2358 	t_scalar_t		alen, aoff;  in tl_bind()  local
2386 	aoff = bind->ADDR_offset;  in tl_bind()
2414 		    (aoff < 0) ||  in tl_bind()
2415 		    (aoff + alen > msz)) {  in tl_bind()
2424 		bcopy(mp->b_rptr + aoff, &ux_addr, sizeof (ux_addr));  in tl_bind()
2456 		if ((alen > 0) && ((aoff < 0) ||  in tl_bind()
2457 		    ((ssize_t)(aoff + alen) > msz) ||  in tl_bind()
2458 		    ((aoff + alen) < 0))) {  in tl_bind()
2480 		if (! ((alen == 0 && aoff == 0) ||  in tl_bind()
2481 			(aoff >= (t_scalar_t)(sizeof (struct T_bind_req))))) {  in tl_bind()
2551 		addr_req.ta_abuf = (mp->b_rptr + aoff);  in tl_bind()
2808 	t_scalar_t		alen, aoff, olen, ooff,	err = 0;  in tl_conn_req()  local
2862 	aoff = creq->DEST_offset;  in tl_conn_req()
2870 		    (aoff < 0) ||  in tl_conn_req()
2871 		    (aoff + alen > msz) ||  in tl_conn_req()
2880 		bcopy(mp->b_rptr + aoff, &ux_addr, TL_SOUX_ADDRLEN);  in tl_conn_req()
2891 		if ((alen > 0 && ((aoff + alen) > msz || aoff + alen < 0)) ||  in tl_conn_req()
2903 		if (alen <= 0 || aoff < 0 ||  in tl_conn_req()
2920 		if (! (aoff >= (t_scalar_t)sizeof (struct T_conn_req))) {  in tl_conn_req()
2959 	dst.ta_abuf = mp->b_rptr + aoff;  in tl_conn_req()
5004 	t_scalar_t		alen, aoff, olen, ooff;  in tl_unitdata()  local
5039 	aoff = udreq->DEST_offset;  in tl_unitdata()
5047 		    (aoff < 0) ||  in tl_unitdata()
5048 		    (aoff + alen > msz) ||  in tl_unitdata()
5055 			    (int)msz, alen, aoff, olen, ooff));  in tl_unitdata()
5059 		bcopy(mp->b_rptr + aoff, &ux_addr, TL_SOUX_ADDRLEN);  in tl_unitdata()
5071 		    (aoff < 0) ||  in tl_unitdata()
5072 		    ((alen > 0) && ((aoff + alen) > msz)) ||  in tl_unitdata()
5074 		    ((aoff + alen) < 0) ||  in tl_unitdata()
5100 	if (! (aoff >= (t_scalar_t)sizeof (struct T_unitdata_req))) {  in tl_unitdata()
5109 	destaddr.ta_abuf = mp->b_rptr + aoff;  in tl_unitdata()