/freebsd/sys/net80211/ |
H A D | ieee80211_input.c | 524 uint8_t *frm, *efrm; in ieee80211_parse_beacon() local 528 efrm = mtod(m, uint8_t *) + m->m_len; in ieee80211_parse_beacon() 554 IEEE80211_VERIFY_LENGTH(efrm - frm, 12, in ieee80211_parse_beacon() 563 scan->ies_len = efrm - frm; in ieee80211_parse_beacon() 565 while (efrm - frm > 1) { in ieee80211_parse_beacon() 566 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, in ieee80211_parse_beacon() 797 uint8_t *frm, *efrm; in ieee80211_parse_action() local 807 efrm = mtod(m, u_int8_t *) + m->m_len; in ieee80211_parse_action() 808 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action() 820 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action() [all …]
|
H A D | ieee80211_sta.c | 1026 uint8_t *frm, uint8_t *efrm, int rssi, int nf, in sta_auth_shared() argument 1061 if (frm + 1 < efrm) { in sta_auth_shared() 1062 if ((frm[1] + 2) > (efrm - frm)) { in sta_auth_shared() 1066 frm[0], (frm[1] + 2) - (efrm - frm)); in sta_auth_shared() 1401 uint8_t *frm, *efrm; in sta_recv_mgmt() local 1409 efrm = mtod(m0, uint8_t *) + m0->m_len; in sta_recv_mgmt() 1708 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in sta_recv_mgmt() 1728 sta_auth_shared(ni, wh, frm + 6, efrm, rssi, nf, in sta_recv_mgmt() 1762 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in sta_recv_mgmt() 1780 while (efrm - frm > 1) { in sta_recv_mgmt() [all …]
|
H A D | ieee80211_action.c | 163 const uint8_t *frm, const uint8_t *efrm) in recv_inval() argument 241 const uint8_t *frm, const uint8_t *efrm) in ieee80211_recv_action() argument 283 return f(ni, wh, frm, efrm); in ieee80211_recv_action()
|
H A D | ieee80211_hostap.c | 991 uint8_t *frm, uint8_t *efrm, int rssi, int nf, in hostap_auth_shared() argument 1031 if (frm + 1 < efrm) { in hostap_auth_shared() 1032 if ((frm[1] + 2) > (efrm - frm)) { in hostap_auth_shared() 1036 frm[0], (frm[1] + 2) - (efrm - frm)); in hostap_auth_shared() 1795 uint8_t *frm, *efrm, *sfrm; in hostap_recv_mgmt() local 1803 efrm = mtod(m0, uint8_t *) + m0->m_len; in hostap_recv_mgmt() 1931 while (efrm - frm > 1) { in hostap_recv_mgmt() 1932 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in hostap_recv_mgmt() 1993 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in hostap_recv_mgmt() 2022 hostap_auth_shared(ni, wh, frm + 6, efrm, rssi, nf, in hostap_recv_mgmt() [all …]
|
H A D | ieee80211_mesh.c | 1837 uint8_t *frm, *efrm; in mesh_recv_mgmt() local 1841 efrm = mtod(m0, uint8_t *) + m0->m_len; in mesh_recv_mgmt() 2002 while (efrm - frm > 1) { in mesh_recv_mgmt() 2003 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in mesh_recv_mgmt() 2063 (void)ic->ic_recv_action(ni, wh, frm, efrm); in mesh_recv_mgmt() 2106 const uint8_t *frm, const uint8_t *efrm, in mesh_parse_meshpeering_action() argument 2116 while (efrm - frm > 1) { in mesh_parse_meshpeering_action() 2117 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return NULL); in mesh_parse_meshpeering_action() 2235 const uint8_t *frm, const uint8_t *efrm) in mesh_recv_action_meshpeering_open() argument 2244 meshpeer = mesh_parse_meshpeering_action(ni, wh, frm+2+2, efrm, &ie, in mesh_recv_action_meshpeering_open() [all …]
|
H A D | ieee80211_adhoc.c | 709 uint8_t *frm, *efrm; in adhoc_recv_mgmt() local 717 efrm = mtod(m0, uint8_t *) + m0->m_len; in adhoc_recv_mgmt() 905 while (efrm - frm > 1) { in adhoc_recv_mgmt() 906 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in adhoc_recv_mgmt() 972 (void)ic->ic_recv_action(ni, wh, frm, efrm); in adhoc_recv_mgmt()
|
H A D | ieee80211_wds.c | 748 u_int8_t *frm, *efrm; in wds_recv_mgmt() local 752 efrm = mtod(m0, u_int8_t *) + m0->m_len; in wds_recv_mgmt() 772 (void)ic->ic_recv_action(ni, wh, frm, efrm); in wds_recv_mgmt()
|
H A D | ieee80211_ht.c | 2402 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_addba_request() argument 2479 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_addba_response() argument 2562 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_delba() argument 2598 const uint8_t *frm, const uint8_t *efrm __unused) in ht_recv_action_ht_txchwidth() 2623 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ht_mimopwrsave() argument
|
H A D | ieee80211_hwmp.c | 397 const uint8_t *frm, const uint8_t *efrm) in hwmp_recv_action_meshpath() argument 409 while (efrm - iefrm > 1) { in hwmp_recv_action_meshpath() 410 IEEE80211_VERIFY_LENGTH(efrm - iefrm, iefrm[1] + 2, return 0); in hwmp_recv_action_meshpath()
|
H A D | ieee80211_vht.c | 82 const uint8_t *frm, const uint8_t *efrm) in vht_recv_action_placeholder() argument
|
H A D | ieee80211_var.h | 350 const uint8_t *frm, const uint8_t *efrm);
|
/freebsd/sys/dev/ipw/ |
H A D | if_ipw.c | 1118 uint8_t *frm, *efrm; in ipw_fix_channel() local 1133 efrm = mtod(m, uint8_t *) + m->m_len; in ipw_fix_channel() 1136 while (frm < efrm) { in ipw_fix_channel()
|
/freebsd/sys/dev/iwi/ |
H A D | if_iwi.c | 1304 const uint8_t *frm, *efrm, *wme; in iwi_checkforqos() local 1322 efrm = ((const uint8_t *) wh) + len; in iwi_checkforqos() 1332 while (efrm - frm > 1) { in iwi_checkforqos() 1333 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in iwi_checkforqos()
|
/freebsd/sys/dev/mwl/ |
H A D | if_mwl.c | 3531 const uint8_t *frm, const uint8_t *efrm) in mwl_recv_action() argument 3548 return sc->sc_recv_action(ni, wh, frm, efrm); in mwl_recv_action()
|
/freebsd/sys/compat/linuxkpi/common/src/ |
H A D | linux_80211.c | 4835 const uint8_t *frm, const uint8_t *efrm) argument 4845 return (lhw->ic_recv_action(ni, wh, frm, efrm));
|