2435 	t_scalar_t		alen, aoff;  in tl_bind()  local
2464 	aoff = bind->ADDR_offset;  in tl_bind()
2493 		    (aoff < 0) ||  in tl_bind()
2494 		    (aoff + alen > msz)) {  in tl_bind()
2504 		bcopy(mp->b_rptr + aoff, &ux_addr, sizeof (ux_addr));  in tl_bind()
2539 		if ((alen > 0) && ((aoff < 0) ||  in tl_bind()
2540 		    ((ssize_t)(aoff + alen) > msz) ||  in tl_bind()
2541 		    ((aoff + alen) < 0))) {  in tl_bind()
2564 		if (!((alen == 0 && aoff == 0) ||  in tl_bind()
2565 			(aoff >= (t_scalar_t)(sizeof (struct T_bind_req))))) {  in tl_bind()
2637 		addr_req.ta_abuf = (mp->b_rptr + aoff);  in tl_bind()
2897 	t_scalar_t		alen, aoff, olen, ooff,	err = 0;  in tl_conn_req()  local
2951 	aoff = creq->DEST_offset;  in tl_conn_req()
2959 		    (aoff < 0) ||  in tl_conn_req()
2960 		    (aoff + alen > msz) ||  in tl_conn_req()
2969 		bcopy(mp->b_rptr + aoff, &ux_addr, TL_SOUX_ADDRLEN);  in tl_conn_req()
2980 		if ((alen > 0 && ((aoff + alen) > msz || aoff + alen < 0)) ||  in tl_conn_req()
2992 		if (alen <= 0 || aoff < 0 ||  in tl_conn_req()
3009 		if (!(aoff >= (t_scalar_t)sizeof (struct T_conn_req))) {  in tl_conn_req()
3048 	dst.ta_abuf = mp->b_rptr + aoff;  in tl_conn_req()
5097 	t_scalar_t		alen, aoff, olen, ooff;  in tl_unitdata()  local
5132 	aoff = udreq->DEST_offset;  in tl_unitdata()
5140 		    (aoff < 0) ||  in tl_unitdata()
5141 		    (aoff + alen > msz) ||  in tl_unitdata()
5148 			    (int)msz, alen, aoff, olen, ooff));  in tl_unitdata()
5152 		bcopy(mp->b_rptr + aoff, &ux_addr, TL_SOUX_ADDRLEN);  in tl_unitdata()
5164 		    (aoff < 0) ||  in tl_unitdata()
5165 		    ((alen > 0) && ((aoff + alen) > msz)) ||  in tl_unitdata()
5167 		    ((aoff + alen) < 0) ||  in tl_unitdata()
5193 	if (!(aoff >= (t_scalar_t)sizeof (struct T_unitdata_req))) {  in tl_unitdata()
5202 	destaddr.ta_abuf = mp->b_rptr + aoff;  in tl_unitdata()