1222 	u8 element_len;  in mwifiex_update_bss_desc_with_ie()  local
1240 		element_len = *(current_ptr + 1);  in mwifiex_update_bss_desc_with_ie()
1241 		total_ie_len = element_len + sizeof(struct ieee_types_header);  in mwifiex_update_bss_desc_with_ie()
1251 			if (element_len > IEEE80211_MAX_SSID_LEN)  in mwifiex_update_bss_desc_with_ie()
1253 			bss_entry->ssid.ssid_len = element_len;  in mwifiex_update_bss_desc_with_ie()
1255 			       element_len);  in mwifiex_update_bss_desc_with_ie()
1262 			if (element_len > MWIFIEX_SUPPORTED_RATES)  in mwifiex_update_bss_desc_with_ie()
1265 			       element_len);  in mwifiex_update_bss_desc_with_ie()
1267 			       element_len);  in mwifiex_update_bss_desc_with_ie()
1268 			rate_size = element_len;  in mwifiex_update_bss_desc_with_ie()
1273 			if (element_len + 2 < sizeof(*fh_param_set))  in mwifiex_update_bss_desc_with_ie()
1283 			if (element_len + 2 < sizeof(*ds_param_set))  in mwifiex_update_bss_desc_with_ie()
1296 			if (element_len + 2 < sizeof(*cf_param_set))  in mwifiex_update_bss_desc_with_ie()
1306 			if (element_len + 2 < sizeof(*ibss_param_set))  in mwifiex_update_bss_desc_with_ie()
1317 			if (!element_len)  in mwifiex_update_bss_desc_with_ie()
1323 			if (!element_len)  in mwifiex_update_bss_desc_with_ie()
1346 				if ((element_len + rate_size) >  in mwifiex_update_bss_desc_with_ie()
1352 					bytes_to_copy = element_len;  in mwifiex_update_bss_desc_with_ie()
1369 			if (element_len < sizeof(vendor_ie->vend_hdr.oui.oui))  in mwifiex_update_bss_desc_with_ie()
1373 			if (element_len < sizeof(wpa_oui))  in mwifiex_update_bss_desc_with_ie()
1463 		current_ptr += element_len + 2;  in mwifiex_update_bss_desc_with_ie()
1466 		bytes_left -= (element_len + 2);  in mwifiex_update_bss_desc_with_ie()
1846 		u8 element_id, element_len;  in mwifiex_parse_single_response_buf()  local
1849 		element_len = *(current_ptr + 1);  in mwifiex_parse_single_response_buf()
1850 		if (curr_bcn_bytes < element_len +  in mwifiex_parse_single_response_buf()
1862 		current_ptr += element_len + sizeof(struct ieee_types_header);  in mwifiex_parse_single_response_buf()
1863 		curr_bcn_bytes -= element_len +  in mwifiex_parse_single_response_buf()