sys/net80211/ieee80211_hostap.c

1001     uint8_t *frm, uint8_t *efrm, int rssi, int nf,
1041 	if (frm + 1 < efrm) {
1042 		if ((frm[1] + 2) > (efrm - frm)) {
1046 			    frm[0], (frm[1] + 2) - (efrm - frm));
1689 	uint8_t *frm, *efrm, *sfrm;
1696 	efrm = mtod(m0, uint8_t *) + m0->m_len;
1819 		while (efrm - frm > 1) {
1820 			IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return);
1881 		IEEE80211_VERIFY_LENGTH(efrm - frm, 6, return);
1910 			hostap_auth_shared(ni, wh, frm + 6, efrm, rssi, nf,
1980 		IEEE80211_VERIFY_LENGTH(efrm - frm, (reassoc ? 10 : 4), return);
1987 		while (efrm - frm > 1) {
1988 			IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2, return);
2138 		if (ieee80211_ies_init(&ni->ni_ies, sfrm, efrm - sfrm)) {
2188 		IEEE80211_VERIFY_LENGTH(efrm - frm, 2, return);
2223 				(void)ic->ic_recv_action(ni, wh, frm, efrm);