475 	u32 fibsize = 0;  in aac_send_raw_srb()  local
508 	if(copy_from_user(&fibsize, &user_srb->count,sizeof(u32))){  in aac_send_raw_srb()
514 	if ((fibsize < (sizeof(struct user_aac_srb) - sizeof(struct user_sgentry))) ||  in aac_send_raw_srb()
515 	    (fibsize > (dev->max_fib_size - sizeof(struct aac_fibhdr)))) {  in aac_send_raw_srb()
520 	user_srbcmd = kmalloc(fibsize, GFP_KERNEL);  in aac_send_raw_srb()
526 	if(copy_from_user(user_srbcmd, user_srb,fibsize)){  in aac_send_raw_srb()
532 	user_reply = arg+fibsize;  in aac_send_raw_srb()
571 	if ((actual_fibsize != fibsize) && (actual_fibsize64 != fibsize)) {  in aac_send_raw_srb()
578 		  sizeof(struct sgentry64), fibsize));  in aac_send_raw_srb()
595 		if (actual_fibsize64 == fibsize) {  in aac_send_raw_srb()
701 		if (actual_fibsize64 == fibsize) {  in aac_send_raw_srb()