243 	void *buff, size_t size, u16 page_code, unsigned char *scsi3addr,
6201 	char *buff = NULL;  in hpsa_passthru_ioctl()  local
6216 		buff = kmalloc(iocommand.buf_size, GFP_KERNEL);  in hpsa_passthru_ioctl()
6217 		if (buff == NULL)  in hpsa_passthru_ioctl()
6221 			if (copy_from_user(buff, iocommand.buf,  in hpsa_passthru_ioctl()
6227 			memset(buff, 0, iocommand.buf_size);  in hpsa_passthru_ioctl()
6252 		temp64 = pci_map_single(h->pdev, buff,  in hpsa_passthru_ioctl()
6283 		if (copy_to_user(iocommand.buf, buff, iocommand.buf_size)) {  in hpsa_passthru_ioctl()
6291 	kfree(buff);  in hpsa_passthru_ioctl()
6299 	unsigned char **buff = NULL;  in hpsa_big_passthru_ioctl()  local
6336 	buff = kzalloc(SG_ENTRIES_IN_CMD * sizeof(char *), GFP_KERNEL);  in hpsa_big_passthru_ioctl()
6337 	if (!buff) {  in hpsa_big_passthru_ioctl()
6351 		buff[sg_used] = kmalloc(sz, GFP_KERNEL);  in hpsa_big_passthru_ioctl()
6352 		if (buff[sg_used] == NULL) {  in hpsa_big_passthru_ioctl()
6357 			if (copy_from_user(buff[sg_used], data_ptr, sz)) {  in hpsa_big_passthru_ioctl()
6362 			memset(buff[sg_used], 0, sz);  in hpsa_big_passthru_ioctl()
6379 			temp64 = pci_map_single(h->pdev, buff[i],  in hpsa_big_passthru_ioctl()
6417 			if (copy_to_user(ptr, buff[i], buff_size[i])) {  in hpsa_big_passthru_ioctl()
6428 	if (buff) {  in hpsa_big_passthru_ioctl()
6432 			kfree(buff[i]);  in hpsa_big_passthru_ioctl()
6433 		kfree(buff);  in hpsa_big_passthru_ioctl()
6507 	void *buff, size_t size, u16 page_code, unsigned char *scsi3addr,  in fill_cmd()  argument
6516 	if (buff != NULL && size > 0) {  in fill_cmd()
6686 			memcpy(&tag, buff, sizeof(tag));  in fill_cmd()
6729 	if (hpsa_map_one(h->pdev, c, buff, size, pci_dir))  in fill_cmd()