6297 	BIG_IOCTL_Command_struct *ioc;  in hpsa_big_passthru_ioctl()  local
6312 	ioc = (BIG_IOCTL_Command_struct *)  in hpsa_big_passthru_ioctl()
6313 	    kmalloc(sizeof(*ioc), GFP_KERNEL);  in hpsa_big_passthru_ioctl()
6314 	if (!ioc) {  in hpsa_big_passthru_ioctl()
6318 	if (copy_from_user(ioc, argp, sizeof(*ioc))) {  in hpsa_big_passthru_ioctl()
6322 	if ((ioc->buf_size < 1) &&  in hpsa_big_passthru_ioctl()
6323 	    (ioc->Request.Type.Direction != XFER_NONE)) {  in hpsa_big_passthru_ioctl()
6328 	if (ioc->malloc_size > MAX_KMALLOC_SIZE) {  in hpsa_big_passthru_ioctl()
6332 	if (ioc->buf_size > ioc->malloc_size * SG_ENTRIES_IN_CMD) {  in hpsa_big_passthru_ioctl()
6346 	left = ioc->buf_size;  in hpsa_big_passthru_ioctl()
6347 	data_ptr = ioc->buf;  in hpsa_big_passthru_ioctl()
6349 		sz = (left > ioc->malloc_size) ? ioc->malloc_size : left;  in hpsa_big_passthru_ioctl()
6356 		if (ioc->Request.Type.Direction & XFER_WRITE) {  in hpsa_big_passthru_ioctl()
6374 	memcpy(&c->Header.LUN, &ioc->LUN_info, sizeof(c->Header.LUN));  in hpsa_big_passthru_ioctl()
6375 	memcpy(&c->Request, &ioc->Request, sizeof(c->Request));  in hpsa_big_passthru_ioctl()
6376 	if (ioc->buf_size > 0) {  in hpsa_big_passthru_ioctl()
6406 	memcpy(&ioc->error_info, c->err_info, sizeof(ioc->error_info));  in hpsa_big_passthru_ioctl()
6407 	if (copy_to_user(argp, ioc, sizeof(*ioc))) {  in hpsa_big_passthru_ioctl()
6411 	if ((ioc->Request.Type.Direction & XFER_READ) && ioc->buf_size > 0) {  in hpsa_big_passthru_ioctl()
6415 		BYTE __user *ptr = ioc->buf;  in hpsa_big_passthru_ioctl()
6436 	kfree(ioc);  in hpsa_big_passthru_ioctl()