sys/net80211/ieee80211_input.c

524 	uint8_t *frm, *efrm;
527 	frm = (uint8_t *)&wh[1];
554 	IEEE80211_VERIFY_LENGTH(efrm - frm, 12,
557 	scan->tstamp  = frm;				frm += 8;
558 	scan->bintval = le16toh(*(uint16_t *)frm);	frm += 2;
559 	scan->capinfo = le16toh(*(uint16_t *)frm);	frm += 2;
562 	scan->ies = frm;
563 	scan->ies_len = efrm - frm;
565 	while (efrm - frm > 1) {
566 		IEEE80211_VERIFY_LENGTH(efrm - frm, frm[1] + 2,
568 		switch (*frm) {
570 			scan->ssid = frm;
573 			scan->rates = frm;
576 			scan->country = frm;
579 			scan->csa = frm;
582 			scan->quiet = frm;
586 				scan->fhdwell = le16dec(&frm[2]);
587 				scan->chan = IEEE80211_FH_CHAN(frm[4], frm[5]);
588 				scan->fhindex = frm[6];
597 				scan->chan = frm[2];
601 			scan->tim = frm;
602 			scan->timoff = frm - mtod(m, uint8_t *);
612 			scan->xrates = frm;
615 			if (frm[1] != 1) {
618 				    "bad len %u", frm[1]);
622 			scan->erp = frm[2] | 0x100;
625 			scan->htcap = frm;
628 			scan->vhtcap = frm;
631 			scan->vhtopmode = frm;
634 			scan->rsn = frm;
637 			scan->htinfo = frm;
641 			scan->meshid = frm;
644 			scan->meshconf = frm;
651 			if (iswpaoui(frm))
652 				scan->wpa = frm;
653 			else if (iswmeparam(frm) || iswmeinfo(frm))
654 				scan->wme = frm;
656 			else if (isatherosoui(frm))
657 				scan->ath = frm;
660 			else if (istdmaoui(frm))
661 				scan->tdma = frm;
668 				if (ishtcapoui(frm)) {
670 						scan->htcap = frm;
671 				} else if (ishtinfooui(frm)) {
673 						scan->htcap = frm;
680 			    "id %u, len %u", *frm, frm[1]);
684 		frm += frm[1] + 2;
797 	uint8_t *frm, *efrm;
806 	frm = (u_int8_t *)&wh[1];
808 	IEEE80211_VERIFY_LENGTH(efrm - frm,
810 	ia = (const struct ieee80211_action *) frm;
820 			IEEE80211_VERIFY_LENGTH(efrm - frm,
825 			IEEE80211_VERIFY_LENGTH(efrm - frm,
830 			IEEE80211_VERIFY_LENGTH(efrm - frm,
839 			IEEE80211_VERIFY_LENGTH(efrm - frm,
844 			IEEE80211_VERIFY_LENGTH(efrm - frm,
858 			IEEE80211_VERIFY_LENGTH(efrm - frm,
866 			IEEE80211_VERIFY_LENGTH(efrm - frm,