1044 	int bytes_left; /* bytes left in ip packet */  in sctp_PktParser()  local
1062 	bytes_left = ntohs(pip->ip_len) - (pip->ip_hl << 2);  in sctp_PktParser()
1065 	if (bytes_left < sizeof(struct sctphdr)) {  in sctp_PktParser()
1071 	bytes_left -= sizeof(struct sctphdr);  in sctp_PktParser()
1078 	if (bytes_left < SN_MIN_CHUNK_SIZE) /* malformed chunk - could cause endless loop*/  in sctp_PktParser()
1085 …if ((chunk_length < SN_MIN_CHUNK_SIZE) || (chunk_length > bytes_left)) /* malformed chunk - could …  in sctp_PktParser()
1216 		bytes_left-= chunk_length;  in sctp_PktParser()
1219 		if (bytes_left == 0)  in sctp_PktParser()
1223 		if (bytes_left < SN_MIN_CHUNK_SIZE)  in sctp_PktParser()
1230 		if ((chunk_length < SN_MIN_CHUNK_SIZE) || (chunk_length > bytes_left))  in sctp_PktParser()
1272 	int bytes_left;  in GetAsconfVtags()  local
1279 	bytes_left = sm->chunk_length;  in GetAsconfVtags()
1281 	while((bytes_left >= param_size) && (bytes_left >= SN_VTAG_PARAM_SIZE)) {  in GetAsconfVtags()
1300 		bytes_left -= param_size;  in GetAsconfVtags()
1301 		if (bytes_left < SN_MIN_PARAM_SIZE) return (0);  in GetAsconfVtags()
1333 	int bytes_left = 0;  in AddGlobalIPAddresses()  local
1340 		bytes_left = 0; /* force exit */  in AddGlobalIPAddresses()
1347 			bytes_left = sm->chunk_length - sizeof(struct sctp_init_chunk);  in AddGlobalIPAddresses()
1351 			bytes_left = sm->chunk_length - sizeof(struct sctp_init_ack_chunk);  in AddGlobalIPAddresses()
1355 			bytes_left = sm->chunk_length;  in AddGlobalIPAddresses()
1360 	if (bytes_left >= SN_MIN_PARAM_SIZE)  in AddGlobalIPAddresses()
1363 		param_size = bytes_left+1; /* force skip loop */  in AddGlobalIPAddresses()
1365 …if ((assoc->state == SN_ID) && ((sm->msg == SN_SCTP_INIT) || (bytes_left < SN_MIN_PARAM_SIZE))) {/…  in AddGlobalIPAddresses()
1383 	while((bytes_left >= param_size) && (bytes_left >= sizeof(struct sctp_ipv4addr_param))) {  in AddGlobalIPAddresses()
1425 		bytes_left -= param_size;  in AddGlobalIPAddresses()
1426 		if (bytes_left < SN_MIN_PARAM_SIZE)  in AddGlobalIPAddresses()
1495 	int bytes_left;  in RmGlobalIPAddresses()  local
1504 	bytes_left = sm->chunk_length;  in RmGlobalIPAddresses()
1507 	if (bytes_left >= SN_MIN_PARAM_SIZE) {  in RmGlobalIPAddresses()
1517 	while((bytes_left >= param_size) && (bytes_left >= sizeof(struct sctp_ipv4addr_param))) {  in RmGlobalIPAddresses()
1552 		bytes_left -= param_size;  in RmGlobalIPAddresses()
1553 		if (bytes_left == 0) return;  in RmGlobalIPAddresses()
1554 		else if (bytes_left < SN_MIN_PARAM_SIZE) {  in RmGlobalIPAddresses()
1598 	int bytes_left;  in IsASCONFack()  local
1608 	bytes_left = sm->chunk_length;  in IsASCONFack()
1609 	if (bytes_left < param_size)  in IsASCONFack()
1612 	while(bytes_left >= SN_ASCONFACK_PARAM_SIZE) {  in IsASCONFack()
1616 		bytes_left -= param_size;  in IsASCONFack()
1617 		if (bytes_left >= SN_MIN_PARAM_SIZE) {  in IsASCONFack()
1623 		if (bytes_left < param_size) return (0);  in IsASCONFack()
1651 	int bytes_left;  in IsADDorDEL()  local
1659 	bytes_left = sm->chunk_length;  in IsADDorDEL()
1660 	if (bytes_left < param_size)  in IsADDorDEL()
1663 	while(bytes_left >= SN_ASCONFACK_PARAM_SIZE) {  in IsADDorDEL()
1669 		bytes_left -= param_size;  in IsADDorDEL()
1670 		if (bytes_left >= SN_MIN_PARAM_SIZE) {  in IsADDorDEL()
1676 		if (bytes_left < param_size) return (0);  in IsADDorDEL()