frm              2349 dev/ic/acx.c   	uint8_t *frm;
frm              2362 dev/ic/acx.c   	frm = req.data.u_data.var;
frm              2363 dev/ic/acx.c   	frm = ieee80211_add_ssid(frm, ssid, ssid_len);
frm              2364 dev/ic/acx.c   	frm = ieee80211_add_rates(frm, &ic->ic_sup_rates[sc->chip_phymode]);
frm              2365 dev/ic/acx.c   	frm = ieee80211_add_xrates(frm, &ic->ic_sup_rates[sc->chip_phymode]);
frm              2366 dev/ic/acx.c   	len = frm - req.data.u_data.var;
frm              2413 dev/ic/acx.c   	u_int8_t *frm;
frm              2426 dev/ic/acx.c   	frm = mtod(m, u_int8_t *);
frm              2427 dev/ic/acx.c   	for (; off + 1 < m->m_len; off += frm[off + 1] + 2) {
frm              2428 dev/ic/acx.c   		if (frm[off] == type)
frm              2425 dev/pci/if_wpi.c 	uint8_t *frm;
frm              2494 dev/pci/if_wpi.c 	frm = (uint8_t *)(wh + 1);
frm              2497 dev/pci/if_wpi.c 	*frm++ = IEEE80211_ELEMID_SSID;
frm              2498 dev/pci/if_wpi.c 	*frm++ = 0;
frm              2504 dev/pci/if_wpi.c 	frm = ieee80211_add_rates(frm, rs);
frm              2508 dev/pci/if_wpi.c 		frm = ieee80211_add_xrates(frm, rs);
frm              2511 dev/pci/if_wpi.c 	hdr->paylen = htole16(frm - (uint8_t *)wh);
frm              2513 dev/pci/if_wpi.c 	chan = (struct wpi_scan_chan *)frm;
frm              2539 dev/pci/if_wpi.c 		frm += sizeof (struct wpi_scan_chan);
frm              2542 dev/pci/if_wpi.c 	hdr->len = htole16(frm - (uint8_t *)hdr);
frm              2543 dev/pci/if_wpi.c 	pktlen = frm - (uint8_t *)cmd;
frm              1412 dev/usb/if_uath.c 		uint8_t *frm = (uint8_t *)(desc + 1);
frm              1416 dev/usb/if_uath.c 		bcopy(wh, frm, sizeof (struct ieee80211_frame));
frm              1417 dev/usb/if_uath.c 		frm += sizeof (struct ieee80211_frame);
frm              1425 dev/usb/if_uath.c 		*frm++ = iv & 0xff;
frm              1426 dev/usb/if_uath.c 		*frm++ = (iv >>  8) & 0xff;
frm              1427 dev/usb/if_uath.c 		*frm++ = (iv >> 16) & 0xff;
frm              1428 dev/usb/if_uath.c 		*frm++ = ic->ic_wep_txkey << 6;
frm              1431 dev/usb/if_uath.c 		    m0->m_pkthdr.len - sizeof (struct ieee80211_frame), frm);
frm               833 net80211/ieee80211_input.c ieee80211_parse_edca_params_body(struct ieee80211com *ic, const u_int8_t *frm)
frm               843 net80211/ieee80211_input.c 	updtcount = frm[0] & 0xf;
frm               848 net80211/ieee80211_input.c 	frm += 2;	/* skip QoS Info & Reserved fields */
frm               854 net80211/ieee80211_input.c 		ac->ac_acm       = (frm[0] >> 4) & 0x1;
frm               855 net80211/ieee80211_input.c 		ac->ac_aifsn     = frm[0] & 0xf;
frm               856 net80211/ieee80211_input.c 		ac->ac_ecwmin    = frm[1] & 0xf;
frm               857 net80211/ieee80211_input.c 		ac->ac_ecwmax    = frm[1] >> 4;
frm               858 net80211/ieee80211_input.c 		ac->ac_txoplimit = LE_READ_2(frm + 2);
frm               859 net80211/ieee80211_input.c 		frm += 4;
frm               869 net80211/ieee80211_input.c ieee80211_parse_edca_params(struct ieee80211com *ic, const u_int8_t *frm)
frm               872 net80211/ieee80211_input.c 	if (frm[1] < 18) {
frm               874 net80211/ieee80211_input.c 		    " length %u, expecting 18\n", __func__, frm[1]));
frm               878 net80211/ieee80211_input.c 	return ieee80211_parse_edca_params_body(ic, frm + 2);
frm               882 net80211/ieee80211_input.c ieee80211_parse_wmm_params(struct ieee80211com *ic, const u_int8_t *frm)
frm               885 net80211/ieee80211_input.c 	if (frm[1] < 24) {
frm               887 net80211/ieee80211_input.c 		    " length %u, expecting 24\n", __func__, frm[1]));
frm               891 net80211/ieee80211_input.c 	return ieee80211_parse_edca_params_body(ic, frm + 8);
frm               937 net80211/ieee80211_input.c     const u_int8_t *frm, u_int len)
frm               945 net80211/ieee80211_input.c 	efrm = frm + len;
frm               948 net80211/ieee80211_input.c 	if (LE_READ_2(frm) != 1)
frm               950 net80211/ieee80211_input.c 	frm += 2;
frm               961 net80211/ieee80211_input.c 	if (frm + 4 > efrm)
frm               963 net80211/ieee80211_input.c 	group_cipher = ieee80211_parse_rsn_cipher(frm);
frm               966 net80211/ieee80211_input.c 	frm += 4;
frm               969 net80211/ieee80211_input.c 	if (frm + 2 > efrm)
frm               971 net80211/ieee80211_input.c 	m = LE_READ_2(frm);
frm               972 net80211/ieee80211_input.c 	frm += 2;
frm               975 net80211/ieee80211_input.c 	if (frm + m * 4 > efrm)
frm               979 net80211/ieee80211_input.c 		pairwise_cipherset |= ieee80211_parse_rsn_cipher(frm);
frm               980 net80211/ieee80211_input.c 		frm += 4;
frm               990 net80211/ieee80211_input.c 	if (frm + 2 > efrm)
frm               992 net80211/ieee80211_input.c 	n = LE_READ_2(frm);
frm               993 net80211/ieee80211_input.c 	frm += 2;
frm               996 net80211/ieee80211_input.c 	if (frm + n * 4 > efrm)
frm              1000 net80211/ieee80211_input.c 		akmset |= ieee80211_parse_rsn_akm(frm);
frm              1001 net80211/ieee80211_input.c 		frm += 4;
frm              1005 net80211/ieee80211_input.c 	if (frm + 2 > efrm)
frm              1007 net80211/ieee80211_input.c 	rsncaps = LE_READ_2(frm);
frm              1008 net80211/ieee80211_input.c 	frm += 2;
frm              1011 net80211/ieee80211_input.c 	if (frm + 2 > efrm)
frm              1013 net80211/ieee80211_input.c 	s = LE_READ_2(frm);
frm              1014 net80211/ieee80211_input.c 	frm += 2;
frm              1017 net80211/ieee80211_input.c 	if (frm + s * IEEE80211_PMKID_LEN > efrm)
frm              1021 net80211/ieee80211_input.c 		frm += IEEE80211_PMKID_LEN;
frm              1034 net80211/ieee80211_input.c     const u_int8_t *frm)
frm              1037 net80211/ieee80211_input.c 	if (frm[1] < 2) {
frm              1039 net80211/ieee80211_input.c 		    " length %u, expecting at least 2\n", __func__, frm[1]));
frm              1043 net80211/ieee80211_input.c 	return ieee80211_parse_rsn_body(ic, ni, frm + 2, frm[1] - 2);
frm              1048 net80211/ieee80211_input.c     const u_int8_t *frm)
frm              1051 net80211/ieee80211_input.c 	if (frm[1] < 6) {
frm              1053 net80211/ieee80211_input.c 		    " length %u, expecting at least 6\n", __func__, frm[1]));
frm              1057 net80211/ieee80211_input.c 	return ieee80211_parse_rsn_body(ic, ni, frm + 6, frm[1] - 4);
frm              1083 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              1111 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&wh[1];
frm              1114 net80211/ieee80211_input.c 	IEEE80211_VERIFY_LENGTH(efrm - frm, 12);
frm              1115 net80211/ieee80211_input.c 	tstamp  = frm; frm += 8;
frm              1116 net80211/ieee80211_input.c 	bintval = LE_READ_2(frm); frm += 2;
frm              1117 net80211/ieee80211_input.c 	capinfo = LE_READ_2(frm); frm += 2;
frm              1124 net80211/ieee80211_input.c 	while (frm + 2 <= efrm) {
frm              1125 net80211/ieee80211_input.c 		if (frm + 2 + frm[1] > efrm) {
frm              1129 net80211/ieee80211_input.c 		switch (frm[0]) {
frm              1131 net80211/ieee80211_input.c 			ssid = frm;
frm              1134 net80211/ieee80211_input.c 			rates = frm;
frm              1139 net80211/ieee80211_input.c 			if (frm[1] < 5) {
frm              1143 net80211/ieee80211_input.c 			fhdwell = LE_READ_2(frm + 2);
frm              1144 net80211/ieee80211_input.c 			chan = IEEE80211_FH_CHAN(frm[4], frm[5]);
frm              1145 net80211/ieee80211_input.c 			fhindex = frm[6];
frm              1150 net80211/ieee80211_input.c 			if (frm[1] < 1) {
frm              1154 net80211/ieee80211_input.c 			chan = frm[2];
frm              1161 net80211/ieee80211_input.c 			xrates = frm;
frm              1164 net80211/ieee80211_input.c 			if (frm[1] < 1) {
frm              1168 net80211/ieee80211_input.c 			erp = frm[2];
frm              1171 net80211/ieee80211_input.c 			rsn = frm;
frm              1174 net80211/ieee80211_input.c 			edca = frm;
frm              1179 net80211/ieee80211_input.c 			if (frm[1] < 4) {
frm              1183 net80211/ieee80211_input.c 			if (memcmp(frm + 2, MICROSOFT_OUI, 3) == 0) {
frm              1184 net80211/ieee80211_input.c 				if (frm[5] == 1)
frm              1185 net80211/ieee80211_input.c 					wpa = frm;
frm              1186 net80211/ieee80211_input.c 				else if (frm[1] >= 5 &&
frm              1187 net80211/ieee80211_input.c 				    frm[5] == 2 && frm[6] == 1)
frm              1188 net80211/ieee80211_input.c 					wmm = frm;
frm              1193 net80211/ieee80211_input.c 			    "ignored\n", __func__, *frm, frm[1]));
frm              1197 net80211/ieee80211_input.c 		frm += 2 + frm[1];
frm              1360 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              1369 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&wh[1];
frm              1373 net80211/ieee80211_input.c 	while (frm + 2 <= efrm) {
frm              1374 net80211/ieee80211_input.c 		if (frm + 2 + frm[1] > efrm) {
frm              1378 net80211/ieee80211_input.c 		switch (frm[0]) {
frm              1380 net80211/ieee80211_input.c 			ssid = frm;
frm              1383 net80211/ieee80211_input.c 			rates = frm;
frm              1386 net80211/ieee80211_input.c 			xrates = frm;
frm              1389 net80211/ieee80211_input.c 		frm += 2 + frm[1];
frm              1433 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              1437 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&wh[1];
frm              1440 net80211/ieee80211_input.c 	IEEE80211_VERIFY_LENGTH(efrm - frm, 6);
frm              1441 net80211/ieee80211_input.c 	algo   = LE_READ_2(frm); frm += 2;
frm              1442 net80211/ieee80211_input.c 	seq    = LE_READ_2(frm); frm += 2;
frm              1443 net80211/ieee80211_input.c 	status = LE_READ_2(frm); frm += 2;
frm              1482 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              1493 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&wh[1];
frm              1504 net80211/ieee80211_input.c 	IEEE80211_VERIFY_LENGTH(efrm - frm, (reassoc ? 10 : 4));
frm              1511 net80211/ieee80211_input.c 	capinfo = LE_READ_2(frm); frm += 2;
frm              1512 net80211/ieee80211_input.c 	bintval = LE_READ_2(frm); frm += 2;
frm              1514 net80211/ieee80211_input.c 		frm += IEEE80211_ADDR_LEN;	/* skip current AP address */
frm              1516 net80211/ieee80211_input.c 	while (frm + 2 <= efrm) {
frm              1517 net80211/ieee80211_input.c 		if (frm + 2 + frm[1] > efrm) {
frm              1521 net80211/ieee80211_input.c 		switch (frm[0]) {
frm              1523 net80211/ieee80211_input.c 			ssid = frm;
frm              1526 net80211/ieee80211_input.c 			rates = frm;
frm              1529 net80211/ieee80211_input.c 			xrates = frm;
frm              1532 net80211/ieee80211_input.c 			rsn = frm;
frm              1537 net80211/ieee80211_input.c 			if (frm[1] < 4) {
frm              1541 net80211/ieee80211_input.c 			if (memcmp(frm + 2, MICROSOFT_OUI, 3) == 0) {
frm              1542 net80211/ieee80211_input.c 				if (frm[5] == 1)
frm              1543 net80211/ieee80211_input.c 					wpa = frm;
frm              1547 net80211/ieee80211_input.c 		frm += 2 + frm[1];
frm              1630 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              1642 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&wh[1];
frm              1645 net80211/ieee80211_input.c 	IEEE80211_VERIFY_LENGTH(efrm - frm, 6);
frm              1647 net80211/ieee80211_input.c 	capinfo = LE_READ_2(frm); frm += 2;
frm              1648 net80211/ieee80211_input.c 	status =  LE_READ_2(frm); frm += 2;
frm              1660 net80211/ieee80211_input.c 	associd = LE_READ_2(frm); frm += 2;
frm              1663 net80211/ieee80211_input.c 	while (frm + 2 <= efrm) {
frm              1664 net80211/ieee80211_input.c 		if (frm + 2 + frm[1] > efrm) {
frm              1668 net80211/ieee80211_input.c 		switch (frm[0]) {
frm              1670 net80211/ieee80211_input.c 			rates = frm;
frm              1673 net80211/ieee80211_input.c 			xrates = frm;
frm              1676 net80211/ieee80211_input.c 			edca = frm;
frm              1679 net80211/ieee80211_input.c 			if (frm[1] < 4) {
frm              1683 net80211/ieee80211_input.c 			if (memcmp(frm + 2, MICROSOFT_OUI, 3) == 0) {
frm              1684 net80211/ieee80211_input.c 				if (frm[1] >= 5 && frm[5] == 2 && frm[6] == 1)
frm              1685 net80211/ieee80211_input.c 					wmm = frm;
frm              1689 net80211/ieee80211_input.c 		frm += 2 + frm[1];
frm              1752 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              1756 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&wh[1];
frm              1759 net80211/ieee80211_input.c 	IEEE80211_VERIFY_LENGTH(efrm - frm, 2);
frm              1760 net80211/ieee80211_input.c 	reason = LE_READ_2(frm);
frm              1793 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              1797 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&wh[1];
frm              1800 net80211/ieee80211_input.c 	IEEE80211_VERIFY_LENGTH(efrm - frm, 2);
frm              1801 net80211/ieee80211_input.c 	reason = LE_READ_2(frm);
frm              1895 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              1912 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&key[1];
frm              1913 net80211/ieee80211_input.c 	efrm = frm + BE_READ_2(key->paylen);
frm              1916 net80211/ieee80211_input.c 	while (frm + 2 <= efrm) {
frm              1917 net80211/ieee80211_input.c 		if (frm + 2 + frm[1] > efrm)
frm              1919 net80211/ieee80211_input.c 		switch (frm[0]) {
frm              1921 net80211/ieee80211_input.c 			if (frm[1] < 4)
frm              1923 net80211/ieee80211_input.c 			if (memcmp(&frm[2], IEEE80211_OUI, 3) == 0) {
frm              1924 net80211/ieee80211_input.c 				switch (frm[5]) {
frm              1926 net80211/ieee80211_input.c 					pmkid = frm;
frm              1932 net80211/ieee80211_input.c 		frm += 2 + frm[1];
frm              1973 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              1992 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&key[1];
frm              1993 net80211/ieee80211_input.c 	efrm = frm + BE_READ_2(key->paylen);
frm              1996 net80211/ieee80211_input.c 	while (frm + 2 <= efrm) {
frm              1997 net80211/ieee80211_input.c 		if (frm + 2 + frm[1] > efrm)
frm              1999 net80211/ieee80211_input.c 		switch (frm[0]) {
frm              2001 net80211/ieee80211_input.c 			rsn = frm;
frm              2004 net80211/ieee80211_input.c 			if (frm[1] < 4)
frm              2006 net80211/ieee80211_input.c 			if (memcmp(&frm[2], MICROSOFT_OUI, 3) == 0) {
frm              2007 net80211/ieee80211_input.c 				switch (frm[5]) {
frm              2009 net80211/ieee80211_input.c 					rsn = frm;
frm              2014 net80211/ieee80211_input.c 		frm += 2 + frm[1];
frm              2045 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              2060 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&key[1];
frm              2061 net80211/ieee80211_input.c 	efrm = frm + BE_READ_2(key->paylen);
frm              2064 net80211/ieee80211_input.c 	while (frm + 2 <= efrm) {
frm              2065 net80211/ieee80211_input.c 		if (frm + 2 + frm[1] > efrm)
frm              2067 net80211/ieee80211_input.c 		switch (frm[0]) {
frm              2070 net80211/ieee80211_input.c 				rsn1 = frm;
frm              2072 net80211/ieee80211_input.c 				rsn2 = frm;
frm              2076 net80211/ieee80211_input.c 			if (frm[1] < 4)
frm              2078 net80211/ieee80211_input.c 			if (memcmp(&frm[2], IEEE80211_OUI, 3) == 0) {
frm              2079 net80211/ieee80211_input.c 				switch (frm[5]) {
frm              2081 net80211/ieee80211_input.c 					gtk = frm;
frm              2084 net80211/ieee80211_input.c 			} else if (memcmp(&frm[2], MICROSOFT_OUI, 3) == 0) {
frm              2085 net80211/ieee80211_input.c 				switch (frm[5]) {
frm              2087 net80211/ieee80211_input.c 					rsn1 = frm;
frm              2093 net80211/ieee80211_input.c 		frm += 2 + frm[1];
frm              2227 net80211/ieee80211_input.c 	const u_int8_t *frm, *efrm;
frm              2239 net80211/ieee80211_input.c 	frm = (const u_int8_t *)&key[1];
frm              2240 net80211/ieee80211_input.c 	efrm = frm + BE_READ_2(key->paylen);
frm              2243 net80211/ieee80211_input.c 	while (frm + 2 <= efrm) {
frm              2244 net80211/ieee80211_input.c 		if (frm + 2 + frm[1] > efrm)
frm              2246 net80211/ieee80211_input.c 		switch (frm[0]) {
frm              2248 net80211/ieee80211_input.c 			if (frm[1] < 4)
frm              2250 net80211/ieee80211_input.c 			if (memcmp(&frm[2], IEEE80211_OUI, 3) == 0) {
frm              2251 net80211/ieee80211_input.c 				switch (frm[5]) {
frm              2253 net80211/ieee80211_input.c 					gtk = frm;
frm              2259 net80211/ieee80211_input.c 		frm += 2 + frm[1];
frm               607 net80211/ieee80211_output.c ieee80211_add_capinfo(u_int8_t *frm, struct ieee80211com *ic,
frm               626 net80211/ieee80211_output.c 	LE_WRITE_2(frm, capinfo);
frm               627 net80211/ieee80211_output.c 	return frm + 2;
frm               634 net80211/ieee80211_output.c ieee80211_add_ssid(u_int8_t *frm, const u_int8_t *ssid, u_int len)
frm               636 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_SSID;
frm               637 net80211/ieee80211_output.c 	*frm++ = len;
frm               638 net80211/ieee80211_output.c 	memcpy(frm, ssid, len);
frm               639 net80211/ieee80211_output.c 	return frm + len;
frm               646 net80211/ieee80211_output.c ieee80211_add_rates(u_int8_t *frm, const struct ieee80211_rateset *rs)
frm               650 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_RATES;
frm               652 net80211/ieee80211_output.c 	*frm++ = nrates;
frm               653 net80211/ieee80211_output.c 	memcpy(frm, rs->rs_rates, nrates);
frm               654 net80211/ieee80211_output.c 	return frm + nrates;
frm               661 net80211/ieee80211_output.c ieee80211_add_fh_params(u_int8_t *frm, struct ieee80211com *ic,
frm               666 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_FHPARMS;
frm               667 net80211/ieee80211_output.c 	*frm++ = 5;
frm               668 net80211/ieee80211_output.c 	LE_WRITE_2(frm, ni->ni_fhdwell); frm += 2;
frm               669 net80211/ieee80211_output.c 	*frm++ = IEEE80211_FH_CHANSET(chan);
frm               670 net80211/ieee80211_output.c 	*frm++ = IEEE80211_FH_CHANPAT(chan);
frm               671 net80211/ieee80211_output.c 	*frm++ = ni->ni_fhindex;
frm               672 net80211/ieee80211_output.c 	return frm;
frm               679 net80211/ieee80211_output.c ieee80211_add_ds_params(u_int8_t *frm, struct ieee80211com *ic,
frm               682 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_DSPARMS;
frm               683 net80211/ieee80211_output.c 	*frm++ = 1;
frm               684 net80211/ieee80211_output.c 	*frm++ = ieee80211_chan2ieee(ic, ni->ni_chan);
frm               685 net80211/ieee80211_output.c 	return frm;
frm               692 net80211/ieee80211_output.c ieee80211_add_tim(u_int8_t *frm, struct ieee80211com *ic)
frm               708 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_TIM;
frm               709 net80211/ieee80211_output.c 	*frm++ = len + 3;		/* length */
frm               710 net80211/ieee80211_output.c 	*frm++ = ic->ic_dtim_count;	/* DTIM count */
frm               711 net80211/ieee80211_output.c 	*frm++ = ic->ic_dtim_period;	/* DTIM period */
frm               714 net80211/ieee80211_output.c 	*frm = offset;
frm               717 net80211/ieee80211_output.c 		*frm |= 0x01;
frm               718 net80211/ieee80211_output.c 	frm++;
frm               721 net80211/ieee80211_output.c 	memcpy(frm, &ic->ic_tim_bitmap[offset], len);
frm               722 net80211/ieee80211_output.c 	return frm + len;
frm               729 net80211/ieee80211_output.c ieee80211_add_ibss_params(u_int8_t *frm, const struct ieee80211_node *ni)
frm               731 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_IBSSPARMS;
frm               732 net80211/ieee80211_output.c 	*frm++ = 2;
frm               733 net80211/ieee80211_output.c 	LE_WRITE_2(frm, 0);	/* TODO: ATIM window */
frm               734 net80211/ieee80211_output.c 	return frm + 2;
frm               741 net80211/ieee80211_output.c ieee80211_add_edca_params(u_int8_t *frm, struct ieee80211com *ic)
frm               746 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_EDCAPARMS;
frm               747 net80211/ieee80211_output.c 	*frm++ = 18;	/* length */
frm               748 net80211/ieee80211_output.c 	*frm++ = 0;	/* QoS Info */
frm               749 net80211/ieee80211_output.c 	*frm++ = 0;	/* reserved */
frm               756 net80211/ieee80211_output.c 		*frm++ = (aci << 5) | ((ac->ac_acm & 0x1) << 4) |
frm               758 net80211/ieee80211_output.c 		*frm++ = (ac->ac_ecwmax << 4) |
frm               760 net80211/ieee80211_output.c 		LE_WRITE_2(frm, ac->ac_txoplimit); frm += 2;
frm               762 net80211/ieee80211_output.c 	return frm;
frm               769 net80211/ieee80211_output.c ieee80211_add_erp(u_int8_t *frm, struct ieee80211com *ic)
frm               773 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_ERP;
frm               774 net80211/ieee80211_output.c 	*frm++ = 1;
frm               796 net80211/ieee80211_output.c 	*frm++ = erp;
frm               797 net80211/ieee80211_output.c 	return frm;
frm               804 net80211/ieee80211_output.c ieee80211_add_qos_capability(u_int8_t *frm, struct ieee80211com *ic)
frm               806 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_QOS_CAP;
frm               807 net80211/ieee80211_output.c 	*frm++ = 1;
frm               808 net80211/ieee80211_output.c 	*frm++ = 0;	/* QoS Info */
frm               809 net80211/ieee80211_output.c 	return frm;
frm               816 net80211/ieee80211_output.c ieee80211_add_rsn_body(u_int8_t *frm, struct ieee80211com *ic,
frm               824 net80211/ieee80211_output.c 	LE_WRITE_2(frm, 1); frm += 2;
frm               827 net80211/ieee80211_output.c 	memcpy(frm, oui, 3); frm += 3;
frm               834 net80211/ieee80211_output.c 		*frm++ = 1;
frm               837 net80211/ieee80211_output.c 		*frm++ = 2;
frm               840 net80211/ieee80211_output.c 		*frm++ = 4;
frm               843 net80211/ieee80211_output.c 		*frm++ = 5;
frm               847 net80211/ieee80211_output.c 	pcount = frm; frm += 2;
frm               851 net80211/ieee80211_output.c 		memcpy(frm, oui, 3); frm += 3;
frm               852 net80211/ieee80211_output.c 		*frm++ = 0;
frm               856 net80211/ieee80211_output.c 		memcpy(frm, oui, 3); frm += 3;
frm               857 net80211/ieee80211_output.c 		*frm++ = 2;
frm               861 net80211/ieee80211_output.c 		memcpy(frm, oui, 3); frm += 3;
frm               862 net80211/ieee80211_output.c 		*frm++ = 4;
frm               868 net80211/ieee80211_output.c 	pcount = frm; frm += 2;
frm               872 net80211/ieee80211_output.c 		memcpy(frm, oui, 3); frm += 3;
frm               873 net80211/ieee80211_output.c 		*frm++ = 1;
frm               877 net80211/ieee80211_output.c 		memcpy(frm, oui, 3); frm += 3;
frm               878 net80211/ieee80211_output.c 		*frm++ = 2;
frm               885 net80211/ieee80211_output.c 	LE_WRITE_2(frm, ni->ni_rsncaps); frm += 2;
frm               889 net80211/ieee80211_output.c 	return frm;
frm               893 net80211/ieee80211_output.c ieee80211_add_rsn(u_int8_t *frm, struct ieee80211com *ic,
frm               898 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_RSN;
frm               899 net80211/ieee80211_output.c 	plen = frm++;	/* length filled in later */
frm               900 net80211/ieee80211_output.c 	frm = ieee80211_add_rsn_body(frm, ic, ni, 0);
frm               903 net80211/ieee80211_output.c 	*plen = frm - plen - 1;
frm               904 net80211/ieee80211_output.c 	return frm;
frm               912 net80211/ieee80211_output.c ieee80211_add_wpa1(u_int8_t *frm, struct ieee80211com *ic,
frm               917 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_VENDOR;
frm               918 net80211/ieee80211_output.c 	plen = frm++;	/* length filled in later */
frm               919 net80211/ieee80211_output.c 	memcpy(frm, MICROSOFT_OUI, 3); frm += 3;
frm               920 net80211/ieee80211_output.c 	*frm++ = 1;	/* WPA1 */
frm               921 net80211/ieee80211_output.c 	frm = ieee80211_add_rsn_body(frm, ic, ni, 1);
frm               924 net80211/ieee80211_output.c 	*plen = frm - plen - 1;
frm               925 net80211/ieee80211_output.c 	return frm;
frm               932 net80211/ieee80211_output.c ieee80211_add_xrates(u_int8_t *frm, const struct ieee80211_rateset *rs)
frm               938 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_XRATES;
frm               940 net80211/ieee80211_output.c 	*frm++ = nrates;
frm               941 net80211/ieee80211_output.c 	memcpy(frm, rs->rs_rates + IEEE80211_RATE_SIZE, nrates);
frm               942 net80211/ieee80211_output.c 	return frm + nrates;
frm               976 net80211/ieee80211_output.c 	u_int8_t *frm;
frm               988 net80211/ieee80211_output.c 	frm = mtod(m, u_int8_t *);
frm               989 net80211/ieee80211_output.c 	frm = ieee80211_add_ssid(frm, ic->ic_des_essid, ic->ic_des_esslen);
frm               990 net80211/ieee80211_output.c 	frm = ieee80211_add_rates(frm, rs);
frm               992 net80211/ieee80211_output.c 		frm = ieee80211_add_xrates(frm, rs);
frm               994 net80211/ieee80211_output.c 	m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *);
frm              1018 net80211/ieee80211_output.c 	u_int8_t *frm;
frm              1037 net80211/ieee80211_output.c 	frm = mtod(m, u_int8_t *);
frm              1038 net80211/ieee80211_output.c 	memset(frm, 0, 8); frm += 8;	/* timestamp is set by hardware */
frm              1039 net80211/ieee80211_output.c 	LE_WRITE_2(frm, ic->ic_bss->ni_intval); frm += 2;
frm              1040 net80211/ieee80211_output.c 	frm = ieee80211_add_capinfo(frm, ic, ni);
frm              1041 net80211/ieee80211_output.c 	frm = ieee80211_add_ssid(frm, ic->ic_bss->ni_essid,
frm              1043 net80211/ieee80211_output.c 	frm = ieee80211_add_rates(frm, rs);
frm              1045 net80211/ieee80211_output.c 		frm = ieee80211_add_fh_params(frm, ic, ni);
frm              1047 net80211/ieee80211_output.c 		frm = ieee80211_add_ds_params(frm, ic, ni);
frm              1049 net80211/ieee80211_output.c 		frm = ieee80211_add_ibss_params(frm, ni);
frm              1051 net80211/ieee80211_output.c 		frm = ieee80211_add_erp(frm, ic);
frm              1053 net80211/ieee80211_output.c 		frm = ieee80211_add_xrates(frm, rs);
frm              1055 net80211/ieee80211_output.c 		frm = ieee80211_add_rsn(frm, ic, ic->ic_bss);
frm              1057 net80211/ieee80211_output.c 		frm = ieee80211_add_edca_params(frm, ic);
frm              1059 net80211/ieee80211_output.c 		frm = ieee80211_add_wpa1(frm, ic, ic->ic_bss);
frm              1061 net80211/ieee80211_output.c 	m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *);
frm              1077 net80211/ieee80211_output.c 	u_int8_t *frm;
frm              1085 net80211/ieee80211_output.c 	frm = mtod(m, u_int8_t *);
frm              1086 net80211/ieee80211_output.c 	LE_WRITE_2(frm, IEEE80211_AUTH_ALG_OPEN); frm += 2;
frm              1087 net80211/ieee80211_output.c 	LE_WRITE_2(frm, seq); frm += 2;
frm              1088 net80211/ieee80211_output.c 	LE_WRITE_2(frm, status);
frm              1131 net80211/ieee80211_output.c 	u_int8_t *frm;
frm              1150 net80211/ieee80211_output.c 	frm = mtod(m, u_int8_t *);
frm              1160 net80211/ieee80211_output.c 	LE_WRITE_2(frm, capinfo); frm += 2;
frm              1161 net80211/ieee80211_output.c 	LE_WRITE_2(frm, ic->ic_lintval); frm += 2;
frm              1163 net80211/ieee80211_output.c 		IEEE80211_ADDR_COPY(frm, ic->ic_bss->ni_bssid);
frm              1164 net80211/ieee80211_output.c 		frm += IEEE80211_ADDR_LEN;
frm              1166 net80211/ieee80211_output.c 	frm = ieee80211_add_ssid(frm, ni->ni_essid, ni->ni_esslen);
frm              1167 net80211/ieee80211_output.c 	frm = ieee80211_add_rates(frm, rs);
frm              1169 net80211/ieee80211_output.c 		frm = ieee80211_add_xrates(frm, rs);
frm              1171 net80211/ieee80211_output.c 		frm = ieee80211_add_rsn(frm, ic, ic->ic_bss);
frm              1174 net80211/ieee80211_output.c 		frm = ieee80211_add_qos_capability(frm, ic);
frm              1176 net80211/ieee80211_output.c 		frm = ieee80211_add_wpa1(frm, ic, ic->ic_bss);
frm              1178 net80211/ieee80211_output.c 	m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *);
frm              1198 net80211/ieee80211_output.c 	u_int8_t *frm;
frm              1211 net80211/ieee80211_output.c 	frm = mtod(m, u_int8_t *);
frm              1212 net80211/ieee80211_output.c 	frm = ieee80211_add_capinfo(frm, ic, ni);
frm              1213 net80211/ieee80211_output.c 	LE_WRITE_2(frm, status); frm += 2;
frm              1215 net80211/ieee80211_output.c 		LE_WRITE_2(frm, ni->ni_associd);
frm              1217 net80211/ieee80211_output.c 		LE_WRITE_2(frm, 0);
frm              1218 net80211/ieee80211_output.c 	frm += 2;
frm              1219 net80211/ieee80211_output.c 	frm = ieee80211_add_rates(frm, rs);
frm              1221 net80211/ieee80211_output.c 		frm = ieee80211_add_xrates(frm, rs);
frm              1224 net80211/ieee80211_output.c 		frm = ieee80211_add_edca_params(frm, ic);
frm              1226 net80211/ieee80211_output.c 	m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *);
frm              1425 net80211/ieee80211_output.c 	u_int8_t *frm;
frm              1452 net80211/ieee80211_output.c 	frm = (u_int8_t *)&wh[1];
frm              1453 net80211/ieee80211_output.c 	memset(frm, 0, 8); frm += 8;	/* timestamp is set by hardware */
frm              1454 net80211/ieee80211_output.c 	LE_WRITE_2(frm, ni->ni_intval); frm += 2;
frm              1455 net80211/ieee80211_output.c 	frm = ieee80211_add_capinfo(frm, ic, ni);
frm              1457 net80211/ieee80211_output.c 		frm = ieee80211_add_ssid(frm, NULL, 0);
frm              1459 net80211/ieee80211_output.c 		frm = ieee80211_add_ssid(frm, ni->ni_essid, ni->ni_esslen);
frm              1460 net80211/ieee80211_output.c 	frm = ieee80211_add_rates(frm, rs);
frm              1462 net80211/ieee80211_output.c 		frm = ieee80211_add_fh_params(frm, ic, ni);
frm              1464 net80211/ieee80211_output.c 		frm = ieee80211_add_ds_params(frm, ic, ni);
frm              1466 net80211/ieee80211_output.c 		frm = ieee80211_add_ibss_params(frm, ni);
frm              1468 net80211/ieee80211_output.c 		frm = ieee80211_add_tim(frm, ic);
frm              1470 net80211/ieee80211_output.c 		frm = ieee80211_add_erp(frm, ic);
frm              1472 net80211/ieee80211_output.c 		frm = ieee80211_add_xrates(frm, rs);
frm              1474 net80211/ieee80211_output.c 		frm = ieee80211_add_rsn(frm, ic, ni);
frm              1476 net80211/ieee80211_output.c 		frm = ieee80211_add_edca_params(frm, ic);
frm              1478 net80211/ieee80211_output.c 		frm = ieee80211_add_wpa1(frm, ic, ni);
frm              1480 net80211/ieee80211_output.c 	m->m_pkthdr.len = m->m_len = frm - mtod(m, u_int8_t *);
frm              1569 net80211/ieee80211_output.c ieee80211_add_gtk_kde(u_int8_t *frm, const struct ieee80211_key *k)
frm              1573 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_VENDOR;
frm              1574 net80211/ieee80211_output.c 	*frm++ = 6 + k->k_len;
frm              1575 net80211/ieee80211_output.c 	memcpy(frm, IEEE80211_OUI, 3); frm += 3;
frm              1576 net80211/ieee80211_output.c 	*frm++ = IEEE80211_KDE_GTK;
frm              1577 net80211/ieee80211_output.c 	*frm = k->k_id & 3;
frm              1579 net80211/ieee80211_output.c 		*frm |= 1 << 2;	/* set the Tx bit */
frm              1580 net80211/ieee80211_output.c 	frm++;
frm              1581 net80211/ieee80211_output.c 	*frm++ = 0;	/* reserved */
frm              1582 net80211/ieee80211_output.c 	memcpy(frm, k->k_key, k->k_len);
frm              1583 net80211/ieee80211_output.c 	return frm + k->k_len;
frm              1590 net80211/ieee80211_output.c ieee80211_add_pmkid_kde(u_int8_t *frm, const u_int8_t *pmkid)
frm              1592 net80211/ieee80211_output.c 	*frm++ = IEEE80211_ELEMID_VENDOR;
frm              1593 net80211/ieee80211_output.c 	*frm++ = 20;
frm              1594 net80211/ieee80211_output.c 	memcpy(frm, IEEE80211_OUI, 3); frm += 3;
frm              1595 net80211/ieee80211_output.c 	*frm++ = IEEE80211_KDE_PMKID;
frm              1596 net80211/ieee80211_output.c 	memcpy(frm, pmkid, IEEE80211_PMKID_LEN);
frm              1597 net80211/ieee80211_output.c 	return frm + IEEE80211_PMKID_LEN;
frm              1631 net80211/ieee80211_output.c 	u_int8_t *frm;
frm              1650 net80211/ieee80211_output.c 	frm = (u_int8_t *)&key[1];
frm              1654 net80211/ieee80211_output.c 		frm = ieee80211_add_pmkid_kde(frm, pmkid);
frm              1657 net80211/ieee80211_output.c 	m->m_pkthdr.len = m->m_len = frm - (u_int8_t *)key;
frm              1678 net80211/ieee80211_output.c 	u_int8_t *frm;
frm              1696 net80211/ieee80211_output.c 	frm = (u_int8_t *)&key[1];
frm              1700 net80211/ieee80211_output.c 		frm = ieee80211_add_wpa1(frm, ic, ni);
frm              1705 net80211/ieee80211_output.c 		frm = ieee80211_add_rsn(frm, ic, ni);
frm              1707 net80211/ieee80211_output.c 	m->m_pkthdr.len = m->m_len = frm - (u_int8_t *)key;
frm              1728 net80211/ieee80211_output.c 	u_int8_t *frm;
frm              1750 net80211/ieee80211_output.c 	frm = (u_int8_t *)&key[1];
frm              1753 net80211/ieee80211_output.c 		frm = ieee80211_add_rsn(frm, ic, ic->ic_bss);
frm              1755 net80211/ieee80211_output.c 		frm = ieee80211_add_gtk_kde(frm, gtk);
frm              1759 net80211/ieee80211_output.c 		frm = ieee80211_add_wpa1(frm, ic, ic->ic_bss);
frm              1764 net80211/ieee80211_output.c 	m->m_pkthdr.len = m->m_len = frm - (u_int8_t *)key;
frm              1826 net80211/ieee80211_output.c 	u_int8_t *frm;
frm              1842 net80211/ieee80211_output.c 	frm = (u_int8_t *)&key[1];
frm              1846 net80211/ieee80211_output.c 		memcpy(frm, gtk->k_key, gtk->k_len);
frm              1847 net80211/ieee80211_output.c 		frm += gtk->k_len;
frm              1852 net80211/ieee80211_output.c 		frm = ieee80211_add_gtk_kde(frm, gtk);
frm              1859 net80211/ieee80211_output.c 	m->m_pkthdr.len = m->m_len = frm - (u_int8_t *)key;