287 	door_arg_t da;  in klpd_do_call()  local
300 	da.data_ptr = (char *)klh;  in klpd_do_call()
301 	da.data_size = klh->klh_len;  in klpd_do_call()
302 	da.desc_ptr = NULL;  in klpd_do_call()
303 	da.desc_num = 0;  in klpd_do_call()
304 	da.rbuf = (char *)&res;  in klpd_do_call()
305 	da.rsize = sizeof (res);  in klpd_do_call()
307 	while ((dres = door_ki_upcall_limited(p->klpd_door, &da, NULL,  in klpd_do_call()
328 	if (da.rbuf != (char *)&res) {  in klpd_do_call()
329 		kmem_free(da.rbuf, da.rsize);  in klpd_do_call()
848 	door_arg_t da;  in pfexec_call()  local
881 	da.data_ptr = (char *)pap;  in pfexec_call()
882 	da.data_size = pap->pfa_len;  in pfexec_call()
883 	da.desc_ptr = NULL;  in pfexec_call()
884 	da.desc_num = 0;  in pfexec_call()
885 	da.rbuf = (char *)≺  in pfexec_call()
886 	da.rsize = sizeof (pr);  in pfexec_call()
888 	while ((dres = door_ki_upcall(pfd->klpd_door, &da)) != 0) {  in pfexec_call()
903 	prp = (pfexec_reply_t *)da.rbuf;  in pfexec_call()
908 	if (da.rsize < sizeof (pr) ||  in pfexec_call()
909 	    prp->pfr_ioff > da.rsize - sizeof (priv_set_t) ||  in pfexec_call()
910 	    prp->pfr_loff > da.rsize - sizeof (priv_set_t) ||  in pfexec_call()
974 	if (da.rbuf != (char *)&pr)  in pfexec_call()
975 		kmem_free(da.rbuf, da.rsize);  in pfexec_call()
993 	door_arg_t da;  in get_forced_privs()  local
1024 	da.data_ptr = (char *)pap;  in get_forced_privs()
1025 	da.data_size = pap->pfa_len;  in get_forced_privs()
1026 	da.desc_ptr = NULL;  in get_forced_privs()
1027 	da.desc_num = 0;  in get_forced_privs()
1028 	da.rbuf = (char *)&pmem;  in get_forced_privs()
1029 	da.rsize = sizeof (pmem);  in get_forced_privs()
1031 	while ((dres = door_ki_upcall(pfd->klpd_door, &da)) != 0) {  in get_forced_privs()
1047 	if (da.rsize != sizeof (priv_set_t))  in get_forced_privs()
1050 	fset = (priv_set_t *)da.rbuf;  in get_forced_privs()
1070 	if (da.rbuf != (char *)&pmem)  in get_forced_privs()
1071 		kmem_free(da.rbuf, da.rsize);  in get_forced_privs()
1083 	door_arg_t da;  in check_user_privs()  local
1112 	da.data_ptr = (char *)pap;  in check_user_privs()
1113 	da.data_size = pap->pfa_len;  in check_user_privs()
1114 	da.desc_ptr = NULL;  in check_user_privs()
1115 	da.desc_num = 0;  in check_user_privs()
1116 	da.rbuf = (char *)&res;  in check_user_privs()
1117 	da.rsize = sizeof (res);  in check_user_privs()
1119 	while ((dres = door_ki_upcall(pfd->klpd_door, &da)) != 0) {  in check_user_privs()
1135 	if (da.rsize != sizeof (res))  in check_user_privs()
1138 	if (*(uint32_t *)da.rbuf == 1)  in check_user_privs()
1141 	if (da.rbuf != (char *)&res)  in check_user_privs()
1142 		kmem_free(da.rbuf, da.rsize);  in check_user_privs()