25 	size_t payload_len;  in qtnf_event_handle_sta_assoc()  local
60 	payload_len = len - sizeof(*sta_assoc);  in qtnf_event_handle_sta_assoc()
63 	while (payload_len >= sizeof(*tlv)) {  in qtnf_event_handle_sta_assoc()
68 		if (tlv_full_len > payload_len) {  in qtnf_event_handle_sta_assoc()
77 			if (payload_len < sizeof(*ie_set)) {  in qtnf_event_handle_sta_assoc()
92 		payload_len -= tlv_full_len;  in qtnf_event_handle_sta_assoc()
96 	if (payload_len) {  in qtnf_event_handle_sta_assoc()
153 	size_t payload_len;  in qtnf_event_handle_bss_join()  local
236 	payload_len = len - sizeof(*join_info);  in qtnf_event_handle_bss_join()
239 	while (payload_len >= sizeof(struct qlink_tlv_hdr)) {  in qtnf_event_handle_bss_join()
244 		if (payload_len < tlv_full_len) {  in qtnf_event_handle_bss_join()
254 			if (payload_len < sizeof(*ie_set)) {  in qtnf_event_handle_bss_join()
278 		payload_len -= tlv_full_len;  in qtnf_event_handle_bss_join()
282 	if (payload_len)  in qtnf_event_handle_bss_join()
284 			vif->mac->macid, vif->vifid, payload_len);  in qtnf_event_handle_bss_join()
367 	size_t payload_len;  in qtnf_event_handle_scan_results()  local
388 	payload_len = len - sizeof(*sr);  in qtnf_event_handle_scan_results()
391 	while (payload_len >= sizeof(struct qlink_tlv_hdr)) {  in qtnf_event_handle_scan_results()
396 		if (tlv_full_len > payload_len)  in qtnf_event_handle_scan_results()
403 			if (payload_len < sizeof(*ie_set))  in qtnf_event_handle_scan_results()
427 		payload_len -= tlv_full_len;  in qtnf_event_handle_scan_results()
431 	if (payload_len)  in qtnf_event_handle_scan_results()