sys/netinet/sctp_asconf.c

93 	aph->ph.param_length = sizeof(struct sctp_asconf_paramhdr);
94 	SCTP_BUF_LEN(m_reply) = aph->ph.param_length;
95 	aph->ph.param_length = htons(aph->ph.param_length);
108 	uint16_t i, param_length, cause_length, padding_length;
115 	param_length = sizeof(struct sctp_asconf_paramhdr) + cause_length;
120 	buf_len = param_length + padding_length;
135 	aph->ph.param_length = htons(param_length);
161 	uint16_t param_length;
175 	aparam_length = ntohs(aph->ph.param_length);
182 	param_length = ntohs(ph->param_length);
183 	if (param_length + sizeof(struct sctp_asconf_paramhdr) != aparam_length) {
191 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
214 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
321 	uint16_t param_length;
335 	aparam_length = ntohs(aph->ph.param_length);
342 	param_length = ntohs(ph->param_length);
343 	if (param_length + sizeof(struct sctp_asconf_paramhdr) != aparam_length) {
351 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
371 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
459 	uint16_t param_length;
472 	aparam_length = ntohs(aph->ph.param_length);
479 	param_length = ntohs(ph->param_length);
480 	if (param_length + sizeof(struct sctp_asconf_paramhdr) != aparam_length) {
488 		if (param_length != sizeof(struct sctp_ipv4addr_param)) {
506 		if (param_length != sizeof(struct sctp_ipv6addr_param)) {
700 	offset += SCTP_SIZE32(ntohs(p_addr->ph.param_length));
710 		unsigned int param_length, param_type;
713 		param_length = ntohs(aph->ph.param_length);
714 		if (offset + param_length > asconf_limit) {
721 		if (param_length > sizeof(aparam_buf)) {
722 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) larger than buffer size!\n", param_length);
726 		if (param_length < sizeof(struct sctp_asconf_paramhdr)) {
727 			SCTPDBG(SCTP_DEBUG_ASCONF1, "handle_asconf: param length (%u) too short\n", param_length);
732 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf);
789 		offset += SCTP_SIZE32(param_length);
890 	uint16_t param_type, param_length;
893 	param_length = ntohs(ph->param_length);
905 			    (param_length == sizeof(struct sctp_ipv6addr_param)) &&
921 			    (param_length == sizeof(struct sctp_ipv4addr_param)) &&
1284 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param));
1285 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) +
1299 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param));
1300 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) +
1502 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv6addr_param));
1503 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv6addr_param);
1516 			aa->ap.addrp.ph.param_length = (sizeof(struct sctp_ipv4addr_param));
1517 			aa->ap.aph.ph.param_length = sizeof(struct sctp_asconf_paramhdr) + sizeof(struct sctp_ipv4addr_param);
1575 	    htons(aph->ph.param_length)) {
1581 	if (htons(ph->param_length) + sizeof(struct sctp_paramhdr) >
1730 		unsigned int param_length, param_type;
1741 		param_length = ntohs(aph->ph.param_length);
1742 		if (param_length > ack_length) {
1746 		if (param_length < sizeof(struct sctp_asconf_paramhdr)) {
1751 		if (param_length > sizeof(aparam_buf)) {
1753 			    "param length (%u) larger than buffer size!\n", param_length);
1757 		aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(m, offset, param_length, aparam_buf);
1794 		if (ack_length > SCTP_SIZE32(param_length)) {
1795 			ack_length -= SCTP_SIZE32(param_length);
1799 		offset += SCTP_SIZE32(param_length);
2356 		offset += ntohs(ph->param_length);
2364 			unsigned int param_length, param_type;
2367 			param_length = ntohs(aph->ph.param_length);
2368 			if (offset + param_length > asconf_limit) {
2372 			if (param_length > sizeof(aparam_buf)) {
2373 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length (%u) larger than buffer size!\n", param_length);
2376 			if (param_length <= sizeof(struct sctp_paramhdr)) {
2377 				SCTPDBG(SCTP_DEBUG_ASCONF1, "is_addr_pending: param length(%u) too short\n", param_length);
2381 			aph = (struct sctp_asconf_paramhdr *)sctp_m_getptr(chk->data, offset, param_length, aparam_buf);
2402 			offset += SCTP_SIZE32(param_length);
2614 		p_length = SCTP_SIZE32(aa->ap.aph.ph.param_length);
2649 			lookup->ph.param_length = htons(SCTP_SIZE32(p_size));
2662 		aph->ph.param_length = htons(aph->ph.param_length);
2664 		aap->addrp.ph.param_length = htons(aap->addrp.ph.param_length);
2723 			lookup->ph.param_length = htons(SCTP_SIZE32(p_size));
2782 		plen = ntohs(ph->param_length);
2930 		plen = ntohs(ph->param_length);
3309 	vtag->aph.ph.param_length = sizeof(struct sctp_asconf_tag_param);
3319 		aa_add->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param);
3321 		aa_add->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param);
3324 		aa_del->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addrv4_param);
3326 		aa_del->ap.addrp.ph.param_length = sizeof(struct sctp_ipv4addr_param);
3333 		aa_add->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param);
3335 		aa_add->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param);
3338 		aa_del->ap.aph.ph.param_length = sizeof(struct sctp_asconf_addr_param);
3340 		aa_del->ap.addrp.ph.param_length = sizeof(struct sctp_ipv6addr_param);