sys/net80211/ieee80211_ioctl.c

87 	if (ireq->i_len != sizeof(ik))
137 	if (sizeof(ic->ic_chan_active) < ireq->i_len)
138 		ireq->i_len = sizeof(ic->ic_chan_active);
139 	return copyout(&ic->ic_chan_active, ireq->i_data, ireq->i_len);
150 	if (space > ireq->i_len)
151 		space = ireq->i_len;
164 	if (ireq->i_len < IEEE80211_ADDR_LEN)
187 		if (ireq->i_len > sizeof(struct ieee80211req_wpaie2))
188 			ireq->i_len = sizeof(struct ieee80211req_wpaie2);
198 		if (ireq->i_len > sizeof(struct ieee80211req_wpaie))
199 			ireq->i_len = sizeof(struct ieee80211req_wpaie);
202 	return copyout(&wpaie, ireq->i_data, ireq->i_len);
213 	if (ireq->i_len < off)
221 	if (ireq->i_len > sizeof(struct ieee80211req_sta_stats))
222 		ireq->i_len = sizeof(struct ieee80211req_sta_stats);
225 			ireq->i_len - off);
317 	if (ireq->i_len < sizeof(struct scanreq))
323 	if (req.space > ireq->i_len)
324 		req.space = ireq->i_len;
336 		ireq->i_len = space - req.space;
337 		error = copyout(p, ireq->i_data, ireq->i_len);
340 		ireq->i_len = 0;
476 	if (req.space > ireq->i_len)
477 		req.space = ireq->i_len;
491 		ireq->i_len = space - req.space;
492 		error = copyout(p, (uint8_t *) ireq->i_data+off, ireq->i_len);
495 		ireq->i_len = 0;
510 	if (ireq->i_len < sizeof(struct ieee80211req_sta_req))
532 	if (ireq->i_len != sizeof(txpow))
557 	ac = (ireq->i_len & IEEE80211_WMEPARAM_VAL);
560 	if (ireq->i_len & IEEE80211_WMEPARAM_BSS)
603 	if (ireq->i_len != sizeof(struct ieee80211_channel))
623 	if (ireq->i_len > aie->ie_len)
624 		ireq->i_len = aie->ie_len;
625 	return copyout(aie->ie_data, ireq->i_data, ireq->i_len);
660 	if (ireq->i_len != sizeof(ic->ic_regdomain))
670 	size_t len = ireq->i_len;
681 	size_t len = ireq->i_len;
696 	maxchans = 1 + ((ireq->i_len - sizeof(struct ieee80211_devcaps_req)) /
728 	if (ireq->i_len != sizeof(vlan))
802 			ireq->i_len = vap->iv_des_ssid[0].len;
803 			memcpy(tmpssid, vap->iv_des_ssid[0].ssid, ireq->i_len);
806 			ireq->i_len = vap->iv_bss->ni_esslen;
807 			memcpy(tmpssid, vap->iv_bss->ni_essid, ireq->i_len);
810 		error = copyout(tmpssid, ireq->i_data, ireq->i_len);
834 		ireq->i_len = len;
926 		if (ireq->i_len != IEEE80211_ADDR_LEN)
931 			    ireq->i_data, ireq->i_len);
934 			    ireq->i_len);
1152 	if (ireq->i_len != sizeof(ik))
1223 	if (ireq->i_len != sizeof(dk))
1583 	if (ireq->i_len != sizeof(mlme))
1609 	if (ireq->i_len != sizeof(mac))
1611 	error = copyin(ireq->i_data, mac, ireq->i_len);
1672 	if (ireq->i_len > sizeof(ic->ic_chan_active))
1673 		ireq->i_len = sizeof(ic->ic_chan_active);
1674 	list = malloc(ireq->i_len + IEEE80211_CHAN_BYTES, M_TEMP,
1678 	error = copyin(ireq->i_data, list, ireq->i_len);
1684 	chanlist = list + ireq->i_len;		/* NB: zero'd already */
1685 	maxchan = ireq->i_len * NBBY;
1723 	if (ireq->i_len < IEEE80211_ADDR_LEN)
1744 	if (ireq->i_len != sizeof(txpow))
1768 	isbss = (ireq->i_len & IEEE80211_WMEPARAM_BSS);
1769 	ac = (ireq->i_len & IEEE80211_WMEPARAM_VAL);
2088 	if (ireq->i_len != sizeof(chan))
2111 	nchans = 1 + ((ireq->i_len - sizeof(struct ieee80211_regdomain_req)) /
2115 		    "%s: bad # chans, i_len %d nchans %d\n", __func__,
2116 		    ireq->i_len, nchans);
2146 	if (ireq->i_len != sizeof(vap->iv_roamparms))
2188 	if (ireq->i_len > sizeof(parms))
2190 	error = copyin(ireq->i_data, &parms, ireq->i_len);
2193 	nmodes = ireq->i_len / sizeof(struct ieee80211_txparam);
2251 	if (ireq->i_len == 0) {		/* delete any existing ie */
2258 	if (!(2 <= ireq->i_len && ireq->i_len <= IEEE80211_MAX_APPIE))
2269 	    sizeof(struct ieee80211_appie) + ireq->i_len, M_80211_NODE_IE, M_NOWAIT);
2273 	error = copyin(ireq->i_data, napp->ie_data, ireq->i_len);
2278 	napp->ie_len = ireq->i_len;
2401 	if (ireq->i_len != sizeof(csr))
2540 	if (ireq->i_len != sizeof(sr))
2555 	if (ireq->i_len != sizeof(vlan))
2629 		    ireq->i_len > IEEE80211_NWID_LEN)
2631 		error = copyin(ireq->i_data, tmpssid, ireq->i_len);
2635 		vap->iv_des_ssid[0].len = ireq->i_len;
2636 		memcpy(vap->iv_des_ssid[0].ssid, tmpssid, ireq->i_len);
2637 		vap->iv_des_nssid = (ireq->i_len > 0);
2662 		if (ireq->i_len == 0) {
2667 		if (ireq->i_len > sizeof(tmpkey))
2670 		error = copyin(ireq->i_data, tmpkey, ireq->i_len);
2677 			k->wk_keylen = ireq->i_len;
2878 		if (ireq->i_len != sizeof(tmpbssid))
2880 		error = copyin(ireq->i_data, tmpbssid, ireq->i_len);