191 static int sendcmd_withirq(ctlr_info_t *h, __u8 cmd, void *buff, size_t size,
1465 	char *buff = NULL;  in cciss_passthru()  local
1483 		buff = kmalloc(iocommand.buf_size, GFP_KERNEL);  in cciss_passthru()
1484 		if (buff == NULL)  in cciss_passthru()
1489 		if (copy_from_user(buff, iocommand.buf, iocommand.buf_size)) {  in cciss_passthru()
1490 			kfree(buff);  in cciss_passthru()
1494 		memset(buff, 0, iocommand.buf_size);  in cciss_passthru()
1498 		kfree(buff);  in cciss_passthru()
1521 		temp64.val = pci_map_single(h->pdev, buff,  in cciss_passthru()
1543 		kfree(buff);  in cciss_passthru()
1550 		if (copy_to_user(iocommand.buf, buff, iocommand.buf_size)) {  in cciss_passthru()
1551 			kfree(buff);  in cciss_passthru()
1556 	kfree(buff);  in cciss_passthru()
1565 	unsigned char **buff = NULL;  in cciss_bigpassthru()  local
1603 	buff = kzalloc(MAXSGENTRIES * sizeof(char *), GFP_KERNEL);  in cciss_bigpassthru()
1604 	if (!buff) {  in cciss_bigpassthru()
1618 		buff[sg_used] = kmalloc(sz, GFP_KERNEL);  in cciss_bigpassthru()
1619 		if (buff[sg_used] == NULL) {  in cciss_bigpassthru()
1624 			if (copy_from_user(buff[sg_used], data_ptr, sz)) {  in cciss_bigpassthru()
1629 			memset(buff[sg_used], 0, sz);  in cciss_bigpassthru()
1649 		temp64.val = pci_map_single(h->pdev, buff[i], buff_size[i],  in cciss_bigpassthru()
1679 			if (copy_to_user(ptr, buff[i], buff_size[i])) {  in cciss_bigpassthru()
1690 	if (buff) {  in cciss_bigpassthru()
1692 			kfree(buff[i]);  in cciss_bigpassthru()
1693 		kfree(buff);  in cciss_bigpassthru()
2526 static int fill_cmd(ctlr_info_t *h, CommandList_struct *c, __u8 cmd, void *buff,  in fill_cmd()  argument
2535 	if (buff != NULL) {  in fill_cmd()
2628 			memcpy(&c->Request.CDB[4], buff, 8);  in fill_cmd()
2658 							     buff, size,  in fill_cmd()
2821 static int sendcmd_withirq(ctlr_info_t *h, __u8 cmd, void *buff, size_t size,  in sendcmd_withirq()  argument
2831 	return_status = fill_cmd(h, c, cmd, buff, size, page_code,  in sendcmd_withirq()