| /freebsd-13.1/sys/net80211/ |
| H A D | ieee80211_input.c | 522 uint8_t *frm, *efrm; in ieee80211_parse_beacon() local
526 efrm = mtod(m, uint8_t *) + m->m_len; in ieee80211_parse_beacon()
561 scan->ies_len = efrm - frm; in ieee80211_parse_beacon()
563 while (efrm - frm > 1) { in ieee80211_parse_beacon()
795 uint8_t *frm, *efrm; in ieee80211_parse_action() local
806 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action()
818 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action()
823 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action()
828 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action()
837 IEEE80211_VERIFY_LENGTH(efrm - frm, in ieee80211_parse_action()
[all …]
|
| H A D | ieee80211_sta.c | 1069 if (frm + 1 < efrm) { in sta_auth_shared()
1070 if ((frm[1] + 2) > (efrm - frm)) { in sta_auth_shared()
1074 frm[0], (frm[1] + 2) - (efrm - frm)); in sta_auth_shared()
1409 uint8_t *frm, *efrm; in sta_recv_mgmt() local
1417 efrm = mtod(m0, uint8_t *) + m0->m_len; in sta_recv_mgmt()
1716 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in sta_recv_mgmt()
1770 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in sta_recv_mgmt()
1788 while (efrm - frm > 1) { in sta_recv_mgmt()
1977 IEEE80211_VERIFY_LENGTH(efrm - frm, 2, return); in sta_recv_mgmt()
2011 IEEE80211_VERIFY_LENGTH(efrm - frm, 2, return); in sta_recv_mgmt()
[all …]
|
| H A D | ieee80211_action.c | 168 const uint8_t *frm, const uint8_t *efrm) in recv_inval() argument
246 const uint8_t *frm, const uint8_t *efrm) in ieee80211_recv_action() argument
288 return f(ni, wh, frm, efrm); in ieee80211_recv_action()
|
| H A D | ieee80211_hostap.c | 995 uint8_t *frm, uint8_t *efrm, int rssi, int nf, in hostap_auth_shared() argument
1035 if (frm + 1 < efrm) { in hostap_auth_shared()
1036 if ((frm[1] + 2) > (efrm - frm)) { in hostap_auth_shared()
1040 frm[0], (frm[1] + 2) - (efrm - frm)); in hostap_auth_shared()
1765 uint8_t *frm, *efrm, *sfrm; in hostap_recv_mgmt() local
1773 efrm = mtod(m0, uint8_t *) + m0->m_len; in hostap_recv_mgmt()
1901 while (efrm - frm > 1) { in hostap_recv_mgmt()
1963 IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return); in hostap_recv_mgmt()
2070 while (efrm - frm > 1) { in hostap_recv_mgmt()
2326 IEEE80211_VERIFY_LENGTH(efrm - frm, 2, return); in hostap_recv_mgmt()
[all …]
|
| H A D | ieee80211_mesh.c | 1841 uint8_t *frm, *efrm; in mesh_recv_mgmt() local
1845 efrm = mtod(m0, uint8_t *) + m0->m_len; in mesh_recv_mgmt()
2006 while (efrm - frm > 1) { in mesh_recv_mgmt()
2110 const uint8_t *frm, const uint8_t *efrm, in mesh_parse_meshpeering_action() argument
2120 while (efrm - frm > 1) { in mesh_parse_meshpeering_action()
2239 const uint8_t *frm, const uint8_t *efrm) in mesh_recv_action_meshpeering_open() argument
2387 const uint8_t *frm, const uint8_t *efrm) in mesh_recv_action_meshpeering_confirm() argument
2451 const uint8_t *frm, const uint8_t *efrm) in mesh_recv_action_meshpeering_close() argument
2505 const uint8_t *frm, const uint8_t *efrm) in mesh_recv_action_meshlmetric() argument
2536 while (efrm - frm > 1) { in mesh_parse_meshgate_action()
[all …]
|
| H A D | ieee80211_adhoc.c | 715 uint8_t *frm, *efrm; in adhoc_recv_mgmt() local
723 efrm = mtod(m0, uint8_t *) + m0->m_len; in adhoc_recv_mgmt()
911 while (efrm - frm > 1) { in adhoc_recv_mgmt()
912 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in adhoc_recv_mgmt()
978 (void)ic->ic_recv_action(ni, wh, frm, efrm); in adhoc_recv_mgmt()
|
| H A D | ieee80211_wds.c | 753 u_int8_t *frm, *efrm; in wds_recv_mgmt() local
757 efrm = mtod(m0, u_int8_t *) + m0->m_len; in wds_recv_mgmt()
777 (void)ic->ic_recv_action(ni, wh, frm, efrm); in wds_recv_mgmt()
|
| H A D | ieee80211_ht.c | 2407 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_addba_request() argument
2484 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_addba_response() argument
2567 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ba_delba() argument
2603 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ht_txchwidth() argument
2623 const uint8_t *frm, const uint8_t *efrm) in ht_recv_action_ht_mimopwrsave() argument
|
| H A D | ieee80211_hwmp.c | 401 const uint8_t *frm, const uint8_t *efrm) in hwmp_recv_action_meshpath() argument
413 while (efrm - iefrm > 1) { in hwmp_recv_action_meshpath()
414 IEEE80211_VERIFY_LENGTH(efrm - iefrm, iefrm[1] + 2, return 0); in hwmp_recv_action_meshpath()
|
| H A D | ieee80211_vht.c | 87 const uint8_t *frm, const uint8_t *efrm) in vht_recv_action_placeholder() argument
|
| H A D | ieee80211_var.h | 349 const uint8_t *frm, const uint8_t *efrm);
|
| /freebsd-13.1/sys/dev/if_ndis/ |
| H A D | if_ndis.c | 3282 uint8_t *frm, *efrm; in ndis_scan_results() local
3335 efrm = frm + wb->nwbx_ielen; in ndis_scan_results()
3336 if (efrm - frm < 12) in ndis_scan_results()
3342 sp.ies_len = efrm - frm; in ndis_scan_results()
|
| /freebsd-13.1/sys/dev/ipw/ |
| H A D | if_ipw.c | 1122 uint8_t *frm, *efrm; in ipw_fix_channel() local
1137 efrm = mtod(m, uint8_t *) + m->m_len; in ipw_fix_channel()
1140 while (frm < efrm) { in ipw_fix_channel()
|
| /freebsd-13.1/sys/dev/iwi/ |
| H A D | if_iwi.c | 1311 const uint8_t *frm, *efrm, *wme; in iwi_checkforqos() local
1329 efrm = ((const uint8_t *) wh) + len; in iwi_checkforqos()
1339 while (efrm - frm > 1) { in iwi_checkforqos()
1340 IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return); in iwi_checkforqos()
|
| /freebsd-13.1/sys/dev/mwl/ |
| H A D | if_mwl.c | 3546 const uint8_t *frm, const uint8_t *efrm) in mwl_recv_action() argument
3563 return sc->sc_recv_action(ni, wh, frm, efrm); in mwl_recv_action()
|