buffer.c should be using copy_{to,from}_user, rather than

copy_{to,from}_phys.

src/core/buffer.c

 #include <string.h>
 #include <errno.h>
 #include <assert.h>
-#include <io.h>
+#include <gpxe/uaccess.h>
 #include <gpxe/buffer.h>
 
 /** @file
  * block consists of the 1025th byte.
  * 
  * Note that the rather convoluted way of manipulating the buffer
- * descriptors (using copy_{to,from}_phys rather than straightforward
+ * descriptors (using copy_{to,from}_user rather than straightforward
  * pointers) is needed to cope with operation as a PXE stack, when we
  * may be running in real mode or 16-bit protected mode, and therefore
  * cannot directly access arbitrary areas of memory using simple
 		block->next = block->end = buffer->len;
 	} else {
 		/* Retrieve block descriptor */
-		copy_from_phys ( block, ( buffer->addr + block->start ),
+		copy_from_user ( block, buffer->addr, block->start,
 				 sizeof ( *block ) );
 	}
 
 	size_t free_block_size = ( block->end - block->start );
 
 	assert ( free_block_size >= sizeof ( *block ) );
-	copy_to_phys ( ( buffer->addr + block->start ), block,
-		       sizeof ( *block ) );
+	copy_to_user ( buffer->addr, block->start, block, sizeof ( *block ) );
 }
 
 /**
 	}
 
 	/* Copy data into buffer */
-	copy_to_phys ( ( buffer->addr + data_start ), data, len );
+	copy_to_user ( buffer->addr, data_start, data, len );
 
 	return 0;
 }

src/include/gpxe/buffer.h

 #define _GPXE_BUFFER_H
 
 #include <stdint.h>
-#include <io.h>
+#include <gpxe/uaccess.h>
 
 /** @file
  *
  *   size_t len;
  *   
  *   // We have an area of memory [buf_start,buf_start+len) into which to
- *   // load a file, where buf_start is a physical addresse.
+ *   // load a file, where buf_start is a userptr_t.
  *   memset ( &buffer, 0, sizeof ( buffer ) );
  *   buffer->start = buf_start;
  *   buffer->len = len;
  *   }
  *   ...
  *   // The whole file is now present at [buf_start,buf_start+filesize),
- *   // where buf_start is a physical address.  The struct buffer can simply
+ *   // where buf_start is a userptr_t.  The struct buffer can simply
  *   // be discarded.
  *
  * @endcode
  *
  */
 struct buffer {
-	/** Physical start address of buffer */
-	physaddr_t addr;
+	/** Start of buffer */
+	userptr_t addr;
 	/** Total length of buffer */
 	size_t len;
 	/** Offset to first free block within buffer */

src/tests/buffertest.c

 	test.source_len = sizeof ( source );
 	test.dest = dest;
 	test.dest_len = sizeof ( dest );
-	test.buffer.addr = virt_to_phys ( dest );
+	test.buffer.addr = virt_to_user ( dest );
 	test.buffer.len = sizeof ( dest );
 
 	test_fill_buffer ( &test,  20,  38 );

src/tests/ftptest.c

 	printf ( "FTP fetching %s\n", filename );
 	
 	memset ( &buffer, 0, sizeof ( buffer ) );
-	buffer.addr = virt_to_phys ( data );
+	buffer.addr = virt_to_user ( data );
 	buffer.len = sizeof ( data );
 
 	memset ( &ftp, 0, sizeof ( ftp ) );