461 					 size_t slen, u8 dialog_token)  in hs20_process_icon_binary_file()  argument
472 			icon->image = os_memdup(pos, slen);  in hs20_process_icon_binary_file()
475 			icon->image_len = slen;  in hs20_process_icon_binary_file()
488 	if (slen < 4) {  in hs20_process_icon_binary_file()
498 	slen--;  in hs20_process_icon_binary_file()
500 	if ((size_t) 1 + pos[0] > slen) {  in hs20_process_icon_binary_file()
507 	slen -= 1 + pos[0];  in hs20_process_icon_binary_file()
510 	if (slen < 2) {  in hs20_process_icon_binary_file()
517 	slen -= 2;  in hs20_process_icon_binary_file()
519 	if (data_len > slen) {  in hs20_process_icon_binary_file()
541 	if (fwrite(pos, slen, 1, f) != 1) {  in hs20_process_icon_binary_file()
591 				  const u8 *data, size_t slen, u8 dialog_token)  in hs20_parse_rx_hs20_anqp_resp()  argument
598 	if (slen < 2)  in hs20_parse_rx_hs20_anqp_resp()
605 	slen--;  in hs20_parse_rx_hs20_anqp_resp()
608 	slen--;  in hs20_parse_rx_hs20_anqp_resp()
614 		wpa_hexdump_ascii(MSG_DEBUG, "HS Capability List", pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
618 				wpabuf_alloc_copy(pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
624 		wpa_hexdump_ascii(MSG_DEBUG, "oper friendly name", pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
628 				wpabuf_alloc_copy(pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
632 		wpa_hexdump(MSG_DEBUG, "WAN Metrics", pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
633 		if (slen < 13) {  in hs20_parse_rx_hs20_anqp_resp()
644 			anqp->hs20_wan_metrics = wpabuf_alloc_copy(pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
650 		wpa_hexdump_ascii(MSG_DEBUG, "conn capability", pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
654 				wpabuf_alloc_copy(pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
660 		wpa_hexdump_ascii(MSG_DEBUG, "Operating Class", pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
664 				wpabuf_alloc_copy(pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
674 				wpabuf_alloc_copy(pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
678 		ret = hs20_process_icon_binary_file(wpa_s, sa, pos, slen,  in hs20_parse_rx_hs20_anqp_resp()
691 		wpa_hexdump(MSG_DEBUG, "Operator Icon Metadata", pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
695 				wpabuf_alloc_copy(pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
704 				wpabuf_alloc_copy(pos, slen);  in hs20_parse_rx_hs20_anqp_resp()
903 		u8 slen;  in hs20_osu_add_prov()  local
905 		slen = pos2[0];  in hs20_osu_add_prov()
906 		if (1 + slen > pos - pos2) {  in hs20_osu_add_prov()
910 		if (slen < 3) {  in hs20_osu_add_prov()
919 		slen -= 3;  in hs20_osu_add_prov()
920 		os_memcpy(f->text, pos2, slen);  in hs20_osu_add_prov()
921 		pos2 += slen;  in hs20_osu_add_prov()