3380 	u_int32_t cnt = 0, bufcount = 0;  in key_spddump()  local
3390 	if ((bufcount = ipsec_policy_count) == 0) {  in key_spddump()
3395 	if (os_add_overflow(bufcount, 256, &bufcount)) {  in key_spddump()
3397 		bufcount = ipsec_policy_count;  in key_spddump()
3400 	spbuf = kalloc_type(struct secpolicy *, bufcount, Z_WAITOK);  in key_spddump()
3411 			if (cnt == bufcount) {  in key_spddump()
3444 	kfree_type(struct secpolicy *, bufcount, spbuf);  in key_spddump()
9004 	u_int32_t bufcount = 0, cnt = 0, cnt2 = 0;  in key_dump()  local
9025 	if ((bufcount = ipsec_sav_count) == 0) {  in key_dump()
9030 	if (os_add_overflow(bufcount, 512, &bufcount)) {  in key_dump()
9032 		bufcount = ipsec_sav_count;  in key_dump()
9035 	savbuf = kalloc_type(struct sav_dump_elem, bufcount, Z_WAITOK);  in key_dump()
9064 				if (cnt == bufcount) {  in key_dump()
9108 		kfree_type(struct sav_dump_elem, bufcount, savbuf);  in key_dump()