Lines Matching refs:slen
278 u16 slen;
308 slen = *pos++;
309 next = pos + slen;
310 if (next > end || slen < 2) {
326 slen = WPA_GET_LE16(pos);
328 if (pos + slen > end)
330 end = pos + slen;
341 slen = WPA_GET_LE16(pos);
343 if (pos + slen > end || slen < 3 + 1) {
430 u16 slen;
478 slen = *pos++;
479 next = pos + slen;
480 if (next > end || slen < 2) {
498 slen = WPA_GET_LE16(pos);
500 p2p_dbg(p2p, "Query Response Length: %d", slen);
501 if (pos + slen > end) {
505 end = pos + slen;
527 slen = WPA_GET_LE16(pos);
529 if (pos + slen > end || slen < 3 + 1) {
652 u16 slen;
708 slen = *pos++;
709 next = pos + slen;
710 if (next > end || slen < 2) {
728 slen = WPA_GET_LE16(pos);
730 p2p_dbg(p2p, "Query Response Length: %d", slen);
731 if (pos + slen > end) {
735 if (slen == 0) {
739 end = pos + slen;
758 slen = WPA_GET_LE16(pos);
760 p2p_dbg(p2p, "ANQP Query Response length: %u", slen);
761 if (slen < 3 + 1) {
