4884 	IOCTL_Command_struct iocommand;  in hpsa_passthru_ioctl()  local
4894 	if (copy_from_user(&iocommand, argp, sizeof(iocommand)))  in hpsa_passthru_ioctl()
4896 	if ((iocommand.buf_size < 1) &&  in hpsa_passthru_ioctl()
4897 	    (iocommand.Request.Type.Direction != XFER_NONE)) {  in hpsa_passthru_ioctl()
4900 	if (iocommand.buf_size > 0) {  in hpsa_passthru_ioctl()
4901 		buff = kmalloc(iocommand.buf_size, GFP_KERNEL);  in hpsa_passthru_ioctl()
4904 		if (iocommand.Request.Type.Direction & XFER_WRITE) {  in hpsa_passthru_ioctl()
4906 			if (copy_from_user(buff, iocommand.buf,  in hpsa_passthru_ioctl()
4907 				iocommand.buf_size)) {  in hpsa_passthru_ioctl()
4912 			memset(buff, 0, iocommand.buf_size);  in hpsa_passthru_ioctl()
4924 	if (iocommand.buf_size > 0) {	/* buffer to fill */  in hpsa_passthru_ioctl()
4931 	memcpy(&c->Header.LUN, &iocommand.LUN_info, sizeof(c->Header.LUN));  in hpsa_passthru_ioctl()
4934 	memcpy(&c->Request, &iocommand.Request,  in hpsa_passthru_ioctl()
4938 	if (iocommand.buf_size > 0) {  in hpsa_passthru_ioctl()
4940 			iocommand.buf_size, PCI_DMA_BIDIRECTIONAL);  in hpsa_passthru_ioctl()
4948 		c->SG[0].Len = cpu_to_le32(iocommand.buf_size);  in hpsa_passthru_ioctl()
4952 	if (iocommand.buf_size > 0)  in hpsa_passthru_ioctl()
4957 	memcpy(&iocommand.error_info, c->err_info,  in hpsa_passthru_ioctl()
4958 		sizeof(iocommand.error_info));  in hpsa_passthru_ioctl()
4959 	if (copy_to_user(argp, &iocommand, sizeof(iocommand))) {  in hpsa_passthru_ioctl()
4963 	if ((iocommand.Request.Type.Direction & XFER_READ) &&  in hpsa_passthru_ioctl()
4964 		iocommand.buf_size > 0) {  in hpsa_passthru_ioctl()
4966 		if (copy_to_user(iocommand.buf, buff, iocommand.buf_size)) {  in hpsa_passthru_ioctl()