462 tcp_signature_verify_input(struct mbuf *m, int off0, int tlen, int optlen,  in tcp_signature_verify_input()  argument
468 	ret = tcp_signature_verify(m, off0, tlen, optlen, to, th, tcpbflag);  in tcp_signature_verify_input()
551 	int optlen = 0;  in tcp_input()  local
737 		optlen = off - sizeof (struct tcphdr);  in tcp_input()
964 			tcp_dooptions(&to, optp, optlen, TO_SYN);  in tcp_input()
1086 			tcp_dooptions(&to, optp, optlen, 0);  in tcp_input()
1145 				tcp_dooptions(&to, optp, optlen,  in tcp_input()
1148 				    optlen, &to, th, tp->t_flags)) {  in tcp_input()
1364 		tcp_dooptions(&to, optp, optlen, TO_SYN);  in tcp_input()
1394 		tcp_dooptions(&to, optp, optlen,  in tcp_input()
1396 		if (!tcp_signature_verify_input(m, off0, tlen, optlen, &to,  in tcp_input()
3332 	int opt, optlen;  in tcp_dooptions()  local
3335 	for (; cnt > 0; cnt -= optlen, cp += optlen) {  in tcp_dooptions()
3340 			optlen = 1;  in tcp_dooptions()
3344 			optlen = cp[1];  in tcp_dooptions()
3345 			if (optlen < 2 || optlen > cnt)  in tcp_dooptions()
3350 			if (optlen != TCPOLEN_MAXSEG)  in tcp_dooptions()
3360 			if (optlen != TCPOLEN_WINDOW)  in tcp_dooptions()
3368 			if (optlen != TCPOLEN_TIMESTAMP)  in tcp_dooptions()
3386 			if (optlen != TCPOLEN_SIGNATURE)  in tcp_dooptions()
3393 			if (optlen != TCPOLEN_SACK_PERMITTED)  in tcp_dooptions()
3402 			if (optlen <= 2 || (optlen - 2) % TCPOLEN_SACK != 0)  in tcp_dooptions()
3407 			to->to_nsacks = (optlen - 2) / TCPOLEN_SACK;  in tcp_dooptions()
3413 			if ((optlen != TCPOLEN_FAST_OPEN_EMPTY) &&  in tcp_dooptions()
3414 			    (optlen < TCPOLEN_FAST_OPEN_MIN) &&  in tcp_dooptions()
3415 			    (optlen > TCPOLEN_FAST_OPEN_MAX))  in tcp_dooptions()
3422 			to->to_tfo_len = optlen - 2;  in tcp_dooptions()