416 	struct sg_header *old_hdr = NULL;  in sg_read()  local
435 		old_hdr = kmalloc(SZ_SG_HEADER, GFP_KERNEL);  in sg_read()
436 		if (!old_hdr)  in sg_read()
438 		if (__copy_from_user(old_hdr, buf, SZ_SG_HEADER)) {  in sg_read()
442 		if (old_hdr->reply_len < 0) {  in sg_read()
460 			req_pack_id = old_hdr->pack_id;  in sg_read()
490 	if (old_hdr == NULL) {  in sg_read()
491 		old_hdr = kmalloc(SZ_SG_HEADER, GFP_KERNEL);  in sg_read()
492 		if (! old_hdr) {  in sg_read()
497 	memset(old_hdr, 0, SZ_SG_HEADER);  in sg_read()
498 	old_hdr->reply_len = (int) hp->timeout;  in sg_read()
499 	old_hdr->pack_len = old_hdr->reply_len; /* old, strange behaviour */  in sg_read()
500 	old_hdr->pack_id = hp->pack_id;  in sg_read()
501 	old_hdr->twelve_byte =  in sg_read()
503 	old_hdr->target_status = hp->masked_status;  in sg_read()
504 	old_hdr->host_status = hp->host_status;  in sg_read()
505 	old_hdr->driver_status = hp->driver_status;  in sg_read()
508 		memcpy(old_hdr->sense_buffer, srp->sense_b,  in sg_read()
509 		       sizeof (old_hdr->sense_buffer));  in sg_read()
516 		old_hdr->result = 0;  in sg_read()
521 		old_hdr->result = EBUSY;  in sg_read()
528 		old_hdr->result = EIO;  in sg_read()
531 		old_hdr->result = (srp->sense_b[0] == 0 &&   in sg_read()
535 		old_hdr->result = EIO;  in sg_read()
541 		if (__copy_to_user(buf, old_hdr, SZ_SG_HEADER)) {  in sg_read()
546 		if (count > old_hdr->reply_len)  in sg_read()
547 			count = old_hdr->reply_len;  in sg_read()
555 		count = (old_hdr->result == 0) ? 0 : -EIO;  in sg_read()
560 	kfree(old_hdr);  in sg_read()
611 	struct sg_header old_hdr;  in sg_write()  local
634 	if (__copy_from_user(&old_hdr, buf, SZ_SG_HEADER))  in sg_write()
637 	if (old_hdr.reply_len < 0)  in sg_write()
656 		if ((opcode >= 0xc0) && old_hdr.twelve_byte)  in sg_write()
664 	mxsize = (input_size > old_hdr.reply_len) ? input_size : old_hdr.reply_len;  in sg_write()
677 		hp->dxfer_direction = (old_hdr.reply_len > SZ_SG_HEADER) ?  in sg_write()
688 	hp->timeout = old_hdr.reply_len;	/* structure abuse ... */  in sg_write()
690 	hp->pack_id = old_hdr.pack_id;  in sg_write()
705 				   old_hdr.reply_len - (int)SZ_SG_HEADER,  in sg_write()