efrm 939 net80211/ieee80211_input.c const u_int8_t *efrm;
efrm 945 net80211/ieee80211_input.c efrm = frm + len;
efrm 961 net80211/ieee80211_input.c if (frm + 4 > efrm)
efrm 969 net80211/ieee80211_input.c if (frm + 2 > efrm)
efrm 975 net80211/ieee80211_input.c if (frm + m * 4 > efrm)
efrm 990 net80211/ieee80211_input.c if (frm + 2 > efrm)
efrm 996 net80211/ieee80211_input.c if (frm + n * 4 > efrm)
efrm 1005 net80211/ieee80211_input.c if (frm + 2 > efrm)
efrm 1011 net80211/ieee80211_input.c if (frm + 2 > efrm)
efrm 1017 net80211/ieee80211_input.c if (frm + s * IEEE80211_PMKID_LEN > efrm)
efrm 1083 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 1112 net80211/ieee80211_input.c efrm = mtod(m0, u_int8_t *) + m0->m_len;
efrm 1114 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, 12);
efrm 1124 net80211/ieee80211_input.c while (frm + 2 <= efrm) {
efrm 1125 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) {
efrm 1360 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 1370 net80211/ieee80211_input.c efrm = mtod(m0, u_int8_t *) + m0->m_len;
efrm 1373 net80211/ieee80211_input.c while (frm + 2 <= efrm) {
efrm 1374 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) {
efrm 1433 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 1438 net80211/ieee80211_input.c efrm = mtod(m0, u_int8_t *) + m0->m_len;
efrm 1440 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, 6);
efrm 1482 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 1494 net80211/ieee80211_input.c efrm = mtod(m0, u_int8_t *) + m0->m_len;
efrm 1504 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, (reassoc ? 10 : 4));
efrm 1516 net80211/ieee80211_input.c while (frm + 2 <= efrm) {
efrm 1517 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) {
efrm 1630 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 1643 net80211/ieee80211_input.c efrm = mtod(m0, u_int8_t *) + m0->m_len;
efrm 1645 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, 6);
efrm 1663 net80211/ieee80211_input.c while (frm + 2 <= efrm) {
efrm 1664 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) {
efrm 1752 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 1757 net80211/ieee80211_input.c efrm = mtod(m0, u_int8_t *) + m0->m_len;
efrm 1759 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, 2);
efrm 1793 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 1798 net80211/ieee80211_input.c efrm = mtod(m0, u_int8_t *) + m0->m_len;
efrm 1800 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, 2);
efrm 1895 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 1913 net80211/ieee80211_input.c efrm = frm + BE_READ_2(key->paylen);
efrm 1916 net80211/ieee80211_input.c while (frm + 2 <= efrm) {
efrm 1917 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm)
efrm 1973 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 1993 net80211/ieee80211_input.c efrm = frm + BE_READ_2(key->paylen);
efrm 1996 net80211/ieee80211_input.c while (frm + 2 <= efrm) {
efrm 1997 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm)
efrm 2045 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 2061 net80211/ieee80211_input.c efrm = frm + BE_READ_2(key->paylen);
efrm 2064 net80211/ieee80211_input.c while (frm + 2 <= efrm) {
efrm 2065 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm)
efrm 2227 net80211/ieee80211_input.c const u_int8_t *frm, *efrm;
efrm 2240 net80211/ieee80211_input.c efrm = frm + BE_READ_2(key->paylen);
efrm 2243 net80211/ieee80211_input.c while (frm + 2 <= efrm) {
efrm 2244 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm)