| /NextBSD/sys/net80211/ |
| HD | ieee80211_input.c | 496 uint8_t *frm, *efrm; in ieee80211_parse_beacon() local 500 efrm = mtod(m, uint8_t *) + m->m_len; in ieee80211_parse_beacon() 522 IEEE80211_VERIFY_LENGTH(efrm - frm, 12, in ieee80211_parse_beacon() 531 scan->ies_len = efrm - frm; in ieee80211_parse_beacon() 533 while (efrm - frm > 1) { in ieee80211_parse_beacon() 534 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, in ieee80211_parse_beacon() 735 uint8_t *frm, *efrm; in ieee80211_parse_action() local 745 efrm = mtod(m, u_int8_t *) + m->m_len; in ieee80211_parse_action() 746 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action() 758 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action() [all …]
|
| HD | ieee80211_sta.c | 984 uint8_t *frm, uint8_t *efrm, int rssi, int nf, in sta_auth_shared() argument 1022 if (frm + 1 < efrm) { in sta_auth_shared() 1023 if ((frm[1] + 2) > (efrm - frm)) { in sta_auth_shared() 1027 frm[0], (frm[1] + 2) - (efrm - frm)); in sta_auth_shared() 1300 uint8_t *frm, *efrm; in sta_recv_mgmt() local 1307 efrm = mtod(m0, uint8_t *) + m0->m_len; in sta_recv_mgmt() 1561 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in sta_recv_mgmt() 1581 sta_auth_shared(ni, wh, frm + 6, efrm, rssi, nf, in sta_recv_mgmt() 1615 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in sta_recv_mgmt() 1632 while (efrm - frm > 1) { in sta_recv_mgmt() [all …]
|
| HD | ieee80211_action.c | 153 const uint8_t *frm, const uint8_t *efrm) in recv_inval() argument 222 const uint8_t *frm, const uint8_t *efrm) in ieee80211_recv_action() argument 260 return f(ni, wh, frm, efrm); in ieee80211_recv_action()
|
| HD | ieee80211_hostap.c | 999 uint8_t *frm, uint8_t *efrm, int rssi, int nf, in hostap_auth_shared() argument 1039 if (frm + 1 < efrm) { in hostap_auth_shared() 1040 if ((frm[1] + 2) > (efrm - frm)) { in hostap_auth_shared() 1044 frm[0], (frm[1] + 2) - (efrm - frm)); in hostap_auth_shared() 1687 uint8_t *frm, *efrm, *sfrm; in hostap_recv_mgmt() local 1694 efrm = mtod(m0, uint8_t *) + m0->m_len; in hostap_recv_mgmt() 1819 while (efrm - frm > 1) { in hostap_recv_mgmt() 1820 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in hostap_recv_mgmt() 1881 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in hostap_recv_mgmt() 1910 hostap_auth_shared(ni, wh, frm + 6, efrm, rssi, nf, in hostap_recv_mgmt() [all …]
|
| HD | ieee80211_adhoc.c | 698 uint8_t *frm, *efrm, *sfrm; in adhoc_recv_mgmt() local 706 efrm = mtod(m0, uint8_t *) + m0->m_len; in adhoc_recv_mgmt() 834 while (efrm - frm > 1) { in adhoc_recv_mgmt() 835 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in adhoc_recv_mgmt() 894 (void)ic->ic_recv_action(ni, wh, frm, efrm); in adhoc_recv_mgmt()
|
| HD | ieee80211_mesh.c | 1860 uint8_t *frm, *efrm; in mesh_recv_mgmt() local 1864 efrm = mtod(m0, uint8_t *) + m0->m_len; in mesh_recv_mgmt() 2027 while (efrm - frm > 1) { in mesh_recv_mgmt() 2028 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in mesh_recv_mgmt() 2088 (void)ic->ic_recv_action(ni, wh, frm, efrm); in mesh_recv_mgmt() 2130 const uint8_t *frm, const uint8_t *efrm, in mesh_parse_meshpeering_action() argument 2140 while (efrm - frm > 1) { in mesh_parse_meshpeering_action() 2141 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return NULL); in mesh_parse_meshpeering_action() 2260 const uint8_t *frm, const uint8_t *efrm) in mesh_recv_action_meshpeering_open() argument 2269 meshpeer = mesh_parse_meshpeering_action(ni, wh, frm+2+2, efrm, &ie, in mesh_recv_action_meshpeering_open() [all …]
|
| HD | ieee80211_wds.c | 751 u_int8_t *frm, *efrm; in wds_recv_mgmt() local 755 efrm = mtod(m0, u_int8_t *) + m0->m_len; in wds_recv_mgmt() 775 (void)ic->ic_recv_action(ni, wh, frm, efrm); in wds_recv_mgmt()
|
| HD | ieee80211_ht.c | 1932 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_addba_request() argument 1998 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_addba_response() argument 2072 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_delba() argument 2103 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ht_txchwidth() argument 2122 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ht_mimopwrsave() argument
|
| HD | ieee80211_hwmp.c | 407 const uint8_t *frm, const uint8_t *efrm) in hwmp_recv_action_meshpath() argument 419 while (efrm - iefrm > 1) { in hwmp_recv_action_meshpath() 420 IEEE80211_VERIFY_LENGTH(efrm - iefrm, iefrm[1] + 2, return 0); in hwmp_recv_action_meshpath()
|
| HD | ieee80211_var.h | 317 const uint8_t *frm, const uint8_t *efrm);
|
| /NextBSD/sys/dev/if_ndis/ |
| HD | if_ndis.c | 3274 uint8_t *frm, *efrm; in ndis_scan_results() local 3327 efrm = frm + wb->nwbx_ielen; in ndis_scan_results() 3328 if (efrm - frm < 12) in ndis_scan_results() 3334 sp.ies_len = efrm - frm; in ndis_scan_results()
|
| /NextBSD/sys/dev/ipw/ |
| HD | if_ipw.c | 1110 uint8_t *frm, *efrm; in ipw_fix_channel() local 1125 efrm = mtod(m, uint8_t *) + m->m_len; in ipw_fix_channel() 1128 while (frm < efrm) { in ipw_fix_channel()
|
| /NextBSD/sys/dev/iwi/ |
| HD | if_iwi.c | 1296 const uint8_t *frm, *efrm, *wme; in iwi_checkforqos() local 1314 efrm = ((const uint8_t *) wh) + len; in iwi_checkforqos() 1324 while (efrm - frm > 1) { in iwi_checkforqos() 1325 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in iwi_checkforqos()
|
| /NextBSD/sys/dev/mwl/ |
| HD | if_mwl.c | 3554 const uint8_t *frm, const uint8_t *efrm) in mwl_recv_action() argument 3570 return sc->sc_recv_action(ni, wh, frm, efrm); in mwl_recv_action()
|