416 	struct iw_event iwe_buf, *iwe = &iwe_buf;  in wpa_driver_wext_event_wireless()  local
427 			   iwe->cmd, iwe->len);  in wpa_driver_wext_event_wireless()
428 		if (iwe->len <= IW_EV_LCP_LEN || iwe->len > end - pos)  in wpa_driver_wext_event_wireless()
433 		    (iwe->cmd == IWEVMICHAELMICFAILURE ||  in wpa_driver_wext_event_wireless()
434 		     iwe->cmd == IWEVCUSTOM ||  in wpa_driver_wext_event_wireless()
435 		     iwe->cmd == IWEVASSOCREQIE ||  in wpa_driver_wext_event_wireless()
436 		     iwe->cmd == IWEVASSOCRESPIE ||  in wpa_driver_wext_event_wireless()
437 		     iwe->cmd == IWEVPMKIDCAND)) {  in wpa_driver_wext_event_wireless()
448 		switch (iwe->cmd) {  in wpa_driver_wext_event_wireless()
452 				   MAC2STR((u8 *) iwe->u.ap_addr.sa_data));  in wpa_driver_wext_event_wireless()
454 				    (const u8 *) iwe->u.ap_addr.sa_data) ||  in wpa_driver_wext_event_wireless()
456 					     iwe->u.ap_addr.sa_data,  in wpa_driver_wext_event_wireless()
473 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
479 				drv->ctx, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
482 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
487 			buf = dup_binstr(custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
501 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
507 				drv, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
510 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
516 				drv, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
519 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
525 				drv, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
529 		pos += iwe->len;  in wpa_driver_wext_event_wireless()
1206 static void wext_get_scan_mode(struct iw_event *iwe,  in wext_get_scan_mode()  argument
1209 	if (iwe->u.mode == IW_MODE_ADHOC)  in wext_get_scan_mode()
1211 	else if (iwe->u.mode == IW_MODE_MASTER || iwe->u.mode == IW_MODE_INFRA)  in wext_get_scan_mode()
1216 static void wext_get_scan_ssid(struct iw_event *iwe,  in wext_get_scan_ssid()  argument
1220 	int ssid_len = iwe->u.essid.length;  in wext_get_scan_ssid()
1223 	if (iwe->u.essid.flags &&  in wext_get_scan_ssid()
1232 static void wext_get_scan_freq(struct iw_event *iwe,  in wext_get_scan_freq()  argument
1237 	if (iwe->u.freq.e == 0) {  in wext_get_scan_freq()
1250 		if (iwe->u.freq.m >= 1 && iwe->u.freq.m <= 13) {  in wext_get_scan_freq()
1251 			res->res.freq = 2407 + 5 * iwe->u.freq.m;  in wext_get_scan_freq()
1253 		} else if (iwe->u.freq.m == 14) {  in wext_get_scan_freq()
1259 	if (iwe->u.freq.e > 6) {  in wext_get_scan_freq()
1262 			   MAC2STR(res->res.bssid), iwe->u.freq.m,  in wext_get_scan_freq()
1263 			   iwe->u.freq.e);  in wext_get_scan_freq()
1267 	for (i = 0; i < iwe->u.freq.e; i++)  in wext_get_scan_freq()
1269 	res->res.freq = iwe->u.freq.m / divi;  in wext_get_scan_freq()
1274 			       struct iw_event *iwe,  in wext_get_scan_qual()  argument
1277 	res->res.qual = iwe->u.qual.qual;  in wext_get_scan_qual()
1278 	res->res.noise = iwe->u.qual.noise;  in wext_get_scan_qual()
1279 	res->res.level = iwe->u.qual.level;  in wext_get_scan_qual()
1280 	if (iwe->u.qual.updated & IW_QUAL_QUAL_INVALID)  in wext_get_scan_qual()
1282 	if (iwe->u.qual.updated & IW_QUAL_LEVEL_INVALID)  in wext_get_scan_qual()
1284 	if (iwe->u.qual.updated & IW_QUAL_NOISE_INVALID)  in wext_get_scan_qual()
1286 	if (iwe->u.qual.updated & IW_QUAL_DBM)  in wext_get_scan_qual()
1288 	if ((iwe->u.qual.updated & IW_QUAL_DBM) ||  in wext_get_scan_qual()
1289 	    ((iwe->u.qual.level != 0) &&  in wext_get_scan_qual()
1290 	     (iwe->u.qual.level > drv->max_level))) {  in wext_get_scan_qual()
1291 		if (iwe->u.qual.level >= 64)  in wext_get_scan_qual()
1293 		if (iwe->u.qual.noise >= 64)  in wext_get_scan_qual()
1299 static void wext_get_scan_encode(struct iw_event *iwe,  in wext_get_scan_encode()  argument
1302 	if (!(iwe->u.data.flags & IW_ENCODE_DISABLED))  in wext_get_scan_encode()
1307 static void wext_get_scan_rate(struct iw_event *iwe,  in wext_get_scan_rate()  argument
1316 	clen = iwe->len;  in wext_get_scan_rate()
1336 static void wext_get_scan_iwevgenie(struct iw_event *iwe,  in wext_get_scan_iwevgenie()  argument
1343 	if (iwe->u.data.length == 0)  in wext_get_scan_iwevgenie()
1347 	gend = genie + iwe->u.data.length;  in wext_get_scan_iwevgenie()
1362 static void wext_get_scan_custom(struct iw_event *iwe,  in wext_get_scan_custom()  argument
1369 	clen = iwe->u.data.length;  in wext_get_scan_custom()
1510 	struct iw_event iwe_buf, *iwe = &iwe_buf;  in wpa_driver_wext_get_scan_results()  local
1535 		if (iwe->len <= IW_EV_LCP_LEN || iwe->len > end - pos)  in wpa_driver_wext_get_scan_results()
1539 		if (wext_19_iw_point(drv, iwe->cmd)) {  in wpa_driver_wext_get_scan_results()
1550 		switch (iwe->cmd) {  in wpa_driver_wext_get_scan_results()
1558 				  iwe->u.ap_addr.sa_data, ETH_ALEN);  in wpa_driver_wext_get_scan_results()
1561 			wext_get_scan_mode(iwe, &data);  in wpa_driver_wext_get_scan_results()
1564 			wext_get_scan_ssid(iwe, &data, custom, end);  in wpa_driver_wext_get_scan_results()
1567 			wext_get_scan_freq(iwe, &data);  in wpa_driver_wext_get_scan_results()
1570 			wext_get_scan_qual(drv, iwe, &data);  in wpa_driver_wext_get_scan_results()
1573 			wext_get_scan_encode(iwe, &data);  in wpa_driver_wext_get_scan_results()
1576 			wext_get_scan_rate(iwe, &data, pos, end);  in wpa_driver_wext_get_scan_results()
1579 			wext_get_scan_iwevgenie(iwe, &data, custom, end);  in wpa_driver_wext_get_scan_results()
1582 			wext_get_scan_custom(iwe, &data, custom, end);  in wpa_driver_wext_get_scan_results()
1586 		pos += iwe->len;  in wpa_driver_wext_get_scan_results()