci_bcsp.c
@@ -125,7 +125,7 @@ static void bcsp_slip_msgdelim(struct sk_buff *skb)
 {
        const char pkt_delim = 0xc0;
-        memcpy(skb_put(skb, 1), &pkt_delim, 1);
+        skb_put_data(skb, &pkt_delim, 1);
 }
 static void bcsp_slip_one_byte(struct sk_buff *skb, u8 c)
@@ -135,13 +135,13 @@ static void bcsp_slip_one_byte(struct sk_buff *skb, u8 c)
        switch (c) {
        case 0xc0:
-                memcpy(skb_put(skb, 2), &esc_c0, 2);
+                skb_put_data(skb, &esc_c0, 2);
                break;
        case 0xdb:
-                memcpy(skb_put(skb, 2), &esc_db, 2);
+                skb_put_data(skb, &esc_db, 2);
                break;
        default:
-                memcpy(skb_put(skb, 1), &c, 1);
+                skb_put_data(skb, &c, 1);
        }
 }
@@ -423,7 +423,7 @@ static void bcsp_handle_le_pkt(struct hci_uart *hu)
                BT_DBG("Found a LE conf pkt");
                if (!nskb)
                        return;
-                memcpy(skb_put(nskb, 4), conf_rsp_pkt, 4);
+                skb_put_data(nskb, conf_rsp_pkt, 4);
                hci_skb_pkt_type(nskb) = BCSP_LE_PKT;
                skb_queue_head(&bcsp->unrel, nskb);
@@ -447,7 +447,7 @@ static inline void bcsp_unslip_one_byte(struct bcsp_struct *bcsp, unsigned char
                        bcsp->rx_esc_state = BCSP_ESCSTATE_ESC;
                        break;
                default:
-                        memcpy(skb_put(bcsp->rx_skb, 1), &byte, 1);
+                        skb_put_data(bcsp->rx_skb, &byte, 1);
                        if ((bcsp->rx_skb->data[0] & 0x40) != 0 &&
                            bcsp->rx_state != BCSP_W4_CRC)
                                bcsp_crc_update(&bcsp->message_crc, byte);
@@ -458,7 +458,7 @@ static inline void bcsp_unslip_one_byte(struct bcsp_struct *bcsp, unsigned char
        case BCSP_ESCSTATE_ESC:
                switch (byte) {
                case 0xdc:
-                        memcpy(skb_put(bcsp->rx_skb, 1), &c0, 1);
+                        skb_put_data(bcsp->rx_skb, &c0, 1);
                        if ((bcsp->rx_skb->data[0] & 0x40) != 0 &&
                            bcsp->rx_state != BCSP_W4_CRC)
                                bcsp_crc_update(&bcsp->message_crc, 0xc0);
@@ -467,7 +467,7 @@ static inline void bcsp_unslip_one_byte(struct bcsp_struct *bcsp, unsigned char
                        break;
                case 0xdd:
-                        memcpy(skb_put(bcsp->rx_skb, 1), &db, 1);
+                        skb_put_data(bcsp->rx_skb, &db, 1);
                        if ((bcsp->rx_skb->data[0] & 0x40) != 0 &&
                            bcsp->rx_state != BCSP_W4_CRC)
                                bcsp_crc_update(&bcsp->message_crc, 0xdb);
diff --git a/drivers/bluetooth/hci_h4.c b/drivers/bluetooth/hci_h4.c
index 82e5a32b87a4..4e328d7d47bb 100644
--- a/drivers/bluetooth/hci_h4.c
+++ b/drivers/bluetooth/hci_h4.c
@@ -209,7 +209,7 @@ struct sk_buff *h4_recv_buf(struct hci_dev *hdev, struct sk_buff *skb,
                }
                len = min_t(uint, hci_skb_expect(skb) - skb->len, count);
-                memcpy(skb_put(skb, len), buffer, len);
+                skb_put_data(skb, buffer, len);
                count -= len;
                buffer += len;
diff --git a/drivers/bluetooth/hci_h5.c b/drivers/bluetooth/hci_h5.c
index 90d0456b6744..c0e4e26dc30d 100644
--- a/drivers/bluetooth/hci_h5.c
+++ b/drivers/bluetooth/hci_h5.c
@@ -109,7 +109,7 @@ static void h5_link_control(struct hci_uart *hu, const void *data, size_t len)
        hci_skb_pkt_type(nskb) = HCI_3WIRE_LINK_PKT;
-        memcpy(skb_put(nskb, len), data, len);
+        skb_put_data(nskb, data, len);
        skb_queue_tail(&h5->unrel, nskb);
 }
@@ -487,7 +487,7 @@ static void h5_unslip_one_byte(struct h5 *h5, unsigned char c)
                }
        }
-        memcpy(skb_put(h5->rx_skb, 1), byte, 1);
+        skb_put_data(h5->rx_skb, byte, 1);
        h5->rx_pending--;
        BT_DBG("unsliped 0x%02hhx, rx_pending %zu", *byte, h5->rx_pending);
@@ -579,7 +579,7 @@ static void h5_slip_delim(struct sk_buff *skb)
 {
        const char delim = SLIP_DELIMITER;
-        memcpy(skb_put(skb, 1), &delim, 1);
+        skb_put_data(skb, &delim, 1);
 }
 static void h5_slip_one_byte(struct sk_buff *skb, u8 c)
@@ -589,13 +589,13 @@ static void h5_slip_one_byte(struct sk_buff *skb, u8 c)
        switch (c) {
        case SLIP_DELIMITER:
-                memcpy(skb_put(skb, 2), &esc_delim, 2);
+                skb_put_data(skb, &esc_delim, 2);
                break;
        case SLIP_ESC:
-                memcpy(skb_put(skb, 2), &esc_esc, 2);
+                skb_put_data(skb, &esc_esc, 2);
                break;
        default:
-                memcpy(skb_put(skb, 1), &c, 1);
+                skb_put_data(skb, &c, 1);
        }
 }
diff --git a/drivers/bluetooth/hci_intel.c b/drivers/bluetooth/hci_intel.c
index 851bee82df2a..16e728577cd8 100644
--- a/drivers/bluetooth/hci_intel.c
+++ b/drivers/bluetooth/hci_intel.c
@@ -185,7 +185,7 @@ static int intel_lpm_suspend(struct hci_uart *hu)
                return -ENOMEM;
        }
-        memcpy(skb_put(skb, sizeof(suspend)), suspend, sizeof(suspend));
+        skb_put_data(skb, suspend, sizeof(suspend));
        hci_skb_pkt_type(skb) = HCI_LPM_PKT;
        set_bit(STATE_LPM_TRANSACTION, &intel->flags);
@@ -270,8 +270,7 @@ static int intel_lpm_host_wake(struct hci_uart *hu)
                return -ENOMEM;
        }
-        memcpy(skb_put(skb, sizeof(lpm_resume_ack)), lpm_resume_ack,
+        skb_put_data(skb, lpm_resume_ack, sizeof(lpm_resume_ack));
-               sizeof(lpm_resume_ack));
        hci_skb_pkt_type(skb) = HCI_LPM_PKT;
        /* LPM flow is a priority, enqueue packet at list head */
@@ -522,7 +521,7 @@ static int intel_set_baudrate(struct hci_uart *hu, unsigned int speed)
                return -ENOMEM;
        }
-        memcpy(skb_put(skb, sizeof(speed_cmd)), speed_cmd, sizeof(speed_cmd));
+        skb_put_data(skb, speed_cmd, sizeof(speed_cmd));
        hci_skb_pkt_type(skb) = HCI_COMMAND_PKT;
        hci_uart_set_flow_control(hu, true);
diff --git a/drivers/bluetooth/hci_ll.c b/drivers/bluetooth/hci_ll.c
index 2b16d48d82ee..cc2fa78b434e 100644
--- a/drivers/bluetooth/hci_ll.c
+++ b/drivers/bluetooth/hci_ll.c
@@ -413,7 +413,7 @@ static int ll_recv(struct hci_uart *hu, const void *data, int count)
        while (count) {
                if (ll->rx_count) {
                        len = min_t(unsigned int, ll->rx_count, count);
-                        memcpy(skb_put(ll->rx_skb, len), ptr, len);
+                        skb_put_data(ll->rx_skb, ptr, len);
                        ll->rx_count -= len; count -= len; ptr += len;
                        if (ll->rx_count)
diff --git a/drivers/bluetooth/hci_mrvl.c b/drivers/bluetooth/hci_mrvl.c
index bbc4b39b1dbf..ffb00669346f 100644
--- a/drivers/bluetooth/hci_mrvl.c
+++ b/drivers/bluetooth/hci_mrvl.c
@@ -328,7 +328,7 @@ static int mrvl_load_firmware(struct hci_dev *hdev, const char *name)
                }
                bt_cb(skb)->pkt_type = MRVL_RAW_DATA;
-                memcpy(skb_put(skb, mrvl->tx_len), fw_ptr, mrvl->tx_len);
+                skb_put_data(skb, fw_ptr, mrvl->tx_len);
                fw_ptr += mrvl->tx_len;
                set_bit(STATE_FW_REQ_PENDING, &mrvl->flags);
diff --git a/drivers/bluetooth/hci_qca.c b/drivers/bluetooth/hci_qca.c
index f242dfd0c2e2..b55f01320631 100644
--- a/drivers/bluetooth/hci_qca.c
+++ b/drivers/bluetooth/hci_qca.c
@@ -869,7 +869,7 @@ static int qca_set_baudrate(struct hci_dev *hdev, uint8_t baudrate)
        }
        /* Assign commands to change baudrate and packet type. */
-        memcpy(skb_put(skb, sizeof(cmd)), cmd, sizeof(cmd));
+        skb_put_data(skb, cmd, sizeof(cmd));
        hci_skb_pkt_type(skb) = HCI_COMMAND_PKT;
        skb_queue_tail(&qca->txq, skb);
diff --git a/drivers/char/pcmcia/synclink_cs.c b/drivers/char/pcmcia/synclink_cs.c
index d136db1a10f0..62be953e5fb0 100644
--- a/drivers/char/pcmcia/synclink_cs.c
+++ b/drivers/char/pcmcia/synclink_cs.c
@@ -4235,7 +4235,7 @@ static void hdlcdev_rx(MGSLPC_INFO *info, char *buf, int size)
                return;
        }
-        memcpy(skb_put(skb, size), buf, size);
+        skb_put_data(skb, buf, size);
        skb->protocol = hdlc_type_trans(skb, dev);
diff --git a/drivers/firewire/net.c b/drivers/firewire/net.c
index 5d3640264f2d..d5040bbd34e8 100644
--- a/drivers/firewire/net.c
+++ b/drivers/firewire/net.c
@@ -600,7 +600,7 @@ static int fwnet_incoming_packet(struct fwnet_device *dev, __be32 *buf, int len,
                        return -ENOMEM;
                }
                skb_reserve(skb, LL_RESERVED_SPACE(net));
-                memcpy(skb_put(skb, len), buf, len);
+                skb_put_data(skb, buf, len);
                return fwnet_finish_incoming_packet(net, skb, source_node_id,
                                                    is_broadcast, ether_type);
diff --git a/drivers/isdn/capi/capi.c b/drivers/isdn/capi/capi.c
index 6a2df3297e77..77be17590866 100644
--- a/drivers/isdn/capi/capi.c
+++ b/drivers/isdn/capi/capi.c
@@ -1058,7 +1058,7 @@ static int capinc_tty_write(struct tty_struct *tty,
        }
        skb_reserve(skb, CAPI_DATA_B3_REQ_LEN);
-        memcpy(skb_put(skb, count), buf, count);
+        skb_put_data(skb, buf, count);
        __skb_queue_tail(&mp->outqueue, skb);
        mp->outbytes += skb->len;
diff --git a/drivers/isdn/capi/capidrv.c b/drivers/isdn/capi/capidrv.c
index 85cfa4f8691f..89dd1303a98a 100644
--- a/drivers/isdn/capi/capidrv.c
+++ b/drivers/isdn/capi/capidrv.c
@@ -516,7 +516,7 @@ static void send_message(capidrv_contr *card, _cmsg *cmsg)
                printk(KERN_ERR "capidrv::send_message: can't allocate mem\n");
                return;
        }
-        memcpy(skb_put(skb, len), cmsg->buf, len);
+        skb_put_data(skb, cmsg->buf, len);
        if (capi20_put_message(&global.ap, skb) != CAPI_NOERROR)
                kfree_skb(skb);
 }
diff --git a/drivers/isdn/hardware/avm/b1.c b/drivers/isdn/hardware/avm/b1.c
index 9fdbd99c7547..b1833d08a5fe 100644
--- a/drivers/isdn/hardware/avm/b1.c
+++ b/drivers/isdn/hardware/avm/b1.c
@@ -529,8 +529,8 @@ irqreturn_t b1_interrupt(int interrupt, void *devptr)
                        printk(KERN_ERR "%s: incoming packet dropped\n",
                               card->name);
                } else {
-                        memcpy(skb_put(skb, MsgLen), card->msgbuf, MsgLen);
+                        skb_put_data(skb, card->msgbuf, MsgLen);
-                        memcpy(skb_put(skb, DataB3Len), card->databuf, DataB3Len);
+                        skb_put_data(skb, card->databuf, DataB3Len);
                        capi_ctr_handle_message(ctrl, ApplId, skb);
                }
                break;
@@ -544,7 +544,7 @@ irqreturn_t b1_interrupt(int interrupt, void *devptr)
                               card->name);
                        spin_unlock_irqrestore(&card->lock, flags);
                } else {
-                        memcpy(skb_put(skb, MsgLen), card->msgbuf, MsgLen);
+                        skb_put_data(skb, card->msgbuf, MsgLen);
                        if (CAPIMSG_CMD(skb->data) == CAPI_DATA_B3_CONF)
                                capilib_data_b3_conf(&cinfo->ncci_head, ApplId,
                                                     CAPIMSG_NCCI(skb->data),
diff --git a/drivers/isdn/hardware/avm/b1dma.c b/drivers/isdn/hardware/avm/b1dma.c
index 818bd8f231db..9538a9e5e1a8 100644
--- a/drivers/isdn/hardware/avm/b1dma.c
+++ b/drivers/isdn/hardware/avm/b1dma.c
@@ -474,8 +474,8 @@ static void b1dma_handle_rx(avmcard *card)
                        printk(KERN_ERR "%s: incoming packet dropped\n",
                               card->name);
                } else {
-                        memcpy(skb_put(skb, MsgLen), card->msgbuf, MsgLen);
+                        skb_put_data(skb, card->msgbuf, MsgLen);
-                        memcpy(skb_put(skb, DataB3Len), card->databuf, DataB3Len);
+                        skb_put_data(skb, card->databuf, DataB3Len);
                        capi_ctr_handle_message(ctrl, ApplId, skb);
                }
                break;
@@ -488,7 +488,7 @@ static void b1dma_handle_rx(avmcard *card)
                        printk(KERN_ERR "%s: incoming packet dropped\n",
                               card->name);
                } else {
-                        memcpy(skb_put(skb, MsgLen), card->msgbuf, MsgLen);
+                        skb_put_data(skb, card->msgbuf, MsgLen);
                        if (CAPIMSG_CMD(skb->data) == CAPI_DATA_B3_CONF) {
                                spin_lock(&card->lock);
                                capilib_data_b3_conf(&cinfo->ncci_head, ApplId,
diff --git a/drivers/isdn/hardware/avm/c4.c b/drivers/isdn/hardware/avm/c4.c
index 17beb2869dc1..40c7e2cf423b 100644
--- a/drivers/isdn/hardware/avm/c4.c
+++ b/drivers/isdn/hardware/avm/c4.c
@@ -536,8 +536,8 @@ static void c4_handle_rx(avmcard *card)
                        printk(KERN_ERR "%s: incoming packet dropped\n",
                               card->name);
                } else {
-                        memcpy(skb_put(skb, MsgLen), card->msgbuf, MsgLen);
+                        skb_put_data(skb, card->msgbuf, MsgLen);
-                        memcpy(skb_put(skb, DataB3Len), card->databuf, DataB3Len);
+                        skb_put_data(skb, card->databuf, DataB3Len);
                        capi_ctr_handle_message(ctrl, ApplId, skb);
                }
                break;
@@ -555,7 +555,7 @@ static void c4_handle_rx(avmcard *card)
                        printk(KERN_ERR "%s: incoming packet dropped\n",
                               card->name);
                } else {
-                        memcpy(skb_put(skb, MsgLen), card->msgbuf, MsgLen);
+                        skb_put_data(skb, card->msgbuf, MsgLen);
                        if (CAPIMSG_CMD(skb->data) == CAPI_DATA_B3_CONF)
                                capilib_data_b3_conf(&cinfo->ncci_head, ApplId,
                                                     CAPIMSG_NCCI(skb->data),
diff --git a/drivers/isdn/hardware/avm/t1isa.c b/drivers/isdn/hardware/avm/t1isa.c
index 9516203c735f..9f80d20ced87 100644
--- a/drivers/isdn/hardware/avm/t1isa.c
+++ b/drivers/isdn/hardware/avm/t1isa.c
@@ -171,8 +171,8 @@ static irqreturn_t t1isa_interrupt(int interrupt, void *devptr)
                                printk(KERN_ERR "%s: incoming packet dropped\n",
                                       card->name);
                        } else {
-                                memcpy(skb_put(skb, MsgLen), card->msgbuf, MsgLen);
+                                skb_put_data(skb, card->msgbuf, MsgLen);
-                                memcpy(skb_put(skb, DataB3Len), card->databuf, DataB3Len);
+                                skb_put_data(skb, card->databuf, DataB3Len);
                                capi_ctr_handle_message(ctrl, ApplId, skb);
                        }
                        break;
@@ -186,7 +186,7 @@ static irqreturn_t t1isa_interrupt(int interrupt, void *devptr)
                                printk(KERN_ERR "%s: incoming packet dropped\n",
                                       card->name);
                        } else {
-                                memcpy(skb_put(skb, MsgLen), card->msgbuf, MsgLen);
+                                skb_put_data(skb, card->msgbuf, MsgLen);
                                if (CAPIMSG_CMD(skb->data) == CAPI_DATA_B3)
                                        capilib_data_b3_conf(&cinfo->ncci_head, ApplId,
                                                             CAPIMSG_NCCI(skb->data),
diff --git a/drivers/isdn/hardware/mISDN/hfcmulti.c b/drivers/isdn/hardware/mISDN/hfcmulti.c
index 961c07ee47b7..aea0c9616ea5 100644
--- a/drivers/isdn/hardware/mISDN/hfcmulti.c
+++ b/drivers/isdn/hardware/mISDN/hfcmulti.c
@@ -1926,7 +1926,7 @@ hfcmulti_dtmf(struct hfc_multi *hc)
                        hh = mISDN_HEAD_P(skb);
                        hh->prim = PH_CONTROL_IND;
                        hh->id = DTMF_HFC_COEF;
-                        memcpy(skb_put(skb, 512), hc->chan[ch].coeff, 512);
+                        skb_put_data(skb, hc->chan[ch].coeff, 512);
                        recv_Bchannel_skb(bch, skb);
                }
        }
@@ -2332,8 +2332,7 @@ next_frame:
                                skb = *sp;
                                *sp = mI_alloc_skb(skb->len, GFP_ATOMIC);
                                if (*sp) {
-                                        memcpy(skb_put(*sp, skb->len),
+                                        skb_put_data(*sp, skb->data, skb->len);
-                                               skb->data, skb->len);
                                        skb_trim(skb, 0);
                                } else {
                                        printk(KERN_DEBUG "%s: No mem\n",
diff --git a/drivers/isdn/hardware/mISDN/hfcsusb.c b/drivers/isdn/hardware/mISDN/hfcsusb.c
index 114f3bcba1b0..17cc879ad2bb 100644
--- a/drivers/isdn/hardware/mISDN/hfcsusb.c
+++ b/drivers/isdn/hardware/mISDN/hfcsusb.c
@@ -893,7 +893,7 @@ hfcsusb_rx_frame(struct usb_fifo *fifo, __u8 *data, unsigned int len,
                }
        }
-        memcpy(skb_put(rx_skb, len), data, len);
+        skb_put_data(rx_skb, data, len);
        if (hdlc) {
                /* we have a complete hdlc packet */
diff --git a/drivers/isdn/hisax/amd7930_fn.c b/drivers/isdn/hisax/amd7930_fn.c
index 3a4c2f9e19e9..dcf4c2a9fcea 100644
--- a/drivers/isdn/hisax/amd7930_fn.c
+++ b/drivers/isdn/hisax/amd7930_fn.c
@@ -317,7 +317,8 @@ Amd7930_empty_Dfifo(struct IsdnCardState *cs, int flag)
                                                        debugl1(cs, "%s", cs->dlog);
                                                }
                                                /* moves received data in sk-buffer */
-                                                memcpy(skb_put(skb, cs->rcvidx), cs->rcvbuf, cs->rcvidx);
+                                                skb_put_data(skb, cs->rcvbuf,
+                                                             cs->rcvidx);
                                                skb_queue_tail(&cs->rq, skb);
                                        }
                                }
diff --git a/drivers/isdn/hisax/avm_pci.c b/drivers/isdn/hisax/avm_pci.c
index d1427bd6452d..daf3742cdef6 100644
--- a/drivers/isdn/hisax/avm_pci.c
+++ b/drivers/isdn/hisax/avm_pci.c
@@ -378,8 +378,9 @@ HDLC_irq(struct BCState *bcs, u_int stat) {
                                        if (!(skb = dev_alloc_skb(bcs->hw.hdlc.rcvidx)))
                                                printk(KERN_WARNING "HDLC: receive out of memory\n");
                                        else {
-                                                memcpy(skb_put(skb, bcs->hw.hdlc.rcvidx),
+                                                skb_put_data(skb,
-                                                       bcs->hw.hdlc.rcvbuf, bcs->hw.hdlc.rcvidx);
+                                                             bcs->hw.hdlc.rcvbuf,
+                                                             bcs->hw.hdlc.rcvidx);
                                                skb_queue_tail(&bcs->rqueue, skb);
                                        }
                                        bcs->hw.hdlc.rcvidx = 0;
diff --git a/drivers/isdn/hisax/diva.c b/drivers/isdn/hisax/diva.c
index 079336e593f9..3fc94e7741ae 100644
--- a/drivers/isdn/hisax/diva.c
+++ b/drivers/isdn/hisax/diva.c
@@ -511,7 +511,8 @@ Memhscx_interrupt(struct IsdnCardState *cs, u_char val, u_char hscx)
                                if (!(skb = dev_alloc_skb(count)))
                                        printk(KERN_WARNING "HSCX: receive out of memory\n");
                                else {
-                                        memcpy(skb_put(skb, count), bcs->hw.hscx.rcvbuf, count);
+                                        skb_put_data(skb, bcs->hw.hscx.rcvbuf,
+                                                     count);
                                        skb_queue_tail(&bcs->rqueue, skb);
                                }
                        }
@@ -526,7 +527,8 @@ Memhscx_interrupt(struct IsdnCardState *cs, u_char val, u_char hscx)
                        if (!(skb = dev_alloc_skb(fifo_size)))
                                printk(KERN_WARNING "HiSax: receive out of memory\n");
                        else {
-                                memcpy(skb_put(skb, fifo_size), bcs->hw.hscx.rcvbuf, fifo_size);
+                                skb_put_data(skb, bcs->hw.hscx.rcvbuf,
+                                             fifo_size);
                                skb_queue_tail(&bcs->rqueue, skb);
                        }
                        bcs->hw.hscx.rcvidx = 0;
diff --git a/drivers/isdn/hisax/elsa_ser.c b/drivers/isdn/hisax/elsa_ser.c
index a2a358c1dc8e..999effd7a276 100644
--- a/drivers/isdn/hisax/elsa_ser.c
+++ b/drivers/isdn/hisax/elsa_ser.c
@@ -333,8 +333,8 @@ static inline void receive_chars(struct IsdnCardState *cs,
                if (!(skb = dev_alloc_skb(cs->hw.elsa.rcvcnt)))
                        printk(KERN_WARNING "ElsaSER: receive out of memory\n");
                else {
-                        memcpy(skb_put(skb, cs->hw.elsa.rcvcnt), cs->hw.elsa.rcvbuf,
+                        skb_put_data(skb, cs->hw.elsa.rcvbuf,
-                               cs->hw.elsa.rcvcnt);
+                                     cs->hw.elsa.rcvcnt);
                        skb_queue_tail(&cs->hw.elsa.bcs->rqueue, skb);
                }
                schedule_event(cs->hw.elsa.bcs, B_RCVBUFREADY);
diff --git a/drivers/isdn/hisax/hfc_usb.c b/drivers/isdn/hisax/hfc_usb.c
index 6dbd1f1da14f..ef4748083efd 100644
--- a/drivers/isdn/hisax/hfc_usb.c
+++ b/drivers/isdn/hisax/hfc_usb.c
@@ -799,7 +799,7 @@ collect_rx_frame(usb_fifo *fifo, __u8 *data, int len, int finish)
        }
        if (len) {
                if (fifo->skbuff->len + len < fifo->max_size) {
-                        memcpy(skb_put(fifo->skbuff, len), data, len);
+                        skb_put_data(fifo->skbuff, data, len);
                } else {
                        DBG(HFCUSB_DBG_FIFO_ERR,
                            "HCF-USB: got frame exceeded fifo->max_size(%d) fifo(%d)",
diff --git a/drivers/isdn/hisax/hisax_fcpcipnp.c b/drivers/isdn/hisax/hisax_fcpcipnp.c
index 5e8a5d967162..5a9f39ed1d5d 100644
--- a/drivers/isdn/hisax/hisax_fcpcipnp.c
+++ b/drivers/isdn/hisax/hisax_fcpcipnp.c
@@ -495,8 +495,7 @@ static inline void hdlc_rpr_irq(struct fritz_bcs *bcs, u32 stat)
                        if (!skb) {
                                printk(KERN_WARNING "HDLC: receive out of memory\n");
                        } else {
-                                memcpy(skb_put(skb, bcs->rcvidx), bcs->rcvbuf,
+                                skb_put_data(skb, bcs->rcvbuf, bcs->rcvidx);
-                                       bcs->rcvidx);
                                DBG_SKB(1, skb);
                                B_L1L2(bcs, PH_DATA | INDICATION, skb);
                        }
diff --git a/drivers/isdn/hisax/hisax_isac.c b/drivers/isdn/hisax/hisax_isac.c
index 5154c252a25f..0f36375478c5 100644
--- a/drivers/isdn/hisax/hisax_isac.c
+++ b/drivers/isdn/hisax/hisax_isac.c
@@ -557,7 +557,7 @@ static inline void isac_rme_interrupt(struct isac *isac)
                DBG(DBG_WARN, "no memory, dropping\n");
                goto out;
        }
-        memcpy(skb_put(skb, count), isac->rcvbuf, count);
+        skb_put_data(skb, isac->rcvbuf, count);
        DBG_SKB(DBG_RPACKET, skb);
        D_L1L2(isac, PH_DATA | INDICATION, skb);
 out:
@@ -687,7 +687,7 @@ static inline void isacsx_rme_interrupt(struct isac *isac)
                DBG(DBG_WARN, "no memory, dropping");
                goto out;
        }
-        memcpy(skb_put(skb, count), isac->rcvbuf, count);
+        skb_put_data(skb, isac->rcvbuf, count);
        DBG_SKB(DBG_RPACKET, skb);
        D_L1L2(isac, PH_DATA | INDICATION, skb);
 out:
diff --git a/drivers/isdn/hisax/hscx_irq.c b/drivers/isdn/hisax/hscx_irq.c
index a8d6188402c6..0d7e783c8bef 100644
--- a/drivers/isdn/hisax/hscx_irq.c
+++ b/drivers/isdn/hisax/hscx_irq.c
@@ -169,7 +169,8 @@ hscx_interrupt(struct IsdnCardState *cs, u_char val, u_char hscx)
                                if (!(skb = dev_alloc_skb(count)))
                                        printk(KERN_WARNING "HSCX: receive out of memory\n");
                                else {
-                                        memcpy(skb_put(skb, count), bcs->hw.hscx.rcvbuf, count);
+                                        skb_put_data(skb, bcs->hw.hscx.rcvbuf,
+                                                     count);
                                        skb_queue_tail(&bcs->rqueue, skb);
                                }
                        }
@@ -184,7 +185,8 @@ hscx_interrupt(struct IsdnCardState *cs, u_char val, u_char hscx)
                        if (!(skb = dev_alloc_skb(fifo_size)))
                                printk(KERN_WARNING "HiSax: receive out of memory\n");
                        else {
-                                memcpy(skb_put(skb, fifo_size), bcs->hw.hscx.rcvbuf, fifo_size);
+                                skb_put_data(skb, bcs->hw.hscx.rcvbuf,
+                                             fifo_size);
                                skb_queue_tail(&bcs->rqueue, skb);
                        }
                        bcs->hw.hscx.rcvidx = 0;
diff --git a/drivers/isdn/hisax/icc.c b/drivers/isdn/hisax/icc.c
index c7c3797a817e..8d1804572b32 100644
--- a/drivers/isdn/hisax/icc.c
+++ b/drivers/isdn/hisax/icc.c
@@ -217,7 +217,7 @@ icc_interrupt(struct IsdnCardState *cs, u_char val)
                                if (!(skb = alloc_skb(count, GFP_ATOMIC)))
                                        printk(KERN_WARNING "HiSax: D receive out of memory\n");
                                else {
-                                        memcpy(skb_put(skb, count), cs->rcvbuf, count);
+                                        skb_put_data(skb, cs->rcvbuf, count);
                                        skb_queue_tail(&cs->rq, skb);
                                }
                        }
diff --git a/drivers/isdn/hisax/ipacx.c b/drivers/isdn/hisax/ipacx.c
index 43effe7082ed..c426b4fea28a 100644
--- a/drivers/isdn/hisax/ipacx.c
+++ b/drivers/isdn/hisax/ipacx.c
@@ -350,7 +350,7 @@ dch_int(struct IsdnCardState *cs)
                                if (!(skb = dev_alloc_skb(count)))
                                        printk(KERN_WARNING "HiSax dch_int(): receive out of memory\n");
                                else {
-                                        memcpy(skb_put(skb, count), cs->rcvbuf, count);
+                                        skb_put_data(skb, cs->rcvbuf, count);
                                        skb_queue_tail(&cs->rq, skb);
                                }
                        }
@@ -627,7 +627,8 @@ bch_int(struct IsdnCardState *cs, u_char hscx)
                                if (!(skb = dev_alloc_skb(count)))
                                        printk(KERN_WARNING "HiSax bch_int(): receive frame out of memory\n");
                                else {
-                                        memcpy(skb_put(skb, count), bcs->hw.hscx.rcvbuf, count);
+                                        skb_put_data(skb, bcs->hw.hscx.rcvbuf,
+                                                     count);
                                        skb_queue_tail(&bcs->rqueue, skb);
                                }
                        }
@@ -644,7 +645,8 @@ bch_int(struct IsdnCardState *cs, u_char hscx)
                        if (!(skb = dev_alloc_skb(B_FIFO_SIZE)))
                                printk(KERN_WARNING "HiSax bch_int(): receive transparent out of memory\n");
                        else {
-                                memcpy(skb_put(skb, B_FIFO_SIZE), bcs->hw.hscx.rcvbuf, B_FIFO_SIZE);
+                                skb_put_data(skb, bcs->hw.hscx.rcvbuf,
+                                             B_FIFO_SIZE);
                                skb_queue_tail(&bcs->rqueue, skb);
                        }
                        bcs->hw.hscx.rcvidx = 0;
diff --git a/drivers/isdn/hisax/isac.c b/drivers/isdn/hisax/isac.c
index 4273b4548825..ea965f29a555 100644
--- a/drivers/isdn/hisax/isac.c
+++ b/drivers/isdn/hisax/isac.c
@@ -222,7 +222,7 @@ isac_interrupt(struct IsdnCardState *cs, u_char val)
                                if (!skb)
                                        printk(KERN_WARNING "HiSax: D receive out of memory\n");
                                else {
-                                        memcpy(skb_put(skb, count), cs->rcvbuf, count);
+                                        skb_put_data(skb, cs->rcvbuf, count);
                                        skb_queue_tail(&cs->rq, skb);
                                }
                        }
diff --git a/drivers/isdn/hisax/isar.c b/drivers/isdn/hisax/isar.c
index 0dc60b287c4b..98b4b67ea337 100644
--- a/drivers/isdn/hisax/isar.c
+++ b/drivers/isdn/hisax/isar.c
@@ -458,7 +458,7 @@ send_DLE_ETX(struct BCState *bcs)
        struct sk_buff *skb;
        if ((skb = dev_alloc_skb(2))) {
-                memcpy(skb_put(skb, 2), dleetx, 2);
+                skb_put_data(skb, dleetx, 2);
                skb_queue_tail(&bcs->rqueue, skb);
                schedule_event(bcs, B_RCVBUFREADY);
        } else {
@@ -550,8 +550,8 @@ isar_rcv_frame(struct IsdnCardState *cs, struct BCState *bcs)
                                } else if (!(skb = dev_alloc_skb(bcs->hw.isar.rcvidx - 2))) {
                                        printk(KERN_WARNING "ISAR: receive out of memory\n");
                                } else {
-                                        memcpy(skb_put(skb, bcs->hw.isar.rcvidx - 2),
+                                        skb_put_data(skb, bcs->hw.isar.rcvbuf,
-                                               bcs->hw.isar.rcvbuf, bcs->hw.isar.rcvidx - 2);
+                                                     bcs->hw.isar.rcvidx - 2);
                                        skb_queue_tail(&bcs->rqueue, skb);
                                        schedule_event(bcs, B_RCVBUFREADY);
                                }
diff --git a/drivers/isdn/hisax/isdnl2.c b/drivers/isdn/hisax/isdnl2.c
index c53a53f6efb6..1a40ed04cb52 100644
--- a/drivers/isdn/hisax/isdnl2.c
+++ b/drivers/isdn/hisax/isdnl2.c
@@ -433,7 +433,7 @@ send_uframe(struct PStack *st, u_char cmd, u_char cr)
                printk(KERN_WARNING "isdl2 can't alloc sbbuff for send_uframe\n");
                return;
        }
-        memcpy(skb_put(skb, i), tmp, i);
+        skb_put_data(skb, tmp, i);
        enqueue_super(st, skb);
 }
@@ -894,7 +894,7 @@ enquiry_cr(struct PStack *st, u_char typ, u_char cr, u_char pf)
                printk(KERN_WARNING "isdl2 can't alloc sbbuff for enquiry_cr\n");
                return;
        }
-        memcpy(skb_put(skb, i), tmp, i);
+        skb_put_data(skb, tmp, i);
        enqueue_super(st, skb);
 }
diff --git a/drivers/isdn/hisax/jade_irq.c b/drivers/isdn/hisax/jade_irq.c
index b930da9b5aa6..a89e2df911c5 100644
--- a/drivers/isdn/hisax/jade_irq.c
+++ b/drivers/isdn/hisax/jade_irq.c
@@ -147,7 +147,8 @@ jade_interrupt(struct IsdnCardState *cs, u_char val, u_char jade)
                                if (!(skb = dev_alloc_skb(count)))
                                        printk(KERN_WARNING "JADE %s receive out of memory\n", (jade ? "B" : "A"));
                                else {
-                                        memcpy(skb_put(skb, count), bcs->hw.hscx.rcvbuf, count);
+                                        skb_put_data(skb, bcs->hw.hscx.rcvbuf,
+                                                     count);
                                        skb_queue_tail(&bcs->rqueue, skb);
                                }
                        }
@@ -162,7 +163,8 @@ jade_interrupt(struct IsdnCardState *cs, u_char val, u_char jade)
                        if (!(skb = dev_alloc_skb(fifo_size)))
                                printk(KERN_WARNING "HiSax: receive out of memory\n");
                        else {
-                                memcpy(skb_put(skb, fifo_size), bcs->hw.hscx.rcvbuf, fifo_size);
+                                skb_put_data(skb, bcs->hw.hscx.rcvbuf,
+                                             fifo_size);
                                skb_queue_tail(&bcs->rqueue, skb);
                        }
                        bcs->hw.hscx.rcvidx = 0;
diff --git a/drivers/isdn/hisax/l3_1tr6.c b/drivers/isdn/hisax/l3_1tr6.c
index 875402e76d0a..da0a1c6aa329 100644
--- a/drivers/isdn/hisax/l3_1tr6.c
+++ b/drivers/isdn/hisax/l3_1tr6.c
@@ -149,7 +149,7 @@ l3_1tr6_setup_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        L3DelTimer(&pc->timer);
        L3AddTimer(&pc->timer, T303, CC_T303);
        newl3state(pc, 1);
@@ -497,7 +497,7 @@ l3_1tr6_setup_rsp(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        L3DelTimer(&pc->timer);
        L3AddTimer(&pc->timer, T313, CC_T313);
@@ -543,7 +543,7 @@ l3_1tr6_disconnect_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        L3AddTimer(&pc->timer, T305, CC_T305);
 }
@@ -602,7 +602,7 @@ l3_1tr6_t305(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        L3AddTimer(&pc->timer, T308, CC_T308_1);
 }
diff --git a/drivers/isdn/hisax/l3dss1.c b/drivers/isdn/hisax/l3dss1.c
index cda700664e9c..18a3484b1f7e 100644
--- a/drivers/isdn/hisax/l3dss1.c
+++ b/drivers/isdn/hisax/l3dss1.c
@@ -525,7 +525,7 @@ l3dss1_message_cause(struct l3_process *pc, u_char mt, u_char cause)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 }
@@ -551,7 +551,7 @@ l3dss1_status_send(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 }
@@ -587,7 +587,7 @@ l3dss1_msg_without_setup(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        dss1_release_l3_process(pc);
 }
@@ -944,7 +944,7 @@ l3dss1_msg_with_uus(struct l3_process *pc, u_char cmd)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 } /* l3dss1_msg_with_uus */
@@ -1420,7 +1420,7 @@ l3dss1_setup_req(struct l3_process *pc, u_char pr,
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        L3DelTimer(&pc->timer);
        L3AddTimer(&pc->timer, T303, CC_T303);
        newl3state(pc, 1);
@@ -1786,7 +1786,7 @@ l3dss1_disconnect_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        newl3state(pc, 11);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        L3AddTimer(&pc->timer, T305, CC_T305);
@@ -1848,7 +1848,7 @@ l3dss1_reject_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        pc->st->l3.l3l4(pc->st, CC_RELEASE | INDICATION, pc);
        newl3state(pc, 0);
@@ -2145,7 +2145,7 @@ static void l3dss1_redir_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l))) return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 } /* l3dss1_redir_req */
@@ -2216,7 +2216,7 @@ static int l3dss1_cmd_global(struct PStack *st, isdn_ctrl *ic)
                                if (pc) dss1_release_l3_process(pc);
                                return (-2);
                        }
-                        memcpy(skb_put(skb, l), temp, l);
+                        skb_put_data(skb, temp, l);
                        if (pc)
                        { pc->prot.dss1.invoke_id = id; /* remember id */
@@ -2359,7 +2359,7 @@ l3dss1_t305(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        newl3state(pc, 19);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        L3AddTimer(&pc->timer, T308, CC_T308_1);
@@ -2528,7 +2528,7 @@ l3dss1_suspend_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        newl3state(pc, 15);
        L3AddTimer(&pc->timer, T319, CC_T319);
@@ -2603,7 +2603,7 @@ l3dss1_resume_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        newl3state(pc, 17);
        L3AddTimer(&pc->timer, T318, CC_T318);
@@ -2721,7 +2721,7 @@ l3dss1_global_restart(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        newl3state(pc, 0);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 }
@@ -2929,7 +2929,7 @@ global_handler(struct PStack *st, int mt, struct sk_buff *skb)
                l = p - tmp;
                if (!(skb = l3_alloc_skb(l)))
                        return;
-                memcpy(skb_put(skb, l), tmp, l);
+                skb_put_data(skb, tmp, l);
                l3_msg(proc->st, DL_DATA | REQUEST, skb);
        } else {
                if (st->l3.debug & L3_DEB_STATE) {
diff --git a/drivers/isdn/hisax/l3ni1.c b/drivers/isdn/hisax/l3ni1.c
index 8dc791bfaa6f..ea311e7df48e 100644
--- a/drivers/isdn/hisax/l3ni1.c
+++ b/drivers/isdn/hisax/l3ni1.c
@@ -454,7 +454,7 @@ l3ni1_message_plus_chid(struct l3_process *pc, u_char mt)
        if (!(skb = l3_alloc_skb(7)))
                return;
-        memcpy(skb_put(skb, 7), tmp, 7);
+        skb_put_data(skb, tmp, 7);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 }
@@ -475,7 +475,7 @@ l3ni1_message_cause(struct l3_process *pc, u_char mt, u_char cause)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 }
@@ -501,7 +501,7 @@ l3ni1_status_send(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 }
@@ -537,7 +537,7 @@ l3ni1_msg_without_setup(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        ni1_release_l3_process(pc);
 }
@@ -894,7 +894,7 @@ l3ni1_msg_with_uus(struct l3_process *pc, u_char cmd)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 } /* l3ni1_msg_with_uus */
@@ -1274,7 +1274,7 @@ l3ni1_setup_req(struct l3_process *pc, u_char pr,
        {
                return;
        }
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        L3DelTimer(&pc->timer);
        L3AddTimer(&pc->timer, T303, CC_T303);
        newl3state(pc, 1);
@@ -1640,7 +1640,7 @@ l3ni1_disconnect_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        newl3state(pc, 11);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        L3AddTimer(&pc->timer, T305, CC_T305);
@@ -1704,7 +1704,7 @@ l3ni1_reject_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        pc->st->l3.l3l4(pc->st, CC_RELEASE | INDICATION, pc);
        newl3state(pc, 0);
@@ -2001,7 +2001,7 @@ static void l3ni1_redir_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l))) return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 } /* l3ni1_redir_req */
@@ -2076,7 +2076,7 @@ static int l3ni1_cmd_global(struct PStack *st, isdn_ctrl *ic)
                                if (pc) ni1_release_l3_process(pc);
                                return (-2);
                        }
-                        memcpy(skb_put(skb, l), temp, l);
+                        skb_put_data(skb, temp, l);
                        if (pc)
                        { pc->prot.ni1.invoke_id = id; /* remember id */
@@ -2219,7 +2219,7 @@ l3ni1_t305(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        newl3state(pc, 19);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        L3AddTimer(&pc->timer, T308, CC_T308_1);
@@ -2388,7 +2388,7 @@ l3ni1_suspend_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        newl3state(pc, 15);
        L3AddTimer(&pc->timer, T319, CC_T319);
@@ -2463,7 +2463,7 @@ l3ni1_resume_req(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
        newl3state(pc, 17);
        L3AddTimer(&pc->timer, T318, CC_T318);
@@ -2582,7 +2582,7 @@ l3ni1_global_restart(struct l3_process *pc, u_char pr, void *arg)
        l = p - tmp;
        if (!(skb = l3_alloc_skb(l)))
                return;
-        memcpy(skb_put(skb, l), tmp, l);
+        skb_put_data(skb, tmp, l);
        newl3state(pc, 0);
        l3_msg(pc->st, DL_DATA | REQUEST, skb);
 }
@@ -2655,7 +2655,7 @@ static void l3ni1_SendSpid(struct l3_process *pc, u_char pr, struct sk_buff *skb
        *p++ = IE_SPID;
        *p++ = l;
-        memcpy(skb_put(skb, l), pSPID, l);
+        skb_put_data(skb, pSPID, l);
        newl3state(pc, iNewState);
@@ -2873,7 +2873,7 @@ global_handler(struct PStack *st, int mt, struct sk_buff *skb)
                l = p - tmp;
                if (!(skb = l3_alloc_skb(l)))
                        return;
-                memcpy(skb_put(skb, l), tmp, l);
+                skb_put_data(skb, tmp, l);
                l3_msg(proc->st, DL_DATA | REQUEST, skb);
        } else {
                if (st->l3.debug & L3_DEB_STATE) {
diff --git a/drivers/isdn/hisax/netjet.c b/drivers/isdn/hisax/netjet.c
index 233e432e06f6..b7f54fa29228 100644
--- a/drivers/isdn/hisax/netjet.c
+++ b/drivers/isdn/hisax/netjet.c
@@ -383,7 +383,7 @@ static void got_frame(struct BCState *bcs, int count) {
        if (!(skb = dev_alloc_skb(count)))
                printk(KERN_WARNING "TIGER: receive out of memory\n");
        else {
-                memcpy(skb_put(skb, count), bcs->hw.tiger.rcvbuf, count);
+                skb_put_data(skb, bcs->hw.tiger.rcvbuf, count);
                skb_queue_tail(&bcs->rqueue, skb);
        }
        test_and_set_bit(B_RCVBUFREADY, &bcs->event);
diff --git a/drivers/isdn/hisax/st5481_usb.c b/drivers/isdn/hisax/st5481_usb.c
index a0fdbc074b98..1cb9930d5e24 100644
--- a/drivers/isdn/hisax/st5481_usb.c
+++ b/drivers/isdn/hisax/st5481_usb.c
@@ -527,7 +527,7 @@ static void usb_in_complete(struct urb *urb)
                                WARNING("receive out of memory\n");
                                break;
                        }
-                        memcpy(skb_put(skb, status), in->rcvbuf, status);
+                        skb_put_data(skb, in->rcvbuf, status);
                        in->hisax_if->l1l2(in->hisax_if, PH_DATA | INDICATION, skb);
                } else if (status == -HDLC_CRC_ERROR) {
                        INFO("CRC error");
diff --git a/drivers/isdn/hisax/w6692.c b/drivers/isdn/hisax/w6692.c
index c99f0ec58a01..6f6733b7c1e4 100644
--- a/drivers/isdn/hisax/w6692.c
+++ b/drivers/isdn/hisax/w6692.c
@@ -309,7 +309,9 @@ W6692B_interrupt(struct IsdnCardState *cs, u_char bchan)
                                if (!(skb = dev_alloc_skb(count)))
                                        printk(KERN_WARNING "W6692: Bchan receive out of memory\n");
                                else {
-                                        memcpy(skb_put(skb, count), bcs->hw.w6692.rcvbuf, count);
+                                        skb_put_data(skb,
+                                                     bcs->hw.w6692.rcvbuf,
+                                                     count);
                                        skb_queue_tail(&bcs->rqueue, skb);
                                }
                        }
@@ -332,7 +334,8 @@ W6692B_interrupt(struct IsdnCardState *cs, u_char bchan)
                        if (!(skb = dev_alloc_skb(W_B_FIFO_THRESH)))
                                printk(KERN_WARNING "HiSax: receive out of memory\n");
                        else {
-                                memcpy(skb_put(skb, W_B_FIFO_THRESH), bcs->hw.w6692.rcvbuf, W_B_FIFO_THRESH);
+                                skb_put_data(skb, bcs->hw.w6692.rcvbuf,
+                                             W_B_FIFO_THRESH);
                                skb_queue_tail(&bcs->rqueue, skb);
                        }
                        bcs->hw.w6692.rcvidx = 0;
@@ -441,7 +444,7 @@ StartW6692:
                                if (!(skb = alloc_skb(count, GFP_ATOMIC)))
                                        printk(KERN_WARNING "HiSax: D receive out of memory\n");
                                else {
-                                        memcpy(skb_put(skb, count), cs->rcvbuf, count);
+                                        skb_put_data(skb, cs->rcvbuf, count);
                                        skb_queue_tail(&cs->rq, skb);
                                }
                        }
diff --git a/drivers/isdn/hysdn/hycapi.c b/drivers/isdn/hysdn/hycapi.c
index 93bae94314a6..87119b517508 100644
--- a/drivers/isdn/hysdn/hycapi.c
+++ b/drivers/isdn/hysdn/hycapi.c
@@ -171,16 +171,16 @@ hycapi_register_internal(struct capi_ctr *ctrl, __u16 appl,
                       card->myid);
                return;
        }
-        memcpy(skb_put(skb, sizeof(__u16)), &len, sizeof(__u16));
+        skb_put_data(skb, &len, sizeof(__u16));
-        memcpy(skb_put(skb, sizeof(__u16)), &appl, sizeof(__u16));
+        skb_put_data(skb, &appl, sizeof(__u16));
        memcpy(skb_put(skb, sizeof(__u8)), &_command, sizeof(_command));
        memcpy(skb_put(skb, sizeof(__u8)), &_subcommand, sizeof(_subcommand));
-        memcpy(skb_put(skb, sizeof(__u16)), &MessageNumber, sizeof(__u16));
+        skb_put_data(skb, &MessageNumber, sizeof(__u16));
-        memcpy(skb_put(skb, sizeof(__u16)), &MessageBufferSize, sizeof(__u16));
+        skb_put_data(skb, &MessageBufferSize, sizeof(__u16));
-        memcpy(skb_put(skb, sizeof(__u16)), &(rp->level3cnt), sizeof(__u16));
+        skb_put_data(skb, &(rp->level3cnt), sizeof(__u16));
-        memcpy(skb_put(skb, sizeof(__u16)), &(rp->datablkcnt), sizeof(__u16));
+        skb_put_data(skb, &(rp->datablkcnt), sizeof(__u16));
-        memcpy(skb_put(skb, sizeof(__u16)), &(rp->datablklen), sizeof(__u16));
+        skb_put_data(skb, &(rp->datablklen), sizeof(__u16));
-        memcpy(skb_put(skb, slen), ExtFeatureDefaults, slen);
+        skb_put_data(skb, ExtFeatureDefaults, slen);
        hycapi_applications[appl - 1].ctrl_mask |= (1 << (ctrl->cnr - 1));
        hycapi_send_message(ctrl, skb);
 }
@@ -279,11 +279,11 @@ static void hycapi_release_internal(struct capi_ctr *ctrl, __u16 appl)
                       card->myid);
                return;
        }
-        memcpy(skb_put(skb, sizeof(__u16)), &len, sizeof(__u16));
+        skb_put_data(skb, &len, sizeof(__u16));
-        memcpy(skb_put(skb, sizeof(__u16)), &appl, sizeof(__u16));
+        skb_put_data(skb, &appl, sizeof(__u16));
        memcpy(skb_put(skb, sizeof(__u8)), &_command, sizeof(_command));
        memcpy(skb_put(skb, sizeof(__u8)), &_subcommand, sizeof(_subcommand));
-        memcpy(skb_put(skb, sizeof(__u16)), &MessageNumber, sizeof(__u16));
+        skb_put_data(skb, &MessageNumber, sizeof(__u16));
        hycapi_send_message(ctrl, skb);
        hycapi_applications[appl - 1].ctrl_mask &= ~(1 << (ctrl->cnr - 1));
 }
@@ -557,10 +557,9 @@ hycapi_rx_capipkt(hysdn_card *card, unsigned char *buf, unsigned short len)
                               card->myid);
                        return;
                }
-                memcpy(skb_put(skb, MsgLen), buf, MsgLen);
+                skb_put_data(skb, buf, MsgLen);
-                memcpy(skb_put(skb, 2 * sizeof(__u32)), CP64, 2 * sizeof(__u32));
+                skb_put_data(skb, CP64, 2 * sizeof(__u32));
-                memcpy(skb_put(skb, len - MsgLen), buf + MsgLen,
+                skb_put_data(skb, buf + MsgLen, len - MsgLen);
-                       len - MsgLen);
                CAPIMSG_SETLEN(skb->data, 30);
        } else {
                if (!(skb = alloc_skb(len, GFP_ATOMIC))) {
@@ -568,7 +567,7 @@ hycapi_rx_capipkt(hysdn_card *card, unsigned char *buf, unsigned short len)
                               card->myid);
                        return;
                }
-                memcpy(skb_put(skb, len), buf, len);
+                skb_put_data(skb, buf, len);
        }
        switch (CAPIMSG_CMD(skb->data))
        {
diff --git a/drivers/isdn/hysdn/hysdn_net.c b/drivers/isdn/hysdn/hysdn_net.c
index b93a4e9a8d34..8e9c34f33d86 100644
--- a/drivers/isdn/hysdn/hysdn_net.c
+++ b/drivers/isdn/hysdn/hysdn_net.c
@@ -201,7 +201,7 @@ hysdn_rx_netpkt(hysdn_card *card, unsigned char *buf, unsigned short len)
                return;
        }
        /* copy the data */
-        memcpy(skb_put(skb, len), buf, len);
+        skb_put_data(skb, buf, len);
        /* determine the used protocol */
        skb->protocol = eth_type_trans(skb, dev);
diff --git a/drivers/isdn/i4l/isdn_ppp.c b/drivers/isdn/i4l/isdn_ppp.c
index 8aa158a09180..9ce23cf3d7d2 100644
--- a/drivers/isdn/i4l/isdn_ppp.c
+++ b/drivers/isdn/i4l/isdn_ppp.c
@@ -2258,8 +2258,7 @@ static void isdn_ppp_ccp_xmit_reset(struct ippp_struct *is, int proto,
        /* Now stuff remaining bytes */
        if (len) {
-                p = skb_put(skb, len);
+                p = skb_put_data(skb, data, len);
-                memcpy(p, data, len);
        }
        /* skb is now ready for xmit */
diff --git a/drivers/isdn/i4l/isdn_tty.c b/drivers/isdn/i4l/isdn_tty.c
index ddd8207e4e54..d30130c8d0f3 100644
--- a/drivers/isdn/i4l/isdn_tty.c
+++ b/drivers/isdn/i4l/isdn_tty.c
@@ -474,7 +474,7 @@ isdn_tty_senddown(modem_info *info)
                return;
        }
        skb_reserve(skb, skb_res);
-        memcpy(skb_put(skb, buflen), info->port.xmit_buf, buflen);
+        skb_put_data(skb, info->port.xmit_buf, buflen);
        info->xmit_count = 0;
 #ifdef CONFIG_ISDN_AUDIO
        if (info->vonline & 2) {
diff --git a/drivers/isdn/i4l/isdn_v110.c b/drivers/isdn/i4l/isdn_v110.c
index 52827a80c51f..8b74ce412524 100644
--- a/drivers/isdn/i4l/isdn_v110.c
+++ b/drivers/isdn/i4l/isdn_v110.c
@@ -421,7 +421,7 @@ isdn_v110_sync(isdn_v110_stream *v)
        }
        if ((skb = dev_alloc_skb(v->framelen + v->skbres))) {
                skb_reserve(skb, v->skbres);
-                memcpy(skb_put(skb, v->framelen), v->OfflineFrame, v->framelen);
+                skb_put_data(skb, v->OfflineFrame, v->framelen);
        }
        return skb;
 }
@@ -441,7 +441,7 @@ isdn_v110_idle(isdn_v110_stream *v)
        }
        if ((skb = dev_alloc_skb(v->framelen + v->skbres))) {
                skb_reserve(skb, v->skbres);
-                memcpy(skb_put(skb, v->framelen), v->OnlineFrame, v->framelen);
+                skb_put_data(skb, v->OnlineFrame, v->framelen);
        }
        return skb;
 }
@@ -486,7 +486,7 @@ isdn_v110_encode(isdn_v110_stream *v, struct sk_buff *skb)
        }
        skb_reserve(nskb, v->skbres + sizeof(int));
        if (skb->len == 0) {
-                memcpy(skb_put(nskb, v->framelen), v->OnlineFrame, v->framelen);
+                skb_put_data(nskb, v->OnlineFrame, v->framelen);
                *((int *)skb_push(nskb, sizeof(int))) = 0;
                return nskb;
        }
diff --git a/drivers/isdn/isdnloop/isdnloop.c b/drivers/isdn/isdnloop/isdnloop.c
index ef9c8e4f1fa2..7ac7badb8f55 100644
--- a/drivers/isdn/isdnloop/isdnloop.c
+++ b/drivers/isdn/isdnloop/isdnloop.c
@@ -479,7 +479,7 @@ isdnloop_fake(isdnloop_card *card, char *s, int ch)
        }
        if (ch >= 0)
                sprintf(skb_put(skb, 3), "%02d;", ch);
-        memcpy(skb_put(skb, strlen(s)), s, strlen(s));
+        skb_put_data(skb, s, strlen(s));
        skb_queue_tail(&card->dqueue, skb);
        return 0;
 }
diff --git a/drivers/isdn/mISDN/dsp_cmx.c b/drivers/isdn/mISDN/dsp_cmx.c
index 8e3aa002767b..d4b6f01a3f0e 100644
--- a/drivers/isdn/mISDN/dsp_cmx.c
+++ b/drivers/isdn/mISDN/dsp_cmx.c
@@ -1595,8 +1595,7 @@ send_packet:
                                thh = mISDN_HEAD_P(txskb);
                                thh->prim = DL_DATA_REQ;
                                thh->id = 0;
-                                memcpy(skb_put(txskb, len), nskb->data + preload,
+                                skb_put_data(txskb, nskb->data + preload, len);
-                                       len);
                                /* queue (trigger later) */
                                skb_queue_tail(&dsp->sendq, txskb);
                        }
diff --git a/drivers/isdn/mISDN/layer2.c b/drivers/isdn/mISDN/layer2.c
index 5eb380a25903..7243a6746f8b 100644
--- a/drivers/isdn/mISDN/layer2.c
+++ b/drivers/isdn/mISDN/layer2.c
@@ -176,7 +176,7 @@ l2up_create(struct layer2 *l2, u_int prim, int len, void *arg)
        hh->prim = prim;
        hh->id = (l2->ch.nr << 16) | l2->ch.addr;
        if (len)
-                memcpy(skb_put(skb, len), arg, len);
+                skb_put_data(skb, arg, len);
        err = l2->up->send(l2->up, skb);
        if (err) {
                printk(KERN_WARNING "%s: dev %s err=%d\n", __func__,
@@ -235,7 +235,7 @@ l2down_create(struct layer2 *l2, u_int prim, u_int id, int len, void *arg)
        hh->prim = prim;
        hh->id = id;
        if (len)
-                memcpy(skb_put(skb, len), arg, len);
+                skb_put_data(skb, arg, len);
        err = l2down_raw(l2, skb);
        if (err)
                dev_kfree_skb(skb);
@@ -640,7 +640,7 @@ send_uframe(struct layer2 *l2, struct sk_buff *skb, u_char cmd, u_char cr)
                        return;
                }
        }
-        memcpy(skb_put(skb, i), tmp, i);
+        skb_put_data(skb, tmp, i);
        enqueue_super(l2, skb);
 }
@@ -1125,7 +1125,7 @@ enquiry_cr(struct layer2 *l2, u_char typ, u_char cr, u_char pf)
                       mISDNDevName4ch(&l2->ch), __func__);
                return;
        }
-        memcpy(skb_put(skb, i), tmp, i);
+        skb_put_data(skb, tmp, i);
        enqueue_super(l2, skb);
 }
diff --git a/drivers/isdn/mISDN/tei.c b/drivers/isdn/mISDN/tei.c
index 592f597d8951..908127efccf8 100644
--- a/drivers/isdn/mISDN/tei.c
+++ b/drivers/isdn/mISDN/tei.c
@@ -312,7 +312,7 @@ teiup_create(struct manager *mgr, u_int prim, int len, void *arg)
        hh->prim = prim;
        hh->id = (mgr->ch.nr << 16) | mgr->ch.addr;
        if (len)
-                memcpy(skb_put(skb, len), arg, len);
+                skb_put_data(skb, arg, len);
        err = mgr->up->send(mgr->up, skb);
        if (err) {
                printk(KERN_WARNING "%s: err=%d\n", __func__, err);
diff --git a/drivers/media/dvb-core/dvb_net.c b/drivers/media/dvb-core/dvb_net.c
index 9947b342633e..bbaf0a8cae8b 100644
--- a/drivers/media/dvb-core/dvb_net.c
+++ b/drivers/media/dvb-core/dvb_net.c
@@ -828,8 +828,7 @@ static void dvb_net_ule(struct net_device *dev, const u8 *buf, size_t buf_len)
                /* Copy data into our current skb. */
                h.how_much = min(h.priv->ule_sndu_remain, (int)h.ts_remain);
-                memcpy(skb_put(h.priv->ule_skb, h.how_much),
+                skb_put_data(h.priv->ule_skb, h.from_where, h.how_much);
-                       h.from_where, h.how_much);
                h.priv->ule_sndu_remain -= h.how_much;
                h.ts_remain -= h.how_much;
                h.from_where += h.how_much;
diff --git a/drivers/media/radio/wl128x/fmdrv_common.c b/drivers/media/radio/wl128x/fmdrv_common.c
index 588e2d61c3b4..c67e055a12c9 100644
--- a/drivers/media/radio/wl128x/fmdrv_common.c
+++ b/drivers/media/radio/wl128x/fmdrv_common.c
@@ -442,7 +442,7 @@ static int fm_send_cmd(struct fmdev *fmdev, u8 fm_op, u16 type,	void *payload,
                fm_cb(skb)->fm_op = *((u8 *)payload + 2);
        }
        if (payload != NULL)
-                memcpy(skb_put(skb, payload_len), payload, payload_len);
+                skb_put_data(skb, payload, payload_len);
        fm_cb(skb)->completion = wait_completion;
        skb_queue_tail(&fmdev->tx_q, skb);
diff --git a/drivers/misc/ti-st/st_core.c b/drivers/misc/ti-st/st_core.c
index 00051590e00f..eda8d407be28 100644
--- a/drivers/misc/ti-st/st_core.c
+++ b/drivers/misc/ti-st/st_core.c
@@ -262,7 +262,7 @@ void st_int_recv(void *disc_data,
        while (count) {
                if (st_gdata->rx_count) {
                        len = min_t(unsigned int, st_gdata->rx_count, count);
-                        memcpy(skb_put(st_gdata->rx_skb, len), ptr, len);
+                        skb_put_data(st_gdata->rx_skb, ptr, len);
                        st_gdata->rx_count -= len;
                        count -= len;
                        ptr += len;
diff --git a/drivers/misc/ti-st/st_kim.c b/drivers/misc/ti-st/st_kim.c
index bf0d7708beac..e74413f882ab 100644
--- a/drivers/misc/ti-st/st_kim.c
+++ b/drivers/misc/ti-st/st_kim.c
@@ -152,7 +152,7 @@ static void kim_int_recv(struct kim_data_s *kim_gdata,
        while (count) {
                if (kim_gdata->rx_count) {
                        len = min_t(unsigned int, kim_gdata->rx_count, count);
-                        memcpy(skb_put(kim_gdata->rx_skb, len), ptr, len);
+                        skb_put_data(kim_gdata->rx_skb, ptr, len);
                        kim_gdata->rx_count -= len;
                        count -= len;
                        ptr += len;
diff --git a/drivers/net/bonding/bond_alb.c b/drivers/net/bonding/bond_alb.c
index 7d7a3cec149a..b796db7dd621 100644
--- a/drivers/net/bonding/bond_alb.c
+++ b/drivers/net/bonding/bond_alb.c
@@ -936,8 +936,7 @@ static void alb_send_lp_vid(struct slave *slave, u8 mac_addr[],
        if (!skb)
                return;
-        data = skb_put(skb, size);
+        data = skb_put_data(skb, &pkt, size);
-        memcpy(data, &pkt, size);
        skb_reset_mac_header(skb);
        skb->network_header = skb->mac_header + ETH_HLEN;
diff --git a/drivers/net/caif/caif_hsi.c b/drivers/net/caif/caif_hsi.c
index 71a7c3b44fdd..4534326e20ac 100644
--- a/drivers/net/caif/caif_hsi.c
+++ b/drivers/net/caif/caif_hsi.c
@@ -454,8 +454,7 @@ static int cfhsi_rx_desc(struct cfhsi_desc *desc, struct cfhsi *cfhsi)
                }
                caif_assert(skb != NULL);
-                dst = skb_put(skb, len);
+                dst = skb_put_data(skb, pfrm, len);
-                memcpy(dst, pfrm, len);
                skb->protocol = htons(ETH_P_CAIF);
                skb_reset_mac_header(skb);
@@ -585,8 +584,7 @@ static int cfhsi_rx_pld(struct cfhsi_desc *desc, struct cfhsi *cfhsi)
                }
                caif_assert(skb != NULL);
-                dst = skb_put(skb, len);
+                dst = skb_put_data(skb, pcffrm, len);
-                memcpy(dst, pcffrm, len);
                skb->protocol = htons(ETH_P_CAIF);
                skb_reset_mac_header(skb);
diff --git a/drivers/net/caif/caif_serial.c b/drivers/net/caif/caif_serial.c
index 76e1d3545105..5c57be2082ba 100644
--- a/drivers/net/caif/caif_serial.c
+++ b/drivers/net/caif/caif_serial.c
@@ -198,8 +198,7 @@ static void ldisc_receive(struct tty_struct *tty, const u8 *data,
        skb = netdev_alloc_skb(ser->dev, count+1);
        if (skb == NULL)
                return;
-        p = skb_put(skb, count);
+        p = skb_put_data(skb, data, count);
-        memcpy(p, data, count);
        skb->protocol = htons(ETH_P_CAIF);
        skb_reset_mac_header(skb);
diff --git a/drivers/net/caif/caif_spi.c b/drivers/net/caif/caif_spi.c
index fc21afe852b9..24a5f5ca2037 100644
--- a/drivers/net/caif/caif_spi.c
+++ b/drivers/net/caif/caif_spi.c
@@ -548,8 +548,7 @@ int cfspi_rxfrm(struct cfspi *cfspi, u8 *buf, size_t len)
                skb = netdev_alloc_skb(cfspi->ndev, pkt_len + 1);
                caif_assert(skb != NULL);
-                dst = skb_put(skb, pkt_len);
+                dst = skb_put_data(skb, src, pkt_len);
-                memcpy(dst, src, pkt_len);
                src += pkt_len;
                skb->protocol = htons(ETH_P_CAIF);
diff --git a/drivers/net/caif/caif_virtio.c b/drivers/net/caif/caif_virtio.c
index 1794ea0420b7..c3d104feee13 100644
--- a/drivers/net/caif/caif_virtio.c
+++ b/drivers/net/caif/caif_virtio.c
@@ -242,7 +242,7 @@ static struct sk_buff *cfv_alloc_and_copy_skb(int *err,
        skb_reserve(skb, cfv->rx_hr + pad_len);
-        memcpy(skb_put(skb, cfpkt_len), frm + cfv->rx_hr, cfpkt_len);
+        skb_put_data(skb, frm + cfv->rx_hr, cfpkt_len);
        return skb;
 }
diff --git a/drivers/net/can/slcan.c b/drivers/net/can/slcan.c
index 6a6e896e52fa..5d067c1b987f 100644
--- a/drivers/net/can/slcan.c
+++ b/drivers/net/can/slcan.c
@@ -216,8 +216,7 @@ static void slc_bump(struct slcan *sl)
        can_skb_prv(skb)->ifindex = sl->dev->ifindex;
        can_skb_prv(skb)->skbcnt = 0;
-        memcpy(skb_put(skb, sizeof(struct can_frame)),
+        skb_put_data(skb, &cf, sizeof(struct can_frame));
-               &cf, sizeof(struct can_frame));
        sl->dev->stats.rx_packets++;
        sl->dev->stats.rx_bytes += cf.can_dlc;
diff --git a/drivers/net/ethernet/3com/3c515.c b/drivers/net/ethernet/3com/3c515.c
index e7b1fa56b290..c5987f518cb2 100644
--- a/drivers/net/ethernet/3com/3c515.c
+++ b/drivers/net/ethernet/3com/3c515.c
@@ -1370,9 +1370,9 @@ static int boomerang_rx(struct net_device *dev)
                            (skb = netdev_alloc_skb(dev, pkt_len + 4)) != NULL) {
                                skb_reserve(skb, 2);    /* Align IP on 16 byte boundaries */
                                /* 'skb_put()' points to the start of sk_buff data area. */
-                                memcpy(skb_put(skb, pkt_len),
+                                skb_put_data(skb,
-                                       isa_bus_to_virt(vp->rx_ring[entry].
+                                             isa_bus_to_virt(vp->rx_ring[entry].addr),
-                                                   addr), pkt_len);
+                                             pkt_len);
                                rx_copy++;
                        } else {
                                void *temp;
diff --git a/drivers/net/ethernet/3com/3c59x.c b/drivers/net/ethernet/3com/3c59x.c
index 14cff6017756..3b516ebeeddb 100644
--- a/drivers/net/ethernet/3com/3c59x.c
+++ b/drivers/net/ethernet/3com/3c59x.c
@@ -2628,9 +2628,8 @@ boomerang_rx(struct net_device *dev)
                                skb_reserve(skb, 2);    /* Align IP on 16 byte boundaries */
                                pci_dma_sync_single_for_cpu(VORTEX_PCI(vp), dma, PKT_BUF_SZ, PCI_DMA_FROMDEVICE);
                                /* 'skb_put()' points to the start of sk_buff data area. */
-                                memcpy(skb_put(skb, pkt_len),
+                                skb_put_data(skb, vp->rx_skbuff[entry]->data,
-                                           vp->rx_skbuff[entry]->data,
+                                             pkt_len);
-                                           pkt_len);
                                pci_dma_sync_single_for_device(VORTEX_PCI(vp), dma, PKT_BUF_SZ, PCI_DMA_FROMDEVICE);
                                vp->rx_copy++;
                        } else {
diff --git a/drivers/net/ethernet/aeroflex/greth.c b/drivers/net/ethernet/aeroflex/greth.c
index d8e133ced7b8..4309be3724ad 100644
--- a/drivers/net/ethernet/aeroflex/greth.c
+++ b/drivers/net/ethernet/aeroflex/greth.c
@@ -807,7 +807,8 @@ static int greth_rx(struct net_device *dev, int limit)
                                if (netif_msg_pktdata(greth))
                                        greth_print_rx_packet(phys_to_virt(dma_addr), pkt_len);
-                                memcpy(skb_put(skb, pkt_len), phys_to_virt(dma_addr), pkt_len);
+                                skb_put_data(skb, phys_to_virt(dma_addr),
+                                             pkt_len);
                                skb->protocol = eth_type_trans(skb, dev);
                                dev->stats.rx_bytes += pkt_len;
diff --git a/drivers/net/ethernet/agere/et131x.c b/drivers/net/ethernet/agere/et131x.c
index 87a11b9f0ea5..54eff90e2f02 100644
--- a/drivers/net/ethernet/agere/et131x.c
+++ b/drivers/net/ethernet/agere/et131x.c
@@ -2282,7 +2282,7 @@ static struct rfd *nic_rx_pkts(struct et131x_adapter *adapter)
        adapter->netdev->stats.rx_bytes += rfd->len;
-        memcpy(skb_put(skb, rfd->len), fbr->virt[buff_index], rfd->len);
+        skb_put_data(skb, fbr->virt[buff_index], rfd->len);
        skb->protocol = eth_type_trans(skb, adapter->netdev);
        skb->ip_summed = CHECKSUM_NONE;
diff --git a/drivers/net/ethernet/apple/macmace.c b/drivers/net/ethernet/apple/macmace.c
index 857df9c45f04..f17a160dbff2 100644
--- a/drivers/net/ethernet/apple/macmace.c
+++ b/drivers/net/ethernet/apple/macmace.c
@@ -663,7 +663,7 @@ static void mace_dma_rx_frame(struct net_device *dev, struct mace_frame *mf)
                        return;
                }
                skb_reserve(skb, 2);
-                memcpy(skb_put(skb, frame_length), mf->data, frame_length);
+                skb_put_data(skb, mf->data, frame_length);
                skb->protocol = eth_type_trans(skb, dev);
                netif_rx(skb);
diff --git a/drivers/net/ethernet/aurora/nb8800.c b/drivers/net/ethernet/aurora/nb8800.c
index 5711fbbd6ae3..041cfb7952f8 100644
--- a/drivers/net/ethernet/aurora/nb8800.c
+++ b/drivers/net/ethernet/aurora/nb8800.c
@@ -251,7 +251,7 @@ static void nb8800_receive(struct net_device *dev, unsigned int i,
        if (len <= RX_COPYBREAK) {
                dma_sync_single_for_cpu(&dev->dev, dma, len, DMA_FROM_DEVICE);
-                memcpy(skb_put(skb, len), data, len);
+                skb_put_data(skb, data, len);
                dma_sync_single_for_device(&dev->dev, dma, len,
                                           DMA_FROM_DEVICE);
        } else {
@@ -264,7 +264,7 @@ static void nb8800_receive(struct net_device *dev, unsigned int i,
                }
                dma_unmap_page(&dev->dev, dma, RX_BUF_SIZE, DMA_FROM_DEVICE);
-                memcpy(skb_put(skb, RX_COPYHDR), data, RX_COPYHDR);
+                skb_put_data(skb, data, RX_COPYHDR);
                skb_add_rx_frag(skb, skb_shinfo(skb)->nr_frags, page,
                                offset + RX_COPYHDR, len - RX_COPYHDR,
                                RX_BUF_SIZE);
diff --git a/drivers/net/ethernet/cadence/macb.c b/drivers/net/ethernet/cadence/macb.c
index 91f7492623d3..4b0168bcbc8a 100644
--- a/drivers/net/ethernet/cadence/macb.c
+++ b/drivers/net/ethernet/cadence/macb.c
@@ -2992,7 +2992,7 @@ static void at91ether_rx(struct net_device *dev)
                skb = netdev_alloc_skb(dev, pktlen + 2);
                if (skb) {
                        skb_reserve(skb, 2);
-                        memcpy(skb_put(skb, pktlen), p_recv, pktlen);
+                        skb_put_data(skb, p_recv, pktlen);
                        skb->protocol = eth_type_trans(skb, dev);
                        dev->stats.rx_packets++;
diff --git a/drivers/net/ethernet/cavium/liquidio/octeon_network.h b/drivers/net/ethernet/cavium/liquidio/octeon_network.h
index bf483932ff25..4b3507972243 100644
--- a/drivers/net/ethernet/cavium/liquidio/octeon_network.h
+++ b/drivers/net/ethernet/cavium/liquidio/octeon_network.h
@@ -443,8 +443,8 @@ static inline void octeon_fast_packet_next(struct octeon_droq *droq,
                                           int copy_len,
                                           int idx)
 {
-        memcpy(skb_put(nicbuf, copy_len),
+        skb_put_data(nicbuf, get_rbd(droq->recv_buf_list[idx].buffer),
-               get_rbd(droq->recv_buf_list[idx].buffer), copy_len);
+                     copy_len);
 }
 /**
diff --git a/drivers/net/ethernet/cirrus/cs89x0.c b/drivers/net/ethernet/cirrus/cs89x0.c
index da5b58b853e2..410a0a95130b 100644
--- a/drivers/net/ethernet/cirrus/cs89x0.c
+++ b/drivers/net/ethernet/cirrus/cs89x0.c
@@ -450,11 +450,10 @@ skip_this_frame:
        if (bp + length > lp->end_dma_buff) {
                int semi_cnt = lp->end_dma_buff - bp;
-                memcpy(skb_put(skb, semi_cnt), bp, semi_cnt);
+                skb_put_data(skb, bp, semi_cnt);
-                memcpy(skb_put(skb, length - semi_cnt), lp->dma_buff,
+                skb_put_data(skb, lp->dma_buff, length - semi_cnt);
-                       length - semi_cnt);
        } else {
-                memcpy(skb_put(skb, length), bp, length);
+                skb_put_data(skb, bp, length);
        }
        bp += (length + 3) & ~3;
        if (bp >= lp->end_dma_buff)
diff --git a/drivers/net/ethernet/dec/tulip/de4x5.c b/drivers/net/ethernet/dec/tulip/de4x5.c
index fd6bcf024729..47be5018d35d 100644
--- a/drivers/net/ethernet/dec/tulip/de4x5.c
+++ b/drivers/net/ethernet/dec/tulip/de4x5.c
@@ -3624,10 +3624,10 @@ de4x5_alloc_rx_buff(struct net_device *dev, int index, int len)
    skb_reserve(p, 2);                                 /* Align */
    if (index < lp->rx_old) {                          /* Wrapped buffer */
        short tlen = (lp->rxRingSize - lp->rx_old) * RX_BUFF_SZ;
-        memcpy(skb_put(p,tlen),lp->rx_bufs + lp->rx_old * RX_BUFF_SZ,tlen);
+        skb_put_data(p, lp->rx_bufs + lp->rx_old * RX_BUFF_SZ, tlen);
-        memcpy(skb_put(p,len-tlen),lp->rx_bufs,len-tlen);
+        skb_put_data(p, lp->rx_bufs, len - tlen);
    } else {                                           /* Linear buffer */
-        memcpy(skb_put(p,len),lp->rx_bufs + lp->rx_old * RX_BUFF_SZ,len);
+        skb_put_data(p, lp->rx_bufs + lp->rx_old * RX_BUFF_SZ, len);
    }
    return p;
diff --git a/drivers/net/ethernet/dec/tulip/interrupt.c b/drivers/net/ethernet/dec/tulip/interrupt.c
index ba6ae24acf62..8df80880ecaa 100644
--- a/drivers/net/ethernet/dec/tulip/interrupt.c
+++ b/drivers/net/ethernet/dec/tulip/interrupt.c
@@ -218,9 +218,9 @@ int tulip_poll(struct napi_struct *napi, int budget)
                                                        pkt_len);
                                       skb_put(skb, pkt_len);
 #else
-                                       memcpy(skb_put(skb, pkt_len),
+                                       skb_put_data(skb,
-                                              tp->rx_buffers[entry].skb->data,
+                                                    tp->rx_buffers[entry].skb->data,
-                                              pkt_len);
+                                                    pkt_len);
 #endif
                                       pci_dma_sync_single_for_device(tp->pdev,
                                                                      tp->rx_buffers[entry].mapping,
@@ -444,9 +444,9 @@ static int tulip_rx(struct net_device *dev)
                                                 pkt_len);
                                skb_put(skb, pkt_len);
 #else
-                                memcpy(skb_put(skb, pkt_len),
+                                skb_put_data(skb,
-                                       tp->rx_buffers[entry].skb->data,
+                                             tp->rx_buffers[entry].skb->data,
-                                       pkt_len);
+                                             pkt_len);
 #endif
                                pci_dma_sync_single_for_device(tp->pdev,
                                                               tp->rx_buffers[entry].mapping,
diff --git a/drivers/net/ethernet/dec/tulip/uli526x.c b/drivers/net/ethernet/dec/tulip/uli526x.c
index 8d98b259d1ba..7fc248efc4ba 100644
--- a/drivers/net/ethernet/dec/tulip/uli526x.c
+++ b/drivers/net/ethernet/dec/tulip/uli526x.c
@@ -864,9 +864,9 @@ static void uli526x_rx_packet(struct net_device *dev, struct uli526x_board_info
                                        skb = new_skb;
                                        /* size less than COPY_SIZE, allocate a rxlen SKB */
                                        skb_reserve(skb, 2); /* 16byte align */
-                                        memcpy(skb_put(skb, rxlen),
+                                        skb_put_data(skb,
-                                               skb_tail_pointer(rxptr->rx_skb_ptr),
+                                                     skb_tail_pointer(rxptr->rx_skb_ptr),
-                                               rxlen);
+                                                     rxlen);
                                        uli526x_reuse_skb(db, rxptr->rx_skb_ptr);
                                } else
                                        skb_put(skb, rxlen);
diff --git a/drivers/net/ethernet/ec_bhf.c b/drivers/net/ethernet/ec_bhf.c
index 278f139f2a22..4ee042c034a1 100644
--- a/drivers/net/ethernet/ec_bhf.c
+++ b/drivers/net/ethernet/ec_bhf.c
@@ -223,7 +223,7 @@ static void ec_bhf_process_rx(struct ec_bhf_priv *priv)
                skb = netdev_alloc_skb_ip_align(priv->net_dev, pkt_size);
                if (skb) {
-                        memcpy(skb_put(skb, pkt_size), data, pkt_size);
+                        skb_put_data(skb, data, pkt_size);
                        skb->protocol = eth_type_trans(skb, priv->net_dev);
                        priv->stat_rx_bytes += pkt_size;
diff --git a/drivers/net/ethernet/fealnx.c b/drivers/net/ethernet/fealnx.c
index 610f9c07c21d..e92859dab7ae 100644
--- a/drivers/net/ethernet/fealnx.c
+++ b/drivers/net/ethernet/fealnx.c
@@ -1711,8 +1711,8 @@ static int netdev_rx(struct net_device *dev)
                                        np->cur_rx->skbuff->data, pkt_len);
                                skb_put(skb, pkt_len);
 #else
-                                memcpy(skb_put(skb, pkt_len),
+                                skb_put_data(skb, np->cur_rx->skbuff->data,
-                                        np->cur_rx->skbuff->data, pkt_len);
+                                             pkt_len);
 #endif
                                pci_dma_sync_single_for_device(np->pci_dev,
                                                               np->cur_rx->buffer,
diff --git a/drivers/net/ethernet/i825xx/82596.c b/drivers/net/ethernet/i825xx/82596.c
index 945883842533..d719668a6684 100644
--- a/drivers/net/ethernet/i825xx/82596.c
+++ b/drivers/net/ethernet/i825xx/82596.c
@@ -809,7 +809,8 @@ memory_squeeze:
                                if (!rx_in_place) {
                                        /* 16 byte align the data fields */
                                        skb_reserve(skb, 2);
-                                        memcpy(skb_put(skb,pkt_len), rbd->v_data, pkt_len);
+                                        skb_put_data(skb, rbd->v_data,
+                                                     pkt_len);
                                }
                                skb->protocol=eth_type_trans(skb,dev);
                                skb->len = pkt_len;
diff --git a/drivers/net/ethernet/i825xx/lib82596.c b/drivers/net/ethernet/i825xx/lib82596.c
index e86773325cbe..8449c58f01fd 100644
--- a/drivers/net/ethernet/i825xx/lib82596.c
+++ b/drivers/net/ethernet/i825xx/lib82596.c
@@ -727,7 +727,8 @@ memory_squeeze:
                                        dma_sync_single_for_cpu(dev->dev.parent,
                                                                (dma_addr_t)SWAP32(rbd->b_data),
                                                                PKT_BUF_SZ, DMA_FROM_DEVICE);
-                                        memcpy(skb_put(skb, pkt_len), rbd->v_data, pkt_len);
+                                        skb_put_data(skb, rbd->v_data,
+                                                     pkt_len);
                                        dma_sync_single_for_device(dev->dev.parent,
                                                                   (dma_addr_t)SWAP32(rbd->b_data),
                                                                   PKT_BUF_SZ, DMA_FROM_DEVICE);
diff --git a/drivers/net/ethernet/intel/e1000/e1000_main.c b/drivers/net/ethernet/intel/e1000/e1000_main.c
index bd8b05fe8258..98375e1e1185 100644
--- a/drivers/net/ethernet/intel/e1000/e1000_main.c
+++ b/drivers/net/ethernet/intel/e1000/e1000_main.c
@@ -4345,7 +4345,7 @@ static struct sk_buff *e1000_copybreak(struct e1000_adapter *adapter,
        dma_sync_single_for_cpu(&adapter->pdev->dev, buffer_info->dma,
                                length, DMA_FROM_DEVICE);
-        memcpy(skb_put(skb, length), data, length);
+        skb_put_data(skb, data, length);
        return skb;
 }
diff --git a/drivers/net/ethernet/marvell/mvneta.c b/drivers/net/ethernet/marvell/mvneta.c
index d297011b535d..0aab74c2a209 100644
--- a/drivers/net/ethernet/marvell/mvneta.c
+++ b/drivers/net/ethernet/marvell/mvneta.c
@@ -1976,9 +1976,8 @@ err_drop_frame:
                                                      MVNETA_MH_SIZE + NET_SKB_PAD,
                                                      rx_bytes,
                                                      DMA_FROM_DEVICE);
-                        memcpy(skb_put(skb, rx_bytes),
+                        skb_put_data(skb, data + MVNETA_MH_SIZE + NET_SKB_PAD,
-                               data + MVNETA_MH_SIZE + NET_SKB_PAD,
+                                     rx_bytes);
-                               rx_bytes);
                        skb->protocol = eth_type_trans(skb, dev);
                        mvneta_rx_csum(pp, rx_status, skb);
@@ -2103,9 +2102,8 @@ err_drop_frame:
                                                      MVNETA_MH_SIZE + NET_SKB_PAD,
                                                      rx_bytes,
                                                      DMA_FROM_DEVICE);
-                        memcpy(skb_put(skb, rx_bytes),
+                        skb_put_data(skb, data + MVNETA_MH_SIZE + NET_SKB_PAD,
-                               data + MVNETA_MH_SIZE + NET_SKB_PAD,
+                                     rx_bytes);
-                               rx_bytes);
                        skb->protocol = eth_type_trans(skb, dev);
                        mvneta_rx_csum(pp, rx_status, skb);
diff --git a/drivers/net/ethernet/micrel/ksz884x.c b/drivers/net/ethernet/micrel/ksz884x.c
index ee1c78abab0b..e798fbe08600 100644
--- a/drivers/net/ethernet/micrel/ksz884x.c
+++ b/drivers/net/ethernet/micrel/ksz884x.c
@@ -5020,8 +5020,7 @@ static inline int rx_proc(struct net_device *dev, struct ksz_hw* hw,
                 */
                skb_reserve(skb, 2);
-                memcpy(skb_put(skb, packet_len),
+                skb_put_data(skb, dma_buf->skb->data, packet_len);
-                        dma_buf->skb->data, packet_len);
        } while (0);
        skb->protocol = eth_type_trans(skb, dev);
diff --git a/drivers/net/ethernet/nxp/lpc_eth.c b/drivers/net/ethernet/nxp/lpc_eth.c
index 9c7ffd649e9a..828bfd93cb54 100644
--- a/drivers/net/ethernet/nxp/lpc_eth.c
+++ b/drivers/net/ethernet/nxp/lpc_eth.c
@@ -959,11 +959,10 @@ static int __lpc_handle_recv(struct net_device *ndev, int budget)
                        if (!skb) {
                                ndev->stats.rx_dropped++;
                        } else {
-                                prdbuf = skb_put(skb, len);
                                /* Copy packet from buffer */
-                                memcpy(prdbuf, pldat->rx_buff_v +
+                                prdbuf = skb_put_data(skb,
-                                        rxconsidx * ENET_MAXF_SIZE, len);
+                                                      pldat->rx_buff_v + rxconsidx * ENET_MAXF_SIZE,
+                                                      len);
                                /* Pass to upper layer */
                                skb->protocol = eth_type_trans(skb, ndev);
diff --git a/drivers/net/ethernet/qlogic/qede/qede_fp.c b/drivers/net/ethernet/qlogic/qede/qede_fp.c
index 892eb98290f6..6fc854b120b0 100644
--- a/drivers/net/ethernet/qlogic/qede/qede_fp.c
+++ b/drivers/net/ethernet/qlogic/qede/qede_fp.c
@@ -1079,8 +1079,7 @@ static struct sk_buff *qede_rx_allocate_skb(struct qede_dev *edev,
         * re-use the already allcoated & mapped memory.
         */
        if (len + pad <= edev->rx_copybreak) {
-                memcpy(skb_put(skb, len),
+                skb_put_data(skb, page_address(page) + offset, len);
-                       page_address(page) + offset, len);
                qede_reuse_page(rxq, bd);
                goto out;
        }
diff --git a/drivers/net/ethernet/qlogic/qlge/qlge_main.c b/drivers/net/ethernet/qlogic/qlge/qlge_main.c
index 1188d420fe53..9feec7009443 100644
--- a/drivers/net/ethernet/qlogic/qlge/qlge_main.c
+++ b/drivers/net/ethernet/qlogic/qlge/qlge_main.c
@@ -1577,7 +1577,7 @@ static void ql_process_mac_rx_page(struct ql_adapter *qdev,
                rx_ring->rx_dropped++;
                goto err_out;
        }
-        memcpy(skb_put(skb, hlen), addr, hlen);
+        skb_put_data(skb, addr, hlen);
        netif_printk(qdev, rx_status, KERN_DEBUG, qdev->ndev,
                     "%d bytes of headers and data in large. Chain page to new skb and pull tail.\n",
                     length);
@@ -1654,7 +1654,7 @@ static void ql_process_mac_rx_skb(struct ql_adapter *qdev,
                                    dma_unmap_len(sbq_desc, maplen),
                                    PCI_DMA_FROMDEVICE);
-        memcpy(skb_put(new_skb, length), skb->data, length);
+        skb_put_data(new_skb, skb->data, length);
        pci_dma_sync_single_for_device(qdev->pdev,
                                       dma_unmap_addr(sbq_desc, mapaddr),
@@ -1817,8 +1817,7 @@ static struct sk_buff *ql_build_rx_skb(struct ql_adapter *qdev,
                                                    dma_unmap_len
                                                    (sbq_desc, maplen),
                                                    PCI_DMA_FROMDEVICE);
-                        memcpy(skb_put(skb, length),
+                        skb_put_data(skb, sbq_desc->p.skb->data, length);
-                               sbq_desc->p.skb->data, length);
                        pci_dma_sync_single_for_device(qdev->pdev,
                                                       dma_unmap_addr
                                                       (sbq_desc,
diff --git a/drivers/net/ethernet/silan/sc92031.c b/drivers/net/ethernet/silan/sc92031.c
index 751c81848f35..c07fd594fe71 100644
--- a/drivers/net/ethernet/silan/sc92031.c
+++ b/drivers/net/ethernet/silan/sc92031.c
@@ -795,12 +795,12 @@ static void _sc92031_rx_tasklet(struct net_device *dev)
                }
                if ((rx_ring_offset + pkt_size) > RX_BUF_LEN) {
-                        memcpy(skb_put(skb, RX_BUF_LEN - rx_ring_offset),
+                        skb_put_data(skb, rx_ring + rx_ring_offset,
-                                rx_ring + rx_ring_offset, RX_BUF_LEN - rx_ring_offset);
+                                     RX_BUF_LEN - rx_ring_offset);
-                        memcpy(skb_put(skb, pkt_size - (RX_BUF_LEN - rx_ring_offset)),
+                        skb_put_data(skb, rx_ring,
-                                rx_ring, pkt_size - (RX_BUF_LEN - rx_ring_offset));
+                                     pkt_size - (RX_BUF_LEN - rx_ring_offset));
                } else {
-                        memcpy(skb_put(skb, pkt_size), rx_ring + rx_ring_offset, pkt_size);
+                        skb_put_data(skb, rx_ring + rx_ring_offset, pkt_size);
                }
                skb->protocol = eth_type_trans(skb, dev);
diff --git a/drivers/net/fjes/fjes_main.c b/drivers/net/fjes/fjes_main.c
index b56e07fa44a8..750954be5a74 100644
--- a/drivers/net/fjes/fjes_main.c
+++ b/drivers/net/fjes/fjes_main.c
@@ -1156,8 +1156,7 @@ static int fjes_poll(struct napi_struct *napi, int budget)
                                hw->ep_shm_info[cur_epid].net_stats
                                                         .rx_errors += 1;
                        } else {
-                                memcpy(skb_put(skb, frame_len),
+                                skb_put_data(skb, frame, frame_len);
-                                       frame, frame_len);
                                skb->protocol = eth_type_trans(skb, netdev);
                                skb->ip_summed = CHECKSUM_UNNECESSARY;
diff --git a/drivers/net/hamradio/mkiss.c b/drivers/net/hamradio/mkiss.c
index 4a40a3d825b4..aec6c26563cf 100644
--- a/drivers/net/hamradio/mkiss.c
+++ b/drivers/net/hamradio/mkiss.c
@@ -298,7 +298,7 @@ static void ax_bump(struct mkiss *ax)
                return;
        }
-        memcpy(skb_put(skb,count), ax->rbuff, count);
+        skb_put_data(skb, ax->rbuff, count);
        skb->protocol = ax25_type_trans(skb, ax->dev);
        netif_rx(skb);
        ax->dev->stats.rx_packets++;
diff --git a/drivers/net/hippi/rrunner.c b/drivers/net/hippi/rrunner.c
index 1ce6239a4849..7683fd544344 100644
--- a/drivers/net/hippi/rrunner.c
+++ b/drivers/net/hippi/rrunner.c
@@ -962,8 +962,8 @@ static void rx_int(struct net_device *dev, u32 rxlimit, u32 index)
                                                                    pkt_len,
                                                                    PCI_DMA_FROMDEVICE);
-                                        memcpy(skb_put(skb, pkt_len),
+                                        skb_put_data(skb, rx_skb->data,
-                                               rx_skb->data, pkt_len);
+                                                     pkt_len);
                                        pci_dma_sync_single_for_device(rrpriv->pci_dev,
                                                                       desc->addr.addrlo,
diff --git a/drivers/net/hyperv/netvsc_drv.c b/drivers/net/hyperv/netvsc_drv.c
index b65a97ecb78e..9a6c5864bc04 100644
--- a/drivers/net/hyperv/netvsc_drv.c
+++ b/drivers/net/hyperv/netvsc_drv.c
@@ -593,7 +593,7 @@ static struct sk_buff *netvsc_alloc_recv_skb(struct net_device *net,
         * Copy to skb. This copy is needed here since the memory pointed by
         * hv_netvsc_packet cannot be deallocated
         */
-        memcpy(skb_put(skb, buflen), data, buflen);
+        skb_put_data(skb, data, buflen);
        skb->protocol = eth_type_trans(skb, net);
diff --git a/drivers/net/ieee802154/at86rf230.c b/drivers/net/ieee802154/at86rf230.c
index 76ba7ecfe142..548d9d026a85 100644
--- a/drivers/net/ieee802154/at86rf230.c
+++ b/drivers/net/ieee802154/at86rf230.c
@@ -723,7 +723,7 @@ at86rf230_rx_read_frame_complete(void *context)
                return;
        }
-        memcpy(skb_put(skb, len), buf + 2, len);
+        skb_put_data(skb, buf + 2, len);
        ieee802154_rx_irqsafe(lp->hw, skb, lqi);
        kfree(ctx);
 }
diff --git a/drivers/net/ieee802154/ca8210.c b/drivers/net/ieee802154/ca8210.c
index 7a218549c80a..a626c539fb17 100644
--- a/drivers/net/ieee802154/ca8210.c
+++ b/drivers/net/ieee802154/ca8210.c
@@ -1875,7 +1875,7 @@ static int ca8210_skb_rx(
 copy_payload:
        /* Add <msdulen> bytes of space to the back of the buffer */
        /* Copy msdu to skb */
-        memcpy(skb_put(skb, msdulen), &data_ind[29], msdulen);
+        skb_put_data(skb, &data_ind[29], msdulen);
        ieee802154_rx_irqsafe(hw, skb, mpdulinkquality);
        return 0;
diff --git a/drivers/net/ieee802154/mrf24j40.c b/drivers/net/ieee802154/mrf24j40.c
index bd63289c55e8..7d334963dc08 100644
--- a/drivers/net/ieee802154/mrf24j40.c
+++ b/drivers/net/ieee802154/mrf24j40.c
@@ -774,7 +774,7 @@ static void mrf24j40_handle_rx_read_buf_complete(void *context)
                return;
        }
-        memcpy(skb_put(skb, len), rx_local_buf, len);
+        skb_put_data(skb, rx_local_buf, len);
        ieee802154_rx_irqsafe(devrec->hw, skb, 0);
 #ifdef DEBUG
diff --git a/drivers/net/irda/smsc-ircc2.c b/drivers/net/irda/smsc-ircc2.c
index 23ed89ae5ddc..19a55cba6beb 100644
--- a/drivers/net/irda/smsc-ircc2.c
+++ b/drivers/net/irda/smsc-ircc2.c
@@ -1459,7 +1459,7 @@ static void smsc_ircc_dma_receive_complete(struct smsc_ircc_cb *self)
        /* Make sure IP header gets aligned */
        skb_reserve(skb, 1);
-        memcpy(skb_put(skb, len), self->rx_buff.data, len);
+        skb_put_data(skb, self->rx_buff.data, len);
        self->netdev->stats.rx_packets++;
        self->netdev->stats.rx_bytes += len;
diff --git a/drivers/net/irda/vlsi_ir.c b/drivers/net/irda/vlsi_ir.c
index 15b920086251..6638784c082e 100644
--- a/drivers/net/irda/vlsi_ir.c
+++ b/drivers/net/irda/vlsi_ir.c
@@ -578,7 +578,7 @@ static int vlsi_process_rx(struct vlsi_ring *r, struct ring_descr *rd)
        skb = rd->skb;
        rd->skb = NULL;
        skb->dev = ndev;
-        memcpy(skb_put(skb,len), rd->buf, len);
+        skb_put_data(skb, rd->buf, len);
        skb_reset_mac_header(skb);
        if (in_interrupt())
                netif_rx(skb);
diff --git a/drivers/net/ppp/ppp_async.c b/drivers/net/ppp/ppp_async.c
index feb9569e3345..32c72db654e2 100644
--- a/drivers/net/ppp/ppp_async.c
+++ b/drivers/net/ppp/ppp_async.c
@@ -894,8 +894,7 @@ ppp_async_input(struct asyncppp *ap, const unsigned char *buf,
                                /* packet overflowed MRU */
                                ap->state |= SC_TOSS;
                        } else {
-                                sp = skb_put(skb, n);
+                                sp = skb_put_data(skb, buf, n);
-                                memcpy(sp, buf, n);
                                if (ap->state & SC_ESCAPE) {
                                        sp[0] ^= PPP_TRANS;
                                        ap->state &= ~SC_ESCAPE;
diff --git a/drivers/net/ppp/ppp_synctty.c b/drivers/net/ppp/ppp_synctty.c
index 9ae53986cb4a..ce2300c0bcbf 100644
--- a/drivers/net/ppp/ppp_synctty.c
+++ b/drivers/net/ppp/ppp_synctty.c
@@ -697,8 +697,7 @@ ppp_sync_input(struct syncppp *ap, const unsigned char *buf,
                goto err;
        }
-        p = skb_put(skb, count);
+        p = skb_put_data(skb, buf, count);
-        memcpy(p, buf, count);
        /* strip address/control field if present */
        p = skb->data;
diff --git a/drivers/net/slip/slip.c b/drivers/net/slip/slip.c
index 74b907206aa7..436dd78c396a 100644
--- a/drivers/net/slip/slip.c
+++ b/drivers/net/slip/slip.c
@@ -364,7 +364,7 @@ static void sl_bump(struct slip *sl)
                return;
        }
        skb->dev = dev;
-        memcpy(skb_put(skb, count), sl->rbuff, count);
+        skb_put_data(skb, sl->rbuff, count);
        skb_reset_mac_header(skb);
        skb->protocol = htons(ETH_P_IP);
        netif_rx_ni(skb);
diff --git a/drivers/net/usb/asix_common.c b/drivers/net/usb/asix_common.c
index 125cff57c759..90facc5ecab0 100644
--- a/drivers/net/usb/asix_common.c
+++ b/drivers/net/usb/asix_common.c
@@ -167,8 +167,8 @@ int asix_rx_fixup_internal(struct usbnet *dev, struct sk_buff *skb,
                }
                if (rx->ax_skb) {
-                        data = skb_put(rx->ax_skb, copy_length);
+                        data = skb_put_data(rx->ax_skb, skb->data + offset,
-                        memcpy(data, skb->data + offset, copy_length);
+                                            copy_length);
                        if (!rx->remaining)
                                usbnet_skb_return(dev, rx->ax_skb);
                }
diff --git a/drivers/net/usb/cdc-phonet.c b/drivers/net/usb/cdc-phonet.c
index c7a350bbaaa7..2952cb570996 100644
--- a/drivers/net/usb/cdc-phonet.c
+++ b/drivers/net/usb/cdc-phonet.c
@@ -162,7 +162,7 @@ static void rx_complete(struct urb *req)
                        skb = pnd->rx_skb = netdev_alloc_skb(dev, 12);
                        if (likely(skb)) {
                                /* Can't use pskb_pull() on page in IRQ */
-                                memcpy(skb_put(skb, 1), page_address(page), 1);
+                                skb_put_data(skb, page_address(page), 1);
                                skb_add_rx_frag(skb, skb_shinfo(skb)->nr_frags,
                                                page, 1, req->actual_length,
                                                PAGE_SIZE);
diff --git a/drivers/net/usb/cdc_mbim.c b/drivers/net/usb/cdc_mbim.c
index a6b997cffd3b..18fa45fc979b 100644
--- a/drivers/net/usb/cdc_mbim.c
+++ b/drivers/net/usb/cdc_mbim.c
@@ -399,7 +399,7 @@ static struct sk_buff *cdc_mbim_process_dgram(struct usbnet *dev, u8 *buf, size_
        memcpy(eth_hdr(skb)->h_dest, dev->net->dev_addr, ETH_ALEN);
        /* add datagram */
-        memcpy(skb_put(skb, len), buf, len);
+        skb_put_data(skb, buf, len);
        /* map MBIM session to VLAN */
        if (tci)
diff --git a/drivers/net/usb/cdc_ncm.c b/drivers/net/usb/cdc_ncm.c
index 7f02954772c6..8a4c8a1b9dd3 100644
--- a/drivers/net/usb/cdc_ncm.c
+++ b/drivers/net/usb/cdc_ncm.c
@@ -1180,7 +1180,7 @@ cdc_ncm_fill_tx_frame(struct usbnet *dev, struct sk_buff *skb, __le32 sign)
                ndp16->dpe16[index].wDatagramLength = cpu_to_le16(skb->len);
                ndp16->dpe16[index].wDatagramIndex = cpu_to_le16(skb_out->len);
                ndp16->wLength = cpu_to_le16(ndplen + sizeof(struct usb_cdc_ncm_dpe16));
-                memcpy(skb_put(skb_out, skb->len), skb->data, skb->len);
+                skb_put_data(skb_out, skb->data, skb->len);
                ctx->tx_curr_frame_payload += skb->len; /* count real tx payload data */
                dev_kfree_skb_any(skb);
                skb = NULL;
@@ -1229,7 +1229,7 @@ cdc_ncm_fill_tx_frame(struct usbnet *dev, struct sk_buff *skb, __le32 sign)
                nth16 = (struct usb_cdc_ncm_nth16 *)skb_out->data;
                cdc_ncm_align_tail(skb_out, ctx->tx_ndp_modulus, 0, ctx->tx_max);
                nth16->wNdpIndex = cpu_to_le16(skb_out->len);
-                memcpy(skb_put(skb_out, ctx->max_ndp_size), ctx->delayed_ndp16, ctx->max_ndp_size);
+                skb_put_data(skb_out, ctx->delayed_ndp16, ctx->max_ndp_size);
                /* Zero out delayed NDP - signature checking will naturally fail. */
                ndp16 = memset(ctx->delayed_ndp16, 0, ctx->max_ndp_size);
@@ -1497,7 +1497,7 @@ next_ndp:
                        skb = netdev_alloc_skb_ip_align(dev->net,  len);
                        if (!skb)
                                goto error;
-                        memcpy(skb_put(skb, len), skb_in->data + offset, len);
+                        skb_put_data(skb, skb_in->data + offset, len);
                        usbnet_skb_return(dev, skb);
                        payload += len; /* count payload bytes in this NTB */
                }
diff --git a/drivers/net/usb/gl620a.c b/drivers/net/usb/gl620a.c
index 1cc24e6f23e2..29276e54bb8b 100644
--- a/drivers/net/usb/gl620a.c
+++ b/drivers/net/usb/gl620a.c
@@ -121,8 +121,7 @@ static int genelink_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
                if (gl_skb) {
                        // copy the packet data to the new skb
-                        memcpy(skb_put(gl_skb, size),
+                        skb_put_data(gl_skb, packet->packet_data, size);
-                                        packet->packet_data, size);
                        usbnet_skb_return(dev, gl_skb);
                }
diff --git a/drivers/net/usb/hso.c b/drivers/net/usb/hso.c
index 00067a0c51ca..908ada4ca21c 100644
--- a/drivers/net/usb/hso.c
+++ b/drivers/net/usb/hso.c
@@ -911,11 +911,9 @@ static void packetizeRx(struct hso_net *odev, unsigned char *ip_pkt,
                                /* Copy what we got so far. make room for iphdr
                                 * after tail. */
-                                tmp_rx_buf =
+                                tmp_rx_buf = skb_put_data(odev->skb_rx_buf,
-                                    skb_put(odev->skb_rx_buf,
+                                                          (char *)&(odev->rx_ip_hdr),
-                                            sizeof(struct iphdr));
+                                                          sizeof(struct iphdr));
-                                memcpy(tmp_rx_buf, (char *)&(odev->rx_ip_hdr),
-                                       sizeof(struct iphdr));
                                /* ETH_HLEN */
                                odev->rx_buf_size = sizeof(struct iphdr);
@@ -934,8 +932,9 @@ static void packetizeRx(struct hso_net *odev, unsigned char *ip_pkt,
                        /* Copy the rest of the bytes that are left in the
                         * buffer into the waiting sk_buf. */
                        /* Make room for temp_bytes after tail. */
-                        tmp_rx_buf = skb_put(odev->skb_rx_buf, temp_bytes);
+                        tmp_rx_buf = skb_put_data(odev->skb_rx_buf,
-                        memcpy(tmp_rx_buf, ip_pkt + buffer_offset, temp_bytes);
+                                                  ip_pkt + buffer_offset,
+                                                  temp_bytes);
                        odev->rx_buf_missing -= temp_bytes;
                        count -= temp_bytes;
diff --git a/drivers/net/usb/ipheth.c b/drivers/net/usb/ipheth.c
index 76465b117b72..0f213ea22c75 100644
--- a/drivers/net/usb/ipheth.c
+++ b/drivers/net/usb/ipheth.c
@@ -253,7 +253,7 @@ static void ipheth_rcvbulk_callback(struct urb *urb)
                return;
        }
-        memcpy(skb_put(skb, len), buf, len);
+        skb_put_data(skb, buf, len);
        skb->dev = dev->net;
        skb->protocol = eth_type_trans(skb, dev->net);
diff --git a/drivers/net/usb/lg-vl600.c b/drivers/net/usb/lg-vl600.c
index 5714107533bb..d633492bf9eb 100644
--- a/drivers/net/usb/lg-vl600.c
+++ b/drivers/net/usb/lg-vl600.c
@@ -135,7 +135,7 @@ static int vl600_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
                }
                buf = s->current_rx_buf;
-                memcpy(skb_put(buf, skb->len), skb->data, skb->len);
+                skb_put_data(buf, skb->data, skb->len);
        } else if (skb->len < 4) {
                netif_err(dev, ifup, dev->net, "Frame too short\n");
                dev->net->stats.rx_length_errors++;
diff --git a/drivers/net/usb/qmi_wwan.c b/drivers/net/usb/qmi_wwan.c
index 32a22f4e8356..ffd229ec8352 100644
--- a/drivers/net/usb/qmi_wwan.c
+++ b/drivers/net/usb/qmi_wwan.c
@@ -188,7 +188,7 @@ static int qmimux_rx_fixup(struct usbnet *dev, struct sk_buff *skb)
                        goto skip;
                }
-                memcpy(skb_put(skbn, len), skb->data + offset, len);
+                skb_put_data(skbn, skb->data + offset, len);
                if (netif_rx(skbn) != NET_RX_SUCCESS)
                        return 0;
diff --git a/drivers/net/virtio_net.c b/drivers/net/virtio_net.c
index 1f8c15cb63b0..6bacbd2f0eca 100644
--- a/drivers/net/virtio_net.c
+++ b/drivers/net/virtio_net.c
@@ -305,7 +305,7 @@ static struct sk_buff *page_to_skb(struct virtnet_info *vi,
        copy = len;
        if (copy > skb_tailroom(skb))
                copy = skb_tailroom(skb);
-        memcpy(skb_put(skb, copy), p, copy);
+        skb_put_data(skb, p, copy);
        len -= copy;
        offset += copy;
diff --git a/drivers/net/wan/farsync.c b/drivers/net/wan/farsync.c
index 33265eb50420..bd46b2552980 100644
--- a/drivers/net/wan/farsync.c
+++ b/drivers/net/wan/farsync.c
@@ -857,7 +857,7 @@ fst_rx_dma_complete(struct fst_card_info *card, struct fst_port_info *port,
        dbg(DBG_TX, "fst_rx_dma_complete\n");
        pi = port->index;
-        memcpy(skb_put(skb, len), card->rx_dma_handle_host, len);
+        skb_put_data(skb, card->rx_dma_handle_host, len);
        /* Reset buffer descriptor */
        FST_WRB(card, rxDescrRing[pi][rxp].bits, DMA_OWN);
diff --git a/drivers/net/wan/hdlc_ppp.c b/drivers/net/wan/hdlc_ppp.c
index 47fdb87d3567..f5b4ad45831a 100644
--- a/drivers/net/wan/hdlc_ppp.c
+++ b/drivers/net/wan/hdlc_ppp.c
@@ -234,9 +234,9 @@ static void ppp_tx_cp(struct net_device *dev, u16 pid, u8 code,
        cp->len = htons(sizeof(struct cp_header) + magic_len + len);
        if (magic_len)
-                memcpy(skb_put(skb, magic_len), &magic, magic_len);
+                skb_put_data(skb, &magic, magic_len);
        if (len)
-                memcpy(skb_put(skb, len), data, len);
+                skb_put_data(skb, data, len);
 #if DEBUG_CP
        BUG_ON(code >= CP_CODES);
diff --git a/drivers/net/wan/x25_asy.c b/drivers/net/wan/x25_asy.c
index 878b05d06fc7..40ee80c03c94 100644
--- a/drivers/net/wan/x25_asy.c
+++ b/drivers/net/wan/x25_asy.c
@@ -202,7 +202,7 @@ static void x25_asy_bump(struct x25_asy *sl)
                return;
        }
        skb_push(skb, 1);       /* LAPB internal control */
-        memcpy(skb_put(skb, count), sl->rbuff, count);
+        skb_put_data(skb, sl->rbuff, count);
        skb->protocol = x25_type_trans(skb, sl->dev);
        err = lapb_data_received(skb->dev, skb);
        if (err != LAPB_OK) {
diff --git a/drivers/net/wimax/i2400m/netdev.c b/drivers/net/wimax/i2400m/netdev.c
index 7f64e74d746b..dd7f3168c07d 100644
--- a/drivers/net/wimax/i2400m/netdev.c
+++ b/drivers/net/wimax/i2400m/netdev.c
@@ -488,7 +488,7 @@ void i2400m_net_rx(struct i2400m *i2400m, struct sk_buff *skb_rx,
                        net_dev->stats.rx_dropped++;
                        goto error_skb_realloc;
                }
-                memcpy(skb_put(skb, buf_len), buf, buf_len);
+                skb_put_data(skb, buf, buf_len);
        }
        i2400m_rx_fake_eth_header(i2400m->wimax_dev.net_dev,
                                  skb->data - ETH_HLEN,
diff --git a/drivers/net/wireless/admtek/adm8211.c b/drivers/net/wireless/admtek/adm8211.c
index ed626f568b58..5f64f3928c35 100644
--- a/drivers/net/wireless/admtek/adm8211.c
+++ b/drivers/net/wireless/admtek/adm8211.c
@@ -390,9 +390,9 @@ static void adm8211_interrupt_rci(struct ieee80211_hw *dev)
                                        priv->pdev,
                                        priv->rx_buffers[entry].mapping,
                                        pktlen, PCI_DMA_FROMDEVICE);
-                                memcpy(skb_put(skb, pktlen),
+                                skb_put_data(skb,
-                                       skb_tail_pointer(priv->rx_buffers[entry].skb),
+                                             skb_tail_pointer(priv->rx_buffers[entry].skb),
-                                       pktlen);
+                                             pktlen);
                                pci_dma_sync_single_for_device(
                                        priv->pdev,
                                        priv->rx_buffers[entry].mapping,
diff --git a/drivers/net/wireless/ath/ath10k/mac.c b/drivers/net/wireless/ath/ath10k/mac.c
index 4674ff33d320..16cf250f6c39 100644
--- a/drivers/net/wireless/ath/ath10k/mac.c
+++ b/drivers/net/wireless/ath/ath10k/mac.c
@@ -3475,9 +3475,8 @@ static void ath10k_tx_h_add_p2p_noa_ie(struct ath10k *ar,
                if (arvif->u.ap.noa_data)
                        if (!pskb_expand_head(skb, 0, arvif->u.ap.noa_len,
                                              GFP_ATOMIC))
-                                memcpy(skb_put(skb, arvif->u.ap.noa_len),
+                                skb_put_data(skb, arvif->u.ap.noa_data,
-                                       arvif->u.ap.noa_data,
+                                             arvif->u.ap.noa_len);
-                                       arvif->u.ap.noa_len);
                spin_unlock_bh(&ar->data_lock);
        }
 }
diff --git a/drivers/net/wireless/ath/ath10k/wmi.c b/drivers/net/wireless/ath/ath10k/wmi.c
index 6afc8d27f0d5..a66e2482897f 100644
--- a/drivers/net/wireless/ath/ath10k/wmi.c
+++ b/drivers/net/wireless/ath/ath10k/wmi.c
@@ -3304,9 +3304,8 @@ static void ath10k_wmi_update_noa(struct ath10k *ar, struct ath10k_vif *arvif,
        if (arvif->u.ap.noa_data)
                if (!pskb_expand_head(bcn, 0, arvif->u.ap.noa_len, GFP_ATOMIC))
-                        memcpy(skb_put(bcn, arvif->u.ap.noa_len),
+                        skb_put_data(bcn, arvif->u.ap.noa_data,
-                               arvif->u.ap.noa_data,
+                                     arvif->u.ap.noa_len);
-                               arvif->u.ap.noa_len);
 }
 static int ath10k_wmi_op_pull_swba_ev(struct ath10k *ar, struct sk_buff *skb,
diff --git a/drivers/net/wireless/ath/ath9k/channel.c b/drivers/net/wireless/ath/ath9k/channel.c
index 373b1e9457fd..f0439f2d566b 100644
--- a/drivers/net/wireless/ath/ath9k/channel.c
+++ b/drivers/net/wireless/ath/ath9k/channel.c
@@ -1005,7 +1005,7 @@ static void ath_scan_send_probe(struct ath_softc *sc,
                info->flags |= IEEE80211_TX_CTL_NO_CCK_RATE;
        if (req->ie_len)
-                memcpy(skb_put(skb, req->ie_len), req->ie, req->ie_len);
+                skb_put_data(skb, req->ie, req->ie_len);
        skb_set_queue_mapping(skb, IEEE80211_AC_VO);
@@ -1521,8 +1521,7 @@ void ath9k_beacon_add_noa(struct ath_softc *sc, struct ath_vif *avp,
        noa_desc = !!avp->offchannel_duration + !!avp->noa_duration;
        noa_len = 2 + sizeof(struct ieee80211_p2p_noa_desc) * noa_desc;
-        hdr = skb_put(skb, sizeof(noa_ie_hdr));
+        hdr = skb_put_data(skb, noa_ie_hdr, sizeof(noa_ie_hdr));
-        memcpy(hdr, noa_ie_hdr, sizeof(noa_ie_hdr));
        hdr[1] = sizeof(noa_ie_hdr) + noa_len - 2;
        hdr[7] = noa_len;
diff --git a/drivers/net/wireless/ath/ath9k/wmi.c b/drivers/net/wireless/ath/ath9k/wmi.c
index 9c16e2a6d185..c51c69b1ad96 100644
--- a/drivers/net/wireless/ath/ath9k/wmi.c
+++ b/drivers/net/wireless/ath/ath9k/wmi.c
@@ -312,8 +312,7 @@ int ath9k_wmi_cmd(struct wmi *wmi, enum wmi_cmd_id cmd_id,
        skb_reserve(skb, headroom);
        if (cmd_len != 0 && cmd_buf != NULL) {
-                data = (u8 *) skb_put(skb, cmd_len);
+                data = skb_put_data(skb, cmd_buf, cmd_len);
-                memcpy(data, cmd_buf, cmd_len);
        }
        mutex_lock(&wmi->op_mutex);
diff --git a/drivers/net/wireless/ath/carl9170/rx.c b/drivers/net/wireless/ath/carl9170/rx.c
index b2166726b05d..705063259c8f 100644
--- a/drivers/net/wireless/ath/carl9170/rx.c
+++ b/drivers/net/wireless/ath/carl9170/rx.c
@@ -481,7 +481,7 @@ static struct sk_buff *carl9170_rx_copy_data(u8 *buf, int len)
        skb = dev_alloc_skb(len + reserved);
        if (likely(skb)) {
                skb_reserve(skb, reserved);
-                memcpy(skb_put(skb, len), buf, len);
+                skb_put_data(skb, buf, len);
        }
        return skb;
@@ -916,7 +916,7 @@ static void carl9170_rx_stream(struct ar9170 *ar, void *buf, unsigned int len)
                                }
                        }
-                        memcpy(skb_put(ar->rx_failover, tlen), tbuf, tlen);
+                        skb_put_data(ar->rx_failover, tbuf, tlen);
                        ar->rx_failover_missing -= tlen;
                        if (ar->rx_failover_missing <= 0) {
@@ -958,7 +958,7 @@ static void carl9170_rx_stream(struct ar9170 *ar, void *buf, unsigned int len)
                         * the rx - descriptor comes round again.
                         */
-                        memcpy(skb_put(ar->rx_failover, tlen), tbuf, tlen);
+                        skb_put_data(ar->rx_failover, tbuf, tlen);
                        ar->rx_failover_missing = clen - tlen;
                        return;
                }
diff --git a/drivers/net/wireless/ath/wil6210/wmi.c b/drivers/net/wireless/ath/wil6210/wmi.c
index 814c35645b73..cff9c585972f 100644
--- a/drivers/net/wireless/ath/wil6210/wmi.c
+++ b/drivers/net/wireless/ath/wil6210/wmi.c
@@ -681,7 +681,7 @@ static void wmi_evt_eapol_rx(struct wil6210_priv *wil, int id,
        ether_addr_copy(eth->h_dest, ndev->dev_addr);
        ether_addr_copy(eth->h_source, evt->src_mac);
        eth->h_proto = cpu_to_be16(ETH_P_PAE);
-        memcpy(skb_put(skb, eapol_len), evt->eapol, eapol_len);
+        skb_put_data(skb, evt->eapol, eapol_len);
        skb->protocol = eth_type_trans(skb, ndev);
        if (likely(netif_rx_ni(skb) == NET_RX_SUCCESS)) {
                ndev->stats.rx_packets++;
diff --git a/drivers/net/wireless/atmel/atmel.c b/drivers/net/wireless/atmel/atmel.c
index 27b110dc8cc6..b68436b23a63 100644
--- a/drivers/net/wireless/atmel/atmel.c
+++ b/drivers/net/wireless/atmel/atmel.c
@@ -1036,9 +1036,8 @@ static void frag_rx_path(struct atmel_private *priv,
                                priv->dev->stats.rx_dropped++;
                        } else {
                                skb_reserve(skb, 2);
-                                memcpy(skb_put(skb, priv->frag_len + 12),
+                                skb_put_data(skb, priv->rx_buf,
-                                       priv->rx_buf,
+                                             priv->frag_len + 12);
-                                       priv->frag_len + 12);
                                skb->protocol = eth_type_trans(skb, priv->dev);
                                skb->ip_summed = CHECKSUM_NONE;
                                netif_rx(skb);
diff --git a/drivers/net/wireless/broadcom/b43legacy/dma.c b/drivers/net/wireless/broadcom/b43legacy/dma.c
index f9dd892b9f27..cfa617ddb2f1 100644
--- a/drivers/net/wireless/broadcom/b43legacy/dma.c
+++ b/drivers/net/wireless/broadcom/b43legacy/dma.c
@@ -1072,7 +1072,7 @@ static int dma_tx_fragment(struct b43legacy_dmaring *ring,
                        goto out_unmap_hdr;
                }
-                memcpy(skb_put(bounce_skb, skb->len), skb->data, skb->len);
+                skb_put_data(bounce_skb, skb->data, skb->len);
                memcpy(bounce_skb->cb, skb->cb, sizeof(skb->cb));
                bounce_skb->dev = skb->dev;
                skb_set_queue_mapping(bounce_skb, skb_get_queue_mapping(skb));
diff --git a/drivers/net/wireless/intel/ipw2x00/ipw2200.c b/drivers/net/wireless/intel/ipw2x00/ipw2200.c
index bbc579b647b6..e0c690b48d4e 100644
--- a/drivers/net/wireless/intel/ipw2x00/ipw2200.c
+++ b/drivers/net/wireless/intel/ipw2x00/ipw2200.c
@@ -10274,8 +10274,9 @@ static int ipw_tx_skb(struct ipw_priv *priv, struct libipw_txb *txb,
                                printk(KERN_INFO "Adding frag %d %d...\n",
                                       j, size);
-                                memcpy(skb_put(skb, size),
+                                skb_put_data(skb,
-                                       txb->fragments[j]->data + hdr_len, size);
+                                             txb->fragments[j]->data + hdr_len,
+                                             size);
                        }
                        dev_kfree_skb_any(txb->fragments[i]);
                        txb->fragments[i] = skb;
diff --git a/drivers/net/wireless/intel/ipw2x00/libipw_tx.c b/drivers/net/wireless/intel/ipw2x00/libipw_tx.c
index 048f1e3ada11..5339d1eeb2f7 100644
--- a/drivers/net/wireless/intel/ipw2x00/libipw_tx.c
+++ b/drivers/net/wireless/intel/ipw2x00/libipw_tx.c
@@ -359,7 +359,7 @@ netdev_tx_t libipw_xmit(struct sk_buff *skb, struct net_device *dev)
                        goto failed;
                skb_reserve(skb_new, crypt->ops->extra_msdu_prefix_len);
-                memcpy(skb_put(skb_new, hdr_len), &header, hdr_len);
+                skb_put_data(skb_new, &header, hdr_len);
                snapped = 1;
                libipw_copy_snap(skb_put(skb_new, SNAP_SIZE + sizeof(u16)),
                                    ether_type);
@@ -470,9 +470,7 @@ netdev_tx_t libipw_xmit(struct sk_buff *skb, struct net_device *dev)
                        skb_reserve(skb_frag,
                                    crypt->ops->extra_mpdu_prefix_len);
-                frag_hdr =
+                frag_hdr = skb_put_data(skb_frag, &header, hdr_len);
-                    (struct libipw_hdr_3addrqos *)skb_put(skb_frag, hdr_len);
-                memcpy(frag_hdr, &header, hdr_len);
                /* If this is not the last fragment, then add the MOREFRAGS
                 * bit to the frame control */
diff --git a/drivers/net/wireless/intel/iwlegacy/3945.c b/drivers/net/wireless/intel/iwlegacy/3945.c
index 080ea8155b90..dbf164d48ed3 100644
--- a/drivers/net/wireless/intel/iwlegacy/3945.c
+++ b/drivers/net/wireless/intel/iwlegacy/3945.c
@@ -520,7 +520,7 @@ il3945_pass_packet_to_mac80211(struct il_priv *il, struct il_rx_buf *rxb,
         * and do not consume a full page
         */
        if (len <= SMALL_PACKET_SIZE) {
-                memcpy(skb_put(skb, len), rx_hdr->payload, len);
+                skb_put_data(skb, rx_hdr->payload, len);
        } else {
                skb_add_rx_frag(skb, 0, rxb->page,
                                (void *)rx_hdr->payload - (void *)pkt, len,
diff --git a/drivers/net/wireless/intel/iwlegacy/4965-mac.c b/drivers/net/wireless/intel/iwlegacy/4965-mac.c
index 49a2ff15ddae..5b51fba75595 100644
--- a/drivers/net/wireless/intel/iwlegacy/4965-mac.c
+++ b/drivers/net/wireless/intel/iwlegacy/4965-mac.c
@@ -606,7 +606,7 @@ il4965_pass_packet_to_mac80211(struct il_priv *il, struct ieee80211_hdr *hdr,
        }
        if (len <= SMALL_PACKET_SIZE) {
-                memcpy(skb_put(skb, len), hdr, len);
+                skb_put_data(skb, hdr, len);
        } else {
                skb_add_rx_frag(skb, 0, rxb->page, (void *)hdr - rxb_addr(rxb),
                                len, PAGE_SIZE << il->hw_params.rx_page_order);
diff --git a/drivers/net/wireless/intel/iwlwifi/dvm/rx.c b/drivers/net/wireless/intel/iwlwifi/dvm/rx.c
index adfd6307edca..eaad7389b67c 100644
--- a/drivers/net/wireless/intel/iwlwifi/dvm/rx.c
+++ b/drivers/net/wireless/intel/iwlwifi/dvm/rx.c
@@ -657,7 +657,7 @@ static void iwlagn_pass_packet_to_mac80211(struct iwl_priv *priv,
         */
        hdrlen = (len <= skb_tailroom(skb)) ? len : sizeof(*hdr);
-        memcpy(skb_put(skb, hdrlen), hdr, hdrlen);
+        skb_put_data(skb, hdr, hdrlen);
        fraglen = len - hdrlen;
        if (fraglen) {
diff --git a/drivers/net/wireless/intel/iwlwifi/dvm/tx.c b/drivers/net/wireless/intel/iwlwifi/dvm/tx.c
index 4b97371c3b42..adaa2f0097cc 100644
--- a/drivers/net/wireless/intel/iwlwifi/dvm/tx.c
+++ b/drivers/net/wireless/intel/iwlwifi/dvm/tx.c
@@ -319,8 +319,7 @@ int iwlagn_tx_skb(struct iwl_priv *priv,
                if (noa_data &&
                    pskb_expand_head(skb, 0, noa_data->length,
                                     GFP_ATOMIC) == 0) {
-                        memcpy(skb_put(skb, noa_data->length),
+                        skb_put_data(skb, noa_data->data, noa_data->length);
-                               noa_data->data, noa_data->length);
                        hdr = (struct ieee80211_hdr *)skb->data;
                }
        }
diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/d3.c b/drivers/net/wireless/intel/iwlwifi/mvm/d3.c
index 119a3bd92c50..7a56a0ac151c 100644
--- a/drivers/net/wireless/intel/iwlwifi/mvm/d3.c
+++ b/drivers/net/wireless/intel/iwlwifi/mvm/d3.c
@@ -1431,7 +1431,7 @@ static void iwl_mvm_report_wakeup_reasons(struct iwl_mvm *mvm,
                        if (!pkt)
                                goto report;
-                        memcpy(skb_put(pkt, hdrlen), pktdata, hdrlen);
+                        skb_put_data(pkt, pktdata, hdrlen);
                        pktdata += hdrlen;
                        pktsize -= hdrlen;
@@ -1463,7 +1463,7 @@ static void iwl_mvm_report_wakeup_reasons(struct iwl_mvm *mvm,
                        pktsize -= ivlen + icvlen;
                        pktdata += ivlen;
-                        memcpy(skb_put(pkt, pktsize), pktdata, pktsize);
+                        skb_put_data(pkt, pktdata, pktsize);
                        if (ieee80211_data_to_8023(pkt, vif->addr, vif->type))
                                goto report;
diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c b/drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c
index fd2fc46e2fe5..15d13017c1df 100644
--- a/drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c
+++ b/drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c
@@ -1596,7 +1596,7 @@ void iwl_mvm_rx_stored_beacon_notif(struct iwl_mvm *mvm,
                                               rx_status.band);
        /* copy the data */
-        memcpy(skb_put(skb, size), sb->data, size);
+        skb_put_data(skb, sb->data, size);
        memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status));
        /* pass it as regular rx to mac80211 */
diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/rx.c b/drivers/net/wireless/intel/iwlwifi/mvm/rx.c
index fd1dd06c4f18..2c07719aa45c 100644
--- a/drivers/net/wireless/intel/iwlwifi/mvm/rx.c
+++ b/drivers/net/wireless/intel/iwlwifi/mvm/rx.c
@@ -133,7 +133,7 @@ static void iwl_mvm_pass_packet_to_mac80211(struct iwl_mvm *mvm,
         */
        hdrlen = (len <= skb_tailroom(skb)) ? len : hdrlen + crypt_len + 8;
-        memcpy(skb_put(skb, hdrlen), hdr, hdrlen);
+        skb_put_data(skb, hdr, hdrlen);
        fraglen = len - hdrlen;
        if (fraglen) {
diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c b/drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c
index 966cd7543629..cf48390f6f68 100644
--- a/drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c
+++ b/drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c
@@ -183,9 +183,8 @@ static void iwl_mvm_create_skb(struct sk_buff *skb, struct ieee80211_hdr *hdr,
         * present before copying packet data.
         */
        hdrlen += crypt_len;
-        memcpy(skb_put(skb, hdrlen), hdr, hdrlen);
+        skb_put_data(skb, hdr, hdrlen);
-        memcpy(skb_put(skb, headlen - hdrlen), (u8 *)hdr + hdrlen + pad_len,
+        skb_put_data(skb, (u8 *)hdr + hdrlen + pad_len, headlen - hdrlen);
-               headlen - hdrlen);
        fraglen = len - headlen;
diff --git a/drivers/net/wireless/intel/iwlwifi/pcie/tx.c b/drivers/net/wireless/intel/iwlwifi/pcie/tx.c
index 386950a2d616..01013d273aa7 100644
--- a/drivers/net/wireless/intel/iwlwifi/pcie/tx.c
+++ b/drivers/net/wireless/intel/iwlwifi/pcie/tx.c
@@ -2141,8 +2141,7 @@ static int iwl_fill_data_tbs_amsdu(struct iwl_trans *trans, struct sk_buff *skb,
                                                        htons(ETH_P_IPV6),
                                                    data_left);
-                        memcpy(skb_put(csum_skb, tcp_hdrlen(skb)),
+                        skb_put_data(csum_skb, tcph, tcp_hdrlen(skb));
-                               tcph, tcp_hdrlen(skb));
                        skb_reset_transport_header(csum_skb);
                        csum_skb->csum_start =
                                (unsigned char *)tcp_hdr(csum_skb) -
@@ -2176,7 +2175,7 @@ static int iwl_fill_data_tbs_amsdu(struct iwl_trans *trans, struct sk_buff *skb,
                        dma_addr_t tb_phys;
                        if (trans_pcie->sw_csum_tx)
-                                memcpy(skb_put(csum_skb, size), tso.data, size);
+                                skb_put_data(csum_skb, tso.data, size);
                        tb_phys = dma_map_single(trans->dev, tso.data,
                                                 size, DMA_TO_DEVICE);
diff --git a/drivers/net/wireless/intersil/hostap/hostap_80211_tx.c b/drivers/net/wireless/intersil/hostap/hostap_80211_tx.c
index 055e11d353ca..c1b10d5117ad 100644
--- a/drivers/net/wireless/intersil/hostap/hostap_80211_tx.c
+++ b/drivers/net/wireless/intersil/hostap/hostap_80211_tx.c
@@ -242,7 +242,7 @@ netdev_tx_t hostap_data_start_xmit(struct sk_buff *skb,
                memcpy(skb_push(skb, encaps_len), encaps_data, encaps_len);
        memcpy(skb_push(skb, hdr_len), &hdr, hdr_len);
        if (use_wds == WDS_OWN_FRAME) {
-                memcpy(skb_put(skb, ETH_ALEN), &hdr.addr4, ETH_ALEN);
+                skb_put_data(skb, &hdr.addr4, ETH_ALEN);
        }
        iface->stats.tx_packets++;
diff --git a/drivers/net/wireless/intersil/hostap/hostap_ap.c b/drivers/net/wireless/intersil/hostap/hostap_ap.c
index 89b5987303a4..91757defb9be 100644
--- a/drivers/net/wireless/intersil/hostap/hostap_ap.c
+++ b/drivers/net/wireless/intersil/hostap/hostap_ap.c
@@ -1000,7 +1000,7 @@ static void prism2_send_mgmt(struct net_device *dev,
        hdrlen = hostap_80211_get_hdrlen(cpu_to_le16(type_subtype));
        hdr = skb_put_zero(skb, hdrlen);
        if (body)
-                memcpy(skb_put(skb, body_len), body, body_len);
+                skb_put_data(skb, body, body_len);
        /* FIX: ctrl::ack sending used special HFA384X_TX_CTRL_802_11
         * tx_control instead of using local->tx_control */
diff --git a/drivers/net/wireless/intersil/hostap/hostap_hw.c b/drivers/net/wireless/intersil/hostap/hostap_hw.c
index d4f0b730796e..72b46eaf3de2 100644
--- a/drivers/net/wireless/intersil/hostap/hostap_hw.c
+++ b/drivers/net/wireless/intersil/hostap/hostap_hw.c
@@ -2005,7 +2005,7 @@ static void prism2_rx(local_info_t *local)
                goto rx_dropped;
        }
        skb->dev = dev;
-        memcpy(skb_put(skb, hdr_len), &rxdesc, hdr_len);
+        skb_put_data(skb, &rxdesc, hdr_len);
        if (len > 0)
                res = hfa384x_from_bap(dev, BAP0, skb_put(skb, len), len);
@@ -2209,9 +2209,9 @@ static void hostap_tx_callback(local_info_t *local,
                return;
        }
-        memcpy(skb_put(skb, hdrlen), (void *) &txdesc->frame_control, hdrlen);
+        skb_put_data(skb, (void *)&txdesc->frame_control, hdrlen);
        if (payload)
-                memcpy(skb_put(skb, len), payload, len);
+                skb_put_data(skb, payload, len);
        skb->dev = local->dev;
        skb_reset_mac_header(skb);
@@ -2362,8 +2362,7 @@ static void prism2_txexc(local_info_t *local)
                struct sk_buff *skb;
                skb = dev_alloc_skb(sizeof(txdesc));
                if (skb) {
-                        memcpy(skb_put(skb, sizeof(txdesc)), &txdesc,
+                        skb_put_data(skb, &txdesc, sizeof(txdesc));
-                               sizeof(txdesc));
                        skb_queue_tail(&local->sta_tx_exc_list, skb);
                        tasklet_schedule(&local->sta_tx_exc_tasklet);
                }
@@ -2460,7 +2459,7 @@ static void prism2_info(local_info_t *local)
                goto out;
        }
-        memcpy(skb_put(skb, sizeof(info)), &info, sizeof(info));
+        skb_put_data(skb, &info, sizeof(info));
        if (left > 0 && hfa384x_from_bap(dev, BAP0, skb_put(skb, left), left))
        {
                spin_unlock(&local->baplock);
diff --git a/drivers/net/wireless/intersil/hostap/hostap_main.c b/drivers/net/wireless/intersil/hostap/hostap_main.c
index 400f9b5d620e..a3c066f90afc 100644
--- a/drivers/net/wireless/intersil/hostap/hostap_main.c
+++ b/drivers/net/wireless/intersil/hostap/hostap_main.c
@@ -1045,7 +1045,7 @@ int prism2_sta_send_mgmt(local_info_t *local, u8 *dst, u16 stype,
        memcpy(mgmt->sa, dev->dev_addr, ETH_ALEN);
        memcpy(mgmt->bssid, dst, ETH_ALEN);
        if (body)
-                memcpy(skb_put(skb, bodylen), body, bodylen);
+                skb_put_data(skb, body, bodylen);
        meta = (struct hostap_skb_tx_data *) skb->cb;
        memset(meta, 0, sizeof(*meta));
diff --git a/drivers/net/wireless/intersil/orinoco/main.c b/drivers/net/wireless/intersil/orinoco/main.c
index d9128bb25e85..f7abc439fb92 100644
--- a/drivers/net/wireless/intersil/orinoco/main.c
+++ b/drivers/net/wireless/intersil/orinoco/main.c
@@ -792,7 +792,7 @@ static void orinoco_rx_monitor(struct net_device *dev, u16 rxfid,
        }
        /* Copy the 802.11 header to the skb */
-        memcpy(skb_put(skb, hdrlen), &(desc->frame_ctl), hdrlen);
+        skb_put_data(skb, &(desc->frame_ctl), hdrlen);
        skb_reset_mac_header(skb);
        /* If any, copy the data from the card to the skb */
diff --git a/drivers/net/wireless/intersil/p54/p54spi.c b/drivers/net/wireless/intersil/p54/p54spi.c
index 7ab2f43ab425..e41bf042352e 100644
--- a/drivers/net/wireless/intersil/p54/p54spi.c
+++ b/drivers/net/wireless/intersil/p54/p54spi.c
@@ -372,9 +372,9 @@ static int p54spi_rx(struct p54s_priv *priv)
        }
        if (len <= READAHEAD_SZ) {
-                memcpy(skb_put(skb, len), rx_head + 1, len);
+                skb_put_data(skb, rx_head + 1, len);
        } else {
-                memcpy(skb_put(skb, READAHEAD_SZ), rx_head + 1, READAHEAD_SZ);
+                skb_put_data(skb, rx_head + 1, READAHEAD_SZ);
                p54spi_spi_read(priv, SPI_ADRS_DMA_DATA,
                                skb_put(skb, len - READAHEAD_SZ),
                                len - READAHEAD_SZ);
diff --git a/drivers/net/wireless/intersil/p54/txrx.c b/drivers/net/wireless/intersil/p54/txrx.c
index 60f9b678ef74..b00c07d72f95 100644
--- a/drivers/net/wireless/intersil/p54/txrx.c
+++ b/drivers/net/wireless/intersil/p54/txrx.c
@@ -905,8 +905,9 @@ void p54_tx_80211(struct ieee80211_hw *dev,
                if (info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP) {
                        /* reserve space for the MIC key */
                        len += 8;
-                        memcpy(skb_put(skb, 8), &(info->control.hw_key->key
+                        skb_put_data(skb,
-                                [NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY]), 8);
+                                     &(info->control.hw_key->key[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY]),
+                                     8);
                }
                /* reserve some space for ICV */
                len += info->control.hw_key->icv_len;
diff --git a/drivers/net/wireless/mac80211_hwsim.c b/drivers/net/wireless/mac80211_hwsim.c
index c854a557998b..1d6e180052b8 100644
--- a/drivers/net/wireless/mac80211_hwsim.c
+++ b/drivers/net/wireless/mac80211_hwsim.c
@@ -2020,8 +2020,7 @@ static void hw_scan_work(struct work_struct *work)
                        memcpy(mgmt->bssid, req->bssid, ETH_ALEN);
                        if (req->ie_len)
-                                memcpy(skb_put(probe, req->ie_len), req->ie,
+                                skb_put_data(probe, req->ie, req->ie_len);
-                                       req->ie_len);
                        local_bh_disable();
                        mac80211_hwsim_tx_frame(hwsim->hw, probe,
@@ -3021,7 +3020,7 @@ static int hwsim_cloned_frame_received_nl(struct sk_buff *skb_2,
                goto err;
        /* Copy the data */
-        memcpy(skb_put(skb, frame_data_len), frame_data, frame_data_len);
+        skb_put_data(skb, frame_data, frame_data_len);
        data2 = get_hwsim_data_ref_from_addr(dst);
        if (!data2)
diff --git a/drivers/net/wireless/marvell/libertas/if_sdio.c b/drivers/net/wireless/marvell/libertas/if_sdio.c
index e0196208ab0d..a9e2b06b3175 100644
--- a/drivers/net/wireless/marvell/libertas/if_sdio.c
+++ b/drivers/net/wireless/marvell/libertas/if_sdio.c
@@ -256,9 +256,7 @@ static int if_sdio_handle_data(struct if_sdio_card *card,
        skb_reserve(skb, NET_IP_ALIGN);
-        data = skb_put(skb, size);
+        data = skb_put_data(skb, buffer, size);
-        memcpy(data, buffer, size);
        lbs_process_rxed_packet(card->priv, skb);
diff --git a/drivers/net/wireless/marvell/mwifiex/11n_aggr.c b/drivers/net/wireless/marvell/mwifiex/11n_aggr.c
index 53e67526f40d..bc12c37e7501 100644
--- a/drivers/net/wireless/marvell/mwifiex/11n_aggr.c
+++ b/drivers/net/wireless/marvell/mwifiex/11n_aggr.c
@@ -81,7 +81,7 @@ mwifiex_11n_form_amsdu_pkt(struct sk_buff *skb_aggr,
        tx_header->eth803_hdr.h_proto = htons(skb_src->len + LLC_SNAP_LEN);
        /* Add payload */
-        memcpy(skb_put(skb_aggr, skb_src->len), skb_src->data, skb_src->len);
+        skb_put_data(skb_aggr, skb_src->data, skb_src->len);
        /* Add padding for new MSDU to start from 4 byte boundary */
        *pad = (4 - ((unsigned long)skb_aggr->tail & 0x3)) % 4;
diff --git a/drivers/net/wireless/marvell/mwifiex/cfg80211.c b/drivers/net/wireless/marvell/mwifiex/cfg80211.c
index 025bc06a19d6..c20e4944ef87 100644
--- a/drivers/net/wireless/marvell/mwifiex/cfg80211.c
+++ b/drivers/net/wireless/marvell/mwifiex/cfg80211.c
@@ -176,12 +176,10 @@ mwifiex_form_mgmt_frame(struct sk_buff *skb, const u8 *buf, size_t len)
        memcpy(skb_push(skb, sizeof(pkt_type)), &pkt_type, sizeof(pkt_type));
        /* Add packet data and address4 */
-        memcpy(skb_put(skb, sizeof(struct ieee80211_hdr_3addr)), buf,
+        skb_put_data(skb, buf, sizeof(struct ieee80211_hdr_3addr));
-               sizeof(struct ieee80211_hdr_3addr));
+        skb_put_data(skb, addr, ETH_ALEN);
-        memcpy(skb_put(skb, ETH_ALEN), addr, ETH_ALEN);
+        skb_put_data(skb, buf + sizeof(struct ieee80211_hdr_3addr),
-        memcpy(skb_put(skb, len - sizeof(struct ieee80211_hdr_3addr)),
+                     len - sizeof(struct ieee80211_hdr_3addr));
-               buf + sizeof(struct ieee80211_hdr_3addr),
-               len - sizeof(struct ieee80211_hdr_3addr));
        skb->priority = LOW_PRIO_TID;
        __net_timestamp(skb);
diff --git a/drivers/net/wireless/marvell/mwifiex/tdls.c b/drivers/net/wireless/marvell/mwifiex/tdls.c
index c76b7315af55..d38555fe4284 100644
--- a/drivers/net/wireless/marvell/mwifiex/tdls.c
+++ b/drivers/net/wireless/marvell/mwifiex/tdls.c
@@ -679,8 +679,7 @@ int mwifiex_send_tdls_data_frame(struct mwifiex_private *priv, const u8 *peer,
                        return ret;
                }
                if (extra_ies_len)
-                        memcpy(skb_put(skb, extra_ies_len), extra_ies,
+                        skb_put_data(skb, extra_ies, extra_ies_len);
-                               extra_ies_len);
                mwifiex_tdls_add_link_ie(skb, priv->curr_addr, peer,
                                         priv->cfg_bssid);
                break;
@@ -693,8 +692,7 @@ int mwifiex_send_tdls_data_frame(struct mwifiex_private *priv, const u8 *peer,
                        return ret;
                }
                if (extra_ies_len)
-                        memcpy(skb_put(skb, extra_ies_len), extra_ies,
+                        skb_put_data(skb, extra_ies, extra_ies_len);
-                               extra_ies_len);
                mwifiex_tdls_add_link_ie(skb, peer, priv->curr_addr,
                                         priv->cfg_bssid);
                break;
@@ -865,7 +863,7 @@ int mwifiex_send_tdls_action_frame(struct mwifiex_private *priv, const u8 *peer,
        }
        if (extra_ies_len)
-                memcpy(skb_put(skb, extra_ies_len), extra_ies, extra_ies_len);
+                skb_put_data(skb, extra_ies, extra_ies_len);
        /* the TDLS link IE is always added last we are the responder */
diff --git a/drivers/net/wireless/mediatek/mt7601u/dma.c b/drivers/net/wireless/mediatek/mt7601u/dma.c
index a8bc064bc14f..660267b359e4 100644
--- a/drivers/net/wireless/mediatek/mt7601u/dma.c
+++ b/drivers/net/wireless/mediatek/mt7601u/dma.c
@@ -52,7 +52,7 @@ mt7601u_rx_skb_from_seg(struct mt7601u_dev *dev, struct mt7601u_rxwi *rxwi,
                goto bad_frame;
        if (rxwi->rxinfo & cpu_to_le32(MT_RXINFO_L2PAD)) {
-                memcpy(skb_put(skb, hdr_len), data, hdr_len);
+                skb_put_data(skb, data, hdr_len);
                data += hdr_len + 2;
                true_len -= hdr_len;
@@ -63,7 +63,7 @@ mt7601u_rx_skb_from_seg(struct mt7601u_dev *dev, struct mt7601u_rxwi *rxwi,
        copy = (true_len <= skb_tailroom(skb)) ? true_len : hdr_len + 8;
        frag = true_len - copy;
-        memcpy(skb_put(skb, copy), data, copy);
+        skb_put_data(skb, data, copy);
        data += copy;
        if (frag) {
diff --git a/drivers/net/wireless/mediatek/mt7601u/mcu.c b/drivers/net/wireless/mediatek/mt7601u/mcu.c
index a9f5f398b2f8..65a8004418ea 100644
--- a/drivers/net/wireless/mediatek/mt7601u/mcu.c
+++ b/drivers/net/wireless/mediatek/mt7601u/mcu.c
@@ -68,7 +68,7 @@ mt7601u_mcu_msg_alloc(struct mt7601u_dev *dev, const void *data, int len)
        skb = alloc_skb(len + MT_DMA_HDR_LEN + 4, GFP_KERNEL);
        if (skb) {
                skb_reserve(skb, MT_DMA_HDR_LEN);
-                memcpy(skb_put(skb, len), data, len);
+                skb_put_data(skb, data, len);
        }
        return skb;
diff --git a/drivers/net/wireless/quantenna/qtnfmac/pearl/pcie.c b/drivers/net/wireless/quantenna/qtnfmac/pearl/pcie.c
index 4814d90c8040..f93b27f3a236 100644
--- a/drivers/net/wireless/quantenna/qtnfmac/pearl/pcie.c
+++ b/drivers/net/wireless/quantenna/qtnfmac/pearl/pcie.c
@@ -213,7 +213,7 @@ static void qtnf_pcie_control_rx_callback(void *arg, const u8 *buf, size_t len)
                return;
        }
-        memcpy(skb_put(skb, len), buf, len);
+        skb_put_data(skb, buf, len);
        qtnf_trans_handle_rx_ctl_packet(bus, skb);
 }
diff --git a/drivers/net/wireless/quantenna/qtnfmac/qlink_util.h b/drivers/net/wireless/quantenna/qtnfmac/qlink_util.h
index d8de484b5995..9844ff0add2b 100644
--- a/drivers/net/wireless/quantenna/qtnfmac/qlink_util.h
+++ b/drivers/net/wireless/quantenna/qtnfmac/qlink_util.h
@@ -35,8 +35,7 @@ qtnf_cmd_skb_put_buffer(struct sk_buff *skb, const u8 *buf_src, size_t len)
 {
        u8 *buf_dst;
-        buf_dst = skb_put(skb, len);
+        buf_dst = skb_put_data(skb, buf_src, len);
-        memcpy(buf_dst, buf_src, len);
 }
 static inline void qtnf_cmd_skb_put_tlv_arr(struct sk_buff *skb,
diff --git a/drivers/net/wireless/ralink/rt2x00/rt2x00debug.c b/drivers/net/wireless/ralink/rt2x00/rt2x00debug.c
index 4a1bca1b1e26..b70985e126bf 100644
--- a/drivers/net/wireless/ralink/rt2x00/rt2x00debug.c
+++ b/drivers/net/wireless/ralink/rt2x00/rt2x00debug.c
@@ -203,9 +203,8 @@ void rt2x00debug_dump_frame(struct rt2x00_dev *rt2x00dev,
        dump_hdr->timestamp_usec = cpu_to_le32(timestamp.tv_usec);
        if (!(skbdesc->flags & SKBDESC_DESC_IN_SKB))
-                memcpy(skb_put(skbcopy, skbdesc->desc_len), skbdesc->desc,
+                skb_put_data(skbcopy, skbdesc->desc, skbdesc->desc_len);
-                       skbdesc->desc_len);
+        skb_put_data(skbcopy, skb->data, skb->len);
-        memcpy(skb_put(skbcopy, skb->len), skb->data, skb->len);
        skb_queue_tail(&intf->frame_dump_skbqueue, skbcopy);
        wake_up_interruptible(&intf->frame_dump_waitqueue);
diff --git a/drivers/net/wireless/realtek/rtlwifi/pci.c b/drivers/net/wireless/realtek/rtlwifi/pci.c
index 2e6b888bd417..0c1f8307e179 100644
--- a/drivers/net/wireless/realtek/rtlwifi/pci.c
+++ b/drivers/net/wireless/realtek/rtlwifi/pci.c
@@ -735,8 +735,7 @@ static void _rtl_pci_rx_to_mac80211(struct ieee80211_hw *hw,
                if (likely(uskb)) {
                        memcpy(IEEE80211_SKB_RXCB(uskb), &rx_status,
                               sizeof(rx_status));
-                        pdata = (u8 *)skb_put(uskb, skb->len);
+                        pdata = skb_put_data(uskb, skb->data, skb->len);
-                        memcpy(pdata, skb->data, skb->len);
                        dev_kfree_skb_any(skb);
                        ieee80211_rx_irqsafe(hw, uskb);
                } else {
diff --git a/drivers/net/wireless/realtek/rtlwifi/rtl8188ee/fw.c b/drivers/net/wireless/realtek/rtlwifi/rtl8188ee/fw.c
index 21ed9ad3be7a..a2eca669873b 100644
--- a/drivers/net/wireless/realtek/rtlwifi/rtl8188ee/fw.c
+++ b/drivers/net/wireless/realtek/rtlwifi/rtl8188ee/fw.c
@@ -620,8 +620,7 @@ void rtl88e_set_fw_rsvdpagepkt(struct ieee80211_hw *hw, bool b_dl_finished)
                      u1rsvdpageloc, 3);
        skb = dev_alloc_skb(totalpacketlen);
-        memcpy(skb_put(skb, totalpacketlen),
+        skb_put_data(skb, &reserved_page_packet, totalpacketlen);
-               &reserved_page_packet, totalpacketlen);
        rtstatus = rtl_cmd_send_packet(hw, skb);
diff --git a/drivers/net/wireless/realtek/rtlwifi/rtl8192se/fw.c b/drivers/net/wireless/realtek/rtlwifi/rtl8192se/fw.c
index 89a0a28b8b20..dd3ba4810e7d 100644
--- a/drivers/net/wireless/realtek/rtlwifi/rtl8192se/fw.c
+++ b/drivers/net/wireless/realtek/rtlwifi/rtl8192se/fw.c
@@ -188,10 +188,9 @@ static bool _rtl92s_firmware_downloadcode(struct ieee80211_hw *hw,
                if (!skb)
                        return false;
                skb_reserve(skb, extra_descoffset);
-                seg_ptr = (u8 *)skb_put(skb, (u32)(frag_length -
+                seg_ptr = skb_put_data(skb,
-                                        extra_descoffset));
+                                       code_virtual_address + frag_offset,
-                memcpy(seg_ptr, code_virtual_address + frag_offset,
+                                       (u32)(frag_length - extra_descoffset));
-                       (u32)(frag_length - extra_descoffset));
                tcb_desc = (struct rtl_tcb_desc *)(skb->cb);
                tcb_desc->queue_index = TXCMD_QUEUE;
diff --git a/drivers/net/wireless/realtek/rtlwifi/usb.c b/drivers/net/wireless/realtek/rtlwifi/usb.c
index 4d989b8ab185..5590d07d0918 100644
--- a/drivers/net/wireless/realtek/rtlwifi/usb.c
+++ b/drivers/net/wireless/realtek/rtlwifi/usb.c
@@ -653,7 +653,7 @@ static void _rtl_rx_completed(struct urb *_urb)
                /* reserve some space for mac80211's radiotap */
                skb_reserve(skb, __RADIO_TAP_SIZE_RSV);
-                memcpy(skb_put(skb, size), _urb->transfer_buffer, size);
+                skb_put_data(skb, _urb->transfer_buffer, size);
                skb_queue_tail(&rtlusb->rx_queue, skb);
                tasklet_schedule(&rtlusb->rx_work_tasklet);
diff --git a/drivers/net/wireless/rsi/rsi_91x_mgmt.c b/drivers/net/wireless/rsi/rsi_91x_mgmt.c
index fac87c06357b..4433cec4367c 100644
--- a/drivers/net/wireless/rsi/rsi_91x_mgmt.c
+++ b/drivers/net/wireless/rsi/rsi_91x_mgmt.c
@@ -412,11 +412,9 @@ static int rsi_mgmt_pkt_to_core(struct rsi_common *common,
                        return -ENOMEM;
                }
-                buffer = skb_put(skb, msg_len);
+                buffer = skb_put_data(skb,
+                                      (u8 *)(msg + FRAME_DESC_SZ + pad_bytes),
-                memcpy(buffer,
+                                      msg_len);
-                       (u8 *)(msg +  FRAME_DESC_SZ + pad_bytes),
-                       msg_len);
                pkt_recv = buffer[0];
diff --git a/drivers/net/wireless/st/cw1200/scan.c b/drivers/net/wireless/st/cw1200/scan.c
index 0a0ff7e31f5b..cc2ce60f4f09 100644
--- a/drivers/net/wireless/st/cw1200/scan.c
+++ b/drivers/net/wireless/st/cw1200/scan.c
@@ -84,7 +84,7 @@ int cw1200_hw_scan(struct ieee80211_hw *hw,
                return -ENOMEM;
        if (req->ie_len)
-                memcpy(skb_put(frame.skb, req->ie_len), req->ie, req->ie_len);
+                skb_put_data(frame.skb, req->ie, req->ie_len);
        /* will be unlocked in cw1200_scan_work() */
        down(&priv->scan.lock);
diff --git a/drivers/net/wireless/ti/wl1251/main.c b/drivers/net/wireless/ti/wl1251/main.c
index bbf7604889b7..08f0477f78d9 100644
--- a/drivers/net/wireless/ti/wl1251/main.c
+++ b/drivers/net/wireless/ti/wl1251/main.c
@@ -1036,7 +1036,7 @@ static int wl1251_op_hw_scan(struct ieee80211_hw *hw,
                goto out_idle;
        }
        if (req->ie_len)
-                memcpy(skb_put(skb, req->ie_len), req->ie, req->ie_len);
+                skb_put_data(skb, req->ie, req->ie_len);
        ret = wl1251_cmd_template_set(wl, CMD_PROBE_REQ, skb->data,
                                      skb->len);
diff --git a/drivers/net/wireless/ti/wlcore/cmd.c b/drivers/net/wireless/ti/wlcore/cmd.c
index 4a39fb13c478..229f4d01f239 100644
--- a/drivers/net/wireless/ti/wlcore/cmd.c
+++ b/drivers/net/wireless/ti/wlcore/cmd.c
@@ -1156,9 +1156,9 @@ int wl12xx_cmd_build_probe_req(struct wl1271 *wl, struct wl12xx_vif *wlvif,
                goto out;
        }
        if (ie0_len)
-                memcpy(skb_put(skb, ie0_len), ie0, ie0_len);
+                skb_put_data(skb, ie0, ie0_len);
        if (ie1_len)
-                memcpy(skb_put(skb, ie1_len), ie1, ie1_len);
+                skb_put_data(skb, ie1, ie1_len);
        if (sched_scan &&
            (wl->quirks & WLCORE_QUIRK_DUAL_PROBE_TMPL)) {
diff --git a/drivers/net/wireless/ti/wlcore/rx.c b/drivers/net/wireless/ti/wlcore/rx.c
index 52a55f9acd80..53cd6d4d5b50 100644
--- a/drivers/net/wireless/ti/wlcore/rx.c
+++ b/drivers/net/wireless/ti/wlcore/rx.c
@@ -174,15 +174,13 @@ static int wl1271_rx_handle_data(struct wl1271 *wl, u8 *data, u32 length,
        /* reserve the unaligned payload(if any) */
        skb_reserve(skb, reserved);
-        buf = skb_put(skb, pkt_data_len);
        /*
         * Copy packets from aggregation buffer to the skbs without rx
         * descriptor and with packet payload aligned care. In case of unaligned
         * packets copy the packets in offset of 2 bytes guarantee IP header
         * payload aligned to 4 bytes.
         */
-        memcpy(buf, data + sizeof(*desc), pkt_data_len);
+        buf = skb_put_data(skb, data + sizeof(*desc), pkt_data_len);
        if (rx_align == WLCORE_RX_BUF_PADDED)
                skb_pull(skb, RX_BUF_ALIGN);
diff --git a/drivers/net/wireless/zydas/zd1201.c b/drivers/net/wireless/zydas/zd1201.c
index de7ff395977a..7f586d76cf17 100644
--- a/drivers/net/wireless/zydas/zd1201.c
+++ b/drivers/net/wireless/zydas/zd1201.c
@@ -326,13 +326,13 @@ static void zd1201_usbrx(struct urb *urb)
                        if (!(skb = dev_alloc_skb(datalen+24)))
                                goto resubmit;
                        
-                        memcpy(skb_put(skb, 2), &data[datalen-16], 2);
+                        skb_put_data(skb, &data[datalen - 16], 2);
-                        memcpy(skb_put(skb, 2), &data[datalen-2], 2);
+                        skb_put_data(skb, &data[datalen - 2], 2);
-                        memcpy(skb_put(skb, 6), &data[datalen-14], 6);
+                        skb_put_data(skb, &data[datalen - 14], 6);
-                        memcpy(skb_put(skb, 6), &data[datalen-22], 6);
+                        skb_put_data(skb, &data[datalen - 22], 6);
-                        memcpy(skb_put(skb, 6), &data[datalen-8], 6);
+                        skb_put_data(skb, &data[datalen - 8], 6);
-                        memcpy(skb_put(skb, 2), &data[datalen-24], 2);
+                        skb_put_data(skb, &data[datalen - 24], 2);
-                        memcpy(skb_put(skb, len), data, len);
+                        skb_put_data(skb, data, len);
                        skb->protocol = eth_type_trans(skb, zd->dev);
                        zd->dev->stats.rx_packets++;
                        zd->dev->stats.rx_bytes += skb->len;
@@ -359,9 +359,9 @@ static void zd1201_usbrx(struct urb *urb)
                                frag->skb = skb;
                                frag->seq = seq & IEEE80211_SCTL_SEQ;
                                skb_reserve(skb, 2);
-                                memcpy(skb_put(skb, 12), &data[datalen-14], 12);
+                                skb_put_data(skb, &data[datalen - 14], 12);
-                                memcpy(skb_put(skb, 2), &data[6], 2);
+                                skb_put_data(skb, &data[6], 2);
-                                memcpy(skb_put(skb, len), data+8, len);
+                                skb_put_data(skb, data + 8, len);
                                hlist_add_head(&frag->fnode, &zd->fraglist);
                                goto resubmit;
                        }
@@ -385,9 +385,9 @@ static void zd1201_usbrx(struct urb *urb)
                        if (!skb)
                                goto resubmit;
                        skb_reserve(skb, 2);
-                        memcpy(skb_put(skb, 12), &data[datalen-14], 12);
+                        skb_put_data(skb, &data[datalen - 14], 12);
-                        memcpy(skb_put(skb, 2), &data[6], 2);
+                        skb_put_data(skb, &data[6], 2);
-                        memcpy(skb_put(skb, len), data+8, len);
+                        skb_put_data(skb, data + 8, len);
                }
                skb->protocol = eth_type_trans(skb, zd->dev);
                zd->dev->stats.rx_packets++;
diff --git a/drivers/net/wireless/zydas/zd1211rw/zd_mac.c b/drivers/net/wireless/zydas/zd1211rw/zd_mac.c
index fe6517a621b0..2d929d2edb00 100644
--- a/drivers/net/wireless/zydas/zd1211rw/zd_mac.c
+++ b/drivers/net/wireless/zydas/zd1211rw/zd_mac.c
@@ -1103,7 +1103,7 @@ int zd_mac_rx(struct ieee80211_hw *hw, const u8 *buffer, unsigned int length)
        }
        /* FIXME : could we avoid this big memcpy ? */
-        memcpy(skb_put(skb, length), buffer, length);
+        skb_put_data(skb, buffer, length);
        memcpy(IEEE80211_SKB_RXCB(skb), &stats, sizeof(stats));
        ieee80211_rx_irqsafe(hw, skb);
diff --git a/drivers/nfc/fdp/fdp.c b/drivers/nfc/fdp/fdp.c
index 7c1eaea3b685..badd8167ac73 100644
--- a/drivers/nfc/fdp/fdp.c
+++ b/drivers/nfc/fdp/fdp.c
@@ -228,8 +228,7 @@ static int fdp_nci_send_patch(struct nci_dev *ndev, u8 conn_id, u8 type)
                skb_reserve(skb, NCI_CTRL_HDR_SIZE);
-                memcpy(skb_put(skb, payload_size), fw->data + (fw->size - len),
+                skb_put_data(skb, fw->data + (fw->size - len), payload_size);
-                       payload_size);
                rc = nci_send_data(ndev, conn_id, skb);
diff --git a/drivers/nfc/fdp/i2c.c b/drivers/nfc/fdp/i2c.c
index 712936f5d2d6..0877e2283f35 100644
--- a/drivers/nfc/fdp/i2c.c
+++ b/drivers/nfc/fdp/i2c.c
@@ -186,7 +186,7 @@ static int fdp_nci_i2c_read(struct fdp_i2c_phy *phy, struct sk_buff **skb)
                                goto flush;
                        }
-                        memcpy(skb_put(*skb, len), tmp, len);
+                        skb_put_data(*skb, tmp, len);
                        fdp_nci_i2c_dump_skb(&client->dev, "fdp_rd", *skb);
                        fdp_nci_i2c_remove_len_lrc(*skb);
diff --git a/drivers/nfc/nfcmrvl/fw_dnld.c b/drivers/nfc/nfcmrvl/fw_dnld.c
index c38bdd6a5a82..7c710458568e 100644
--- a/drivers/nfc/nfcmrvl/fw_dnld.c
+++ b/drivers/nfc/nfcmrvl/fw_dnld.c
@@ -324,10 +324,9 @@ static int process_state_fw_dnld(struct nfcmrvl_private *priv,
                        out_skb = alloc_lc_skb(priv, priv->fw_dnld.chunk_len);
                        if (!out_skb)
                                return -ENOMEM;
-                        memcpy(skb_put(out_skb, priv->fw_dnld.chunk_len),
+                        skb_put_data(out_skb,
-                               ((uint8_t *)priv->fw_dnld.fw->data) +
+                                     ((uint8_t *)priv->fw_dnld.fw->data) + priv->fw_dnld.offset,
-                               priv->fw_dnld.offset,
+                                     priv->fw_dnld.chunk_len);
-                               priv->fw_dnld.chunk_len);
                        nci_send_frame(priv->ndev, out_skb);
                        priv->fw_dnld.substate = SUBSTATE_WAIT_DATA_CREDIT;
                }
diff --git a/drivers/nfc/nfcmrvl/i2c.c b/drivers/nfc/nfcmrvl/i2c.c
index 78b7aa835c81..ffec103702f1 100644
--- a/drivers/nfc/nfcmrvl/i2c.c
+++ b/drivers/nfc/nfcmrvl/i2c.c
@@ -60,7 +60,7 @@ static int nfcmrvl_i2c_read(struct nfcmrvl_i2c_drv_data *drv_data,
                return -ENOMEM;
        /* Copy NCI header into the SKB */
-        memcpy(skb_put(*skb, NCI_CTRL_HDR_SIZE), &nci_hdr, NCI_CTRL_HDR_SIZE);
+        skb_put_data(*skb, &nci_hdr, NCI_CTRL_HDR_SIZE);
        if (nci_hdr.plen) {
                /* Read the NCI payload */
diff --git a/drivers/nfc/nfcmrvl/usb.c b/drivers/nfc/nfcmrvl/usb.c
index 585a0f20835b..699aa9d16575 100644
--- a/drivers/nfc/nfcmrvl/usb.c
+++ b/drivers/nfc/nfcmrvl/usb.c
@@ -83,8 +83,8 @@ static void nfcmrvl_bulk_complete(struct urb *urb)
                if (!skb) {
                        nfc_err(&drv_data->udev->dev, "failed to alloc mem\n");
                } else {
-                        memcpy(skb_put(skb, urb->actual_length),
+                        skb_put_data(skb, urb->transfer_buffer,
-                               urb->transfer_buffer, urb->actual_length);
+                                     urb->actual_length);
                        if (nfcmrvl_nci_recv_frame(drv_data->priv, skb) < 0)
                                nfc_err(&drv_data->udev->dev,
                                        "corrupted Rx packet\n");
diff --git a/drivers/nfc/nxp-nci/firmware.c b/drivers/nfc/nxp-nci/firmware.c
index 553011f58339..99ffee1dfd1e 100644
--- a/drivers/nfc/nxp-nci/firmware.c
+++ b/drivers/nfc/nxp-nci/firmware.c
@@ -124,8 +124,7 @@ static int nxp_nci_fw_send_chunk(struct nxp_nci_info *info)
        header |= chunk_len & NXP_NCI_FW_FRAME_LEN_MASK;
        put_unaligned_be16(header, skb_put(skb, NXP_NCI_FW_HDR_LEN));
-        memcpy(skb_put(skb, chunk_len), fw_info->data + fw_info->written,
+        skb_put_data(skb, fw_info->data + fw_info->written, chunk_len);
-               chunk_len);
        crc = nxp_nci_fw_crc(skb->data, chunk_len + NXP_NCI_FW_HDR_LEN);
        put_unaligned_be16(crc, skb_put(skb, NXP_NCI_FW_CRC_LEN));
diff --git a/drivers/nfc/nxp-nci/i2c.c b/drivers/nfc/nxp-nci/i2c.c
index ff22d761183c..198585bbc771 100644
--- a/drivers/nfc/nxp-nci/i2c.c
+++ b/drivers/nfc/nxp-nci/i2c.c
@@ -135,7 +135,7 @@ static int nxp_nci_i2c_fw_read(struct nxp_nci_i2c_phy *phy,
                goto fw_read_exit;
        }
-        memcpy(skb_put(*skb, NXP_NCI_FW_HDR_LEN), &header, NXP_NCI_FW_HDR_LEN);
+        skb_put_data(*skb, &header, NXP_NCI_FW_HDR_LEN);
        r = i2c_master_recv(client, skb_put(*skb, frame_len), frame_len);
        if (r != frame_len) {
@@ -176,8 +176,7 @@ static int nxp_nci_i2c_nci_read(struct nxp_nci_i2c_phy *phy,
                goto nci_read_exit;
        }
-        memcpy(skb_put(*skb, NCI_CTRL_HDR_SIZE), (void *) &header,
+        skb_put_data(*skb, (void *)&header, NCI_CTRL_HDR_SIZE);
-               NCI_CTRL_HDR_SIZE);
        r = i2c_master_recv(client, skb_put(*skb, header.plen), header.plen);
        if (r != header.plen) {
diff --git a/drivers/nfc/pn533/pn533.c b/drivers/nfc/pn533/pn533.c
index 70c304504a29..9200bb308e42 100644
--- a/drivers/nfc/pn533/pn533.c
+++ b/drivers/nfc/pn533/pn533.c
@@ -1035,11 +1035,10 @@ static struct sk_buff *pn533_alloc_poll_tg_frame(struct pn533 *dev)
        *skb_put(skb, 1) = PN533_INIT_TARGET_DEP;
        /* MIFARE params */
-        memcpy(skb_put(skb, 6), mifare_params, 6);
+        skb_put_data(skb, mifare_params, 6);
        /* Felica params */
-        felica = skb_put(skb, 18);
+        felica = skb_put_data(skb, felica_params, 18);
-        memcpy(felica, felica_params, 18);
        get_random_bytes(felica + 2, 6);
        /* NFCID3 */
@@ -1049,8 +1048,7 @@ static struct sk_buff *pn533_alloc_poll_tg_frame(struct pn533 *dev)
        /* General bytes */
        *skb_put(skb, 1) = gbytes_len;
-        gb = skb_put(skb, gbytes_len);
+        gb = skb_put_data(skb, gbytes, gbytes_len);
-        memcpy(gb, gbytes, gbytes_len);
        /* Len Tk */
        *skb_put(skb, 1) = 0;
@@ -1384,15 +1382,14 @@ static int pn533_poll_dep(struct nfc_dev *nfc_dev)
        *next = 0;
        /* Copy passive data */
-        memcpy(skb_put(skb, PASSIVE_DATA_LEN), passive_data, PASSIVE_DATA_LEN);
+        skb_put_data(skb, passive_data, PASSIVE_DATA_LEN);
        *next |= 1;
        /* Copy NFCID3 (which is NFCID2 from SENSF_RES) */
-        memcpy(skb_put(skb, NFC_NFCID3_MAXSIZE), nfcid3,
+        skb_put_data(skb, nfcid3, NFC_NFCID3_MAXSIZE);
-               NFC_NFCID3_MAXSIZE);
        *next |= 2;
-        memcpy(skb_put(skb, dev->gb_len), dev->gb, dev->gb_len);
+        skb_put_data(skb, dev->gb, dev->gb_len);
        *next |= 4; /* We have some Gi */
        rc = pn533_send_cmd_async(dev, PN533_CMD_IN_JUMP_FOR_DEP, skb,
@@ -1472,7 +1469,7 @@ static struct sk_buff *pn533_alloc_poll_in_frame(struct pn533 *dev,
        if (!skb)
                return NULL;
-        memcpy(skb_put(skb, mod->len), &mod->data, mod->len);
+        skb_put_data(skb, &mod->data, mod->len);
        return skb;
 }
@@ -1858,7 +1855,7 @@ static int pn533_dep_link_up(struct nfc_dev *nfc_dev, struct nfc_target *target,
        *next = 0;
        /* Copy passive data */
-        memcpy(skb_put(skb, PASSIVE_DATA_LEN), passive_data, PASSIVE_DATA_LEN);
+        skb_put_data(skb, passive_data, PASSIVE_DATA_LEN);
        *next |= 1;
        /* Copy NFCID3 (which is NFCID2 from SENSF_RES) */
@@ -1866,12 +1863,11 @@ static int pn533_dep_link_up(struct nfc_dev *nfc_dev, struct nfc_target *target,
                memcpy(skb_put(skb, NFC_NFCID3_MAXSIZE), target->nfcid2,
                       target->nfcid2_len);
        else
-                memcpy(skb_put(skb, NFC_NFCID3_MAXSIZE), nfcid3,
+                skb_put_data(skb, nfcid3, NFC_NFCID3_MAXSIZE);
-                       NFC_NFCID3_MAXSIZE);
        *next |= 2;
        if (gb != NULL && gb_len > 0) {
-                memcpy(skb_put(skb, gb_len), gb, gb_len);
+                skb_put_data(skb, gb, gb_len);
                *next |= 4; /* We have some Gi */
        } else {
                *next = 0;
@@ -2100,7 +2096,7 @@ static int pn533_fill_fragment_skbs(struct pn533 *dev, struct sk_buff *skb)
                                *skb_push(frag, sizeof(u8)) =  1; /* TG */
                }
-                memcpy(skb_put(frag, frag_size), skb->data, frag_size);
+                skb_put_data(frag, skb->data, frag_size);
                /* Reduce the size of incoming buffer */
                skb_pull(skb, frag_size);
@@ -2375,7 +2371,7 @@ static int pn533_set_configuration(struct pn533 *dev, u8 cfgitem, u8 *cfgdata,
                return -ENOMEM;
        *skb_put(skb, sizeof(cfgitem)) = cfgitem;
-        memcpy(skb_put(skb, cfgdata_len), cfgdata, cfgdata_len);
+        skb_put_data(skb, cfgdata, cfgdata_len);
        resp = pn533_send_cmd_sync(dev, PN533_CMD_RF_CONFIGURATION, skb);
        if (IS_ERR(resp))
diff --git a/drivers/nfc/pn533/usb.c b/drivers/nfc/pn533/usb.c
index 8ed203ea21ea..e153e8b64bb8 100644
--- a/drivers/nfc/pn533/usb.c
+++ b/drivers/nfc/pn533/usb.c
@@ -75,8 +75,8 @@ static void pn533_recv_response(struct urb *urb)
                if (!skb) {
                        nfc_err(&phy->udev->dev, "failed to alloc memory\n");
                } else {
-                        memcpy(skb_put(skb, urb->actual_length),
+                        skb_put_data(skb, urb->transfer_buffer,
-                               urb->transfer_buffer, urb->actual_length);
+                                     urb->actual_length);
                }
        }
diff --git a/drivers/nfc/port100.c b/drivers/nfc/port100.c
index 19be93e177fe..e1260da73d45 100644
--- a/drivers/nfc/port100.c
+++ b/drivers/nfc/port100.c
@@ -1089,9 +1089,8 @@ static int port100_in_set_rf(struct nfc_digital_dev *ddev, u8 rf)
        if (!skb)
                return -ENOMEM;
-        memcpy(skb_put(skb, sizeof(struct port100_in_rf_setting)),
+        skb_put_data(skb, &in_rf_settings[rf],
-               &in_rf_settings[rf],
+                     sizeof(struct port100_in_rf_setting));
-               sizeof(struct port100_in_rf_setting));
        resp = port100_send_cmd_sync(dev, PORT100_CMD_IN_SET_RF, skb);
@@ -1133,7 +1132,7 @@ static int port100_in_set_framing(struct nfc_digital_dev *ddev, int param)
        if (!skb)
                return -ENOMEM;
-        memcpy(skb_put(skb, size), protocols, size);
+        skb_put_data(skb, protocols, size);
        resp = port100_send_cmd_sync(dev, PORT100_CMD_IN_SET_PROTOCOL, skb);
@@ -1247,9 +1246,8 @@ static int port100_tg_set_rf(struct nfc_digital_dev *ddev, u8 rf)
        if (!skb)
                return -ENOMEM;
-        memcpy(skb_put(skb, sizeof(struct port100_tg_rf_setting)),
+        skb_put_data(skb, &tg_rf_settings[rf],
-               &tg_rf_settings[rf],
+                     sizeof(struct port100_tg_rf_setting));
-               sizeof(struct port100_tg_rf_setting));
        resp = port100_send_cmd_sync(dev, PORT100_CMD_TG_SET_RF, skb);
@@ -1291,7 +1289,7 @@ static int port100_tg_set_framing(struct nfc_digital_dev *ddev, int param)
        if (!skb)
                return -ENOMEM;
-        memcpy(skb_put(skb, size), protocols, size);
+        skb_put_data(skb, protocols, size);
        resp = port100_send_cmd_sync(dev, PORT100_CMD_TG_SET_PROTOCOL, skb);
diff --git a/drivers/nfc/s3fwrn5/firmware.c b/drivers/nfc/s3fwrn5/firmware.c
index 5f97da1947e3..38548bd970cd 100644
--- a/drivers/nfc/s3fwrn5/firmware.c
+++ b/drivers/nfc/s3fwrn5/firmware.c
@@ -76,9 +76,9 @@ static int s3fwrn5_fw_prep_msg(struct s3fwrn5_fw_info *fw_info,
        if (!skb)
                return -ENOMEM;
-        memcpy(skb_put(skb, S3FWRN5_FW_HDR_SIZE), &hdr, S3FWRN5_FW_HDR_SIZE);
+        skb_put_data(skb, &hdr, S3FWRN5_FW_HDR_SIZE);
        if (len)
-                memcpy(skb_put(skb, len), data, len);
+                skb_put_data(skb, data, len);
        *msg = skb;
diff --git a/drivers/nfc/s3fwrn5/i2c.c b/drivers/nfc/s3fwrn5/i2c.c
index 3ed0adf6479b..3f09d7fd2285 100644
--- a/drivers/nfc/s3fwrn5/i2c.c
+++ b/drivers/nfc/s3fwrn5/i2c.c
@@ -157,7 +157,7 @@ static int s3fwrn5_i2c_read(struct s3fwrn5_i2c_phy *phy)
        if (!skb)
                return -ENOMEM;
-        memcpy(skb_put(skb, hdr_size), hdr, hdr_size);
+        skb_put_data(skb, hdr, hdr_size);
        if (data_len == 0)
                goto out;
diff --git a/drivers/nfc/st21nfca/dep.c b/drivers/nfc/st21nfca/dep.c
index 798a32bbac5d..ada7b114b6c1 100644
--- a/drivers/nfc/st21nfca/dep.c
+++ b/drivers/nfc/st21nfca/dep.c
@@ -564,7 +564,7 @@ int st21nfca_im_send_atr_req(struct nfc_hci_dev *hdev, u8 *gb, size_t gb_len)
        atr_req->ppi = ST21NFCA_LR_BITS_PAYLOAD_SIZE_254B;
        if (gb_len) {
                atr_req->ppi |= ST21NFCA_GB_BIT;
-                memcpy(skb_put(skb, gb_len), gb, gb_len);
+                skb_put_data(skb, gb, gb_len);
        }
        atr_req->length = sizeof(struct st21nfca_atr_req) + hdev->gb_len;
diff --git a/drivers/nfc/st21nfca/i2c.c b/drivers/nfc/st21nfca/i2c.c
index 02a920ca07c8..94d0b913b627 100644
--- a/drivers/nfc/st21nfca/i2c.c
+++ b/drivers/nfc/st21nfca/i2c.c
@@ -407,7 +407,7 @@ static int st21nfca_hci_i2c_read(struct st21nfca_i2c_phy *phy,
                        phy->current_read_len = 0;
                }
-                memcpy(skb_put(skb, len), buf, len);
+                skb_put_data(skb, buf, len);
                if (skb->data[skb->len - 1] == ST21NFCA_SOF_EOF) {
                        phy->current_read_len = 0;
diff --git a/drivers/rpmsg/rpmsg_char.c b/drivers/rpmsg/rpmsg_char.c
index 0ca2ccc09ca6..2576284f99a7 100644
--- a/drivers/rpmsg/rpmsg_char.c
+++ b/drivers/rpmsg/rpmsg_char.c
@@ -116,7 +116,7 @@ static int rpmsg_ept_cb(struct rpmsg_device *rpdev, void *buf, int len,
        if (!skb)
                return -ENOMEM;
-        memcpy(skb_put(skb, len), buf, len);
+        skb_put_data(skb, buf, len);
        spin_lock(&eptdev->queue_lock);
        skb_queue_tail(&eptdev->queue, skb);
diff --git a/drivers/s390/net/ctcm_fsms.c b/drivers/s390/net/ctcm_fsms.c
index 730d9619400e..e9847ce3860d 100644
--- a/drivers/s390/net/ctcm_fsms.c
+++ b/drivers/s390/net/ctcm_fsms.c
@@ -1279,7 +1279,7 @@ static void ctcmpc_chx_txdone(fsm_instance *fi, int event, void *arg)
                       __func__, data_space);
        while ((skb = skb_dequeue(&ch->collect_queue))) {
-                memcpy(skb_put(ch->trans_skb, skb->len), skb->data, skb->len);
+                skb_put_data(ch->trans_skb, skb->data, skb->len);
                p_header = (struct pdu *)
                        (skb_tail_pointer(ch->trans_skb) - skb->len);
                p_header->pdu_flag = 0x00;
@@ -1431,13 +1431,12 @@ static void ctcmpc_chx_rx(fsm_instance *fi, int event, void *arg)
                        break;
                case MPCG_STATE_FLOWC:
                case MPCG_STATE_READY:
-                        memcpy(skb_put(new_skb, block_len),
+                        skb_put_data(new_skb, skb->data, block_len);
-                                               skb->data, block_len);
                        skb_queue_tail(&ch->io_queue, new_skb);
                        tasklet_schedule(&ch->ch_tasklet);
                        break;
                default:
-                        memcpy(skb_put(new_skb, len), skb->data, len);
+                        skb_put_data(new_skb, skb->data, len);
                        skb_queue_tail(&ch->io_queue, new_skb);
                        tasklet_hi_schedule(&ch->ch_tasklet);
                        break;
diff --git a/drivers/s390/net/ctcm_main.c b/drivers/s390/net/ctcm_main.c
index 198842ce6876..99121352c57b 100644
--- a/drivers/s390/net/ctcm_main.c
+++ b/drivers/s390/net/ctcm_main.c
@@ -522,7 +522,7 @@ static int ctcm_transmit_skb(struct channel *ch, struct sk_buff *skb)
                        ctcm_clear_busy(ch->netdev);
                        return -ENOMEM;
                } else {
-                        memcpy(skb_put(nskb, skb->len), skb->data, skb->len);
+                        skb_put_data(nskb, skb->data, skb->len);
                        atomic_inc(&nskb->users);
                        atomic_dec(&skb->users);
                        dev_kfree_skb_irq(skb);
@@ -638,7 +638,7 @@ static void ctcmpc_send_sweep_req(struct channel *rch)
        header->th.th_seq_num   = 0x00;
        header->sw.th_last_seq  = ch->th_seq_num;
-        memcpy(skb_put(sweep_skb, TH_SWEEP_LENGTH), header, TH_SWEEP_LENGTH);
+        skb_put_data(sweep_skb, header, TH_SWEEP_LENGTH);
        kfree(header);
@@ -728,7 +728,7 @@ static int ctcmpc_transmit_skb(struct channel *ch, struct sk_buff *skb)
                if (!nskb) {
                        goto nomem_exit;
                } else {
-                        memcpy(skb_put(nskb, skb->len), skb->data, skb->len);
+                        skb_put_data(nskb, skb->data, skb->len);
                        atomic_inc(&nskb->users);
                        atomic_dec(&skb->users);
                        dev_kfree_skb_irq(skb);
@@ -809,7 +809,7 @@ static int ctcmpc_transmit_skb(struct channel *ch, struct sk_buff *skb)
                skb_reset_tail_pointer(ch->trans_skb);
                ch->trans_skb->len = 0;
                ch->ccw[1].count = skb->len;
-                memcpy(skb_put(ch->trans_skb, skb->len), skb->data, skb->len);
+                skb_put_data(ch->trans_skb, skb->data, skb->len);
                atomic_dec(&skb->users);
                dev_kfree_skb_irq(skb);
                ccw_idx = 0;
@@ -960,7 +960,7 @@ static int ctcmpc_tx(struct sk_buff *skb, struct net_device *dev)
                }
                newskb->protocol = skb->protocol;
                skb_reserve(newskb, TH_HEADER_LENGTH + PDU_HEADER_LENGTH);
-                memcpy(skb_put(newskb, skb->len), skb->data, skb->len);
+                skb_put_data(newskb, skb->data, skb->len);
                dev_kfree_skb_any(skb);
                skb = newskb;
        }
diff --git a/drivers/s390/net/ctcm_mpc.c b/drivers/s390/net/ctcm_mpc.c
index c103fc7efe9f..f8be39634f03 100644
--- a/drivers/s390/net/ctcm_mpc.c
+++ b/drivers/s390/net/ctcm_mpc.c
@@ -667,7 +667,7 @@ static void ctcmpc_send_sweep_resp(struct channel *rch)
        header->th.th_seq_num   = 0x00;
        header->sw.th_last_seq  = ch->th_seq_num;
-        memcpy(skb_put(sweep_skb, TH_SWEEP_LENGTH), header, TH_SWEEP_LENGTH);
+        skb_put_data(sweep_skb, header, TH_SWEEP_LENGTH);
        kfree(header);
@@ -974,9 +974,8 @@ void mpc_channel_action(struct channel *ch, int direction, int action)
                skb_reset_tail_pointer(ch->xid_skb);
                ch->xid_skb->len = 0;
-                memcpy(skb_put(ch->xid_skb, grp->xid_skb->len),
+                skb_put_data(ch->xid_skb, grp->xid_skb->data,
-                                grp->xid_skb->data,
+                             grp->xid_skb->len);
-                                grp->xid_skb->len);
                ch->xid->xid2_dlc_type =
                        ((CHANNEL_DIRECTION(ch->flags) == CTCM_READ)
@@ -1149,7 +1148,7 @@ static void ctcmpc_unpack_skb(struct channel *ch, struct sk_buff *pskb)
                                fsm_event(grp->fsm, MPCG_EVENT_INOP, dev);
                                                goto done;
                        }
-                        memcpy(skb_put(skb, new_len), pskb->data, new_len);
+                        skb_put_data(skb, pskb->data, new_len);
                        skb_reset_mac_header(skb);
                        skb->dev = pskb->dev;
@@ -1297,16 +1296,15 @@ struct mpc_group *ctcmpc_init_mpc_group(struct ctcm_priv *priv)
        /*  base xid for all channels in group  */
        grp->xid_skb_data = grp->xid_skb->data;
        grp->xid_th = (struct th_header *)grp->xid_skb->data;
-        memcpy(skb_put(grp->xid_skb, TH_HEADER_LENGTH),
+        skb_put_data(grp->xid_skb, &thnorm, TH_HEADER_LENGTH);
-                        &thnorm, TH_HEADER_LENGTH);
        grp->xid = (struct xid2 *)skb_tail_pointer(grp->xid_skb);
-        memcpy(skb_put(grp->xid_skb, XID2_LENGTH), &init_xid, XID2_LENGTH);
+        skb_put_data(grp->xid_skb, &init_xid, XID2_LENGTH);
        grp->xid->xid2_adj_id = jiffies | 0xfff00000;
        grp->xid->xid2_sender_id = jiffies;
        grp->xid_id = skb_tail_pointer(grp->xid_skb);
-        memcpy(skb_put(grp->xid_skb, 4), "VTAM", 4);
+        skb_put_data(grp->xid_skb, "VTAM", 4);
        grp->rcvd_xid_skb =
                __dev_alloc_skb(MPC_BUFSIZE_DEFAULT, GFP_ATOMIC|GFP_DMA);
@@ -1318,8 +1316,7 @@ struct mpc_group *ctcmpc_init_mpc_group(struct ctcm_priv *priv)
        }
        grp->rcvd_xid_data = grp->rcvd_xid_skb->data;
        grp->rcvd_xid_th = (struct th_header *)grp->rcvd_xid_skb->data;
-        memcpy(skb_put(grp->rcvd_xid_skb, TH_HEADER_LENGTH),
+        skb_put_data(grp->rcvd_xid_skb, &thnorm, TH_HEADER_LENGTH);
-                        &thnorm, TH_HEADER_LENGTH);
        grp->saved_xid2 = NULL;
        priv->xid = grp->xid;
        priv->mpcg = grp;
@@ -1410,8 +1407,7 @@ static void mpc_action_go_inop(fsm_instance *fi, int event, void *arg)
        skb_reset_tail_pointer(grp->rcvd_xid_skb);
        grp->rcvd_xid_skb->len = 0;
        grp->rcvd_xid_th = (struct th_header *)grp->rcvd_xid_skb->data;
-        memcpy(skb_put(grp->rcvd_xid_skb, TH_HEADER_LENGTH), &thnorm,
+        skb_put_data(grp->rcvd_xid_skb, &thnorm, TH_HEADER_LENGTH);
-               TH_HEADER_LENGTH);
        if (grp->send_qllc_disc == 1) {
                grp->send_qllc_disc = 0;
@@ -1590,8 +1586,7 @@ static int mpc_validate_xid(struct mpcg_info *mpcginfo)
                grp->saved_xid2 =
                        (struct xid2 *)skb_tail_pointer(grp->rcvd_xid_skb);
-                memcpy(skb_put(grp->rcvd_xid_skb,
+                skb_put_data(grp->rcvd_xid_skb, xid, XID2_LENGTH);
-                                        XID2_LENGTH), xid, XID2_LENGTH);
                grp->rcvd_xid_skb->data = grp->rcvd_xid_data;
                skb_reset_tail_pointer(grp->rcvd_xid_skb);
@@ -1908,17 +1903,15 @@ static void mpc_action_doxid7(fsm_instance *fsm, int event, void *arg)
                                if (fsm_getstate(ch->fsm) == CH_XID7_PENDING1) {
                                        fsm_newstate(ch->fsm, CH_XID7_PENDING2);
                                        ch->ccw[8].cmd_code = CCW_CMD_SENSE_CMD;
-                                        memcpy(skb_put(ch->xid_skb,
+                                        skb_put_data(ch->xid_skb, &thdummy,
-                                                        TH_HEADER_LENGTH),
+                                                     TH_HEADER_LENGTH);
-                                               &thdummy, TH_HEADER_LENGTH);
                                        send = 1;
                                }
                        } else if (fsm_getstate(ch->fsm) < CH_XID7_PENDING2) {
                                        fsm_newstate(ch->fsm, CH_XID7_PENDING2);
                                        ch->ccw[8].cmd_code = CCW_CMD_WRITE_CTL;
-                                        memcpy(skb_put(ch->xid_skb,
+                                        skb_put_data(ch->xid_skb, &thnorm,
-                                                       TH_HEADER_LENGTH),
+                                                     TH_HEADER_LENGTH);
-                                               &thnorm, TH_HEADER_LENGTH);
                                        send = 1;
                        }
                } else {
@@ -1926,17 +1919,16 @@ static void mpc_action_doxid7(fsm_instance *fsm, int event, void *arg)
                        if (grp->roll == YSIDE) {
                                if (fsm_getstate(ch->fsm) < CH_XID7_PENDING4) {
                                        fsm_newstate(ch->fsm, CH_XID7_PENDING4);
-                                        memcpy(skb_put(ch->xid_skb,
+                                        skb_put_data(ch->xid_skb, &thnorm,
-                                                       TH_HEADER_LENGTH),
+                                                     TH_HEADER_LENGTH);
-                                               &thnorm, TH_HEADER_LENGTH);
                                        ch->ccw[8].cmd_code = CCW_CMD_WRITE_CTL;
                                        send = 1;
                                }
                        } else if (fsm_getstate(ch->fsm) == CH_XID7_PENDING3) {
                                fsm_newstate(ch->fsm, CH_XID7_PENDING4);
                                ch->ccw[8].cmd_code = CCW_CMD_SENSE_CMD;
-                                memcpy(skb_put(ch->xid_skb, TH_HEADER_LENGTH),
+                                skb_put_data(ch->xid_skb, &thdummy,
-                                                &thdummy, TH_HEADER_LENGTH);
+                                             TH_HEADER_LENGTH);
                                send = 1;
                        }
                }
@@ -2122,7 +2114,7 @@ static int mpc_send_qllc_discontact(struct net_device *dev)
                        return -ENOMEM;
                }
-                memcpy(skb_put(skb, new_len), qllcptr, new_len);
+                skb_put_data(skb, qllcptr, new_len);
                kfree(qllcptr);
                if (skb_headroom(skb) < 4) {
diff --git a/drivers/s390/net/lcs.c b/drivers/s390/net/lcs.c
index 211b31d9f157..337bacb43d68 100644
--- a/drivers/s390/net/lcs.c
+++ b/drivers/s390/net/lcs.c
@@ -1796,7 +1796,7 @@ lcs_get_skb(struct lcs_card *card, char *skb_data, unsigned int skb_len)
                card->stats.rx_dropped++;
                return;
        }
-        memcpy(skb_put(skb, skb_len), skb_data, skb_len);
+        skb_put_data(skb, skb_data, skb_len);
        skb->protocol = card->lan_type_trans(skb, card->dev);
        card->stats.rx_bytes += skb_len;
        card->stats.rx_packets++;
diff --git a/drivers/s390/net/netiucv.c b/drivers/s390/net/netiucv.c
index fa732bd86729..7db427c0a6a4 100644
--- a/drivers/s390/net/netiucv.c
+++ b/drivers/s390/net/netiucv.c
@@ -759,8 +759,7 @@ static void conn_action_txdone(fsm_instance *fi, int event, void *arg)
        spin_lock_irqsave(&conn->collect_lock, saveflags);
        while ((skb = skb_dequeue(&conn->collect_queue))) {
                header.next = conn->tx_buff->len + skb->len + NETIUCV_HDRLEN;
-                memcpy(skb_put(conn->tx_buff, NETIUCV_HDRLEN), &header,
+                skb_put_data(conn->tx_buff, &header, NETIUCV_HDRLEN);
-                       NETIUCV_HDRLEN);
                skb_copy_from_linear_data(skb,
                                          skb_put(conn->tx_buff, skb->len),
                                          skb->len);
@@ -780,7 +779,7 @@ static void conn_action_txdone(fsm_instance *fi, int event, void *arg)
        }
        header.next = 0;
-        memcpy(skb_put(conn->tx_buff, NETIUCV_HDRLEN), &header, NETIUCV_HDRLEN);
+        skb_put_data(conn->tx_buff, &header, NETIUCV_HDRLEN);
        conn->prof.send_stamp = jiffies;
        txmsg.class = 0;
        txmsg.tag = 0;
@@ -1201,8 +1200,7 @@ static int netiucv_transmit_skb(struct iucv_connection *conn,
                                return rc;
                        } else {
                                skb_reserve(nskb, NETIUCV_HDRLEN);
-                                memcpy(skb_put(nskb, skb->len),
+                                skb_put_data(nskb, skb->data, skb->len);
-                                       skb->data, skb->len);
                        }
                        copied = 1;
                }
@@ -1212,7 +1210,7 @@ static int netiucv_transmit_skb(struct iucv_connection *conn,
                header.next = nskb->len + NETIUCV_HDRLEN;
                memcpy(skb_push(nskb, NETIUCV_HDRLEN), &header, NETIUCV_HDRLEN);
                header.next = 0;
-                memcpy(skb_put(nskb, NETIUCV_HDRLEN), &header,  NETIUCV_HDRLEN);
+                skb_put_data(nskb, &header, NETIUCV_HDRLEN);
                fsm_newstate(conn->fsm, CONN_STATE_TX);
                conn->prof.send_stamp = jiffies;
diff --git a/drivers/s390/net/qeth_core_main.c b/drivers/s390/net/qeth_core_main.c
index 1fb92e870040..08338f27c82c 100644
--- a/drivers/s390/net/qeth_core_main.c
+++ b/drivers/s390/net/qeth_core_main.c
@@ -5147,12 +5147,11 @@ static inline int qeth_create_skb_frag(struct qeth_qdio_buffer *qethbuffer,
                skb_reserve(*pskb, ETH_HLEN);
                if (data_len <= QETH_RX_PULL_LEN) {
-                        memcpy(skb_put(*pskb, data_len), element->addr + offset,
+                        skb_put_data(*pskb, element->addr + offset, data_len);
-                                data_len);
                } else {
                        get_page(page);
-                        memcpy(skb_put(*pskb, QETH_RX_PULL_LEN),
+                        skb_put_data(*pskb, element->addr + offset,
-                               element->addr + offset, QETH_RX_PULL_LEN);
+                                     QETH_RX_PULL_LEN);
                        skb_fill_page_desc(*pskb, *pfrag, page,
                                offset + QETH_RX_PULL_LEN,
                                data_len - QETH_RX_PULL_LEN);
@@ -5248,8 +5247,7 @@ struct sk_buff *qeth_core_get_next_skb(struct qeth_card *card,
                                    &skb, offset, &frag, data_len))
                                        goto no_mem;
                        } else {
-                                memcpy(skb_put(skb, data_len), data_ptr,
+                                skb_put_data(skb, data_ptr, data_len);
-                                        data_len);
                        }
                }
                skb_len -= data_len;
diff --git a/drivers/staging/gdm724x/gdm_lte.c b/drivers/staging/gdm724x/gdm_lte.c
index cf809987f79f..9ab6ce231f11 100644
--- a/drivers/staging/gdm724x/gdm_lte.c
+++ b/drivers/staging/gdm724x/gdm_lte.c
@@ -161,12 +161,9 @@ static int gdm_lte_emulate_arp(struct sk_buff *skb_in, u32 nic_type)
                return -ENOMEM;
        skb_reserve(skb_out, NET_IP_ALIGN);
-        memcpy(skb_put(skb_out, mac_header_len), mac_header_data,
+        skb_put_data(skb_out, mac_header_data, mac_header_len);
-               mac_header_len);
+        skb_put_data(skb_out, arp_out, sizeof(struct arphdr));
-        memcpy(skb_put(skb_out, sizeof(struct arphdr)), arp_out,
+        skb_put_data(skb_out, arp_data_out, sizeof(struct arpdata));
-               sizeof(struct arphdr));
-        memcpy(skb_put(skb_out, sizeof(struct arpdata)), arp_data_out,
-               sizeof(struct arpdata));
        skb_out->protocol = ((struct ethhdr *)mac_header_data)->h_proto;
        skb_out->dev = skb_in->dev;
@@ -322,14 +319,10 @@ static int gdm_lte_emulate_ndp(struct sk_buff *skb_in, u32 nic_type)
                return -ENOMEM;
        skb_reserve(skb_out, NET_IP_ALIGN);
-        memcpy(skb_put(skb_out, mac_header_len), mac_header_data,
+        skb_put_data(skb_out, mac_header_data, mac_header_len);
-               mac_header_len);
+        skb_put_data(skb_out, &ipv6_out, sizeof(struct ipv6hdr));
-        memcpy(skb_put(skb_out, sizeof(struct ipv6hdr)), &ipv6_out,
+        skb_put_data(skb_out, &icmp6_out, sizeof(struct icmp6hdr));
-               sizeof(struct ipv6hdr));
+        skb_put_data(skb_out, &na, sizeof(struct neighbour_advertisement));
-        memcpy(skb_put(skb_out, sizeof(struct icmp6hdr)), &icmp6_out,
-               sizeof(struct icmp6hdr));
-        memcpy(skb_put(skb_out, sizeof(struct neighbour_advertisement)), &na,
-               sizeof(struct neighbour_advertisement));
        skb_out->protocol = ((struct ethhdr *)mac_header_data)->h_proto;
        skb_out->dev = skb_in->dev;
@@ -669,8 +662,8 @@ static void gdm_lte_netif_rx(struct net_device *dev, char *buf,
                return;
        skb_reserve(skb, NET_IP_ALIGN);
-        memcpy(skb_put(skb, mac_header_len), mac_header_data, mac_header_len);
+        skb_put_data(skb, mac_header_data, mac_header_len);
-        memcpy(skb_put(skb, len), buf, len);
+        skb_put_data(skb, buf, len);
        skb->protocol = ((struct ethhdr *)mac_header_data)->h_proto;
        skb->dev = dev;
diff --git a/drivers/staging/ks7010/ks_hostif.c b/drivers/staging/ks7010/ks_hostif.c
index 49e95426ac30..da801d3e0585 100644
--- a/drivers/staging/ks7010/ks_hostif.c
+++ b/drivers/staging/ks7010/ks_hostif.c
@@ -466,12 +466,12 @@ void hostif_data_indication(struct ks_wlan_private *priv)
                DPRINTK(4, "SNAP, rx_ind_size = %d\n", rx_ind_size);
                size = ETH_ALEN * 2;
-                memcpy(skb_put(skb, size), priv->rxp, size);
+                skb_put_data(skb, priv->rxp, size);
                /* (SNAP+UI..) skip */
                size = rx_ind_size - (ETH_ALEN * 2);
-                memcpy(skb_put(skb, size), &eth_hdr->h_proto, size);
+                skb_put_data(skb, &eth_hdr->h_proto, size);
                aa1x_hdr = (struct ieee802_1x_hdr *)(priv->rxp + ETHER_HDR_SIZE);
                break;
@@ -484,14 +484,13 @@ void hostif_data_indication(struct ks_wlan_private *priv)
                }
                DPRINTK(3, "NETBEUI/NetBIOS rx_ind_size=%d\n", rx_ind_size);
-                memcpy(skb_put(skb, 12), priv->rxp, 12);        /* 8802/FDDI MAC copy */
+                skb_put_data(skb, priv->rxp, 12);       /* 8802/FDDI MAC copy */
                temp[0] = (((rx_ind_size - 12) >> 8) & 0xff);   /* NETBEUI size add */
                temp[1] = ((rx_ind_size - 12) & 0xff);
-                memcpy(skb_put(skb, 2), temp, 2);
+                skb_put_data(skb, temp, 2);
-                memcpy(skb_put(skb, rx_ind_size - 14), priv->rxp + 12,
+                skb_put_data(skb, priv->rxp + 12, rx_ind_size - 14);    /* copy after Type */
-                       rx_ind_size - 14);       /* copy after Type */
                aa1x_hdr = (struct ieee802_1x_hdr *)(priv->rxp + 14);
                break;
diff --git a/drivers/staging/most/aim-network/networking.c b/drivers/staging/most/aim-network/networking.c
index ce1764cba5f0..995674f25172 100644
--- a/drivers/staging/most/aim-network/networking.c
+++ b/drivers/staging/most/aim-network/networking.c
@@ -486,11 +486,11 @@ static int aim_rx_data(struct mbo *mbo)
                ether_addr_copy(skb_put(skb, ETH_ALEN), dev->dev_addr);
                /* src */
-                memcpy(skb_put(skb, 4), &zero, 4);
+                skb_put_data(skb, &zero, 4);
-                memcpy(skb_put(skb, 2), buf + 5, 2);
+                skb_put_data(skb, buf + 5, 2);
                /* eth type */
-                memcpy(skb_put(skb, 2), buf + 10, 2);
+                skb_put_data(skb, buf + 10, 2);
                buf += MDP_HDR_LEN;
                len -= MDP_HDR_LEN;
@@ -499,7 +499,7 @@ static int aim_rx_data(struct mbo *mbo)
                len -= MEP_HDR_LEN;
        }
-        memcpy(skb_put(skb, len), buf, len);
+        skb_put_data(skb, buf, len);
        skb->protocol = eth_type_trans(skb, dev);
        skb_len = skb->len;
        if (netif_rx(skb) == NET_RX_SUCCESS) {
diff --git a/drivers/staging/octeon/ethernet-rx.c b/drivers/staging/octeon/ethernet-rx.c
index 65a285631994..72baedefa0f1 100644
--- a/drivers/staging/octeon/ethernet-rx.c
+++ b/drivers/staging/octeon/ethernet-rx.c
@@ -287,8 +287,7 @@ static int cvm_oct_poll(struct oct_rx_group *rx_group, int budget)
                                        else
                                                ptr += 6;
                                }
-                                memcpy(skb_put(skb, work->word1.len), ptr,
+                                skb_put_data(skb, ptr, work->word1.len);
-                                       work->word1.len);
                                /* No packet buffers to free */
                        } else {
                                int segments = work->word2.s.bufs;
@@ -323,10 +322,9 @@ static int cvm_oct_poll(struct oct_rx_group *rx_group, int budget)
                                        if (segment_size > len)
                                                segment_size = len;
                                        /* Copy the data into the packet */
-                                        memcpy(skb_put(skb, segment_size),
+                                        skb_put_data(skb,
-                                               cvmx_phys_to_ptr(
+                                                     cvmx_phys_to_ptr(segment_ptr.s.addr),
-                                               segment_ptr.s.addr),
+                                                     segment_size);
-                                               segment_size);
                                        len -= segment_size;
                                        segment_ptr = next_ptr;
                                }
diff --git a/drivers/staging/rtl8188eu/core/rtw_recv.c b/drivers/staging/rtl8188eu/core/rtw_recv.c
index c6c4404e717b..14173cf6e1e7 100644
--- a/drivers/staging/rtl8188eu/core/rtw_recv.c
+++ b/drivers/staging/rtl8188eu/core/rtw_recv.c
@@ -1544,8 +1544,8 @@ static int amsdu_to_msdu(struct adapter *padapter, struct recv_frame *prframe)
                sub_skb = dev_alloc_skb(nSubframe_Length + 12);
                if (sub_skb) {
                        skb_reserve(sub_skb, 12);
-                        data_ptr = (u8 *)skb_put(sub_skb, nSubframe_Length);
+                        data_ptr = skb_put_data(sub_skb, pdata,
-                        memcpy(data_ptr, pdata, nSubframe_Length);
+                                                nSubframe_Length);
                } else {
                        sub_skb = skb_clone(prframe->pkt, GFP_ATOMIC);
                        if (sub_skb) {
diff --git a/drivers/staging/rtl8188eu/os_dep/mon.c b/drivers/staging/rtl8188eu/os_dep/mon.c
index 859d0d6051cd..225c23fc69dc 100644
--- a/drivers/staging/rtl8188eu/os_dep/mon.c
+++ b/drivers/staging/rtl8188eu/os_dep/mon.c
@@ -53,7 +53,7 @@ static void mon_recv_decrypted(struct net_device *dev, const u8 *data,
        skb = netdev_alloc_skb(dev, data_len);
        if (!skb)
                return;
-        memcpy(skb_put(skb, data_len), data, data_len);
+        skb_put_data(skb, data, data_len);
        /*
         * Frame data is not encrypted. Strip off protection so
diff --git a/drivers/staging/rtl8192e/rtllib_rx.c b/drivers/staging/rtl8192e/rtllib_rx.c
index 43a77745e6fb..bae98ca0a9b6 100644
--- a/drivers/staging/rtl8192e/rtllib_rx.c
+++ b/drivers/staging/rtl8192e/rtllib_rx.c
@@ -817,8 +817,7 @@ static u8 parse_subframe(struct rtllib_device *ieee, struct sk_buff *skb,
                if (!sub_skb)
                        return 0;
                skb_reserve(sub_skb, 12);
-                data_ptr = (u8 *)skb_put(sub_skb, skb->len);
+                data_ptr = skb_put_data(sub_skb, skb->data, skb->len);
-                memcpy(data_ptr, skb->data, skb->len);
                sub_skb->dev = ieee->dev;
                rxb->subframes[0] = sub_skb;
@@ -870,8 +869,7 @@ static u8 parse_subframe(struct rtllib_device *ieee, struct sk_buff *skb,
                if (!sub_skb)
                        return 0;
                skb_reserve(sub_skb, 12);
-                data_ptr = (u8 *)skb_put(sub_skb, nSubframe_Length);
+                data_ptr = skb_put_data(sub_skb, skb->data, nSubframe_Length);
-                memcpy(data_ptr, skb->data, nSubframe_Length);
                sub_skb->dev = ieee->dev;
                rxb->subframes[rxb->nr_subframes++] = sub_skb;
@@ -1141,13 +1139,12 @@ static int rtllib_rx_decrypt(struct rtllib_device *ieee, struct sk_buff *skb,
                        /* copy first fragment (including full headers) into
                         * beginning of the fragment cache skb
                         */
-                        memcpy(skb_put(frag_skb, flen), skb->data, flen);
+                        skb_put_data(frag_skb, skb->data, flen);
                } else {
                        /* append frame payload to the end of the fragment
                         * cache skb
                         */
-                        memcpy(skb_put(frag_skb, flen), skb->data + hdrlen,
+                        skb_put_data(frag_skb, skb->data + hdrlen, flen);
-                               flen);
                }
                dev_kfree_skb_any(skb);
                skb = NULL;
diff --git a/drivers/staging/rtl8192e/rtllib_softmac.c b/drivers/staging/rtl8192e/rtllib_softmac.c
index eeda17d6409b..60d07d0bb4eb 100644
--- a/drivers/staging/rtl8192e/rtllib_softmac.c
+++ b/drivers/staging/rtl8192e/rtllib_softmac.c
@@ -1272,8 +1272,7 @@ rtllib_association_req(struct rtllib_network *beacon,
        hdr->info_element[0].id = MFIE_TYPE_SSID;
        hdr->info_element[0].len = beacon->ssid_len;
-        tag = skb_put(skb, beacon->ssid_len);
+        tag = skb_put_data(skb, beacon->ssid, beacon->ssid_len);
-        memcpy(tag, beacon->ssid, beacon->ssid_len);
        tag = skb_put(skb, rate_len);
@@ -1349,8 +1348,7 @@ rtllib_association_req(struct rtllib_network *beacon,
        }
        if (wpa_ie_len) {
-                tag = skb_put(skb, ieee->wpa_ie_len);
+                tag = skb_put_data(skb, ieee->wpa_ie, ieee->wpa_ie_len);
-                memcpy(tag, ieee->wpa_ie, ieee->wpa_ie_len);
                if (PMKCacheIdx >= 0) {
                        tag = skb_put(skb, 18);
@@ -1366,8 +1364,7 @@ rtllib_association_req(struct rtllib_network *beacon,
        }
        if (wps_ie_len && ieee->wps_ie) {
-                tag = skb_put(skb, wps_ie_len);
+                tag = skb_put_data(skb, ieee->wps_ie, wps_ie_len);
-                memcpy(tag, ieee->wps_ie, wps_ie_len);
        }
        tag = skb_put(skb, turbo_info_len);
diff --git a/drivers/staging/rtl8192e/rtllib_tx.c b/drivers/staging/rtl8192e/rtllib_tx.c
index 78a3ad5b231f..fc88d47dea43 100644
--- a/drivers/staging/rtl8192e/rtllib_tx.c
+++ b/drivers/staging/rtl8192e/rtllib_tx.c
@@ -624,8 +624,7 @@ static int rtllib_xmit_inter(struct sk_buff *skb, struct net_device *dev)
                        txb->encrypted = 0;
                        txb->payload_size = cpu_to_le16(skb->len);
-                        memcpy(skb_put(txb->fragments[0], skb->len), skb->data,
+                        skb_put_data(txb->fragments[0], skb->data, skb->len);
-                               skb->len);
                        goto success;
                }
@@ -818,9 +817,7 @@ static int rtllib_xmit_inter(struct sk_buff *skb, struct net_device *dev)
                        } else {
                                tcb_desc->bHwSec = 0;
                        }
-                        frag_hdr = (struct rtllib_hdr_3addrqos *)
+                        frag_hdr = skb_put_data(skb_frag, &header, hdr_len);
-                                   skb_put(skb_frag, hdr_len);
-                        memcpy(frag_hdr, &header, hdr_len);
                        /* If this is not the last fragment, then add the
                         * MOREFRAGS bit to the frame control
@@ -852,7 +849,7 @@ static int rtllib_xmit_inter(struct sk_buff *skb, struct net_device *dev)
                                bytes -= SNAP_SIZE + sizeof(u16);
                        }
-                        memcpy(skb_put(skb_frag, bytes), skb->data, bytes);
+                        skb_put_data(skb_frag, skb->data, bytes);
                        /* Advance the SKB... */
                        skb_pull(skb, bytes);
@@ -895,8 +892,7 @@ static int rtllib_xmit_inter(struct sk_buff *skb, struct net_device *dev)
                txb->encrypted = 0;
                txb->payload_size = cpu_to_le16(skb->len);
-                memcpy(skb_put(txb->fragments[0], skb->len), skb->data,
+                skb_put_data(txb->fragments[0], skb->data, skb->len);
-                       skb->len);
        }
 success:
diff --git a/drivers/staging/rtl8192u/ieee80211/ieee80211_rx.c b/drivers/staging/rtl8192u/ieee80211/ieee80211_rx.c
index 7a31510f0524..c0e2f711cb4e 100644
--- a/drivers/staging/rtl8192u/ieee80211/ieee80211_rx.c
+++ b/drivers/staging/rtl8192u/ieee80211/ieee80211_rx.c
@@ -848,8 +848,8 @@ static u8 parse_subframe(struct sk_buff *skb,
                        if (!sub_skb)
                                return 0;
                        skb_reserve(sub_skb, 12);
-                        data_ptr = (u8 *)skb_put(sub_skb, nSubframe_Length);
+                        data_ptr = skb_put_data(sub_skb, skb->data,
-                        memcpy(data_ptr, skb->data, nSubframe_Length);
+                                                nSubframe_Length);
 #endif
                        rxb->subframes[rxb->nr_subframes++] = sub_skb;
                        if (rxb->nr_subframes >= MAX_SUBFRAME_COUNT) {
@@ -1180,12 +1180,11 @@ int ieee80211_rx(struct ieee80211_device *ieee, struct sk_buff *skb,
                if (frag == 0) {
                        /* copy first fragment (including full headers) into
                         * beginning of the fragment cache skb */
-                        memcpy(skb_put(frag_skb, flen), skb->data, flen);
+                        skb_put_data(frag_skb, skb->data, flen);
                } else {
                        /* append frame payload to the end of the fragment
                         * cache skb */
-                        memcpy(skb_put(frag_skb, flen), skb->data + hdrlen,
+                        skb_put_data(frag_skb, skb->data + hdrlen, flen);
-                               flen);
                }
                dev_kfree_skb_any(skb);
                skb = NULL;
diff --git a/drivers/staging/rtl8192u/ieee80211/ieee80211_softmac.c b/drivers/staging/rtl8192u/ieee80211/ieee80211_softmac.c
index 14aea26804f4..903a1d0269df 100644
--- a/drivers/staging/rtl8192u/ieee80211/ieee80211_softmac.c
+++ b/drivers/staging/rtl8192u/ieee80211/ieee80211_softmac.c
@@ -1115,8 +1115,7 @@ ieee80211_association_req(struct ieee80211_network *beacon,
        hdr->info_element[0].id = MFIE_TYPE_SSID;
        hdr->info_element[0].len = beacon->ssid_len;
-        tag = skb_put(skb, beacon->ssid_len);
+        tag = skb_put_data(skb, beacon->ssid, beacon->ssid_len);
-        memcpy(tag, beacon->ssid, beacon->ssid_len);
        tag = skb_put(skb, rate_len);
diff --git a/drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c b/drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c
index bdb96a45a9eb..f58971a4a2e3 100644
--- a/drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c
+++ b/drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c
@@ -794,8 +794,7 @@ int ieee80211_xmit(struct sk_buff *skb, struct net_device *dev)
                        {
                                tcb_desc->bHwSec = 0;
                        }
-                        frag_hdr = (struct rtl_80211_hdr_3addrqos *)skb_put(skb_frag, hdr_len);
+                        frag_hdr = skb_put_data(skb_frag, &header, hdr_len);
-                        memcpy(frag_hdr, &header, hdr_len);
                        /* If this is not the last fragment, then add the MOREFRAGS
                         * bit to the frame control
@@ -826,7 +825,7 @@ int ieee80211_xmit(struct sk_buff *skb, struct net_device *dev)
                                bytes -= SNAP_SIZE + sizeof(u16);
                        }
-                        memcpy(skb_put(skb_frag, bytes), skb->data, bytes);
+                        skb_put_data(skb_frag, skb->data, bytes);
                        /* Advance the SKB... */
                        skb_pull(skb, bytes);
@@ -869,7 +868,7 @@ int ieee80211_xmit(struct sk_buff *skb, struct net_device *dev)
                txb->encrypted = 0;
                txb->payload_size = __cpu_to_le16(skb->len);
-                memcpy(skb_put(txb->fragments[0],skb->len), skb->data, skb->len);
+                skb_put_data(txb->fragments[0], skb->data, skb->len);
        }
 success:
diff --git a/drivers/staging/rtl8192u/r819xU_cmdpkt.c b/drivers/staging/rtl8192u/r819xU_cmdpkt.c
index bb6d8bd6c7ac..c3cf01c842a3 100644
--- a/drivers/staging/rtl8192u/r819xU_cmdpkt.c
+++ b/drivers/staging/rtl8192u/r819xU_cmdpkt.c
@@ -45,8 +45,7 @@ rt_status SendTxCommandPacket(struct net_device *dev, void *pData, u32 DataLen)
        tcb_desc->bCmdOrInit = DESC_PACKET_TYPE_NORMAL;
        tcb_desc->bLastIniPkt = 0;
        skb_reserve(skb, USB_HWDESC_HEADER_LEN);
-        ptr_buf = skb_put(skb, DataLen);
+        ptr_buf = skb_put_data(skb, pData, DataLen);
-        memcpy(ptr_buf, pData, DataLen);
        tcb_desc->txbuf_size = (u16)DataLen;
        if (!priv->ieee80211->check_nic_enough_desc(dev, tcb_desc->queue_index) ||
diff --git a/drivers/staging/rtl8712/rtl8712_recv.c b/drivers/staging/rtl8712/rtl8712_recv.c
index 266ffefd55ed..f96c558b3c6a 100644
--- a/drivers/staging/rtl8712/rtl8712_recv.c
+++ b/drivers/staging/rtl8712/rtl8712_recv.c
@@ -372,8 +372,7 @@ static int amsdu_to_msdu(struct _adapter *padapter, union recv_frame *prframe)
                if (!sub_skb)
                        break;
                skb_reserve(sub_skb, 12);
-                data_ptr = (u8 *)skb_put(sub_skb, nSubframe_Length);
+                data_ptr = skb_put_data(sub_skb, pdata, nSubframe_Length);
-                memcpy(data_ptr, pdata, nSubframe_Length);
                subframes[nr_subframes++] = sub_skb;
                if (nr_subframes >= MAX_SUBFRAME_COUNT) {
                        netdev_warn(padapter->pnetdev, "r8712u: ParseSubframe(): Too many Subframes! Packets dropped!\n");
diff --git a/drivers/staging/rtl8723bs/os_dep/recv_linux.c b/drivers/staging/rtl8723bs/os_dep/recv_linux.c
index e731ab4e2bd7..1a6443dc3ff0 100644
--- a/drivers/staging/rtl8723bs/os_dep/recv_linux.c
+++ b/drivers/staging/rtl8723bs/os_dep/recv_linux.c
@@ -82,8 +82,8 @@ _pkt *rtw_os_alloc_msdu_pkt(union recv_frame *prframe, u16 nSubframe_Length, u8
        if (sub_skb)
        {
                skb_reserve(sub_skb, 12);
-                data_ptr = (u8 *)skb_put(sub_skb, nSubframe_Length);
+                data_ptr = skb_put_data(sub_skb, (pdata + ETH_HLEN),
-                memcpy(data_ptr, (pdata + ETH_HLEN), nSubframe_Length);
+                                        nSubframe_Length);
        }
        else
        {
diff --git a/drivers/staging/wilc1000/linux_mon.c b/drivers/staging/wilc1000/linux_mon.c
index c9782d452b07..dbc266a37974 100644
--- a/drivers/staging/wilc1000/linux_mon.c
+++ b/drivers/staging/wilc1000/linux_mon.c
@@ -72,7 +72,7 @@ void WILC_WFI_monitor_rx(u8 *buff, u32 size)
                if (!skb)
                        return;
-                memcpy(skb_put(skb, size), buff, size);
+                skb_put_data(skb, buff, size);
                cb_hdr = (struct wilc_wfi_radiotap_cb_hdr *)skb_push(skb, sizeof(*cb_hdr));
                memset(cb_hdr, 0, sizeof(struct wilc_wfi_radiotap_cb_hdr));
@@ -100,7 +100,7 @@ void WILC_WFI_monitor_rx(u8 *buff, u32 size)
                if (!skb)
                        return;
-                memcpy(skb_put(skb, size), buff, size);
+                skb_put_data(skb, buff, size);
                hdr = (struct wilc_wfi_radiotap_hdr *)skb_push(skb, sizeof(*hdr));
                memset(hdr, 0, sizeof(struct wilc_wfi_radiotap_hdr));
                hdr->hdr.it_version = 0; /* PKTHDR_RADIOTAP_VERSION; */
@@ -200,7 +200,7 @@ static netdev_tx_t WILC_WFI_mon_xmit(struct sk_buff *skb,
                if (!skb2)
                        return -ENOMEM;
-                memcpy(skb_put(skb2, skb->len), skb->data, skb->len);
+                skb_put_data(skb2, skb->data, skb->len);
                cb_hdr = (struct wilc_wfi_radiotap_cb_hdr *)skb_push(skb2, sizeof(*cb_hdr));
                memset(cb_hdr, 0, sizeof(struct wilc_wfi_radiotap_cb_hdr));
diff --git a/drivers/staging/wilc1000/linux_wlan.c b/drivers/staging/wilc1000/linux_wlan.c
index d6d803416be2..f36598a89ce0 100644
--- a/drivers/staging/wilc1000/linux_wlan.c
+++ b/drivers/staging/wilc1000/linux_wlan.c
@@ -1160,7 +1160,7 @@ void wilc_frmw_to_linux(struct wilc *wilc, u8 *buff, u32 size, u32 pkt_offset)
                skb->dev = wilc_netdev;
-                memcpy(skb_put(skb, frame_len), buff_to_send, frame_len);
+                skb_put_data(skb, buff_to_send, frame_len);
                skb->protocol = eth_type_trans(skb, wilc_netdev);
                vif->netstats.rx_packets++;
diff --git a/drivers/staging/wlan-ng/hfa384x_usb.c b/drivers/staging/wlan-ng/hfa384x_usb.c
index a812e55ba1b0..1de67f209f2c 100644
--- a/drivers/staging/wlan-ng/hfa384x_usb.c
+++ b/drivers/staging/wlan-ng/hfa384x_usb.c
@@ -3530,13 +3530,11 @@ static void hfa384x_int_rxmonitor(struct wlandevice *wlandev,
        /* Copy the 802.11 header to the skb
         * (ctl frames may be less than a full header)
         */
-        datap = skb_put(skb, hdrlen);
+        datap = skb_put_data(skb, &rxdesc->frame_control, hdrlen);
-        memcpy(datap, &rxdesc->frame_control, hdrlen);
        /* If any, copy the data from the card to the skb */
        if (datalen > 0) {
-                datap = skb_put(skb, datalen);
+                datap = skb_put_data(skb, rxfrm->data, datalen);
-                memcpy(datap, rxfrm->data, datalen);
                /* check for unencrypted stuff if WEP bit set. */
                if (*(datap - hdrlen + 1) & 0x40)       /* wep set */
diff --git a/drivers/tty/ipwireless/network.c b/drivers/tty/ipwireless/network.c
index c0dfb642383b..c2f9a3263b37 100644
--- a/drivers/tty/ipwireless/network.c
+++ b/drivers/tty/ipwireless/network.c
@@ -355,7 +355,7 @@ static struct sk_buff *ipw_packet_received_skb(unsigned char *data,
        if (skb == NULL)
                return NULL;
        skb_reserve(skb, 2);
-        memcpy(skb_put(skb, length), data, length);
+        skb_put_data(skb, data, length);
        return skb;
 }
diff --git a/drivers/tty/n_gsm.c b/drivers/tty/n_gsm.c
index 2667a205a5ab..da830f833392 100644
--- a/drivers/tty/n_gsm.c
+++ b/drivers/tty/n_gsm.c
@@ -2688,7 +2688,7 @@ static void gsm_mux_rx_netchar(struct gsm_dlci *dlci,
                return;
        }
        skb_reserve(skb, NET_IP_ALIGN);
-        memcpy(skb_put(skb, size), in_buf, size);
+        skb_put_data(skb, in_buf, size);
        skb->dev = net;
        skb->protocol = htons(ETH_P_IP);
diff --git a/drivers/tty/synclink.c b/drivers/tty/synclink.c
index a2c308f7d637..3fafc5a1b2e0 100644
--- a/drivers/tty/synclink.c
+++ b/drivers/tty/synclink.c
@@ -7960,7 +7960,7 @@ static void hdlcdev_rx(struct mgsl_struct *info, char *buf, int size)
                return;
        }
-        memcpy(skb_put(skb, size), buf, size);
+        skb_put_data(skb, buf, size);
        skb->protocol = hdlc_type_trans(skb, dev);
diff --git a/drivers/tty/synclink_gt.c b/drivers/tty/synclink_gt.c
index 31885f20fc15..7e947ecf15f1 100644
--- a/drivers/tty/synclink_gt.c
+++ b/drivers/tty/synclink_gt.c
@@ -1755,7 +1755,7 @@ static void hdlcdev_rx(struct slgt_info *info, char *buf, int size)
                return;
        }
-        memcpy(skb_put(skb, size), buf, size);
+        skb_put_data(skb, buf, size);
        skb->protocol = hdlc_type_trans(skb, dev);
diff --git a/drivers/tty/synclinkmp.c b/drivers/tty/synclinkmp.c
index 51e8846cd68f..9b4fb0251c1a 100644
--- a/drivers/tty/synclinkmp.c
+++ b/drivers/tty/synclinkmp.c
@@ -1874,7 +1874,7 @@ static void hdlcdev_rx(SLMP_INFO *info, char *buf, int size)
                return;
        }
-        memcpy(skb_put(skb, size), buf, size);
+        skb_put_data(skb, buf, size);
        skb->protocol = hdlc_type_trans(skb, dev);
diff --git a/drivers/usb/gadget/function/f_ncm.c b/drivers/usb/gadget/function/f_ncm.c
index 2882c6d3ae66..630616aaa861 100644
--- a/drivers/usb/gadget/function/f_ncm.c
+++ b/drivers/usb/gadget/function/f_ncm.c
@@ -1007,8 +1007,8 @@ static struct sk_buff *package_for_tx(struct f_ncm *ncm)
        ntb_iter = skb_put_zero(skb2, ndp_pad);
        /* Copy NTB across. */
-        ntb_iter = (void *) skb_put(skb2, ncm->skb_tx_ndp->len);
+        ntb_iter = skb_put_data(skb2, ncm->skb_tx_ndp->data,
-        memcpy(ntb_iter, ncm->skb_tx_ndp->data, ncm->skb_tx_ndp->len);
+                                ncm->skb_tx_ndp->len);
        dev_consume_skb_any(ncm->skb_tx_ndp);
        ncm->skb_tx_ndp = NULL;
@@ -1129,8 +1129,7 @@ static struct sk_buff *ncm_wrap_ntb(struct gether *port,
                /* Add the new data to the skb */
                ntb_data = skb_put_zero(ncm->skb_tx_data, dgram_pad);
-                ntb_data = (void *) skb_put(ncm->skb_tx_data, skb->len);
+                ntb_data = skb_put_data(ncm->skb_tx_data, skb->data, skb->len);
-                memcpy(ntb_data, skb->data, skb->len);
                dev_consume_skb_any(skb);
                skb = NULL;
@@ -1313,8 +1312,8 @@ static int ncm_unwrap_ntb(struct gether *port,
                                                         dg_len - crc_len);
                        if (skb2 == NULL)
                                goto err;
-                        memcpy(skb_put(skb2, dg_len - crc_len),
+                        skb_put_data(skb2, skb->data + index,
-                               skb->data + index, dg_len - crc_len);
+                                     dg_len - crc_len);
                        skb_queue_tail(list, skb2);
diff --git a/drivers/usb/gadget/function/f_phonet.c b/drivers/usb/gadget/function/f_phonet.c
index 6a1ce6a55158..9c4c58e4a1a2 100644
--- a/drivers/usb/gadget/function/f_phonet.c
+++ b/drivers/usb/gadget/function/f_phonet.c
@@ -336,7 +336,7 @@ static void pn_rx_complete(struct usb_ep *ep, struct usb_request *req)
                        skb->protocol = htons(ETH_P_PHONET);
                        skb_reset_mac_header(skb);
                        /* Can't use pskb_pull() on page in IRQ */
-                        memcpy(skb_put(skb, 1), page_address(page), 1);
+                        skb_put_data(skb, page_address(page), 1);
                }
                skb_add_rx_frag(skb, skb_shinfo(skb)->nr_frags, page,
diff --git a/include/linux/mISDNif.h b/include/linux/mISDNif.h
index ac02c54520e9..a7330eb3ec64 100644
--- a/include/linux/mISDNif.h
+++ b/include/linux/mISDNif.h
@@ -554,7 +554,7 @@ _alloc_mISDN_skb(u_int prim, u_int id, u_int len, void *dp, gfp_t gfp_mask)
        if (!skb)
                return NULL;
        if (len)
-                memcpy(skb_put(skb, len), dp, len);
+                skb_put_data(skb, dp, len);
        hh = mISDN_HEAD_P(skb);
        hh->prim = prim;
        hh->id = id;
diff --git a/include/linux/skbuff.h b/include/linux/skbuff.h
index 01ea64d0783a..5af5385a0e72 100644
--- a/include/linux/skbuff.h
+++ b/include/linux/skbuff.h
@@ -1913,6 +1913,16 @@ static inline void *skb_put_zero(struct sk_buff *skb, unsigned int len)
        return tmp;
 }
+static inline void *skb_put_data(struct sk_buff *skb, const void *data,
+                                 unsigned int len)
+{
+        void *tmp = skb_put(skb, len);
+        memcpy(tmp, data, len);
+        return tmp;
+}
 unsigned char *skb_push(struct sk_buff *skb, unsigned int len);
 static inline unsigned char *__skb_push(struct sk_buff *skb, unsigned int len)
 {
diff --git a/lib/nlattr.c b/lib/nlattr.c
index d09d9746fc5d..ab15a6c095d3 100644
--- a/lib/nlattr.c
+++ b/lib/nlattr.c
@@ -616,7 +616,7 @@ int nla_append(struct sk_buff *skb, int attrlen, const void *data)
        if (unlikely(skb_tailroom(skb) < NLA_ALIGN(attrlen)))
                return -EMSGSIZE;
-        memcpy(skb_put(skb, attrlen), data, attrlen);
+        skb_put_data(skb, data, attrlen);
        return 0;
 }
 EXPORT_SYMBOL(nla_append);
diff --git a/net/batman-adv/bat_iv_ogm.c b/net/batman-adv/bat_iv_ogm.c
index fa8d6b475c06..a3501173e200 100644
--- a/net/batman-adv/bat_iv_ogm.c
+++ b/net/batman-adv/bat_iv_ogm.c
@@ -732,8 +732,8 @@ static void batadv_iv_ogm_aggregate(struct batadv_forw_packet *forw_packet_aggr,
        unsigned char *skb_buff;
        unsigned long new_direct_link_flag;
-        skb_buff = skb_put(forw_packet_aggr->skb, packet_len);
+        skb_buff = skb_put_data(forw_packet_aggr->skb, packet_buff,
-        memcpy(skb_buff, packet_buff, packet_len);
+                                packet_len);
        forw_packet_aggr->packet_len += packet_len;
        forw_packet_aggr->num_packets++;
diff --git a/net/batman-adv/bat_v_ogm.c b/net/batman-adv/bat_v_ogm.c
index 03a35c9f456d..1e3dc374bfde 100644
--- a/net/batman-adv/bat_v_ogm.c
+++ b/net/batman-adv/bat_v_ogm.c
@@ -166,8 +166,7 @@ static void batadv_v_ogm_send(struct work_struct *work)
                goto reschedule;
        skb_reserve(skb, ETH_HLEN);
-        pkt_buff = skb_put(skb, ogm_buff_len);
+        pkt_buff = skb_put_data(skb, ogm_buff, ogm_buff_len);
-        memcpy(pkt_buff, ogm_buff, ogm_buff_len);
        ogm_packet = (struct batadv_ogm2_packet *)skb->data;
        ogm_packet->seqno = htonl(atomic_read(&bat_priv->bat_v.ogm_seqno));
@@ -382,8 +381,7 @@ static void batadv_v_ogm_forward(struct batadv_priv *bat_priv,
                goto out;
        skb_reserve(skb, ETH_HLEN);
-        skb_buff = skb_put(skb, packet_len);
+        skb_buff = skb_put_data(skb, ogm_received, packet_len);
-        memcpy(skb_buff, ogm_received, packet_len);
        /* apply forward penalty */
        ogm_forward = (struct batadv_ogm2_packet *)skb_buff;
diff --git a/net/batman-adv/fragmentation.c b/net/batman-adv/fragmentation.c
index 8f964beaac28..a98cf1104a30 100644
--- a/net/batman-adv/fragmentation.c
+++ b/net/batman-adv/fragmentation.c
@@ -296,8 +296,7 @@ batadv_frag_merge_packets(struct hlist_head *chain)
        /* Copy the payload of the each fragment into the last skb */
        hlist_for_each_entry(entry, chain, list) {
                size = entry->skb->len - hdr_size;
-                memcpy(skb_put(skb_out, size), entry->skb->data + hdr_size,
+                skb_put_data(skb_out, entry->skb->data + hdr_size, size);
-                       size);
        }
 free:
diff --git a/net/bluetooth/cmtp/core.c b/net/bluetooth/cmtp/core.c
index 9e59b6654126..f4c64ef01c24 100644
--- a/net/bluetooth/cmtp/core.c
+++ b/net/bluetooth/cmtp/core.c
@@ -122,7 +122,7 @@ static inline void cmtp_add_msgpart(struct cmtp_session *session, int id, const
        if (skb && (skb->len > 0))
                skb_copy_from_linear_data(skb, skb_put(nskb, skb->len), skb->len);
-        memcpy(skb_put(nskb, count), buf, count);
+        skb_put_data(nskb, buf, count);
        session->reassembly[id] = nskb;
diff --git a/net/bluetooth/hci_core.c b/net/bluetooth/hci_core.c
index 93806b959039..d860e3cc23cf 100644
--- a/net/bluetooth/hci_core.c
+++ b/net/bluetooth/hci_core.c
@@ -3266,7 +3266,7 @@ int hci_reset_dev(struct hci_dev *hdev)
                return -ENOMEM;
        hci_skb_pkt_type(skb) = HCI_EVENT_PKT;
-        memcpy(skb_put(skb, 3), hw_err, 3);
+        skb_put_data(skb, hw_err, 3);
        /* Send Hardware Error to upper stack */
        return hci_recv_frame(hdev, skb);
diff --git a/net/bluetooth/hci_request.c b/net/bluetooth/hci_request.c
index b5faff458d8b..4e4105a932bd 100644
--- a/net/bluetooth/hci_request.c
+++ b/net/bluetooth/hci_request.c
@@ -304,7 +304,7 @@ struct sk_buff *hci_prepare_cmd(struct hci_dev *hdev, u16 opcode, u32 plen,
        hdr->plen   = plen;
        if (plen)
-                memcpy(skb_put(skb, plen), param, plen);
+                skb_put_data(skb, param, plen);
        BT_DBG("skb len %d", skb->len);
diff --git a/net/bluetooth/hci_sock.c b/net/bluetooth/hci_sock.c
index 638bf0e1a2e3..083e87f26a0f 100644
--- a/net/bluetooth/hci_sock.c
+++ b/net/bluetooth/hci_sock.c
@@ -379,7 +379,7 @@ void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
                put_unaligned_le16(event, skb_put(skb, 2));
                if (data)
-                        memcpy(skb_put(skb, data_len), data, data_len);
+                        skb_put_data(skb, data, data_len);
                skb->tstamp = tstamp;
@@ -515,10 +515,10 @@ static struct sk_buff *create_monitor_ctrl_open(struct sock *sk)
        put_unaligned_le32(hci_pi(sk)->cookie, skb_put(skb, 4));
        put_unaligned_le16(format, skb_put(skb, 2));
-        memcpy(skb_put(skb, sizeof(ver)), ver, sizeof(ver));
+        skb_put_data(skb, ver, sizeof(ver));
        put_unaligned_le32(flags, skb_put(skb, 4));
        *skb_put(skb, 1) = TASK_COMM_LEN;
-        memcpy(skb_put(skb, TASK_COMM_LEN), hci_pi(sk)->comm, TASK_COMM_LEN);
+        skb_put_data(skb, hci_pi(sk)->comm, TASK_COMM_LEN);
        __net_timestamp(skb);
@@ -586,7 +586,7 @@ static struct sk_buff *create_monitor_ctrl_command(struct sock *sk, u16 index,
        put_unaligned_le16(opcode, skb_put(skb, 2));
        if (buf)
-                memcpy(skb_put(skb, len), buf, len);
+                skb_put_data(skb, buf, len);
        __net_timestamp(skb);
diff --git a/net/bluetooth/hidp/core.c b/net/bluetooth/hidp/core.c
index 0bec4588c3c8..9e83713262e8 100644
--- a/net/bluetooth/hidp/core.c
+++ b/net/bluetooth/hidp/core.c
@@ -114,7 +114,7 @@ static int hidp_send_message(struct hidp_session *session, struct socket *sock,
        *skb_put(skb, 1) = hdr;
        if (data && size > 0)
-                memcpy(skb_put(skb, size), data, size);
+                skb_put_data(skb, data, size);
        skb_queue_tail(transmit, skb);
        wake_up_interruptible(sk_sleep(sk));
diff --git a/net/bluetooth/l2cap_core.c b/net/bluetooth/l2cap_core.c
index f88ac99528ce..fe6a5529bdf5 100644
--- a/net/bluetooth/l2cap_core.c
+++ b/net/bluetooth/l2cap_core.c
@@ -2923,7 +2923,7 @@ static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, u8 code,
        if (dlen) {
                count -= L2CAP_HDR_SIZE + L2CAP_CMD_HDR_SIZE;
-                memcpy(skb_put(skb, count), data, count);
+                skb_put_data(skb, data, count);
                data += count;
        }
@@ -2938,7 +2938,7 @@ static struct sk_buff *l2cap_build_cmd(struct l2cap_conn *conn, u8 code,
                if (!*frag)
                        goto fail;
-                memcpy(skb_put(*frag, count), data, count);
+                skb_put_data(*frag, data, count);
                len  -= count;
                data += count;
diff --git a/net/bluetooth/mgmt_util.c b/net/bluetooth/mgmt_util.c
index c933bd08c1fe..11d0ca64402b 100644
--- a/net/bluetooth/mgmt_util.c
+++ b/net/bluetooth/mgmt_util.c
@@ -44,7 +44,7 @@ static struct sk_buff *create_monitor_ctrl_event(__le16 index, u32 cookie,
        put_unaligned_le16(opcode, skb_put(skb, 2));
        if (buf)
-                memcpy(skb_put(skb, len), buf, len);
+                skb_put_data(skb, buf, len);
        __net_timestamp(skb);
@@ -75,7 +75,7 @@ int mgmt_send_event(u16 event, struct hci_dev *hdev, unsigned short channel,
        hdr->len = cpu_to_le16(data_len);
        if (data)
-                memcpy(skb_put(skb, data_len), data, data_len);
+                skb_put_data(skb, data, data_len);
        /* Time stamp */
        __net_timestamp(skb);
diff --git a/net/bluetooth/rfcomm/tty.c b/net/bluetooth/rfcomm/tty.c
index 2f2cb5e27cdd..5f3074cb6b4d 100644
--- a/net/bluetooth/rfcomm/tty.c
+++ b/net/bluetooth/rfcomm/tty.c
@@ -798,7 +798,7 @@ static int rfcomm_tty_write(struct tty_struct *tty, const unsigned char *buf, in
                skb_reserve(skb, RFCOMM_SKB_HEAD_RESERVE);
-                memcpy(skb_put(skb, size), buf + sent, size);
+                skb_put_data(skb, buf + sent, size);
                rfcomm_dlc_send_noerror(dlc, skb);
diff --git a/net/bridge/netfilter/nft_reject_bridge.c b/net/bridge/netfilter/nft_reject_bridge.c
index bb6ed8e97580..15bf0c5322ab 100644
--- a/net/bridge/netfilter/nft_reject_bridge.c
+++ b/net/bridge/netfilter/nft_reject_bridge.c
@@ -151,8 +151,7 @@ static void nft_reject_br_send_v4_unreach(struct net *net,
        icmph->type     = ICMP_DEST_UNREACH;
        icmph->code     = code;
-        payload = skb_put(nskb, len);
+        payload = skb_put_data(nskb, skb_network_header(oldskb), len);
-        memcpy(payload, skb_network_header(oldskb), len);
        csum = csum_partial((void *)icmph, len + sizeof(struct icmphdr), 0);
        icmph->checksum = csum_fold(csum);
@@ -278,8 +277,7 @@ static void nft_reject_br_send_v6_unreach(struct net *net,
        icmp6h->icmp6_type = ICMPV6_DEST_UNREACH;
        icmp6h->icmp6_code = code;
-        payload = skb_put(nskb, len);
+        payload = skb_put_data(nskb, skb_network_header(oldskb), len);
-        memcpy(payload, skb_network_header(oldskb), len);
        nip6h->payload_len = htons(nskb->len - sizeof(struct ipv6hdr));
        icmp6h->icmp6_cksum =
diff --git a/net/can/bcm.c b/net/can/bcm.c
index 65432633a250..47a8748d953a 100644
--- a/net/can/bcm.c
+++ b/net/can/bcm.c
@@ -282,7 +282,7 @@ static void bcm_can_tx(struct bcm_op *op)
        can_skb_prv(skb)->ifindex = dev->ifindex;
        can_skb_prv(skb)->skbcnt = 0;
-        memcpy(skb_put(skb, op->cfsiz), cf, op->cfsiz);
+        skb_put_data(skb, cf, op->cfsiz);
        /* send with loopback */
        skb->dev = dev;
@@ -318,13 +318,13 @@ static void bcm_send_to_user(struct bcm_op *op, struct bcm_msg_head *head,
        if (!skb)
                return;
-        memcpy(skb_put(skb, sizeof(*head)), head, sizeof(*head));
+        skb_put_data(skb, head, sizeof(*head));
        if (head->nframes) {
                /* CAN frames starting here */
                firstframe = (struct canfd_frame *)skb_tail_pointer(skb);
-                memcpy(skb_put(skb, datalen), frames, datalen);
+                skb_put_data(skb, frames, datalen);
                /*
                 * the BCM uses the flags-element of the canfd_frame
diff --git a/net/decnet/dn_nsp_out.c b/net/decnet/dn_nsp_out.c
index 849805e7af52..b8a558715395 100644
--- a/net/decnet/dn_nsp_out.c
+++ b/net/decnet/dn_nsp_out.c
@@ -533,7 +533,7 @@ void dn_send_conn_conf(struct sock *sk, gfp_t gfp)
        *skb_put(skb,1) = len;
        if (len > 0)
-                memcpy(skb_put(skb, len), scp->conndata_out.opt_data, len);
+                skb_put_data(skb, scp->conndata_out.opt_data, len);
        dn_nsp_send(skb);
@@ -691,22 +691,22 @@ void dn_nsp_send_conninit(struct sock *sk, unsigned char msgflg)
        aux = scp->accessdata.acc_userl;
        *skb_put(skb, 1) = aux;
        if (aux > 0)
-                memcpy(skb_put(skb, aux), scp->accessdata.acc_user, aux);
+                skb_put_data(skb, scp->accessdata.acc_user, aux);
        aux = scp->accessdata.acc_passl;
        *skb_put(skb, 1) = aux;
        if (aux > 0)
-                memcpy(skb_put(skb, aux), scp->accessdata.acc_pass, aux);
+                skb_put_data(skb, scp->accessdata.acc_pass, aux);
        aux = scp->accessdata.acc_accl;
        *skb_put(skb, 1) = aux;
        if (aux > 0)
-                memcpy(skb_put(skb, aux), scp->accessdata.acc_acc, aux);
+                skb_put_data(skb, scp->accessdata.acc_acc, aux);
        aux = (__u8)le16_to_cpu(scp->conndata_out.opt_optl);
        *skb_put(skb, 1) = aux;
        if (aux > 0)
-                memcpy(skb_put(skb, aux), scp->conndata_out.opt_data, aux);
+                skb_put_data(skb, scp->conndata_out.opt_data, aux);
        scp->persist = dn_nsp_persist(sk);
        scp->persist_fxn = dn_nsp_retrans_conninit;
diff --git a/net/ieee802154/6lowpan/tx.c b/net/ieee802154/6lowpan/tx.c
index dbb476d7d38f..e6ff5128e61a 100644
--- a/net/ieee802154/6lowpan/tx.c
+++ b/net/ieee802154/6lowpan/tx.c
@@ -121,8 +121,7 @@ lowpan_alloc_frag(struct sk_buff *skb, int size,
                *mac_cb(frag) = *mac_cb(skb);
                if (frag1) {
-                        memcpy(skb_put(frag, skb->mac_len),
+                        skb_put_data(frag, skb_mac_header(skb), skb->mac_len);
-                               skb_mac_header(skb), skb->mac_len);
                } else {
                        rc = wpan_dev_hard_header(frag, wdev,
                                                  &master_hdr->dest,
@@ -152,8 +151,8 @@ lowpan_xmit_fragment(struct sk_buff *skb, const struct ieee802154_hdr *wpan_hdr,
        if (IS_ERR(frag))
                return PTR_ERR(frag);
-        memcpy(skb_put(frag, frag_hdrlen), frag_hdr, frag_hdrlen);
+        skb_put_data(frag, frag_hdr, frag_hdrlen);
-        memcpy(skb_put(frag, len), skb_network_header(skb) + offset, len);
+        skb_put_data(frag, skb_network_header(skb) + offset, len);
        raw_dump_table(__func__, " fragment dump", frag->data, frag->len);
diff --git a/net/ipv6/mcast.c b/net/ipv6/mcast.c
index 9098429e38bc..b64046ccae69 100644
--- a/net/ipv6/mcast.c
+++ b/net/ipv6/mcast.c
@@ -1602,7 +1602,7 @@ static struct sk_buff *mld_newpack(struct inet6_dev *idev, unsigned int mtu)
        ip6_mc_hdr(sk, skb, dev, saddr, &mld2_all_mcr, NEXTHDR_HOP, 0);
-        memcpy(skb_put(skb, sizeof(ra)), ra, sizeof(ra));
+        skb_put_data(skb, ra, sizeof(ra));
        skb_set_transport_header(skb, skb_tail_pointer(skb) - skb->data);
        skb_put(skb, sizeof(*pmr));
@@ -2006,7 +2006,7 @@ static void igmp6_send(struct in6_addr *addr, struct net_device *dev, int type)
        ip6_mc_hdr(sk, skb, dev, saddr, snd_addr, NEXTHDR_HOP, payload_len);
-        memcpy(skb_put(skb, sizeof(ra)), ra, sizeof(ra));
+        skb_put_data(skb, ra, sizeof(ra));
        hdr = skb_put_zero(skb, sizeof(struct mld_msg));
        hdr->mld_type = type;
diff --git a/net/irda/ircomm/ircomm_tty.c b/net/irda/ircomm/ircomm_tty.c
index f6061c4bb0a8..ec157c3419b5 100644
--- a/net/irda/ircomm/ircomm_tty.c
+++ b/net/irda/ircomm/ircomm_tty.c
@@ -690,7 +690,7 @@ static int ircomm_tty_write(struct tty_struct *tty,
                }
                /* Copy data */
-                memcpy(skb_put(skb,size), buf + len, size);
+                skb_put_data(skb, buf + len, size);
                count -= size;
                len += size;
diff --git a/net/irda/irlap_frame.c b/net/irda/irlap_frame.c
index b936b1251a66..bf56ac7dba96 100644
--- a/net/irda/irlap_frame.c
+++ b/net/irda/irlap_frame.c
@@ -392,8 +392,7 @@ void irlap_send_discovery_xid_frame(struct irlap_cb *self, int S, __u8 s,
                info[0] = discovery->data.charset;
                len = IRDA_MIN(discovery->name_len, skb_tailroom(tx_skb));
-                info = skb_put(tx_skb, len);
+                info = skb_put_data(tx_skb, discovery->data.info, len);
-                memcpy(info, discovery->data.info, len);
        }
        irlap_queue_xmit(self, tx_skb);
 }
@@ -1216,8 +1215,7 @@ void irlap_send_test_frame(struct irlap_cb *self, __u8 caddr, __u32 daddr,
        frame->control = TEST_RSP | PF_BIT;
        /* Copy info */
-        info = skb_put(tx_skb, cmd->len);
+        info = skb_put_data(tx_skb, cmd->data, cmd->len);
-        memcpy(info, cmd->data, cmd->len);
        /* Return to sender */
        irlap_wait_min_turn_around(self, &self->qos_tx);
diff --git a/net/key/af_key.c b/net/key/af_key.c
index 8ad430edb5b8..3ebb4268973b 100644
--- a/net/key/af_key.c
+++ b/net/key/af_key.c
@@ -1706,8 +1706,7 @@ static int unicast_flush_resp(struct sock *sk, const struct sadb_msg *ihdr)
        if (!skb)
                return -ENOBUFS;
-        hdr = (struct sadb_msg *) skb_put(skb, sizeof(struct sadb_msg));
+        hdr = skb_put_data(skb, ihdr, sizeof(struct sadb_msg));
-        memcpy(hdr, ihdr, sizeof(struct sadb_msg));
        hdr->sadb_msg_errno = (uint8_t) 0;
        hdr->sadb_msg_len = (sizeof(struct sadb_msg) / sizeof(uint64_t));
diff --git a/net/mac80211/ibss.c b/net/mac80211/ibss.c
index 660ac6a426f4..e9c6aa3ed05b 100644
--- a/net/mac80211/ibss.c
+++ b/net/mac80211/ibss.c
@@ -1569,7 +1569,7 @@ static void ieee80211_rx_mgmt_probe_req(struct ieee80211_sub_if_data *sdata,
                return;
        skb_reserve(skb, local->tx_headroom);
-        memcpy(skb_put(skb, presp->head_len), presp->head, presp->head_len);
+        skb_put_data(skb, presp->head, presp->head_len);
        memcpy(((struct ieee80211_mgmt *) skb->data)->da, mgmt->sa, ETH_ALEN);
        ibss_dbg(sdata, "Sending ProbeResp to %pM\n", mgmt->sa);
diff --git a/net/mac80211/mesh.c b/net/mac80211/mesh.c
index e45c8d94952e..861697f2d75b 100644
--- a/net/mac80211/mesh.c
+++ b/net/mac80211/mesh.c
@@ -345,7 +345,7 @@ int mesh_add_vendor_ies(struct ieee80211_sub_if_data *sdata,
                data = ifmsh->ie + offset;
                if (skb_tailroom(skb) < len)
                        return -ENOMEM;
-                memcpy(skb_put(skb, len), data, len);
+                skb_put_data(skb, data, len);
        }
        return 0;
@@ -369,7 +369,7 @@ int mesh_add_rsn_ie(struct ieee80211_sub_if_data *sdata, struct sk_buff *skb)
        if (skb_tailroom(skb) < len)
                return -ENOMEM;
-        memcpy(skb_put(skb, len), data, len);
+        skb_put_data(skb, data, len);
        return 0;
 }
@@ -1125,8 +1125,8 @@ ieee80211_mesh_rx_probe_req(struct ieee80211_sub_if_data *sdata,
                goto out;
        skb_reserve(presp, local->tx_headroom);
-        memcpy(skb_put(presp, bcn->head_len), bcn->head, bcn->head_len);
+        skb_put_data(presp, bcn->head, bcn->head_len);
-        memcpy(skb_put(presp, bcn->tail_len), bcn->tail, bcn->tail_len);
+        skb_put_data(presp, bcn->tail, bcn->tail_len);
        hdr = (struct ieee80211_mgmt *) presp->data;
        hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
                                         IEEE80211_STYPE_PROBE_RESP);
diff --git a/net/mac80211/mlme.c b/net/mac80211/mlme.c
index e810334595ff..7be7917e1541 100644
--- a/net/mac80211/mlme.c
+++ b/net/mac80211/mlme.c
@@ -796,8 +796,8 @@ static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata)
                                                 after_ric,
                                                 ARRAY_SIZE(after_ric),
                                                 offset);
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, assoc_data->ie + offset,
-                memcpy(pos, assoc_data->ie + offset, noffset - offset);
+                                   noffset - offset);
                offset = noffset;
        }
@@ -834,8 +834,8 @@ static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata)
                noffset = ieee80211_ie_split(assoc_data->ie, assoc_data->ie_len,
                                             before_vht, ARRAY_SIZE(before_vht),
                                             offset);
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, assoc_data->ie + offset,
-                memcpy(pos, assoc_data->ie + offset, noffset - offset);
+                                   noffset - offset);
                offset = noffset;
        }
@@ -848,8 +848,8 @@ static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata)
                noffset = ieee80211_ie_split_vendor(assoc_data->ie,
                                                    assoc_data->ie_len,
                                                    offset);
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, assoc_data->ie + offset,
-                memcpy(pos, assoc_data->ie + offset, noffset - offset);
+                                   noffset - offset);
                offset = noffset;
        }
@@ -868,8 +868,8 @@ static void ieee80211_send_assoc(struct ieee80211_sub_if_data *sdata)
        /* add any remaining custom (i.e. vendor specific here) IEs */
        if (assoc_data->ie_len) {
                noffset = assoc_data->ie_len;
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, assoc_data->ie + offset,
-                memcpy(pos, assoc_data->ie + offset, noffset - offset);
+                                   noffset - offset);
        }
        if (assoc_data->fils_kek_len &&
diff --git a/net/mac80211/offchannel.c b/net/mac80211/offchannel.c
index eede5c6db8d5..f8e7a8bbc618 100644
--- a/net/mac80211/offchannel.c
+++ b/net/mac80211/offchannel.c
@@ -885,8 +885,7 @@ int ieee80211_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
        }
        skb_reserve(skb, local->hw.extra_tx_headroom);
-        data = skb_put(skb, params->len);
+        data = skb_put_data(skb, params->buf, params->len);
-        memcpy(data, params->buf, params->len);
        /* Update CSA counters */
        if (sdata->vif.csa_active &&
diff --git a/net/mac80211/rx.c b/net/mac80211/rx.c
index e1ab1c4af33c..53b00bb52095 100644
--- a/net/mac80211/rx.c
+++ b/net/mac80211/rx.c
@@ -2098,7 +2098,7 @@ ieee80211_rx_h_defragment(struct ieee80211_rx_data *rx)
                }
        }
        while ((skb = __skb_dequeue(&entry->skb_list))) {
-                memcpy(skb_put(rx->skb, skb->len), skb->data, skb->len);
+                skb_put_data(rx->skb, skb->data, skb->len);
                dev_kfree_skb(skb);
        }
diff --git a/net/mac80211/tdls.c b/net/mac80211/tdls.c
index c379c99cd1d8..86740670102d 100644
--- a/net/mac80211/tdls.c
+++ b/net/mac80211/tdls.c
@@ -388,8 +388,7 @@ ieee80211_tdls_add_setup_start_ies(struct ieee80211_sub_if_data *sdata,
                                             before_ext_cap,
                                             ARRAY_SIZE(before_ext_cap),
                                             offset);
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, extra_ies + offset, noffset - offset);
-                memcpy(pos, extra_ies + offset, noffset - offset);
                offset = noffset;
        }
@@ -418,8 +417,7 @@ ieee80211_tdls_add_setup_start_ies(struct ieee80211_sub_if_data *sdata,
                                             before_ht_cap,
                                             ARRAY_SIZE(before_ht_cap),
                                             offset);
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, extra_ies + offset, noffset - offset);
-                memcpy(pos, extra_ies + offset, noffset - offset);
                offset = noffset;
        }
@@ -490,8 +488,7 @@ ieee80211_tdls_add_setup_start_ies(struct ieee80211_sub_if_data *sdata,
                                             before_vht_cap,
                                             ARRAY_SIZE(before_vht_cap),
                                             offset);
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, extra_ies + offset, noffset - offset);
-                memcpy(pos, extra_ies + offset, noffset - offset);
                offset = noffset;
        }
@@ -532,8 +529,7 @@ ieee80211_tdls_add_setup_start_ies(struct ieee80211_sub_if_data *sdata,
        /* add any remaining IEs */
        if (extra_ies_len) {
                noffset = extra_ies_len;
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, extra_ies + offset, noffset - offset);
-                memcpy(pos, extra_ies + offset, noffset - offset);
        }
 }
@@ -575,8 +571,7 @@ ieee80211_tdls_add_setup_cfm_ies(struct ieee80211_sub_if_data *sdata,
                                             before_qos,
                                             ARRAY_SIZE(before_qos),
                                             offset);
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, extra_ies + offset, noffset - offset);
-                memcpy(pos, extra_ies + offset, noffset - offset);
                offset = noffset;
        }
@@ -596,8 +591,7 @@ ieee80211_tdls_add_setup_cfm_ies(struct ieee80211_sub_if_data *sdata,
                                             before_ht_op,
                                             ARRAY_SIZE(before_ht_op),
                                             offset);
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, extra_ies + offset, noffset - offset);
-                memcpy(pos, extra_ies + offset, noffset - offset);
                offset = noffset;
        }
@@ -638,8 +632,7 @@ ieee80211_tdls_add_setup_cfm_ies(struct ieee80211_sub_if_data *sdata,
        /* add any remaining IEs */
        if (extra_ies_len) {
                noffset = extra_ies_len;
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, extra_ies + offset, noffset - offset);
-                memcpy(pos, extra_ies + offset, noffset - offset);
        }
 }
@@ -670,8 +663,7 @@ ieee80211_tdls_add_chan_switch_req_ies(struct ieee80211_sub_if_data *sdata,
                                             before_lnkie,
                                             ARRAY_SIZE(before_lnkie),
                                             offset);
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, extra_ies + offset, noffset - offset);
-                memcpy(pos, extra_ies + offset, noffset - offset);
                offset = noffset;
        }
@@ -680,8 +672,7 @@ ieee80211_tdls_add_chan_switch_req_ies(struct ieee80211_sub_if_data *sdata,
        /* add any remaining IEs */
        if (extra_ies_len) {
                noffset = extra_ies_len;
-                pos = skb_put(skb, noffset - offset);
+                pos = skb_put_data(skb, extra_ies + offset, noffset - offset);
-                memcpy(pos, extra_ies + offset, noffset - offset);
        }
 }
@@ -696,7 +687,7 @@ ieee80211_tdls_add_chan_switch_resp_ies(struct ieee80211_sub_if_data *sdata,
                ieee80211_tdls_add_link_ie(sdata, skb, peer, initiator);
        if (extra_ies_len)
-                memcpy(skb_put(skb, extra_ies_len), extra_ies, extra_ies_len);
+                skb_put_data(skb, extra_ies, extra_ies_len);
 }
 static void ieee80211_tdls_add_ies(struct ieee80211_sub_if_data *sdata,
@@ -726,8 +717,7 @@ static void ieee80211_tdls_add_ies(struct ieee80211_sub_if_data *sdata,
        case WLAN_TDLS_TEARDOWN:
        case WLAN_TDLS_DISCOVERY_REQUEST:
                if (extra_ies_len)
-                        memcpy(skb_put(skb, extra_ies_len), extra_ies,
+                        skb_put_data(skb, extra_ies, extra_ies_len);
-                               extra_ies_len);
                if (status_code == 0 || action_code == WLAN_TDLS_TEARDOWN)
                        ieee80211_tdls_add_link_ie(sdata, skb, peer, initiator);
                break;
diff --git a/net/mac80211/tx.c b/net/mac80211/tx.c
index 1af9ed29a915..18c5d6e6305d 100644
--- a/net/mac80211/tx.c
+++ b/net/mac80211/tx.c
@@ -903,8 +903,8 @@ static int ieee80211_fragment(struct ieee80211_tx_data *tx,
                tmp->dev = skb->dev;
                /* copy header and data */
-                memcpy(skb_put(tmp, hdrlen), skb->data, hdrlen);
+                skb_put_data(tmp, skb->data, hdrlen);
-                memcpy(skb_put(tmp, fraglen), skb->data + pos, fraglen);
+                skb_put_data(tmp, skb->data + pos, fraglen);
                pos += fraglen;
        }
@@ -4132,8 +4132,7 @@ __ieee80211_beacon_get(struct ieee80211_hw *hw,
                                goto out;
                        skb_reserve(skb, local->tx_headroom);
-                        memcpy(skb_put(skb, beacon->head_len), beacon->head,
+                        skb_put_data(skb, beacon->head, beacon->head_len);
-                               beacon->head_len);
                        ieee80211_beacon_add_tim(sdata, &ap->ps, skb,
                                                 is_template);
@@ -4147,8 +4146,8 @@ __ieee80211_beacon_get(struct ieee80211_hw *hw,
                        }
                        if (beacon->tail)
-                                memcpy(skb_put(skb, beacon->tail_len),
+                                skb_put_data(skb, beacon->tail,
-                                       beacon->tail, beacon->tail_len);
+                                             beacon->tail_len);
                } else
                        goto out;
        } else if (sdata->vif.type == NL80211_IFTYPE_ADHOC) {
@@ -4171,8 +4170,7 @@ __ieee80211_beacon_get(struct ieee80211_hw *hw,
                if (!skb)
                        goto out;
                skb_reserve(skb, local->tx_headroom);
-                memcpy(skb_put(skb, beacon->head_len), beacon->head,
+                skb_put_data(skb, beacon->head, beacon->head_len);
-                       beacon->head_len);
                hdr = (struct ieee80211_hdr *) skb->data;
                hdr->frame_control = cpu_to_le16(IEEE80211_FTYPE_MGMT |
@@ -4207,8 +4205,7 @@ __ieee80211_beacon_get(struct ieee80211_hw *hw,
                if (!skb)
                        goto out;
                skb_reserve(skb, local->tx_headroom);
-                memcpy(skb_put(skb, beacon->head_len), beacon->head,
+                skb_put_data(skb, beacon->head, beacon->head_len);
-                       beacon->head_len);
                ieee80211_beacon_add_tim(sdata, &ifmsh->ps, skb, is_template);
                if (offs) {
@@ -4216,8 +4213,7 @@ __ieee80211_beacon_get(struct ieee80211_hw *hw,
                        offs->tim_length = skb->len - beacon->head_len;
                }
-                memcpy(skb_put(skb, beacon->tail_len), beacon->tail,
+                skb_put_data(skb, beacon->tail, beacon->tail_len);
-                       beacon->tail_len);
        } else {
                WARN_ON(1);
                goto out;
@@ -4337,7 +4333,7 @@ struct sk_buff *ieee80211_proberesp_get(struct ieee80211_hw *hw,
        if (!skb)
                goto out;
-        memcpy(skb_put(skb, presp->len), presp->data, presp->len);
+        skb_put_data(skb, presp->data, presp->len);
        hdr = (struct ieee80211_hdr *) skb->data;
        memset(hdr->addr1, 0, sizeof(hdr->addr1));
diff --git a/net/mac80211/util.c b/net/mac80211/util.c
index 148c7276869c..259698de569f 100644
--- a/net/mac80211/util.c
+++ b/net/mac80211/util.c
@@ -1252,7 +1252,7 @@ void ieee80211_send_auth(struct ieee80211_sub_if_data *sdata,
        mgmt->u.auth.auth_transaction = cpu_to_le16(transaction);
        mgmt->u.auth.status_code = cpu_to_le16(status);
        if (extra)
-                memcpy(skb_put(skb, extra_len), extra, extra_len);
+                skb_put_data(skb, extra, extra_len);
        if (auth_alg == WLAN_AUTH_SHARED_KEY && transaction == 3) {
                mgmt->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
@@ -1292,8 +1292,7 @@ void ieee80211_send_deauth_disassoc(struct ieee80211_sub_if_data *sdata,
                skb_reserve(skb, local->hw.extra_tx_headroom);
                /* copy in frame */
-                memcpy(skb_put(skb, IEEE80211_DEAUTH_FRAME_LEN),
+                skb_put_data(skb, mgmt, IEEE80211_DEAUTH_FRAME_LEN);
-                       mgmt, IEEE80211_DEAUTH_FRAME_LEN);
                if (sdata->vif.type != NL80211_IFTYPE_STATION ||
                    !(sdata->u.mgd.flags & IEEE80211_STA_MFP_ENABLED))
diff --git a/net/netlink/af_netlink.c b/net/netlink/af_netlink.c
index 7586d446d7dc..bd24a975fd49 100644
--- a/net/netlink/af_netlink.c
+++ b/net/netlink/af_netlink.c
@@ -170,7 +170,7 @@ static struct sk_buff *netlink_to_full_skb(const struct sk_buff *skb,
        NETLINK_CB(new).dst_group = NETLINK_CB(skb).dst_group;
        NETLINK_CB(new).creds = NETLINK_CB(skb).creds;
-        memcpy(skb_put(new, len), skb->data, len);
+        skb_put_data(new, skb->data, len);
        return new;
 }
diff --git a/net/nfc/digital_dep.c b/net/nfc/digital_dep.c
index f864ce19e13d..f44f75a2a4d5 100644
--- a/net/nfc/digital_dep.c
+++ b/net/nfc/digital_dep.c
@@ -226,8 +226,7 @@ digital_send_dep_data_prep(struct nfc_digital_dev *ddev, struct sk_buff *skb,
                        return ERR_PTR(-ENOMEM);
                }
-                memcpy(skb_put(new_skb, ddev->remote_payload_max), skb->data,
+                skb_put_data(new_skb, skb->data, ddev->remote_payload_max);
-                       ddev->remote_payload_max);
                skb_pull(skb, ddev->remote_payload_max);
                ddev->chaining_skb = skb;
@@ -277,8 +276,7 @@ digital_recv_dep_data_gather(struct nfc_digital_dev *ddev, u8 pfb,
                        ddev->chaining_skb = new_skb;
                }
-                memcpy(skb_put(ddev->chaining_skb, resp->len), resp->data,
+                skb_put_data(ddev->chaining_skb, resp->data, resp->len);
-                       resp->len);
                kfree_skb(resp);
                resp = NULL;
@@ -525,7 +523,7 @@ int digital_in_send_atr_req(struct nfc_digital_dev *ddev,
        if (gb_len) {
                atr_req->pp |= DIGITAL_GB_BIT;
-                memcpy(skb_put(skb, gb_len), gb, gb_len);
+                skb_put_data(skb, gb, gb_len);
        }
        digital_skb_push_dep_sod(ddev, skb);
@@ -1012,8 +1010,7 @@ static int digital_tg_send_ack(struct nfc_digital_dev *ddev,
        if (ddev->did) {
                dep_res->pfb |= DIGITAL_NFC_DEP_PFB_DID_BIT;
-                memcpy(skb_put(skb, sizeof(ddev->did)), &ddev->did,
+                skb_put_data(skb, &ddev->did, sizeof(ddev->did));
-                       sizeof(ddev->did));
        }
        ddev->curr_nfc_dep_pni =
@@ -1057,8 +1054,7 @@ static int digital_tg_send_atn(struct nfc_digital_dev *ddev)
        if (ddev->did) {
                dep_res->pfb |= DIGITAL_NFC_DEP_PFB_DID_BIT;
-                memcpy(skb_put(skb, sizeof(ddev->did)), &ddev->did,
+                skb_put_data(skb, &ddev->did, sizeof(ddev->did));
-                       sizeof(ddev->did));
        }
        digital_skb_push_dep_sod(ddev, skb);
@@ -1325,8 +1321,7 @@ int digital_tg_send_dep_res(struct nfc_digital_dev *ddev, struct sk_buff *skb)
        if (ddev->did) {
                dep_res->pfb |= DIGITAL_NFC_DEP_PFB_DID_BIT;
-                memcpy(skb_put(skb, sizeof(ddev->did)), &ddev->did,
+                skb_put_data(skb, &ddev->did, sizeof(ddev->did));
-                       sizeof(ddev->did));
        }
        ddev->curr_nfc_dep_pni =
diff --git a/net/nfc/hci/core.c b/net/nfc/hci/core.c
index 2b0f0ac498d2..8741ad47a6fb 100644
--- a/net/nfc/hci/core.c
+++ b/net/nfc/hci/core.c
@@ -878,9 +878,9 @@ static void nfc_hci_recv_from_llc(struct nfc_hci_dev *hdev, struct sk_buff *skb)
                skb_queue_walk(&hdev->rx_hcp_frags, frag_skb) {
                        msg_len = frag_skb->len - NFC_HCI_HCP_PACKET_HEADER_LEN;
-                        memcpy(skb_put(hcp_skb, msg_len),
+                        skb_put_data(hcp_skb,
-                               frag_skb->data + NFC_HCI_HCP_PACKET_HEADER_LEN,
+                                     frag_skb->data + NFC_HCI_HCP_PACKET_HEADER_LEN,
-                               msg_len);
+                                     msg_len);
                }
                skb_queue_purge(&hdev->rx_hcp_frags);
diff --git a/net/nfc/llcp_commands.c b/net/nfc/llcp_commands.c
index c5959ce503e6..367d8c027101 100644
--- a/net/nfc/llcp_commands.c
+++ b/net/nfc/llcp_commands.c
@@ -298,7 +298,7 @@ static struct sk_buff *llcp_add_header(struct sk_buff *pdu,
        pr_debug("header 0x%x 0x%x\n", header[0], header[1]);
-        memcpy(skb_put(pdu, LLCP_HEADER_SIZE), header, LLCP_HEADER_SIZE);
+        skb_put_data(pdu, header, LLCP_HEADER_SIZE);
        return pdu;
 }
@@ -311,7 +311,7 @@ static struct sk_buff *llcp_add_tlv(struct sk_buff *pdu, u8 *tlv,
        if (tlv == NULL)
                return NULL;
-        memcpy(skb_put(pdu, tlv_length), tlv, tlv_length);
+        skb_put_data(pdu, tlv, tlv_length);
        return pdu;
 }
@@ -549,7 +549,7 @@ int nfc_llcp_send_snl_sdres(struct nfc_llcp_local *local,
                return PTR_ERR(skb);
        hlist_for_each_entry_safe(sdp, n, tlv_list, node) {
-                memcpy(skb_put(skb, sdp->tlv_len), sdp->tlv, sdp->tlv_len);
+                skb_put_data(skb, sdp->tlv, sdp->tlv_len);
                hlist_del(&sdp->node);
@@ -581,8 +581,7 @@ int nfc_llcp_send_snl_sdreq(struct nfc_llcp_local *local,
        hlist_for_each_entry_safe(sdreq, n, tlv_list, node) {
                pr_debug("tid %d for %s\n", sdreq->tid, sdreq->uri);
-                memcpy(skb_put(skb, sdreq->tlv_len), sdreq->tlv,
+                skb_put_data(skb, sdreq->tlv, sdreq->tlv_len);
-                       sdreq->tlv_len);
                hlist_del(&sdreq->node);
@@ -622,7 +621,7 @@ int nfc_llcp_send_dm(struct nfc_llcp_local *local, u8 ssap, u8 dsap, u8 reason)
        skb = llcp_add_header(skb, dsap, ssap, LLCP_PDU_DM);
-        memcpy(skb_put(skb, 1), &reason, 1);
+        skb_put_data(skb, &reason, 1);
        skb_queue_head(&local->tx_queue, skb);
@@ -693,7 +692,7 @@ int nfc_llcp_send_i_frame(struct nfc_llcp_sock *sock,
                skb_put(pdu, LLCP_SEQUENCE_SIZE);
                if (likely(frag_len > 0))
-                        memcpy(skb_put(pdu, frag_len), msg_ptr, frag_len);
+                        skb_put_data(pdu, msg_ptr, frag_len);
                skb_queue_tail(&sock->tx_queue, pdu);
@@ -759,7 +758,7 @@ int nfc_llcp_send_ui_frame(struct nfc_llcp_sock *sock, u8 ssap, u8 dsap,
                pdu = llcp_add_header(pdu, dsap, ssap, LLCP_PDU_UI);
                if (likely(frag_len > 0))
-                        memcpy(skb_put(pdu, frag_len), msg_ptr, frag_len);
+                        skb_put_data(pdu, msg_ptr, frag_len);
                /* No need to check for the peer RW for UI frames */
                skb_queue_tail(&local->tx_queue, pdu);
diff --git a/net/nfc/llcp_core.c b/net/nfc/llcp_core.c
index e69786c6804c..02eef5cf3cce 100644
--- a/net/nfc/llcp_core.c
+++ b/net/nfc/llcp_core.c
@@ -1390,7 +1390,7 @@ static void nfc_llcp_recv_agf(struct nfc_llcp_local *local, struct sk_buff *skb)
                        return;
                }
-                memcpy(skb_put(new_skb, pdu_len), skb->data, pdu_len);
+                skb_put_data(new_skb, skb->data, pdu_len);
                nfc_llcp_rx_skb(local, new_skb);
diff --git a/net/nfc/nci/core.c b/net/nfc/nci/core.c
index 61fff422424f..17b9f1ce23db 100644
--- a/net/nfc/nci/core.c
+++ b/net/nfc/nci/core.c
@@ -462,7 +462,7 @@ int nci_nfcc_loopback(struct nci_dev *ndev, void *data, size_t data_len,
                return -ENOMEM;
        skb_reserve(skb, NCI_DATA_HDR_SIZE);
-        memcpy(skb_put(skb, data_len), data, data_len);
+        skb_put_data(skb, data, data_len);
        loopback_data.conn_id = conn_id;
        loopback_data.data = skb;
@@ -1350,7 +1350,7 @@ int nci_send_cmd(struct nci_dev *ndev, __u16 opcode, __u8 plen, void *payload)
        nci_pbf_set((__u8 *)hdr, NCI_PBF_LAST);
        if (plen)
-                memcpy(skb_put(skb, plen), payload, plen);
+                skb_put_data(skb, payload, plen);
        skb_queue_tail(&ndev->cmd_q, skb);
        queue_work(ndev->cmd_wq, &ndev->cmd_work);
diff --git a/net/nfc/nci/data.c b/net/nfc/nci/data.c
index dbd24254412a..2488d9241f1d 100644
--- a/net/nfc/nci/data.c
+++ b/net/nfc/nci/data.c
@@ -138,7 +138,7 @@ static int nci_queue_tx_data_frags(struct nci_dev *ndev,
                skb_reserve(skb_frag, NCI_DATA_HDR_SIZE);
                /* first, copy the data */
-                memcpy(skb_put(skb_frag, frag_len), data, frag_len);
+                skb_put_data(skb_frag, data, frag_len);
                /* second, set the header */
                nci_push_data_hdr(ndev, conn_id, skb_frag,
diff --git a/net/nfc/nci/hci.c b/net/nfc/nci/hci.c
index a0ab26d535dc..d4a53ce818c3 100644
--- a/net/nfc/nci/hci.c
+++ b/net/nfc/nci/hci.c
@@ -187,7 +187,7 @@ static int nci_hci_send_data(struct nci_dev *ndev, u8 pipe,
                *skb_push(skb, 1) = cb;
                if (len > 0)
-                        memcpy(skb_put(skb, len), data + i, len);
+                        skb_put_data(skb, data + i, len);
                r = nci_send_data(ndev, conn_info->conn_id, skb);
                if (r < 0)
@@ -476,8 +476,9 @@ void nci_hci_data_received_cb(void *context,
                skb_queue_walk(&ndev->hci_dev->rx_hcp_frags, frag_skb) {
                        msg_len = frag_skb->len - NCI_HCI_HCP_PACKET_HEADER_LEN;
-                        memcpy(skb_put(hcp_skb, msg_len), frag_skb->data +
+                        skb_put_data(hcp_skb,
-                               NCI_HCI_HCP_PACKET_HEADER_LEN, msg_len);
+                                     frag_skb->data + NCI_HCI_HCP_PACKET_HEADER_LEN,
+                                     msg_len);
                }
                skb_queue_purge(&ndev->hci_dev->rx_hcp_frags);
diff --git a/net/nfc/nci/uart.c b/net/nfc/nci/uart.c
index c468eabd6943..cfa7f352c1c3 100644
--- a/net/nfc/nci/uart.c
+++ b/net/nfc/nci/uart.c
@@ -371,7 +371,7 @@ static int nci_uart_default_recv_buf(struct nci_uart *nu, const u8 *data,
                chunk_len = nu->rx_packet_len - nu->rx_skb->len;
                if (count < chunk_len)
                        chunk_len = count;
-                memcpy(skb_put(nu->rx_skb, chunk_len), data, chunk_len);
+                skb_put_data(nu->rx_skb, data, chunk_len);
                data += chunk_len;
                count -= chunk_len;
diff --git a/net/qrtr/qrtr.c b/net/qrtr/qrtr.c
index 825f97671591..cff679167bdc 100644
--- a/net/qrtr/qrtr.c
+++ b/net/qrtr/qrtr.c
@@ -239,7 +239,7 @@ int qrtr_endpoint_post(struct qrtr_endpoint *ep, const void *data, size_t len)
                return -ENOMEM;
        skb_reset_transport_header(skb);
-        memcpy(skb_put(skb, len), data, len);
+        skb_put_data(skb, data, len);
        skb_queue_tail(&node->rx_queue, skb);
        schedule_work(&node->work);
diff --git a/net/sctp/output.c b/net/sctp/output.c
index c339c682675a..febcc350cf00 100644
--- a/net/sctp/output.c
+++ b/net/sctp/output.c
@@ -469,8 +469,7 @@ merge:
                                auth = (struct sctp_auth_chunk *)
                                                        skb_tail_pointer(nskb);
-                        memcpy(skb_put(nskb, chunk->skb->len), chunk->skb->data,
+                        skb_put_data(nskb, chunk->skb->data, chunk->skb->len);
-                               chunk->skb->len);
                        pr_debug("*** Chunk:%p[%s] %s 0x%x, length:%d, chunk->skb->len:%d, rtt_in_progress:%d\n",
                                 chunk,
diff --git a/net/sctp/sm_make_chunk.c b/net/sctp/sm_make_chunk.c
index aaac2660aaf7..034e916362cf 100644
--- a/net/sctp/sm_make_chunk.c
+++ b/net/sctp/sm_make_chunk.c
@@ -1479,9 +1479,7 @@ void *sctp_addto_chunk(struct sctp_chunk *chunk, int len, const void *data)
        int padlen = SCTP_PAD4(chunklen) - chunklen;
        padding = skb_put_zero(chunk->skb, padlen);
-        target = skb_put(chunk->skb, len);
+        target = skb_put_data(chunk->skb, data, len);
-        memcpy(target, data, len);
        /* Adjust the chunk length field.  */
        chunk->chunk_hdr->length = htons(chunklen + padlen + len);
diff --git a/net/vmw_vsock/virtio_transport_common.c b/net/vmw_vsock/virtio_transport_common.c
index 18e24793659f..24e2054bfbaf 100644
--- a/net/vmw_vsock/virtio_transport_common.c
+++ b/net/vmw_vsock/virtio_transport_common.c
@@ -132,12 +132,10 @@ static struct sk_buff *virtio_transport_build_skb(void *opaque)
                break;
        }
-        t_hdr = skb_put(skb, sizeof(pkt->hdr));
+        t_hdr = skb_put_data(skb, &pkt->hdr, sizeof(pkt->hdr));
-        memcpy(t_hdr, &pkt->hdr, sizeof(pkt->hdr));
        if (pkt->len) {
-                payload = skb_put(skb, pkt->len);
+                payload = skb_put_data(skb, pkt->buf, pkt->len);
-                memcpy(payload, pkt->buf, pkt->len);
        }
        return skb;
diff --git a/net/x25/x25_subr.c b/net/x25/x25_subr.c
index 6b5af65f491f..eb466ece1730 100644
--- a/net/x25/x25_subr.c
+++ b/net/x25/x25_subr.c
@@ -188,17 +188,14 @@ void x25_write_internal(struct sock *sk, int frametype)
                        *dptr++ = X25_CALL_REQUEST;
                        len     = x25_addr_aton(addresses, &x25->dest_addr,
                                                &x25->source_addr);
-                        dptr    = skb_put(skb, len);
+                        dptr = skb_put_data(skb, addresses, len);
-                        memcpy(dptr, addresses, len);
                        len     = x25_create_facilities(facilities,
                                        &x25->facilities,
                                        &x25->dte_facilities,
                                        x25->neighbour->global_facil_mask);
-                        dptr    = skb_put(skb, len);
+                        dptr = skb_put_data(skb, facilities, len);
-                        memcpy(dptr, facilities, len);
+                        dptr = skb_put_data(skb, x25->calluserdata.cuddata,
-                        dptr = skb_put(skb, x25->calluserdata.cudlength);
+                                            x25->calluserdata.cudlength);
-                        memcpy(dptr, x25->calluserdata.cuddata,
-                               x25->calluserdata.cudlength);
                        x25->calluserdata.cudlength = 0;
                        break;
@@ -210,17 +207,15 @@ void x25_write_internal(struct sock *sk, int frametype)
                                                        &x25->facilities,
                                                        &x25->dte_facilities,
                                                        x25->vc_facil_mask);
-                        dptr    = skb_put(skb, len);
+                        dptr = skb_put_data(skb, facilities, len);
-                        memcpy(dptr, facilities, len);
                        /* fast select with no restriction on response
                                allows call user data. Userland must
                                ensure it is ours and not theirs */
                        if(x25->facilities.reverse & 0x80) {
-                                dptr = skb_put(skb,
+                                dptr = skb_put_data(skb,
-                                        x25->calluserdata.cudlength);
+                                                    x25->calluserdata.cuddata,
-                                memcpy(dptr, x25->calluserdata.cuddata,
+                                                    x25->calluserdata.cudlength);
-                                       x25->calluserdata.cudlength);
                        }
                        x25->calluserdata.cudlength = 0;
                        break;
author	Johannes Berg <johannes.berg@intel.com>	2017-06-16 08:29:20 -0400
committer	David S. Miller <davem@davemloft.net>	2017-06-16 11:48:37 -0400
commit	59ae1d127ac0ae404baf414c434ba2651b793f46 (patch)
tree	043e71496aa7a7db86bcc8219a3a51f533aac982
parent	b080db585384b9f037e015c0c28d1ad33be41dfc (diff)