net/hyperv/rndis_filter.c

83 					     u32 msg_len)
98 	rndis_msg->msg_len = msg_len;
136 		if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >= sizeof(struct rndis_packet)) {
142 				   rndis_msg->msg_len,
154 		if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >=
162 				rndis_msg->msg_len,
175 		if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >=
182 				rndis_msg->msg_len,
191 		if (rndis_msg->msg_len - RNDIS_HEADER_SIZE + sizeof(struct rndis_set_complete)) {
196 				rndis_msg->msg_len,
203 		if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >=
209 				rndis_msg->msg_len,
219 			rndis_msg->msg_len);
235 	packet->total_data_buflen = req->request_msg.msg_len;
240 	pb[0].len = req->request_msg.msg_len;
251 		pb[1].len = req->request_msg.msg_len -
269 	u32 msg_len = request->response_msg.msg_len;
272 	if (msg_len - RNDIS_HEADER_SIZE < sizeof(struct rndis_query_complete))
280 	    msg_len - RNDIS_HEADER_SIZE >= query_complete->info_buf_offset &&
281 	    msg_len - RNDIS_HEADER_SIZE - query_complete->info_buf_offset
313 	if (resp->msg_len - RNDIS_HEADER_SIZE < sizeof(u32)) {
314 		netdev_err(ndev, "rndis msg_len too small: %u\n",
315 			   resp->msg_len);
336 		if (resp->msg_len <=
341 			       resp->msg_len - RNDIS_HEADER_SIZE - sizeof(*req_id),
351 				resp->msg_len,
604 	if (rndis_msg->msg_len < RNDIS_HEADER_SIZE ||
605 	    buflen < rndis_msg->msg_len) {
606 		netdev_err(ndev, "Invalid rndis_msg (buflen: %u, msg_len: %u)\n",
607 			   buflen, rndis_msg->msg_len);
633 			   rndis_msg->msg_len);
648 	u32 msg_len;
686 		request->request_msg.msg_len += size;
698 		request->request_msg.msg_len +=
716 	msg_len = request->response_msg.msg_len;
719 	if (msg_len - RNDIS_HEADER_SIZE < sizeof(struct rndis_query_complete)) {
726 	    msg_len - RNDIS_HEADER_SIZE < query_complete->info_buf_offset ||
727 	    msg_len - RNDIS_HEADER_SIZE - query_complete->info_buf_offset