wpa/wpa_supplicant/interworking.c

366 				      const u8 *end)
371 	if (end - pos < 3) {
377 	if (elen > end - pos || elen < 2) {
390 		if (end - pos < 2) {
398 		if (len > end - pos) {
463 					const u8 *end)
469 	if (end - pos < 4) {
477 	if (len > end - pos || len < 3) {
480 			   len, (unsigned int) (end - pos));
526 	const u8 *pos, *end;
537 	end = pos + left;
555 		pos = nai_realm_parse_realm(&realm[i], pos, end);
569 	char *tmp, *pos, *end;
570 	int match = 0;
584 		end = os_strchr(pos, ';');
585 		if (end)
586 			*end = '\0';
588 			match = 1;
591 		if (end == NULL)
593 		pos = end + 1;
598 	return match;
733 	const u8 *pos, *end;
759 	end = pos + wpabuf_len(anqp);
760 	if (end - pos < 2)
768 	if (udhl > end - pos) {
772 	end = pos + udhl;
778 	while (end - pos >= 2) {
783 		if (len > end - pos)
817 	char *end, *pos;
845 	end = nai + nai_len;
852 	pos += os_snprintf(pos, end - pos, "@wlan.mnc");
862 	os_snprintf(pos, end - pos, ".mcc%c%c%c.3gppnetwork.org",
1080 	const u8 *pos, *end;
1087 	end = ie + 2 + ie[1];
1095 	if (end - pos < 2)
1100 	if ((lens & 0x0f) + (lens >> 4) > end - pos)
1111 	if (pos < end && (size_t) (end - pos) == rc_len &&
1122 	const u8 *pos, *end;
1129 	end = pos + wpabuf_len(anqp);
1132 	while (pos < end) {
1134 		if (len > end - pos)
1294 static int has_proto_match(const u8 *pos, const u8 *end, u8 proto)
1296 	while (end - pos >= 4) {
1306 static int has_proto_port_match(const u8 *pos, const u8 *end, u8 proto,
1309 	while (end - pos >= 4) {
1327 	const u8 *capab, *end;
1344 	end = capab + wpabuf_len(bss->anqp->hs20_connection_capability);
1349 			if (!has_proto_match(capab, end,
1355 					    capab, end,
1569 		" based on roaming consortium match", MAC2STR(bss->bssid));
2014 		wpa_msg(wpa_s, MSG_DEBUG, "PLMN match %sfound",
2193 	const u8 *pos, *end;
2198 	end = pos + wpabuf_len(domain_names);
2200 	while (end - pos > 1) {
2204 		if (elen > end - pos)
2260 			"Interworking: Search for match with SIM/USIM domain %s",
2275 			"Interworking: Search for match with home SP FQDN %s",
2342 	/* TODO: match Country */
2366 			wpa_printf(MSG_DEBUG, "Interworking: Roaming partner preference match - priority %u",
2372 	wpa_printf(MSG_DEBUG, "Interworking: No roaming partner preference match - use default roaming partner priority 128");
2459 				"Interworking: Credential match with " MACSTR
2553 				"Interworking: Possible BSS match for enabled network configurations");
2716 	 * does not end up using excessive recursion.
2855 	const u8 *pos = data, *end = data + len;
2858 	while (end - pos >= 2) {
2862 		if (slen < 1 || slen > end - pos) {
3053 	const u8 *end;
3100 	end = pos + wpabuf_len(resp);
3102 	while (pos < end) {
3103 		unsigned int left = end - pos;