74 	uint16_t payload_len = 0;  in isns_rcv_pdu()  local
124 	payload_len = ntohs(tmp_pdu_hdr->payload_len);  in isns_rcv_pdu()
126 	if (payload_len > ISNSP_MAX_PAYLOAD_SIZE) {  in isns_rcv_pdu()
132 	tmp_pdu_data = malloc(payload_len);  in isns_rcv_pdu()
139 	iovec[0].iov_len = payload_len;  in isns_rcv_pdu()
173 	*pdu_size = ISNSP_HEADER_SIZE + payload_len;  in isns_rcv_pdu()
183 	(*pdu)->payload_len = payload_len;  in isns_rcv_pdu()
187 	(void) memcpy(&((*pdu)->payload), tmp_pdu_data, payload_len);  in isns_rcv_pdu()
238 	pdu->payload_len = htons(pl);  in isns_send_pdu()
254 		pdu->payload_len = htons(send_len);  in isns_send_pdu()
495 	uint16_t payload_len = pdu->payload_len;  in pdu_get_source()  local
500 		if (payload_len < 4) {  in pdu_get_source()
504 		payload_len -= 4;  in pdu_get_source()
507 	if (payload_len > 8) {  in pdu_get_source()
523 	uint16_t payload_len = pdu->payload_len;  in pdu_get_key()  local
531 		if (payload_len <= 4) {  in pdu_get_key()
535 		payload_len -= 4;  in pdu_get_key()
539 	if (payload_len >= 8) {  in pdu_get_key()
542 		payload_len -= (8 + tlv->attr_len);  in pdu_get_key()
544 		while (payload_len >= 8) {  in pdu_get_key()
553 			payload_len -= (8 + tlv->attr_len);  in pdu_get_key()
571 	uint16_t payload_len = pdu->payload_len;  in pdu_get_operand()  local
580 		if (payload_len < 4) {  in pdu_get_operand()
584 		payload_len -= 4;  in pdu_get_operand()
588 	while (payload_len >= 8) {  in pdu_get_operand()
594 			payload_len -= (8 + tlv->attr_len);  in pdu_get_operand()
597 			payload_len -= (8 + tlv->attr_len);  in pdu_get_operand()
601 				*op_len = payload_len;  in pdu_get_operand()