366 		       struct smb_acl *pdacl, char *end_of_acl,  in parse_dacl()  argument
380 	if (!pdacl)  in parse_dacl()
384 	if (end_of_acl < (char *)pdacl + sizeof(struct smb_acl) ||  in parse_dacl()
385 	    end_of_acl < (char *)pdacl + le16_to_cpu(pdacl->size)) {  in parse_dacl()
391 		    le16_to_cpu(pdacl->revision), le16_to_cpu(pdacl->size),  in parse_dacl()
392 		    le16_to_cpu(pdacl->num_aces));  in parse_dacl()
394 	acl_base = (char *)pdacl;  in parse_dacl()
397 	num_aces = le16_to_cpu(pdacl->num_aces);  in parse_dacl()
401 	if (num_aces > (le16_to_cpu(pdacl->size) - sizeof(struct smb_acl)) /  in parse_dacl()
1131 		struct smb_acl *pdacl;  in smb_inherit_dacl()  local
1203 			pdacl = (struct smb_acl *)((char *)pntsd + le32_to_cpu(pntsd->dacloffset));  in smb_inherit_dacl()
1204 			pdacl->revision = cpu_to_le16(2);  in smb_inherit_dacl()
1205 			pdacl->size = cpu_to_le16(sizeof(struct smb_acl) + nt_size);  in smb_inherit_dacl()
1206 			pdacl->num_aces = cpu_to_le16(ace_cnt);  in smb_inherit_dacl()
1207 			pace = (struct smb_ace *)((char *)pdacl + sizeof(struct smb_acl));  in smb_inherit_dacl()
1241 	struct smb_acl *pdacl;  in smb_check_perm_dacl()  local
1265 	pdacl = (struct smb_acl *)((char *)pntsd + le32_to_cpu(pntsd->dacloffset));  in smb_check_perm_dacl()
1267 	pdacl_size = le16_to_cpu(pdacl->size);  in smb_check_perm_dacl()
1272 	if (!pdacl->num_aces) {  in smb_check_perm_dacl()
1285 		ace = (struct smb_ace *)((char *)pdacl + sizeof(struct smb_acl));  in smb_check_perm_dacl()
1287 		for (i = 0; i < le16_to_cpu(pdacl->num_aces); i++) {  in smb_check_perm_dacl()
1298 		if (!pdacl->num_aces)  in smb_check_perm_dacl()
1306 	ace = (struct smb_ace *)((char *)pdacl + sizeof(struct smb_acl));  in smb_check_perm_dacl()
1308 	for (i = 0; i < le16_to_cpu(pdacl->num_aces); i++) {  in smb_check_perm_dacl()
1333 		if (!pdacl->num_aces)  in smb_check_perm_dacl()