net/bluetooth/l2cap_core.c

3910 				    struct l2cap_cmd_hdr *cmd, u16 cmd_len,
3915 	if (cmd_len < sizeof(*rej))
4067 			     struct l2cap_cmd_hdr *cmd, u16 cmd_len, u8 *data)
4072 	if (cmd_len < sizeof(struct l2cap_conn_req))
4085 				    struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4094 	if (cmd_len < sizeof(*rsp))
4213 				   struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4222 	if (cmd_len < sizeof(*req))
4244 	len = cmd_len - sizeof(*req);
4322 				   struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4328 	int len = cmd_len - sizeof(*rsp);
4331 	if (cmd_len < sizeof(*rsp))
4429 				       struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4437 	if (cmd_len != sizeof(*req))
4472 				       struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4479 	if (cmd_len != sizeof(*rsp))
4513 					struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4519 	if (cmd_len != sizeof(*req))
4561 					struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4567 	if (cmd_len < sizeof(*rsp))
4625 					      u16 cmd_len, u8 *data)
4636 	if (cmd_len != sizeof(struct l2cap_conn_param_update_req))
4680 				struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4689 	if (cmd_len < sizeof(*rsp))
4767 				      struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4774 		l2cap_command_rej(conn, cmd, cmd_len, data);
4778 		err = l2cap_connect_req(conn, cmd, cmd_len, data);
4782 		l2cap_connect_create_rsp(conn, cmd, cmd_len, data);
4786 		err = l2cap_config_req(conn, cmd, cmd_len, data);
4790 		l2cap_config_rsp(conn, cmd, cmd_len, data);
4794 		err = l2cap_disconnect_req(conn, cmd, cmd_len, data);
4798 		l2cap_disconnect_rsp(conn, cmd, cmd_len, data);
4802 		l2cap_send_cmd(conn, cmd->ident, L2CAP_ECHO_RSP, cmd_len, data);
4809 		err = l2cap_information_req(conn, cmd, cmd_len, data);
4813 		l2cap_information_rsp(conn, cmd, cmd_len, data);
4826 				struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4836 	if (cmd_len != sizeof(*req))
4965 				   struct l2cap_cmd_hdr *cmd, u16 cmd_len,
4972 	if (cmd_len != sizeof(*pkt))
5012 				       struct l2cap_cmd_hdr *cmd, u16 cmd_len,
5027 	if (cmd_len < sizeof(*req) || (cmd_len - sizeof(*req)) % sizeof(u16)) {
5032 	cmd_len -= sizeof(*req);
5033 	num_scid = cmd_len / sizeof(u16);
5165 				       struct l2cap_cmd_hdr *cmd, u16 cmd_len,
5175 	if (cmd_len < sizeof(*rsp))
5188 	cmd_len -= sizeof(*rsp);
5201 		if (cmd_len < sizeof(dcid)) {
5208 		cmd_len -= sizeof(u16);
5279 					 struct l2cap_cmd_hdr *cmd, u16 cmd_len,
5291 	if (cmd_len < sizeof(*req) || cmd_len - sizeof(*req) % sizeof(u16)) {
5311 	cmd_len -= sizeof(*req);
5312 	num_scid = cmd_len / sizeof(u16);
5350 					 struct l2cap_cmd_hdr *cmd, u16 cmd_len,
5357 	if (cmd_len < sizeof(*rsp))
5378 				       struct l2cap_cmd_hdr *cmd, u16 cmd_len,
5384 	if (cmd_len < sizeof(*rej))
5408 				   struct l2cap_cmd_hdr *cmd, u16 cmd_len,
5415 		l2cap_le_command_rej(conn, cmd, cmd_len, data);
5419 		err = l2cap_conn_param_update_req(conn, cmd, cmd_len, data);
5426 		l2cap_le_connect_rsp(conn, cmd, cmd_len, data);
5430 		err = l2cap_le_connect_req(conn, cmd, cmd_len, data);
5434 		err = l2cap_le_credits(conn, cmd, cmd_len, data);
5438 		err = l2cap_ecred_conn_req(conn, cmd, cmd_len, data);
5442 		err = l2cap_ecred_conn_rsp(conn, cmd, cmd_len, data);
5446 		err = l2cap_ecred_reconf_req(conn, cmd, cmd_len, data);
5450 		err = l2cap_ecred_reconf_rsp(conn, cmd, cmd_len, data);
5454 		err = l2cap_disconnect_req(conn, cmd, cmd_len, data);
5458 		l2cap_disconnect_rsp(conn, cmd, cmd_len, data);