sys/netinet/libalias/alias_sctp.c

1210

if (chunk_length < sizeof(struct sctp_asconf_ack_chunk)) /* malformed chunk*/

sys/netinet/libalias/alias_sctp.c

1214

+ sizeof(struct sctp_asconf_ack_chunk));

sys/netinet/libalias/alias_sctp.c

1217

sm->chunk_length = chunk_length - sizeof(struct sctp_asconf_ack_chunk);

sys/netinet/sctp_asconf.c

1660

struct sctp_asconf_ack_chunk *cp, struct sctp_tcb *stcb,

sys/netinet/sctp_asconf.c

1676

if (ntohs(cp->ch.chunk_length) < sizeof(struct sctp_asconf_ack_chunk)) {

sys/netinet/sctp_asconf.c

1723

sizeof(struct sctp_asconf_ack_chunk);

sys/netinet/sctp_asconf.c

1724

offset += sizeof(struct sctp_asconf_ack_chunk);

sys/netinet/sctp_asconf.c

611

struct sctp_asconf_ack_chunk *ack_cp;

sys/netinet/sctp_asconf.c

668

m_ack = sctp_get_mbuf_for_msg(sizeof(struct sctp_asconf_ack_chunk), 0,

sys/netinet/sctp_asconf.c

678

ack_cp = mtod(m_ack, struct sctp_asconf_ack_chunk *);

sys/netinet/sctp_asconf.c

683

SCTP_BUF_LEN(m_ack) = sizeof(struct sctp_asconf_ack_chunk);

sys/netinet/sctp_asconf.c

684

ack_cp->ch.chunk_length = sizeof(struct sctp_asconf_ack_chunk);

sys/netinet/sctp_asconf.h

52

sctp_handle_asconf_ack(struct mbuf *, int, struct sctp_asconf_ack_chunk *,

sys/netinet/sctp_input.c

5048

if (chk_length < sizeof(struct sctp_asconf_ack_chunk)) {

sys/netinet/sctp_input.c

5062

(struct sctp_asconf_ack_chunk *)ch, stcb, *netp, &abort_no_unlock);