drivers/net/hyperv/netvsc_drv.c

673

if (resp->msg_len - RNDIS_HEADER_SIZE < sizeof(struct rndis_indicate_status)) {

drivers/net/hyperv/netvsc_drv.c

680

memcpy(indicate, data + RNDIS_HEADER_SIZE, sizeof(*indicate));

drivers/net/hyperv/netvsc_drv.c

694

data_buflen - RNDIS_HEADER_SIZE < indicate->status_buf_offset ||

drivers/net/hyperv/netvsc_drv.c

695

data_buflen - RNDIS_HEADER_SIZE - indicate->status_buf_offset

drivers/net/hyperv/netvsc_drv.c

701

speed = *(u32 *)(data + RNDIS_HEADER_SIZE + indicate->status_buf_offset) / 10000;

drivers/net/hyperv/rndis_filter.c

136

if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >= sizeof(struct rndis_packet)) {

drivers/net/hyperv/rndis_filter.c

137

const struct rndis_packet *pkt = data + RNDIS_HEADER_SIZE;

drivers/net/hyperv/rndis_filter.c

154

if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >=

drivers/net/hyperv/rndis_filter.c

157

data + RNDIS_HEADER_SIZE;

drivers/net/hyperv/rndis_filter.c

175

if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >=

drivers/net/hyperv/rndis_filter.c

178

data + RNDIS_HEADER_SIZE;

drivers/net/hyperv/rndis_filter.c

191

if (rndis_msg->msg_len - RNDIS_HEADER_SIZE + sizeof(struct rndis_set_complete)) {

drivers/net/hyperv/rndis_filter.c

193

data + RNDIS_HEADER_SIZE;

drivers/net/hyperv/rndis_filter.c

203

if (rndis_msg->msg_len - RNDIS_HEADER_SIZE >=

drivers/net/hyperv/rndis_filter.c

206

data + RNDIS_HEADER_SIZE;

drivers/net/hyperv/rndis_filter.c

258

if (msg_len - RNDIS_HEADER_SIZE < sizeof(struct rndis_query_complete))

drivers/net/hyperv/rndis_filter.c

266

msg_len - RNDIS_HEADER_SIZE >= query_complete->info_buf_offset &&

drivers/net/hyperv/rndis_filter.c

267

msg_len - RNDIS_HEADER_SIZE - query_complete->info_buf_offset

drivers/net/hyperv/rndis_filter.c

299

if (resp->msg_len - RNDIS_HEADER_SIZE < sizeof(u32)) {

drivers/net/hyperv/rndis_filter.c

306

*req_id = *(u32 *)(data + RNDIS_HEADER_SIZE);

drivers/net/hyperv/rndis_filter.c

324

memcpy(&request->response_msg, resp, RNDIS_HEADER_SIZE + sizeof(*req_id));

drivers/net/hyperv/rndis_filter.c

325

unsafe_memcpy((void *)&request->response_msg + RNDIS_HEADER_SIZE + sizeof(*req_id),

drivers/net/hyperv/rndis_filter.c

326

data + RNDIS_HEADER_SIZE + sizeof(*req_id),

drivers/net/hyperv/rndis_filter.c

327

resp->msg_len - RNDIS_HEADER_SIZE - sizeof(*req_id),

drivers/net/hyperv/rndis_filter.c

397

memcpy(ppi, data + RNDIS_HEADER_SIZE + rpkt->per_pkt_info_offset, rpkt->per_pkt_info_len);

drivers/net/hyperv/rndis_filter.c

486

if (data_buflen < RNDIS_HEADER_SIZE + sizeof(struct rndis_packet)) {

drivers/net/hyperv/rndis_filter.c

493

memcpy(rndis_pkt, data + RNDIS_HEADER_SIZE, sizeof(*rndis_pkt));

drivers/net/hyperv/rndis_filter.c

496

if (rndis_pkt->data_offset >= data_buflen - RNDIS_HEADER_SIZE) {

drivers/net/hyperv/rndis_filter.c

503

data_offset = RNDIS_HEADER_SIZE + rndis_pkt->data_offset;

drivers/net/hyperv/rndis_filter.c

505

rpkt_len = data_buflen - RNDIS_HEADER_SIZE;

drivers/net/hyperv/rndis_filter.c

581

if (buflen < RNDIS_HEADER_SIZE) {

drivers/net/hyperv/rndis_filter.c

587

memcpy(rndis_msg, data, RNDIS_HEADER_SIZE);

drivers/net/hyperv/rndis_filter.c

590

if (rndis_msg->msg_len < RNDIS_HEADER_SIZE ||

drivers/net/hyperv/rndis_filter.c

705

if (msg_len - RNDIS_HEADER_SIZE < sizeof(struct rndis_query_complete)) {

drivers/net/hyperv/rndis_filter.c

712

msg_len - RNDIS_HEADER_SIZE < query_complete->info_buf_offset ||

drivers/net/hyperv/rndis_filter.c

713

msg_len - RNDIS_HEADER_SIZE - query_complete->info_buf_offset