485 	struct user_aac_srb *user_srbcmd = NULL;  in aac_send_raw_srb()  local
532 	user_srbcmd = memdup_user(user_srb, fibsize);  in aac_send_raw_srb()
533 	if (IS_ERR(user_srbcmd)) {  in aac_send_raw_srb()
534 		rcode = PTR_ERR(user_srbcmd);  in aac_send_raw_srb()
535 		user_srbcmd = NULL;  in aac_send_raw_srb()
539 	flags = user_srbcmd->flags; /* from user in cpu order */  in aac_send_raw_srb()
553 	if (user_srbcmd->sg.count > ARRAY_SIZE(sg_list)) {  in aac_send_raw_srb()
555 			user_srbcmd->sg.count));  in aac_send_raw_srb()
559 	if ((data_dir == DMA_NONE) && user_srbcmd->sg.count) {  in aac_send_raw_srb()
565 		((user_srbcmd->sg.count & 0xff) * sizeof(struct sgentry));  in aac_send_raw_srb()
566 	actual_fibsize64 = actual_fibsize + (user_srbcmd->sg.count & 0xff) *  in aac_send_raw_srb()
574 		  actual_fibsize, actual_fibsize64, user_srbcmd->sg.count,  in aac_send_raw_srb()
581 	chn = user_srbcmd->channel;  in aac_send_raw_srb()
582 	if (chn < AAC_MAX_BUSES && user_srbcmd->id < AAC_MAX_TARGETS &&  in aac_send_raw_srb()
583 		dev->hba_map[chn][user_srbcmd->id].devtype ==  in aac_send_raw_srb()
602 		hbacmd->lun[1] = cpu_to_le32(user_srbcmd->lun);  in aac_send_raw_srb()
603 		hbacmd->it_nexus = dev->hba_map[chn][user_srbcmd->id].rmw_nexus;  in aac_send_raw_srb()
612 		memcpy(hbacmd->cdb, user_srbcmd->cdb, sizeof(hbacmd->cdb));  in aac_send_raw_srb()
619 					cpu_to_le32(user_srbcmd->sg.count);  in aac_send_raw_srb()
621 			user_srbcmd->sg.count * sizeof(struct aac_hba_sgl);  in aac_send_raw_srb()
636 		srbcmd->channel	 = cpu_to_le32(user_srbcmd->channel);  in aac_send_raw_srb()
637 		srbcmd->id	 = cpu_to_le32(user_srbcmd->id);  in aac_send_raw_srb()
638 		srbcmd->lun	 = cpu_to_le32(user_srbcmd->lun);  in aac_send_raw_srb()
639 		srbcmd->timeout	 = cpu_to_le32(user_srbcmd->timeout);  in aac_send_raw_srb()
642 		srbcmd->cdb_size = cpu_to_le32(user_srbcmd->cdb_size);  in aac_send_raw_srb()
643 		memcpy(srbcmd->cdb, user_srbcmd->cdb, sizeof(srbcmd->cdb));  in aac_send_raw_srb()
648 		struct user_sgmap *usg32 = &user_srbcmd->sg;  in aac_send_raw_srb()
650 			(struct user_sgmap64 *)&user_srbcmd->sg;  in aac_send_raw_srb()
710 		struct user_sgmap64* upsg = (struct user_sgmap64*)&user_srbcmd->sg;  in aac_send_raw_srb()
820 		if (user_srbcmd->sg.count)  in aac_send_raw_srb()
826 		struct user_sgmap* upsg = &user_srbcmd->sg;  in aac_send_raw_srb()
915 		if (user_srbcmd->sg.count)  in aac_send_raw_srb()
987 	kfree(user_srbcmd);  in aac_send_raw_srb()