1062 	size_t ndpoffset = le16_to_cpu(nth16->wNdpIndex);  in cdc_ncm_ndp()  local
1081 	while (ndpoffset) {  in cdc_ncm_ndp()
1082 		ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb->data + ndpoffset);  in cdc_ncm_ndp()
1085 		ndpoffset = le16_to_cpu(ndp16->wNextNdpIndex);  in cdc_ncm_ndp()
1463 int cdc_ncm_rx_verify_ndp16(struct sk_buff *skb_in, int ndpoffset)  in cdc_ncm_rx_verify_ndp16()  argument
1469 	if ((ndpoffset + sizeof(struct usb_cdc_ncm_ndp16)) > skb_in->len) {  in cdc_ncm_rx_verify_ndp16()
1471 			  ndpoffset);  in cdc_ncm_rx_verify_ndp16()
1474 	ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);  in cdc_ncm_rx_verify_ndp16()
1508 	int ndpoffset;  in cdc_ncm_rx_fixup()  local
1512 	ndpoffset = cdc_ncm_rx_verify_nth16(ctx, skb_in);  in cdc_ncm_rx_fixup()
1513 	if (ndpoffset < 0)  in cdc_ncm_rx_fixup()
1517 	nframes = cdc_ncm_rx_verify_ndp16(skb_in, ndpoffset);  in cdc_ncm_rx_fixup()
1521 	ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);  in cdc_ncm_rx_fixup()
1567 	ndpoffset = le16_to_cpu(ndp16->wNextNdpIndex);  in cdc_ncm_rx_fixup()
1568 	if (ndpoffset && loopcount--)  in cdc_ncm_rx_fixup()