1055 	int bytes_left; /* bytes left in ip packet */  in sctp_PktParser()  local
1073 	bytes_left = ntohs(pip->ip_len) - (pip->ip_hl << 2);  in sctp_PktParser()
1076 	if (bytes_left < sizeof(struct sctphdr)) {  in sctp_PktParser()
1082 	bytes_left -= sizeof(struct sctphdr);  in sctp_PktParser()
1089 	if (bytes_left < SN_MIN_CHUNK_SIZE) /* malformed chunk - could cause endless loop*/  in sctp_PktParser()
1096 …if ((chunk_length < SN_MIN_CHUNK_SIZE) || (chunk_length > bytes_left)) /* malformed chunk - could …  in sctp_PktParser()
1227 		bytes_left-= chunk_length;  in sctp_PktParser()
1230 		if (bytes_left == 0)  in sctp_PktParser()
1234 		if (bytes_left < SN_MIN_CHUNK_SIZE)  in sctp_PktParser()
1241 		if ((chunk_length < SN_MIN_CHUNK_SIZE) || (chunk_length > bytes_left))  in sctp_PktParser()
1283 	int bytes_left;  in GetAsconfVtags()  local
1290 	bytes_left = sm->chunk_length;  in GetAsconfVtags()
1292 	while((bytes_left >= param_size) && (bytes_left >= SN_VTAG_PARAM_SIZE)) {  in GetAsconfVtags()
1311 		bytes_left -= param_size;  in GetAsconfVtags()
1312 		if (bytes_left < SN_MIN_PARAM_SIZE)  in GetAsconfVtags()
1345 	int bytes_left = 0;  in AddGlobalIPAddresses()  local
1352 		bytes_left = 0; /* force exit */  in AddGlobalIPAddresses()
1359 			bytes_left = sm->chunk_length - sizeof(struct sctp_init_chunk);  in AddGlobalIPAddresses()
1363 			bytes_left = sm->chunk_length - sizeof(struct sctp_init_ack_chunk);  in AddGlobalIPAddresses()
1367 			bytes_left = sm->chunk_length;  in AddGlobalIPAddresses()
1372 	if (bytes_left >= SN_MIN_PARAM_SIZE)  in AddGlobalIPAddresses()
1375 		param_size = bytes_left+1; /* force skip loop */  in AddGlobalIPAddresses()
1377 …if ((assoc->state == SN_ID) && ((sm->msg == SN_SCTP_INIT) || (bytes_left < SN_MIN_PARAM_SIZE))) {/…  in AddGlobalIPAddresses()
1395 	while((bytes_left >= param_size) && (bytes_left >= sizeof(struct sctp_ipv4addr_param))) {  in AddGlobalIPAddresses()
1437 		bytes_left -= param_size;  in AddGlobalIPAddresses()
1438 		if (bytes_left < SN_MIN_PARAM_SIZE)  in AddGlobalIPAddresses()
1508 	int bytes_left;  in RmGlobalIPAddresses()  local
1517 	bytes_left = sm->chunk_length;  in RmGlobalIPAddresses()
1520 	if (bytes_left >= SN_MIN_PARAM_SIZE) {  in RmGlobalIPAddresses()
1530 	while((bytes_left >= param_size) && (bytes_left >= sizeof(struct sctp_ipv4addr_param))) {  in RmGlobalIPAddresses()
1565 		bytes_left -= param_size;  in RmGlobalIPAddresses()
1566 		if (bytes_left == 0)  in RmGlobalIPAddresses()
1568 		else if (bytes_left < SN_MIN_PARAM_SIZE) {  in RmGlobalIPAddresses()
1612 	int bytes_left;  in IsASCONFack()  local
1622 	bytes_left = sm->chunk_length;  in IsASCONFack()
1623 	if (bytes_left < param_size)  in IsASCONFack()
1626 	while(bytes_left >= SN_ASCONFACK_PARAM_SIZE) {  in IsASCONFack()
1630 		bytes_left -= param_size;  in IsASCONFack()
1631 		if (bytes_left >= SN_MIN_PARAM_SIZE)  in IsASCONFack()
1637 		if (bytes_left < param_size)  in IsASCONFack()
1666 	int bytes_left;  in IsADDorDEL()  local
1674 	bytes_left = sm->chunk_length;  in IsADDorDEL()
1675 	if (bytes_left < param_size)  in IsADDorDEL()
1678 	while(bytes_left >= SN_ASCONFACK_PARAM_SIZE) {  in IsADDorDEL()
1684 		bytes_left -= param_size;  in IsADDorDEL()
1685 		if (bytes_left >= SN_MIN_PARAM_SIZE)  in IsADDorDEL()
1691 		if (bytes_left < param_size)  in IsADDorDEL()