921 		const drm_savage_cmd_header_t *cmdbuf;  in savage_dispatch_draw()  local
924 		cmdbuf = start;  in savage_dispatch_draw()
925 		while (cmdbuf < end) {  in savage_dispatch_draw()
927 			cmd_header = *cmdbuf;  in savage_dispatch_draw()
928 			cmdbuf++;  in savage_dispatch_draw()
943 					&cmd_header, (const uint16_t *)cmdbuf,  in savage_dispatch_draw()
945 				cmdbuf += j;  in savage_dispatch_draw()
951 					&cmd_header, (const uint16_t *)cmdbuf,  in savage_dispatch_draw()
954 				cmdbuf += j;  in savage_dispatch_draw()
977 	drm_savage_cmdbuf_t *cmdbuf = data;  in savage_bci_cmdbuf()  local
990 		if (cmdbuf->dma_idx >= dma->buf_count) {  in savage_bci_cmdbuf()
993 			     cmdbuf->dma_idx, dma->buf_count - 1);  in savage_bci_cmdbuf()
996 		dmabuf = dma->buflist[cmdbuf->dma_idx];  in savage_bci_cmdbuf()
1006 	if (cmdbuf->size) {  in savage_bci_cmdbuf()
1007 		kcmd_addr = kmalloc_array(cmdbuf->size, 8, GFP_KERNEL);  in savage_bci_cmdbuf()
1011 		if (copy_from_user(kcmd_addr, cmdbuf->cmd_addr,  in savage_bci_cmdbuf()
1012 				       cmdbuf->size * 8))  in savage_bci_cmdbuf()
1017 		cmdbuf->cmd_addr = kcmd_addr;  in savage_bci_cmdbuf()
1019 	if (cmdbuf->vb_size) {  in savage_bci_cmdbuf()
1020 		kvb_addr = memdup_user(cmdbuf->vb_addr, cmdbuf->vb_size);  in savage_bci_cmdbuf()
1026 		cmdbuf->vb_addr = kvb_addr;  in savage_bci_cmdbuf()
1028 	if (cmdbuf->nbox) {  in savage_bci_cmdbuf()
1029 		kbox_addr = kmalloc_array(cmdbuf->nbox, sizeof(struct drm_clip_rect),  in savage_bci_cmdbuf()
1036 		if (copy_from_user(kbox_addr, cmdbuf->box_addr,  in savage_bci_cmdbuf()
1037 				       cmdbuf->nbox * sizeof(struct drm_clip_rect))) {  in savage_bci_cmdbuf()
1041 	cmdbuf->box_addr = kbox_addr;  in savage_bci_cmdbuf()
1054 	while (i < cmdbuf->size) {  in savage_bci_cmdbuf()
1056 		cmd_header = *(drm_savage_cmd_header_t *)cmdbuf->cmd_addr;  in savage_bci_cmdbuf()
1057 		cmdbuf->cmd_addr++;  in savage_bci_cmdbuf()
1067 			if (i + j > cmdbuf->size) {  in savage_bci_cmdbuf()
1078 				first_draw_cmd = cmdbuf->cmd_addr - 1;  in savage_bci_cmdbuf()
1079 			cmdbuf->cmd_addr += j;  in savage_bci_cmdbuf()
1086 				      cmdbuf->cmd_addr - 1,  in savage_bci_cmdbuf()
1087 				      dmabuf, cmdbuf->vb_addr, cmdbuf->vb_size,  in savage_bci_cmdbuf()
1088 				      cmdbuf->vb_stride,  in savage_bci_cmdbuf()
1089 				      cmdbuf->nbox, cmdbuf->box_addr);  in savage_bci_cmdbuf()
1101 			if (i + j > cmdbuf->size) {  in savage_bci_cmdbuf()
1109 				(const uint32_t *)cmdbuf->cmd_addr);  in savage_bci_cmdbuf()
1110 			cmdbuf->cmd_addr += j;  in savage_bci_cmdbuf()
1114 			if (i + 1 > cmdbuf->size) {  in savage_bci_cmdbuf()
1122 						    cmdbuf->cmd_addr,  in savage_bci_cmdbuf()
1123 						    cmdbuf->nbox,  in savage_bci_cmdbuf()
1124 						    cmdbuf->box_addr);  in savage_bci_cmdbuf()
1125 			cmdbuf->cmd_addr++;  in savage_bci_cmdbuf()
1129 			ret = savage_dispatch_swap(dev_priv, cmdbuf->nbox,  in savage_bci_cmdbuf()
1130 						   cmdbuf->box_addr);  in savage_bci_cmdbuf()
1148 			dev_priv, first_draw_cmd, cmdbuf->cmd_addr, dmabuf,  in savage_bci_cmdbuf()
1149 			cmdbuf->vb_addr, cmdbuf->vb_size, cmdbuf->vb_stride,  in savage_bci_cmdbuf()
1150 			cmdbuf->nbox, cmdbuf->box_addr);  in savage_bci_cmdbuf()
1159 	if (dmabuf && cmdbuf->discard) {  in savage_bci_cmdbuf()