/dragonfly/sys/netproto/802_11/wlan/ |
H A D | ieee80211_input.c | 515 uint8_t *frm, *efrm; in ieee80211_parse_beacon() local 519 efrm = mtod(m, uint8_t *) + m->m_len; in ieee80211_parse_beacon() 550 scan->ies_len = efrm - frm; in ieee80211_parse_beacon() 552 while (efrm - frm > 1) { in ieee80211_parse_beacon() 759 uint8_t *frm, *efrm; in ieee80211_parse_action() local 770 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action() 782 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action() 787 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action() 792 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action() 801 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action() [all …]
|
H A D | ieee80211_sta.c | 1018 if (frm + 1 < efrm) { in sta_auth_shared() 1019 if ((frm[1] + 2) > (efrm - frm)) { in sta_auth_shared() 1023 frm[0], (frm[1] + 2) - (efrm - frm)); in sta_auth_shared() 1299 uint8_t *frm, *efrm; in sta_recv_mgmt() local 1306 efrm = mtod(m0, uint8_t *) + m0->m_len; in sta_recv_mgmt() 1560 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in sta_recv_mgmt() 1614 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in sta_recv_mgmt() 1631 while (efrm - frm > 1) { in sta_recv_mgmt() 1790 IEEE80211_VERIFY_LENGTH(efrm - frm, 2, return); in sta_recv_mgmt() 1824 IEEE80211_VERIFY_LENGTH(efrm - frm, 2, return); in sta_recv_mgmt() [all …]
|
H A D | ieee80211_hostap.c | 994 uint8_t *frm, uint8_t *efrm, int rssi, int nf, in hostap_auth_shared() argument 1034 if (frm + 1 < efrm) { in hostap_auth_shared() 1035 if ((frm[1] + 2) > (efrm - frm)) { in hostap_auth_shared() 1039 frm[0], (frm[1] + 2) - (efrm - frm)); in hostap_auth_shared() 1682 uint8_t *frm, *efrm, *sfrm; in hostap_recv_mgmt() local 1689 efrm = mtod(m0, uint8_t *) + m0->m_len; in hostap_recv_mgmt() 1815 while (efrm - frm > 1) { in hostap_recv_mgmt() 1877 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in hostap_recv_mgmt() 1983 while (efrm - frm > 1) { in hostap_recv_mgmt() 2188 IEEE80211_VERIFY_LENGTH(efrm - frm, 2, return); in hostap_recv_mgmt() [all …]
|
H A D | ieee80211_action.c | 154 const uint8_t *frm, const uint8_t *efrm) in recv_inval() argument 223 const uint8_t *frm, const uint8_t *efrm) in ieee80211_recv_action() argument 261 return f(ni, wh, frm, efrm); in ieee80211_recv_action()
|
H A D | ieee80211_adhoc.c | 677 uint8_t *frm, *efrm, *sfrm; in adhoc_recv_mgmt() local 685 efrm = mtod(m0, uint8_t *) + m0->m_len; in adhoc_recv_mgmt() 813 while (efrm - frm > 1) { in adhoc_recv_mgmt() 814 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in adhoc_recv_mgmt() 874 (void)ic->ic_recv_action(ni, wh, frm, efrm); in adhoc_recv_mgmt()
|
H A D | ieee80211_mesh.c | 1884 uint8_t *frm, *efrm; in mesh_recv_mgmt() local 1888 efrm = mtod(m0, uint8_t *) + m0->m_len; in mesh_recv_mgmt() 2051 while (efrm - frm > 1) { in mesh_recv_mgmt() 2155 const uint8_t *frm, const uint8_t *efrm, in mesh_parse_meshpeering_action() argument 2165 while (efrm - frm > 1) { in mesh_parse_meshpeering_action() 2285 const uint8_t *frm, const uint8_t *efrm) in mesh_recv_action_meshpeering_open() argument 2433 const uint8_t *frm, const uint8_t *efrm) in mesh_recv_action_meshpeering_confirm() argument 2497 const uint8_t *frm, const uint8_t *efrm) in mesh_recv_action_meshpeering_close() argument 2551 const uint8_t *frm, const uint8_t *efrm) in mesh_recv_action_meshlmetric() argument 2582 while (efrm - frm > 1) { in mesh_parse_meshgate_action() [all …]
|
H A D | ieee80211_wds.c | 738 u_int8_t *frm, *efrm; in wds_recv_mgmt() local 742 efrm = mtod(m0, u_int8_t *) + m0->m_len; in wds_recv_mgmt() 762 (void)ic->ic_recv_action(ni, wh, frm, efrm); in wds_recv_mgmt()
|
H A D | ieee80211_ht.c | 1933 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_addba_request() argument 1999 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_addba_response() argument 2073 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_delba() argument 2104 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ht_txchwidth() argument 2123 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ht_mimopwrsave() argument
|
H A D | ieee80211_hwmp.c | 405 const uint8_t *frm, const uint8_t *efrm) in hwmp_recv_action_meshpath() argument 417 while (efrm - iefrm > 1) { in hwmp_recv_action_meshpath() 418 IEEE80211_VERIFY_LENGTH(efrm - iefrm, iefrm[1] + 2, return 0); in hwmp_recv_action_meshpath()
|
/dragonfly/sys/netproto/802_11/ |
H A D | ieee80211_var.h | 325 const uint8_t *frm, const uint8_t *efrm);
|
/dragonfly/sys/dev/netif/iwi/ |
H A D | if_iwi.c | 1372 const uint8_t *frm, *efrm, *wme; in iwi_checkforqos() local 1390 efrm = ((const uint8_t *) wh) + len; in iwi_checkforqos() 1400 while (efrm - frm > 1) { in iwi_checkforqos() 1401 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in iwi_checkforqos()
|