usb/net/if_urndis.c

441 	DPRINTF("type 0x%x len %u\n", le32toh(hdr->rm_type),
442 	    le32toh(hdr->rm_len));
444 	if (le32toh(hdr->rm_len) > RNDIS_RESPONSE_LEN) {
446 		    le32toh(hdr->rm_len), RNDIS_RESPONSE_LEN);
464 	switch (le32toh(hdr->rm_type)) {
479 		rval = le32toh(hdr->rm_status);
484 		    le32toh(hdr->rm_type));
502 	    le32toh(msg->rm_len),
503 	    le32toh(msg->rm_rid),
504 	    le32toh(msg->rm_status),
505 	    le32toh(msg->rm_ver_major),
506 	    le32toh(msg->rm_ver_minor),
507 	    le32toh(msg->rm_devflags),
508 	    le32toh(msg->rm_medium),
509 	    le32toh(msg->rm_pktmaxcnt),
510 	    le32toh(msg->rm_pktmaxsz),
511 	    le32toh(msg->rm_align),
512 	    le32toh(msg->rm_aflistoffset),
513 	    le32toh(msg->rm_aflistsz));
515 	if (le32toh(msg->rm_status) != RNDIS_STATUS_SUCCESS) {
516 		DPRINTF("init failed 0x%x\n", le32toh(msg->rm_status));
517 		return (le32toh(msg->rm_status));
519 	if (le32toh(msg->rm_devflags) != RNDIS_DF_CONNECTIONLESS) {
521 		    le32toh(msg->rm_devflags));
524 	if (le32toh(msg->rm_medium) != RNDIS_MEDIUM_802_3) {
526 		    le32toh(msg->rm_medium));
529 	sc->sc_lim_pktsz = le32toh(msg->rm_pktmaxsz);
531 	return (le32toh(msg->rm_status));
545 	    le32toh(msg->rm_len),
546 	    le32toh(msg->rm_rid),
547 	    le32toh(msg->rm_status),
548 	    le32toh(msg->rm_infobuflen),
549 	    le32toh(msg->rm_infobufoffset));
555 	if (le32toh(msg->rm_status) != RNDIS_STATUS_SUCCESS) {
556 		DPRINTF("query failed 0x%x\n", le32toh(msg->rm_status));
557 		return (le32toh(msg->rm_status));
559 	limit = le32toh(msg->rm_infobuflen);
560 	limit += le32toh(msg->rm_infobufoffset);
563 	if (limit > (uint64_t)le32toh(msg->rm_len)) {
567 		    le32toh(msg->rm_infobuflen),
568 		    le32toh(msg->rm_infobufoffset),
569 		    le32toh(msg->rm_infobuflen) +
570 		    le32toh(msg->rm_infobufoffset) + RNDIS_HEADER_OFFSET,
571 		    le32toh(msg->rm_len));
575 		*buf = ((const uint8_t *)msg) + RNDIS_HEADER_OFFSET + le32toh(msg->rm_infobufoffset);
576 		*bufsz = le32toh(msg->rm_infobuflen);
578 	return (le32toh(msg->rm_status));
590 	rval = le32toh(msg->rm_status);
594 	    le32toh(msg->rm_len),
596 	    le32toh(msg->rm_adrreset));
637 	    le32toh(msg.rm_type),
638 	    le32toh(msg.rm_len),
639 	    le32toh(msg.rm_rid),
640 	    le32toh(msg.rm_ver_major),
641 	    le32toh(msg.rm_ver_minor),
642 	    le32toh(msg.rm_max_xfersz));
671 	    le32toh(msg.rm_type),
672 	    le32toh(msg.rm_len),
673 	    le32toh(msg.rm_rid));
702 	    le32toh(msg.rm_type),
703 	    le32toh(msg.rm_len),
704 	    le32toh(msg.rm_rid),
705 	    le32toh(msg.rm_oid),
706 	    le32toh(msg.rm_infobuflen),
707 	    le32toh(msg.rm_infobufoffset),
708 	    le32toh(msg.rm_devicevchdl));
746 	    le32toh(msg->rm_type),
747 	    le32toh(msg->rm_len),
748 	    le32toh(msg->rm_rid),
749 	    le32toh(msg->rm_oid),
750 	    le32toh(msg->rm_infobuflen),
751 	    le32toh(msg->rm_infobufoffset),
752 	    le32toh(msg->rm_devicevchdl));
795 			if (le32toh(0x1234567U) != 0x1234567U) {
797 				msg.rm_type = le32toh(msg.rm_type);
798 				msg.rm_len = le32toh(msg.rm_len);
799 				msg.rm_dataoffset = le32toh(msg.rm_dataoffset);
800 				msg.rm_datalen = le32toh(msg.rm_datalen);
801 				msg.rm_oobdataoffset = le32toh(msg.rm_oobdataoffset);
802 				msg.rm_oobdatalen = le32toh(msg.rm_oobdatalen);
803 				msg.rm_oobdataelements = le32toh(msg.rm_oobdataelements);
804 				msg.rm_pktinfooffset = le32toh(msg.rm_pktinfooffset);
805 				msg.rm_pktinfolen = le32toh(msg.rm_pktinfolen);
806 				msg.rm_vchandle = le32toh(msg.rm_vchandle);
807 				msg.rm_reserved = le32toh(msg.rm_reserved);