3743 	struct ft_rrb_frame *frame;  in wpa_ft_action_rx()  local
3796 	frame = os_malloc(sizeof(*frame) + len);  in wpa_ft_action_rx()
3797 	if (frame == NULL)  in wpa_ft_action_rx()
3799 	frame->frame_type = RSN_REMOTE_FRAME_TYPE_FT_RRB;  in wpa_ft_action_rx()
3800 	frame->packet_type = FT_PACKET_REQUEST;  in wpa_ft_action_rx()
3801 	frame->action_length = host_to_le16(len);  in wpa_ft_action_rx()
3802 	os_memcpy(frame->ap_address, sm->wpa_auth->addr, ETH_ALEN);  in wpa_ft_action_rx()
3803 	os_memcpy(frame + 1, data, len);  in wpa_ft_action_rx()
3805 	wpa_ft_rrb_send(sm->wpa_auth, target_ap, (u8 *) frame,  in wpa_ft_action_rx()
3806 			sizeof(*frame) + len);  in wpa_ft_action_rx()
3807 	os_free(frame);  in wpa_ft_action_rx()
3870 	struct ft_rrb_frame *frame;  in wpa_ft_send_rrb_auth_resp()  local
3887 	frame = os_malloc(sizeof(*frame) + rlen);  in wpa_ft_send_rrb_auth_resp()
3888 	if (frame == NULL)  in wpa_ft_send_rrb_auth_resp()
3890 	frame->frame_type = RSN_REMOTE_FRAME_TYPE_FT_RRB;  in wpa_ft_send_rrb_auth_resp()
3891 	frame->packet_type = FT_PACKET_RESPONSE;  in wpa_ft_send_rrb_auth_resp()
3892 	frame->action_length = host_to_le16(rlen);  in wpa_ft_send_rrb_auth_resp()
3893 	os_memcpy(frame->ap_address, wpa_auth->addr, ETH_ALEN);  in wpa_ft_send_rrb_auth_resp()
3894 	pos = (u8 *) (frame + 1);  in wpa_ft_send_rrb_auth_resp()
3906 	wpa_ft_rrb_send(wpa_auth, current_ap, (u8 *) frame,  in wpa_ft_send_rrb_auth_resp()
3907 			sizeof(*frame) + rlen);  in wpa_ft_send_rrb_auth_resp()
3908 	os_free(frame);  in wpa_ft_send_rrb_auth_resp()
4736 	struct ft_rrb_frame *frame;  in wpa_ft_rrb_rx()  local
4745 	if (data_len < sizeof(*frame)) {  in wpa_ft_rrb_rx()
4752 	frame = (struct ft_rrb_frame *) pos;  in wpa_ft_rrb_rx()
4753 	pos += sizeof(*frame);  in wpa_ft_rrb_rx()
4755 	alen = le_to_host16(frame->action_length);  in wpa_ft_rrb_rx()
4758 		   frame->frame_type, frame->packet_type, alen,  in wpa_ft_rrb_rx()
4759 		   MAC2STR(frame->ap_address));  in wpa_ft_rrb_rx()
4761 	if (frame->frame_type != RSN_REMOTE_FRAME_TYPE_FT_RRB) {  in wpa_ft_rrb_rx()
4764 			   "unrecognized type %d", frame->frame_type);  in wpa_ft_rrb_rx()
4768 	if (alen > data_len - sizeof(*frame)) {  in wpa_ft_rrb_rx()
4801 	if (frame->packet_type == FT_PACKET_REQUEST) {  in wpa_ft_rrb_rx()
4817 		if (wpa_ft_rrb_rx_request(wpa_auth, frame->ap_address,  in wpa_ft_rrb_rx()
4820 	} else if (frame->packet_type == FT_PACKET_RESPONSE) {  in wpa_ft_rrb_rx()
4837 			   "packet_type %d", frame->packet_type);  in wpa_ft_rrb_rx()