1028 	int bytes_left; /* bytes left in ip packet */  in sctp_PktParser()  local
1046 	bytes_left = ntohs(pip->ip_len) - (pip->ip_hl << 2);  in sctp_PktParser()
1049 	if (bytes_left < sizeof(struct sctphdr)) {  in sctp_PktParser()
1055 	bytes_left -= sizeof(struct sctphdr);  in sctp_PktParser()
1062 	if (bytes_left < SN_MIN_CHUNK_SIZE) /* malformed chunk - could cause endless loop*/  in sctp_PktParser()
1069 …if ((chunk_length < SN_MIN_CHUNK_SIZE) || (chunk_length > bytes_left)) /* malformed chunk - could …  in sctp_PktParser()
1200 		bytes_left-= chunk_length;  in sctp_PktParser()
1203 		if (bytes_left == 0)  in sctp_PktParser()
1207 		if (bytes_left < SN_MIN_CHUNK_SIZE)  in sctp_PktParser()
1214 		if ((chunk_length < SN_MIN_CHUNK_SIZE) || (chunk_length > bytes_left))  in sctp_PktParser()
1256 	int bytes_left;  in GetAsconfVtags()  local
1263 	bytes_left = sm->chunk_length;  in GetAsconfVtags()
1265 	while((bytes_left >= param_size) && (bytes_left >= SN_VTAG_PARAM_SIZE)) {  in GetAsconfVtags()
1284 		bytes_left -= param_size;  in GetAsconfVtags()
1285 		if (bytes_left < SN_MIN_PARAM_SIZE) return (0);  in GetAsconfVtags()
1317 	int bytes_left = 0;  in AddGlobalIPAddresses()  local
1324 		bytes_left = 0; /* force exit */  in AddGlobalIPAddresses()
1331 			bytes_left = sm->chunk_length - sizeof(struct sctp_init_chunk);  in AddGlobalIPAddresses()
1335 			bytes_left = sm->chunk_length - sizeof(struct sctp_init_ack_chunk);  in AddGlobalIPAddresses()
1339 			bytes_left = sm->chunk_length;  in AddGlobalIPAddresses()
1344 	if (bytes_left >= SN_MIN_PARAM_SIZE)  in AddGlobalIPAddresses()
1347 		param_size = bytes_left+1; /* force skip loop */  in AddGlobalIPAddresses()
1349 …if ((assoc->state == SN_ID) && ((sm->msg == SN_SCTP_INIT) || (bytes_left < SN_MIN_PARAM_SIZE))) {/…  in AddGlobalIPAddresses()
1367 	while((bytes_left >= param_size) && (bytes_left >= sizeof(struct sctp_ipv4addr_param))) {  in AddGlobalIPAddresses()
1409 		bytes_left -= param_size;  in AddGlobalIPAddresses()
1410 		if (bytes_left < SN_MIN_PARAM_SIZE)  in AddGlobalIPAddresses()
1479 	int bytes_left;  in RmGlobalIPAddresses()  local
1488 	bytes_left = sm->chunk_length;  in RmGlobalIPAddresses()
1491 	if (bytes_left >= SN_MIN_PARAM_SIZE) {  in RmGlobalIPAddresses()
1501 	while((bytes_left >= param_size) && (bytes_left >= sizeof(struct sctp_ipv4addr_param))) {  in RmGlobalIPAddresses()
1536 		bytes_left -= param_size;  in RmGlobalIPAddresses()
1537 		if (bytes_left == 0) return;  in RmGlobalIPAddresses()
1538 		else if (bytes_left < SN_MIN_PARAM_SIZE) {  in RmGlobalIPAddresses()
1582 	int bytes_left;  in IsASCONFack()  local
1592 	bytes_left = sm->chunk_length;  in IsASCONFack()
1593 	if (bytes_left < param_size)  in IsASCONFack()
1596 	while(bytes_left >= SN_ASCONFACK_PARAM_SIZE) {  in IsASCONFack()
1600 		bytes_left -= param_size;  in IsASCONFack()
1601 		if (bytes_left >= SN_MIN_PARAM_SIZE) {  in IsASCONFack()
1607 		if (bytes_left < param_size) return (0);  in IsASCONFack()
1635 	int bytes_left;  in IsADDorDEL()  local
1643 	bytes_left = sm->chunk_length;  in IsADDorDEL()
1644 	if (bytes_left < param_size)  in IsADDorDEL()
1647 	while(bytes_left >= SN_ASCONFACK_PARAM_SIZE) {  in IsADDorDEL()
1653 		bytes_left -= param_size;  in IsADDorDEL()
1654 		if (bytes_left >= SN_MIN_PARAM_SIZE) {  in IsADDorDEL()
1660 		if (bytes_left < param_size) return (0);  in IsADDorDEL()