21 	const u8 *pos, *end;  in wfd_wsd_supported()  local
28 	pos = wpabuf_head(wfd);  in wfd_wsd_supported()
29 	end = pos + wpabuf_len(wfd);  in wfd_wsd_supported()
31 	while (end - pos >= 3) {  in wfd_wsd_supported()
32 		subelem = *pos++;  in wfd_wsd_supported()
33 		len = WPA_GET_BE16(pos);  in wfd_wsd_supported()
34 		pos += 2;  in wfd_wsd_supported()
35 		if (len > end - pos)  in wfd_wsd_supported()
39 			u16 info = WPA_GET_BE16(pos);  in wfd_wsd_supported()
43 		pos += len;  in wfd_wsd_supported()
329 	const u8 *pos = data;  in p2p_rx_gas_initial_req()  local
352 	dialog_token = *pos++;  in p2p_rx_gas_initial_req()
357 	if (*pos != WLAN_EID_ADV_PROTO) {  in p2p_rx_gas_initial_req()
358 		p2p_dbg(p2p, "Unexpected IE in GAS Initial Request: %u", *pos);  in p2p_rx_gas_initial_req()
361 	pos++;  in p2p_rx_gas_initial_req()
363 	slen = *pos++;  in p2p_rx_gas_initial_req()
364 	if (slen > end - pos || slen < 2) {  in p2p_rx_gas_initial_req()
368 	next = pos + slen;  in p2p_rx_gas_initial_req()
369 	pos++; /* skip QueryRespLenLimit and PAME-BI */  in p2p_rx_gas_initial_req()
371 	if (*pos != ACCESS_NETWORK_QUERY_PROTOCOL) {  in p2p_rx_gas_initial_req()
373 			*pos);  in p2p_rx_gas_initial_req()
377 	pos = next;  in p2p_rx_gas_initial_req()
379 	if (end - pos < 2)  in p2p_rx_gas_initial_req()
381 	slen = WPA_GET_LE16(pos);  in p2p_rx_gas_initial_req()
382 	pos += 2;  in p2p_rx_gas_initial_req()
383 	if (slen > end - pos)  in p2p_rx_gas_initial_req()
385 	end = pos + slen;  in p2p_rx_gas_initial_req()
388 	if (end - pos < 4)  in p2p_rx_gas_initial_req()
390 	if (WPA_GET_LE16(pos) != ANQP_VENDOR_SPECIFIC) {  in p2p_rx_gas_initial_req()
391 		p2p_dbg(p2p, "Unsupported ANQP Info ID %u", WPA_GET_LE16(pos));  in p2p_rx_gas_initial_req()
394 	pos += 2;  in p2p_rx_gas_initial_req()
396 	slen = WPA_GET_LE16(pos);  in p2p_rx_gas_initial_req()
397 	pos += 2;  in p2p_rx_gas_initial_req()
398 	if (slen > end - pos || slen < 3 + 1) {  in p2p_rx_gas_initial_req()
403 	if (WPA_GET_BE32(pos) != P2P_IE_VENDOR_TYPE) {  in p2p_rx_gas_initial_req()
405 			WPA_GET_BE32(pos));  in p2p_rx_gas_initial_req()
408 	pos += 4;  in p2p_rx_gas_initial_req()
410 	if (end - pos < 2)  in p2p_rx_gas_initial_req()
412 	update_indic = WPA_GET_LE16(pos);  in p2p_rx_gas_initial_req()
414 	pos += 2;  in p2p_rx_gas_initial_req()
417 			     update_indic, pos, end - pos);  in p2p_rx_gas_initial_req()
483 	const u8 *pos = data;  in p2p_rx_gas_initial_resp()  local
518 	dialog_token = *pos++;  in p2p_rx_gas_initial_resp()
520 	status_code = WPA_GET_LE16(pos);  in p2p_rx_gas_initial_resp()
521 	pos += 2;  in p2p_rx_gas_initial_resp()
522 	comeback_delay = WPA_GET_LE16(pos);  in p2p_rx_gas_initial_resp()
523 	pos += 2;  in p2p_rx_gas_initial_resp()
532 	if (*pos != WLAN_EID_ADV_PROTO) {  in p2p_rx_gas_initial_resp()
533 		p2p_dbg(p2p, "Unexpected IE in GAS Initial Response: %u", *pos);  in p2p_rx_gas_initial_resp()
536 	pos++;  in p2p_rx_gas_initial_resp()
538 	slen = *pos++;  in p2p_rx_gas_initial_resp()
539 	if (slen > end - pos || slen < 2) {  in p2p_rx_gas_initial_resp()
543 	next = pos + slen;  in p2p_rx_gas_initial_resp()
544 	pos++; /* skip QueryRespLenLimit and PAME-BI */  in p2p_rx_gas_initial_resp()
546 	if (*pos != ACCESS_NETWORK_QUERY_PROTOCOL) {  in p2p_rx_gas_initial_resp()
548 			*pos);  in p2p_rx_gas_initial_resp()
552 	pos = next;  in p2p_rx_gas_initial_resp()
554 	if (end - pos < 2) {  in p2p_rx_gas_initial_resp()
558 	slen = WPA_GET_LE16(pos);  in p2p_rx_gas_initial_resp()
559 	pos += 2;  in p2p_rx_gas_initial_resp()
561 	if (slen > end - pos) {  in p2p_rx_gas_initial_resp()
565 	end = pos + slen;  in p2p_rx_gas_initial_resp()
579 	if (end - pos < 4)  in p2p_rx_gas_initial_resp()
581 	if (WPA_GET_LE16(pos) != ANQP_VENDOR_SPECIFIC) {  in p2p_rx_gas_initial_resp()
582 		p2p_dbg(p2p, "Unsupported ANQP Info ID %u", WPA_GET_LE16(pos));  in p2p_rx_gas_initial_resp()
585 	pos += 2;  in p2p_rx_gas_initial_resp()
587 	slen = WPA_GET_LE16(pos);  in p2p_rx_gas_initial_resp()
588 	pos += 2;  in p2p_rx_gas_initial_resp()
589 	if (slen > end - pos || slen < 3 + 1) {  in p2p_rx_gas_initial_resp()
594 	if (WPA_GET_BE32(pos) != P2P_IE_VENDOR_TYPE) {  in p2p_rx_gas_initial_resp()
596 			WPA_GET_BE32(pos));  in p2p_rx_gas_initial_resp()
599 	pos += 4;  in p2p_rx_gas_initial_resp()
601 	if (end - pos < 2)  in p2p_rx_gas_initial_resp()
603 	update_indic = WPA_GET_LE16(pos);  in p2p_rx_gas_initial_resp()
605 	pos += 2;  in p2p_rx_gas_initial_resp()
623 				      pos, end - pos);  in p2p_rx_gas_initial_resp()
704 	const u8 *pos = data;  in p2p_rx_gas_comeback_resp()  local
733 	dialog_token = *pos++;  in p2p_rx_gas_comeback_resp()
735 	status_code = WPA_GET_LE16(pos);  in p2p_rx_gas_comeback_resp()
736 	pos += 2;  in p2p_rx_gas_comeback_resp()
737 	frag_id = *pos & 0x7f;  in p2p_rx_gas_comeback_resp()
738 	more_frags = (*pos & 0x80) >> 7;  in p2p_rx_gas_comeback_resp()
739 	pos++;  in p2p_rx_gas_comeback_resp()
740 	comeback_delay = WPA_GET_LE16(pos);  in p2p_rx_gas_comeback_resp()
741 	pos += 2;  in p2p_rx_gas_comeback_resp()
753 	if (*pos != WLAN_EID_ADV_PROTO) {  in p2p_rx_gas_comeback_resp()
755 			*pos);  in p2p_rx_gas_comeback_resp()
758 	pos++;  in p2p_rx_gas_comeback_resp()
760 	slen = *pos++;  in p2p_rx_gas_comeback_resp()
761 	if (slen > end - pos || slen < 2) {  in p2p_rx_gas_comeback_resp()
765 	next = pos + slen;  in p2p_rx_gas_comeback_resp()
766 	pos++; /* skip QueryRespLenLimit and PAME-BI */  in p2p_rx_gas_comeback_resp()
768 	if (*pos != ACCESS_NETWORK_QUERY_PROTOCOL) {  in p2p_rx_gas_comeback_resp()
770 			*pos);  in p2p_rx_gas_comeback_resp()
774 	pos = next;  in p2p_rx_gas_comeback_resp()
776 	if (end - pos < 2) {  in p2p_rx_gas_comeback_resp()
780 	slen = WPA_GET_LE16(pos);  in p2p_rx_gas_comeback_resp()
781 	pos += 2;  in p2p_rx_gas_comeback_resp()
783 	if (slen > end - pos) {  in p2p_rx_gas_comeback_resp()
791 	end = pos + slen;  in p2p_rx_gas_comeback_resp()
802 	if (end - pos < 4)  in p2p_rx_gas_comeback_resp()
804 	if (WPA_GET_LE16(pos) != ANQP_VENDOR_SPECIFIC) {  in p2p_rx_gas_comeback_resp()
805 		p2p_dbg(p2p, "Unsupported ANQP Info ID %u", WPA_GET_LE16(pos));  in p2p_rx_gas_comeback_resp()
808 	pos += 2;  in p2p_rx_gas_comeback_resp()
810 	slen = WPA_GET_LE16(pos);  in p2p_rx_gas_comeback_resp()
811 	pos += 2;  in p2p_rx_gas_comeback_resp()
817 	if (end - pos < 4)  in p2p_rx_gas_comeback_resp()
820 	if (WPA_GET_BE32(pos) != P2P_IE_VENDOR_TYPE) {  in p2p_rx_gas_comeback_resp()
822 			WPA_GET_BE32(pos));  in p2p_rx_gas_comeback_resp()
825 	pos += 4;  in p2p_rx_gas_comeback_resp()
827 	if (end - pos < 2)  in p2p_rx_gas_comeback_resp()
829 	p2p->sd_rx_update_indic = WPA_GET_LE16(pos);  in p2p_rx_gas_comeback_resp()
831 	pos += 2;  in p2p_rx_gas_comeback_resp()
834 	if (wpabuf_resize(&p2p->sd_rx_resp, end - pos) < 0)  in p2p_rx_gas_comeback_resp()
836 	wpabuf_put_data(p2p->sd_rx_resp, pos, end - pos);  in p2p_rx_gas_comeback_resp()