3466 	u_int32_t cnt = 0, bufcount = 0;  in key_spddump()  local
3476 	if ((bufcount = ipsec_policy_count) == 0) {  in key_spddump()
3481 	if (os_add_overflow(bufcount, 256, &bufcount)) {  in key_spddump()
3483 		bufcount = ipsec_policy_count;  in key_spddump()
3486 	spbuf = kalloc_type(struct secpolicy *, bufcount, Z_WAITOK);  in key_spddump()
3497 			if (cnt == bufcount) {  in key_spddump()
3530 	kfree_type(struct secpolicy *, bufcount, spbuf);  in key_spddump()
9035 	u_int32_t bufcount = 0, cnt = 0, cnt2 = 0;  in key_dump()  local
9056 	if ((bufcount = ipsec_sav_count) == 0) {  in key_dump()
9061 	if (os_add_overflow(bufcount, 512, &bufcount)) {  in key_dump()
9063 		bufcount = ipsec_sav_count;  in key_dump()
9066 	savbuf = kalloc_type(struct sav_dump_elem, bufcount, Z_WAITOK);  in key_dump()
9095 				if (cnt == bufcount) {  in key_dump()
9139 		kfree_type(struct sav_dump_elem, bufcount, savbuf);  in key_dump()