1057 	int bytes_left; /* bytes left in ip packet */  in sctp_PktParser()  local
1077 	bytes_left = ntohs(pip->ip_len) - (pip->ip_hl << 2);  in sctp_PktParser()
1080 	if (bytes_left < sizeof(struct sctphdr)) {  in sctp_PktParser()
1086 	bytes_left -= sizeof(struct sctphdr);  in sctp_PktParser()
1093 	if (bytes_left < SN_MIN_CHUNK_SIZE) /* malformed chunk - could cause endless loop*/  in sctp_PktParser()
1100 …if ((chunk_length < SN_MIN_CHUNK_SIZE) || (chunk_length > bytes_left)) /* malformed chunk - could …  in sctp_PktParser()
1229 		bytes_left-= chunk_length;  in sctp_PktParser()
1232 		if (bytes_left == 0)  in sctp_PktParser()
1236 		if (bytes_left < SN_MIN_CHUNK_SIZE)  in sctp_PktParser()
1243 		if ((chunk_length < SN_MIN_CHUNK_SIZE) || (chunk_length > bytes_left))  in sctp_PktParser()
1285 	int bytes_left;  in GetAsconfVtags()  local
1292 	bytes_left = sm->chunk_length;  in GetAsconfVtags()
1294 	while((bytes_left >= param_size) && (bytes_left >= SN_VTAG_PARAM_SIZE)) {  in GetAsconfVtags()
1313 		bytes_left -= param_size;  in GetAsconfVtags()
1314 		if (bytes_left < SN_MIN_PARAM_SIZE)  in GetAsconfVtags()
1347 	int bytes_left = 0;  in AddGlobalIPAddresses()  local
1354 		bytes_left = 0; /* force exit */  in AddGlobalIPAddresses()
1361 			bytes_left = sm->chunk_length - sizeof(struct sctp_init_chunk);  in AddGlobalIPAddresses()
1365 			bytes_left = sm->chunk_length - sizeof(struct sctp_init_ack_chunk);  in AddGlobalIPAddresses()
1369 			bytes_left = sm->chunk_length;  in AddGlobalIPAddresses()
1374 	if (bytes_left >= SN_MIN_PARAM_SIZE)  in AddGlobalIPAddresses()
1377 		param_size = bytes_left+1; /* force skip loop */  in AddGlobalIPAddresses()
1379 …if ((assoc->state == SN_ID) && ((sm->msg == SN_SCTP_INIT) || (bytes_left < SN_MIN_PARAM_SIZE))) {/…  in AddGlobalIPAddresses()
1397 	while((bytes_left >= param_size) && (bytes_left >= sizeof(struct sctp_ipv4addr_param))) {  in AddGlobalIPAddresses()
1439 		bytes_left -= param_size;  in AddGlobalIPAddresses()
1440 		if (bytes_left < SN_MIN_PARAM_SIZE)  in AddGlobalIPAddresses()
1509 	int bytes_left;  in RmGlobalIPAddresses()  local
1513 	bytes_left = sm->chunk_length;  in RmGlobalIPAddresses()
1516 	if (bytes_left >= SN_MIN_PARAM_SIZE) {  in RmGlobalIPAddresses()
1526 	while((bytes_left >= param_size) && (bytes_left >= sizeof(struct sctp_ipv4addr_param))) {  in RmGlobalIPAddresses()
1561 		bytes_left -= param_size;  in RmGlobalIPAddresses()
1562 		if (bytes_left == 0)  in RmGlobalIPAddresses()
1564 		else if (bytes_left < SN_MIN_PARAM_SIZE) {  in RmGlobalIPAddresses()
1608 	int bytes_left;  in IsASCONFack()  local
1618 	bytes_left = sm->chunk_length;  in IsASCONFack()
1619 	if (bytes_left < param_size)  in IsASCONFack()
1622 	while(bytes_left >= SN_ASCONFACK_PARAM_SIZE) {  in IsASCONFack()
1626 		bytes_left -= param_size;  in IsASCONFack()
1627 		if (bytes_left >= SN_MIN_PARAM_SIZE)  in IsASCONFack()
1633 		if (bytes_left < param_size)  in IsASCONFack()
1662 	int bytes_left;  in IsADDorDEL()  local
1670 	bytes_left = sm->chunk_length;  in IsADDorDEL()
1671 	if (bytes_left < param_size)  in IsADDorDEL()
1674 	while(bytes_left >= SN_ASCONFACK_PARAM_SIZE) {  in IsADDorDEL()
1680 		bytes_left -= param_size;  in IsADDorDEL()
1681 		if (bytes_left >= SN_MIN_PARAM_SIZE)  in IsADDorDEL()
1687 		if (bytes_left < param_size)  in IsADDorDEL()