2903 	void *bufs;  in snd_pcm_xfern_frames_ioctl()  local
2915 	bufs = memdup_user(xfern.bufs, sizeof(void *) * runtime->channels);  in snd_pcm_xfern_frames_ioctl()
2916 	if (IS_ERR(bufs))  in snd_pcm_xfern_frames_ioctl()
2917 		return PTR_ERR(bufs);  in snd_pcm_xfern_frames_ioctl()
2919 		result = snd_pcm_lib_writev(substream, bufs, xfern.frames);  in snd_pcm_xfern_frames_ioctl()
2921 		result = snd_pcm_lib_readv(substream, bufs, xfern.frames);  in snd_pcm_xfern_frames_ioctl()
2922 	kfree(bufs);  in snd_pcm_xfern_frames_ioctl()
3173 	void __user **bufs;  in snd_pcm_readv()  local
3190 	bufs = kmalloc_array(to->nr_segs, sizeof(void *), GFP_KERNEL);  in snd_pcm_readv()
3191 	if (bufs == NULL)  in snd_pcm_readv()
3194 		bufs[i] = to->iov[i].iov_base;  in snd_pcm_readv()
3195 	result = snd_pcm_lib_readv(substream, bufs, frames);  in snd_pcm_readv()
3198 	kfree(bufs);  in snd_pcm_readv()
3209 	void __user **bufs;  in snd_pcm_writev()  local
3225 	bufs = kmalloc_array(from->nr_segs, sizeof(void *), GFP_KERNEL);  in snd_pcm_writev()
3226 	if (bufs == NULL)  in snd_pcm_writev()
3229 		bufs[i] = from->iov[i].iov_base;  in snd_pcm_writev()
3230 	result = snd_pcm_lib_writev(substream, bufs, frames);  in snd_pcm_writev()
3233 	kfree(bufs);  in snd_pcm_writev()