84 	if (ireq->i_len != sizeof(ik))  in ieee80211_ioctl_getkey()
134 	if (sizeof(ic->ic_chan_active) < ireq->i_len)  in ieee80211_ioctl_getchanlist()
135 		ireq->i_len = sizeof(ic->ic_chan_active);  in ieee80211_ioctl_getchanlist()
136 	return copyout(&ic->ic_chan_active, ireq->i_data, ireq->i_len);  in ieee80211_ioctl_getchanlist()
147 	if (space > ireq->i_len)  in ieee80211_ioctl_getchaninfo()
148 		space = ireq->i_len;  in ieee80211_ioctl_getchaninfo()
161 	if (ireq->i_len < IEEE80211_ADDR_LEN)  in ieee80211_ioctl_getwpaie()
188 		if (ireq->i_len > sizeof(struct ieee80211req_wpaie2))  in ieee80211_ioctl_getwpaie()
189 			ireq->i_len = sizeof(struct ieee80211req_wpaie2);  in ieee80211_ioctl_getwpaie()
199 		if (ireq->i_len > sizeof(struct ieee80211req_wpaie))  in ieee80211_ioctl_getwpaie()
200 			ireq->i_len = sizeof(struct ieee80211req_wpaie);  in ieee80211_ioctl_getwpaie()
203 	error = copyout(wpaie, ireq->i_data, ireq->i_len);  in ieee80211_ioctl_getwpaie()
217 	if (ireq->i_len < off)  in ieee80211_ioctl_getstastats()
225 	if (ireq->i_len > sizeof(struct ieee80211req_sta_stats))  in ieee80211_ioctl_getstastats()
226 		ireq->i_len = sizeof(struct ieee80211req_sta_stats);  in ieee80211_ioctl_getstastats()
229 			ireq->i_len - off);  in ieee80211_ioctl_getstastats()
321 	if (ireq->i_len < sizeof(struct scanreq))  in ieee80211_ioctl_getscanresults()
327 	if (req.space > ireq->i_len)  in ieee80211_ioctl_getscanresults()
328 		req.space = ireq->i_len;  in ieee80211_ioctl_getscanresults()
341 		ireq->i_len = space - req.space;  in ieee80211_ioctl_getscanresults()
342 		error = copyout(p, ireq->i_data, ireq->i_len);  in ieee80211_ioctl_getscanresults()
345 		ireq->i_len = 0;  in ieee80211_ioctl_getscanresults()
472 	if (req.space > ireq->i_len)  in getstainfo_common()
473 		req.space = ireq->i_len;  in getstainfo_common()
489 		ireq->i_len = space - req.space;  in getstainfo_common()
490 		error = copyout(p, (uint8_t *) ireq->i_data+off, ireq->i_len);  in getstainfo_common()
493 		ireq->i_len = 0;  in getstainfo_common()
508 	if (ireq->i_len < sizeof(struct ieee80211req_sta_req))  in ieee80211_ioctl_getstainfo()
530 	if (ireq->i_len != sizeof(txpow))  in ieee80211_ioctl_getstatxpow()
555 	ac = (ireq->i_len & IEEE80211_WMEPARAM_VAL);  in ieee80211_ioctl_getwmeparam()
558 	if (ireq->i_len & IEEE80211_WMEPARAM_BSS)  in ieee80211_ioctl_getwmeparam()
601 	if (ireq->i_len != sizeof(struct ieee80211_channel))  in ieee80211_ioctl_getcurchan()
621 	if (ireq->i_len > aie->ie_len)  in getappie()
622 		ireq->i_len = aie->ie_len;  in getappie()
623 	return copyout(aie->ie_data, ireq->i_data, ireq->i_len);  in getappie()
658 	if (ireq->i_len != sizeof(ic->ic_regdomain))  in ieee80211_ioctl_getregdomain()
668 	size_t len = ireq->i_len;  in ieee80211_ioctl_getroam()
679 	size_t len = ireq->i_len;  in ieee80211_ioctl_gettxparams()
694 	maxchans = 1 + ((ireq->i_len - sizeof(struct ieee80211_devcaps_req)) /  in ieee80211_ioctl_getdevcaps()
732 	if (ireq->i_len != sizeof(vlan))  in ieee80211_ioctl_getstavlan()
787 		if (len > ireq->i_len)  in ieee80211_ioctl_get80211()
789 		ireq->i_len = len;  in ieee80211_ioctl_get80211()
790 		error = copyout(ic->ic_name, ireq->i_data, ireq->i_len);  in ieee80211_ioctl_get80211()
796 			ireq->i_len = vap->iv_des_ssid[0].len;  in ieee80211_ioctl_get80211()
797 			memcpy(tmpssid, vap->iv_des_ssid[0].ssid, ireq->i_len);  in ieee80211_ioctl_get80211()
800 			ireq->i_len = vap->iv_bss->ni_esslen;  in ieee80211_ioctl_get80211()
801 			memcpy(tmpssid, vap->iv_bss->ni_essid, ireq->i_len);  in ieee80211_ioctl_get80211()
804 		error = copyout(tmpssid, ireq->i_data, ireq->i_len);  in ieee80211_ioctl_get80211()
828 		ireq->i_len = len;  in ieee80211_ioctl_get80211()
922 		if (ireq->i_len != IEEE80211_ADDR_LEN)  in ieee80211_ioctl_get80211()
927 			    ireq->i_data, ireq->i_len);  in ieee80211_ioctl_get80211()
930 			    ireq->i_len);  in ieee80211_ioctl_get80211()
1177 	if (ireq->i_len != sizeof(ik))  in ieee80211_ioctl_setkey()
1256 	if (ireq->i_len != sizeof(dk))  in ieee80211_ioctl_delkey()
1641 	if (ireq->i_len != sizeof(mlme))  in ieee80211_ioctl_setmlme()
1667 	if (ireq->i_len != sizeof(mac))  in ieee80211_ioctl_macmac()
1669 	error = copyin(ireq->i_data, mac, ireq->i_len);  in ieee80211_ioctl_macmac()
1730 	if (ireq->i_len > sizeof(ic->ic_chan_active))  in ieee80211_ioctl_setchanlist()
1731 		ireq->i_len = sizeof(ic->ic_chan_active);  in ieee80211_ioctl_setchanlist()
1732 	list = IEEE80211_MALLOC(ireq->i_len + IEEE80211_CHAN_BYTES, M_TEMP,  in ieee80211_ioctl_setchanlist()
1736 	error = copyin(ireq->i_data, list, ireq->i_len);  in ieee80211_ioctl_setchanlist()
1742 	chanlist = list + ireq->i_len;		/* NB: zero'd already */  in ieee80211_ioctl_setchanlist()
1743 	maxchan = ireq->i_len * NBBY;  in ieee80211_ioctl_setchanlist()
1781 	if (ireq->i_len < IEEE80211_ADDR_LEN)  in ieee80211_ioctl_setstastats()
1802 	if (ireq->i_len != sizeof(txpow))  in ieee80211_ioctl_setstatxpow()
1826 	isbss = (ireq->i_len & IEEE80211_WMEPARAM_BSS);  in ieee80211_ioctl_setwmeparam()
1827 	ac = (ireq->i_len & IEEE80211_WMEPARAM_VAL);  in ieee80211_ioctl_setwmeparam()
2162 	if (ireq->i_len != sizeof(chan))  in ieee80211_ioctl_setcurchan()
2186 	nchans = 1 + ((ireq->i_len - sizeof(struct ieee80211_regdomain_req)) /  in ieee80211_ioctl_setregdomain()
2191 		    ireq->i_len, nchans);  in ieee80211_ioctl_setregdomain()
2258 	if (ireq->i_len != sizeof(vap->iv_roamparms))  in ieee80211_ioctl_setroam()
2266 	error = copyin(ireq->i_data, parms, ireq->i_len);  in ieee80211_ioctl_setroam()
2326 	if (ireq->i_len > sizeof(parms))  in ieee80211_ioctl_settxparams()
2328 	error = copyin(ireq->i_data, &parms, ireq->i_len);  in ieee80211_ioctl_settxparams()
2331 	nmodes = ireq->i_len / sizeof(struct ieee80211_txparam);  in ieee80211_ioctl_settxparams()
2390 	if (ireq->i_len == 0) {		/* delete any existing ie */  in setappie()
2397 	if (!(2 <= ireq->i_len && ireq->i_len <= IEEE80211_MAX_APPIE))  in setappie()
2408 	    sizeof(struct ieee80211_appie) + ireq->i_len, M_80211_NODE_IE,  in setappie()
2413 	error = copyin(ireq->i_data, napp->ie_data, ireq->i_len);  in setappie()
2418 	napp->ie_len = ireq->i_len;  in setappie()
2541 	if (ireq->i_len != sizeof(csr))  in ieee80211_ioctl_chanswitch()
2674 	if (ireq->i_len != sizeof(*sr))  in ieee80211_ioctl_scanreq()
2696 	if (ireq->i_len != sizeof(vlan))  in ieee80211_ioctl_setstavlan()
2770 		    ireq->i_len > IEEE80211_NWID_LEN)  in ieee80211_ioctl_set80211()
2772 		error = copyin(ireq->i_data, tmpssid, ireq->i_len);  in ieee80211_ioctl_set80211()
2776 		vap->iv_des_ssid[0].len = ireq->i_len;  in ieee80211_ioctl_set80211()
2777 		memcpy(vap->iv_des_ssid[0].ssid, tmpssid, ireq->i_len);  in ieee80211_ioctl_set80211()
2778 		vap->iv_des_nssid = (ireq->i_len > 0);  in ieee80211_ioctl_set80211()
2803 		if (ireq->i_len == 0) {  in ieee80211_ioctl_set80211()
2808 		if (ireq->i_len > sizeof(tmpkey))  in ieee80211_ioctl_set80211()
2811 		error = copyin(ireq->i_data, tmpkey, ireq->i_len);  in ieee80211_ioctl_set80211()
2818 			k->wk_keylen = ireq->i_len;  in ieee80211_ioctl_set80211()
3034 		if (ireq->i_len != sizeof(tmpbssid))  in ieee80211_ioctl_set80211()
3036 		error = copyin(ireq->i_data, tmpbssid, ireq->i_len);  in ieee80211_ioctl_set80211()