net/mac80211/parse.c

207 		u8 elen = elem->datalen;
269 			crc = crc32_be(crc, pos - 2, elen + 2);
275 			if (elen + 2 < sizeof(struct ieee80211_tdls_lnkie)) {
283 			if (elen < sizeof(struct ieee80211_ch_switch_timing)) {
292 			elems->ext_capab_len = elen;
296 			elems->ssid_len = elen;
300 			elems->supp_rates_len = elen;
303 			if (elen >= 1)
310 			if (elen >= sizeof(struct ieee80211_tim_ie)) {
312 				elems->tim_len = elen;
318 			if (elen >= 4 && pos[0] == 0x00 && pos[1] == 0x50 &&
323 					crc = crc32_be(crc, pos - 2, elen + 2);
325 				if (elen >= 5 && pos[3] == 2) {
329 						elems->wmm_info_len = elen;
332 						elems->wmm_param_len = elen;
339 			elems->rsn_len = elen;
342 			if (elen >= 1)
350 			elems->ext_supp_rates_len = elen;
355 			if (elen >= sizeof(struct ieee80211_ht_cap))
364 			if (elen >= sizeof(struct ieee80211_ht_operation))
373 			if (elen >= sizeof(struct ieee80211_vht_cap))
382 			if (elen >= sizeof(struct ieee80211_vht_operation)) {
385 					crc = crc32_be(crc, pos - 2, elen + 2);
394 			if (elen > 0) {
397 					crc = crc32_be(crc, pos - 2, elen + 2);
405 			elems->mesh_id_len = elen;
408 			if (elen >= sizeof(struct ieee80211_meshconf_ie))
416 			elems->peering_len = elen;
419 			if (elen >= 2)
424 			elems->preq_len = elen;
428 			elems->prep_len = elen;
432 			elems->perr_len = elen;
435 			if (elen >= sizeof(struct ieee80211_rann_ie))
442 			if (elen != sizeof(struct ieee80211_channel_sw_ie)) {
450 			if (elen != sizeof(struct ieee80211_ext_chansw_ie)) {
460 			if (elen != sizeof(struct ieee80211_sec_chan_offs_ie)) {
468 			if (elen <
486 			if (elen < sizeof(*elems->wide_bw_chansw_ie)) {
506 						     pos, elen);
520 							 pos, elen);
535 			elems->country_elem_len = elen;
538 			if (elen != 1) {
551 			if (elen < 4) {
561 			if (elen != 6) {
568 				crc = crc32_be(crc, pos - 2, elen + 2);
573 			if (elen < sizeof(struct ieee80211_addba_ext_ie)) {
581 			if (elen >= sizeof(struct ieee80211_timeout_interval_ie))
588 			if (elen >= sizeof(*elems->max_idle_period_ie))
593 			elems->rsnx_len = elen;
596 			if (elen < 1 ||
597 			    elen > sizeof(struct ieee80211_tx_pwr_env))
604 			elems->tx_pwr_env_len[elems->tx_pwr_env_num] = elen;
616 			if (elen >= sizeof(*elems->s1g_capab))
625 			if (elen == sizeof(*elems->s1g_oper))
634 			if (elen == sizeof(*elems->s1g_bcn_compat))
643 			if (elen == sizeof(struct ieee80211_aid_response_ie))