struct ubuf_info *ubuf;
                        ubuf = nvq->ubuf_info + nvq->upend_idx;
 
-                       vq->heads[nvq->upend_idx].id = head;
+                       vq->heads[nvq->upend_idx].id = cpu_to_vhost32(vq, head);
                        vq->heads[nvq->upend_idx].len = VHOST_DMA_IN_PROGRESS;
                        ubuf->callback = vhost_zerocopy_callback;
                        ubuf->ctx = nvq->ubufs;
        int headcount = 0;
        unsigned d;
        int r, nlogs = 0;
+       /* len is always initialized before use since we are always called with
+        * datalen > 0.
+        */
+       u32 uninitialized_var(len);
 
        while (datalen > 0 && headcount < quota) {
                if (unlikely(seg >= UIO_MAXIOV)) {
                        nlogs += *log_num;
                        log += *log_num;
                }
-               heads[headcount].id = d;
-               heads[headcount].len = iov_length(vq->iov + seg, in);
-               datalen -= heads[headcount].len;
+               heads[headcount].id = cpu_to_vhost32(vq, d);
+               len = iov_length(vq->iov + seg, in);
+               heads[headcount].len = cpu_to_vhost32(vq, len);
+               datalen -= len;
                ++headcount;
                seg += in;
        }
-       heads[headcount - 1].len += datalen;
+       heads[headcount - 1].len = cpu_to_vhost32(vq, len - datalen);
        *iovcount = seg;
        if (unlikely(log))
                *log_num = nlogs;