488 	u32 fibsize = 0;  in aac_send_raw_srb()  local
519 	if(copy_from_user(&fibsize, &user_srb->count,sizeof(u32))){  in aac_send_raw_srb()
525 	if ((fibsize < (sizeof(struct user_aac_srb) - sizeof(struct user_sgentry))) ||  in aac_send_raw_srb()
526 	    (fibsize > (dev->max_fib_size - sizeof(struct aac_fibhdr)))) {  in aac_send_raw_srb()
531 	user_srbcmd = kmalloc(fibsize, GFP_KERNEL);  in aac_send_raw_srb()
537 	if(copy_from_user(user_srbcmd, user_srb,fibsize)){  in aac_send_raw_srb()
573 	if ((actual_fibsize != fibsize) && (actual_fibsize64 != fibsize)) {  in aac_send_raw_srb()
580 		  sizeof(struct sgentry64), fibsize));  in aac_send_raw_srb()
660 			sg_count[i] = (actual_fibsize64 == fibsize) ?  in aac_send_raw_srb()
677 			if (actual_fibsize64 == fibsize) {  in aac_send_raw_srb()
720 		if (actual_fibsize64 == fibsize) {  in aac_send_raw_srb()
833 		if (actual_fibsize64 == fibsize) {  in aac_send_raw_srb()
946 	user_reply = arg + fibsize;  in aac_send_raw_srb()