1441 		u8 url_len;  in ieee802_11_rx_bss_trans_mgmt_req()  local
1448 		url_len = *pos++;  in ieee802_11_rx_bss_trans_mgmt_req()
1449 		if (url_len > end - pos) {  in ieee802_11_rx_bss_trans_mgmt_req()
1454 		os_memcpy(url, pos, url_len);  in ieee802_11_rx_bss_trans_mgmt_req()
1455 		url[url_len] = '\0';  in ieee802_11_rx_bss_trans_mgmt_req()
1456 		pos += url_len;  in ieee802_11_rx_bss_trans_mgmt_req()
1761 			u8 url_len;  in ieee802_11_rx_wnm_notif_req_wfa()  local
1769 			url_len = *pos++;  in ieee802_11_rx_wnm_notif_req_wfa()
1770 			if (url_len == 0) {  in ieee802_11_rx_wnm_notif_req_wfa()
1775 				if (url_len + 1 > ie_end - pos) {  in ieee802_11_rx_wnm_notif_req_wfa()
1777 						   url_len,  in ieee802_11_rx_wnm_notif_req_wfa()
1781 				url = os_malloc(url_len + 1);  in ieee802_11_rx_wnm_notif_req_wfa()
1784 				os_memcpy(url, pos, url_len);  in ieee802_11_rx_wnm_notif_req_wfa()
1785 				url[url_len] = '\0';  in ieee802_11_rx_wnm_notif_req_wfa()
1786 				osu_method = pos[url_len];  in ieee802_11_rx_wnm_notif_req_wfa()
1799 			u8 url_len;  in ieee802_11_rx_wnm_notif_req_wfa()  local
1809 			url_len = *pos++;  in ieee802_11_rx_wnm_notif_req_wfa()
1813 				   code, reauth_delay, url_len);  in ieee802_11_rx_wnm_notif_req_wfa()
1814 			if (url_len > ie_end - pos)  in ieee802_11_rx_wnm_notif_req_wfa()
1816 			url = os_malloc(url_len + 1);  in ieee802_11_rx_wnm_notif_req_wfa()
1819 			os_memcpy(url, pos, url_len);  in ieee802_11_rx_wnm_notif_req_wfa()
1820 			url[url_len] = '\0';  in ieee802_11_rx_wnm_notif_req_wfa()
1832 			u8 url_len;  in ieee802_11_rx_wnm_notif_req_wfa()  local
1837 			url_len = *pos++;  in ieee802_11_rx_wnm_notif_req_wfa()
1840 				   url_len);  in ieee802_11_rx_wnm_notif_req_wfa()
1841 			if (url_len > ie_end - pos)  in ieee802_11_rx_wnm_notif_req_wfa()
1843 			url = os_malloc(url_len + 1);  in ieee802_11_rx_wnm_notif_req_wfa()
1846 			os_memcpy(url, pos, url_len);  in ieee802_11_rx_wnm_notif_req_wfa()
1847 			url[url_len] = '\0';  in ieee802_11_rx_wnm_notif_req_wfa()