6199 	IOCTL_Command_struct iocommand;  in hpsa_passthru_ioctl()  local
6209 	if (copy_from_user(&iocommand, argp, sizeof(iocommand)))  in hpsa_passthru_ioctl()
6211 	if ((iocommand.buf_size < 1) &&  in hpsa_passthru_ioctl()
6212 	    (iocommand.Request.Type.Direction != XFER_NONE)) {  in hpsa_passthru_ioctl()
6215 	if (iocommand.buf_size > 0) {  in hpsa_passthru_ioctl()
6216 		buff = kmalloc(iocommand.buf_size, GFP_KERNEL);  in hpsa_passthru_ioctl()
6219 		if (iocommand.Request.Type.Direction & XFER_WRITE) {  in hpsa_passthru_ioctl()
6221 			if (copy_from_user(buff, iocommand.buf,  in hpsa_passthru_ioctl()
6222 				iocommand.buf_size)) {  in hpsa_passthru_ioctl()
6227 			memset(buff, 0, iocommand.buf_size);  in hpsa_passthru_ioctl()
6237 	if (iocommand.buf_size > 0) {	/* buffer to fill */  in hpsa_passthru_ioctl()
6244 	memcpy(&c->Header.LUN, &iocommand.LUN_info, sizeof(c->Header.LUN));  in hpsa_passthru_ioctl()
6247 	memcpy(&c->Request, &iocommand.Request,  in hpsa_passthru_ioctl()
6251 	if (iocommand.buf_size > 0) {  in hpsa_passthru_ioctl()
6253 			iocommand.buf_size, PCI_DMA_BIDIRECTIONAL);  in hpsa_passthru_ioctl()
6261 		c->SG[0].Len = cpu_to_le32(iocommand.buf_size);  in hpsa_passthru_ioctl()
6265 	if (iocommand.buf_size > 0)  in hpsa_passthru_ioctl()
6274 	memcpy(&iocommand.error_info, c->err_info,  in hpsa_passthru_ioctl()
6275 		sizeof(iocommand.error_info));  in hpsa_passthru_ioctl()
6276 	if (copy_to_user(argp, &iocommand, sizeof(iocommand))) {  in hpsa_passthru_ioctl()
6280 	if ((iocommand.Request.Type.Direction & XFER_READ) &&  in hpsa_passthru_ioctl()
6281 		iocommand.buf_size > 0) {  in hpsa_passthru_ioctl()
6283 		if (copy_to_user(iocommand.buf, buff, iocommand.buf_size)) {  in hpsa_passthru_ioctl()