frm 2349 dev/ic/acx.c uint8_t *frm; frm 2362 dev/ic/acx.c frm = req.data.u_data.var; frm 2363 dev/ic/acx.c frm = ieee80211_add_ssid(frm, ssid, ssid_len); frm 2364 dev/ic/acx.c frm = ieee80211_add_rates(frm, &ic->ic_sup_rates[sc->chip_phymode]); frm 2365 dev/ic/acx.c frm = ieee80211_add_xrates(frm, &ic->ic_sup_rates[sc->chip_phymode]); frm 2366 dev/ic/acx.c len = frm - req.data.u_data.var; frm 2413 dev/ic/acx.c u_int8_t *frm; frm 2426 dev/ic/acx.c frm = mtod(m, u_int8_t *); frm 2427 dev/ic/acx.c for (; off + 1 < m->m_len; off += frm[off + 1] + 2) { frm 2428 dev/ic/acx.c if (frm[off] == type) frm 2425 dev/pci/if_wpi.c uint8_t *frm; frm 2494 dev/pci/if_wpi.c frm = (uint8_t *)(wh + 1); frm 2497 dev/pci/if_wpi.c *frm++ = IEEE80211_ELEMID_SSID; frm 2498 dev/pci/if_wpi.c *frm++ = 0; frm 2504 dev/pci/if_wpi.c frm = ieee80211_add_rates(frm, rs); frm 2508 dev/pci/if_wpi.c frm = ieee80211_add_xrates(frm, rs); frm 2511 dev/pci/if_wpi.c hdr->paylen = htole16(frm - (uint8_t *)wh); frm 2513 dev/pci/if_wpi.c chan = (struct wpi_scan_chan *)frm; frm 2539 dev/pci/if_wpi.c frm += sizeof (struct wpi_scan_chan); frm 2542 dev/pci/if_wpi.c hdr->len = htole16(frm - (uint8_t *)hdr); frm 2543 dev/pci/if_wpi.c pktlen = frm - (uint8_t *)cmd; frm 1412 dev/usb/if_uath.c uint8_t *frm = (uint8_t *)(desc + 1); frm 1416 dev/usb/if_uath.c bcopy(wh, frm, sizeof (struct ieee80211_frame)); frm 1417 dev/usb/if_uath.c frm += sizeof (struct ieee80211_frame); frm 1425 dev/usb/if_uath.c *frm++ = iv & 0xff; frm 1426 dev/usb/if_uath.c *frm++ = (iv >> 8) & 0xff; frm 1427 dev/usb/if_uath.c *frm++ = (iv >> 16) & 0xff; frm 1428 dev/usb/if_uath.c *frm++ = ic->ic_wep_txkey << 6; frm 1431 dev/usb/if_uath.c m0->m_pkthdr.len - sizeof (struct ieee80211_frame), frm); frm 833 net80211/ieee80211_input.c ieee80211_parse_edca_params_body(struct ieee80211com *ic, const u_int8_t *frm) frm 843 net80211/ieee80211_input.c updtcount = frm[0] & 0xf; frm 848 net80211/ieee80211_input.c frm += 2; /* skip QoS Info & Reserved fields */ frm 854 net80211/ieee80211_input.c ac->ac_acm = (frm[0] >> 4) & 0x1; frm 855 net80211/ieee80211_input.c ac->ac_aifsn = frm[0] & 0xf; frm 856 net80211/ieee80211_input.c ac->ac_ecwmin = frm[1] & 0xf; frm 857 net80211/ieee80211_input.c ac->ac_ecwmax = frm[1] >> 4; frm 858 net80211/ieee80211_input.c ac->ac_txoplimit = LE_READ_2(frm + 2); frm 859 net80211/ieee80211_input.c frm += 4; frm 869 net80211/ieee80211_input.c ieee80211_parse_edca_params(struct ieee80211com *ic, const u_int8_t *frm) frm 872 net80211/ieee80211_input.c if (frm[1] < 18) { frm 874 net80211/ieee80211_input.c " length %u, expecting 18\n", __func__, frm[1])); frm 878 net80211/ieee80211_input.c return ieee80211_parse_edca_params_body(ic, frm + 2); frm 882 net80211/ieee80211_input.c ieee80211_parse_wmm_params(struct ieee80211com *ic, const u_int8_t *frm) frm 885 net80211/ieee80211_input.c if (frm[1] < 24) { frm 887 net80211/ieee80211_input.c " length %u, expecting 24\n", __func__, frm[1])); frm 891 net80211/ieee80211_input.c return ieee80211_parse_edca_params_body(ic, frm + 8); frm 937 net80211/ieee80211_input.c const u_int8_t *frm, u_int len) frm 945 net80211/ieee80211_input.c efrm = frm + len; frm 948 net80211/ieee80211_input.c if (LE_READ_2(frm) != 1) frm 950 net80211/ieee80211_input.c frm += 2; frm 961 net80211/ieee80211_input.c if (frm + 4 > efrm) frm 963 net80211/ieee80211_input.c group_cipher = ieee80211_parse_rsn_cipher(frm); frm 966 net80211/ieee80211_input.c frm += 4; frm 969 net80211/ieee80211_input.c if (frm + 2 > efrm) frm 971 net80211/ieee80211_input.c m = LE_READ_2(frm); frm 972 net80211/ieee80211_input.c frm += 2; frm 975 net80211/ieee80211_input.c if (frm + m * 4 > efrm) frm 979 net80211/ieee80211_input.c pairwise_cipherset |= ieee80211_parse_rsn_cipher(frm); frm 980 net80211/ieee80211_input.c frm += 4; frm 990 net80211/ieee80211_input.c if (frm + 2 > efrm) frm 992 net80211/ieee80211_input.c n = LE_READ_2(frm); frm 993 net80211/ieee80211_input.c frm += 2; frm 996 net80211/ieee80211_input.c if (frm + n * 4 > efrm) frm 1000 net80211/ieee80211_input.c akmset |= ieee80211_parse_rsn_akm(frm); frm 1001 net80211/ieee80211_input.c frm += 4; frm 1005 net80211/ieee80211_input.c if (frm + 2 > efrm) frm 1007 net80211/ieee80211_input.c rsncaps = LE_READ_2(frm); frm 1008 net80211/ieee80211_input.c frm += 2; frm 1011 net80211/ieee80211_input.c if (frm + 2 > efrm) frm 1013 net80211/ieee80211_input.c s = LE_READ_2(frm); frm 1014 net80211/ieee80211_input.c frm += 2; frm 1017 net80211/ieee80211_input.c if (frm + s * IEEE80211_PMKID_LEN > efrm) frm 1021 net80211/ieee80211_input.c frm += IEEE80211_PMKID_LEN; frm 1034 net80211/ieee80211_input.c const u_int8_t *frm) frm 1037 net80211/ieee80211_input.c if (frm[1] < 2) { frm 1039 net80211/ieee80211_input.c " length %u, expecting at least 2\n", __func__, frm[1])); frm 1043 net80211/ieee80211_input.c return ieee80211_parse_rsn_body(ic, ni, frm + 2, frm[1] - 2); frm 1048 net80211/ieee80211_input.c const u_int8_t *frm) frm 1051 net80211/ieee80211_input.c if (frm[1] < 6) { frm 1053 net80211/ieee80211_input.c " length %u, expecting at least 6\n", __func__, frm[1])); frm 1057 net80211/ieee80211_input.c return ieee80211_parse_rsn_body(ic, ni, frm + 6, frm[1] - 4); frm 1083 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 1111 net80211/ieee80211_input.c frm = (const u_int8_t *)&wh[1]; frm 1114 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, 12); frm 1115 net80211/ieee80211_input.c tstamp = frm; frm += 8; frm 1116 net80211/ieee80211_input.c bintval = LE_READ_2(frm); frm += 2; frm 1117 net80211/ieee80211_input.c capinfo = LE_READ_2(frm); frm += 2; frm 1124 net80211/ieee80211_input.c while (frm + 2 <= efrm) { frm 1125 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) { frm 1129 net80211/ieee80211_input.c switch (frm[0]) { frm 1131 net80211/ieee80211_input.c ssid = frm; frm 1134 net80211/ieee80211_input.c rates = frm; frm 1139 net80211/ieee80211_input.c if (frm[1] < 5) { frm 1143 net80211/ieee80211_input.c fhdwell = LE_READ_2(frm + 2); frm 1144 net80211/ieee80211_input.c chan = IEEE80211_FH_CHAN(frm[4], frm[5]); frm 1145 net80211/ieee80211_input.c fhindex = frm[6]; frm 1150 net80211/ieee80211_input.c if (frm[1] < 1) { frm 1154 net80211/ieee80211_input.c chan = frm[2]; frm 1161 net80211/ieee80211_input.c xrates = frm; frm 1164 net80211/ieee80211_input.c if (frm[1] < 1) { frm 1168 net80211/ieee80211_input.c erp = frm[2]; frm 1171 net80211/ieee80211_input.c rsn = frm; frm 1174 net80211/ieee80211_input.c edca = frm; frm 1179 net80211/ieee80211_input.c if (frm[1] < 4) { frm 1183 net80211/ieee80211_input.c if (memcmp(frm + 2, MICROSOFT_OUI, 3) == 0) { frm 1184 net80211/ieee80211_input.c if (frm[5] == 1) frm 1185 net80211/ieee80211_input.c wpa = frm; frm 1186 net80211/ieee80211_input.c else if (frm[1] >= 5 && frm 1187 net80211/ieee80211_input.c frm[5] == 2 && frm[6] == 1) frm 1188 net80211/ieee80211_input.c wmm = frm; frm 1193 net80211/ieee80211_input.c "ignored\n", __func__, *frm, frm[1])); frm 1197 net80211/ieee80211_input.c frm += 2 + frm[1]; frm 1360 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 1369 net80211/ieee80211_input.c frm = (const u_int8_t *)&wh[1]; frm 1373 net80211/ieee80211_input.c while (frm + 2 <= efrm) { frm 1374 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) { frm 1378 net80211/ieee80211_input.c switch (frm[0]) { frm 1380 net80211/ieee80211_input.c ssid = frm; frm 1383 net80211/ieee80211_input.c rates = frm; frm 1386 net80211/ieee80211_input.c xrates = frm; frm 1389 net80211/ieee80211_input.c frm += 2 + frm[1]; frm 1433 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 1437 net80211/ieee80211_input.c frm = (const u_int8_t *)&wh[1]; frm 1440 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, 6); frm 1441 net80211/ieee80211_input.c algo = LE_READ_2(frm); frm += 2; frm 1442 net80211/ieee80211_input.c seq = LE_READ_2(frm); frm += 2; frm 1443 net80211/ieee80211_input.c status = LE_READ_2(frm); frm += 2; frm 1482 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 1493 net80211/ieee80211_input.c frm = (const u_int8_t *)&wh[1]; frm 1504 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, (reassoc ? 10 : 4)); frm 1511 net80211/ieee80211_input.c capinfo = LE_READ_2(frm); frm += 2; frm 1512 net80211/ieee80211_input.c bintval = LE_READ_2(frm); frm += 2; frm 1514 net80211/ieee80211_input.c frm += IEEE80211_ADDR_LEN; /* skip current AP address */ frm 1516 net80211/ieee80211_input.c while (frm + 2 <= efrm) { frm 1517 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) { frm 1521 net80211/ieee80211_input.c switch (frm[0]) { frm 1523 net80211/ieee80211_input.c ssid = frm; frm 1526 net80211/ieee80211_input.c rates = frm; frm 1529 net80211/ieee80211_input.c xrates = frm; frm 1532 net80211/ieee80211_input.c rsn = frm; frm 1537 net80211/ieee80211_input.c if (frm[1] < 4) { frm 1541 net80211/ieee80211_input.c if (memcmp(frm + 2, MICROSOFT_OUI, 3) == 0) { frm 1542 net80211/ieee80211_input.c if (frm[5] == 1) frm 1543 net80211/ieee80211_input.c wpa = frm; frm 1547 net80211/ieee80211_input.c frm += 2 + frm[1]; frm 1630 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 1642 net80211/ieee80211_input.c frm = (const u_int8_t *)&wh[1]; frm 1645 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, 6); frm 1647 net80211/ieee80211_input.c capinfo = LE_READ_2(frm); frm += 2; frm 1648 net80211/ieee80211_input.c status = LE_READ_2(frm); frm += 2; frm 1660 net80211/ieee80211_input.c associd = LE_READ_2(frm); frm += 2; frm 1663 net80211/ieee80211_input.c while (frm + 2 <= efrm) { frm 1664 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) { frm 1668 net80211/ieee80211_input.c switch (frm[0]) { frm 1670 net80211/ieee80211_input.c rates = frm; frm 1673 net80211/ieee80211_input.c xrates = frm; frm 1676 net80211/ieee80211_input.c edca = frm; frm 1679 net80211/ieee80211_input.c if (frm[1] < 4) { frm 1683 net80211/ieee80211_input.c if (memcmp(frm + 2, MICROSOFT_OUI, 3) == 0) { frm 1684 net80211/ieee80211_input.c if (frm[1] >= 5 && frm[5] == 2 && frm[6] == 1) frm 1685 net80211/ieee80211_input.c wmm = frm; frm 1689 net80211/ieee80211_input.c frm += 2 + frm[1]; frm 1752 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 1756 net80211/ieee80211_input.c frm = (const u_int8_t *)&wh[1]; frm 1759 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, 2); frm 1760 net80211/ieee80211_input.c reason = LE_READ_2(frm); frm 1793 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 1797 net80211/ieee80211_input.c frm = (const u_int8_t *)&wh[1]; frm 1800 net80211/ieee80211_input.c IEEE80211_VERIFY_LENGTH(efrm - frm, 2); frm 1801 net80211/ieee80211_input.c reason = LE_READ_2(frm); frm 1895 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 1912 net80211/ieee80211_input.c frm = (const u_int8_t *)&key[1]; frm 1913 net80211/ieee80211_input.c efrm = frm + BE_READ_2(key->paylen); frm 1916 net80211/ieee80211_input.c while (frm + 2 <= efrm) { frm 1917 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) frm 1919 net80211/ieee80211_input.c switch (frm[0]) { frm 1921 net80211/ieee80211_input.c if (frm[1] < 4) frm 1923 net80211/ieee80211_input.c if (memcmp(&frm[2], IEEE80211_OUI, 3) == 0) { frm 1924 net80211/ieee80211_input.c switch (frm[5]) { frm 1926 net80211/ieee80211_input.c pmkid = frm; frm 1932 net80211/ieee80211_input.c frm += 2 + frm[1]; frm 1973 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 1992 net80211/ieee80211_input.c frm = (const u_int8_t *)&key[1]; frm 1993 net80211/ieee80211_input.c efrm = frm + BE_READ_2(key->paylen); frm 1996 net80211/ieee80211_input.c while (frm + 2 <= efrm) { frm 1997 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) frm 1999 net80211/ieee80211_input.c switch (frm[0]) { frm 2001 net80211/ieee80211_input.c rsn = frm; frm 2004 net80211/ieee80211_input.c if (frm[1] < 4) frm 2006 net80211/ieee80211_input.c if (memcmp(&frm[2], MICROSOFT_OUI, 3) == 0) { frm 2007 net80211/ieee80211_input.c switch (frm[5]) { frm 2009 net80211/ieee80211_input.c rsn = frm; frm 2014 net80211/ieee80211_input.c frm += 2 + frm[1]; frm 2045 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 2060 net80211/ieee80211_input.c frm = (const u_int8_t *)&key[1]; frm 2061 net80211/ieee80211_input.c efrm = frm + BE_READ_2(key->paylen); frm 2064 net80211/ieee80211_input.c while (frm + 2 <= efrm) { frm 2065 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) frm 2067 net80211/ieee80211_input.c switch (frm[0]) { frm 2070 net80211/ieee80211_input.c rsn1 = frm; frm 2072 net80211/ieee80211_input.c rsn2 = frm; frm 2076 net80211/ieee80211_input.c if (frm[1] < 4) frm 2078 net80211/ieee80211_input.c if (memcmp(&frm[2], IEEE80211_OUI, 3) == 0) { frm 2079 net80211/ieee80211_input.c switch (frm[5]) { frm 2081 net80211/ieee80211_input.c gtk = frm; frm 2084 net80211/ieee80211_input.c } else if (memcmp(&frm[2], MICROSOFT_OUI, 3) == 0) { frm 2085 net80211/ieee80211_input.c switch (frm[5]) { frm 2087 net80211/ieee80211_input.c rsn1 = frm; frm 2093 net80211/ieee80211_input.c frm += 2 + frm[1]; frm 2227 net80211/ieee80211_input.c const u_int8_t *frm, *efrm; frm 2239 net80211/ieee80211_input.c frm = (const u_int8_t *)&key[1]; frm 2240 net80211/ieee80211_input.c efrm = frm + BE_READ_2(key->paylen); frm 2243 net80211/ieee80211_input.c while (frm + 2 <= efrm) { frm 2244 net80211/ieee80211_input.c if (frm + 2 + frm[1] > efrm) frm 2246 net80211/ieee80211_input.c switch (frm[0]) { frm 2248 net80211/ieee80211_input.c if (frm[1] < 4) frm 2250 net80211/ieee80211_input.c if (memcmp(&frm[2], IEEE80211_OUI, 3) == 0) { frm 2251 net80211/ieee80211_input.c switch (frm[5]) { frm 2253 net80211/ieee80211_input.c gtk = frm; frm 2259 net80211/ieee80211_input.c frm += 2 + frm[1]; frm 607 net80211/ieee80211_output.c ieee80211_add_capinfo(u_int8_t *frm, struct ieee80211com *ic, frm 626 net80211/ieee80211_output.c LE_WRITE_2(frm, capinfo); frm 627 net80211/ieee80211_output.c return frm + 2; frm 634 net80211/ieee80211_output.c ieee80211_add_ssid(u_int8_t *frm, const u_int8_t *ssid, u_int len) frm 636 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_SSID; frm 637 net80211/ieee80211_output.c *frm++ = len; frm 638 net80211/ieee80211_output.c memcpy(frm, ssid, len); frm 639 net80211/ieee80211_output.c return frm + len; frm 646 net80211/ieee80211_output.c ieee80211_add_rates(u_int8_t *frm, const struct ieee80211_rateset *rs) frm 650 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_RATES; frm 652 net80211/ieee80211_output.c *frm++ = nrates; frm 653 net80211/ieee80211_output.c memcpy(frm, rs->rs_rates, nrates); frm 654 net80211/ieee80211_output.c return frm + nrates; frm 661 net80211/ieee80211_output.c ieee80211_add_fh_params(u_int8_t *frm, struct ieee80211com *ic, frm 666 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_FHPARMS; frm 667 net80211/ieee80211_output.c *frm++ = 5; frm 668 net80211/ieee80211_output.c LE_WRITE_2(frm, ni->ni_fhdwell); frm += 2; frm 669 net80211/ieee80211_output.c *frm++ = IEEE80211_FH_CHANSET(chan); frm 670 net80211/ieee80211_output.c *frm++ = IEEE80211_FH_CHANPAT(chan); frm 671 net80211/ieee80211_output.c *frm++ = ni->ni_fhindex; frm 672 net80211/ieee80211_output.c return frm; frm 679 net80211/ieee80211_output.c ieee80211_add_ds_params(u_int8_t *frm, struct ieee80211com *ic, frm 682 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_DSPARMS; frm 683 net80211/ieee80211_output.c *frm++ = 1; frm 684 net80211/ieee80211_output.c *frm++ = ieee80211_chan2ieee(ic, ni->ni_chan); frm 685 net80211/ieee80211_output.c return frm; frm 692 net80211/ieee80211_output.c ieee80211_add_tim(u_int8_t *frm, struct ieee80211com *ic) frm 708 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_TIM; frm 709 net80211/ieee80211_output.c *frm++ = len + 3; /* length */ frm 710 net80211/ieee80211_output.c *frm++ = ic->ic_dtim_count; /* DTIM count */ frm 711 net80211/ieee80211_output.c *frm++ = ic->ic_dtim_period; /* DTIM period */ frm 714 net80211/ieee80211_output.c *frm = offset; frm 717 net80211/ieee80211_output.c *frm |= 0x01; frm 718 net80211/ieee80211_output.c frm++; frm 721 net80211/ieee80211_output.c memcpy(frm, &ic->ic_tim_bitmap[offset], len); frm 722 net80211/ieee80211_output.c return frm + len; frm 729 net80211/ieee80211_output.c ieee80211_add_ibss_params(u_int8_t *frm, const struct ieee80211_node *ni) frm 731 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_IBSSPARMS; frm 732 net80211/ieee80211_output.c *frm++ = 2; frm 733 net80211/ieee80211_output.c LE_WRITE_2(frm, 0); /* TODO: ATIM window */ frm 734 net80211/ieee80211_output.c return frm + 2; frm 741 net80211/ieee80211_output.c ieee80211_add_edca_params(u_int8_t *frm, struct ieee80211com *ic) frm 746 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_EDCAPARMS; frm 747 net80211/ieee80211_output.c *frm++ = 18; /* length */ frm 748 net80211/ieee80211_output.c *frm++ = 0; /* QoS Info */ frm 749 net80211/ieee80211_output.c *frm++ = 0; /* reserved */ frm 756 net80211/ieee80211_output.c *frm++ = (aci << 5) | ((ac->ac_acm & 0x1) << 4) | frm 758 net80211/ieee80211_output.c *frm++ = (ac->ac_ecwmax << 4) | frm 760 net80211/ieee80211_output.c LE_WRITE_2(frm, ac->ac_txoplimit); frm += 2; frm 762 net80211/ieee80211_output.c return frm; frm 769 net80211/ieee80211_output.c ieee80211_add_erp(u_int8_t *frm, struct ieee80211com *ic) frm 773 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_ERP; frm 774 net80211/ieee80211_output.c *frm++ = 1; frm 796 net80211/ieee80211_output.c *frm++ = erp; frm 797 net80211/ieee80211_output.c return frm; frm 804 net80211/ieee80211_output.c ieee80211_add_qos_capability(u_int8_t *frm, struct ieee80211com *ic) frm 806 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_QOS_CAP; frm 807 net80211/ieee80211_output.c *frm++ = 1; frm 808 net80211/ieee80211_output.c *frm++ = 0; /* QoS Info */ frm 809 net80211/ieee80211_output.c return frm; frm 816 net80211/ieee80211_output.c ieee80211_add_rsn_body(u_int8_t *frm, struct ieee80211com *ic, frm 824 net80211/ieee80211_output.c LE_WRITE_2(frm, 1); frm += 2; frm 827 net80211/ieee80211_output.c memcpy(frm, oui, 3); frm += 3; frm 834 net80211/ieee80211_output.c *frm++ = 1; frm 837 net80211/ieee80211_output.c *frm++ = 2; frm 840 net80211/ieee80211_output.c *frm++ = 4; frm 843 net80211/ieee80211_output.c *frm++ = 5; frm 847 net80211/ieee80211_output.c pcount = frm; frm += 2; frm 851 net80211/ieee80211_output.c memcpy(frm, oui, 3); frm += 3; frm 852 net80211/ieee80211_output.c *frm++ = 0; frm 856 net80211/ieee80211_output.c memcpy(frm, oui, 3); frm += 3; frm 857 net80211/ieee80211_output.c *frm++ = 2; frm 861 net80211/ieee80211_output.c memcpy(frm, oui, 3); frm += 3; frm 862 net80211/ieee80211_output.c *frm++ = 4; frm 868 net80211/ieee80211_output.c pcount = frm; frm += 2; frm 872 net80211/ieee80211_output.c memcpy(frm, oui, 3); frm += 3; frm 873 net80211/ieee80211_output.c *frm++ = 1; frm 877 net80211/ieee80211_output.c memcpy(frm, oui, 3); frm += 3; frm 878 net80211/ieee80211_output.c *frm++ = 2; frm 885 net80211/ieee80211_output.c LE_WRITE_2(frm, ni->ni_rsncaps); frm += 2; frm 889 net80211/ieee80211_output.c return frm; frm 893 net80211/ieee80211_output.c ieee80211_add_rsn(u_int8_t *frm, struct ieee80211com *ic, frm 898 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_RSN; frm 899 net80211/ieee80211_output.c plen = frm++; /* length filled in later */ frm 900 net80211/ieee80211_output.c frm = ieee80211_add_rsn_body(frm, ic, ni, 0); frm 903 net80211/ieee80211_output.c *plen = frm - plen - 1; frm 904 net80211/ieee80211_output.c return frm; frm 912 net80211/ieee80211_output.c ieee80211_add_wpa1(u_int8_t *frm, struct ieee80211com *ic, frm 917 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_VENDOR; frm 918 net80211/ieee80211_output.c plen = frm++; /* length filled in later */ frm 919 net80211/ieee80211_output.c memcpy(frm, MICROSOFT_OUI, 3); frm += 3; frm 920 net80211/ieee80211_output.c *frm++ = 1; /* WPA1 */ frm 921 net80211/ieee80211_output.c frm = ieee80211_add_rsn_body(frm, ic, ni, 1); frm 924 net80211/ieee80211_output.c *plen = frm - plen - 1; frm 925 net80211/ieee80211_output.c return frm; frm 932 net80211/ieee80211_output.c ieee80211_add_xrates(u_int8_t *frm, const struct ieee80211_rateset *rs) frm 938 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_XRATES; frm 940 net80211/ieee80211_output.c *frm++ = nrates; frm 941 net80211/ieee80211_output.c memcpy(frm, rs->rs_rates + IEEE80211_RATE_SIZE, nrates); frm 942 net80211/ieee80211_output.c return frm + nrates; frm 976 net80211/ieee80211_output.c u_int8_t *frm; frm 988 net80211/ieee80211_output.c frm = mtod(m, u_int8_t *); frm 989 net80211/ieee80211_output.c frm = ieee80211_add_ssid(frm, ic->ic_des_essid, ic->ic_des_esslen); frm 990 net80211/ieee80211_output.c frm = ieee80211_add_rates(frm, rs); frm 992 net80211/ieee80211_output.c frm = ieee80211_add_xrates(frm, rs); frm 994 net80211/ieee80211_output.c m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *); frm 1018 net80211/ieee80211_output.c u_int8_t *frm; frm 1037 net80211/ieee80211_output.c frm = mtod(m, u_int8_t *); frm 1038 net80211/ieee80211_output.c memset(frm, 0, 8); frm += 8; /* timestamp is set by hardware */ frm 1039 net80211/ieee80211_output.c LE_WRITE_2(frm, ic->ic_bss->ni_intval); frm += 2; frm 1040 net80211/ieee80211_output.c frm = ieee80211_add_capinfo(frm, ic, ni); frm 1041 net80211/ieee80211_output.c frm = ieee80211_add_ssid(frm, ic->ic_bss->ni_essid, frm 1043 net80211/ieee80211_output.c frm = ieee80211_add_rates(frm, rs); frm 1045 net80211/ieee80211_output.c frm = ieee80211_add_fh_params(frm, ic, ni); frm 1047 net80211/ieee80211_output.c frm = ieee80211_add_ds_params(frm, ic, ni); frm 1049 net80211/ieee80211_output.c frm = ieee80211_add_ibss_params(frm, ni); frm 1051 net80211/ieee80211_output.c frm = ieee80211_add_erp(frm, ic); frm 1053 net80211/ieee80211_output.c frm = ieee80211_add_xrates(frm, rs); frm 1055 net80211/ieee80211_output.c frm = ieee80211_add_rsn(frm, ic, ic->ic_bss); frm 1057 net80211/ieee80211_output.c frm = ieee80211_add_edca_params(frm, ic); frm 1059 net80211/ieee80211_output.c frm = ieee80211_add_wpa1(frm, ic, ic->ic_bss); frm 1061 net80211/ieee80211_output.c m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *); frm 1077 net80211/ieee80211_output.c u_int8_t *frm; frm 1085 net80211/ieee80211_output.c frm = mtod(m, u_int8_t *); frm 1086 net80211/ieee80211_output.c LE_WRITE_2(frm, IEEE80211_AUTH_ALG_OPEN); frm += 2; frm 1087 net80211/ieee80211_output.c LE_WRITE_2(frm, seq); frm += 2; frm 1088 net80211/ieee80211_output.c LE_WRITE_2(frm, status); frm 1131 net80211/ieee80211_output.c u_int8_t *frm; frm 1150 net80211/ieee80211_output.c frm = mtod(m, u_int8_t *); frm 1160 net80211/ieee80211_output.c LE_WRITE_2(frm, capinfo); frm += 2; frm 1161 net80211/ieee80211_output.c LE_WRITE_2(frm, ic->ic_lintval); frm += 2; frm 1163 net80211/ieee80211_output.c IEEE80211_ADDR_COPY(frm, ic->ic_bss->ni_bssid); frm 1164 net80211/ieee80211_output.c frm += IEEE80211_ADDR_LEN; frm 1166 net80211/ieee80211_output.c frm = ieee80211_add_ssid(frm, ni->ni_essid, ni->ni_esslen); frm 1167 net80211/ieee80211_output.c frm = ieee80211_add_rates(frm, rs); frm 1169 net80211/ieee80211_output.c frm = ieee80211_add_xrates(frm, rs); frm 1171 net80211/ieee80211_output.c frm = ieee80211_add_rsn(frm, ic, ic->ic_bss); frm 1174 net80211/ieee80211_output.c frm = ieee80211_add_qos_capability(frm, ic); frm 1176 net80211/ieee80211_output.c frm = ieee80211_add_wpa1(frm, ic, ic->ic_bss); frm 1178 net80211/ieee80211_output.c m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *); frm 1198 net80211/ieee80211_output.c u_int8_t *frm; frm 1211 net80211/ieee80211_output.c frm = mtod(m, u_int8_t *); frm 1212 net80211/ieee80211_output.c frm = ieee80211_add_capinfo(frm, ic, ni); frm 1213 net80211/ieee80211_output.c LE_WRITE_2(frm, status); frm += 2; frm 1215 net80211/ieee80211_output.c LE_WRITE_2(frm, ni->ni_associd); frm 1217 net80211/ieee80211_output.c LE_WRITE_2(frm, 0); frm 1218 net80211/ieee80211_output.c frm += 2; frm 1219 net80211/ieee80211_output.c frm = ieee80211_add_rates(frm, rs); frm 1221 net80211/ieee80211_output.c frm = ieee80211_add_xrates(frm, rs); frm 1224 net80211/ieee80211_output.c frm = ieee80211_add_edca_params(frm, ic); frm 1226 net80211/ieee80211_output.c m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *); frm 1425 net80211/ieee80211_output.c u_int8_t *frm; frm 1452 net80211/ieee80211_output.c frm = (u_int8_t *)&wh[1]; frm 1453 net80211/ieee80211_output.c memset(frm, 0, 8); frm += 8; /* timestamp is set by hardware */ frm 1454 net80211/ieee80211_output.c LE_WRITE_2(frm, ni->ni_intval); frm += 2; frm 1455 net80211/ieee80211_output.c frm = ieee80211_add_capinfo(frm, ic, ni); frm 1457 net80211/ieee80211_output.c frm = ieee80211_add_ssid(frm, NULL, 0); frm 1459 net80211/ieee80211_output.c frm = ieee80211_add_ssid(frm, ni->ni_essid, ni->ni_esslen); frm 1460 net80211/ieee80211_output.c frm = ieee80211_add_rates(frm, rs); frm 1462 net80211/ieee80211_output.c frm = ieee80211_add_fh_params(frm, ic, ni); frm 1464 net80211/ieee80211_output.c frm = ieee80211_add_ds_params(frm, ic, ni); frm 1466 net80211/ieee80211_output.c frm = ieee80211_add_ibss_params(frm, ni); frm 1468 net80211/ieee80211_output.c frm = ieee80211_add_tim(frm, ic); frm 1470 net80211/ieee80211_output.c frm = ieee80211_add_erp(frm, ic); frm 1472 net80211/ieee80211_output.c frm = ieee80211_add_xrates(frm, rs); frm 1474 net80211/ieee80211_output.c frm = ieee80211_add_rsn(frm, ic, ni); frm 1476 net80211/ieee80211_output.c frm = ieee80211_add_edca_params(frm, ic); frm 1478 net80211/ieee80211_output.c frm = ieee80211_add_wpa1(frm, ic, ni); frm 1480 net80211/ieee80211_output.c m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *); frm 1569 net80211/ieee80211_output.c ieee80211_add_gtk_kde(u_int8_t *frm, const struct ieee80211_key *k) frm 1573 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_VENDOR; frm 1574 net80211/ieee80211_output.c *frm++ = 6 + k->k_len; frm 1575 net80211/ieee80211_output.c memcpy(frm, IEEE80211_OUI, 3); frm += 3; frm 1576 net80211/ieee80211_output.c *frm++ = IEEE80211_KDE_GTK; frm 1577 net80211/ieee80211_output.c *frm = k->k_id & 3; frm 1579 net80211/ieee80211_output.c *frm |= 1 << 2; /* set the Tx bit */ frm 1580 net80211/ieee80211_output.c frm++; frm 1581 net80211/ieee80211_output.c *frm++ = 0; /* reserved */ frm 1582 net80211/ieee80211_output.c memcpy(frm, k->k_key, k->k_len); frm 1583 net80211/ieee80211_output.c return frm + k->k_len; frm 1590 net80211/ieee80211_output.c ieee80211_add_pmkid_kde(u_int8_t *frm, const u_int8_t *pmkid) frm 1592 net80211/ieee80211_output.c *frm++ = IEEE80211_ELEMID_VENDOR; frm 1593 net80211/ieee80211_output.c *frm++ = 20; frm 1594 net80211/ieee80211_output.c memcpy(frm, IEEE80211_OUI, 3); frm += 3; frm 1595 net80211/ieee80211_output.c *frm++ = IEEE80211_KDE_PMKID; frm 1596 net80211/ieee80211_output.c memcpy(frm, pmkid, IEEE80211_PMKID_LEN); frm 1597 net80211/ieee80211_output.c return frm + IEEE80211_PMKID_LEN; frm 1631 net80211/ieee80211_output.c u_int8_t *frm; frm 1650 net80211/ieee80211_output.c frm = (u_int8_t *)&key[1]; frm 1654 net80211/ieee80211_output.c frm = ieee80211_add_pmkid_kde(frm, pmkid); frm 1657 net80211/ieee80211_output.c m->m_pkthdr.len = m->m_len = frm - (u_int8_t *)key; frm 1678 net80211/ieee80211_output.c u_int8_t *frm; frm 1696 net80211/ieee80211_output.c frm = (u_int8_t *)&key[1]; frm 1700 net80211/ieee80211_output.c frm = ieee80211_add_wpa1(frm, ic, ni); frm 1705 net80211/ieee80211_output.c frm = ieee80211_add_rsn(frm, ic, ni); frm 1707 net80211/ieee80211_output.c m->m_pkthdr.len = m->m_len = frm - (u_int8_t *)key; frm 1728 net80211/ieee80211_output.c u_int8_t *frm; frm 1750 net80211/ieee80211_output.c frm = (u_int8_t *)&key[1]; frm 1753 net80211/ieee80211_output.c frm = ieee80211_add_rsn(frm, ic, ic->ic_bss); frm 1755 net80211/ieee80211_output.c frm = ieee80211_add_gtk_kde(frm, gtk); frm 1759 net80211/ieee80211_output.c frm = ieee80211_add_wpa1(frm, ic, ic->ic_bss); frm 1764 net80211/ieee80211_output.c m->m_pkthdr.len = m->m_len = frm - (u_int8_t *)key; frm 1826 net80211/ieee80211_output.c u_int8_t *frm; frm 1842 net80211/ieee80211_output.c frm = (u_int8_t *)&key[1]; frm 1846 net80211/ieee80211_output.c memcpy(frm, gtk->k_key, gtk->k_len); frm 1847 net80211/ieee80211_output.c frm += gtk->k_len; frm 1852 net80211/ieee80211_output.c frm = ieee80211_add_gtk_kde(frm, gtk); frm 1859 net80211/ieee80211_output.c m->m_pkthdr.len = m->m_len = frm - (u_int8_t *)key;