467 	struct user_aac_srb *user_srbcmd = NULL;  in aac_send_raw_srb()  local
514 	user_srbcmd = memdup_user(user_srb, fibsize);  in aac_send_raw_srb()
515 	if (IS_ERR(user_srbcmd)) {  in aac_send_raw_srb()
516 		rcode = PTR_ERR(user_srbcmd);  in aac_send_raw_srb()
517 		user_srbcmd = NULL;  in aac_send_raw_srb()
521 	flags = user_srbcmd->flags; /* from user in cpu order */  in aac_send_raw_srb()
535 	if (user_srbcmd->sg.count > ARRAY_SIZE(sg_list)) {  in aac_send_raw_srb()
537 			user_srbcmd->sg.count));  in aac_send_raw_srb()
541 	if ((data_dir == DMA_NONE) && user_srbcmd->sg.count) {  in aac_send_raw_srb()
547 		((user_srbcmd->sg.count & 0xff) * sizeof(struct sgentry));  in aac_send_raw_srb()
548 	actual_fibsize64 = actual_fibsize + (user_srbcmd->sg.count & 0xff) *  in aac_send_raw_srb()
556 		  actual_fibsize, actual_fibsize64, user_srbcmd->sg.count,  in aac_send_raw_srb()
563 	chn = user_srbcmd->channel;  in aac_send_raw_srb()
564 	if (chn < AAC_MAX_BUSES && user_srbcmd->id < AAC_MAX_TARGETS &&  in aac_send_raw_srb()
565 		dev->hba_map[chn][user_srbcmd->id].devtype ==  in aac_send_raw_srb()
584 		hbacmd->lun[1] = cpu_to_le32(user_srbcmd->lun);  in aac_send_raw_srb()
585 		hbacmd->it_nexus = dev->hba_map[chn][user_srbcmd->id].rmw_nexus;  in aac_send_raw_srb()
594 		memcpy(hbacmd->cdb, user_srbcmd->cdb, sizeof(hbacmd->cdb));  in aac_send_raw_srb()
601 					cpu_to_le32(user_srbcmd->sg.count);  in aac_send_raw_srb()
603 			user_srbcmd->sg.count * sizeof(struct aac_hba_sgl);  in aac_send_raw_srb()
618 		srbcmd->channel	 = cpu_to_le32(user_srbcmd->channel);  in aac_send_raw_srb()
619 		srbcmd->id	 = cpu_to_le32(user_srbcmd->id);  in aac_send_raw_srb()
620 		srbcmd->lun	 = cpu_to_le32(user_srbcmd->lun);  in aac_send_raw_srb()
621 		srbcmd->timeout	 = cpu_to_le32(user_srbcmd->timeout);  in aac_send_raw_srb()
624 		srbcmd->cdb_size = cpu_to_le32(user_srbcmd->cdb_size);  in aac_send_raw_srb()
625 		memcpy(srbcmd->cdb, user_srbcmd->cdb, sizeof(srbcmd->cdb));  in aac_send_raw_srb()
630 		struct user_sgmap *usg32 = &user_srbcmd->sg;  in aac_send_raw_srb()
632 			(struct user_sgmap64 *)&user_srbcmd->sg;  in aac_send_raw_srb()
692 		struct user_sgmap64* upsg = (struct user_sgmap64*)&user_srbcmd->sg;  in aac_send_raw_srb()
802 		if (user_srbcmd->sg.count)  in aac_send_raw_srb()
808 		struct user_sgmap* upsg = &user_srbcmd->sg;  in aac_send_raw_srb()
897 		if (user_srbcmd->sg.count)  in aac_send_raw_srb()
969 	kfree(user_srbcmd);  in aac_send_raw_srb()